last executing test programs: 2m24.968771966s ago: executing program 0 (id=73): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x1bc, 0x19, 0x1, 0x70bd25, 0x0, {{@in6=@private2, @in6=@mcast1, 0x0, 0x3, 0x0, 0x0, 0xa, 0x0, 0x20, 0x8}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x53, 0x1d}, {0x0, 0xd42, 0x0, 0x2da}, 0x2, 0x6e6bc0, 0x0, 0x0, 0x0, 0x3}, [@tmpl={0x104, 0x5, [{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0xc}, 0x0, 0x0, 0x0, 0xff, 0x3}, {{@in=@broadcast, 0x0, 0x32}, 0x0, @in6=@empty, 0x0, 0x2}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x37}, 0x0, 0x3c}, 0x2, @in6=@mcast2, 0x0, 0x1, 0x3}, {{@in6=@rand_addr=' \x01\x00', 0x0, 0x2b}, 0xa, @in6=@loopback, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xffffffee}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc0200000000000000330000000000000000000000000000000000000000000000000003000000000a00002008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000000000000000000000000000000000001d00000000000000000000000000000000000000000000000000000000000000dd020000000000000000000000000000000000000000000084"], 0x23c}}, 0x0) 2m24.904093657s ago: executing program 0 (id=75): r0 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x300001a, &(0x7f0000000080)=ANY=[], 0xfc, 0x2c7, &(0x7f0000000740)="$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") (async) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000008f6ff0000000000080000007111a9000000000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0xfc0, 0x28280) ioctl$EVIOCGREP(r2, 0x80084503, &(0x7f0000000280)=""/215) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r0, 0x0, 0x25, 0x3, @val=@perf_event={0x1}}, 0x18) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) sendfile(r3, r1, 0x0, 0x8) 2m24.600480004s ago: executing program 0 (id=78): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0a00b3f00180c2000000aaaaaaaaaaaa86dd694fd2cd017111fffe80000000000000000000000000600fff02000000000000000000000000000186"], 0x1ab) 2m24.570931254s ago: executing program 0 (id=79): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000140)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x23a34d5, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$bind(&(0x7f0000000040)='./file0/file0/file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) umount2(&(0x7f0000001880)='./file0/../file0\x00', 0x9) 2m24.537941865s ago: executing program 0 (id=80): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x10, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000003007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2m24.432544077s ago: executing program 0 (id=81): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000c00)=ANY=[@ANYBLOB="ec00000021000100000000000000000000000000000000000000000000000000fe80000000000000000000000000003e000a0008000000000a0000002e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c0011000a0101010000000000000000000000007f0000010000000000000000000000007f000001000000000000000000000000640101020000000000000000000000003c040000000000000a000a000a0101010000000000000000000000007f000001000000000000000000000000ffffff"], 0xec}}, 0x4020800) 2m24.351224179s ago: executing program 32 (id=81): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000c00)=ANY=[@ANYBLOB="ec00000021000100000000000000000000000000000000000000000000000000fe80000000000000000000000000003e000a0008000000000a0000002e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c0011000a0101010000000000000000000000007f0000010000000000000000000000007f000001000000000000000000000000640101020000000000000000000000003c040000000000000a000a000a0101010000000000000000000000007f000001000000000000000000000000ffffff"], 0xec}}, 0x4020800) 3.174930889s ago: executing program 2 (id=1498): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xa, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001840000004000000000000000000000095000000000000009500000000000000950000000000000018400000feffffff47ffffffff"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x9}, 0x94) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {0x9, 0x1}, 0x800005, 0x80, &(0x7f0000000040)={0x20, 0x15, 0x84b9, 0x7f, 0x4}, 0x8, 0x7, 0x4, 0x0, 0x5, 0x4, 0x0}) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c69"], 0x65) 3.124383221s ago: executing program 2 (id=1499): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x5, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x4, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x8, 0x400, 0x2, 0xffff0000, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x9, 0x1, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x10000, 0x1, 0x100, 0x2, 0x6, 0x7ffd, 0x5, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x1, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x7, 0xfffffff7, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x26e, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x4000051}, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x4, 0x5, 0x9, 0x8], 0x25000, 0x304}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000140)='S\x00', 0x2}], 0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 3.045848792s ago: executing program 5 (id=1500): bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x5, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x4, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x8, 0x400, 0x2, 0xffff0000, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x9, 0x1, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x10000, 0x1, 0x100, 0x2, 0x6, 0x7ffd, 0x5, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x1, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x7, 0xfffffff7, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x26e, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x4000051}, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x4, 0x5, 0x9, 0x8], 0x25000, 0x304}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000140)='S\x00', 0x2}], 0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2.632609832s ago: executing program 4 (id=1502): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(0xffffffffffffffff, 0x2, &(0x7f0000000000)=0x8) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r6 = socket(0xa, 0x3, 0x87) sendto(r6, &(0x7f00000003c0)="e1118ce4", 0x4, 0x800, &(0x7f0000000600)=@l2tp6={0xa, 0x0, 0x7, @local, 0x5}, 0x80) 2.631649282s ago: executing program 5 (id=1503): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1200000001000000040000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000004b29bee574083e5ed200"/37], 0x50) syz_open_dev$vcsa(&(0x7f0000000380), 0x7b95b611, 0x802) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_io_uring_setup(0x3af6, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000167000/0x1000)=nil, 0x1000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000) socket$inet(0x2, 0xa, 0xd) r5 = socket(0x10, 0x803, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="180000005600230d000000000000000007"], 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x4040000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={0x1, 0x58, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000500)={'syztnl0\x00', &(0x7f0000000480)={'syztnl2\x00', r8, 0x29, 0xc, 0x5, 0x3, 0x5, @empty, @mcast1, 0x20, 0x80, 0x1, 0x9}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r7}, &(0x7f0000000580)=0x2, &(0x7f00000000c0)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, &(0x7f0000000040)}, 0x20) 2.085741304s ago: executing program 3 (id=1507): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket(0xa, 0x3, 0x87) sendto(r0, 0x0, 0x0, 0x800, &(0x7f0000000600)=@l2tp6={0xa, 0x0, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5}, 0x80) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000000)="7e3d9df055a145666e562abd0f8dd26d", 0x10) listen(r1, 0xfffffff7) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x4000000000005, 0x8, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = epoll_create1(0x0) r4 = fcntl$dupfd(r2, 0x0, r2) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000040)={0x2012}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000001c0)={0x10000014}) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r4, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x4, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x6c, &(0x7f0000000200)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0xfffffffffffffe34, 0x1c, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000000800450e00300024000005069078acbbac1414bb4e224e310000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="70c26071907800e72206f354613d0000"], 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) (async) socket(0xa, 0x3, 0x87) (async) sendto(r0, 0x0, 0x0, 0x800, &(0x7f0000000600)=@l2tp6={0xa, 0x0, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5}, 0x80) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) (async) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000000)="7e3d9df055a145666e562abd0f8dd26d", 0x10) (async) listen(r1, 0xfffffff7) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x4000000000005, 0x8, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) epoll_create1(0x0) (async) fcntl$dupfd(r2, 0x0, r2) (async) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000040)={0x2012}) (async) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000001c0)={0x10000014}) (async) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r4) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r4, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x4, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x6c, &(0x7f0000000200)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0xfffffffffffffe34, 0x1c, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) (async) syz_emit_ethernet(0x3e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000000800450e00300024000005069078acbbac1414bb4e224e310000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="70c26071907800e72206f354613d0000"], 0x0) (async) 2.061687534s ago: executing program 3 (id=1509): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xa, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001840000004000000000000000000000095000000000000009500000000000000950000000000000018400000feffffff47ffffffff"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x9}, 0x94) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {0x9, 0x1}, 0x800005, 0x80, &(0x7f0000000040)={0x20, 0x15, 0x84b9, 0x7f, 0x4}, 0x8, 0x7, 0x4, 0x0, 0x5, 0x4, 0x0}) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e75"], 0x65) 2.003097775s ago: executing program 2 (id=1513): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000700)=ANY=[@ANYBLOB="fc000000190001002bbd70000000000000000000000000000000000000000001fe8000000000000000000000000000bb00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000035840a28976fb2c25c5de262d5bc59020000000080ff00000000000000ffffffffffffffffd2435e169725e042f2f4ad6625782f0000000000200000fcffffffffffffff0000000000000000000a00000000"], 0xfc}}, 0x0) 1.990942896s ago: executing program 3 (id=1514): bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x5, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x4, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x8, 0x400, 0x2, 0xffff0000, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x9, 0x1, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x10000, 0x1, 0x100, 0x2, 0x6, 0x7ffd, 0x5, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x1, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x7, 0xfffffff7, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x26e, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x4000051}, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x4, 0x5, 0x9, 0x8], 0x25000, 0x304}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000140)='S\x00', 0x2}], 0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1.924418568s ago: executing program 2 (id=1515): sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r2, 0x0, 0x1, 0x8ffff) read$FUSE(r2, &(0x7f0000000180)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01e723000000ffdbdf251500000024001d81", @ANYRES16], 0x38}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000002200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000021c0)={&(0x7f00000000c0)={0x38, r5, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x38}}, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x2010, &(0x7f0000002280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}, {@msize={'msize', 0x3d, 0xfff}}, {@access_client}, {@cache_mmap}, {@version_L}, {@aname={'aname', 0x3d, 'euid'}}], [{@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@euid_eq={'euid', 0x3d, r3}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'rfdno'}}, {@audit}, {@subj_role={'subj_role', 0x3d, 'wfdno'}}, {@seclabel}]}}) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x200800, &(0x7f0000000300)=ANY=[@ANYBLOB='iocharset=cp857,time_offset=0x0000000000000003,errors=remount-ro,fmask=00000000000000000000006,iocharset=cp862,allow_utime=00000000000000000077777,namecase=1,dmask=00000000000000000000201,utf8,dmask=000000000000\x00'/224, @ANYRES64, @ANYRES16, @ANYRES16], 0x9, 0x155d, &(0x7f0000002640)="$eJzs3AucjdX6OPDnWWu9Y0jsJrmvtZ6XnVwWSZJLklySpBKS3BKSJEcSEkNI0pCE5J7EkFsuE5PG/X6/JDRJmiQJyS1Z/89gjs6p/nXO6Rznd+b5fj77Yz2z9lrv8+5nv/td7ztmf9NlSI1GNavWJyL4l+DFf+IBIBYABgBATgAIAKBsXNm49P6sEuP/tY2wP1eDxCudAbuSuP6ZG9c/c+P6Z25c/8yN65+5cf0zN65/5sb1Zywz2zwt3zX8yLwPvv+f6aSO/muTz///Q9JKjvlibcnrugLEXDgE/4CYf3dO7L8aH///s4Lf7Dkj/9rk+mduXP/M6g8uENj/ND7+M4Msv9nD9c/cuP6MZWZX+v7zn/zIONX94TEQ+S97DY5kvbgH/6HtXcn3HmOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4yxzOO0v0wBQEb7SufFGGOMMcYYY4yxP4/PcqUzYIwxxhhjjDHG2L8fggAJCgKIgSwQC1khGwgAuBpyQE6IwDUQB9dCLrgOckMeyAv5ID8UgIKgwYAFghAKQWGIwvVQBG6AolAMikMJcFASSsGNUBpugjJwM5SFW6Ac3ArloQJUhEpwG1SG26EK3AFV4U6oBtWhBtSEu6AW3A214R6oA/dCXbgP7ocHoB48CPWhATSEh6ARPAyN4RFoAk2hGTSHFv/U+OehB7wAPaEXxENv6AMvQl/oB/3hJRgAL8NAeAUGwauQAINhCLwGQ+F1GAZvwHAYASPhTRgFb8FoGANjYRyMhwkwEd6GSfAOTIZ3YQpMhUSYBtPhPZgBM2EWzIY58D7MhXkwHxZAEnwAC2ERJMOHsBg+ghRYAkthGSyHFbASVsFqWANrYR2shw2wETbBZtgCW2EbbIcdsBM+hl3wCeyGPbAXPoVU+OwfHH/q78Z3RUBAgQIVKozBGIzFWMyG2TA7ZsccmAMjGME4jMNcmAtzY27Mi3kxP+bHglgQDRokJCyEhTCKUSyCRbAoFsXiWBwdOiyFpbA03oRlsAyWxbJYDstheayAFbASVsLKWBmrYBWsilWxGlbDGlgD78K7sDfWxtpYB+tgXaybcXsK62N9bIgNsRE2wsbYGJtgE2yGzbAFtsCW2BJbYStsg22wLbbFdtgO22N77IAdsCN2xE7YCTtjZ+yCXbArdsNuac9nAXwBX8BeWE30xj7YB/tiQpb++BK+hC/jQHwFX8FXMQEH4xB8DV/D13EYnsThOAJH4kisLN7C0TgGSYzD8TgeJ+JEnISTMD3Rd3EqJuI0nI7TcQbOxJk4G+fg+/g+zsN5uACTMAkX4iJMxmRcjKcwBZfgUlyGy3EFLsdVuBpX4Vpch2txA27ATbgJt+AW3IbbcAfuwI9RAeAnuAf3YAKmYiruw324H/fjATyAaZiGB/EgHsJDeBgP4xE8gkfxGB7HY3gCT+BJPIWn8TSexbN4Dp/N/1XDj4utSQCRTgklYkSMiBWxIpvIJrKL7CKHyCEiIiLiRJzIJXKJ3CK3yCvyivwivygoCgojjCARxgCAiIqoKCKKiKKiqCguigsnnCglSonSorQoI8qIsuIWUU7cKsqLCqK1qyQqicqijasi7hBVRVVRTVQXNURNUVPUErVEbVFb1BF1RF1RV9wvHhD1RG/sjw1EemUaicHYWAzBJqKpkJc+wVqKYdhKtBZtxONiBA7HdqKlay+eEh3EaOwo/iLG4DOisxiHXcRzoqvoJrqL50UP0cr1FL3EZOwt+oip2Ff0E/3FS2IGVhezcU7WGuJVkSAGiyHiNbEAXxfDxBtiuBghRoo3xSjxlhgtxoixYpwYLyaIieJtMUm8I4R4V0wRU0WimCami/fEDDFTzBKzxRzxvpgr5on5YoFIEh+IhWKRSBYfisXiI5EiloilYplYLlaIlWKVWC3WiLVinVgvNoiNYpPYLLaIrSIWtosdYqf4WOwSn4jdYo/YKz4VqeIzsU98LvaLL8QB8aVIE1+Jg+JrcUh8Iw6Lb8UR8Z04Ko6J4+J7cUL8IE6KU+K0OCPOih/FOfGTOC+8AIlSSCmVDGSMzCJjZVaZTV4ls8vg0qt7jYyT18pc8jqZW+aReWU+mV8WkAWllkZaSTKUhWRhGZXXyyLyBllUFpPFZQnpZElZSt4oS8ubZBl5sywrb5Hl5K2yvKwgK8pK8jZZWd4uIXJxG9VkdVlD1pR3yXi4W9aW98g68l5ZV94n75cPyHryQVlfNpAN5UOykXxYNpaPyCayqWwmm8sW8lHZUj4mW8nWso18XLaVT8h28knZXj4lO0h/6S3yjOwsn5Vd5HOyq+wmu8uf5HnpZU/ZS0JvkH3ki7Kv7Cf7xwKAfFkOlK/IQfJVmSAHyyHyNTlUvi6HyTfkcDlCjpRvylHyLTlajpFj5Tg5Xk6QE+XbcpJ8R06W78opcqpMlNNkfzngwkyzpPzd8W//yvhBF7a+SW6WW+RWuU1ulzvkTvmx3CV3yd1yt9wr98pUmSr3yX1yv9wvD8gDMk2myYPyoDwkD8nD8rA8Io/Io/KYPCO/lyfkD/KkPCVPyTPyrDwrz116DUChEkoqpQIVo7KoWJVVZVNXqezqapVD5VQRdY2KU9eqXOo6lVvlUXlVPpVfFVAFlVZGWUUqVIVUYRVV1+OlN4wqrkoop0qqUurGC+MzfsXwO+NVEXWDKqqK/Xy8x0v5xf9Gfi1UC9VStVStVCvVRrVRbVVb1U61U+1Ve9VBdVAdVUfVSXVSnVVn1UV1UV1VV9VddVc9VA/VU/VU8Spe9VEvqr6qn+qvXlID1MtqoBqoBqlBKkElqCFqiBqqhqphapgaroarkWqkGqVGqdFqtBqrxqrxaryaqCaqSWqSmqwmqylqikpUiWq6mq5mqBlqlpql5qg5aq6aq+ar+SpJJamFaqFKVslqsVqsUtQStUQtU8vUCrVCrVKr1Bq1Rq1T69QGtUGlqM1qs9qqtqrtarvaqXaqXWqX2i12q71qr0pVqWqf2qf2q/3qgDqg0lSaOqgOqkPqkDqsDqsj6og6qo6q4+q4OqFOqJPqpDqtTquz6qw6p86p8+p8+rIvEIEIVKCCmCAmiA1ig2xBtiB7kD3IEeQIIkEkiAviglzBdUHuIE+QN8gX5A8KBAUDHZjABuJSbaPB9UGR4IagaFAsKB6UCFxQMigV3BiUDm4KygQ3B2WDW4Jywa1B+aBCUDGoFNwWVA5uD6oEdwRVgzuDakH1oEZQM7grqBXcHdSOhaBOcG9QN7gvuD94IKgXPBjUDxoEDYOHgkbBw0Hj4JGgSdA0aBY0D1r8M/MH9/zG/N6fzPOY66l76XjdW/fRL+q+up/ur1/SA/TLeqB+RQ/Sr+oEPVgP0a/pofp1PUy/oYfrEXqkflOP0m/p0XqMHqvH6fF6gp6o39aT9Dt6sn5XT9FTdaKepqfr9/QMPVPP0rP1HP2+nqvn6fl6gU7SH+iFepFO1h/qxfojnaKX6KV6mV6uV+iVepVerdfotXqdXq836I16k96st+itepvernfonfpjvUt/onfrPXqv/lSn6s/0Pv253q+/0Af0lzpNf6UP6q/1If2NPqy/1Uf0d/qoPqaP6+/1Cf2DPqlP6dP6jD6rf9Tn9E/6vPbpi/v007tRRpkYE2NiTazJZrKZMpDd5DA5TMRETJyJM7lMLpPb5DZ5TV6T3+Q3BU1Bk44MmUKmkImaqCliipiipqgpboobZ5wpZUqZ0qa0KWPKmLKmrClnypnyprypaCqa28xt5nZzu7nD3GHuNHea6qa6qWlqmlqmlqltaps6po6pa+qa+839pp6pZ+qb+qahaWgamUamsWlsmpgmpplpZlqYFqalaWlamVamjWlj2pq2pp1pZ9qb9qaD6WA6mo6mk+lkOpvOpovpYrqarqa76W56mB6mp+lp4k286WP6mL6mr+lv+psBZoAZaAaaQWaQSTAJZogZYoaaoWaYGWaGmxFmZPqHnHnLjDZjzFgzzow3481EM9FMMpPMZDPZTDFTTKJJNNPNdDPDzDCzzCwzx8wxc81cM9/MN0kmySw0C02ySTaLzWKTYlLMUrPULDfLzUqz0qw2q81as9ash/Vmo9loNpvNZqvZarab7Wan2Wl2mV1mt9lt9pq9JtWkmn1mn9lv9psD5oBJM2nmoDloDplD5rA5bI6YI+aoOWqOm+PmhDlhTpqT5rQ5bc6aPJfOl95kfJhnt1fbHDanjbVZbTZ7lb0YZ6y8CtiCVtvcNo/Na/PZ/PZibKy1RW0xW9yWsM6WtKXsjb+Iy9sKtqKtZG+zle3ttsov4lr2blvb3mPr2HttTXvX38R17X02fXVSDxHANrUNbXPbyD5sG9tHbBPb1DazzW1b+4RtZ5+07e1TtoN9+hfxQrvIrrZr7Fq7zu62e+xpe8Yest/Ys/ZH29P2sgPsy3agfcUOsq/aBDv4F/FI+6YdZd+yo+0YO9aO+0U8xU61iXaanW7fszPszF/ESfYDO8cm27l2np1vF1yI03NKth/axfYjm2IDWGqX2eV2hV1pV2Xk6nPaDXaj3WR32U/sVrvNbrc77M6Mctg9dq/91Kbaz+xB+7Xdb7+wB+xhm2a/uhCn799h+609Yr+zR+0xe9x+b0/YH1TG6PR9/97+ZM9bb4GQgCQpCiiGslAsZaVsdBVlp6spB+WkCF1DcXQt5aLrKDflobyUj/JTASpImgxZIgqpEBWmKF1PGekVpxLkqCSVohupNN1EZehmKku3UDm6lcpTBapIleg2qky3UxW6g6rSnVSNqlMNqkl3US26m2rTPVSH7qW6dB/dTw9QPXqQ6lMDakgPUSN6mBrTI9SEmlIzak4t6FFqSY9RK2pNbehxaktPUDt6ktrTU9SBnqaO9BfqRM9QZ3qWutBz1JW6UXd6nnrQC9STelE89aY+9CL1pX7Un16iAfQyDaRXaBC9Sgk0mIbQazSUXqdh9AYNpxE0kt6kUfQWjaYxNJbG0XiaQBPpbZpE79Bkepem0FRKpGk0nd6jGTSTZtFsmkPv01yaR/NpASXRB7SQFlEyfUiL6SNKoSW0lJbRclpBK2kVraY1tJbW0XraQBtpE22mLbSVttF22kE76WPaRZ/QbtpDe+lTSqXPCOlz2k9f0AH6ktLoKzpIX9Mh+oYO07e+F31HR+kYHafv6QT9QCfpFJ2mM3SWfqRz9BOdJ08QYihCGaowCGPCLGFsmDXMFl4VZg+vDnOEOcNIeE0YF14b5gqvC3OHecK8Yb4wf1ggLBjq0IQ2pDAMC4WFw2h4fVgkvCEsGhYLi4clQheWDEuFN4alw5vCMuHNYdnwlrBceGtYPqwQPnxvpfC2sHJ4e1glvCOsGt4ZVgurhzXCmuFdYa3w7rB2eE9YJ7w3LBPeF94fPhDWCx8M64cNwobhQ2Gj8OGwcfhI2CRsGjYLm4ctwkfDluFjYauwddgmfDxsGz4RtgufDNuHT4Udwqcv9N+36Lf748PeYZ/wxfDF0Pt75PzogmhS9IPowuiiaHL0w+ji6EfRlOiS6NLosujy6Iroyuiq6Oromuja6Lro+uiG6Mbopqj3NbOAQyecdMoFLsZlcbEuq8vmrnLZ3dUuh8vpIu4aF+eudbncdS63y+PyunwuvyvgCjrtjLOOXOgKucIu6q53RdwNrqgr5oq7Es65kq6Ua+5auBaupXvMtXKtXRv3uHvcPeGecE+6J91TroN72nV0f3Gd3DOus3vWPeuec11dN9fdPe96uAk5Lh6T8a6P81n6ur6uv+vvBrgBbqAb6Aa5QS7BJbghbogb6oa6YW6YG+6Gu5FupBvlRrnRbrQb68a68W68m+gmuklukpvsJrspbopLdIluupvuZrgZrvLMi1uZ6+a6+W6+S3JJbqFLXzMmu8VusUtxKW6pW+qWu+VupVvpVrvVbq1b69a79W6j2+g2u81uq9vqtrvtbqfb6Xa5XW63z3lxUpfq9rl9br/b7w64L12a+8oddF+7Q+4bd9h9646479xRd8wdd9+7E+4Hd9KdcqfdGXfW/ejOuZ/ceefd+MiEyMTI25FJkXcikyPvRqZEpkYSI9Mi0yPvRWZEZkZmRWZH5kTej8yNzIvMjyyIJEU+iCyMLIokRz6MLI58FEmJLIksjSyL/BhZEfG+wNbQF/KFfdRf74v4G3xRX8wX9yW88yV9KX+jL+1v8mX8zb6sv8WX87f68r6Cr+gf8U18U9/MN/ct/KO+pX/Mt/KtfRv/uG/rn/Dt/JO+vX/Kd/BP+47+L77Thb/SetZ38c/5rr6b7+6f9z38C76n7+XjfW/fx7/o+/p+vr9/yQ/wL/uB/hU/yL/qE/xgP8S/5of61/0w/4Yf7kf4kTFv+lEZl8gwzo/3E/xE/7af5N/xk/27foqf6hP9ND/dv+dn+Jl+lp/t5/j3/Vw/z8/3C3yS/8Av9It8sv/QL/Yf+RS/JOOmsl/pV/nVfo1f69f59X6D3+g3+c1+i9/qt/ntfoff6T/2u/wnfrff4/f6T32q/8zv85/7/f4Lf8B/6dP8V/6g/9of8t/4w/5bf8R/54/6Y/64/96f8D/4k/6UP+3P+LP+R3/O/+TP89+sMcYYY4z9IRMuN8Xf9ly8A9T7V8aInz25DwBcvS1f2s/701eU63NfbPeb3evCwuypXl0aZDyqVYuPj7/03BQJQeF5ABm/CUoXA5fjJdAGnoD20BpK/2r+/US3s/Q780dvAcj2szGxcDm+PP/nABj/K/M/+vjIheXC03H/n/nnARQtfHlMVrgcL4E2F+6vtIYyv5F/npa/k3/WL8YDtPrZmOxwOb6cfyl4DJ6G9n/zTMYYY4wxxhhj7KJ+omKnjOvPjP/x+WvX5/nV5TFZ4HL8e9fnjDHGGGOMMcYYu/Ke6db9yUfbt2/d6R9vVPn956jLP8n+j26iMfyzif2xxuefNqB/z8z/RxveA/y1cADwL04IkN6Q/8m92PIf2VbCpUPn77uWn/EB/HeU8s9oXOEPJsYYY4wxxtif7vKi/29/rq5UQowxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGWCb0r37HG/yBb+m70vvIGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMXWn/LwAA//9nj/bJ") r6 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x70) creat(&(0x7f0000000580)='./bus\x00', 0x9e) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1084, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r8, &(0x7f0000000a00)="c7", 0x1) sendfile(r8, r7, 0x0, 0x3ffff) getdents(r6, &(0x7f0000001fc0)=""/184, 0xb8) syz_usb_connect$cdc_ecm(0x5, 0x5a, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000020000202505a1a4400000000101090248000101006015090400001a02020000052406000005240004000d240f01800000000100fcff500424020209058103ff03000306090582020000020d03090503"], 0x0) 1.767858871s ago: executing program 3 (id=1516): capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="130000001000000008"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x8, 0xf, &(0x7f0000000a80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000008000055090100000000009500000000000000bf91000000000000b7020000000000008500000005000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) 1.762714551s ago: executing program 4 (id=1517): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000100ffff0000000000000000850000000f000000850000005d00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.746198592s ago: executing program 3 (id=1518): keyctl$clear(0x3, 0xfffffffffffffffd) keyctl$set_reqkey_keyring(0xe, 0x4) request_key(&(0x7f0000000340)='asymmetric\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000380)=')\x80', 0x0) syz_usb_connect$uac2(0x0, 