last executing test programs: 50.324070201s ago: executing program 2 (id=75): r0 = socket$packet(0x11, 0xa, 0x300) syz_io_uring_complete(0x0, 0x0) getsockname$packet(r0, &(0x7f0000001b80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) getpid() syz_emit_ethernet(0xe, &(0x7f0000001b40)={@local, @local, @void, {@mpls_uc}}, 0x0) 50.299300094s ago: executing program 2 (id=77): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000600), 0x1, 0x561, &(0x7f0000000640)="$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") openat(0xffffffffffffff9c, 0x0, 0x42, 0x100) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x7e6, 0x4) renameat2(0xffffffffffffff9c, &(0x7f0000001400)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000001440)='./file0/file0\x00', 0x0) 50.206474733s ago: executing program 2 (id=80): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x210000, &(0x7f0000000400)={[{@nodelalloc}, {@dioread_lock}, {@jqfmt_vfsv1}, {@abort}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x7}}, {@bh}, {@auto_da_alloc}]}, 0x1, 0x56f, &(0x7f00000007c0)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=") syz_mount_image$fuse(0x0, &(0x7f0000000d40)='./bus\x00', 0x3000009, 0x0, 0x3, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000d80)='./bus\x00', &(0x7f0000000dc0), 0x2000008, &(0x7f0000000e00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000e40)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42040, 0x1) 50.077923186s ago: executing program 2 (id=82): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000f80)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) dup3(r0, r1, 0x80000) getsockname(r0, 0x0, 0x0) 48.968492228s ago: executing program 2 (id=90): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x1, 0x5, &(0x7f0000000980)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000850000002a00000095"], &(0x7f0000001980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000019c0)=r1, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0xc, 0xe, &(0x7f0000000c40)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e01f3440cee51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cad32b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337602d3e5a815232f5e16c1b30c3a6abc85018e5ff2c91018afc9ffc2cc788bee1b47683db012469398685211dfbbae3e2ed0a50e7393bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d300006aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7af22e30d46a9d26d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977fb536a9caab37d9ac4cfc1c7b400000000000007ffc826b956ba859ac8e3c177b91bd7d5e41ff83ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d000069a16203a967c1bbe09315c29877a308bcc87dc3addb08142bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8240000e3428d2129369ee1b85af9ffffff0d0df414b315f651c8412392191fa83ee830548f11be359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92000000000f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb74d4ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905de328c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a978ee56c83a3466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342e0eaf6f330e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea95ec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf81700cd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be3827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f969369de47422604e2fc5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293b6c833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b612272d40f522d8c98c879aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbe71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd46dbd61627a2e0a74b5e6aefb7eee403502734137ff47a57f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a125e3af1130d66a7b66837ae7e7123dde7404a067ad0a6a2d6bec9411b61cad4121be3c72ff3a04713042253d438e7becf8120de3895b8ce974958bde39cb8da3427a2e9e2de936431e67fed5ab5684db07de39083d8948cc4c8a2608100000000000000000000aecb8b0b7941088f971ce17427eec32a012295cc0cdd32955176b6ad5a4bb953e58ccfa9428f452cfb5a48a9fda26db3985c8be3c2f99827da074825b01c4a3a71fb59d5798100000000000000c76b05a45d2dd8c20d971e2f3e4369168f5cb83d6ff3a18733fec726034fbfa95624135bee374414b2c8c61f52357a520efd6a10aff244bc8a62ed367981fb4d5d77f7bc093958ff46527499957da4934cd4b370cf76f72dd05fa80cdfb68c836fd81be7a58532e041a87f9222f157610a4bcdc05b2a55308c8e7568b90f7a338557e816a16972aea79dff5becefa6f9c5ce6c58fb38da9e7532dc53cfdc2e789b76f7d32aca1bfea2aa62621b78dded30fc07171866bf3d552900000000a32dda61eeda1750e157c2d569b9d08f583c0ee28daec2e8bb85f3c8e91c4448096ee953def18dc73e55cb30f9cd069d8780b00eaba382f0c3ae391c30a5f1b0f36dd0c2193b791995d2890327a10d7abac76d1202f72e97f0105184d7aaaab8d3e29c9a8d263f076b55cf53c5bb9c0662a3d19a6722d7f83ae4331d3256f90af0857788b380ccc3b266c418e66d1d756d5df6423dd0cea67bc235d3776d22270fc19301ead09f156893e9"], &(0x7f0000001740)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001800)={r2, 0x18000000000002a0, 0xfe, 0x11, &(0x7f0000001880)="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", 0x0, 0x8024, 0x60000000, 0x0, 0x0, &(0x7f0000001980), &(0x7f00000019c0)}, 0x2a) 48.945229141s ago: executing program 32 (id=90): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x1, 0x5, &(0x7f0000000980)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000850000002a00000095"], &(0x7f0000001980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000019c0)=r1, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0xc, 0xe, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], &(0x7f0000001740)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001800)={r2, 0x18000000000002a0, 0xfe, 0x11, &(0x7f0000001880)="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", 0x0, 0x8024, 0x60000000, 0x0, 0x0, &(0x7f0000001980), &(0x7f00000019c0)}, 0x2a) 29.643897548s ago: executing program 5 (id=478): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000000c0)={0x0, 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000140)={'macsec0\x00', 0x400}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000180)={'macvlan0\x00', 0x1611b36b35ec3b86}) 29.519778431s ago: executing program 5 (id=480): r0 = openat$kvm(0x0, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000240)={0x0, &(0x7f0000000000)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @ro32=0x440c, 0x1, 0xffffffffffff8000}}], 0x68}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 29.355723317s ago: executing program 5 (id=486): syz_mount_image$exfat(&(0x7f0000000100), &(0x7f0000000140)='./file2\x00', 0x0, &(0x7f0000000180)=ANY=[], 0xfd, 0x1501, &(0x7f0000000240)="$eJzs3Am4T1X3OPC19t6H62b4JpnP2uvwTYZNkoSSZEiSJCRzQpIkSZK4ZEpCEjLeJHPInG665nnInHTzSpIkJCTZ/+c2/P16h5/3fX/9/vq/d32e5zz2cs7aZ+27nu89w/Pc79ddh1VvVKNKfWaGf4f+bYC//JMEAAkAMBAAcgBAAABlc5bNmb4/i8akf+sk4n9JgxlXugJxJUn/Mzbpf8Ym/c/YpP8Zm/Q/Y5P+Z2zS/4xN+i9EhjYr39WyZdxN3v//f079T5Ll+p8h4D/aIf3/T6P/paOl/xmb9D9jk/5nbNL/jCy40gWIK0w+/xmb9F+IDO0Pf6e84dyVfqct27+wCSGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQ/w+c85cYAPhtfKXrEkIIIYQQQgghxB/Hv3ulKxBCCCGEEEIIIcT/PgQFGgwEkAkyQwJkgUS4CrJCNsgOOSAGV0NOuAZywbWQG/JAXsgH+aEAFIQQCCwwRFAICkMcroMicD0UhWJQHEqAg5JQCm6A0nAjlIGboCzcDOXgFigPFX4+Z7rboTLcAVXgTqgK1aA61IC7oCbcDbXgHqgN90IduA/qwv1QDx6A+tAAGsKD0AgegsbQBJpCM2gOLaDlZfKTc/y9/OehB7wAPaEXJEFv6AMvQl/oB/1hAAyEl2AQvAyD4RUYAkNhGLwKw+E1GAGvw0gYBaPhDRgDY2EcjIcJMBGS4U2YBG/BZHj7oWwwFabBdJgBM2EWvAOzYQ7MhXdhHsyHBZCcZREshiXwHiyF9yEFPoBl8CGkwnJYASthFayGNbAW1sF62AAbYRNshi2wFbbBR7AddsBO2AW7YQ/shY9hH3wC++FTSMPP/sX8s7/Ph24ICKhQoUGDmTATJmACJmIiZsWsmB2zYwxjmBNzYi7MhbkxN+bFvJiE+bEgFkRCQkbGQlgI4xjHIlgEi2JRLI7F0aHDUlgKS+ONWAbLYFksi+WwHJbHClgBb8VbsRJWwspYGatgFayKVbE6Vse78C68G2thLayNtbEO1sG6WBfrYT2sj/WxITbERtgIG2NjbIpNsTk2x5bYElthK2yNrbEttsV22A7bY3vsgB2wI3bETtgJO2Nn7IJdsCt2xW74HD6Hz+Pz+AK+gL2wquqNfbAP9sW+2B8H4AB8CQfhy/gyvoJDcCgOw1fxVXwNR+AZHImjcDSOxkpqLI7D8chqIiZjMmaGSTgZJ+MUnIpTcTrOwJk4C2fhbJyDc/BdnIfzcT4uxIW4GJfgElyK72MKpuAyPIupuBxX4EpchatxFa7FdbgWN+BG3ICbcTNuxa34EX6EO3AH7sJduAf34Mf4MX6Cn+AQTMM0PIAH8CAexEN4CA/jYTyCR/AoHsVjeAyP43E8gSfxFJ7E03gaz+BZPAcA5/E8XsALeBEvpn/4VTqjjMqkMqkElaASVaLKqrKq7Cq7iqmYyqlyqlwql8qtcqu8Kq/Kr/KrgqqgIkWKVaQKqUIqruKqiCqiiqqiqrgqrpxyqpQqpUqr0qqMKqPKqptVOXWLKq8qqDbuVnWrqqTausrqDlVFVVFVVTVVXdVQNVRNVVPVUrVUbVVb1VF1VF11v6qnemN/bKDSO9NIDcXGahg2Vc1Uc9VCvYYPq1ZqBLZWbVRb9agahSOxvWrlOqgnVEc1Djupp9R4fFp1UROxq3pWdVPPqe7qedVDtXY9VS81BXurPmo69lX9VH81QM3Gaiq9Y9XVK+r5zEPVMPWqWoyvqRHqdTVSjVKj1RtqjBqrxqnxaoKaqJLVm2qSektNVm+rKWqqmqamqxlqppql3lGz1Rw1V72r5qn5aoFaqBapxWqJek8tVe+rFPWBWqY+VKlquVqhVqpVarVao9aqdWq92qA2qk1qs9qitqpt6iO1Xe1QO9UutVvtUXvVx2qf+kTtV5+qNPWZOqD+og6qz9Uh9YU6rL5UR9RX6qj6Wh1T36jj6lt1Qp1Up9R36rT6Xp1RZ9U59YM6r35UF9RP6qLyCjRqpbU2OtCZdGadoLPoRH2Vzqqz6ew6h47pq3VOfY3Opa/VuXUendfk0/l1AV1Qh5q01awjXUgX1nF9nS6ir9dFdTFdXJfQTpfUpfQNurS+UZfRN+my+mZdTt+iy+sKuqIHfZuupG/XlfUduoq+U1fV1XR1XUPfpWvqu3UtfY+ure/VdfR9uq6+X9fTD+j6uoFuqB/UjfRDurFuopvqZrq5bqFb6od1K/2Ibq3b6Lb6Ud1OP6bb68d1B/2E7qif1J30U7qzflp30c/orvpZ3U0/p7vrn/RF7XVP3Usn6d66j35R99X9dH89QA/UL+lB+mU9WL+ih+iheph+VQ/Xr+kR+nU9Uo/So/Ubeoweq8fp8XqCnqiT9Zt6kn5LT9Zv6yl6qp6mp+sZeqbu/+tMc/+J/Lf+Tv7gn8++VW/TH+nteofeqXfp3XqP3qv36n16n96v9+s0naYP6AP6oD6oD+lD+rA+rI/oI/qoPqqP6WP6uD6uT+iT+gf9nT6tv9dn9Fl9Vv+gz+vz+sKvPwMwaJTRxpjAZDKZTYLJYhLNVSaryWaymxwmZq42Oc01Jpe51uQ2eUxek8/kNwVMQRMaMtawiUwhU9jEzXWmiLneFDXFTHFTwjhT0pQyN/yP8y9XX0vT0rQyrUxr09q0NW1NO9POtDftTQfTwXQ0HU0n08l0Np1NF9PFdDVdTTfTzXQ33U0P08P0ND1NkkkyfcyLpq/pZ/qbAWageckMMoPMYDPYDDFDzDAzzAw3w80IM8KMNCPNaDPajDFjzDgzzkwwE0yyz2EmmUlmsplsppgpZtrAHGaGmWFmmVlmtplt5pq5Zp6ZZxaYBWaRWWSWmCVmqVlqUkyKWWaWmVSz3Cw3K81Ks9qsNmvNWrPerDcbzUaz2Ww2qWab2Wa2m+1mp9lpdpvdZq/Za/aZfWa/2W/STJo5YA6Yg+agOWQOmcPmsDlijpij5qg5Zo6Z4+a4OWFOmFPmlDltTpsz5ow5Z86Z8+a8uWAumIvmYvptX6ACFZjABJmCTEFCkBAkBolB1iBrkD3IHsSCWJAzyBnkCq4Ncgd5grxBviB/UCAoGIQBBTbgIAoKBYWDeHBdUCS4PigaFAuKByUCF5QMSgU3BKWDG4MywU1B2eDmoFxwS1A+qBBUDG4NbgsqBbcHlYM7girBnUHVoFpQPagR3BXUDO4OagX3BLWDe4M6wX1B3eD+oF7wQFA/aBA0DB4MGgUPBY2DJkHToFnQPGgRtPxD5/f+TJ5HXM+wV5gU9g77hC+GfcN+Yf9wQDgwfCkcFL4cDg5fCYeEQ8Nh4avh8PC1cET4ejgyHBWODt8Ix4Rjw3Hh+HBCODFMDt8MJ4VvhZPDt8Mp4dRwWjA9nBHODGeF74Szwznh3PDdcF44P1wQLgwXhYtD/OWWGFLCD8Jl4Ydharg8XBGuDFeFq8M14dpwXbg+3BBuDDeFm8sO+uXQcHu4I9wZ7gp3h3vCveHH4b7wk3B/+GmYFn4WHgj/Eh4MPw8PhV+Eh8MvwyPhV+HR8OvwWPhNeDz8NjwRngxPhd+Fp8PvwzPh2fBc+EN4PvwxvBD+FF4MffrNffrlnQwZykSZKIESKJESKStlpeyUnWIUo5yUk3JRLspNuSkv5aX8lJ8KUkFKx8RUiApRnOJUhIpQUSpKxak4OXJUikpRaSpNZagMlaWyVI7KUXkqTxWpIt1Gt9HtdDvdQXfQnXQnVaNqVINqUE2qSbWoFtWm2lSH6lBdqkv1qB7Vp/rUkBpSI2pEjakxNaWm1JyaU0tqSa2oFbWm1tSW2lI7akftqT11oA7UkTpSJ+pEnakzdaEu1JW6UjfqRt2pO/WgHtSTelISJVEf6kN9qS/1p/40kAbSIBpEg2kwDaEhNIyG0XAaTiNoBI2kUTSa3qAxNJbG0XiaQBMpmZJpEk2iyTSZptAUmkbTaAbNoFk0i2bTbJpLc2kezaMFtIAW0SJaQktoKS2lFEqhZbSMUimVVtAKWkWraA2toXW0jjbQBtpEm2gLbaFttI2203baSTtpN+2mvbSX9tE+2k/7KY3S6AAdoIN0kA7RITpMh+kIHaGjdJSO0TE6TsfpBJ2gU3SKTtNpOkNn6Bydo/P0I12gn+gieUqwWWyivcpmtdlsdpvD/nWc1+az+W0BW9CGNrfN87uYrLVFbTFb3Jawzpa0pewNfxOXtxVsRXurvc1Wsrfbyra8zQL/Na5p77a17D22tr3X1rB3/S6uY++zde1Dtp5tYuvbZrahbWEb2YdsY9vENrXNbHPbwrazj9n29nHbwT5hO9on/yZeat+36+x6u8FutPvsJ/ac/cEetV/b8/ZH29P2sgPtS3aQfdkOtq/YIXbo72MAO9q+YcfYsXacHW8n2Il/E0+z0+0MO9POsu/Y2XbO38RL7Ht2nk2xC+xCu8gu/jlOrynFfmCX2Q9tql1uV9iVdpVdbdfYtf+31pV2s91it9q99mO73e6wO+0uu9vu+TlOX8d++6lNs5/ZI/Yre9B+bg/ZY/aw/fLnOH19x+w39rj91p6wJ+0p+509bb+3Z+zZn9efvvbv7E/2ovUWGFmxZsMBZ+LMnMBZOJGv4qycjbNzDo7x1ZyTr+FcfC3n5jycl/Nxfi7ABTlkYsvMERfiwhzn67gIX89FuRgX5xLsuCSX4hu4NN/IZfgmLss3czm+hctzBa7It/JtXIlv58p8B1fhO7kqV+PqXIPv4pp8N9fie7g238t1+D6uy/dzPX6A63MDbsgPciN+iBtzE27Kzbg5t+CW/DC34ke4Nbfhtvwot+PHuD0/zh34Ce7IT3Infoo789PchZ/hrvwsd+PnuDs/zz34Be7JvTiJe3MffpH7cj/uzwN4IL/Eg/hlHsyv8BAeysP4VR7Or/EIfp1H8igezW/wGB7L43g8T+CJnMxv8iR+iyfz2zyFp/I0ns4zeCbP4nd4Ns/hufwuz+P5vIAX8iJezEv4PV7K73MKf8DL+ENO5eW8glfyKl7Na3gtr+P1vIE38ibezFt4K2/jj3g77+CdvIt38x7eyx/zPv6E9/OnnMaf8QH+Cx/kz/kQf8GH+Us+wl/xUf6aj/E3fJy/5RN8kk/xd3yav+czfJbP8Q98nn/kC/wTX2TPEGGkIh2ZKIgyRZmjhChLlBhdFWWNskXZoxxRLLo6yhldE+WKro1yR3mivFG+KH9UICoYhRFFNuIoigpFhaN4dF1UJLo+KhoVi4pHJSIXlYxKRTdEpaMbozLRTVHZ6OaoXHRLVD6qEFWMbo1uiypFt0eVozuiKtGdUdWoWlQ9qhHdFdWM7o5qRfdEtaN7ozLRfVHd6P6oXvRAVD9qEDWMHowaRQ9FjaMmUdOoWdQ8ahG1jB6OWkWPRK2jNlHb6NGoXfRY1D56POoQPRF1jJ68tL9Y8MvV9K/2J0W9I/3rG7J79KL44viS+HvxpfH34ynxD+LL4h/GU+PL4yviK+Or4qvja+Jr4+vi6+Mb4hvjm+Kb41viW+Pe18gMDtMfhMG4wGVymV2Cy+IS3VUuq8vmsrscLuaudjndNS6Xu9bldnlcXpfP5XcFXEEXOnLWsYtcIVfYxd11roi73hV1xVxxV8I5V9KVci1cS9fStXKPuNaujWvrHnWPusfcY+7xhF8Ld53cU66ze9p1cc+4Z9yzrpt7znV3z7se7gXX0/VySS7J9XF9XF/X1/V3/d1AN9ANcoPcYDfYDXFD3DA3zA13w90IN8KNdCPdaDfajXFj3Dg3zk1wE1yyS3aT3CQ32U12U9wUN81NczPcDDfLzXKz3Ww3181189w8t8AtcIvcIrfELXFL3VKX4lLcMrfMpbpUt8KtcKvcKrfGrXHr3Dq3wW1wm9wmt8VtcdvcNrfdbXc73U632+12e91et8/tc/vdfpfm0twBd8AddAfdIfeFO+y+dEfcV+6o+9odc9+44+5bd8KddKec16fd9+6MO+vOuR/cefeju+B+chedd8mxN2OTYm/FJsfejk2JTY1Ni02PzYjNjM2KvRObHZsTmxt7NzYvNj+2ILYwtii2OLYk9l5saez9WErsg9iy2Iex1Njy2IrYytiq2OqY9wW2R76QL+zj/jpfxF/vi/pivrgv4Z0v6Uv5G3xpf6Mv42/yZf3Nvpy/xZf3FXxF38Q39c18c9/Ct/QP+1b+Ed/at/Ft/aO+nX/Mt/eP+w7+Cd/RP+k7+ad8Z/+07+Kf8V39s/N/7bLv4V/wPX0vn+R7+z7+Rd/X9/P9/QA/0L/kB/mX/WD/ih/ih/ph/lU/3L/mR/jX/Ug/yo/2b/gxfqwf58f7CX6iT/Zv+kn+LT/Zv+2n+Kl+mp/uZ/iZfpZ/x8/2c/xc/66f5+f7BX6hX+QX+yX+Pb/Uv+9T/Ad+mf/Qp/rlfoVf6Vf51X6NX+vX+fV+g9/oN/nNfovf6rf5j/x2v8Pv9Lv8br/H7/Uf+33+E7/ff+rT/Gf+gP+LP+g/94f8F/6w/9If8V/5o/5rf8x/44/7b/0Jf9Kf8t/50/57f8af9ef8D/68/9Ff8D/5i/I3a0IIIYQQ/xR9mf29/87/qV+3dH0AINuOfIf/es5NuX8Z91P7OsYA4IleXRv8tjVokJSU9OuxqRqCwgsBIHYp/+fvH/g1Xg5t4THoAG2g9N+tr5+q+PN93383f/xmgESALL/lpD8eJcJfz3/jP5i/yXt8ufkXAhQtfCkn/US/xZfmL/MP5t/T7jLzZ/k8GaD1f8nJCpfiS/OXgkfgSejwuyOFEEIIIYQQQohf9FPnu13u+Tb9+Ty/uZSTGS7Fl3s+v4zKf8QahBBCCCGEEEII8d97+rnujz/coUObzv/Jg8x/jjL+BAMEgD9BGTL48w+u9G8mIYQQQgghxB/t0k3/la5ECCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYTIuP79bwhT//TBV3qNQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghxJX2fwIAAP//5g1V0w==") syz_mount_image$exfat(0x0, &(0x7f0000001900)='./bus\x00', 0x20020c0, 0x0, 0x1, 0x0, &(0x7f0000001940)) mount$incfs(&(0x7f0000001980)='.