0x7b, &(0x7f0000000140)=ANY=[@ANYBLOB="12010102000000108205a300400001020301090269000301090008080b00020100207f09000000800000000009240100080709000609040100000102200009040101"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) 1.745010712s ago: executing program 4 (id=1519): bpf$PROG_LOAD(0x5, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x5, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x4, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x8, 0x400, 0x2, 0xffff0000, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x9, 0x1, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x10000, 0x1, 0x100, 0x2, 0x6, 0x7ffd, 0x5, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x1, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x7, 0xfffffff7, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x26e, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20006854}, 0x800) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x4000051}, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x4, 0x5, 0x9, 0x8], 0x25000, 0x304}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000140)='S', 0x1}], 0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1.721977032s ago: executing program 4 (id=1520): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() sched_setscheduler(0xffffffffffffffff, 0x2, &(0x7f0000000000)=0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) socket(0xa, 0x3, 0x87) read$eventfd(0xffffffffffffffff, &(0x7f0000000100), 0x8) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0xea5bc50b6199d77e) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00898fa629d0d7c08e8145e19228a550d44aa0ca182c2b72c1e6e7c70ccc7fed45a250472b4fcee025f1ecbbbd15e993af320fb24412139623cd6e828317413152fa483de4d2e1e44495db085e255243cc4448fdbad1947145b8b5303070fc1a56253bf5d5a068f699307a0b40c44652f65acf747b925dc88e54db7f9f77b3cda87a6a6219f7adb2b24b5a65daccb6c976bf3a578f48ec695fc57ff7b3b9c62ff20aada72b3d63c8af096209c6b4ab70016cb5911b06c1ce058f4725b4254eb5bcbe2313d6c03db545917e381fcd204ba7f05100a00248fc54e2a4891df0eaff80fc73a971dce8525cdf15"], 0x1, 0x17e, &(0x7f0000000240)="$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") 1.237706452s ago: executing program 5 (id=1524): setpriority(0x0, 0x0, 0x2a14b58) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000007e00)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000380)={0x50, 0x0, r2, {0x7, 0x27, 0x4, 0x1001a, 0x9, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000c2c0)="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", 0x2000, &(0x7f0000010c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x90, 0x0, 0x4, {0x1, 0x0, 0x70b2, 0x3, 0x2, 0x2, {0x4, 0x7, 0x5, 0x81, 0x4, 0x0, 0xba35, 0x2, 0x3, 0xa000, 0xe35, r3, r4, 0x9, 0x3b80}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) rename(&(0x7f0000000100)='./file0/../file0/file0\x00', &(0x7f0000000140)='./file0/../file0/file0\x00') timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(0xffffffffffffffff, 0x942e, 0x0) r5 = getpid() mmap(&(0x7f0000088000/0x4000)=nil, 0x4000, 0xf7c6d64dad4748c9, 0x30, 0xffffffffffffffff, 0x6be68000) r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x2000000) syz_clone(0x40005080, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)="e54c379ff7133159c06e35f780fa4c4a592d5d8813d18e43e89e86fb") open$dir(&(0x7f0000000080)='./file0\x00', 0x400100, 0x58) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000100)) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0, 0x0}) dup3(r8, r7, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000380)='net/tcp\x00') read$FUSE(r9, &(0x7f00000003c0)={0x2020}, 0x2020) read$FUSE(r9, &(0x7f0000005dc0)={0x2020}, 0x2020) openat$full(0xffffffffffffff9c, &(0x7f0000000180), 0x10040, 0x0) read$FUSE(r9, &(0x7f0000002140)={0x2020}, 0xffffffc3) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.048207497s ago: executing program 1 (id=1526): bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x5, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x4, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x8, 0x400, 0x2, 0xffff0000, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x9, 0x1, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x10000, 0x1, 0x100, 0x2, 0x6, 0x7ffd, 0x5, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x1, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x7, 0xfffffff7, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x26e, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x4000051}, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x4, 0x5, 0x9, 0x8], 0x25000, 0x304}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000140)='S\x00', 0x2}], 0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1.039491367s ago: executing program 1 (id=1527): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(0xffffffffffffffff, 0x2, &(0x7f0000000000)=0x8) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r6 = socket(0xa, 0x3, 0x87) sendto(r6, &(0x7f00000003c0)="e1118ce4", 0x4, 0x800, &(0x7f0000000600)=@l2tp6={0xa, 0x0, 0x7, @local, 0x5}, 0x80) 1.003764708s ago: executing program 5 (id=1528): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000100ffff0000000000000000850000000f000000850000005d00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$XFS_IOC_ERROR_CLEARALL(r0, 0x40085875) 952.285849ms ago: executing program 5 (id=1529): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x400000, 0x1) getdents(r2, &(0x7f0000000080)=""/152, 0x98) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000200)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, r1, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_RINGS_HEADER={0x4}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0xa}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0xfffff7b7}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x401}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280), r0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r3, 0x1, 0xffff, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80040}, 0x80) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r3, 0x10, 0x70bd2d, 0x25dfdbfe, {}, ["", ""]}, 0x1c}}, 0x8000) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCDARP(r4, 0x8953, &(0x7f0000000480)={{0x2, 0x4e24, @loopback}, {0x306, @broadcast}, 0x34, {0x2, 0x4e23, @empty}, 'veth1\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000540)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000000580)=[0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0], 0x0, 0x26, &(0x7f0000000600)=[{}, {}], 0x10, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0x86, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) sendmsg$nl_route_sched(r5, &(0x7f00000008c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)=@deltfilter={0x3c, 0x2d, 0x100, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x7, 0x8}, {0xfff4, 0x10}, {0x0, 0xc}}, [@TCA_CHAIN={0x8, 0xb, 0x1}, @TCA_CHAIN={0x8, 0xb, 0x81}, @TCA_RATE={0x6, 0x5, {0x6, 0x1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40804}, 0x4008000) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000980)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x28, r7, 0x800, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x8, 0x2f}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}}, 0x4000) close_range(r0, r2, 0x2) sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x1c, r7, 0x8, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x44000) mkdirat(0xffffffffffffffff, &(0x7f0000000b80)='./file0\x00', 0x0) r9 = openat(r2, &(0x7f0000000bc0)='./file0\x00', 0x208000, 0x12) sendmsg$ETHTOOL_MSG_PAUSE_SET(r9, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x5c, r1, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x4008800) sendmsg$TIPC_CMD_SET_LINK_TOL(r9, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x1c0000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x68, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x5, @media='udp\x00'}}}, ["", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0xc8e525a0c3abd8ab}, 0x80) r10 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000e80), 0x8) fsetxattr$trusted_overlay_upper(r10, &(0x7f0000000ec0), &(0x7f0000000f00)={0x0, 0xfb, 0xc3, 0x6, 0x2, "c0116ad36ebfd89aa00b40e4e0eb324c", "b066af458445ef53125706e608ed988ff9bba1ee35a82fec5fc9fd5dbfc151968110d56c4897b846caa8cb5147a57786555050717320e28046b68320017da15e7864a1b4a3ed3c328eba2586aa459be0aa61fd87d5b19c6c3a888f8a40e8f25e864ec4eeca7fb24b92b77456ea7783b0b1fc23d305915258d5bb2648ca53210eb3e1b73fae15b0faba8ec337ba55c0a9b084fbd0689bf42c9aadd5879decacb51152f63e19bdbf427c336aa460c2"}, 0xc3, 0x2) ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0xff) r11 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r11, 0x89f1, &(0x7f0000001080)={'ip6gre0\x00', &(0x7f0000001000)={'syztnl0\x00', r6, 0x29, 0x3, 0x1, 0x6, 0x4, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10, 0x80c0, 0x8}}) recvmmsg(r4, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f00000010c0)}, {&(0x7f0000001100)=""/53, 0x35}], 0x2, &(0x7f0000001180)=""/150, 0x96}, 0x1}], 0x1, 0x0, &(0x7f0000001280)) getdents(0xffffffffffffffff, &(0x7f00000012c0)=""/125, 0x7d) getdents(0xffffffffffffffff, &(0x7f0000001380)=""/130, 0x82) 951.945979ms ago: executing program 5 (id=1530): bpf$PROG_LOAD(0x5, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x5, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x4, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x8, 0x400, 0x2, 0xffff0000, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x9, 0x1, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x10000, 0x1, 0x100, 0x2, 0x6, 0x7ffd, 0x5, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x1, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x7, 0xfffffff7, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x26e, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20006854}, 0x800) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x4000051}, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x4, 0x5, 0x9, 0x8], 0x25000, 0x304}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000140)='S', 0x1}], 0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 605.470287ms ago: executing program 4 (id=1531): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="1201000000000010ac054b02000000000001090224000100003000090400000103e6000009210000000122450009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) syz_usb_control_io(r0, &(0x7f0000000a40)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="40064500000045240d1adaa3cae546e2c5f437298fe78dc19175aa7b8d6a"], 0x0, 0x0, 0x0, 0x0}, 0x0) 310.039983ms ago: executing program 2 (id=1532): bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x5, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x4, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x8, 0x400, 0x2, 0xffff0000, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x9, 0x1, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x10000, 0x1, 0x100, 0x2, 0x6, 0x7ffd, 0x5, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x1, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x7, 0xfffffff7, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x26e, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20006854}, 0x800) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x4000051}, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x4, 0x5, 0x9, 0x8], 0x25000, 0x304}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000140)='S', 0x1}], 0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 184.066076ms ago: executing program 1 (id=1533): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) timer_settime(0x0, 0x0, 0x0, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x16, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000fcffffff1801000020646c25000000f8ff2020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018010000696c6c2500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000001000000850000000600000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 112.490388ms ago: executing program 3 (id=1534): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1200000001000000040000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000004b29bee574083e5ed200"/37], 0x50) syz_open_dev$vcsa(&(0x7f0000000380), 0x7b95b611, 0x802) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_io_uring_setup(0x3af6, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000167000/0x1000)=nil, 0x1000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000) socket$inet(0x2, 0xa, 0xd) r5 = socket(0x10, 0x803, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="180000005600230d000000000000000007"], 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x4040000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={0x1, 0x58, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000500)={'syztnl0\x00', &(0x7f0000000480)={'syztnl2\x00', r8, 0x29, 0xc, 0x5, 0x3, 0x5, @empty, @mcast1, 0x20, 0x80, 0x1, 0x9}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r7}, &(0x7f0000000580)=0x2, &(0x7f00000000c0)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, &(0x7f0000000040)}, 0x20) 112.135908ms ago: executing program 1 (id=1535): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x5, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x4, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x8, 0x400, 0x2, 0xffff0000, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x9, 0x1, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x10000, 0x1, 0x100, 0x2, 0x6, 0x7ffd, 0x5, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x1, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x7, 0xfffffff7, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x26e, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x4000051}, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x4, 0x5, 0x9, 0x8], 0x25000, 0x304}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000140)='S\x00', 0x2}], 0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 111.676628ms ago: executing program 1 (id=1536): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d000010000000000000000000000008001200020002000000bd00000000001200330002030000003fff00000000000200000000000000030000570d45f3dd65602100000000000000000000000000030005000000000002000000ac1414aa0000000000000000030006000000000002"], 0x80}}, 0x0) 67.033409ms ago: executing program 4 (id=1537): bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x5, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x4, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x8, 0x400, 0x2, 0xffff0000, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x9, 0x1, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x10000, 0x1, 0x100, 0x2, 0x6, 0x7ffd, 0x5, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x1, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x7, 0xfffffff7, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x26e, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x4000051}, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x4, 0x5, 0x9, 0x8], 0x25000, 0x304}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000140)='S\x00', 0x2}], 0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 58.644799ms ago: executing program 1 (id=1538): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xa, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001840000004000000000000000000000095000000000000009500000000000000950000000000000018400000feffffff47ffffffff"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x9}, 0x94) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {0x9, 0x1}, 0x800005, 0x80, &(0x7f0000000040)={0x20, 0x15, 0x84b9, 0x7f, 0x4}, 0x8, 0x7, 0x4, 0x0, 0x5, 0x4, 0x0}) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e75"], 0x65) 382.06µs ago: executing program 2 (id=1539): setpriority(0x0, 0x0, 0x2a14b58) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000007e00)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000380)={0x50, 0x0, r2, {0x7, 0x27, 0x4, 0x1001a, 0x9, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000c2c0)="ea4c038a64c8d74cdf2c0c86d53d0211e97fa6c0c01ce5ef8f0fff89376d19f6c1d755fdb6e871de44df5e5f286d1fb090a4ffaef0d23404e6393392e67aaa58a2d75789f4739d1547d257cb9e5f4a09b0e71890b03008d00e84b327b88285d654954146c1919bfd2258ee2d4d681cf917123ce1d784f7d6bbf14733faf739b758c45cc3f2f080a7be8ed202b7fb396f1308421e8a697b275920a5ec140c62fdb001a442fe744077a003f358c30544eff426e392f67be9dc13c55b660bfc27a87bf5a5ee74f8b192a05330ede71f4d9353299d0fcee3a83d5e6c54f257bb6eac17d48ec3608ea866ba90051e787a12acd2dadd6a7e967fce942053aa78cc04ecdda91ebd4ca0892a6531f97d6cd6f0788ca3a0ec9b0b410b48e36f87e5a04e2c25c495907c1e1856f25bc484494381c24db15b4a5e53b72597d0a59139ef935798da3fc90d03f1a6e1b1b697edaa2c4b356794c210f915f9545788ad865ebda8e325ab954dd1bb71f9442c1768dd3b4a215006ecb2ae0a6fa50bb2d674e8d760f4ef9d9bc3729530c2ec382e0646b06823eb7560e1f76c4d101c111c64b50c9ff46382858458c476d5357724d11d116cad2cc574e3bbc08d751d0410da21bb3c65501a55fcc13f984679df6eb18d59b6e71515cffc9c193385e7ae425786f4a23a4b0650f184d25b7e89187494ee9bce3c7d73219caf9c3e23b26f61336fae1725ff9304fc5bd8cd9bbbb48dcd2ec42b1ecb26310d9975d1e5418037200c404d8e6ff1bf03ede8e04d9a6a53e2a08ef314caaf17fb4424d16a4dc38fcb59482cfd317006e32ea996701ff8389cbd29c0b11efde5263e7bd8148c38c2df8153169739f1f88be745f42560dd5eeb896fa72789e66cb132c04a80f9cd638481d4fd22774ebcd5238d4e4f036ada4394996705f39d8d6df7767b69f57e1ea9b09f523f7b7569d47e0cb32068e8b07baebebc870cf333b58d29d3fb885c2fa656f46602ee7287067eb9e2e5644a5279f61ad34fa132f2daf497fa898eadd965eb44b17a43d908bf7d43d8c257e9663e90f607aa7d6991b96dab2b7b24762d80f7ec4bcfe1bf7296dc273c41160b3266775fa33d09928980e637eb92f722c089f4d73f21c4b99b2abe2b1524162e67576e9f94762b7fc0a2ab2b474da28cc20e514da5c7a28e10a5a3aadf61706b3c09de061a06db9bee9d63fc3db7c3ca7005a1a90769d0dc4a85af69e0090e0aa499cff9e0b937258c04ccf28ed895e7c3fe39b5956cbd1a628ac989b2a6457e17a6064322af7dc1ac108c48241ef495a4cad7eb314244bcab905f9e572d1f8d6cc9d5fcd4bad33e8563ea78600aa9156e0f3957a1e232a2410470fe231728a0c40de2a116b608db253510ed5eed983abe3a50570ec2ec3df5646f245ae7c1bcb41f1553689defa4baff2ccb54f5d3744e1b4b30eb6b2c02eee97ee48160f348474a926499789556a22e566a9d5a4627e55321b4c4f4585f8f4bbf7e7e657165d34ee2abbf553793b63743f2b0fdd35885ee4b10dae07d7c71447507a9d1661621b1aa1f8a223bc32abf41e2cd91d0d19fabb8f52c1a9adf9749753098f96b50979fc9cdc8d29001e9e3fa814e2189452bb1da1d884fabf6287aecad402942e8ca638d2dc9601bd416a6af9bf40069d44971ef3241531f84a5dbb922b843172d3261f4979c4f4029e3e90c37b2e465e26cee1ceb930eabccc96ca8df9dc1e70700f87fe07e2bc99e5473c5ba7f1ce58c2445e1dfc38d04c5b049c25f3c6258737e52d4b85c02607aabeddbeb8d5065e06565be6893e4125979390bdfebbcdd84effdd908b7f85f60b87c1251df0abc22ef9e3ef86688eb1c5c21e7385002a598a0db6ef50366264a3983e2ba080c134bcabf929425022f3f53337b1bb408e7399716e553bb574a0e36def0a083cd479397189ef6ef6be2ad5a07e77e24e49c0238170b5c3235ac24607d8160c38f1b2cda8c7709ee8c8b2b2ba70f10a66550f19d99516e94b4ce6c99d4a534fbe2b505f71bb132f46bee2b7aba518efc656ca5de287709391cee0e2108d8f7da7c0d8832d30bfb016c2b8baf9353ec40c0ee0a7c3ce7fca5cb3338d1965e37b732a8aa063aad144d3c462b291efd7860c59bfd332a88038f414fb1d63d92e77e31f7fd3e553e05fba1bf0b0b0a8b3318adddd2a93a619322672297bc63b16cea94d24c9329547aebe99ba064287a356908aa802fd24054af6f6311526d0f4526e93d63d3f0337db8f0a31cafa8a73da1cac9c76adf12fb3115a7e93f7ffecf10877d3554e246d0bee75a39f8b5c2710176168edd2a7d386f85c285dcb17185d86a0b81565acbd0508b943c6f20fcffc635f4ef7abd37365f252041636f99c00e7abed6dfe8aa2b4f12313fb00edc4e0561f9d7b6a23b3b552f2f18ebbb9c1f1fcd360b51971da324d3fc8558963970f046cca527fca0d4ce916e156eaa14a20eca061abc5659704b51c15cb2bd449e60fa1b730e9367777469105cd2d8b9f278ca99e56e225dc956aec6f48d90604b2b955e2a5e32ecdb553bcba3f517413e187e904ac0c626f4a1cd33ec0365424f2dd29cd3441209d3a6b488ef142ae3fa524f94cfc611b203e2b434135a15cc4ba87e5cbbb6a7a98f7f186b4f098a94358d07aa2e2c2947a5df446f20234b5fea8ced0c6c332eeafdc91d4812b50a07a27bbe98052d1c23e3c05aa11fa6c3e9c2877d03ab5dc44fcf3677d5cdbf52db040cd980beae0d515d388e657475de8a4dc8f5b355ecc53b65839921671ea1af5f1c4cf490ef55982aa738dd8a1fd339c103bcd06f235df350d8d1f75c03d9f7fcff0c72a7329e068f6159bd9abc7ebbbb075ebba3b30dc5ee241abd5b3157f23f8116ff128fc0c55be262958a172466b657e46f780de52c96e644bce8fd65873ac7391d90fd6a2eed4881c67b36490482ff07890c86a8c2ccbfd5060582629df982d67da20df1265710ece0b10d11a244bfed4cc7f94f14414531650a51edfc4a7da07b9a11f4ada4313f24765995beace26bda54698dbd690c01db2b83d5b8497f5e399f9588a9d5e764bdac3b304070aa253fc8d76d71d252236bf48cb50910abc4e1d69c914107bfda938476668f7dced5a1eb9ec1088373e078a5f474ae9ad5452b08373395f94dded2191de113b1d532dbd2bb6d8d07af69bdb93b9158122c0f3e26c9ee2d44db6d0d677cffd9be31f4fced646ad466b5819b210a563ec935c5359b8c5e391500555a6e6a0da6f8a07aeeb6b5cafb1b8b127b8146b34386848ef0c10f2a885069e2ca147f36d6788094df448d9e3efc7fb69635254beb124d05214563e0180e1d8132b8c2c601fdf49d4a8b3575689bc02048b389c7031b0e59d3bae957196aef0c26f29ab13827e0dbcadacdfed002e0fde21a8e9bd3d62a72b59a1a90825f3740eddf90c625e51c1b317eb19f5c4f896f53d1d71e2a92c03ff405d9897153868736c6095901b18f0880987d4521c1202a299d0f0a9b1d857903cd15e666e8c7e2009cf1535e3a88e1b25e3721305e1695f1872324848f6f6e3708eede504d625188637d2553df902fba9beb18be64bbb03accb95804e597b2b3aafab6c70df41af5100094a407bfe91a2160c7c4bdae21bd78101a6cc244940ade0b4df5a253689c9a548075474254fd131e027b6122613eceee7632d684f33b11e3932d9f563d5153b3e106f27109a9d55329ce3d29dbdd6310b5068214f3b0d94bfbd14bfe55ab5fd7f07e5bff7ed1e1a016edffafacf4235822eb0061fd6cc745fbec1884a7781963931ed2deb47f3b42dd5c42353e4570422ec0a7bc99be3f6fd8f66c3b6a2061e37963ea800c06ee54eecbb685ec9287b405a47e520aa2918d2bea520145a18332cdb77e885fcd6d5bd25073e9a30d8471a99dde99c28148e7e0f717c3d3422cb863952fb5ae370f7560b1a370ce4515198635fea37205572d2c207d3e4f35b13349d5d2ba389d526c03393aed6dc0ea85ae2f7a4deaf15155f6c0119b813ada5a23cb42f42066c64b9855a50b1022d72bac93a156807bc6024c4756ce2fc8bbcdc73464ca80e09f7bb8f9e221f15f5ba9f2aa3bb8a7a536338c3ece9283494770b7ada6fd02aa65a347165c5e79d6f2131a7602e9f040e00b296757e179c173592f9a6c944042f96684f86cce1bdd9e644ea56bd8fff9e21c5beb7ac467f60837432cb4450625f3b4d874b78c841daa28e794714354c7f0456d58bac2abdf2d39ec2d84591ce5708f5d2ecb4fe35f301e06a4e2f13dfae8fdde3188b4d7839e4a968fb9faca4033e84330818716a5194be2f6556eaab31199e6b3372aa7944e6e1a38c406230a839d4eee41a868ec44bccf665a4cbe06b338d3eb011cee0ab13de4e9b85cff4929738555d7a78c095effdeb23ab12c2855a49be5b7f694749ffc7f8c23d0111c66dfc0b0020609fc8213d1adcc177e2bda5543c6eefd17025ff04ef96a25d2c805fdf749edf050fc5961dd79f23b08e0b5b399e96ac5fa132a728961b956e6045ee3868a89b82047afea8c051f5fcf51268d93244ea9206e917f6a41177482d54d0cea981455a1ca07be3dc640a8f6df71ee8524720c38e4f49ba64294f014356706336d0867b7ce374f25ed8e82c6e42a6b7c75b272c8fdc3c33cd8839670793cc55a2066c6f948c5cc0a3e4b53b809b00bdfaf6ceba8788893aecc7762759808ff649d3824bc2f485412998acfa9b597ae87a0ef8649ec1f12734defb91a2b62858846d5a52a727b5adbc2827add4830096b9d18abe9b9c1c2940e67e8e93c9eb5553e55853ba98d26327e3095d6684992ff3eef523cba2fcbe9a46705b5d097de8f7eb45cbd01870d1fc8465517241efcbe09e56e2a2b567d2c206e12a2ce2b4e093ef57be7d23fd7062ab83ad1ac07ab2add59b881dc15771ff1d0a03f6fcdde86764540087c18832aa6f9be19b809da4bb92b989fe93bbe6be4c343525c83b805e282ebe22af80f11a92b8530f540906d8a4e81282a2866ea9181cfc4bf4aaf64e844ce4f66611169a8b08390539598b1d4e5cebc027f09f8bf835278acbe8980963cf10852a06f272010cb2a65de75571f60e403e968358297f3a7b41945f4dc52f0d2e67a0a25b7553e2db3022941b710faad28c9bc12ea95bd4cbb1031743aec252f500304a4b8ea7c119cfad685698d69fd1a8a18a85ff685549f5905978041e6583f8177fe3143f1250c68086ac9909aa2666e3f6cf6d724469e4098a35196b07177882a352f67d29b3bf772c733c03489ef86cfbe6429fac957388cc85b2de462b403f0e724eb084ecc1ac410a575735d43686c677c94cbcb871fb5002338a97c94f94b19385e1fcb24080f1ca270a77dff0d9d8171cbff11898fd9c71bf6436fc9d714b56c0af05120ea4cded3b292643ce0e6cc52801c3358dd5f8030c62a8699c4c0bdd039677a32e99b43adf2a374d5fded47b2bc102500916b11e2608617b33b398d231119b98bdf85c1698fc5b8d0a93d47fe3becafa6f0c883611ed6f4f5ee95c75136e875566b1c1023a6d8cda7d996b370304cf1aaa4f93a23a2b1252c63df2b41e9c52e0937088d3870c830445e94ea4c20fd0b516eed91b19f36c515e2c91b2e7852028ecf4a03416a419a2a394abf43974fbbd7daadc706894670337dad013d94bfd032a0cb8b064a7f201de3cfd98c8bf1be1f63f8538e59d1305ecb768c2fc2e9e2f0a51b740a09a6d3a8ea76783aa671c2995056185b97eb8e4f3ee5a3ab2906d1be913a03a575afc44bdf4f33a63caa30c1eec9d35419f39be1556310724c3f36eb61b7aa395c5fc970d5822ca2947dbad6b6a1a0252fde869fce0cfff0dd41401a4122d99c31e1af41dba2231ea5e0dd78d58ee9a9ae5d141e31bba7efafbe7c023c897a5847ec93f675f88e87d488612214f49ca75f97e11f4749bed381fb76568919515a8386b50f949961c235917a484f2ce5e02842afaa4e844c408b4db10d7aafa5a2ab4c5f8ed2f4b3b0ebc50d12c04384f06699929d2fdd03a9bfa8ebb5ad6016556f8660fb4b260cf8c2e85f2a38384bcdeda3bea195e2001c7db1fd2628cec2e429fc389f9e376c645409882388496d0abb7a1e5cd320a6df0c41adb90c178ad98f20db151ffd49cda6f35d094a59953089d863c83bc6731faf8b764a85ff6e49c77636034ebce0a53e17c755a062dbe2e2d8f3c3bbeeba8ac25fa1c2e6d34311cdacdd933d4f7ecbf0efcbcff3093ecfdfa0ab8756900f2e0ff701c8c5b3619c3b129af504fd0e280ce2165962bcba4083cd8557b733c8c8ef4ebb4abd58a18f4ad46cde0d8ffb7ae3a6fc08c29afcb1e19a39f14821bc72dbee1c59ce109574a5e11358e89683872c3af4a2d6fe11c378a0424e239a46e999611b782fd1672ac833406c34e24d34f6b1538faee883b80795b3c4da7668f5bef1f29632c571bb951ee71d367f2f211a89026c14ba80611aee111a69b966e5b65797586d8c8ad74c55a557a792633d2fc7198767d41e141f005459c2213ade8c7725fed4d660e0b0a9f647971453fe106dabda43d98ec81bf8d50179daeca38f21086c71156de489b580de39332961fb84f9f219ff2edbfc5bfc1c79e1fba7d1c2ae5c0af7aeb37ea3ec8ad68a364bd840b8ef9299077b8fd6f4f05815705a6742cd78110cf5169f4d3e5adae3d55d45aa2571ec5e7ed16dd0743beb0d80d8bb24c03d2b9b372e9390dc15936c406153b967f2e8b7ba43d2baff44148f853345a83c312b505758af0c97b746b2211a72fa83306dcc78c6c2a95388b5f2b5cf2f6c08dca90042063fbca5475d3c389d87383941c217a699fe44c836a282bfba6fcb977d1cb95c2cad797de30f1c6951abc369589cf17cf070def3d434ab3c23e61b7cc7e77d298d9b80fb9f7fce19fdc7eca25e3620a34e836e4b8b2a9831d1b00e93d3a905bdb8c453987339e63e41ac184590b6df1f285fa71253fedf1335a2a83e0509a4d8bdfcd8701b1ac2afa19b2ecbf9b6a028378be26c285149aae6d74f8b3dee00e2cff1c5da42ac39bbaf722e986edaedefd8ef9310f949946d97bce76d0b44306f4b7e4a64b18a69d871c887f4b446696b16cf3f1733a5a39b505854812da54a53f6566caf044222b791155c029eede591da2635644eea0f7a11692d4441880f5bc39b2e886118b06c99752b75ca77a6b123a179aeed691aaf138ca3910752588c4c7a129db1cc2509ecf4636e6d7c2e7dd5ccefc7a17d550603b3c63c9929031c4524b04a28b782df32d439aa2baf6b3630234e45d615e7c4d7eeb982d424a7dc396c6b8b810a59b94c5ab37ba88e2966d8a7d56d012c9fccf5984471b21d40b66b7e05ffb9e6611d42fcbc30a5da27b8f8be5031323c54a03c19c12ca0cf1680d8e18129043da548bb53832ace177dc8fdc8c6c7531d99dc4ad17a9b098347d2798e70714a2d72f5681bb6d9860a720b6ba67a66dd938511aa3376e3feacf51de9babbcaedbddcef7390114313c6adc5e2cc4b5c081ab37d1fd4e3d414abe3fc312765903e31c06cc0bb8f9f319f07e1c8940f69736e988928be3669a066aed445b37e8e425aaa7c02cdf3957abf0c9c5e077a56b24052584e95319499bdd4872de163a70e539f7079fd37f7aa65a2cadeee7839001a6d510e9fdc15542cf27176edc896a3124e844b1028fb45ecca41db7e35a12e03ca142918f1319762ea55145224b97d1e96f177b8029c0da49931274a72d933652285035d7983182303b55479baefb00156526728bb1f63c1736404462c0c539c6f76f8c9e757d4d3d5358d516039013a5bda8863160b51e8a3703121a0c4702a41a798115abce32ae3300844179680a04227acd8ff6f999ed42ca8cb26e41b3668c2c6c31c4e3214a97db6a8a78d0942d562ef4e6c52af019bbbecc4385ed9d29e5729a7289ae3610e525f13f8c0f4dd470a52afb2eab00ad1c4a484cbb133e5f5fbd5564f213bc41202f3cbb77f98d4f8e46eaa97cf827f4faeae6246b1921eceb0daa6427880b9c065650d76d951b18707c63a14a78cfbdd1613ef9bb6ffbdc16210eea2304d9e7917bced1be66d530db7088c865eadc5dfbf22041ac536d22499a53ef59bc511c0df56d8959a91b64454593c08a533835a34d8a2bf900598c52e4021ab90430b9dadd16fd2ae17ad56bbd0ab4490e5fd3aaedc63bf6166a0065072ccd4c928929f0fee37205aabd24784a45541ff960be3dcee58754ad3d5407e416e059f3fb01fac0e2af52a21c17e23164aeeea66afdda7457d70fbaaa31e203469e976d6f6d414495d36828c4bc80773e081aea5566d7af9d97ad6537aeef23dc893b197a527ba7e604eb86f10d4698ce69a63e7e889f5cf3e28bf9a4b5218b8527fac7b657c80d613f384e2528a8e6b69467318879a89fa7477ea48e93aafc5fda3b50d3ad023ca927ddd10a93ac32f04841cef593ad71e3644cd27bfac5c4c3a21201c814c0ca185ab2919d5439d97dc359f0168db9ecdce1195b4fe0753f436515dd126f5d022a03862a3531d103e691cf07d0e4c792b061000b2e2c17fd3c1dcdcf2cf534f00001c3c80fc917d097468e16dc2c3c759601054bfcd574be21ed959239ac03756a848264b2928a8a6fc8d6861b31524f33a3749c7903777edfea1c2be3be56bf8a5b67135067da6844a743b5f79670636e921a7accef36018cd9c64d9898675be1170fb7695a19bca3c382c4f6bd2d086a5446aeed8d39b2da835cc7791663f9e76cb320270ae416625a42eae162168450f72cc5781a9b436930429d526dafa9cf2356bc78ff38c5f77e854c0dfff74a79544b1c306a50f1a7e25bfe0025b2da3d5b6dda220a31b07e409a4a06b30fa6fe7373d47e7851d44d955b559c2ce40ab44a762463c05ce8d08dede58af3d08c0bd56382065b52dffe0996a8ff626086747ec7e54bf99ca0c5a1f8aa1d18f75531bc5520fa49636bbfe102ef22da11a9feefba20a0322b187eac30cdd7dce99da15394dbf115869c9518cd173ff61e694c6e84ef61d4b0723318e86bff9e9c1ceb7071d113b56f07258139dcdff89553d5644cd79f45298b55acd326fbd6575ce335b43d0b714e209d0dc78dd6f17e0fa7bd0662b6dfbe9e51b929b7c5538abbd0e7176d52090e2ab509b7b25822b6ac67b91fe181f881d94b742a97f43a0d3d316c988e5b6823155f2287ff9e79a7ed4f54eb3c2977031f6b4e10da869f82b6bcb955028f4385b6d869085091cec070e626c1a8fd276f1878a4d6d3df44bc8b5232fef4c81eccbcb31beeb1928d2079a3d9b67e25a28e43283fc88c3c9ce443fab14133d001be5042d7a3c0ceede30fbfe44de2852422d13f19e1197cecc6fe8b084afa0125716e7d9489533d24df03a1378dca1dc2196d2e6420ae0c0788ceca5c79b30b89d1fc9000e80561348eac1eaf38719a3b96065db3a815f91c6e2b64eab039ad13f34b68eb3f0cc30f5bc1d165aa76df95fbadf96393e2bf2930b1b32c598f662e5e8e886dd51d761c031517380a77c53c6152d208bfaf58c886154e8233ecd0c80a0ea301b1c3306b85ee543113f1e87514c6e8d1f78eaccb82023195f3c8c95329ed92b81599e0ea996a137fd97c0d7369e8012b43e9b2b853216802fc39b3986ac858bb4239417eee8bbea8ef67f400e4b43b3867ecb189d799ddfef5e6e876a43635743dc8b1ff7711af688b733e11b22c90ed11ba83de94e18333b8cc6ae70870769a7f8d3650e78b49013caeca6e0e51fc5b8a14470db0eae904b9841560921766b50d10006c9dfd3d9231b5aca83a979e98aaf52e5899b05873d032cafda755f760a2dae01ab65d1b1f0b507bd82c71f7a9b916e9bcad0d1576419b8c562290c6c68ac3d8cd927d10480bcb5426a081a760d9d4ac0238fe8599092e3d344396d41bd58f97ee1c5b898b59d331fa436fab8638bda997b87924087e2f6326a5a1d4a06fce701adb39cf47f8baa877f17b96cc7feafd7ba66a513add3b851bae2ee1c8dd9c0c7964baea87f47e224561a63c835346634eac2fe847374ac0271633e6c327f666596726feb92b2f6dfb861f74465eb46834a623db047b1ac6c3d89a85a93db379544f7b1844dcb5e3ca0f71255d7e4ec1f2ec49be3805f4cd871ab17ddb1d1ca1778764b4af82ef36a3b3ca473f4149bcf4b098be8ed611c76af87d6f425979e301685994a6666556fddee66fe88a1fb7b709316556191c75ed36aa0670fcf64bc8c04e3493305f5da5b34104e76486db519c6cc989fb1745261330928f663b192abe47adce1aa369c33a915a7c21deac0619813639c4f6e73535ac4aea930bccf55999dede8f4db56ed4af1568832ef7b0dc8e5628c75ed906f679e97bd9e606f080bda25ba29267f66e702791782654928ea33d1e74c5462c5414b7fe4693a1f93d00610c492fcfe4fdff15de41c4c1e86ba8bcf281e47287d918c799d04faef19ec993a480788e30abe9b5d982f06bdc75b78e047e904e4e82583c7786bfbdb07e9ae2ada00a05a23b45f9d5c7cea679016553ba967b55ead9e93e84f7f33924166ff139f214238997996a80fcdd4887f2eb8d5d62c14c6f7e4570ef65b060af3242329204d37a743f330580854403fca3b952fe2755cfffbd1a06120774f3695ec9fefb4f97cf7fbdb1c94d849483a2eb16cb7df0e5a101193201fd5711e952532490418a30df13a73d5604017cc86a027f00207a0b93e80f9b65903c6bec9a2decc661e42b857988adeab35085f83fff1646bb89dfc6ab9d428c0d21101470fe083e86e1b6bf899c0f9af0abf02b5a626118df3bbc567586c2af85acc1ef9d222af0a5ad3a6c74037fe54774ddbb456beff470d005942c5f9da293659f79c097504f7282a0d5bff4cedb9fbdfa0e69d066e219f870211be6220911dc2e180d9ff01e8ee9f466dbfa5e2f9d396027ef47e1746c44c8d7fc142d32a834763197f30b306a13468b4bd0a3a2ff2e37b35ce8f07a3896c25a9535ad1e22ad36bb8b616868d5dd5df973ba0459575bb469b3f20d58c51d0702c7fd2cf412b777a5ec0c7fbd21e357d37fe7891a8c1d0ec8f293b87ab95df02e15cdbdae530a4d3588a84712307fd7a147390482ca2707cd88f6f776b189295198aa1b2d50ee69a0b6879ce4615ee3a3014ce7cebdebcd162df23432038dc8ebf535d6ea3dfc78e574e4314f981cf12b2b14ac2b32a4a472bc1b7843b804763162fdecebbf3d8bde4bf30e4ba70347fbf2ac772f2ab9ca31f873c46ec437c8dd39c4bcbd22235fe34b6a31733b49c8551f1b0c005ae69e1673b65ce2a0736c8c3ff4b1f80fdcd851c6a8eb95f4e4d2f973d5d9f6c598a042a75f811fbf0a61951da41d1b29aeebe821f7cb9e1a32ac6495eb2f72d5f143afcce0c512ff413348d35cf889415a94d87013f3475ad930909a5157bde0f00fff98d789dd1fe32fb751c56868704c8dae0b44d65a7f9cd8745d48c33e33970e49d9420b3539963fc76e614f269a4f2a711c52f5f2b65948a90f5a6358b1e5721c8bcd430ad5470ff4bc334ee515cfd52f69429275cc446", 0x2000, &(0x7f0000010c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x90, 0x0, 0x4, {0x1, 0x0, 0x70b2, 0x3, 0x2, 0x2, {0x4, 0x7, 0x5, 0x81, 0x4, 0x0, 0xba35, 0x2, 0x3, 0xa000, 0xe35, r3, r4, 0x9, 0x3b80}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) rename(&(0x7f0000000100)='./file0/../file0/file0\x00', &(0x7f0000000140)='./file0/../file0/file0\x00') timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(0xffffffffffffffff, 0x942e, 0x0) r5 = getpid() mmap(&(0x7f0000088000/0x4000)=nil, 0x4000, 0xf7c6d64dad4748c9, 0x30, 0xffffffffffffffff, 0x6be68000) r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x2000000) syz_clone(0x40005080, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)="e54c379ff7133159c06e35f780fa4c4a592d5d8813d18e43e89e86fb") open$dir(&(0x7f0000000080)='./file0\x00', 0x400100, 0x58) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000100)) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0, 0x0}) dup3(r8, r7, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000380)='net/tcp\x00') read$FUSE(r9, &(0x7f00000003c0)={0x2020}, 0x2020) read$FUSE(r9, &(0x7f0000005dc0)={0x2020}, 0x2020) openat$full(0xffffffffffffff9c, &(0x7f0000000180), 0x10040, 0x0) read$FUSE(r9, &(0x7f0000002140)={0x2020}, 0xffffffc3) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 33 (id=1539): setpriority(0x0, 0x0, 0x2a14b58) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000007e00)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000380)={0x50, 0x0, r2, {0x7, 0x27, 0x4, 0x1001a, 0x9, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000c2c0)="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", 0x2000, &(0x7f0000010c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x90, 0x0, 0x4, {0x1, 0x0, 0x70b2, 0x3, 0x2, 0x2, {0x4, 0x7, 0x5, 0x81, 0x4, 0x0, 0xba35, 0x2, 0x3, 0xa000, 0xe35, r3, r4, 0x9, 0x3b80}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) rename(&(0x7f0000000100)='./file0/../file0/file0\x00', &(0x7f0000000140)='./file0/../file0/file0\x00') timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(0xffffffffffffffff, 0x942e, 0x0) r5 = getpid() mmap(&(0x7f0000088000/0x4000)=nil, 0x4000, 0xf7c6d64dad4748c9, 0x30, 0xffffffffffffffff, 0x6be68000) r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x2000000) syz_clone(0x40005080, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)="e54c379ff7133159c06e35f780fa4c4a592d5d8813d18e43e89e86fb") open$dir(&(0x7f0000000080)='./file0\x00', 0x400100, 0x58) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000100)) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0, 0x0}) dup3(r8, r7, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000380)='net/tcp\x00') read$FUSE(r9, &(0x7f00000003c0)={0x2020}, 0x2020) read$FUSE(r9, &(0x7f0000005dc0)={0x2020}, 0x2020) openat$full(0xffffffffffffff9c, &(0x7f0000000180), 0x10040, 0x0) read$FUSE(r9, &(0x7f0000002140)={0x2020}, 0xffffffc3) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): d capacity change from 0 to 256 [ 51.422995][ T618] usb 5-1: USB disconnect, device number 8 [ 51.433063][ T28] audit: type=1400 audit(1784378897.277:294): avc: denied { mount } for pid=1157 comm="syz.3.289" name="/" dev="configfs" ino=13363 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 51.458969][ T28] audit: type=1400 audit(1784378897.277:295): avc: denied { search } for pid=1157 comm="syz.3.289" name="/" dev="configfs" ino=13363 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 51.504169][ T1156] netlink: 'syz.2.292': attribute type 27 has an invalid length. [ 51.504371][ T1159] netlink: 'syz.2.292': attribute type 27 has an invalid length. [ 51.554895][ T1161] loop3: detected capacity change from 0 to 8192 [ 51.555391][ T1156] ext2: Unexpected value for 'acl' [ 51.580639][ T1161] netlink: 220 bytes leftover after parsing attributes in process `syz.3.293'. [ 51.594138][ T1161] SELinux: failed to load policy [ 51.606047][ T288] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 51.615167][ T288] FAT-fs (loop3): Filesystem has been set read-only [ 51.827584][ T19] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 52.028740][ T19] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 52.037964][ T19] usb 3-1: config 1 has no interface number 0 [ 52.044142][ T19] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 52.055336][ T19] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 52.132076][ T1177] loop4: detected capacity change from 0 to 16 [ 52.141314][ T1177] erofs: (device loop4): mounted with root inode @ nid 36. [ 52.304441][ T19] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 52.313977][ T19] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 52.324855][ T19] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has an invalid bInterval 108, changing to 4 [ 52.336092][ T19] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 39039, setting to 1023 [ 52.348783][ T673] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 52.362158][ T19] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 52.378525][ T19] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.386598][ T19] usb 3-1: Product: syz [ 52.390904][ T19] usb 3-1: Manufacturer: syz [ 52.395546][ T19] usb 3-1: SerialNumber: syz [ 52.408509][ T1156] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 52.519475][ T1182] loop5: detected capacity change from 0 to 16 [ 52.528526][ T1182] erofs: (device loop5): mounted with root inode @ nid 36. [ 52.617917][ T1156] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 52.685283][ T309] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 52.817488][ T1194] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 52.834244][ T1159] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 52.836779][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 52.836792][ T28] audit: type=1400 audit(1784378898.677:297): avc: denied { mounton } for pid=1193 comm="syz.4.303" path="/55/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0" dev="loop4" ino=1048637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 52.900533][ T19] cdc_ncm 3-1:1.1: failed GET_NTB_PARAMETERS [ 52.906576][ T19] cdc_ncm 3-1:1.1: bind() failure [ 52.958367][ T1196] netlink: 220 bytes leftover after parsing attributes in process `syz.4.304'. [ 52.967949][ T1196] SELinux: failed to load policy [ 52.979762][ T293] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000e1b1) [ 52.987710][ T293] FAT-fs (loop4): Filesystem has been set read-only [ 53.017436][ T1206] netlink: 16 bytes leftover after parsing attributes in process `syz.4.309'. [ 53.207656][ T339] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 53.235212][ T1227] SELinux: failed to load policy [ 53.263979][ T583] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000e1b1) [ 53.275989][ T583] FAT-fs (loop5): Filesystem has been set read-only [ 53.322258][ T28] audit: type=1400 audit(1784378899.167:298): avc: denied { execute } for pid=1234 comm="syz.1.324" name="file1" dev="tmpfs" ino=556 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 53.349600][ T28] audit: type=1400 audit(1784378899.187:299): avc: denied { execute_no_trans } for pid=1234 comm="syz.1.324" path="/101/file1" dev="tmpfs" ino=556 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 53.397637][ T339] usb 4-1: Using ep0 maxpacket: 16 [ 53.404212][ T339] usb 4-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 53.415541][ T339] usb 4-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 53.425868][ T339] usb 4-1: config 0 interface 0 has no altsetting 0 [ 53.432675][ T339] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 53.443079][ T339] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.453061][ T339] usb 4-1: config 0 descriptor?? [ 53.660994][ T1202] netlink: 68 bytes leftover after parsing attributes in process `syz.3.307'. [ 53.914092][ T339] usbhid 4-1:0.0: can't add hid device: -71 [ 53.920867][ T339] usbhid: probe of 4-1:0.0 failed with error -71 [ 53.937864][ T339] usb 4-1: USB disconnect, device number 5 [ 54.192695][ T28] audit: type=1400 audit(1784378900.037:300): avc: denied { connect } for pid=1260 comm="syz.4.333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 54.220536][ T1265] netlink: 68 bytes leftover after parsing attributes in process `syz.5.335'. [ 54.241948][ T28] audit: type=1400 audit(1784378900.057:301): avc: denied { connect } for pid=1260 comm="syz.4.333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 54.261530][ T28] audit: type=1400 audit(1784378900.057:302): avc: denied { write } for pid=1260 comm="syz.4.333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 54.583564][ T1287] device ip6gre1 entered promiscuous mode [ 54.679889][ T1272] F2FS-fs (loop5): Invalid log sectorsize (0) [ 54.686188][ T1272] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 54.695339][ T1272] F2FS-fs (loop5): invalid crc value [ 54.707597][ T301] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 54.728933][ T1292] x_tables: duplicate underflow at hook 3 [ 54.736001][ T1272] F2FS-fs (loop5): Found nat_bits in checkpoint [ 54.782243][ T331] usb 3-1: USB disconnect, device number 7 [ 54.793973][ T1272] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 54.801494][ T1272] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 54.843828][ T1296] set_capacity_and_notify: 4 callbacks suppressed [ 54.843843][ T1296] loop2: detected capacity change from 0 to 512 [ 54.958155][ T301] usb 4-1: Using ep0 maxpacket: 32 [ 54.972169][ T301] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 56.846303][ T1296] EXT4-fs (loop2): 1 truncate cleaned up [ 56.855547][ T1296] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 56.891264][ T28] audit: type=1400 audit(1784378902.737:303): avc: denied { rename } for pid=1295 comm="syz.2.345" name="file0" dev="loop2" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 56.921063][ T301] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 56.972588][ T301] usb 4-1: New USB device found, idVendor=17cc, idProduct=4711, bcdDevice= 0.40 [ 56.990286][ T301] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.000626][ T301] usb 4-1: Product: syz [ 57.001180][ T1313] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.345: bg 0: block 465: padding at end of block bitmap is not set [ 57.004798][ T301] usb 4-1: Manufacturer: syz [ 57.023722][ T301] usb 4-1: SerialNumber: syz [ 57.058195][ T1313] EXT4-fs (loop2): Delayed block allocation failed for inode 13 at logical offset 2 with max blocks 2 with error 28 [ 57.111981][ T1313] EXT4-fs (loop2): This should not happen!! Data will be lost [ 57.111981][ T1313] [ 57.156216][ T1313] EXT4-fs (loop2): Total free blocks count 0 [ 57.185722][ T1313] EXT4-fs (loop2): Free/Dirty block details [ 57.195708][ T1313] EXT4-fs (loop2): free_blocks=0 [ 57.201166][ T1313] EXT4-fs (loop2): dirty_blocks=6 [ 57.206316][ T1313] EXT4-fs (loop2): Block reservation details [ 57.212658][ T1313] EXT4-fs (loop2): i_reserved_data_blocks=6 [ 57.224551][ T350] EXT4-fs (loop2): Delayed block allocation failed for inode 13 at logical offset 8 with max blocks 4 with error 28 [ 57.240717][ T1281] loop3: detected capacity change from 0 to 512 [ 57.286680][ T1281] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 57.368685][ T1281] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 57.491345][ T301] usb 4-1: 0:1 : does not exist [ 57.496280][ T301] usb 4-1: unit 4 not found! [ 57.510698][ T301] usb 4-1: USB disconnect, device number 6 [ 57.571222][ T28] audit: type=1400 audit(1784378903.417:304): avc: denied { append } for pid=1338 comm="syz.4.356" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 57.608202][ T1339] loop4: detected capacity change from 0 to 1024 [ 57.723592][ T1349] fuse: Bad value for 'fd' [ 57.749175][ T673] udevd[673]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 58.286748][ T288] EXT4-fs (loop3): unmounting filesystem. [ 59.068870][ T1368] loop2: detected capacity change from 0 to 4096 [ 59.117233][ T1368] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 59.144433][ T1337] loop5: detected capacity change from 0 to 131072 [ 59.171503][ T1337] F2FS-fs (loop5): invalid crc value [ 59.180800][ T289] EXT4-fs (loop2): unmounting filesystem. [ 59.198987][ T1337] F2FS-fs (loop5): Found nat_bits in checkpoint [ 59.250454][ T1379] loop2: detected capacity change from 0 to 128 [ 59.287235][ T1337] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 59.316388][ T1337] F2FS-fs (loop5): Corrupted max_depth of 3: 16842753 [ 59.507586][ T301] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 59.537069][ T1390] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=1390 comm=syz.2.376 [ 59.566016][ T1390] netlink: 12 bytes leftover after parsing attributes in process `syz.2.376'. [ 60.486193][ T1405] netlink: 256 bytes leftover after parsing attributes in process `syz.2.381'. [ 60.587570][ T301] usb 4-1: config 0 interface 0 has no altsetting 0 [ 60.591740][ T1413] fuse: Bad value for 'fd' [ 60.594233][ T301] usb 4-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 60.607696][ T301] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.618675][ T301] usb 4-1: config 0 descriptor?? [ 60.648387][ T1417] netlink: 8 bytes leftover after parsing attributes in process `syz.5.387'. [ 60.701792][ T28] audit: type=1400 audit(1784378906.547:305): avc: denied { accept } for pid=1422 comm="syz.5.390" laddr=172.20.20.170 lport=42974 faddr=224.0.0.1 fport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 60.744775][ T1425] overlayfs: failed to clone upperpath [ 60.767948][ T1425] overlayfs: failed to clone upperpath [ 60.805882][ T28] audit: type=1400 audit(1784378906.647:306): avc: denied { map } for pid=1427 comm="syz.4.392" path="socket:[24028]" dev="sockfs" ino=24028 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 60.807691][ T729] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 60.851386][ T28] audit: type=1400 audit(1784378906.677:307): avc: denied { read } for pid=1427 comm="syz.4.392" path="socket:[24028]" dev="sockfs" ino=24028 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 60.876470][ T28] audit: type=1400 audit(1784378906.687:308): avc: denied { append } for pid=1376 comm="syz.3.371" name="001" dev="devtmpfs" ino=164 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 61.027711][ T1300] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 61.037700][ T729] usb 3-1: Using ep0 maxpacket: 8 [ 61.043861][ T729] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 61.055254][ T729] usb 3-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 61.065274][ T729] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.091664][ T729] usb 3-1: config 0 descriptor?? [ 61.109858][ T729] usb 3-1: bad CDC descriptors [ 61.115335][ T729] cdc_acm 3-1:0.0: Control and data interfaces are not separated! [ 61.124469][ T729] cdc_acm 3-1:0.0: This needs exactly 3 endpoints [ 61.131576][ T729] cdc_acm: probe of 3-1:0.0 failed with error -22 [ 61.471824][ T1408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.520637][ T1408] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.576717][ T339] usb 3-1: USB disconnect, device number 8 [ 61.945903][ T301] usbhid 4-1:0.0: can't add hid device: -71 [ 61.951944][ T301] usbhid: probe of 4-1:0.0 failed with error -71 [ 61.959614][ T301] usb 4-1: USB disconnect, device number 7 [ 62.047655][ T1300] usb 6-1: Using ep0 maxpacket: 32 [ 62.969917][ T1466] loop3: detected capacity change from 0 to 4096 [ 62.980704][ T1300] usb 6-1: unable to get BOS descriptor or descriptor too short [ 62.990199][ T1300] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 63.000754][ T1466] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 63.009986][ T1300] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 63.024018][ T1300] usb 6-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 63.034349][ T288] EXT4-fs (loop3): unmounting filesystem. [ 63.034579][ T1300] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.048515][ T1300] usb 6-1: Product: syz [ 63.052682][ T1300] usb 6-1: Manufacturer: syz [ 63.057267][ T1300] usb 6-1: SerialNumber: syz [ 63.825659][ T28] audit: type=1400 audit(1784378909.157:309): avc: denied { sqpoll } for pid=1481 comm="syz.1.411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 63.852043][ T1300] usb 6-1: USB disconnect, device number 5 [ 63.906582][ T1489] loop5: detected capacity change from 0 to 512 [ 63.916366][ T1490] loop2: detected capacity change from 0 to 256 [ 63.922825][ T28] audit: type=1400 audit(1784378909.757:310): avc: denied { write } for pid=1486 comm="syz.2.412" name="001" dev="devtmpfs" ino=164 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 63.980853][ T1490] FAT-fs (loop2): Directory bread(block 64) failed [ 64.018844][ T1490] FAT-fs (loop2): Directory bread(block 65) failed [ 64.036595][ T1490] FAT-fs (loop2): Directory bread(block 66) failed [ 64.052382][ T1490] FAT-fs (loop2): Directory bread(block 67) failed [ 64.061368][ T28] audit: type=1400 audit(1784378909.907:311): avc: denied { block_suspend } for pid=1488 comm="syz.5.413" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 64.089971][ T1490] FAT-fs (loop2): Directory bread(block 68) failed [ 64.103108][ T1490] FAT-fs (loop2): Directory bread(block 69) failed [ 64.117293][ T1490] FAT-fs (loop2): Directory bread(block 70) failed [ 64.130454][ T1490] FAT-fs (loop2): Directory bread(block 71) failed [ 64.144605][ T1490] FAT-fs (loop2): Directory bread(block 72) failed [ 64.157662][ T1490] FAT-fs (loop2): Directory bread(block 73) failed [ 64.176477][ T1490] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 64.771400][ T1505] loop2: detected capacity change from 0 to 4096 [ 64.798836][ T1505] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 64.828983][ T289] EXT4-fs (loop2): unmounting filesystem. [ 65.604537][ T1520] loop2: detected capacity change from 0 to 131072 [ 65.619970][ T1520] F2FS-fs (loop2): invalid crc value [ 65.639273][ T1520] F2FS-fs (loop2): Found nat_bits in checkpoint [ 65.648463][ T1572] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.675136][ T1572] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.704515][ T1584] ipt_REJECT: ECHOREPLY no longer supported. [ 65.715411][ T1572] device bridge_slave_0 entered promiscuous mode [ 65.737947][ T1572] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.747266][ T1584] loop5: detected capacity change from 0 to 1024 [ 65.759882][ T1572] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.770267][ T1520] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 65.773130][ T1572] device bridge_slave_1 entered promiscuous mode [ 65.778169][ T1584] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 65.822041][ T1520] F2FS-fs (loop2): Corrupted max_depth of 3: 16842753 [ 65.831460][ T1584] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 65.845348][ T1584] JBD2: no valid journal superblock found [ 65.853159][ T1572] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.860228][ T1572] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.867499][ T1572] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.874585][ T1572] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.882437][ T1584] EXT4-fs (loop5): error loading journal [ 65.924217][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.944671][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.952402][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.968837][ T1584] 9pnet_fd: Insufficient options for proto=fd [ 65.993521][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.019315][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.031303][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.038370][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.048251][ T1591] loop5: detected capacity change from 0 to 512 [ 66.064733][ T1591] EXT4-fs: Ignoring removed oldalloc option [ 66.071016][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.079501][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.086544][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.094709][ T1591] EXT4-fs (loop5): Test dummy encryption mode enabled [ 66.102032][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.110419][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.122763][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.131644][ T1591] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 66.140079][ T1572] device veth0_vlan entered promiscuous mode [ 66.158345][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.168300][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.182916][ T1601] netlink: 28 bytes leftover after parsing attributes in process `syz.4.454'. [ 66.194603][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.204218][ T1572] device veth1_macvtap entered promiscuous mode [ 66.215653][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.225679][ T353] device bridge_slave_1 left promiscuous mode [ 66.229090][ T1599] loop2: detected capacity change from 0 to 8192 [ 66.232351][ T353] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.247913][ T353] device bridge_slave_0 left promiscuous mode [ 66.254113][ T353] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.263622][ T353] device veth1_macvtap left promiscuous mode [ 66.265460][ T289] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1) [ 66.270161][ T353] device veth0_vlan left promiscuous mode [ 66.279046][ T289] FAT-fs (loop2): Filesystem has been set read-only [ 66.386092][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.402937][ T28] audit: type=1400 audit(1784378912.247:312): avc: denied { mounton } for pid=1572 comm="syz-executor" path="/root/syzkaller.sFIlLW/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 66.478855][ T28] audit: type=1400 audit(1784378912.327:313): avc: denied { remount } for pid=1616 comm="syz.3.459" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 66.499239][ T28] audit: type=1400 audit(1784378912.327:314): avc: denied { mounton } for pid=1616 comm="syz.3.459" path="/1/file0" dev="ramfs" ino=25121 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 66.522932][ T28] audit: type=1400 audit(1784378912.367:315): avc: denied { unmount } for pid=1572 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 66.567304][ T1620] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1620 comm=syz.1.458 [ 67.136893][ T583] EXT4-fs (loop5): unmounting filesystem. [ 67.196398][ T1639] netlink: 68 bytes leftover after parsing attributes in process `syz.4.468'. [ 67.315649][ T1622] loop3: detected capacity change from 0 to 131072 [ 67.325729][ T1622] F2FS-fs (loop3): invalid crc value [ 67.332715][ T1622] F2FS-fs (loop3): Found nat_bits in checkpoint [ 67.484098][ T1622] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 67.574128][ T1622] F2FS-fs (loop3): Corrupted max_depth of 3: 16842753 [ 67.655432][ T28] audit: type=1326 audit(1784378913.497:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1659 comm="syz.2.474" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f871939de99 code=0x7ffc0000 [ 67.670607][ T1664] netlink: 256 bytes leftover after parsing attributes in process `syz.1.475'. [ 67.681957][ T28] audit: type=1326 audit(1784378913.497:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1659 comm="syz.2.474" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f871939de99 code=0x7ffc0000 [ 67.732261][ T1666] netlink: 'syz.1.476': attribute type 2 has an invalid length. [ 67.745809][ T28] audit: type=1326 audit(1784378913.497:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1659 comm="syz.2.474" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f871939de99 code=0x7ffc0000 [ 67.776830][ T28] audit: type=1326 audit(1784378913.497:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1659 comm="syz.2.474" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f871939de99 code=0x7ffc0000 [ 67.801719][ T28] audit: type=1326 audit(1784378913.497:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1659 comm="syz.2.474" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=52 compat=0 ip=0x7f871939de99 code=0x7ffc0000 [ 67.828931][ T28] audit: type=1326 audit(1784378913.497:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1659 comm="syz.2.474" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f871939de99 code=0x7ffc0000 [ 68.320124][ T1697] fuse: Bad value for 'fd' [ 68.620220][ T1711] x_tables: duplicate underflow at hook 3 [ 68.717496][ T1682] loop5: detected capacity change from 0 to 131072 [ 68.730325][ T1682] F2FS-fs (loop5): invalid crc value [ 68.754030][ T1682] F2FS-fs (loop5): Found nat_bits in checkpoint [ 68.856555][ T1682] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 68.953686][ T1682] F2FS-fs (loop5): Corrupted max_depth of 3: 16842753 [ 69.500740][ T1734] loop2: detected capacity change from 0 to 8192 [ 69.520226][ T1734] SELinux: policydb version 16405 does not match my version range 15-33 [ 69.574591][ T1738] loop3: detected capacity change from 0 to 2048 [ 69.581190][ T1734] SELinux: failed to load policy [ 69.613957][ T1738] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 69.615586][ T289] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1) [ 69.641973][ T289] FAT-fs (loop2): Filesystem has been set read-only [ 69.731655][ T1738] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1738 comm=syz.3.502 [ 69.746915][ T1753] netlink: 220 bytes leftover after parsing attributes in process `syz.4.507'. [ 70.037405][ T1765] netlink: 8 bytes leftover after parsing attributes in process `syz.2.505'. [ 70.274692][ T1768] loop2: detected capacity change from 0 to 4096 [ 70.358276][ T1768] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 70.460285][ T289] EXT4-fs (loop2): unmounting filesystem. [ 70.646638][ T1779] netlink: 68 bytes leftover after parsing attributes in process `syz.2.514'. [ 70.760178][ T1793] loop5: detected capacity change from 0 to 512 [ 70.788601][ T1793] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 70.826191][ T1793] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 70.839436][ T1793] ext4 filesystem being mounted at /46/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.873396][ T583] EXT4-fs (loop5): unmounting filesystem. [ 70.889940][ T1805] loop5: detected capacity change from 0 to 256 [ 70.909732][ T1805] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xbdcedc51, utbl_chksum : 0xe619d30d) [ 70.975805][ T1807] netlink: 'syz.1.524': attribute type 4 has an invalid length. [ 71.179159][ T1300] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 71.369205][ T1300] usb 3-1: config 0 interface 0 altsetting 129 endpoint 0x81 has invalid maxpacket 1056, setting to 1024 [ 71.388808][ T1300] usb 3-1: config 0 interface 0 altsetting 129 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 71.413169][ T1300] usb 3-1: config 0 interface 0 has no altsetting 0 [ 71.426025][ T1300] usb 3-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 71.450291][ T1300] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.459990][ T1300] usb 3-1: config 0 descriptor?? [ 71.465471][ T1785] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 71.877390][ T1300] logitech 0003:046D:C293.0006: unknown main item tag 0x3 [ 71.886403][ T1300] logitech 0003:046D:C293.0006: item fetching failed at offset 12/40 [ 71.898582][ T1300] logitech 0003:046D:C293.0006: parse failed [ 71.906250][ T1300] logitech: probe of 0003:046D:C293.0006 failed with error -22 [ 72.084326][ T1826] loop3: detected capacity change from 0 to 16 [ 72.136155][ T729] usb 3-1: USB disconnect, device number 9 [ 72.142853][ T1826] erofs: (device loop3): mounted with root inode @ nid 36. [ 72.370008][ T1832] loop5: detected capacity change from 0 to 4096 [ 72.380311][ T1832] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 72.397078][ T583] EXT4-fs (loop5): unmounting filesystem. [ 72.413197][ T28] kauditd_printk_skb: 94 callbacks suppressed [ 72.413210][ T28] audit: type=1400 audit(1784378918.257:416): avc: denied { write } for pid=1835 comm="syz.5.534" path="socket:[26078]" dev="sockfs" ino=26078 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 72.714855][ T1842] loop2: detected capacity change from 0 to 16 [ 72.721678][ T1842] erofs: (device loop2): mounted with root inode @ nid 36. [ 72.759386][ T1847] x_tables: duplicate underflow at hook 3 [ 73.828243][ T1860] netlink: 8 bytes leftover after parsing attributes in process `syz.2.540'. [ 73.935638][ T1874] loop3: detected capacity change from 0 to 512 [ 73.971390][ T1874] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 73.989135][ T1874] ext4 filesystem being mounted at /13/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.262750][ T1882] loop2: detected capacity change from 0 to 4096 [ 74.447451][ T1882] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 74.487808][ T1838] Bluetooth: hci0: command 0x1003 tx timeout [ 74.507846][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 74.895822][ T289] EXT4-fs (loop2): unmounting filesystem. [ 75.071616][ T1572] EXT4-fs (loop3): unmounting filesystem. [ 75.098702][ T28] audit: type=1400 audit(1784378920.947:417): avc: denied { create } for pid=1903 comm="syz.2.549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 75.435663][ T1906] loop3: detected capacity change from 0 to 256 [ 75.444900][ T1906] exfat: Bad value for 'uid' [ 75.459981][ T1906] loop3: detected capacity change from 0 to 512 [ 75.481574][ T1906] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 75.509798][ T1906] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 75.518852][ T1906] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.537614][ T1300] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 75.595815][ T1572] EXT4-fs (loop3): unmounting filesystem. [ 75.625324][ T1913] loop3: detected capacity change from 0 to 512 [ 75.631930][ T1913] ext4: Unknown parameter 'fsname' [ 76.338650][ T1300] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 76.348824][ T1300] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 76.358576][ T1300] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.372055][ T1300] aiptek 3-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 80.972786][ T1300] usb 3-1: USB disconnect, device number 10 [ 81.011203][ T1950] loop2: detected capacity change from 0 to 256 [ 81.024110][ T1950] exfat: Deprecated parameter 'utf8' [ 81.036964][ T1950] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d) [ 81.093355][ T1956] loop2: detected capacity change from 0 to 4096 [ 81.109106][ T1956] EXT4-fs (loop2): Test dummy encryption mode enabled [ 81.178925][ T1956] EXT4-fs (loop2): can't mount with data_err=abort, fs mounted w/o journal [ 81.341963][ T1961] xt_socket: unknown flags 0x58 [ 81.348454][ T1961] netlink: 16 bytes leftover after parsing attributes in process `syz.4.570'. [ 81.398328][ T1956] xt_hashlimit: size too large, truncated to 1048576 [ 81.927495][ T1980] loop5: detected capacity change from 0 to 512 [ 81.959565][ T1980] EXT4-fs (loop5): Test dummy encryption mode enabled [ 82.965217][ T1982] sched: RT throttling activated [ 82.974128][ T1980] EXT4-fs error (device loop5): ext4_orphan_get:1405: inode #15: comm syz.5.577: inode has both inline data and extents flags [ 82.987376][ T1980] EXT4-fs error (device loop5): ext4_orphan_get:1410: comm syz.5.577: couldn't read orphan inode 15 (err -117) [ 82.999405][ T1980] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 83.292982][ T1992] loop2: detected capacity change from 0 to 16 [ 83.302834][ T1992] erofs: (device loop2): mounted with root inode @ nid 36. [ 83.554777][ T583] EXT4-fs (loop5): unmounting filesystem. [ 84.461510][ T2021] futex_wake_op: syz.1.588 tries to shift op by 144; fix this program [ 84.537731][ T1931] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 84.640539][ T2033] netlink: 20 bytes leftover after parsing attributes in process `syz.1.593'. [ 84.739448][ T1931] usb 3-1: config 1 has an invalid interface number: 7 but max is 0 [ 84.797516][ T1931] usb 3-1: config 1 has no interface number 0 [ 84.868666][ T1931] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 84.898781][ T2038] capability: warning: `syz.1.594' uses 32-bit capabilities (legacy support in use) [ 84.901534][ T1931] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0xD has invalid maxpacket 32 [ 84.935746][ T1931] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 84.954062][ T1931] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.962313][ T1931] usb 3-1: Product: syz [ 84.966502][ T1931] usb 3-1: Manufacturer: syz [ 84.971327][ T1931] usb 3-1: SerialNumber: syz [ 84.985899][ T2004] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 84.993335][ T2004] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 85.271243][ T2026] loop5: detected capacity change from 0 to 131072 [ 85.287579][ T2026] F2FS-fs (loop5): Invalid log sectorsize (0) [ 85.299886][ T2026] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 85.311614][ T2026] F2FS-fs (loop5): invalid crc value [ 85.330014][ T2026] F2FS-fs (loop5): Found nat_bits in checkpoint [ 85.365249][ T2026] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 85.372485][ T2026] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 86.393468][ T2064] loop2: detected capacity change from 0 to 4096 [ 86.416523][ T2064] EXT4-fs: Ignoring removed mblk_io_submit option [ 86.453171][ T2064] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 86.468032][ T2064] EXT4-fs (loop2): Number of reserved GDT blocks insanely large: 28416 [ 86.621030][ T28] audit: type=1400 audit(1784378932.467:418): avc: denied { create } for pid=2080 comm="syz.4.612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 88.249434][ T2090] loop3: detected capacity change from 0 to 16 [ 88.259960][ T2089] futex_wake_op: syz.5.604 tries to shift op by 144; fix this program [ 88.340135][ T2089] loop5: detected capacity change from 0 to 256 [ 88.357701][ T2090] erofs: (device loop3): mounted with root inode @ nid 36. [ 88.424619][ T2089] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 88.443444][ T28] audit: type=1400 audit(1784378934.127:419): avc: denied { read write } for pid=2085 comm="syz.5.604" name="usbmon8" dev="devtmpfs" ino=183 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 88.451381][ T331] usb 3-1: USB disconnect, device number 11 [ 88.467394][ T28] audit: type=1400 audit(1784378934.127:420): avc: denied { open } for pid=2085 comm="syz.5.604" path="/dev/usbmon8" dev="devtmpfs" ino=183 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 88.530730][ T28] audit: type=1400 audit(1784378934.377:421): avc: denied { bind } for pid=2093 comm="syz.4.615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 88.555262][ T28] audit: type=1400 audit(1784378934.397:422): avc: denied { connect } for pid=2093 comm="syz.4.615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 89.038681][ T2122] kernel profiling enabled (shift: 5) [ 89.209360][ T2123] loop5: detected capacity change from 0 to 512 [ 89.216005][ T2123] EXT4-fs: Ignoring removed orlov option [ 89.221968][ T2123] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 89.250939][ T2123] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2916: inode #15: comm syz.5.623: corrupted xattr block 252 [ 89.263523][ T2123] EXT4-fs (loop5): Remounting filesystem read-only [ 89.270079][ T2123] EXT4-fs warning (device loop5): ext4_evict_inode:301: xattr delete (err -117) [ 89.279812][ T2123] EXT4-fs (loop5): 1 orphan inode deleted [ 89.286085][ T2123] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 89.437855][ T2127] netlink: 8 bytes leftover after parsing attributes in process `syz.3.625'. [ 89.674207][ T2151] loop2: detected capacity change from 0 to 16 [ 89.724132][ T2151] erofs: (device loop2): mounted with root inode @ nid 36. [ 89.753841][ T583] EXT4-fs (loop5): unmounting filesystem. [ 90.422194][ T28] audit: type=1400 audit(1784378936.267:423): avc: denied { read write } for pid=2162 comm="syz.2.638" name="uhid" dev="devtmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 90.547529][ T28] audit: type=1400 audit(1784378936.267:424): avc: denied { open } for pid=2162 comm="syz.2.638" path="/dev/uhid" dev="devtmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 90.680208][ T28] audit: type=1400 audit(1784378936.267:425): avc: denied { read write } for pid=2162 comm="syz.2.638" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 90.765231][ T2167] loop2: detected capacity change from 0 to 512 [ 90.783837][ T2167] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 90.859390][ T2175] netlink: 8 bytes leftover after parsing attributes in process `syz.3.642'. [ 90.877768][ T28] audit: type=1400 audit(1784378936.267:426): avc: denied { open } for pid=2162 comm="syz.2.638" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 90.906015][ T28] audit: type=1400 audit(1784378936.267:427): avc: denied { ioctl } for pid=2162 comm="syz.2.638" path="/dev/binderfs/binder0" dev="binder" ino=16 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 90.953518][ T2167] EXT4-fs (loop2): 1 orphan inode deleted [ 90.959455][ T2167] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 90.970821][ T8] EXT4-fs error (device loop2): ext4_release_dquot:6864: comm kworker/u4:0: Failed to release dquot type 1 [ 90.982633][ T2167] ext4 filesystem being mounted at /95/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.128041][ T2167] SELinux: policydb magic number 0xdc0200f does not match expected magic number 0xf97cff8c [ 91.147613][ T2167] SELinux: failed to load policy [ 91.177519][ T2169] netlink: 'syz.2.640': attribute type 16 has an invalid length. [ 91.197643][ T2169] netlink: 'syz.2.640': attribute type 17 has an invalid length. [ 91.231265][ T2169] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 91.252754][ T2169] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 91.263651][ T2169] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 91.283164][ T345] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 91.305426][ T345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 91.313915][ T345] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 91.322043][ T345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 91.330376][ T345] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 91.339221][ T345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 91.347401][ T345] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 91.355899][ T345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 91.377995][ T39] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 91.396497][ T289] EXT4-fs (loop2): unmounting filesystem. [ 91.587633][ T39] usb 4-1: Using ep0 maxpacket: 8 [ 91.594945][ T39] usb 4-1: unable to get BOS descriptor or descriptor too short [ 91.666118][ T39] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 91.676662][ T39] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 91.687214][ T39] usb 4-1: New USB device found, idVendor=9d6b, idProduct=0101, bcdDevice= 0.40 [ 91.696445][ T39] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.704691][ T39] usb 4-1: Product: syz [ 91.713007][ T39] usb 4-1: Manufacturer: syz [ 91.717848][ T39] usb 4-1: SerialNumber: syz [ 92.140851][ T1300] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 92.216654][ T331] usb 4-1: USB disconnect, device number 8 [ 93.968063][ T1300] usb 6-1: device descriptor read/64, error -71 [ 94.054885][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 94.054899][ T28] audit: type=1400 audit(1784378939.897:429): avc: denied { ioctl } for pid=2230 comm="syz.4.660" path="socket:[28928]" dev="sockfs" ino=28928 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 94.096202][ T28] audit: type=1400 audit(1784378939.937:430): avc: denied { getopt } for pid=2230 comm="syz.4.660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 94.237596][ T1300] usb 6-1: device descriptor read/64, error -71 [ 94.449648][ T2227] loop3: detected capacity change from 0 to 131072 [ 94.466227][ T2227] F2FS-fs (loop3): invalid crc value [ 94.492618][ T2227] F2FS-fs (loop3): Found nat_bits in checkpoint [ 94.523852][ T2257] loop5: detected capacity change from 0 to 16 [ 94.531267][ T2257] erofs: (device loop5): mounted with root inode @ nid 36. [ 94.599878][ T2227] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 94.939772][ T2279] netlink: 256 bytes leftover after parsing attributes in process `syz.3.674'. [ 94.970937][ T28] audit: type=1400 audit(1784378940.817:431): avc: denied { mounton } for pid=2280 comm="syz.3.680" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=70 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 95.020563][ T2284] loop3: detected capacity change from 0 to 512 [ 95.066919][ T2284] EXT4-fs error (device loop3): ext4_do_update_inode:5281: inode #16: comm syz.3.681: corrupted inode contents [ 95.087754][ T2284] EXT4-fs error (device loop3): ext4_dirty_inode:6158: inode #16: comm syz.3.681: mark_inode_dirty error [ 95.104353][ T2284] EXT4-fs error (device loop3): ext4_do_update_inode:5281: inode #16: comm syz.3.681: corrupted inode contents [ 95.130635][ T2284] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #16: comm syz.3.681: mark_inode_dirty error [ 95.150256][ T2284] EXT4-fs error (device loop3): ext4_do_update_inode:5281: inode #16: comm syz.3.681: corrupted inode contents [ 95.172455][ T2284] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 95.197896][ T2284] EXT4-fs error (device loop3): ext4_do_update_inode:5281: inode #16: comm syz.3.681: corrupted inode contents [ 95.213580][ T2284] EXT4-fs error (device loop3): ext4_truncate:4327: inode #16: comm syz.3.681: mark_inode_dirty error [ 95.235574][ T2284] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 95.340676][ T2284] EXT4-fs (loop3): 1 truncate cleaned up [ 95.346480][ T2284] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 95.358845][ T617] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 95.368700][ T617] EXT4-fs error (device loop3): ext4_release_dquot:6864: comm kworker/u4:8: Failed to release dquot type 1 [ 95.425201][ T2284] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.528112][ T2302] netlink: 'syz.2.686': attribute type 4 has an invalid length. [ 96.579361][ T28] audit: type=1400 audit(1784378942.427:432): avc: denied { append } for pid=2283 comm="syz.3.681" name="loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 96.602954][ T28] audit: type=1400 audit(1784378942.447:433): avc: denied { map } for pid=2283 comm="syz.3.681" path="/dev/loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 96.629395][ T2284] IPv6: Can't replace route, no match found [ 96.657680][ T1572] EXT4-fs (loop3): unmounting filesystem. [ 96.808560][ T2277] overlayfs: failed to clone upperpath [ 96.889898][ T2321] FAULT_INJECTION: forcing a failure. [ 96.889898][ T2321] name failslab, interval 1, probability 0, space 0, times 0 [ 96.902561][ T2321] CPU: 1 PID: 2321 Comm: syz.2.692 Not tainted syzkaller #0 [ 96.909855][ T2321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 96.919934][ T2321] Call Trace: [ 96.923214][ T2321] [ 96.926144][ T2321] __dump_stack+0x21/0x24 [ 96.930492][ T2321] dump_stack_lvl+0x110/0x170 [ 96.935176][ T2321] ? __cfi_dump_stack_lvl+0x8/0x8 [ 96.940203][ T2321] ? _parse_integer_limit+0x18e/0x1d0 [ 96.945582][ T2321] dump_stack+0x15/0x24 [ 96.949740][ T2321] should_fail_ex+0x3bf/0x510 [ 96.954415][ T2321] __should_failslab+0xac/0xf0 [ 96.959183][ T2321] should_failslab+0x9/0x20 [ 96.963691][ T2321] __kmem_cache_alloc_node+0x3d/0x2d0 [ 96.969067][ T2321] ? bpf_prog_test_run_skb+0x246/0x12f0 [ 96.974624][ T2321] ? bpf_prog_test_run_skb+0x246/0x12f0 [ 96.980180][ T2321] __kmalloc+0xa4/0x1e0 [ 96.984345][ T2321] bpf_prog_test_run_skb+0x246/0x12f0 [ 96.989733][ T2321] ? __kasan_check_write+0x14/0x20 [ 96.994849][ T2321] ? __cfi_bpf_prog_test_run_skb+0x10/0x10 [ 97.000662][ T2321] bpf_prog_test_run+0x3b4/0x5c0 [ 97.005605][ T2321] ? bpf_prog_query+0x270/0x270 [ 97.010461][ T2321] ? selinux_bpf+0xce/0xf0 [ 97.014884][ T2321] ? security_bpf+0x93/0xb0 [ 97.019398][ T2321] __sys_bpf+0x5ee/0x850 [ 97.023657][ T2321] ? bpf_link_show_fdinfo+0x330/0x330 [ 97.029036][ T2321] ? __cfi_ksys_write+0x10/0x10 [ 97.033891][ T2321] ? debug_smp_processor_id+0x17/0x20 [ 97.039263][ T2321] __x64_sys_bpf+0x7c/0x90 [ 97.043677][ T2321] x64_sys_call+0x488/0x9a0 [ 97.048186][ T2321] do_syscall_64+0x4c/0xa0 [ 97.052605][ T2321] ? clear_bhb_loop+0x30/0x80 [ 97.057278][ T2321] ? clear_bhb_loop+0x30/0x80 [ 97.061951][ T2321] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 97.067861][ T2321] RIP: 0033:0x7f871939de99 [ 97.072276][ T2321] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.091891][ T2321] RSP: 002b:00007f871a191028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 97.100296][ T2321] RAX: ffffffffffffffda RBX: 00007f8719625fa0 RCX: 00007f871939de99 [ 97.108250][ T2321] RDX: 0000000000000050 RSI: 0000200000000140 RDI: 000000000000000a [ 97.116202][ T2321] RBP: 00007f871a191090 R08: 0000000000000000 R09: 0000000000000000 [ 97.124158][ T2321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.132125][ T2321] R13: 00007f8719626038 R14: 00007f8719625fa0 R15: 00007ffd348a5678 [ 97.140088][ T2321] [ 97.157046][ T2323] netlink: 'syz.1.693': attribute type 4 has an invalid length. [ 97.305355][ T2334] loop5: detected capacity change from 0 to 16 [ 97.418535][ T2334] erofs: (device loop5): mounted with root inode @ nid 36. [ 97.477659][ T729] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 97.677792][ T729] usb 3-1: Using ep0 maxpacket: 8 [ 97.684801][ T729] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 97.734525][ T2337] netlink: 8 bytes leftover after parsing attributes in process `syz.4.698'. [ 97.770847][ T729] usb 3-1: New USB device found, idVendor=0582, idProduct=00eb, bcdDevice= 0.40 [ 97.844968][ T729] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.923121][ T729] usb 3-1: Product: syz [ 97.959038][ T729] usb 3-1: Manufacturer: syz [ 98.005917][ T729] usb 3-1: SerialNumber: syz [ 98.178199][ T673] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 98.310886][ T2329] netlink: 'syz.2.696': attribute type 12 has an invalid length. [ 98.336487][ T2329] netlink: 'syz.2.696': attribute type 29 has an invalid length. [ 98.354920][ T2329] netlink: 148 bytes leftover after parsing attributes in process `syz.2.696'. [ 98.438201][ T729] usb 3-1: USB disconnect, device number 12 [ 98.484110][ T2363] netlink: 8 bytes leftover after parsing attributes in process `syz.4.710'. [ 98.577611][ T339] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 98.737583][ T339] usb 6-1: device descriptor read/64, error -71 [ 99.071234][ T28] audit: type=1400 audit(1784378944.907:434): avc: denied { mount } for pid=2347 comm="syz.1.703" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 99.093193][ T339] usb 6-1: device descriptor read/64, error -71 [ 99.778098][ T339] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 99.812178][ T2394] netlink: 8 bytes leftover after parsing attributes in process `syz.1.719'. [ 99.822372][ T2394] tipc: Started in network mode [ 99.827238][ T2394] tipc: Node identity 4246, cluster identity 4711 [ 99.833870][ T2394] tipc: Node number set to 16966 [ 99.937643][ T339] usb 6-1: device descriptor read/64, error -71 [ 100.292719][ T339] usb 6-1: device descriptor read/64, error -71 [ 101.140517][ T339] usb usb6-port1: attempt power cycle [ 101.350140][ T28] audit: type=1400 audit(1784378947.197:435): avc: denied { read write } for pid=2427 comm="syz.5.733" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 101.424450][ T28] audit: type=1400 audit(1784378947.197:436): avc: denied { open } for pid=2427 comm="syz.5.733" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 101.481196][ T28] audit: type=1400 audit(1784378947.227:437): avc: denied { ioctl } for pid=2427 comm="syz.5.733" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 ioctlcmd=0xf506 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 101.550962][ T28] audit: type=1400 audit(1784378947.327:438): avc: denied { open } for pid=2436 comm="syz.2.736" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=29992 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 101.593757][ T2441] netlink: 68 bytes leftover after parsing attributes in process `syz.3.737'. [ 101.681116][ T28] audit: type=1400 audit(1784378947.527:439): avc: denied { setopt } for pid=2397 comm="syz.1.721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 101.760441][ T28] audit: type=1400 audit(1784378947.557:440): avc: denied { read } for pid=2397 comm="syz.1.721" lport=3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 101.899923][ T28] audit: type=1400 audit(1784378947.747:441): avc: denied { getopt } for pid=2397 comm="syz.1.721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 101.988061][ T2458] netlink: 'syz.4.742': attribute type 4 has an invalid length. [ 102.048531][ T2460] loop5: detected capacity change from 0 to 128 [ 102.084673][ T2460] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 102.108066][ T2460] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 102.126841][ T2460] ext2 filesystem being mounted at /78/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.171053][ T583] EXT4-fs (loop5): unmounting filesystem. [ 102.215469][ T2470] FAULT_INJECTION: forcing a failure. [ 102.215469][ T2470] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 102.229641][ T2470] CPU: 0 PID: 2470 Comm: syz.2.746 Not tainted syzkaller #0 [ 102.236943][ T2470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 102.246995][ T2470] Call Trace: [ 102.250272][ T2470] [ 102.253267][ T2470] __dump_stack+0x21/0x24 [ 102.257600][ T2470] dump_stack_lvl+0x110/0x170 [ 102.262276][ T2470] ? __cfi_dump_stack_lvl+0x8/0x8 [ 102.267301][ T2470] dump_stack+0x15/0x24 [ 102.271462][ T2470] should_fail_ex+0x3bf/0x510 [ 102.276134][ T2470] should_fail+0xb/0x10 [ 102.280282][ T2470] should_fail_usercopy+0x1a/0x20 [ 102.284209][ T2443] loop3: detected capacity change from 0 to 131072 [ 102.285296][ T2470] _copy_from_user+0x1e/0xc0 [ 102.296346][ T2470] bpf_prog_test_run_skb+0x279/0x12f0 [ 102.299963][ T2443] F2FS-fs (loop3): Invalid log sectorsize (0) [ 102.301730][ T2470] ? __cfi_bpf_prog_test_run_skb+0x10/0x10 [ 102.307792][ T2443] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 102.313551][ T2470] bpf_prog_test_run+0x3b4/0x5c0 [ 102.322166][ T2443] F2FS-fs (loop3): invalid crc value [ 102.326617][ T2470] ? bpf_prog_query+0x270/0x270 [ 102.336703][ T2470] ? selinux_bpf+0xce/0xf0 [ 102.341125][ T2470] ? security_bpf+0x93/0xb0 [ 102.345636][ T2470] __sys_bpf+0x5ee/0x850 [ 102.349924][ T2470] ? bpf_link_show_fdinfo+0x330/0x330 [ 102.355300][ T2470] ? __cfi_ksys_write+0x10/0x10 [ 102.360160][ T2470] ? debug_smp_processor_id+0x17/0x20 [ 102.365535][ T2470] __x64_sys_bpf+0x7c/0x90 [ 102.369951][ T2470] x64_sys_call+0x488/0x9a0 [ 102.370123][ T2443] F2FS-fs (loop3): Found nat_bits in checkpoint [ 102.374454][ T2470] do_syscall_64+0x4c/0xa0 [ 102.385070][ T2470] ? clear_bhb_loop+0x30/0x80 [ 102.389743][ T2470] ? clear_bhb_loop+0x30/0x80 [ 102.394412][ T2470] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 102.400299][ T2470] RIP: 0033:0x7f871939de99 [ 102.404712][ T2470] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.406401][ T2443] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 102.424311][ T2470] RSP: 002b:00007f871a191028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 102.424337][ T2470] RAX: ffffffffffffffda RBX: 00007f8719625fa0 RCX: 00007f871939de99 [ 102.431366][ T2443] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 102.439719][ T2470] RDX: 0000000000000050 RSI: 0000200000000140 RDI: 000000000000000a [ 102.439731][ T2470] RBP: 00007f871a191090 R08: 0000000000000000 R09: 0000000000000000 [ 102.439742][ T2470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 102.478984][ T2470] R13: 00007f8719626038 R14: 00007f8719625fa0 R15: 00007ffd348a5678 [ 102.486960][ T2470] [ 102.544244][ T2481] netlink: 'syz.2.749': attribute type 4 has an invalid length. [ 102.570627][ T2485] netlink: 8 bytes leftover after parsing attributes in process `syz.5.751'. [ 103.844888][ T28] audit: type=1400 audit(1784378949.687:442): avc: denied { unmount } for pid=1572 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 104.309688][ T2523] loop2: detected capacity change from 0 to 512 [ 104.347982][ T2523] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 104.357072][ T2523] ext4 filesystem being mounted at /119/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.442681][ T289] EXT4-fs (loop2): unmounting filesystem. [ 105.313067][ T2503] loop3: detected capacity change from 0 to 131072 [ 105.341065][ T2549] netlink: 68 bytes leftover after parsing attributes in process `syz.4.777'. [ 105.418497][ T2503] F2FS-fs (loop3): invalid crc value [ 105.460214][ T2503] F2FS-fs (loop3): Found nat_bits in checkpoint [ 105.564206][ T2503] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 105.621644][ T2503] F2FS-fs (loop3): Corrupted max_depth of 3: 16842753 [ 105.631060][ T28] audit: type=1400 audit(1784378951.477:443): avc: denied { mount } for pid=2572 comm="syz.5.784" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 105.672179][ T28] audit: type=1400 audit(1784378951.507:444): avc: denied { unmount } for pid=583 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 105.888640][ T28] audit: type=1400 audit(1784378951.737:445): avc: denied { validate_trans } for pid=2580 comm="syz.3.787" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 105.911386][ T8] Bluetooth: hci0: Frame reassembly failed (-84) [ 105.917933][ T2538] loop2: detected capacity change from 0 to 131072 [ 105.925118][ T2581] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 105.933770][ T2581] netlink: 24 bytes leftover after parsing attributes in process `syz.3.787'. [ 105.937091][ T2538] F2FS-fs (loop2): Test dummy encryption mode enabled [ 105.949999][ T2538] F2FS-fs (loop2): invalid crc value [ 105.956684][ T2538] F2FS-fs (loop2): Found nat_bits in checkpoint [ 105.992373][ T2538] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 106.002605][ T2588] x_tables: duplicate underflow at hook 3 [ 106.019558][ T28] audit: type=1400 audit(1784378951.867:446): avc: denied { getopt } for pid=2580 comm="syz.3.787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 106.029732][ T2538] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 106.153801][ T28] audit: type=1400 audit(1784378951.997:447): avc: denied { getopt } for pid=2602 comm="syz.1.795" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 106.986578][ T2623] netlink: 8 bytes leftover after parsing attributes in process `syz.4.801'. [ 107.133955][ T2635] SELinux: failed to load policy [ 107.254336][ T2643] netlink: 28 bytes leftover after parsing attributes in process `syz.2.810'. [ 107.273392][ T2643] netlink: 4 bytes leftover after parsing attributes in