\x00', &(0x7f00000019c0)='./bus\x00', &(0x7f0000001a00), 0xc002, 0x0) chdir(&(0x7f0000001a40)='./bus\x00') mount$overlay(0x0, &(0x7f0000001ac0)='./file0\x00', &(0x7f0000001b00), 0x2000008, &(0x7f0000001b40)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 29.104436412s ago: executing program 5 (id=493): syz_mount_image$f2fs(&(0x7f0000000640), &(0x7f00000006c0)='./file1\x00', 0x1000400, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], 0x1, 0x55a8, &(0x7f0000001180)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000007580)='./file1\x00', 0x64042, 0x49) write$P9_RREADLINK(r0, 0x0, 0xfffffd87) open(&(0x7f00000067c0)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x161) 28.853229758s ago: executing program 5 (id=497): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=@newsa={0x138, 0x10, 0x401, 0x0, 0x0, {{@in6=@loopback, @in6=@loopback, 0x1234, 0x1234, 0x0, 0x0, 0xa, 0x80, 0x80}, {@in6=@loopback, 0x4d2, 0x32}, @in6=@loopback, {0x3, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x20000000) sendmsg$nl_xfrm(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=@newpolicy={0xfc, 0x13, 0x401, 0x0, 0x0, {{@in6=@loopback, @in6=@loopback, 0x1234, 0x1234, 0x0, 0x0, 0xa, 0x80, 0x80}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x4d2, 0x32}, 0xa, @in6=@loopback}]}]}, 0xfc}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfdff, &(0x7f0000000b00)={0xa, 0x1234, 0x0, @loopback}, 0x1c) 28.768849826s ago: executing program 33 (id=497): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=@newsa={0x138, 0x10, 0x401, 0x0, 0x0, {{@in6=@loopback, @in6=@loopback, 0x1234, 0x1234, 0x0, 0x0, 0xa, 0x80, 0x80}, {@in6=@loopback, 0x4d2, 0x32}, @in6=@loopback, {0x3, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x20000000) sendmsg$nl_xfrm(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=@newpolicy={0xfc, 0x13, 0x401, 0x0, 0x0, {{@in6=@loopback, @in6=@loopback, 0x1234, 0x1234, 0x0, 0x0, 0xa, 0x80, 0x80}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x4d2, 0x32}, 0xa, @in6=@loopback}]}]}, 0xfc}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfdff, &(0x7f0000000b00)={0xa, 0x1234, 0x0, @loopback}, 0x1c) 28.501629133s ago: executing program 1 (id=500): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000004700)='./file0\x00', &(0x7f0000004740), 0x0, &(0x7f0000004780)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f00000047c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f000000a040)='./file2\x00', 0x109141, 0xd6) pwrite64(r0, &(0x7f000000a080)="cf", 0x1, 0x7ff) 28.43727463s ago: executing program 1 (id=505): ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2982, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000001080)={0xf, 0x3e, 0x6, 0x3, 0x2, "a0e1c601283700"}) 28.327288841s ago: executing program 1 (id=507): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000240)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x1}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000300)={0x42, 0x3, 0x2}, 0x10) sendmsg$tipc(r1, &(0x7f0000000340)={&(0x7f0000000380)=@name={0x1e, 0x2, 0x1, {{0x42, 0x3}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8004}, 0x20000000) 28.267912207s ago: executing program 1 (id=508): syz_mount_image$exfat(&(0x7f0000000100), &(0x7f0000000140)='./file2\x00', 0x0, &(0x7f0000000180)=ANY=[], 0xfd, 0x1501, &(0x7f0000000240)="$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") syz_mount_image$exfat(0x0, &(0x7f0000001900)='./bus\x00', 0x20020c0, 0x0, 0x1, 0x0, &(0x7f0000001940)) mount$incfs(&(0x7f0000001980)='.\x00', &(0x7f00000019c0)='./bus\x00', &(0x7f0000001a00), 0xc002, 0x0) chdir(&(0x7f0000001a40)='./bus\x00') mount$overlay(0x0, &(0x7f0000001ac0)='./file0\x00', &(0x7f0000001b00), 0x2000008, &(0x7f0000001b40)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 27.978133946s ago: executing program 1 (id=513): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000004000000050000000b"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0xb, 0x7, 0x10001, 0x49, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x14, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r1}, 0xc) 27.620162462s ago: executing program 1 (id=518): bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x9, 0x4, 0x0, &(0x7f00000007c0)='GPL\x00', 0x5, 0xc3, &(0x7f0000000800)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c80)={0x18, 0x0, 0x0, &(0x7f0000000d40)='GPL\x00', 0x1, 0x1000, &(0x7f0000001dc0)=""/4096, 0x40f00, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000002dc0)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000002e00)={0x5, 0xe, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x3, 0x10, &(0x7f0000000e40)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000300000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="61df712bc884fed5722780b605a7", 0x0, 0x2f00, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 27.487408326s ago: executing program 34 (id=518): bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x9, 0x4, 0x0, &(0x7f00000007c0)='GPL\x00', 0x5, 0xc3, &(0x7f0000000800)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c80)={0x18, 0x0, 0x0, &(0x7f0000000d40)='GPL\x00', 0x1, 0x1000, &(0x7f0000001dc0)=""/4096, 0x40f00, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000002dc0)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000002e00)={0x5, 0xe, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x3, 0x10, &(0x7f0000000e40)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000300000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="61df712bc884fed5722780b605a7", 0x0, 0x2f00, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 16.594708745s ago: executing program 6 (id=768): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0xb, &(0x7f0000000880)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0xffffffff}, [@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffff7}}]}, &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000940)={r2, r1, 0x25, 0x0, @val=@iter={0x0}}, 0x20) syz_emit_ethernet(0xc35, &(0x7f0000002980)={@random, @link_local={0x1, 0x80, 0xc2, 0x25}, @void, {@ipv6={0x86dd, @esp={0x4, 0x6, "52431d", 0xbff, 0x32, 0xff, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2}}}}, 0x0) 16.55070029s ago: executing program 6 (id=769): r0 = fsopen(&(0x7f0000000500)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) openat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x22801, 0x0) 16.494126385s ago: executing program 6 (id=771): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x20080a, &(0x7f0000000080)=ANY=[@ANYRES8=r0, @ANYRES32, @ANYRESOCT=r0], 0x1, 0x392, &(0x7f0000000280)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000dc0)='memory.events.local\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000e80)='./file0\x00', 0x140) fchmod(r1, 0x20) 16.436006481s ago: executing program 6 (id=776): syz_mount_image$f2fs(&(0x7f0000000180), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="6c617a7974696d652c6e6f696e6c696e655f78617474722c6c617a7974696d652c6e6f626172726965722c6163746976655f6c6f67733d342c757365725f78617474722c6d6f64653d6c66732c616c6c6f635f6d6f64653d64656661756c742c00be9ee044c45511e65887f6fac9eba6d787c3684a836f23dbf8ad3dd5931c08b4d8bde7e8acbbf3bf3326f2faa5952a332ad2ced40c98a2affa2dad4d623f9ff3ffa81e45095548ab6200f069d0f63d20fd71d3043b0dd5c4cf9785f3f531abc19bc1678f5e0b33006bd1049ca45fd8500d67a5aa6e1523d900000000007867738729e703bb122283fb2fae9813a0cfefcdf3dc968af1cf80e96649d943198a96d9b1af9c91506b30922be8537f54e65cf60c6b6a5798955796aea325770d6ccc93a95fad93b2c7bad114fcbc55036a301c23b07073c71555791db8919235022bb0ee4294211ab9b43f3fbedecd223722d937aa22b31e2e9c97e5ea94e4ab83d4e5811c7556813c334aec856af0a0c12b3c93ba5aa906c6e2268a0c6cbb913f496d87c608604eb02b2c031d5ae40c75", @ANYRESHEX, @ANYRES32, @ANYRESHEX], 0xff, 0x5534, &(0x7f0000006040)="$eJzs3EtvG1UUAODrpOmbEiEW7DpShZRItVWnSQW7AK14iFQRjwUr6tiO5db2RLHjhKxYsEQs+CcIJFYs+Q0sWLNDLEDskIo89wY1PCpQHJsk3ydNz8yd6zPnjqpEZyZyAM6s+ezXn0vhWrgUQpgNIVwNodgvpa2wGsMLIYTrIYSZJ7ZSGv9j4HwI4XII4dooecxZSqc+vzm8sfLTW798892Fc1e++Pr76a0amLYXQwjdrbi/240xb8X4MI3Xhu0idpeHKcYT3UfpOI9xt7lRZNitHcyrFfF2K87Pt3b6o7jZqdVHsdXeLMa3evGC/WHrIE/xgYe17eK40dwoYrufF7G1H+va248/2/b7g5inkfJ9VKQPg8FBjOPNvWZcz9ajItZ7gzQe8+aN5t4oDlNMlwv1vNMo6tg4yp3+f3u73dvZy4bN7X4772UrlepLleqdcnU7bzQHzeVyrdu4s5wttDqjaeVBs9ZdbeV5q9Os1PPuYrbQqtfL1Wq2cLe50a71smq1crtyq7yymPZuZq/ffz/rNLKFUXy13dsZtDv9bDPfzuInFrOlyu2XF7Mb1ezdtfVs/Z1799bW3/vw7gf3X1l787U06S9lZQtLt5aWytVb5aXq4sld/+h3/X9a/yep6DGuH46k9LSTDyZXB8AJov8HpmGi/f9cGHv/H/T/Y6H/P7Prf5wc7QZytj21/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4DT7Ye7LN4qd+Xh8JY0/k4aeS8elEMJMCOHx35gN5w/lnE155v5h/tyfavi2FIoMo2tcSNvlEMJq2n579rjvAgAAAJxeX318/bPYrcd/5qddEJMUH9rMXH0wpnylEMLc/I9jyBLSw6bw/NGrikb/v8+FvTFlKx5gXRxTsvjI7dy4sv0rs4fCxSdCKYaZg5nnJ1oXAABwnA53ApPtQgAAAJikT6ddANNRvGlNf4ufXvNdiCG9ELx06AgAAAA4gUrTLgAAAAA4dkX/7/v/AAAA4HSL3/8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL+zcze5aQNRAICfbVxo6Q+quu9VuoNj9AhddllxFY5Ar9ALcAa667a7CCLsSRSiECA2JiTfJ9nD2NbzA7GZmacBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAE7pbzmf/P71ddA0zmrdzCHvKJomCQAAAK/UspxPqg+juj9M1z+kS59TP4uIPCIeGrsX8WYrZpHilDueL+/l8CeiirB5Rz8d7yLiWzquPp36VwAAAICXazGdjdOqenUanTshulRP2uTvv7cUL4uIcvSvpWj55vTloEfX++eHNv/vXvzccTc7LrVqYisal8zcqKbcem1F26+4raRJzeBOk9VN3l06AABAV7ZHAh2OQgAAAOjYj3MnwHlUq56pFj8V8PfrJi0Ivt3qAQAAABfo2KpnAAAA4DkaPnq3Gv9fwP5/H//b/w8AAACerN7/DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgFNalvPJYjobN42zWjfTzrcBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAArtmfdxSGYTAIg5tEeXVCF/D9b2kW7NatmxkQfPxbCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAK4/j5XnGqzGTbfQ6k7x7Xkk+nRrfTo1f58Y/yVh3/wYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADY2Z+XFAxhMAaA+R8q7qT3P6yE6hlEmIFCSOjiAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeKPP9fK9w6/hSPJv27C0HknWTg1bpzGHae+H8dgZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDJzv37xk3FAQD/3vl8pQVECChDEKISAyw0vZaWrgygiIE/ASlKryVw5UebgVYVKAsbytwFwYgQEihs/R86t1KXsnW4oUhMDCD77OT1KOKgin0kn4/0/L62HL/vc6IoXz/nAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJgyfnMvzorNwiTuVsduP7i+XvR3pvrCze27y0Ur4s7fXP+L/Up8/r2Y7nSW2ksEAACAwyOr6/uIfuQ7q0XQXSjr/7w+p6j5v3l6Etf1/HTdX/d17V+0n3+6//zuQAuTcYqLXtgYDU/+NZVeto/znGfP/OMZvfLOl89esvIb0n1n67lxXt7Pzle3br3VL8MjTWQLAPwXJ+q+Cuq/h4p+0GZiABwavaoV7lX1f7bQbk4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAATehvxZN13ImI5d5eXLjz4Pp62U/t39y+u1y3szdubKfXLC6RR8SFjdHwZFMT+R+4cvXah2uj0fBy88FLEdHe6FXw3gznRLSZoeBxg271sz7bVx2PiPZzbj9o+RcTAAAHTl61oq6/l++sFsc6ixF/fPtw/f9KEkda/0/1af1///2zt9Ox0vp/0NgM59/K5qVPVq5cvfbaxqW1i8OLw49ePzV4Y3D63Jkz51bKZyUrnpgAAADwePpVS+v/7mLEeGr9/1gSx4z1/6dfDz5Px8rU/4+0t+jXdiYAAACH27PHf/u184jjnX4/Plvb3Lw8mGx3909Nti2k+q8dqVpa/2eLbWcFAAAANGG81Xlo/f98EseM6/9PfffCD+k1s4g4Wq3/n1j/eHS+uem05PeZzmri34n3faoAAADMtaNVS9f/8/L9/+7uKw/diHj15UlcfQzgTPV/9vaX36djpe//n25uinOpuzS5H2W/FNFbajsjAAAADrInqlYU+7/kO6sf/Hjs3b73/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACa9mcAAAD//6iKRJw=") request_key(0x0, 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000900)='./file0\x00', 0x10, 