process `syz.2.810'. [ 107.292335][ T2643] netlink: 8 bytes leftover after parsing attributes in process `syz.2.810'. [ 107.927593][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 108.513569][ T2681] netlink: 40 bytes leftover after parsing attributes in process `syz.3.828'. [ 108.524907][ T2639] loop5: detected capacity change from 0 to 131072 [ 108.557888][ T2639] F2FS-fs (loop5): Invalid log sectorsize (0) [ 108.586332][ T2639] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 108.613760][ T2639] F2FS-fs (loop5): invalid crc value [ 108.631499][ T2639] F2FS-fs (loop5): Found nat_bits in checkpoint [ 108.665850][ T2639] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 108.672962][ T2639] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 108.814031][ T2699] SELinux: failed to load policy [ 109.086151][ T2702] loop3: detected capacity change from 0 to 512 [ 109.102023][ T2702] EXT4-fs: Ignoring removed nomblk_io_submit option [ 109.131127][ T2702] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 109.146592][ T2704] netlink: 'syz.4.835': attribute type 4 has an invalid length. [ 109.251289][ T2702] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 109.263597][ T2702] ext4 filesystem being mounted at /57/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.547073][ T2702] EXT4-fs (loop3): shut down requested (0) [ 109.669200][ T28] audit: type=1400 audit(1784378955.517:448): avc: denied { read } for pid=85 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 109.696872][ T2713] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=16 [ 109.839489][ T2713] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=16 [ 109.922813][ T28] audit: type=1400 audit(1784378955.537:449): avc: denied { search } for pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 109.969393][ T28] audit: type=1400 audit(1784378955.537:450): avc: denied { write } for pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 109.990888][ T28] audit: type=1400 audit(1784378955.537:451): avc: denied { add_name } for pid=85 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 110.013566][ T1572] EXT4-fs (loop3): unmounting filesystem. [ 110.211330][ T28] audit: type=1400 audit(1784378955.537:452): avc: denied { create } for pid=85 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 110.252469][ T2725] loop2: detected capacity change from 0 to 1024 [ 110.318920][ T2725] EXT4-fs error (device loop2): ext4_acquire_dquot:6828: comm syz.2.842: Failed to acquire dquot type 0 [ 110.379052][ T2725] EXT4-fs error (device loop2): mb_free_blocks:1839: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 110.398903][ T2741] netlink: 8 bytes leftover after parsing attributes in process `syz.5.847'. [ 110.429289][ T2725] EXT4-fs (loop2): 1 truncate cleaned up [ 110.440366][ T2725] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 110.500506][ T2725] EXT4-fs error (device loop2): ext4_acquire_dquot:6828: comm syz.2.842: Failed to acquire dquot type 0 [ 110.522338][ T2725] EXT4-fs error (device loop2): ext4_acquire_dquot:6828: comm syz.2.842: Failed to acquire dquot type 0 [ 110.594977][ T2758] loop3: detected capacity change from 0 to 16 [ 110.601816][ T2758] erofs: (device loop3): mounted with root inode @ nid 36. [ 110.767681][ T2712] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 110.878317][ T2772] mmap: syz.1.861 (2772) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 110.969611][ T2712] usb 6-1: unable to get BOS descriptor or descriptor too short [ 110.985261][ T2712] usb 6-1: config 1 interface 0 altsetting 254 bulk endpoint 0x82 has invalid maxpacket 1024 [ 111.036946][ T2712] usb 6-1: config 1 interface 0 altsetting 254 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 111.103675][ T2712] usb 6-1: config 1 interface 0 has no altsetting 0 [ 111.140969][ T2712] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 111.186841][ T2712] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.228852][ T2712] usb 6-1: Product: syz [ 111.250819][ T2712] usb 6-1: Manufacturer: syz [ 111.269857][ T2780] netlink: 8 bytes leftover after parsing attributes in process `syz.1.865'. [ 111.278910][ T2712] usb 6-1: SerialNumber: syz [ 111.304471][ T2747] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 111.312562][ T2747] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 111.446873][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 111.446886][ T28] audit: type=1400 audit(1784378957.287:456): avc: denied { bind } for pid=2781 comm="syz.1.866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 111.510097][ T673] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 111.526984][ T2712] cdc_ether: probe of 6-1:1.0 failed with error -22 [ 111.537789][ T2712] usb 6-1: USB disconnect, device number 11 [ 111.657625][ T331] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 111.838698][ T331] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 58771, setting to 1024 [ 111.849904][ T331] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 111.860157][ T331] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 111.874691][ T331] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 111.884059][ T331] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.892228][ T331] usb 3-1: Product: syz [ 111.896506][ T331] usb 3-1: Manufacturer: syz [ 111.901282][ T331] usb 3-1: SerialNumber: syz [ 111.918195][ T2725] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 111.925964][ T331] hub 3-1:1.0: bad descriptor, ignoring hub [ 111.931930][ T331] hub: probe of 3-1:1.0 failed with error -5 [ 112.160563][ T331] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 13 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 112.228230][ T331] usb 3-1: USB disconnect, device number 13 [ 112.836191][ T2814] overlayfs: missing 'lowerdir' [ 113.637657][ T28] audit: type=1400 audit(1784378958.667:457): avc: denied { sqpoll } for pid=2811 comm="syz.1.878" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 113.700416][ T289] EXT4-fs (loop2): unmounting filesystem. [ 113.732099][ T28] audit: type=1400 audit(1784378959.527:458): avc: denied { lock } for pid=2819 comm="syz.1.880" path="socket:[32136]" dev="sockfs" ino=32136 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 113.794483][ T331] usblp0: removed [ 113.861011][ T2832] netlink: 56 bytes leftover after parsing attributes in process `syz.4.885'. [ 113.871637][ T2833] netlink: 256 bytes leftover after parsing attributes in process `syz.1.884'. [ 113.889912][ T2832] overlayfs: failed to clone upperpath [ 113.981829][ T28] audit: type=1400 audit(1784378959.827:459): avc: denied { lock } for pid=2844 comm="syz.4.890" path="socket:[31592]" dev="sockfs" ino=31592 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 114.024836][ T2848] netlink: 'syz.5.891': attribute type 4 has an invalid length. [ 114.963424][ T2858] SELinux: failed to load policy [ 115.025282][ T2863] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=20072 sclass=netlink_route_socket pid=2863 comm=syz.1.897 [ 115.070199][ T28] audit: type=1400 audit(1784378960.917:460): avc: denied { watch_reads } for pid=2865 comm="syz.2.899" path="/140" dev="tmpfs" ino=754 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 115.284126][ T2877] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 115.294764][ T28] audit: type=1400 audit(1784378961.127:461): avc: denied { getopt } for pid=2862 comm="syz.1.897" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 115.468437][ T2892] netlink: 8 bytes leftover after parsing attributes in process `syz.3.908'. [ 115.562499][ T2853] loop5: detected capacity change from 0 to 131072 [ 115.578193][ T2853] F2FS-fs (loop5): Invalid log sectorsize (0) [ 115.585348][ T2901] SELinux: failed to load policy [ 115.590359][ T2853] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 115.606627][ T28] audit: type=1400 audit(1784378961.447:462): avc: denied { write } for pid=2902 comm="syz.3.913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 115.615127][ T2853] F2FS-fs (loop5): invalid crc value [ 115.631717][ T2712] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 115.740860][ T2853] F2FS-fs (loop5): Found nat_bits in checkpoint [ 115.817612][ T2712] usb 3-1: Using ep0 maxpacket: 16 [ 115.824813][ T2712] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 115.836747][ T2712] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 115.850833][ T2712] usb 3-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 116.104166][ T2853] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 116.111467][ T2712] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.121066][ T2853] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 116.247322][ T2712] usb 3-1: config 0 descriptor?? [ 116.288744][ T2712] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 116.538118][ T2932] SELinux: failed to load policy [ 117.789773][ T2955] netlink: 256 bytes leftover after parsing attributes in process `syz.1.931'. [ 117.836026][ T2957] loop3: detected capacity change from 0 to 128 [ 118.061926][ T2978] EXT4-fs error (device sda1): __ext4_get_inode_loc:4522: comm syz.3.942: Invalid inode table block 0 in block_group 0 [ 118.087510][ T2978] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5954: Corrupt filesystem [ 118.106952][ T2978] EXT4-fs error (device sda1): ext4_dirty_inode:6158: inode #2035: comm syz.3.942: mark_inode_dirty error [ 118.122064][ T2982] EXT4-fs error (device sda1): __ext4_get_inode_loc:4522: comm syz.1.943: Invalid inode table block 0 in block_group 0 [ 118.135844][ T2978] EXT4-fs error (device sda1): __ext4_get_inode_loc:4522: comm syz.3.942: Invalid inode table block 0 in block_group 0 [ 118.147674][ T2982] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5954: Corrupt filesystem [ 118.167719][ T2982] EXT4-fs error (device sda1): ext4_dirty_inode:6158: inode #2030: comm syz.1.943: mark_inode_dirty error [ 118.169872][ T2978] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5954: Corrupt filesystem [ 118.198891][ T2982] EXT4-fs error (device sda1): __ext4_get_inode_loc:4522: comm syz.1.943: Invalid inode table block 0 in block_group 0 [ 118.216632][ T2978] EXT4-fs error (device sda1): ext4_dirty_inode:6158: inode #2035: comm syz.3.942: mark_inode_dirty error [ 118.226946][ T2984] netlink: 8 bytes leftover after parsing attributes in process `syz.1.943'. [ 118.476748][ T729] usb 3-1: USB disconnect, device number 14 [ 119.084361][ T3012] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 119.099507][ T28] audit: type=1400 audit(1784378964.947:463): avc: denied { remount } for pid=3006 comm="syz.1.952" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 119.149572][ T28] audit: type=1400 audit(1784378964.967:464): avc: denied { read } for pid=3006 comm="syz.1.952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 119.170587][ T3012] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 119.330044][ T3028] SELinux: failed to load policy [ 119.384106][ T3033] loop3: detected capacity change from 0 to 512 [ 119.421961][ T3033] EXT4-fs: Ignoring removed nomblk_io_submit option [ 119.449250][ T3033] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 119.459191][ T3033] EXT4-fs (loop3): 1 truncate cleaned up [ 119.469175][ T3033] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 119.476802][ T3039] netlink: 'syz.5.955': attribute type 7 has an invalid length. [ 119.518349][ T3039] netlink: 'syz.5.955': attribute type 8 has an invalid length. [ 119.807482][ T28] audit: type=1400 audit(1784378965.647:465): avc: denied { rmdir } for pid=1572 comm="syz-executor" name=".index" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 119.838297][ T1572] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294901760 (level 0) [ 119.862846][ T1572] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294967295 (level 1) [ 119.892884][ T1572] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 65535 (level 2) [ 119.923836][ T1572] EXT4-fs (loop3): unmounting filesystem. [ 120.059673][ T3060] netlink: 'syz.3.965': attribute type 4 has an invalid length. [ 120.326029][ T28] audit: type=1400 audit(1784378966.167:466): avc: denied { create } for pid=3062 comm="syz.4.971" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 121.288322][ T3098] netlink: 256 bytes leftover after parsing attributes in process `syz.5.986'. [ 121.318502][ T3102] SELinux: failed to load policy [ 121.412041][ T3105] loop5: detected capacity change from 0 to 40427 [ 121.421011][ T3107] netlink: 'syz.2.990': attribute type 4 has an invalid length. [ 121.438594][ T3105] F2FS-fs (loop5): Invalid log_blocksize (64), supports only 12 [ 121.451443][ T3105] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 121.462194][ T3105] F2FS-fs (loop5): Project quota feature not enabled. Cannot enable project quota enforcement. [ 121.761725][ T3119] loop5: detected capacity change from 0 to 256 [ 121.883764][ T3119] exfat: Deprecated parameter 'utf8' [ 121.971751][ T3119] exfat: Deprecated parameter 'namecase' [ 122.118988][ T3119] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xb82ee927, utbl_chksum : 0xe619d30d) [ 122.399560][ T28] audit: type=1400 audit(1784378968.247:467): avc: denied { lock } for pid=3128 comm="syz.3.1000" path="/dev/ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 122.461576][ T28] audit: type=1400 audit(1784378968.267:468): avc: denied { create } for pid=3128 comm="syz.3.1000" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 122.511179][ T3145] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1008'. [ 122.543356][ T3153] SELinux: failed to load policy [ 122.560654][ T3157] loop5: detected capacity change from 0 to 512 [ 122.576334][ T3157] EXT4-fs: test_dummy_encryption requires encrypt feature [ 122.797680][ T2712] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 122.987746][ T2712] usb 3-1: Using ep0 maxpacket: 16 [ 122.994815][ T2712] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 123.073400][ T3175] EXT4-fs error: 395 callbacks suppressed [ 123.073436][ T3175] EXT4-fs error (device sda1): __ext4_get_inode_loc:4522: comm syz.5.1020: Invalid inode table block 0 in block_group 0 [ 123.108509][ T2712] usb 3-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 123.153037][ T2712] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.181919][ T3175] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5954: Corrupt filesystem [ 123.226137][ T2712] usb 3-1: config 0 descriptor?? [ 123.265728][ T3175] EXT4-fs error (device sda1): ext4_dirty_inode:6158: inode #2028: comm syz.5.1020: mark_inode_dirty error [ 123.266013][ T2712] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 123.388712][ T3176] tipc: Can't bind to reserved service type 0 [ 123.496371][ T3136] EXT4-fs error (device sda1): __ext4_get_inode_loc:4522: comm syz.2.1006: Invalid inode table block 0 in block_group 0 [ 123.525646][ T3136] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5954: Corrupt filesystem [ 123.547671][ T28] audit: type=1400 audit(1784378969.367:469): avc: denied { ioctl } for pid=3175 comm="syz.5.1020" path="/dev/cpu/1/msr" dev="devtmpfs" ino=88 ioctlcmd=0x63a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 123.573747][ T3178] EXT4-fs error (device sda1): __ext4_get_inode_loc:4522: comm syz.5.1021: Invalid inode table block 0 in block_group 0 [ 123.591244][ T3136] EXT4-fs error (device sda1): ext4_dirty_inode:6158: inode #2032: comm syz.2.1006: mark_inode_dirty error [ 123.603107][ T3136] EXT4-fs error (device sda1): __ext4_get_inode_loc:4522: comm syz.2.1006: Invalid inode table block 0 in block_group 0 [ 123.616424][ T3179] EXT4-fs error (device sda1): __ext4_get_inode_loc:4522: comm syz.4.1022: Invalid inode table block 0 in block_group 0 [ 123.622080][ T3178] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5954: Corrupt filesystem [ 123.698183][ T3187] loop5: detected capacity change from 0 to 512 [ 123.732544][ T3180] overlayfs: failed to clone upperpath [ 123.739466][ T3180] device batadv_slave_0 entered promiscuous mode [ 123.746215][ T3180] incfs: Options parsing error. -22 [ 123.752787][ T3187] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 123.754917][ T3180] incfs: mount failed -22 [ 123.766522][ T3187] ext4 filesystem being mounted at /133/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.781843][ T3179] device batadv_slave_0 left promiscuous mode [ 123.787494][ T3193] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1026'. [ 123.835395][ T3199] ------------[ cut here ]------------ [ 123.840999][ T3199] WARNING: CPU: 0 PID: 3199 at mm/page_alloc.c:5901 __alloc_pages+0x2cc/0x610 [ 123.850048][ T3199] Modules linked in: [ 123.854242][ T3199] CPU: 0 PID: 3199 Comm: syz.3.1028 Not tainted syzkaller #0 [ 123.861872][ T3199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 123.872087][ T3199] RIP: 0010:__alloc_pages+0x2cc/0x610 [ 123.877501][ T3199] Code: 0c 25 28 00 00 00 48 3b 8c 24 e0 00 00 00 0f 85 a3 00 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 c6 05 7b 8b dd 05 01 <0f> 0b eb 8f a9 00 00 08 00 48 8b 54 24 10 75 17 44 89 f6 81 e6 7f [ 123.897229][ T3199] RSP: 0018:ffffc90006aa75a0 EFLAGS: 00010246 [ 123.903419][ T3199] RAX: ffffc90006aa7600 RBX: 000000000000000f RCX: 0000000000000000 [ 123.911633][ T3199] RDX: 0000000000000018 RSI: 0000000000000000 RDI: ffffc90006aa7628 [ 123.919817][ T3199] RBP: ffffc90006aa76d0 R08: ffffc90006aa7627 R09: ffffc90006aa7610 [ 123.927855][ T3199] R10: dffffc0000000000 R11: fffff52000d54ec5 R12: dffffc0000000000 [ 123.933264][ T3212] EXT4-fs: Ignoring removed bh option [ 123.935827][ T3199] R13: 0000000000000000 R14: 0000000000040dc0 R15: 1ffff92000d54eb8 [ 123.935844][ T3199] FS: 00007f99e9df66c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 123.951650][ T3212] ext4: Unknown parameter 'no@' [ 123.958143][ T3199] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 123.958160][ T3199] CR2: 000000110c31f5d9 CR3: 000000011ca80000 CR4: 00000000003506b0 [ 123.958176][ T3199] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 123.967632][ T28] audit: type=1400 audit(1784378969.777:470): avc: denied { remount } for pid=3186 comm="syz.5.1025" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 123.969684][ T3199] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 124.013015][ T3199] Call Trace: [ 124.016276][ T3199] [ 124.019215][ T3199] ? __cfi___alloc_pages+0x10/0x10 [ 124.024331][ T3199] __kmalloc_large_node+0xa1/0x1c0 [ 124.029456][ T3199] ? hashtab_init+0xca/0x160 [ 124.034042][ T3199] __kmalloc+0xe3/0x1e0 [ 124.038201][ T3199] hashtab_init+0xca/0x160 [ 124.042616][ T3199] symtab_init+0x40/0x60 [ 124.046844][ T3199] class_read+0x1fa/0xa80 [ 124.051183][ T3199] ? __kasan_kmalloc+0x95/0xb0 [ 124.055945][ T3199] ? __cfi_class_read+0x10/0x10 [ 124.060817][ T3199] ? hashtab_init+0xf0/0x160 [ 124.065406][ T3199] ? __cfi_class_read+0x10/0x10 [ 124.070290][ T3199] policydb_read+0xb21/0x25c0 [ 124.074976][ T3199] ? __cfi_policydb_read+0x10/0x10 [ 124.080110][ T3199] ? __kasan_kmalloc+0x95/0xb0 [ 124.084875][ T3199] ? security_load_policy+0x120/0xeb0 [ 124.090473][ T3199] ? kmalloc_trace+0x40/0xb0 [ 124.095066][ T3199] security_load_policy+0x15b/0xeb0 [ 124.100398][ T3199] ? queued_spin_lock_slowpath+0x47/0x50 [ 124.106023][ T3199] ? _raw_spin_lock+0xe4/0xf0 [ 124.110710][ T3199] ? __cfi__raw_spin_lock+0x10/0x10 [ 124.115910][ T3199] ? __cfi___vmalloc_node_range+0x10/0x10 [ 124.121646][ T3199] ? __cfi_security_load_policy+0x10/0x10 [ 124.127362][ T3199] ? __kasan_check_write+0x14/0x20 [ 124.132478][ T3199] sel_write_load+0x386/0x600 [ 124.137156][ T3199] ? __cfi_sel_write_load+0x10/0x10 [ 124.142369][ T3199] ? security_file_permission+0x94/0xb0 [ 124.147928][ T3199] ? __cfi_sel_write_load+0x10/0x10 [ 124.153125][ T3199] vfs_write+0x3fb/0xd00 [ 124.157353][ T3199] ? __cfi_vfs_write+0x10/0x10 [ 124.162121][ T3199] ? __kasan_check_write+0x14/0x20 [ 124.167228][ T3199] ? mutex_lock+0x93/0x1b0 [ 124.171674][ T3199] ? __cfi_mutex_lock+0x10/0x10 [ 124.176525][ T3199] ? __fdget_pos+0x2cd/0x380 [ 124.181133][ T3199] ? ksys_write+0x70/0x260 [ 124.185551][ T3199] ksys_write+0x14a/0x260 [ 124.189913][ T3199] ? __cfi_ksys_write+0x10/0x10 [ 124.194760][ T3199] ? fpregs_restore_userregs+0x128/0x260 [ 124.200398][ T3199] __x64_sys_write+0x7b/0x90 [ 124.204985][ T3199] x64_sys_call+0x27b/0x9a0 [ 124.209497][ T3199] do_syscall_64+0x4c/0xa0 [ 124.213908][ T3199] ? clear_bhb_loop+0x30/0x80 [ 124.218589][ T3199] ? clear_bhb_loop+0x30/0x80 [ 124.223292][ T3199] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 124.229212][ T3199] RIP: 0033:0x7f99e8f9de99 [ 124.233619][ T3199] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.253237][ T3199] RSP: 002b:00007f99e9df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 124.261658][ T3199] RAX: ffffffffffffffda RBX: 00007f99e9225fa0 RCX: 00007f99e8f9de99 [ 124.269667][ T3199] RDX: 0000000000000065 RSI: 0000200000000280 RDI: 0000000000000003 [ 124.277646][ T3199] RBP: 00007f99e9033eaf R08: 0000000000000000 R09: 0000000000000000 [ 124.285606][ T3199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 124.293579][ T3199] R13: 00007f99e9226038 R14: 00007f99e9225fa0 R15: 00007fff4cfa8758 [ 124.301563][ T3199] [ 124.304564][ T3199] ---[ end trace 0000000000000000 ]--- [ 124.310386][ T3199] SELinux: failed to load policy [ 124.330144][ T3218] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1035'. [ 125.576069][ T2712] usb 3-1: USB disconnect, device number 15 [ 125.860958][ T3282] loop2: detected capacity change from 0 to 16 [ 125.870229][ T3282] erofs: (device loop2): mounted with root inode @ nid 36. [ 125.989599][ T673] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 126.016026][ T3290] overlayfs: unrecognized mount option "euid<00000000000000000000" or missing value [ 126.337663][ T2712] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 