0x0) mount$incfs(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)='./file0\x00', 0x0, 0x101000, 0x0) stat(&(0x7f00000010c0)='./file0\x00', &(0x7f0000000a00)) 15.688254256s ago: executing program 6 (id=795): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x44000, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) recvmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/25, 0x19}, 0x9}], 0x1, 0x40001022, 0x0) 15.338005672s ago: executing program 6 (id=802): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r0, 0x1) 15.262323829s ago: executing program 35 (id=802): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r0, 0x1) 13.167167341s ago: executing program 7 (id=833): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x241, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000180)={0xc0, 0x0, 0x8000}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 12.936457994s ago: executing program 7 (id=841): mkdir(&(0x7f0000001840)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000001880)='./sys\x00', &(0x7f00000018c0)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001900)='./sys/class/net/lo/tx_queue_len\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001940)='fd/3\x00') write$tcp_congestion(r0, &(0x7f0000000240)='veno\x00', 0x5) 12.87978737s ago: executing program 7 (id=843): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000900), 0x102100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000980)={0x1, 0x0, [{0x6e0, 0x0, 0x400000000000000}]}) 12.721847636s ago: executing program 7 (id=848): syz_mount_image$f2fs(&(0x7f0000000180), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="6c617a7974696d652c6e6f696e6c696e655f78617474722c6c617a7974696d652c6e6f626172726965722c6163746976655f6c6f67733d342c757365725f78617474722c6d6f64653d6c66732c616c6c6f635f6d6f64653d64656661756c742c00be9ee044c45511e65887f6fac9eba6d787c3684a836f23dbf8ad3dd5931c08b4d8bde7e8acbbf3bf3326f2faa5952a332ad2ced40c98a2affa2dad4d623f9ff3ffa81e45095548ab6200f069d0f63d20fd71d3043b0dd5c4cf9785f3f531abc19bc1678f5e0b33006bd1049ca45fd8500d67a5aa6e1523d900000000007867738729e703bb122283fb2fae9813a0cfefcdf3dc968af1cf80e96649d943198a96d9b1af9c91506b30922be8537f54e65cf60c6b6a5798955796aea325770d6ccc93a95fad93b2c7bad114fcbc55036a301c23b07073c71555791db8919235022bb0ee4294211ab9b43f3fbedecd223722d937aa22b31e2e9c97e5ea94e4ab83d4e5811c7556813c334aec856af0a0c12b3c93ba5aa906c6e2268a0c6cbb913f496d87c608604eb02b2c031d5ae40c75", @ANYRESHEX, @ANYRES32, @ANYRESHEX], 0xff, 0x5534, &(0x7f0000006040)="$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") request_key(0x0, 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000900)='./file0\x00', 0x10, 0x0) mount$incfs(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)='./file0\x00', 0x0, 0x101000, 0x0) stat(&(0x7f00000010c0)='./file0\x00', &(0x7f0000000a00)) 12.230021095s ago: executing program 7 (id=862): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000015c0)={&(0x7f0000000140)=ANY=[], 0xffffffffffffffff, 0x3e, 0x0, 0x2}, 0x28) mkdirat(0xffffffffffffff9c, &(0x7f00000014c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001540)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001580)='./dev/sda\x00', 0x101042, 0xa) ioctl(r0, 0x1, &(0x7f00000015c0)) 11.833266075s ago: executing program 7 (id=874): mkdir(&(0x7f0000000580)='./bus\x00', 0x0) mount$incfs(&(0x7f00000005c0)='.\x00', &(0x7f0000000600)='./bus\x00', &(0x7f0000000640), 0x1804002, 0x0) chdir(&(0x7f0000000680)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000004480)='.\x00', 0x0, 0x2) getdents64(r0, 0xfffffffffffffffe, 0x29) 11.733263585s ago: executing program 36 (id=874): mkdir(&(0x7f0000000580)='./bus\x00', 0x0) mount$incfs(&(0x7f00000005c0)='.\x00', &(0x7f0000000600)='./bus\x00', &(0x7f0000000640), 0x1804002, 0x0) chdir(&(0x7f0000000680)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000004480)='.\x00', 0x0, 0x2) getdents64(r0, 0xfffffffffffffffe, 0x29) 5.259112049s ago: executing program 9 (id=1041): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x25, 0x55a8, &(0x7f0000002000)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./file1\x00', 0x143042, 0x0) pwritev2(r0, &(0x7f0000000b40)=[{&(0x7f0000000b80)="ff", 0x1}], 0x1, 0x25412, 0x4, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x6042, 0x101) pread64$ublk_ch(r1, &(0x7f0000000c80)=@buf_4k, 0x1000, 0x5) 4.504049855s ago: executing program 9 (id=1049): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000015c0)={&(0x7f0000000140)=ANY=[], 0xffffffffffffffff, 0x3e, 0x0, 0x2}, 0x28) mkdirat(0xffffffffffffff9c, &(0x7f00000014c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001540)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001580)='./dev/sda\x00', 0x101042, 0xa) ioctl(r0, 0x1, &(0x7f00000015c0)) 3.913681505s ago: executing program 9 (id=1058): syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x10000, &(0x7f0000000080)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0xee00, @ANYBLOB=',dmask=000002544,uid=', @ANYRESHEX=0x0, @ANYBLOB=',iocharset=macromanian,gid=', @ANYRESHEX=0x0, @ANYBLOB=',namecase=1,umask=00000000000000000000360,namecase=1,umask=00000000000000000000165,errors=continue,uid=', @ANYRESHEX=0x0, @ANYBLOB=',discard,errors=remount-ro,utf8,\x00'], 0x1, 0x1535, &(0x7f00000001c0)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000001700)='.\x00', 0x101000, 0x108) syz_mount_image$vfat(&(0x7f0000006f00), &(0x7f0000006f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804071, 0x0, 0x1, 0x0, &(0x7f0000007040)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000007080)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) getdents64(r0, &(0x7f0000001740)=""/4096, 0x1000) 3.671961959s ago: executing program 9 (id=1063): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7068, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) 3.440479993s ago: executing program 9 (id=1065): syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x8, &(0x7f00000000c0)={[{@utf8}, {@iocharset={'iocharset', 0x3d, 'iso8859-6'}}, {}, {@iocharset={'iocharset', 0x3d, 'macgreek'}}, {@fmask={'fmask', 0x3d, 0x5}}, {@namecase}, {@iocharset={'iocharset', 0x3d, 'iso8859-3'}}, {@keep_last_dots}, {@time_offset={'time_offset', 0x3d, 0x6}}, {@errors_remount}, {@errors_remount}]}, 0x1, 0x152b, &(0x7f0000002600)="$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") openat(0xffffffffffffff9c, &(0x7f0000014180)='./file1\x00', 0x143042, 0x34) r0 = openat(0xffffffffffffff9c, &(0x7f00000141c0)='./file1\x00', 0x8042, 0x0) fcntl$setlease(r0, 0x400, 0x1) unlink(&(0x7f0000014200)='./file1\x00') 3.357002711s ago: executing program 9 (id=1067): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x1, 0x1b0, &(0x7f0000000300)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x100, 0x52) fstatfs(r0, &(0x7f0000000740)=""/200) fsopen(0x0, 0x0) 3.317529505s ago: executing program 0 (id=1069): syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000bff000/0x400000)=nil) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/class/rtc/rtc0/wakealarm\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)='+=', 0x2) 3.254052041s ago: executing program 37 (id=1067): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x1, 0x1b0, &(0x7f0000000300)="$eJzslDGPEkEUx/8zC7tuYoRWKxNJxMJld1EjhQW1hSYajZ1EVoIuYmALoPNTWPsxiA3fQwu96hquu+qKuczsLAzk7uAuB1vc+xVv/rP7dubN28kfBEHcWA7+H//jqLhS30YFjn5+aC1zuJE/LZ08+tN99funf/R3OnvZWF+PARBi+/0LAGZNC4meC7H6dUWPb8EzXTTfvweDp/VHcLzTOgLDB62/GLov8z3vczeOvE/9uC2FL0MgQyhDfb2++Q+GdipVicx4PxxPvrbiOBrsUGzq37zJ8cLon/m/st744FbWywAcgdZ1MLzR+jmcrDdpS4zz3yss17eudn55k3bfrC3EHV37fja9W9qQU0Su3di/kFdp7CLvMi4UtzIfufTnDOqqK/I+RZ5i6U/iF8NDw58Khn/Ukt732nA8edzttTpRJ/oWhvVn/hPffxrWlBGlccXz7BX/c5U/wVi/eI5X2szGqJUkgyCNi3k4cpAMwrMc11b+x1F9kFbN1vbPnqHM7suhauk5QRAEQRAEQRAEQRAEQRDEtVLWo1C4CyUamRDCSYfwtco8DQAA//8J4Fqh") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x100, 0x52) fstatfs(r0, &(0x7f0000000740)=""/200) fsopen(0x0, 0x0) 3.212346916s ago: executing program 0 (id=1071): syz_mount_image$msdos(&(0x7f0000001240), &(0x7f0000000f80)='./file1\x00', 0x2000800, &(0x7f0000001a00)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYRES32], 0x1, 0x2ff, &(0x7f0000001700)="$eJzs3c1qE3sUAPCTj6Zpudx2fbmLwN3cuwlX3yBIBTFQqGShbgzUgrQipJsoCHkFEdQHcOUjufAd7KrgYiSZsUnz0dYyzVT7+8G0Z+ZMZ85MQv6z+J/myd/P93dfHO4lnz9Evd6IatQjjiM2oxyVSJWGP+o/4lpMGlROrcZqAADX3c5Ot7UoN1huKeSiOrOl12t1V+Y+m3U+LakoAAAAAAAAAAAAcjY7/z8Gc+f/R0T59Pz/UTCY6gcAAK6/qfn/zfcF1sLV6PVa3fX0+W2qW9P8fwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKA41Ug2kiT57490dRiPl1psFF0fAJC/48nx/mT5lmSM/wDwG5o//o+XousDAPI3Mf5HnDP+V4orEwDI0YOHj+632u2tnUajHnE06Hf6nfR3mr97r731f2NkMyLK6dajfr9TOcnfSvON8VGH+ZVYz/K35+Zr8e8/aX6Yu7Pdnsqvxu5ybgEAAAAAAAAAAAAAAAAAAAAUrjlq4y9FpP39mXF/f7O5/e7Ls5P+/4l8GmX/H6AcU/39rz9W469qulZeePbVnK8GAAAAAAAAAAAAAAAAAAAAfk2HL1/tdw8OnvaWE5QiIt8jVyJiFFSzLZXLnOJrdjvO2znn4qeCeoyC0mwZtYi49JGHN31+qnSBS14UvEmDiJ/6qyRJb/TjiHN3Lu2vxUxqbflv2qsN1rK33hLO9XbvAi/3n/UYvaaLPjFqS/hUAgAAAAAAAAAAAAAAAACAm2nc/Vt0JQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQnPH3/y8OVrJ9z9rnrKDgSwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABuiO8BAAD//9vHbaw=") syz_mount_image$f2fs(&(0x7f00000008c0), &(0x7f0000000900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="66617374626f6f742c71756f7461000018bbdecde39739fcd1df176dde746ec834120600000000003b814e50a959736d6572462abc30ef5b65c70f73ecea54b5e5bea9836c319f653557e79a002208ce996dda659bd5ba0f4ce5c2080002223dc60000000000000044cd0a1e3686873600000000005493b4b874cd601d5b9fa9b40fe4d76afc3a989c6d60044e89eb96e44d01a1034e3797ffa86870b82939f41ffa0f3d726f085663c29cbdc4c766a7eb77cc36160191acf5ae7469c82ab4145b595b987d75912a0fcd1c061835294cc0c618aba204f8adaa20c80108d356cd88cc86177056b06e7068c40f807d9e539f8f5b64a8ee0725aa8d00000000007cb6020d90ea79b8027cf75964dd86c2ed2b5e75779677aa8c76b848dd03dab190b5f02ec52830a17b01eaae1c3df076000000000000000000000000000083a48a6b926c668b9b90195018ea3619f9d80a0b894e212178e1a19909d764666264fa29e2c055fd7f8e67c2acfb75f0a8d41692f4542a575ee42ed94a0014fba44985cca9df12fe93bfaccf0122a6e7e593613ac0111701b125cc6799224883d08ce470220a6decad26f0378072a571da000000b1a6bdf03fd56697e348b5b494f6fddb9f56142a47a40ef81690a7eca421bd0ad198afa58ce69d61c29deaa93c0efea0df04f20020ee84075b4e1a2ad43d1be1138de4668e7b6137545708790c501f1ed7f6a571d5000000000000007d2bee8ed5acba62b8ce6eee44e813220ebc37ad7d422bb972c33e626d4d13827d303ee15e254c75ee569a56fa9e", @ANYRESOCT=0x0, @ANYRESHEX], 0x25, 0x55bf, &(0x7f0000009400)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006cc0)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000006d00), 0x208e24b) fdatasync(r0) 3.212240365s ago: executing program 3 (id=1072): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000680)={0xa, 0x4e20, 0xfffffffc, @ipv4={'\x00', '\xff\xff', @remote}, 0x1}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000003c40)={0x200000000000001}, 0x8) sendmmsg$inet6(r0, &(0x7f0000003c80)=[{{0x0, 0x0, &(0x7f0000003cc0), 0x171}}], 0x400000000000172, 0x4000000) sendto$inet6(r0, 0x0, 0xf5ff, 0x2404c804, 0x0, 0x0) 3.212131385s ago: executing program 3 (id=1073): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000440)={0x73622a85, 0x100}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000bc0)={0x18, 0x0, &(0x7f0000000cc0)=[@increfs, @request_freeze={0x400c6313, 0x0, 0x1}]}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000ec0)={0x8, 0x0, &(0x7f0000000f00)=[@decrefs], 0x0, 0x100000000000000}) 3.188593218s ago: executing program 3 (id=1074): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f00000002c0)='./file1\x00', 0x20001f, &(0x7f0000000340)={[{@jqfmt_vfsold}, {@noauto_da_alloc}, {@delalloc}]}, 0x3, 0x54f, &(0x7f0000000600)="$eJzs3dFvW1cZAPDv3sSx02VLNvYACFgZg4KqOo27VdMeYDwhhCYh9ghSFxI3qmrXUe2MJfSh+x+QmMQL8MgfgOBtT7zzguCNl/GANKACNRNINbrX14mbxq1LnDjEv590dc851/Z3znXvPfbX1ieAqXU+Iu5GxFxEvBMRi0V7UmzxZm/LHnf/3p213Xt31pLodt/+e5Ifz9pi4DmZZ4rXrETE974V8cPk0bjt7Z2bq41G/XYv5Pxyp7m53N7euXSjubpR36jfqtWurly9/PqV12rjGehMxEvNuaLy+Y9+f/drP866tVC09MdxSFePpPd6pb04mdmI+M6Y40zKTDGeuf/t6eM+3TylNCJeiIiX8+t/MWbydxMAOMu63cXoLg7WAYCzLs1zYElaLXIBC5Gm1Wovh/dinEsbrXbn4vXW1q31Xq5sKUrp9RuN+uUiV7gUpSSrr+Tl/XrtQP1KRDwfET8pz+f16lqrsT7JDz4AMMWeOTD//6vcm/8BgDOu8nB1aVL9AABOTmXSHQAATpz5HwCmj/kfAKaP+R8Apo/5HwCmj/kfAKbKd996K9u6u8XvX6+/u711s/XupfV6+2a1ubVWXWvd3qxutFob+W/2NJ/0eo1Wa3Pl1dh6b+nrm+3Ocnt751qztXWrcy3/Xe9r9dKJjAoAeJznX/rwT0lE3H1jPsoxn7f113IwV8PZlk66A8DEzEy6A8DEWO0LptcRvuNLD8AZkS/E+qBYFOSQ45WIIjs4YMhjh/BRA06ZC5/Zz/9nW8j/w9QYyP/7V8AwZeT/YXr5Ug7Tq9tNRl3zP0Z9IABwusnxA8nhzS8U+18Vfznwg/WDj/jgOHsFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp1t//d9qlPO1wBciTavViGcjYilKyfUbjfrliHguIv5YLpWz+sqE+wwAHFX616RY/+vC4isLB4/OJZ+U831E/Ohnb//0vdVO5/YfsvZ/7LV3Pijaa08dfH48YwAAHqc/T+f7gS/y9+/dWetvJ9mfj78ZEZVe/N17c7G7F382ZvN9JUoRce6fSVHvSQZyF0dx9/2IuPKbIuKgfxcrJPdWPj0YP4v97Ljif/qw85/EQp6D6cdPH4qf5sd6++xcfGoMfYFp82F2/3nzsOsvjfP5vn/9xYO96+/nvbbZMcQv7n/ZS63t5vfA/fj9+9/MkPvf+VFjvPq7b/dKj37d+vj9iM/ORvRjZ1t/Leh+/GRI/FdGCX4+4s+f+8LLww53fxFxIR6Ovx9hv7TcaW4ut7d3Lt1orm7UN+q3arWrK1cvv37ltdpynqNeHj4b/O2Ni88NO5aN/9yQ+JUnjP/Lo4w/In75n3e+/8XHxP/qlw6Ln8aLj4mfzYlfGTH+6rlfV4Ydy+KvDxn/k97/iyPG/+gvO48sGw4ATE57e+fmaqNRv50VylEU9lqOp9D/IHESsU5XoRSnohv/R4X+n5VeS1Ya8em/jWPpT3noO/iNh1ruF/0+htMyF0/1rG53sCUZ9bQMu2OMI+sGnAZ7F31EfDLpzgAAAAAAAAAAAAAAAIc6vv+/le61THqMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnF3/DQAA///Xj86C") openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r0, &(0x7f0000000200)=[{{&(0x7f0000000380)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x7080000, @remote, 0x7, 0x1000001}, 0x80, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="080100000000000029000000", @ANYRES64=r0], 0x108}}], 0x2, 0xc040) 2.958109831s ago: executing program 3 (id=1075): syz_mount_image$exfat(&(0x7f0000000080), &(0x7f00000000c0)='./file2\x00', 0x80, &(0x7f0000000100)=ANY=[], 0x7d, 0x1508, &(0x7f0000000140)="$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") syz_mount_image$fuse(0x0, &(0x7f00000018c0)='./bus\x00', 0x40, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f0000001900)='.\x00', &(0x7f0000001940)='./bus\x00', &(0x7f0000001980), 0x1004002, 0x0) chdir(&(0x7f00000019c0)='./bus\x00') mount$incfs(&(0x7f0000001a00)='./bus\x00', &(0x7f0000001a40)='./file0\x00', &(0x7f0000001a80), 0x4482, 0x0) 2.755045182s ago: executing program 3 (id=1077): syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r2, 0x2, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x4e}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x4, 0x6, r1, &(0x7f00000001c0)='m', 0x1, 0x1}]) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 1.984460269s ago: executing program 3 (id=1081): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000600)='\x00'/14, 0x0, 0x17ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.940404784s ago: executing program 38 (id=1081): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000600)='\x00'/14, 0x0, 0x17ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.707987667s ago: executing program 0 (id=1087): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000480)={0x1, &(0x7f00000004c0)=[{0x6, 0x9, 0x7, 0x7ffc0001}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./debug\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./debug/clk/clk_summary\x00', 0x0, 0x0) read(r0, &(0x7f0000000500)=""/1000, 0x3e8) 1.276180721s ago: executing program 0 (id=1093): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000100)={@local}) 1.190303969s ago: executing program 0 (id=1096): r0 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040e60405000001010203010902200001010080320904000002080650000705810200020007050202"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f00000009c0)={0x1c, &(0x7f0000000280)={0x40, 0x1a, 0x3, "bb11b1"}, 0x0, 0x0}) syz_usb_control_io$uac2(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000240)={0x0, 0x10, 0x2, "8b61"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 1.190189429s ago: executing program 2 (id=1070): r0 = syz_usb_connect$hid(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010002000000406d042bc500240102000109022200010100a0320904000001030000000921110100012215000705810340"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0022150000000600ff0901a1018520150026ff007508950e8102c0"], 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000300), 0x82, 0x2) read$hidraw(r1, &(0x7f0000000340)=""/80, 0x50) 612.447218ms ago: executing program 0 (id=1103): r0 = socket(0x1, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000240), &(0x7f0000000280)=@udp=r0}, 0x20) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000194c0)=""/103, 0x67}], 0x1}, 0x0) sendmmsg$unix(r0, &(0x7f0000019600)=[{{&(0x7f000001dac0)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) 612.216998ms ago: executing program 5 (id=1082): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000300)=0x7, 0x4) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000340)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendto$packet(r0, &(0x7f00000003c0)="0503d0fcd3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000400)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 520.328837ms ago: executing program 4 (id=1109): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r0, &(0x7f0000000080), 0x2000011a) syz_clone3(&(0x7f0000000640)={0x20901400, &(0x7f00000006c0), 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) 505.859158ms ago: executing program 8 (id=1110): r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000080)={0x1d, r1}, 0x10) 478.563051ms ago: executing program 4 (id=1111): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_mount_image$f2fs(&(0x7f0000000cc0), &(0x7f0000000d00)='./bus\x00', 0x0, &(0x7f0000000f80)={[{@jqfmt_vfsv0}, {@memory_low}, {@noquota}, {@inline_data}, {@data_flush}, {@discard_unit_segment}, {@prjjquota={'prjjquota', 0x3d, 'noquota'}}, {@noextent_cache}, {}, {@lfs_mode}, {@resgid}, {@disable_ext_identify}, {@jqfmt_vfsv1}, {@usrjquota={'usrjquota', 0x3d, '-)$-.%\'*,'}}]}, 0xfc, 0x5527, &(0x7f0000003880)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./file2\x00', 0x143042, 0x40) read$FUSE(r0, 0x0, 0x0) 478.466861ms ago: executing program 8 (id=1112): r0 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000500)={0x0, &(0x7f0000000540)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @ro32=0x440a, 0xc6}}], 0x68}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 447.781334ms ago: executing program 8 (id=1113): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000240), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000a80)={{0x1, 0x0, 0x8, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000ac0)={0x6, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) close_range(r0, 0xffffffffffffffff, 0x400000000000000) 376.494412ms ago: executing program 8 (id=1114): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x28, 0x10, 0x1, 0x4, 0x0, "", [@nested={0x18, 0x0, 0x0, 0x0, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x8, 0x1c, 0x0, 0x0, @u32=0x3}]}]}, 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) 376.345232ms ago: executing program 8 (id=1115): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x25, 0x55a8, &(0x7f0000002000)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./file1\x00', 0x143042, 0x0) pwritev2(r0, &(0x7f0000000b40)=[{&(0x7f0000000b80)="ff", 0x1}], 0x1, 0x25412, 0x4, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x6042, 0x101) sendfile(r1, r1, 0x0, 0xe3aa6ea) 119.366737ms ago: executing program 8 (id=1116): syz_mount_image$msdos(&(0x7f0000001240), &(0x7f0000000f80)='./file1\x00', 0x2000800, &(0x7f0000001a00)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYRES32], 0x1, 0x2ff, &(0x7f0000001700)="$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") syz_mount_image$f2fs(&(0x7f00000008c0), &(0x7f0000000900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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", @ANYRESOCT=0x0, @ANYRESHEX], 0x25, 0x55bf, &(0x7f0000009400)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006cc0)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000006d00), 0x208e24b) fdatasync(r0) 109.509278ms ago: executing program 4 (id=1117): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) mmap$IORING_OFF_SQ_RING(0x0, 0x7, 0x100000e, 0x4010, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/stat\x00') getdents64(r0, 0xffffffffffffffff, 0x43) 24.484167ms ago: executing program 4 (id=1118): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfd, 0x8}, 0xc) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) close(r1) 24.350617ms ago: executing program 4 (id=1119): setns(0xc9, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x5, {{0xa, 0x4e20, 0x0, @mcast1={0xff, 0x7}, 0x9}}, {{0xa, 0x3, 0x0, @mcast2}}}, 0x108) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 4 (id=1120): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000600)={@remote, 0x3f, r2}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000640)={@remote, r2}, 0x14) kernel console output (not intermixed with test programs): rocess permissive=1 [ 15.366656][ T28] audit: type=1400 audit(1794399075.688:63): avc: denied { siginh } for pid=225 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.1.4' (ED25519) to the list of known hosts. [ 23.113369][ T28] audit: type=1400 audit(1794399083.428:64): avc: denied { mounton } for pid=279 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 23.116932][ T279] cgroup: Unknown subsys name 'net' [ 23.136211][ T28] audit: type=1400 audit(1794399083.438:65): avc: denied { mount } for pid=279 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.163383][ T28] audit: type=1400 audit(1794399083.468:66): avc: denied { unmount } for pid=279 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.163819][ T279] cgroup: Unknown subsys name 'devices' [ 23.276413][ T279] cgroup: Unknown subsys name 'hugetlb' [ 23.282036][ T279] cgroup: Unknown subsys name 'rlimit' [ 23.386616][ T28] audit: type=1400 audit(1794399083.708:67): avc: denied { setattr } for pid=279 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 23.409848][ T28] audit: type=1400 audit(1794399083.708:68): avc: denied { mounton } for pid=279 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 23.434786][ T28] audit: type=1400 audit(1794399083.708:69): avc: denied { mount } for pid=279 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 23.457959][ T281] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 23.467290][ T28] audit: type=1400 audit(1794399083.798:70): avc: denied { relabelto } for pid=281 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.492730][ T28] audit: type=1400 audit(1794399083.798:71): avc: denied { write } for pid=281 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.503493][ T279] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 23.519031][ T28] audit: type=1400 audit(1794399083.818:72): avc: denied { read } for pid=279 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.552550][ T28] audit: type=1400 audit(1794399083.818:73): avc: denied { open } for pid=279 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.321796][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.329117][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.336722][ T289] device bridge_slave_0 entered promiscuous mode [ 24.346295][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.353389][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.360919][ T289] device bridge_slave_1 entered promiscuous mode [ 24.374644][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.381703][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.389135][ T288] device bridge_slave_0 entered promiscuous mode [ 24.397117][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.404354][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.411877][ T288] device bridge_slave_1 entered promiscuous mode [ 24.468821][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.476033][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.483404][ T287] device bridge_slave_0 entered promiscuous mode [ 24.491911][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.499074][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.506463][ T287] device bridge_slave_1 entered promiscuous mode [ 24.582414][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.589603][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.597083][ T290] device bridge_slave_0 entered promiscuous mode [ 24.606977][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.614042][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.621461][ T290] device bridge_slave_1 entered promiscuous mode [ 24.643689][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.650793][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.658270][ T291] device bridge_slave_0 entered promiscuous mode [ 24.668006][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.675086][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.682543][ T291] device bridge_slave_1 entered promiscuous mode [ 24.791403][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.798504][ T287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.805834][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.812878][ T287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.834266][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.841369][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.848687][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.855741][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.879193][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.886311][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.893606][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.900679][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.938089][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.945275][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.952551][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.959654][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.972778][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.979916][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.987229][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.994292][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.034579][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.041866][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.050598][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.058317][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.066169][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.073755][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.082140][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.090876][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.098156][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.105370][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.112780][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.120481][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 25.127972][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.143914][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.176172][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.184890][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.193092][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.200168][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.209155][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.217237][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.225189][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.233339][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.240409][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.247803][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.256219][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.263273][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.270881][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 25.278438][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.286055][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.294396][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.301452][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.308956][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.317207][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.324275][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.331912][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.340190][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.347236][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.359428][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.367922][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.379474][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.387834][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.399724][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.408034][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.416151][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.424661][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.438335][ T287] device veth0_vlan entered promiscuous mode [ 25.452696][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.460841][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.469066][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 25.477768][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.486149][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.493197][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.500713][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.508978][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.517088][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.524577][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.534689][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.542911][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.556052][ T287] device veth1_macvtap entered promiscuous mode [ 25.566084][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.574516][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.582635][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.590449][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.598662][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.620541][ T291] device veth0_vlan entered promiscuous mode [ 25.634459][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.642634][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.650753][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.659228][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.667437][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.675946][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.684382][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.692232][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.700510][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.708255][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.716395][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.724871][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.733811][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.742307][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.752316][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.760956][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.773669][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.782183][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.797737][ T289] device veth0_vlan entered promiscuous mode [ 25.804612][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.812818][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.821317][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.829913][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.838016][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.846315][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.853816][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.866310][ T291] device veth1_macvtap entered promiscuous mode [ 25.878218][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.886147][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.897080][ T290] device veth0_vlan entered promiscuous mode [ 25.905858][ T288] device veth0_vlan entered promiscuous mode [ 25.917795][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.925390][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.933145][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.941459][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.949820][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.958339][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.966835][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.974449][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.991304][ T290] device veth1_macvtap entered promiscuous mode [ 26.004003][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.012510][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.012764][ T287] request_module fs-gadgetfs succeeded, but still no fs? [ 26.022759][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.037184][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 26.045736][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.053922][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.062361][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.073311][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 26.081733][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.091232][ T289] device veth1_macvtap entered promiscuous mode [ 26.104411][ T288] device veth1_macvtap entered promiscuous mode [ 26.116872][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 26.125844][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 26.133632][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.133723][ T311] loop0: detected capacity change from 0 to 512 [ 26.143725][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.172765][ T311] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 26.177025][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.190695][ T311] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 26.202046][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.212641][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.221285][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.229759][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.238248][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.258803][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.269825][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.284932][ T287] EXT4-fs (loop0): unmounting filesystem. [ 26.307768][ T321] mtrr: base(0x2000) is not aligned on a size(0x0000) boundary [ 26.327290][ T325] loop0: detected capacity change from 0 to 512 [ 26.337330][ T324] xt_hashlimit: size too large, truncated to 1048576 [ 26.371913][ T329] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 26.384668][ T331] loop2: detected capacity change from 0 to 128 [ 26.409268][ T325] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 26.420428][ T331] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 26.447104][ T331] ext4 filesystem being mounted at /1/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 26.465682][ T325] FAT-fs (loop0): Filesystem has been set read-only [ 26.483269][ T325] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548) [ 26.516162][ T325] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548) [ 26.531044][ T290] EXT4-fs (loop2): unmounting filesystem. [ 26.576945][ T341] loop2: detected capacity change from 0 to 128 [ 26.627589][ T341] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 26.663938][ T341] ext4 filesystem being mounted at /2/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 26.754671][ T290] EXT4-fs (loop2): unmounting filesystem. [ 26.840089][ T359] loop2: detected capacity change from 0 to 128 [ 26.878081][ T359] ======================================================= [ 26.878081][ T359] WARNING: The mand mount option has been deprecated and [ 26.878081][ T359] and is ignored by this kernel. Remove the mand [ 26.878081][ T359] option from the mount to silence this warning. [ 26.878081][ T359] ======================================================= [ 26.940482][ T367] loop0: detected capacity change from 0 to 512 [ 26.964355][ T367] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 26.973384][ T367] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 27.001137][ T377] loop2: detected capacity change from 0 to 512 [ 27.016176][ T287] EXT4-fs (loop0): unmounting filesystem. [ 27.022466][ T377] FAT-fs (loop2): Directory bread(block 2080) failed [ 27.032560][ T377] FAT-fs (loop2): Directory bread(block 2081) failed [ 27.039494][ T377] FAT-fs (loop2): Directory bread(block 2082) failed [ 27.051310][ T377] FAT-fs (loop2): Directory bread(block 2083) failed [ 27.059556][ T377] FAT-fs (loop2): Directory bread(block 2084) failed [ 27.066546][ T377] FAT-fs (loop2): Directory bread(block 2085) failed [ 27.079035][ T377] FAT-fs (loop2): Directory bread(block 2086) failed [ 27.086071][ T377] FAT-fs (loop2): Directory bread(block 2087) failed [ 27.105133][ T388] loop4: detected capacity change from 0 to 512 [ 27.122991][ T388] EXT4-fs: Ignoring removed oldalloc option [ 27.151386][ T388] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 27.177856][ T395] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 