126.609992][ T2712] usb 4-1: Using ep0 maxpacket: 16 [ 126.846800][ T2712] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 126.952257][ T2712] usb 4-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 127.046384][ T2712] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.074219][ T2712] usb 4-1: config 0 descriptor?? [ 127.091388][ T2712] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 127.173760][ T3316] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1075'. [ 129.433010][ T3336] EXT4-fs error: 293 callbacks suppressed [ 129.433034][ T3336] EXT4-fs error (device sda1): __ext4_get_inode_loc:4522: comm syz.4.1084: Invalid inode table block 0 in block_group 0 [ 129.451573][ T3336] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5954: Corrupt filesystem [ 129.460903][ T3336] EXT4-fs error (device sda1): ext4_dirty_inode:6158: inode #2038: comm syz.4.1084: mark_inode_dirty error [ 129.472587][ T3336] EXT4-fs error (device sda1): __ext4_get_inode_loc:4522: comm syz.4.1084: Invalid inode table block 0 in block_group 0 [ 129.485101][ T3336] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5954: Corrupt filesystem [ 129.494733][ T3336] EXT4-fs error (device sda1): ext4_dirty_inode:6158: inode #2038: comm syz.4.1084: mark_inode_dirty error [ 129.495637][ T3345] EXT4-fs error (device sda1): __ext4_get_inode_loc:4522: comm syz.2.1086: Invalid inode table block 0 in block_group 0 [ 129.506222][ T3336] EXT4-fs error (device sda1): __ext4_get_inode_loc:4522: comm syz.4.1084: Invalid inode table block 0 in block_group 0 [ 129.522876][ T1300] usb 4-1: USB disconnect, device number 9 [ 129.531115][ T3336] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5954: Corrupt filesystem [ 129.546177][ T3336] EXT4-fs error (device sda1): ext4_dirty_inode:6158: inode #2038: comm syz.4.1084: mark_inode_dirty error [ 129.689759][ T3372] x_tables: duplicate underflow at hook 3 [ 130.928322][ T331] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 131.107664][ T331] usb 3-1: Using ep0 maxpacket: 16 [ 131.114483][ T331] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 131.126018][ T331] usb 3-1: New USB device found, idVendor=0582, idProduct=0016, bcdDevice= 0.40 [ 131.135220][ T331] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.143215][ T331] usb 3-1: Product: syz [ 131.147361][ T331] usb 3-1: Manufacturer: syz [ 131.151947][ T331] usb 3-1: SerialNumber: syz [ 131.236355][ T3416] loop3: detected capacity change from 0 to 16 [ 131.244595][ T3416] erofs: (device loop3): mounted with root inode @ nid 36. [ 131.409352][ T331] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 131.421231][ T331] snd-usb-audio: probe of 3-1:1.0 failed with error -2 [ 131.435524][ T331] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 131.450569][ T331] snd-usb-audio: probe of 3-1:1.1 failed with error -2 [ 131.465654][ T331] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 131.492670][ T331] snd-usb-audio: probe of 3-1:1.2 failed with error -2 [ 131.505985][ T309] udevd[309]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 131.523222][ T331] usb 3-1: USB disconnect, device number 16 [ 134.041538][ T583] EXT4-fs (loop5): unmounting filesystem. [ 134.057148][ T3452] loop3: detected capacity change from 0 to 256 [ 134.066912][ T3452] exfat: Deprecated parameter 'utf8' [ 134.075201][ T3452] exfat: Deprecated parameter 'utf8' [ 134.076373][ T3455] SELinux: failed to load policy [ 134.080927][ T3452] exfat: Deprecated parameter 'utf8' [ 134.111391][ T3452] exFAT-fs (loop3): Invalid boot checksum (boot checksum : 0x1119abd0, checksum : 0x1119dbd0) [ 134.129974][ T3452] exFAT-fs (loop3): invalid boot region [ 134.135587][ T3452] exFAT-fs (loop3): failed to recognize exfat type [ 135.011304][ T3466] EXT4-fs error: 224 callbacks suppressed [ 135.011321][ T3466] EXT4-fs error (device sda1): __ext4_get_inode_loc:4522: comm syz.1.1132: Invalid inode table block 0 in block_group 0 [ 135.029709][ T3466] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5954: Corrupt filesystem [ 135.039004][ T3466] EXT4-fs error (device sda1): ext4_dirty_inode:6158: inode #2030: comm syz.1.1132: mark_inode_dirty error [ 135.050668][ T3466] EXT4-fs error (device sda1): __ext4_get_inode_loc:4522: comm syz.1.1132: Invalid inode table block 0 in block_group 0 [ 135.063188][ T3466] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5954: Corrupt filesystem [ 135.072475][ T3466] EXT4-fs error (device sda1): ext4_dirty_inode:6158: inode #2030: comm syz.1.1132: mark_inode_dirty error [ 135.083971][ T3466] EXT4-fs error (device sda1): __ext4_get_inode_loc:4522: comm syz.1.1132: Invalid inode table block 0 in block_group 0 [ 135.096479][ T3466] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5954: Corrupt filesystem [ 135.105765][ T3466] EXT4-fs error (device sda1): ext4_dirty_inode:6158: inode #2030: comm syz.1.1132: mark_inode_dirty error [ 135.202032][ T3475] EXT4-fs error (device sda1): __ext4_get_inode_loc:4522: comm syz.4.1133: Invalid inode table block 0 in block_group 0 [ 135.357587][ T331] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 137.117624][ T331] usb 3-1: Using ep0 maxpacket: 16 [ 137.136680][ T331] usb 3-1: device descriptor read/all, error -71 [ 138.599557][ T3557] SELinux: failed to load policy [ 139.015013][ T3585] netlink: 'syz.2.1168': attribute type 4 has an invalid length. [ 141.368004][ T24] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 141.404385][ T3588] loop5: detected capacity change from 0 to 16 [ 141.446586][ T3588] erofs: (device loop5): mounted with root inode @ nid 36. [ 141.489639][ T3590] EXT4-fs error: 182 callbacks suppressed [ 141.489652][ T3590] EXT4-fs error (device sda1): __ext4_get_inode_loc:4522: comm syz.1.1173: Invalid inode table block 0 in block_group 0 [ 141.494213][ T3589] EXT4-fs error (device sda1): __ext4_get_inode_loc:4522: comm syz.2.1174: Invalid inode table block 0 in block_group 0 [ 141.497349][ T3590] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5954: Corrupt filesystem [ 141.517281][ T3591] EXT4-fs error (device sda1): __ext4_get_inode_loc:4522: comm syz.4.1169: Invalid inode table block 0 in block_group 0 [ 141.520823][ T3589] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5954: Corrupt filesystem [ 141.529846][ T3591] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5954: Corrupt filesystem [ 141.542886][ T673] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 141.551718][ T3578] EXT4-fs error (device sda1): __ext4_get_inode_loc:4522: comm syz.5.1171: Invalid inode table block 0 in block_group 0 [ 141.565673][ T3589] EXT4-fs error (device sda1): ext4_dirty_inode:6158: inode #2032: comm syz.2.1174: mark_inode_dirty error [ 141.570984][ T3578] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5954: Corrupt filesystem [ 141.584565][ T3589] EXT4-fs error (device sda1): __ext4_get_inode_loc:4522: comm syz.2.1174: Invalid inode table block 0 in block_group 0 [ 141.658177][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 141.665307][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.675635][ T24] usb 4-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 141.684779][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.867064][ T24] usb 4-1: config 0 descriptor?? [ 142.035600][ T3616] 8021q: VLANs not supported on ip_vti0 [ 142.049994][ T24] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 142.154451][ T24] usb 4-1: USB disconnect, device number 10 [ 142.166058][ T3622] netlink: 'syz.1.1184': attribute type 8 has an invalid length. [ 142.173892][ T3622] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1184'. [ 142.182951][ T3622] netlink: 'syz.1.1184': attribute type 8 has an invalid length. [ 142.190762][ T3622] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1184'. [ 142.200976][ T3622] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1184'. [ 142.210001][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 142.217634][ T3622] netlink: 'syz.1.1184': attribute type 8 has an invalid length. [ 142.225353][ T3622] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1184'. [ 142.234328][ T3622] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1184'. [ 142.243549][ T3622] netlink: 'syz.1.1184': attribute type 8 has an invalid length. [ 142.251339][ T3622] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1184'. [ 142.260334][ T3622] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1184'. [ 142.269567][ T3622] netlink: 'syz.1.1184': attribute type 8 has an invalid length. [ 142.277343][ T3622] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1184'. [ 142.286360][ T3622] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1184'. [ 142.295556][ T3622] netlink: 'syz.1.1184': attribute type 8 has an invalid length. [ 142.303319][ T3622] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1184'. [ 142.312560][ T3622] netlink: 'syz.1.1184': attribute type 8 has an invalid length. [ 142.320648][ T3622] netlink: 'syz.1.1184': attribute type 8 has an invalid length. [ 142.328662][ T3622] netlink: 'syz.1.1184': attribute type 8 has an invalid length. [ 143.820747][ T3659] SELinux: failed to load policy [ 144.871295][ T3694] loop2: detected capacity change from 0 to 16 [ 144.878938][ T3694] erofs: (device loop2): mounted with root inode @ nid 36. [ 144.887002][ T24] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 144.913221][ T673] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 145.047638][ T24] usb 4-1: device descriptor read/64, error -71 [ 145.071999][ T3706] loop5: detected capacity change from 0 to 256 [ 145.079580][ T3706] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 145.090315][ T3706] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 145.114467][ T3706] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 145.286606][ T3728] SELinux: policydb version 16405 does not match my version range 15-33 [ 145.295096][ T3728] SELinux: failed to load policy [ 145.337892][ T24] usb 4-1: device descriptor read/64, error -71 [ 145.597613][ T1300] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 145.607688][ T24] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 145.757592][ T24] usb 4-1: device descriptor read/64, error -71 [ 145.771313][ T3743] loop2: detected capacity change from 0 to 16 [ 145.778780][ T3743] erofs: (device loop2): mounted with root inode @ nid 36. [ 145.791401][ T1300] usb 6-1: Using ep0 maxpacket: 16 [ 145.798337][ T1300] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 145.806416][ T1300] usb 6-1: config 0 has no interface number 0 [ 145.812658][ T1300] usb 6-1: config 0 interface 2 altsetting 100 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 145.825764][ T1300] usb 6-1: config 0 interface 2 has no altsetting 0 [ 145.833565][ T673] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 145.835133][ T1300] usb 6-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 145.852417][ T1300] usb 6-1: New USB device strings: Mfr=1, Product=6, SerialNumber=3 [ 145.860499][ T1300] usb 6-1: Product: syz [ 145.864730][ T1300] usb 6-1: Manufacturer: syz [ 145.869393][ T1300] usb 6-1: SerialNumber: syz [ 145.877425][ T1300] usb 6-1: config 0 descriptor?? [ 146.027637][ T24] usb 4-1: device descriptor read/64, error -71 [ 146.119362][ T1300] ums-onetouch 6-1:0.2: USB Mass Storage device detected [ 146.125315][ T3751] capability: warning: `syz.1.1235' uses deprecated v2 capabilities in a way that may be insecure [ 146.148062][ T24] usb usb4-port1: attempt power cycle [ 146.185011][ T1300] usb 6-1: unknown interface protocol 0x7, assuming v1 [ 146.190699][ T3756] fuse: Bad value for 'fd' [ 146.196696][ T1300] usb 6-1: cannot find UAC_HEADER [ 146.208685][ T1300] snd-usb-audio: probe of 6-1:0.2 failed with error -22 [ 146.218723][ T1300] usb 6-1: USB disconnect, device number 12 [ 146.467726][ T673] udevd[673]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 146.497913][ T3770] EXT4-fs error: 323 callbacks suppressed [ 146.497928][ T3770] EXT4-fs error (device sda1): __ext4_get_inode_loc:4522: comm syz.2.1243: Invalid inode table block 0 in block_group 0 [ 146.516368][ T3770] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5954: Corrupt filesystem [ 146.526183][ T3770] EXT4-fs error (device sda1): ext4_dirty_inode:6158: inode #2032: comm syz.2.1243: mark_inode_dirty error [ 146.576390][ T24] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 146.619069][ T24] usb 4-1: device descriptor read/8, error -71 [ 147.461669][ T3776] EXT4-fs error (device sda1): __ext4_get_inode_loc:4522: comm syz.1.1244: Invalid inode table block 0 in block_group 0 [ 147.475530][ T3776] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5954: Corrupt filesystem [ 147.483931][ T3777] EXT4-fs error (device sda1): __ext4_get_inode_loc:4522: comm syz.2.1246: Invalid inode table block 0 in block_group 0 [ 147.492190][ T3778] EXT4-fs error (device sda1): __ext4_get_inode_loc:4522: comm syz.4.1245: Invalid inode table block 0 in block_group 0 [ 147.500653][ T3777] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5954: Corrupt filesystem [ 147.515603][ T3779] EXT4-fs error (device sda1): __ext4_get_inode_loc:4522: comm syz.3.1247: Invalid inode table block 0 in block_group 0 [ 147.519444][ T3777] EXT4-fs error (device sda1): ext4_dirty_inode:6158: inode #2032: comm syz.2.1246: mark_inode_dirty error [ 147.543619][ T24] usb 4-1: device descriptor read/8, error -71 [ 147.584054][ T3790] SELinux: policydb table sizes (0,7) do not match mine (8,7) [ 147.591974][ T3790] SELinux: failed to load policy [ 151.142862][ T3815] __nla_validate_parse: 18 callbacks suppressed [ 151.142882][ T3815] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1258'. [ 151.182690][ T28] audit: type=1400 audit(1784378997.027:471): avc: denied { create } for pid=3817 comm="syz.2.1260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 151.190845][ T3818] fuse: Bad value for 'fd' [ 151.216690][ T3824] loop5: detected capacity change from 0 to 512 [ 151.241057][ T3824] EXT4-fs: Ignoring removed oldalloc option [ 151.278551][ T28] audit: type=1400 audit(1784378997.027:472): avc: denied { sys_admin } for pid=3817 comm="syz.2.1260" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 151.322117][ T3824] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8840c01c, mo2=0002] [ 151.355292][ T3824] EXT4-fs (loop5): orphan cleanup on readonly fs [ 151.383624][ T3824] EXT4-fs warning (device loop5): ext4_enable_quotas:7080: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 151.427645][ T3824] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 152.133973][ T3856] loop3: detected capacity change from 0 to 16 [ 152.141915][ T3856] erofs: (device loop3): mounted with root inode @ nid 36. [ 152.160938][ T345] EXT4-fs error: 140 callbacks suppressed [ 152.161126][ T345] EXT4-fs error (device sda1): ext4_read_block_bitmap_nowait:477: comm kworker/u4:5: Invalid block bitmap block 0 in block_group 4 [ 152.182420][ T3845] EXT4-fs error (device sda1): __ext4_get_inode_loc:4522: comm syz.3.1269: Invalid inode table block 0 in block_group 0 [ 152.194972][ T3845] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5954: Corrupt filesystem [ 152.204273][ T3845] EXT4-fs error (device sda1): ext4_dirty_inode:6158: inode #2035: comm syz.3.1269: mark_inode_dirty error [ 152.215761][ T3845] EXT4-fs error (device sda1): __ext4_get_inode_loc:4522: comm syz.3.1269: Invalid inode table block 0 in block_group 0 [ 152.228276][ T3845] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5954: Corrupt filesystem [ 152.237562][ T3845] EXT4-fs error (device sda1): ext4_dirty_inode:6158: inode #2035: comm syz.3.1269: mark_inode_dirty error [ 152.250043][ T3845] EXT4-fs error (device sda1): __ext4_get_inode_loc:4522: comm syz.3.1269: Invalid inode table block 0 in block_group 0 [ 152.262561][ T3845] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5954: Corrupt filesystem [ 152.271859][ T3845] EXT4-fs error (device sda1): ext4_dirty_inode:6158: inode #2035: comm syz.3.1269: mark_inode_dirty error [ 152.334637][ T345] EXT4-fs (sda1): Delayed block allocation failed for inode 2035 at logical offset 3455 with max blocks 93 with error 117 [ 152.347490][ T345] EXT4-fs (sda1): This should not happen!! Data will be lost [ 152.347490][ T345] [ 152.362305][ T3824] EXT4-fs error (device loop5): ext4_ext_check_inode:520: inode #13: comm syz.5.1261: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 152.407026][ T3824] EXT4-fs error (device loop5): ext4_orphan_get:1410: comm syz.5.1261: couldn't read orphan inode 13 (err -117) [ 152.419010][ T345] EXT4-fs (sda1): Delayed block allocation failed for inode 2038 at logical offset 3515 with max blocks 69 with error 117 [ 152.431941][ T3824] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 152.440850][ T345] EXT4-fs (sda1): This should not happen!! Data will be lost [ 152.440850][ T345] [ 152.537590][ T3871] bridge0: port 3(dummy0) entered blocking state [ 152.544048][ T3871] bridge0: port 3(dummy0) entered disabled state [ 152.579450][ T3871] device dummy0 entered promiscuous mode [ 152.586219][ T3871] bridge0: port 3(dummy0) entered blocking state [ 152.592575][ T3871] bridge0: port 3(dummy0) entered forwarding state [ 153.327412][ T583] EXT4-fs (loop5): unmounting filesystem. [ 153.536031][ T3897] loop5: detected capacity change from 0 to 1024 [ 153.808053][ T3910] loop5: detected capacity change from 0 to 16 [ 153.815191][ T3910] erofs: (device loop5): mounted with root inode @ nid 36. [ 154.395674][ T3938] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1299'. [ 154.905809][ T3969] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1311'. [ 155.257585][ T39] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 155.449827][ T39] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 155.467572][ T39] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.485944][ T39] usb 4-1: config 0 descriptor?? [ 155.708616][ T3975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.755537][ T3975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.626219][ T39] usb 4-1: Cannot set autoneg [ 156.631049][ T39] MOSCHIP usb-ethernet driver: probe of 4-1:0.0 failed with error -61 [ 156.830161][ T39] usb 4-1: USB disconnect, device number 15 [ 156.912119][ T4035] loop2: detected capacity change from 0 to 128 [ 156.962892][ T4035] syz.2.1336: attempt to access beyond end of device [ 156.962892][ T4035] loop2: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 156.986742][ T4035] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 157.007314][ T4040] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1338'. [ 157.049040][ T28] audit: type=1400 audit(1784379002.897:473): avc: denied { shutdown } for pid=4045 comm="syz.2.1342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 157.072606][ T4047] loop2: detected capacity change from 0 to 1024 [ 157.090396][ T4047] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 157.322100][ T4059] EXT4-fs error: 370 callbacks suppressed [ 157.322130][ T4059] EXT4-fs error (device sda1): __ext4_get_inode_loc:4522: comm syz.1.1343: Invalid inode table block 0 in block_group 0 [ 157.346447][ T4059] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5954: Corrupt filesystem [ 157.356114][ T4059] EXT4-fs error (device sda1): ext4_dirty_inode:6158: inode #2030: comm syz.1.1343: mark_inode_dirty error [ 157.361819][ T4048] EXT4-fs error (device sda1): __ext4_get_inode_loc:4522: comm syz.5.1341: Invalid inode table block 0 in block_group 0 [ 157.369181][ T4060] EXT4-fs error (device sda1): __ext4_get_inode_loc:4522: comm syz.3.1344: Invalid inode table block 0 in block_group 0 [ 157.389891][ T4048] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5954: Corrupt filesystem [ 157.392671][ T4060] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5954: Corrupt filesystem [ 157.402201][ T4048] EXT4-fs error (device sda1): ext4_dirty_inode:6158: inode #2028: comm syz.5.1341: mark_inode_dirty error [ 157.411353][ T4060] EXT4-fs error (device sda1): ext4_dirty_inode:6158: inode #2035: comm syz.3.1344: mark_inode_dirty error [ 157.423579][ T289] EXT4-fs (loop2): unmounting filesystem. [ 157.441169][ T4059] EXT4-fs error (device sda1): __ext4_get_inode_loc:4522: comm syz.1.1343: Invalid inode table block 0 in block_group 0 [ 160.253906][ T4082] loop2: detected capacity change from 0 to 131072 [ 160.289114][ T4082] F2FS-fs (loop2): invalid crc value [ 160.386014][ T4082] F2FS-fs (loop2): Found nat_bits in checkpoint [ 160.428708][ T4082] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 160.516415][ T4121] x_tables: duplicate underflow at hook 3 [ 160.519500][ T4126] SELinux: policydb magic number 0x8902 does not match expected magic number 0xf97cff8c [ 160.532028][ T4126] SELinux: failed to load policy [ 160.532207][ T4082] F2FS-fs (loop2): Corrupted max_depth of 3: 16842753 [ 160.566581][ T28] audit: type=1400 audit(1784379006.407:474): avc: denied { mounton } for pid=4081 comm="syz.2.1350" path="/200/file1/file3" dev="loop2" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 162.614726][ T350] EXT4-fs error: 179 callbacks suppressed [ 162.614742][ T350] EXT4-fs error (device sda1): ext4_read_block_bitmap_nowait:477: comm kworker/u4:6: Invalid block bitmap block 0 in block_group 4 [ 162.639384][ T4141] EXT4-fs error (device sda1): __ext4_get_inode_loc:4522: comm syz.5.1370: Invalid inode table block 0 in block_group 0 [ 162.656070][ T4152] EXT4-fs error (device sda1): __ext4_get_inode_loc:4522: comm syz.1.1375: Invalid inode table block 0 in block_group 0 [ 162.668688][ T4152] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5954: Corrupt filesystem [ 162.677989][ T4152] EXT4-fs error (device sda1): ext4_dirty_inode:6158: inode #2030: comm syz.1.1375: mark_inode_dirty error [ 162.689460][ T4152] EXT4-fs