27.195282][ T388] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 27.203761][ T388] EXT4-fs (loop4): orphan cleanup on readonly fs [ 27.229276][ T388] EXT4-fs error (device loop4): ext4_orphan_get:1431: comm syz.4.29: bad orphan inode 267 [ 27.254020][ T388] EXT4-fs (loop4): Remounting filesystem read-only [ 27.260730][ T388] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 27.269470][ T404] loop0: detected capacity change from 0 to 128 [ 27.287066][ T406] device syzkaller1 entered promiscuous mode [ 27.305053][ T404] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 27.317971][ T388] EXT4-fs warning (device loop4): dx_probe:893: inode #2: comm syz.4.29: dx entry: limit 0 != root limit 125 [ 27.330136][ T388] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.29: Corrupt directory, running e2fsck is recommended [ 27.345945][ T404] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 27.359437][ T291] EXT4-fs (loop4): unmounting filesystem. [ 27.403936][ T8] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 27.604394][ T451] loop4: detected capacity change from 0 to 128 [ 27.621148][ T451] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 27.630557][ T451] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 27.661481][ T291] EXT4-fs (loop4): unmounting filesystem. [ 27.749165][ T468] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 27.762249][ T468] ext4 filesystem being mounted at /13/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 27.825873][ T479] exfat: Deprecated parameter 'utf8' [ 27.831260][ T479] exfat: Deprecated parameter 'namecase' [ 27.863113][ T479] exfat: Deprecated parameter 'utf8' [ 27.869747][ T290] EXT4-fs (loop2): unmounting filesystem. [ 27.888981][ T479] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 28.025186][ T493] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 28.079093][ T290] EXT4-fs (loop2): unmounting filesystem. [ 28.119269][ T506] EXT4-fs: Ignoring removed bh option [ 28.146493][ T506] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 28.159320][ T28] kauditd_printk_skb: 112 callbacks suppressed [ 28.159335][ T28] audit: type=1400 audit(1794399088.478:186): avc: denied { mounton } for pid=505 comm="syz.2.80" path="/18/file0/bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 28.209608][ T290] EXT4-fs error (device loop2): ext4_read_inline_dir:1619: inode #12: block 7: comm syz-executor: path /18/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 28.232918][ T28] audit: type=1400 audit(1794399088.518:187): avc: denied { write } for pid=505 comm="syz.2.80" name="bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 28.261333][ T28] audit: type=1400 audit(1794399088.518:188): avc: denied { add_name } for pid=505 comm="syz.2.80" name="work" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 28.281640][ T290] EXT4-fs (loop2): Remounting filesystem read-only [ 28.294036][ T40] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 28.311189][ T290] EXT4-fs error (device loop2): ext4_read_inline_dir:1619: inode #12: block 7: comm syz-executor: path /18/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 28.341143][ T28] audit: type=1400 audit(1794399088.518:189): avc: denied { setattr } for pid=505 comm="syz.2.80" name="work" dev="loop2" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 28.363166][ T290] EXT4-fs (loop2): Remounting filesystem read-only [ 28.371641][ T290] EXT4-fs error (device loop2): empty_inline_dir:1903: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 28.397241][ T514] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 28.397268][ T28] audit: type=1400 audit(1794399088.518:190): avc: denied { remove_name } for pid=505 comm="syz.2.80" name="#1" dev="loop2" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 28.428035][ T290] EXT4-fs (loop2): Remounting filesystem read-only [ 28.434880][ T290] EXT4-fs warning (device loop2): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 28.449627][ T28] audit: type=1400 audit(1794399088.518:191): avc: denied { rename } for pid=505 comm="syz.2.80" name="#1" dev="loop2" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 28.463600][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 28.472163][ T290] EXT4-fs error (device loop2): ext4_read_inline_dir:1619: inode #12: block 7: comm syz-executor: path /18/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 28.501316][ T28] audit: type=1400 audit(1794399088.518:192): avc: denied { unlink } for pid=505 comm="syz.2.80" name="#1" dev="loop2" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 28.506068][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 28.524364][ T290] EXT4-fs (loop2): Remounting filesystem read-only [ 28.537497][ T28] audit: type=1400 audit(1794399088.518:193): avc: denied { unlink } for pid=505 comm="syz.2.80" name="#2" dev="loop2" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 28.559021][ T40] usb 4-1: Using ep0 maxpacket: 16 [ 28.564302][ T290] EXT4-fs error (device loop2): ext4_read_inline_dir:1619: inode #12: block 7: comm syz-executor: path /18/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 28.587576][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 28.587829][ T28] audit: type=1400 audit(1794399088.518:194): avc: denied { write } for pid=505 comm="syz.2.80" name="/" dev="overlay" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 28.609232][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 28.618318][ T40] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 28.635295][ T290] EXT4-fs (loop2): Remounting filesystem read-only [ 28.641943][ T290] EXT4-fs error (device loop2): empty_inline_dir:1903: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 28.659569][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 28.662546][ T40] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 28.680529][ T28] audit: type=1400 audit(1794399088.518:195): avc: denied { add_name } for pid=505 comm="syz.2.80" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 28.697274][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 28.701605][ T290] EXT4-fs (loop2): Remounting filesystem read-only [ 28.715451][ T40] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 28.725222][ T40] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 28.733161][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 28.738312][ T290] EXT4-fs warning (device loop2): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 28.760755][ T40] usb 4-1: config 0 interface 0 has no altsetting 0 [ 28.766923][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 28.767497][ T40] usb 4-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 28.784912][ T290] EXT4-fs error (device loop2): ext4_read_inline_dir:1619: inode #12: block 7: comm syz-executor: path /18/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 28.807105][ T40] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.817374][ T40] usb 4-1: config 0 descriptor?? [ 28.822868][ T290] EXT4-fs (loop2): Remounting filesystem read-only [ 28.830890][ T290] EXT4-fs error (device loop2): ext4_read_inline_dir:1619: inode #12: block 7: comm syz-executor: path /18/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 28.853546][ T290] EXT4-fs (loop2): Remounting filesystem read-only [ 28.860363][ T290] EXT4-fs error (device loop2): empty_inline_dir:1903: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 28.860418][ T514] syz.0.84 (514) used greatest stack depth: 21848 bytes left [ 28.889071][ T290] EXT4-fs (loop2): Remounting filesystem read-only [ 28.895929][ T290] EXT4-fs warning (device loop2): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 28.916324][ T290] EXT4-fs error (device loop2): ext4_read_inline_dir:1619: inode #12: block 7: comm syz-executor: path /18/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 28.945007][ T290] EXT4-fs warning (device loop2): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 28.969716][ T290] EXT4-fs warning (device loop2): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 29.000737][ T290] EXT4-fs warning (device loop2): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 29.016229][ T526] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 29.024618][ T526] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e118, mo2=0002] [ 29.033205][ T290] EXT4-fs warning (device loop2): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 29.048350][ T526] EXT4-fs (loop4): orphan cleanup on readonly fs [ 29.055988][ T290] EXT4-fs warning (device loop2): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 29.071025][ T526] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.89: bg 0: block 15: invalid block bitmap [ 29.084785][ T290] EXT4-fs warning (device loop2): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 29.099464][ T526] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 29.109855][ T290] EXT4-fs warning (device loop2): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 29.124476][ T526] EXT4-fs (loop4): 1 truncate cleaned up [ 29.147598][ T526] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 29.201477][ T526] EXT4-fs error (device loop4): ext4_encrypted_get_link:46: inode #16: comm syz.4.89: bad symlink. [ 29.213535][ T526] EXT4-fs error (device loop4): ext4_encrypted_get_link:46: inode #16: comm syz.4.89: bad symlink. [ 29.225609][ T526] EXT4-fs error (device loop4): ext4_encrypted_get_link:46: inode #16: comm syz.4.89: bad symlink. [ 29.248992][ T40] logitech-djreceiver 0003:046D:C53A.0001: hiddev96,hidraw0: USB HID vff.fc Device [HID 046d:c53a] on usb-dummy_hcd.3-1/input0 [ 29.275995][ T291] EXT4-fs (loop4): unmounting filesystem. [ 29.461461][ T6] usb 4-1: USB disconnect, device number 2 [ 29.566497][ T542] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.573621][ T542] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.581396][ T542] device bridge_slave_0 entered promiscuous mode [ 29.588497][ T542] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.595681][ T542] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.603182][ T542] device bridge_slave_1 entered promiscuous mode [ 29.657325][ T542] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.664417][ T542] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.671697][ T542] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.678782][ T542] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.702888][ T309] input: syz0 as /devices/virtual/misc/uhid/0005:0B05:8502.0002/input/input4 [ 29.713013][ T309] hid-generic 0005:0B05:8502.0002: input,hidraw0: BLUETOOTH HID v0.00 Mouse [syz0] on syz0 [ 29.726267][ T313] device bridge_slave_1 left promiscuous mode [ 29.732455][ T313] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.740455][ T313] device bridge_slave_0 left promiscuous mode [ 29.746973][ T313] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.770769][ T555] fido_id[555]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 29.785601][ T313] device veth1_macvtap left promiscuous mode [ 29.796375][ T313] device veth0_vlan left promiscuous mode [ 29.811476][ T560] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 29.854342][ T560] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 29.927446][ T287] EXT4-fs (loop0): unmounting filesystem. [ 29.964115][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 29.982037][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 29.991956][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 30.029425][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 30.044276][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 30.078350][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 30.108281][ T542] device veth0_vlan entered promiscuous mode [ 30.116252][ T573] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 30.142119][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 30.150550][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 30.158103][ T573] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 30.168958][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 30.186558][ T287] EXT4-fs (loop0): unmounting filesystem. [ 30.210374][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 30.226783][ T542] device veth1_macvtap entered promiscuous mode [ 30.258564][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 30.276667][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 30.289677][ T582] FAT-fs (loop0): error, corrupted file size (i_pos 0, 8960) [ 30.306631][ T582] FAT-fs (loop0): error, corrupted file size (i_pos 0, 8960) [ 30.326281][ T582] FAT-fs (loop0): error, corrupted file size (i_pos 0, 8960) [ 30.344197][ T582] FAT-fs (loop0): error, corrupted file size (i_pos 0, 8960) [ 30.380269][ T584] FAT-fs (loop5): Directory bread(block 64) failed [ 30.402571][ T584] FAT-fs (loop5): Directory bread(block 65) failed [ 30.411242][ T584] FAT-fs (loop5): Directory bread(block 66) failed [ 30.418752][ T584] FAT-fs (loop5): Directory bread(block 67) failed [ 30.434121][ T584] FAT-fs (loop5): Directory bread(block 68) failed [ 30.445716][ T584] FAT-fs (loop5): Directory bread(block 69) failed [ 30.452630][ T584] FAT-fs (loop5): Directory bread(block 70) failed [ 30.459680][ T584] FAT-fs (loop5): Directory bread(block 71) failed [ 30.466928][ T584] FAT-fs (loop5): Directory bread(block 72) failed [ 30.473700][ T584] FAT-fs (loop5): Directory bread(block 73) failed [ 30.555516][ T584] syz.5.91: attempt to access beyond end of device [ 30.555516][ T584] loop5: rw=2049, sector=1224, nr_sectors = 256 limit=256 [ 30.576553][ T584] syz.5.91: attempt to access beyond end of device [ 30.576553][ T584] loop5: rw=2049, sector=1512, nr_sectors = 320 limit=256 [ 30.600719][ T584] syz.5.91: attempt to access beyond end of device [ 30.600719][ T584] loop5: rw=2049, sector=1864, nr_sectors = 576 limit=256 [ 30.689098][ T562] F2FS-fs (loop1): Invalid segment/section count (458783, 24 x 150994945) [ 30.701316][ T562] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 30.714919][ T606] device-mapper: ioctl: Empty message received. [ 30.731114][ T562] F2FS-fs (loop1): invalid crc value [ 30.770970][ T562] F2FS-fs (loop1): Found nat_bits in checkpoint [ 30.807238][ T618] EXT4-fs: Ignoring removed nobh option [ 30.837561][ T618] EXT4-fs (loop0): orphan cleanup on readonly fs [ 30.853647][ T618] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 30.862551][ T562] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 30.863189][ T618] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz.0.122: attempt to clear invalid blocks 2 len 1 [ 30.872068][ T562] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 30.884398][ T618] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 30.905486][ T618] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.122: invalid indirect mapped block 1819239214 (level 0) [ 30.954223][ T618] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.122: invalid indirect mapped block 1819239214 (level 1) [ 30.974807][ T618] EXT4-fs (loop0): 1 truncate cleaned up [ 30.980597][ T618] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 30.994094][ T562] F2FS-fs (loop1): sanity_check_inode: inode (ino=4, mode=16877) should not have inline_data, run fsck to fix [ 31.018929][ T562] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=60900, run fsck to fix. [ 31.029664][ T618] EXT4-fs (loop0): shut down requested (2) [ 31.070481][ T287] EXT4-fs (loop0): unmounting filesystem. [ 31.172263][ T637] set_capacity_and_notify: 13 callbacks suppressed [ 31.172284][ T637] loop0: detected capacity change from 0 to 8192 [ 31.205633][ T637] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 31.291465][ T647] loop1: detected capacity change from 0 to 512 [ 31.314757][ T647] EXT4-fs (loop1): Test dummy encryption mode enabled [ 31.335502][ T647] EXT4-fs error (device loop1): ext4_orphan_get:1405: inode #15: comm syz.1.127: inode has both inline data and extents flags [ 31.351288][ T647] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.127: couldn't read orphan inode 15 (err -117) [ 31.363527][ T647] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 31.387927][ T647] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 31.406396][ T288] EXT4-fs (loop1): unmounting filesystem. [ 31.438152][ T6] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 31.510857][ T681] loop4: detected capacity change from 0 to 512 [ 31.530343][ T681] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.148: bg 0: block 5: invalid block bitmap [ 31.552293][ T681] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 31.561265][ T681] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.148: invalid indirect mapped block 3 (level 2) [ 31.575245][ T681] EXT4-fs (loop4): 1 orphan inode deleted [ 31.581002][ T681] EXT4-fs (loop4): 1 truncate cleaned up [ 31.586803][ T681] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 31.614343][ T291] EXT4-fs (loop4): unmounting filesystem. [ 31.636576][ T692] netlink: 4 bytes leftover after parsing attributes in process `syz.1.154'. [ 31.650291][ T695] loop3: detected capacity change from 0 to 512 [ 32.026082][ T758] Driver unsupported XDP return value 0 on prog (id 24) dev N/A, expect packet loss! [ 32.049446][ T760] loop5: detected capacity change from 0 to 512 [ 32.059907][ T760] EXT4-fs (loop5): Test dummy encryption mode enabled [ 32.066993][ T760] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 32.081020][ T760] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 32.092873][ T760] EXT4-fs error (device loop5): ext4_orphan_get:1431: comm syz.5.182: bad orphan inode 131083 [ 32.104126][ T760] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 32.126945][ T760] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 32.145410][ T542] EXT4-fs (loop5): unmounting filesystem. [ 32.180366][ T775] loop5: detected capacity change from 0 to 128 [ 32.194218][ T308] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 32.257304][ T779] netlink: 'syz.0.190': attribute type 4 has an invalid length. [ 32.278239][ T779] syz.0.190 (779) used greatest stack depth: 21440 bytes left [ 32.324318][ T798] FAULT_INJECTION: forcing a failure. [ 32.324318][ T798] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 32.337838][ T798] CPU: 0 PID: 798 Comm: syz.5.199 Not tainted syzkaller #0 [ 32.345106][ T798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 32.355191][ T798] Call Trace: [ 32.358485][ T798] [ 32.361439][ T798] __dump_stack+0x21/0x24 [ 32.365789][ T798] dump_stack_lvl+0x110/0x170 [ 32.370501][ T798] ? __cfi_dump_stack_lvl+0x8/0x8 [ 32.375530][ T798] ? unwind_get_return_address+0x4d/0x90 [ 32.381178][ T798] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 32.387347][ T798] dump_stack+0x15/0x24 [ 32.391516][ T798] should_fail_ex+0x3bf/0x510 [ 32.396205][ T798] should_fail_alloc_page+0x61/0x90 [ 32.401424][ T798] prepare_alloc_pages+0x131/0x570 [ 32.406565][ T798] ? __alloc_pages_bulk+0x9d0/0x9d0 [ 32.411782][ T798] ? kasan_set_track+0x60/0x70 [ 32.416565][ T798] ? kasan_set_track+0x4b/0x70 [ 32.421347][ T798] ? kasan_save_alloc_info+0x1f/0x30 [ 32.426648][ T798] ? __kasan_slab_alloc+0x72/0x80 [ 32.431688][ T798] ? slab_post_alloc_hook+0x4f/0x2d0 [ 32.436990][ T798] __alloc_pages+0x15b/0x610 [ 32.441596][ T798] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 32.447674][ T798] ? __cfi___alloc_pages+0x10/0x10 [ 32.452810][ T798] __get_free_pages+0xe/0x30 [ 32.457445][ T798] kasan_populate_vmalloc_pte+0x29/0x120 [ 32.463097][ T798] __apply_to_page_range+0x8db/0xc80 [ 32.468421][ T798] ? __cfi_kasan_populate_vmalloc_pte+0x10/0x10 [ 32.474678][ T798] ? __cfi_kasan_populate_vmalloc_pte+0x10/0x10 [ 32.480938][ T798] apply_to_page_range+0x3b/0x50 [ 32.485896][ T798] kasan_populate_vmalloc+0x60/0x70 [ 32.491126][ T798] alloc_vmap_area+0x1789/0x18c0 [ 32.496082][ T798] ? vm_map_ram+0x930/0x930 [ 32.500602][ T798] ? __kasan_kmalloc+0x95/0xb0 [ 32.505380][ T798] ? kmalloc_node_trace+0x3d/0xb0 [ 32.510409][ T798] __get_vm_area_node+0x160/0x360 [ 32.515453][ T798] __vmalloc_node_range+0x326/0x1440 [ 32.520750][ T798] ? prealloc_init+0x13e/0x920 [ 32.525531][ T798] ? pcpu_block_update_hint_alloc+0x8a0/0xc30 [ 32.531624][ T798] ? pcpu_memcg_post_alloc_hook+0x17e/0x270 [ 32.537542][ T798] ? __kasan_check_write+0x14/0x20 [ 32.542670][ T798] ? __cfi___vmalloc_node_range+0x10/0x10 [ 32.548425][ T798] ? debug_smp_processor_id+0x17/0x20 [ 32.553819][ T798] ? get_random_u32+0x309/0x520 [ 32.558714][ T798] bpf_map_area_alloc+0xd7/0xe0 [ 32.563587][ T798] ? prealloc_init+0x13e/0x920 [ 32.568367][ T798] prealloc_init+0x13e/0x920 [ 32.572978][ T798] htab_map_alloc+0xb03/0xfb0 [ 32.577668][ T798] map_create+0x467/0xcf0 [ 32.582016][ T798] __sys_bpf+0x34e/0x850 [ 32.586269][ T798] ? bpf_link_show_fdinfo+0x330/0x330 [ 32.591661][ T798] ? fpregs_restore_userregs+0x128/0x260 [ 32.597303][ T798] __x64_sys_bpf+0x7c/0x90 [ 32.601768][ T798] x64_sys_call+0x488/0x9a0 [ 32.606292][ T798] do_syscall_64+0x4c/0xa0 [ 32.610721][ T798] ? clear_bhb_loop+0x30/0x80 [ 32.615412][ T798] ? clear_bhb_loop+0x30/0x80 [ 32.620123][ T798] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 32.626038][ T798] RIP: 0033:0x7fcd6fda8f19 [ 32.630466][ T798] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 32.650080][ T798] RSP: 002b:00007fcd70cd4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 32.658503][ T798] RAX: ffffffffffffffda RBX: 00007fcd70025fa0 RCX: 00007fcd6fda8f19 [ 32.666491][ T798] RDX: 0000000000000048 RSI: 0000200000000d00 RDI: 0100000000000000 [ 32.674466][ T798] RBP: 00007fcd6fe37f6d R08: 0000000000000000 R09: 0000000000000000 [ 32.682443][ T798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 32.690417][ T798] R13: 00007fcd70026038 R14: 00007fcd70025fa0 R15: 00007ffc4d8cec38 [ 32.698405][ T798] [ 32.735326][ T308] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 32.745600][ T308] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 32.756772][ T308] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 32.785185][ T308] usb 4-1: New USB device found, idVendor=0425, idProduct=0000, bcdDevice= 0.00 [ 32.801953][ T308] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.814422][ T308] usb 4-1: Product: syz [ 32.819980][ T308] usb 4-1: Manufacturer: syz [ 32.825068][ T308] usb 4-1: SerialNumber: syz [ 32.826070][ T813] FAULT_INJECTION: forcing a failure. [ 32.826070][ T813] name failslab, interval 1, probability 0, space 0, times 1 [ 32.842669][ T813] CPU: 0 PID: 813 Comm: syz.0.206 Not tainted syzkaller #0 [ 32.849895][ T813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 32.860008][ T813] Call Trace: [ 32.863303][ T813] [ 32.866266][ T813] __dump_stack+0x21/0x24 [ 32.870612][ T813] dump_stack_lvl+0x110/0x170 [ 32.875299][ T813] ? __cfi_dump_stack_lvl+0x8/0x8 [ 32.880357][ T813] dump_stack+0x15/0x24 [ 32.884526][ T813] should_fail_ex+0x3bf/0x510 [ 32.889223][ T813] ? security_inode_alloc+0x33/0x120 [ 32.894527][ T813] __should_failslab+0xac/0xf0 [ 32.899309][ T813] should_failslab+0x9/0x20 [ 32.903824][ T813] kmem_cache_alloc+0x3b/0x320 [ 32.908615][ T813] security_inode_alloc+0x33/0x120 [ 32.913781][ T813] inode_init_always+0x6ee/0x950 [ 32.918792][ T813] new_inode_pseudo+0xa2/0x1f0 [ 32.923594][ T813] __sock_create+0x12c/0x7c0 [ 32.928309][ T813] __sys_socket+0xcd/0x1a0 [ 32.932761][ T813] __x64_sys_socket+0x7a/0x90 [ 32.937461][ T813] x64_sys_call+0x449/0x9a0 [ 32.942003][ T813] do_syscall_64+0x4c/0xa0 [ 32.946453][ T813] ? clear_bhb_loop+0x30/0x80 [ 32.951158][ T813] ? clear_bhb_loop+0x30/0x80 [ 32.955858][ T813] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 32.961764][ T813] RIP: 0033:0x7f4d71fa8f19 [ 32.966217][ T813] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 32.985844][ T813] RSP: 002b:00007f4d72e9f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 32.994314][ T813] RAX: ffffffffffffffda RBX: 00007f4d72225fa0 RCX: 00007f4d71fa8f19 [ 33.002309][ T813] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 33.010292][ T813] RBP: 00007f4d72037f6d R08: 0000000000000000 R09: 0000000000000000 [ 33.018289][ T813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 33.026273][ T813] R13: 00007f4d72226038 R14: 00007f4d72225fa0 R15: 00007ffc31593538 [ 33.034265][ T813] [ 33.037631][ T813] socket: no more sockets [ 33.140039][ T834] loop0: detected capacity change from 0 to 256 [ 33.171157][ T834] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 33.222014][ T841] loop4: detected capacity change from 0 to 1024 [ 33.232086][ T841] EXT4-fs: Ignoring removed nomblk_io_submit option [ 33.234149][ T298] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 33.252114][ T841] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 33.281912][ T841] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 33.290983][ T841] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.305703][ T28] kauditd_printk_skb: 88 