error (device sda1): __ext4_get_inode_loc:4522: comm syz.1.1375: Invalid inode table block 0 in block_group 0 [ 162.701967][ T4152] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5954: Corrupt filesystem [ 162.711250][ T4152] EXT4-fs error (device sda1): ext4_dirty_inode:6158: inode #2030: comm syz.1.1375: mark_inode_dirty error [ 162.722737][ T4152] EXT4-fs error (device sda1): __ext4_get_inode_loc:4522: comm syz.1.1375: Invalid inode table block 0 in block_group 0 [ 162.735269][ T4152] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5954: Corrupt filesystem [ 162.744807][ T1300] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 162.770830][ T350] EXT4-fs (sda1): Delayed block allocation failed for inode 2030 at logical offset 3566 with max blocks 5 with error 117 [ 162.795791][ T350] EXT4-fs (sda1): This should not happen!! Data will be lost [ 162.795791][ T350] [ 162.841930][ T4161] loop2: detected capacity change from 0 to 4096 [ 162.865772][ T4161] EXT4-fs (loop2): unsupported inode size: 0 [ 162.875171][ T4161] EXT4-fs (loop2): blocksize: 4096 [ 162.927599][ T1300] usb 4-1: Using ep0 maxpacket: 16 [ 162.933860][ T1300] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.954959][ T1300] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.967471][ T1300] usb 4-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 162.976731][ T1300] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.987522][ T28] audit: type=1400 audit(1784379008.837:475): avc: denied { create } for pid=4166 comm="syz.1.1378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 163.029616][ T4167] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=28853 sclass=netlink_route_socket pid=4167 comm=syz.1.1378 [ 163.034540][ T28] audit: type=1400 audit(1784379008.837:476): avc: denied { write } for pid=4166 comm="syz.1.1378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 163.063384][ T1300] usb 4-1: config 0 descriptor?? [ 164.292986][ T1300] usbhid 4-1:0.0: can't add hid device: -71 [ 164.301099][ T1300] usbhid: probe of 4-1:0.0 failed with error -71 [ 164.323863][ T1300] usb 4-1: USB disconnect, device number 16 [ 165.022634][ T4198] SELinux: policydb magic number 0x8902 does not match expected magic number 0xf97cff8c [ 165.032600][ T4198] SELinux: failed to load policy [ 165.612979][ T28] audit: type=1400 audit(1784379011.457:477): avc: denied { execute } for pid=4235 comm="syz.3.1402" path="/sys/kernel/debug/binder/transaction_log" dev="debugfs" ino=14928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=file permissive=1 [ 165.652528][ T4240] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4240 comm=syz.3.1403 [ 166.155214][ T4245] loop3: detected capacity change from 0 to 16 [ 166.179281][ T4245] erofs: (device loop3): mounted with root inode @ nid 36. [ 166.219172][ T3835] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 166.362069][ T4266] validate_nla: 6 callbacks suppressed [ 166.362094][ T4266] netlink: 'syz.1.1410': attribute type 4 has an invalid length. [ 166.607490][ T4274] loop5: detected capacity change from 0 to 1024 [ 166.638767][ T4274] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 166.652803][ T28] audit: type=1400 audit(1784379012.497:478): avc: denied { execute } for pid=4273 comm="syz.5.1415" path="/169/file1/file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 166.656359][ T4279] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1416'. [ 166.824404][ T4290] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1421'. [ 166.947205][ T4295] xt_hashlimit: size too large, truncated to 1048576 [ 167.127603][ T1300] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 167.497588][ T1300] usb 6-1: Using ep0 maxpacket: 16 [ 167.504291][ T1300] usb 6-1: unable to get BOS descriptor or descriptor too short [ 167.513022][ T1300] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 167.525828][ T1300] usb 6-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 167.554920][ T1300] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.562966][ T1300] usb 6-1: Product: syz [ 167.567217][ T1300] usb 6-1: Manufacturer: syz [ 167.571949][ T1300] usb 6-1: SerialNumber: syz [ 167.780225][ T1300] usb 6-1: Audio class v2/v3 interfaces need an interface association [ 167.793946][ T1300] snd-usb-audio: probe of 6-1:1.0 failed with error -22 [ 167.884503][ T4298] EXT4-fs error: 327 callbacks suppressed [ 167.884522][ T4298] EXT4-fs error (device sda1): __ext4_get_inode_loc:4522: comm syz.3.1422: Invalid inode table block 0 in block_group 0 [ 167.916455][ T4298] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5954: Corrupt filesystem [ 167.936143][ T4298] EXT4-fs error (device sda1): ext4_dirty_inode:6158: inode #2035: comm syz.3.1422: mark_inode_dirty error [ 167.960206][ T4298] EXT4-fs error (device sda1): __ext4_get_inode_loc:4522: comm syz.3.1422: Invalid inode table block 0 in block_group 0 [ 167.993248][ T279] EXT4-fs error (device sda1): __ext4_get_inode_loc:4522: comm syz-executor: Invalid inode table block 0 in block_group 0 [ 168.016345][ T4298] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5954: Corrupt filesystem [ 168.022842][ T279] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5954: Corrupt filesystem [ 168.034998][ T4298] EXT4-fs error (device sda1): ext4_dirty_inode:6158: inode #2035: comm syz.3.1422: mark_inode_dirty error [ 168.048025][ T279] EXT4-fs error (device sda1): ext4_dirty_inode:6158: inode #2030: comm syz-executor: mark_inode_dirty error [ 168.075715][ T279] EXT4-fs error (device sda1): __ext4_get_inode_loc:4522: comm syz-executor: Invalid inode table block 0 in block_group 0 [ 168.298396][ T4333] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1433'. [ 168.751292][ T4346] netlink: 'syz.4.1437': attribute type 4 has an invalid length. [ 169.337600][ T331] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 169.529711][ T331] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 169.554152][ T331] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 169.584447][ T331] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 169.614623][ T331] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.662582][ T583] EXT4-fs (loop5): unmounting filesystem. [ 169.692617][ T331] hub 3-1:4.0: USB hub found [ 169.697746][ T1300] usb 6-1: USB disconnect, device number 13 [ 169.885735][ T4368] SELinux: policydb string S does not match my string SE Linux [ 169.906710][ T4368] SELinux: failed to load policy [ 169.913534][ T3835] udevd[3835]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.1/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 169.939189][ T4372] netlink: 100 bytes leftover after parsing attributes in process `syz.5.1448'. [ 169.940314][ T4350] loop2: detected capacity change from 0 to 4096 [ 169.982195][ T4350] Quota error (device loop2): v2_read_file_info: Can't read info structure [ 169.991220][ T4350] EXT4-fs warning (device loop2): ext4_enable_quotas:7080: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 170.006384][ T4350] EXT4-fs (loop2): mount failed [ 170.046712][ T331] hub 3-1:4.0: 2 ports detected [ 170.056356][ T331] usb 3-1: selecting invalid altsetting 1 [ 170.062718][ T331] hub 3-1:4.0: Using single TT (err -22) [ 170.227605][ T339] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 170.258615][ T4350] device syzkaller0 entered promiscuous mode [ 170.419806][ T339] usb 6-1: unable to get BOS descriptor or descriptor too short [ 170.435971][ T339] usb 6-1: config 174 has an invalid interface number: 1 but max is 0 [ 170.471631][ T339] usb 6-1: config 174 has no interface number 0 [ 170.501446][ T339] usb 6-1: config 174 interface 1 altsetting 184 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 170.585906][ T339] usb 6-1: config 174 interface 1 altsetting 184 bulk endpoint 0xE has invalid maxpacket 1024 [ 170.603367][ T339] usb 6-1: config 174 interface 1 altsetting 184 bulk endpoint 0x8 has invalid maxpacket 16 [ 170.624713][ T331] usb 3-1: USB disconnect, device number 19 [ 170.642890][ T339] usb 6-1: config 174 interface 1 has no altsetting 0 [ 171.972489][ T4405] FAULT_INJECTION: forcing a failure. [ 171.972489][ T4405] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 171.985643][ T4405] CPU: 0 PID: 4405 Comm: syz.2.1456 Tainted: G W syzkaller #0 [ 171.986038][ T339] usb 6-1: New USB device found, idVendor=05ac, idProduct=023f, bcdDevice=fc.5d [ 171.994503][ T4405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 171.994515][ T4405] Call Trace: [ 171.994521][ T4405] [ 171.994528][ T4405] __dump_stack+0x21/0x24 [ 172.003559][ T339] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.013578][ T4405] dump_stack_lvl+0x110/0x170 [ 172.013603][ T4405] ? __cfi_dump_stack_lvl+0x8/0x8 [ 172.013623][ T4405] dump_stack+0x15/0x24 [ 172.016880][ T339] usb 6-1: Product: syz [ 172.019794][ T4405] should_fail_ex+0x3bf/0x510 [ 172.019816][ T4405] should_fail+0xb/0x10 [ 172.024116][ T339] usb 6-1: Manufacturer: syz [ 172.032065][ T4405] should_fail_usercopy+0x1a/0x20 [ 172.032086][ T4405] _copy_from_user+0x1e/0xc0 [ 172.036748][ T339] usb 6-1: SerialNumber: syz [ 172.041743][ T4405] __sys_bpf+0x2a0/0x850 [ 172.041762][ T4405] ? bpf_link_show_fdinfo+0x330/0x330 [ 172.047976][ T4372] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 172.050017][ T4405] ? __cfi_ksys_write+0x10/0x10 [ 172.054716][ T4372] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 172.058804][ T4405] ? debug_smp_processor_id+0x17/0x20 [ 172.111374][ T4405] __x64_sys_bpf+0x7c/0x90 [ 172.115785][ T4405] x64_sys_call+0x488/0x9a0 [ 172.120281][ T4405] do_syscall_64+0x4c/0xa0 [ 172.124680][ T4405] ? clear_bhb_loop+0x30/0x80 [ 172.129335][ T4405] ? clear_bhb_loop+0x30/0x80 [ 172.134003][ T4405] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 172.139878][ T4405] RIP: 0033:0x7f871939de99 [ 172.144290][ T4405] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 172.163873][ T4405] RSP: 002b:00007f871a191028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 172.172269][ T4405] RAX: ffffffffffffffda RBX: 00007f8719625fa0 RCX: 00007f871939de99 [ 172.180223][ T4405] RDX: 0000000000000094 RSI: 0000200000000940 RDI: 0000000000000005 [ 172.188181][ T4405] RBP: 00007f871a191090 R08: 0000000000000000 R09: 0000000000000000 [ 172.196141][ T4405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.204104][ T4405] R13: 00007f8719626038 R14: 00007f8719625fa0 R15: 00007ffd348a5678 [ 172.212061][ T4405] [ 172.281228][ T339] usbhid 6-1:174.1: couldn't find an input interrupt endpoint [ 172.302951][ T339] usb 6-1: USB disconnect, device number 14 [ 172.547613][ T331] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 172.727914][ T331] usb 4-1: Using ep0 maxpacket: 16 [ 172.734181][ T331] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.745319][ T331] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.755259][ T331] usb 4-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 172.764502][ T331] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.775870][ T331] usb 4-1: config 0 descriptor?? [ 172.832990][ T4434] loop5: detected capacity change from 0 to 1024 [ 172.858841][ T4434] EXT4-fs: Ignoring removed nomblk_io_submit option [ 172.889520][ T4434] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 172.898260][ T4432] EXT4-fs error: 236 callbacks suppressed [ 172.898288][ T4432] EXT4-fs error (device sda1): __ext4_get_inode_loc:4522: comm syz.5.1468: Invalid inode table block 0 in block_group 0 [ 172.916820][ T4424] EXT4-fs error (device sda1): __ext4_get_inode_loc:4522: comm syz.2.1465: Invalid inode table block 0 in block_group 0 [ 172.916855][ T4432] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5954: Corrupt filesystem [ 172.929364][ T4424] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5954: Corrupt filesystem [ 172.929378][ T4424] EXT4-fs error (device sda1): ext4_dirty_inode:6158: inode #2032: comm syz.2.1465: mark_inode_dirty error [ 172.959924][ T4424] EXT4-fs error (device sda1): __ext4_get_inode_loc:4522: comm syz.2.1465: Invalid inode table block 0 in block_group 0 [ 172.972724][ T4424] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5954: Corrupt filesystem [ 172.982156][ T4424] EXT4-fs error (device sda1): ext4_dirty_inode:6158: inode #2032: comm syz.2.1465: mark_inode_dirty error [ 172.994537][ T4424] EXT4-fs error (device sda1): __ext4_get_inode_loc:4522: comm syz.2.1465: Invalid inode table block 0 in block_group 0 [ 173.007097][ T4424] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5954: Corrupt filesystem [ 173.677331][ T583] EXT4-fs (loop5): unmounting filesystem. [ 173.740529][ T4454] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1472'. [ 173.787005][ T4464] netlink: 'syz.5.1479': attribute type 13 has an invalid length. [ 173.848613][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 173.893053][ T4473] syz_tun: refused to change device tx_queue_len [ 173.901084][ T4473] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 173.950709][ T331] usbhid 4-1:0.0: can't add hid device: -71 [ 173.956712][ T331] usbhid: probe of 4-1:0.0 failed with error -71 [ 173.973467][ T331] usb 4-1: USB disconnect, device number 17 [ 174.148865][ T4484] loop5: detected capacity change from 0 to 16 [ 174.230524][ T4484] erofs: (device loop5): mounted with root inode @ nid 36. [ 174.330632][ T3835] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 174.856600][ T4491] SELinux: policydb string SE Li does not match my string SE Linux [ 174.864765][ T4491] SELinux: failed to load policy [ 175.527608][ T28] audit: type=1400 audit(1784379021.347:479): avc: denied { write } for pid=4508 comm="syz.3.1493" name="vlan0" dev="proc" ino=4026533072 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 175.657698][ T28] audit: type=1400 audit(1784379021.357:480): avc: denied { listen } for pid=4508 comm="syz.3.1493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 176.032272][ T4521] SELinux: policydb string SE Li does not match my string SE Linux [ 176.045601][ T4521] SELinux: failed to load policy [ 176.365028][ T4533] loop3: detected capacity change from 0 to 16 [ 176.374081][ T4533] erofs: (device loop3): mounted with root inode @ nid 36. [ 176.538257][ T3835] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 177.008324][ T4545] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1504'. [ 177.056848][ T4547] fuse: Bad value for 'fd' [ 177.064583][ T4547] fuse: Bad value for 'fd' [ 177.134668][ T4558] SELinux: policydb string SE Linu does not match my string SE Linux [ 177.154866][ T4558] SELinux: failed to load policy [ 177.187312][ T4564] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1513'. [ 177.249199][ T4571] loop2: detected capacity change from 0 to 256 [ 177.256532][ T4571] exfat: Deprecated parameter 'namecase' [ 177.262755][ T4571] exfat: Deprecated parameter 'utf8' [ 177.280865][ T4571] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xea424414, utbl_chksum : 0xe619d30d) [ 177.331875][ T4571] exFAT-fs (loop2): error, invalid access to FAT (entry 0x00000005) bogus content (0xc7c7c7c7) [ 177.342806][ T4571] exFAT-fs (loop2): Filesystem has been set read-only [ 177.627952][ T339] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 177.707825][ T618] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 177.817671][ T339] usb 3-1: Using ep0 maxpacket: 32 [ 177.832133][ T339] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.847223][ T339] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 177.857819][ T339] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 177.869227][ T339] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 177.883360][ T339] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 26 [ 177.897480][ T339] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 177.907706][ T618] usb 4-1: Using ep0 maxpacket: 16 [ 177.913028][ T4590] EXT4-fs error: 316 callbacks suppressed [ 177.913041][ T4590] EXT4-fs error (device sda1): __ext4_get_inode_loc:4522: comm syz.1.1523: Invalid inode table block 0 in block_group 0 [ 177.931831][ T339] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 177.940219][ T339] usb 3-1: SerialNumber: syz [ 177.945454][ T4590] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5954: Corrupt filesystem [ 177.953915][ T4591] EXT4-fs error (device sda1): __ext4_get_inode_loc:4522: comm syz.5.1524: Invalid inode table block 0 in block_group 0 [ 177.955013][ T618] usb 4-1: unable to get BOS descriptor or descriptor too short [ 177.967382][ T4590] EXT4-fs error (device sda1): ext4_dirty_inode:6158: inode #2030: comm syz.1.1523: mark_inode_dirty error [ 177.975684][ T4591] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5954: Corrupt filesystem [ 177.996686][ T339] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 177.996914][ T4590] EXT4-fs error (device sda1): __ext4_get_inode_loc:4522: comm syz.1.1523: Invalid inode table block 0 in block_group 0 [ 178.005048][ T618] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 178.017211][ T4591] EXT4-fs error (device sda1): ext4_dirty_inode:6158: inode #2028: comm syz.5.1524: mark_inode_dirty error [ 178.038865][ T4590] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5954: Corrupt filesystem [ 178.049229][ T4591] EXT4-fs error (device sda1): __ext4_get_inode_loc:4522: comm syz.5.1524: Invalid inode table block 0 in block_group 0 [ 178.061864][ T4590] EXT4-fs error (device sda1): ext4_dirty_inode:6158: inode #2030: comm syz.1.1523: mark_inode_dirty error [ 178.073402][ T618] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 178.082419][ T618] usb 4-1: config 1 has no interface number 0 [ 178.092779][ T618] usb 4-1: New USB device found, idVendor=0582, idProduct=00a3, bcdDevice= 0.40 [ 178.102199][ T618] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.110461][ T618] usb 4-1: Product: syz [ 178.114818][ T618] usb 4-1: Manufacturer: syz [ 178.119583][ T618] usb 4-1: SerialNumber: syz [ 178.245058][ T339] usb 3-1: USB disconnect, device number 20 [ 178.508842][ T618] usb 4-1: USB disconnect, device number 18 [ 178.594794][ T3835] udevd[3835]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.1/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 178.870518][ T289] exFAT-fs (loop2): error, invalid access to FAT (entry 0x00000005) bogus content (0xc7c7c7c7) [ 178.881325][ T289] exFAT-fs (loop2): error, invalid access to FAT (entry 0x00000005) bogus content (0xc7c7c7c7) SYZFAIL: posix_spawnp failed (errno 117: Structure needs cleaning) [ 179.177932][ T28] audit: type=1400 audit(1784379025.027:481): avc: denied { write } for pid=279 comm="syz-executor" path="pipe:[13640]" dev="pipefs" ino=13640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 179.243469][ T279] EXT4-fs warning (device sda1): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 179.266344][ T279] EXT4-fs warning (device sda1): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 179.397651][ T286] EXT4-fs warning (device sda1): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 179.405769][ T577] EXT4-fs warning (device sda1): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 179.423893][ T286] EXT4-fs warning (device sda1): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 179.432004][ T283] EXT4-fs warning (device sda1): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 179.444847][ T577] EXT4-fs warning (device sda1): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 179.462682][ T283] EXT4-fs warning (device sda1): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 179.658382][ T308] device bridge_slave_1 left promiscuous mode [ 179.664536][ T308] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.672265][ T308] device bridge_slave_0 left promiscuous mode [ 179.678426][ T308] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.686614][ T308] device veth1_macvtap left promiscuous mode [ 179.692679][ T308] device veth0_vlan left promiscuous mode [ 179.880971][ T4627] EXT4-fs warning (device sda1): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 179.891948][ T4627] EXT4-fs warning (device sda1): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 180.020872][ T308] tipc: Left network mode [ 180.558794][ T308] device bridge_slave_1 left promiscuous mode [ 180.564905][ T308] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.572360][ T308] device bridge_slave_0 left promiscuous mode [ 180.578523][ T308] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.586224][ T308] device bridge_slave_1 left promiscuous mode [ 180.592375][ T308] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.599752][ T308] device bridge_slave_0 left promiscuous mode [ 180.605835][ T308] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.613589][ T308] device bridge_slave_1 left promiscuous mode [ 180.619794][ T308] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.627044][ T308] device bridge_slave_0 left promiscuous mode [ 180.633226][ T308] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.640999][ T308] device dummy0 left promiscuous mode [ 180.646378][ T308] bridge0: port 3(dummy0) entered disabled state [ 180.653027][ T308] device bridge_slave_1 left promiscuous mode [ 180.659139][ T308] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.666400][ T308] device bridge_slave_0 left promiscuous mode [ 180.672584][ T308] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.680719][ T308] device veth1_macvtap left promiscuous mode [ 180.686702][ T308] device veth0_vlan left promiscuous mode [ 180.692835][ T308] device veth1_macvtap left promiscuous mode [ 180.698850][ T308] device veth0_vlan left promiscuous mode [ 180.704804][ T308] device veth1_macvtap left promiscuous mode [ 180.710937][ T308] device veth0_vlan left promiscuous mode [ 180.717043][ T308] device veth1_macvtap left promiscuous mode [ 180.723197][ T308] device veth0_vlan left promiscuous mode