callbacks suppressed [ 33.305717][ T28] audit: type=1400 audit(1794399093.628:284): avc: denied { append } for pid=840 comm="syz.4.219" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 33.310859][ T841] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.219: bg 0: block 112: padding at end of block bitmap is not set [ 33.349668][ T841] EXT4-fs (loop4): Remounting filesystem read-only [ 33.364281][ T854] 9pnet: p9_errstr2errno: server reported unknown error � [ 33.373821][ T291] EXT4-fs (loop4): unmounting filesystem. [ 33.438824][ T867] loop0: detected capacity change from 0 to 512 [ 33.447286][ T298] usb 6-1: not running at top speed; connect to a high speed hub [ 33.464415][ T867] EXT4-fs: Ignoring removed orlov option [ 33.473135][ T298] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 33.487166][ T867] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 33.505002][ T298] usb 6-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 33.514124][ T872] loop4: detected capacity change from 0 to 512 [ 33.519336][ T867] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #16: comm syz.0.230: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 28(0), depth 0(0) [ 33.534708][ T872] EXT4-fs: Ignoring removed nobh option [ 33.549403][ T298] usb 6-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 33.556934][ T867] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.230: couldn't read orphan inode 16 (err -117) [ 33.571792][ T872] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 33.577572][ T867] EXT4-fs (loop0): 1 orphan inode deleted [ 33.586642][ T867] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 33.591755][ T298] usb 6-1: Product: syz [ 33.596239][ T872] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.608107][ T298] usb 6-1: Manufacturer: syz [ 33.631565][ T867] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 33.643272][ T298] usb 6-1: Found UVC 1.00 device syz (225a:e1d4) [ 33.648772][ T308] cdc_ncm 4-1:1.0: bind() failure [ 33.665847][ T308] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 33.672699][ T308] cdc_ncm 4-1:1.1: bind() failure [ 33.673135][ T298] usb 6-1: No streaming interface found for terminal 2. [ 33.681878][ T308] usb 4-1: USB disconnect, device number 3 [ 33.712438][ T291] EXT4-fs (loop4): unmounting filesystem. [ 33.762838][ T887] program syz.4.238 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 33.850670][ T298] usb 6-1: USB disconnect, device number 2 [ 33.919852][ T28] audit: type=1400 audit(1794399094.238:285): avc: denied { getopt } for pid=896 comm="syz.0.242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 33.951171][ T908] netlink: 68 bytes leftover after parsing attributes in process `syz.0.246'. [ 33.954046][ T28] audit: type=1400 audit(1794399094.268:286): avc: denied { write } for pid=907 comm="syz.0.246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 33.996016][ T28] audit: type=1400 audit(1794399094.318:287): avc: denied { read write } for pid=909 comm="syz.0.247" name="uinput" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 34.022431][ T28] audit: type=1400 audit(1794399094.338:288): avc: denied { open } for pid=909 comm="syz.0.247" path="/dev/uinput" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 34.046463][ T28] audit: type=1400 audit(1794399094.368:289): avc: denied { ioctl } for pid=909 comm="syz.0.247" path="/dev/uinput" dev="devtmpfs" ino=262 ioctlcmd=0x5567 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 34.071943][ T910] input: syz1 as /devices/virtual/input/input5 [ 34.191280][ T924] device-mapper: verity: sha512 using implementation "sha512-avx2" [ 34.226460][ T930] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 34.255415][ T934] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 34.268246][ T934] EXT4-fs (loop0): 1 truncate cleaned up [ 34.274235][ T934] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 34.293053][ T28] audit: type=1400 audit(1794399094.608:290): avc: denied { read } for pid=933 comm="syz.0.257" name="bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 34.317383][ T287] EXT4-fs (loop0): unmounting filesystem. [ 34.372256][ T28] audit: type=1400 audit(1794399094.688:291): avc: denied { bind } for pid=943 comm="syz.0.261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 34.393285][ T28] audit: type=1400 audit(1794399094.688:292): avc: denied { name_bind } for pid=943 comm="syz.0.261" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 34.418093][ T28] audit: type=1400 audit(1794399094.688:293): avc: denied { node_bind } for pid=943 comm="syz.0.261" saddr=ff02::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 34.490929][ T959] xt_hashlimit: size too large, truncated to 1048576 [ 34.659010][ T956] F2FS-fs (loop0): fault_injection options not supported [ 34.669463][ T956] F2FS-fs (loop0): fault_type options not supported [ 34.683873][ T956] F2FS-fs (loop0): invalid crc value [ 34.703575][ T956] F2FS-fs (loop0): Found nat_bits in checkpoint [ 34.796522][ T956] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 34.824411][ T973] erofs: (device loop1): EXPERIMENTAL compressed fragments feature in use. Use at your own risk! [ 34.847045][ T973] erofs: (device loop1): EXPERIMENTAL global deduplication feature in use. Use at your own risk! [ 34.858927][ T973] erofs: (device loop1): EXPERIMENTAL EROFS subpage compressed block support in use. Use at your own risk! [ 34.870542][ T973] erofs: (device loop1): mounted with root inode @ nid 36. [ 34.897162][ T956] syz.0.264: attempt to access beyond end of device [ 34.897162][ T956] loop0: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 34.936244][ T964] F2FS-fs (loop5): invalid crc value [ 34.960229][ T964] F2FS-fs (loop5): Found nat_bits in checkpoint [ 35.058456][ T964] F2FS-fs (loop5): Start checkpoint disabled! [ 35.070437][ T964] F2FS-fs (loop5): f2fs_disable_checkpoint() finish, err:0 [ 35.087029][ T964] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 35.130919][ T997] FAULT_INJECTION: forcing a failure. [ 35.130919][ T997] name failslab, interval 1, probability 0, space 0, times 0 [ 35.144322][ T997] CPU: 1 PID: 997 Comm: syz.0.275 Not tainted syzkaller #0 [ 35.151563][ T997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 35.161655][ T997] Call Trace: [ 35.164962][ T997] [ 35.167914][ T997] __dump_stack+0x21/0x24 [ 35.172285][ T997] dump_stack_lvl+0x110/0x170 [ 35.177021][ T997] ? __cfi_dump_stack_lvl+0x8/0x8 [ 35.182109][ T997] dump_stack+0x15/0x24 [ 35.186305][ T997] should_fail_ex+0x3bf/0x510 [ 35.191035][ T997] ? vm_area_dup+0x65/0x280 [ 35.192325][ T964] process 'syz.5.269' launched './file0' with NULL argv: empty string added [ 35.195582][ T997] __should_failslab+0xac/0xf0 [ 35.195627][ T997] should_failslab+0x9/0x20 [ 35.195648][ T997] kmem_cache_alloc+0x3b/0x320 [ 35.195677][ T997] vm_area_dup+0x65/0x280 [ 35.195702][ T997] __split_vma+0x1c6/0x980 [ 35.227245][ T997] ? find_vma_prev+0x111/0x190 [ 35.232066][ T997] madvise_update_vma+0x338/0xa20 [ 35.237130][ T997] do_madvise+0xdc1/0x3290 [ 35.241591][ T997] ? __cfi_do_madvise+0x10/0x10 [ 35.244218][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 35.246493][ T997] ? try_to_wake_up+0x6c6/0x1250 [ 35.259057][ T997] ? __kasan_check_write+0x14/0x20 [ 35.264211][ T997] ? wake_up_q+0x101/0x1a0 [ 35.268666][ T997] ? futex_wake+0x5fa/0x8e0 [ 35.273209][ T997] ? __cfi_futex_wake+0x10/0x10 [ 35.278094][ T997] ? proc_fail_nth_write+0x180/0x200 [ 35.283531][ T997] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 35.289208][ T997] ? security_file_permission+0x8a/0xb0 [ 35.294812][ T997] ? vfs_write+0xa51/0xd00 [ 35.299253][ T997] ? do_futex+0x2bf/0x430 [ 35.303615][ T997] ? __cfi_do_futex+0x10/0x10 [ 35.308313][ T997] ? __kasan_check_write+0x14/0x20 [ 35.313466][ T997] ? mutex_unlock+0x8f/0x230 [ 35.318060][ T997] ? __se_sys_futex+0x136/0x310 [ 35.322930][ T997] ? __this_cpu_preempt_check+0x13/0x20 [ 35.328489][ T997] ? xfd_validate_state+0x70/0x150 [ 35.333624][ T997] ? fpregs_restore_userregs+0x128/0x260 [ 35.339299][ T997] __x64_sys_madvise+0xa9/0xc0 [ 35.344092][ T997] x64_sys_call+0x99e/0x9a0 [ 35.348623][ T997] do_syscall_64+0x4c/0xa0 [ 35.353061][ T997] ? clear_bhb_loop+0x30/0x80 [ 35.357739][ T997] ? clear_bhb_loop+0x30/0x80 [ 35.362430][ T997] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 35.368335][ T997] RIP: 0033:0x7f4d71fa8f19 [ 35.372787][ T997] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 35.392412][ T997] RSP: 002b:00007f4d72e9f028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 35.400848][ T997] RAX: ffffffffffffffda RBX: 00007f4d72225fa0 RCX: 00007f4d71fa8f19 [ 35.408839][ T997] RDX: 0000000000000001 RSI: 0000000000003000 RDI: 0000200000ffd000 [ 35.416831][ T997] RBP: 00007f4d72037f6d R08: 0000000000000000 R09: 0000000000000000 [ 35.424816][ T997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 35.432810][ T997] R13: 00007f4d72226038 R14: 00007f4d72225fa0 R15: 00007ffc31593538 [ 35.440794][ T997] [ 35.493897][ T1009] exfat: Deprecated parameter 'utf8' [ 35.503324][ T531] kworker/u4:5: attempt to access beyond end of device [ 35.503324][ T531] loop5: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 35.519462][ T1009] exfat: Deprecated parameter 'utf8' [ 35.527919][ T1009] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 35.858104][ T1056] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 35.867157][ T1056] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.901743][ T288] EXT4-fs (loop1): unmounting filesystem. [ 35.951104][ T1070] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 35.959793][ T1070] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.975112][ T1070] EXT4-fs error (device loop1): ext4_map_blocks:747: inode #15: comm syz.1.314: lblock 0 mapped to illegal pblock 0 (length 1) [ 35.988670][ T1070] EXT4-fs (loop1): Remounting filesystem read-only [ 35.996106][ T1070] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #15: comm syz.1.314: lblock 0 mapped to illegal pblock 0 (length 1) [ 36.009700][ T1070] EXT4-fs (loop1): Remounting filesystem read-only [ 36.016643][ T1070] EXT4-fs error (device loop1): ext4_ext_remove_space:2945: inode #15: comm syz.1.314: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 36.035078][ T1070] EXT4-fs (loop1): Remounting filesystem read-only [ 36.052884][ T288] EXT4-fs (loop1): unmounting filesystem. [ 36.075483][ T1078] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 36.089554][ T1078] EXT4-fs error (device loop1): ext4_orphan_get:1431: comm syz.1.316: bad orphan inode 131083 [ 36.107646][ T1078] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 36.122389][ T1078] EXT4-fs error (device loop1): ext4_generic_delete_entry:2729: inode #2: block 13: comm syz.1.316: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 36.142989][ T1078] EXT4-fs error (device loop1) in ext4_delete_entry:2800: Corrupt filesystem [ 36.152178][ T1078] EXT4-fs warning (device loop1): ext4_rename_delete:3778: inode #2: comm syz.1.316: Deleting old file: nlink 5, error=-117 [ 36.175903][ T288] EXT4-fs (loop1): unmounting filesystem. [ 36.223459][ T1085] set_capacity_and_notify: 9 callbacks suppressed [ 36.223482][ T1085] loop0: detected capacity change from 0 to 512 [ 36.243852][ T1085] EXT4-fs (loop0): Test dummy encryption mode enabled [ 36.253003][ T1085] EXT4-fs error (device loop0): ext4_orphan_get:1405: inode #15: comm syz.0.319: inode has both inline data and extents flags [ 36.266634][ T1085] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.319: couldn't read orphan inode 15 (err -117) [ 36.278821][ T1085] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 36.301318][ T287] EXT4-fs (loop0): unmounting filesystem. [ 36.319983][ T1089] loop1: detected capacity change from 0 to 128 [ 36.328294][ T1090] loop0: detected capacity change from 0 to 128 [ 36.340895][ T1092] tipc: Started in network mode [ 36.347657][ T1092] tipc: Node identity 7f000001, cluster identity 4711 [ 36.362712][ T1092] tipc: Enabled bearer , priority 10 [ 36.374675][ T1089] syz.1.321: attempt to access beyond end of device [ 36.374675][ T1089] loop1: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 36.480769][ T1098] raw_sendmsg: syz.0.325 forgot to set AF_INET. Fix it! [ 36.504488][ T1104] loop3: detected capacity change from 0 to 512 [ 36.541601][ T1104] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002] [ 36.568746][ T1104] System zones: 0-2, 18-18, 34-35 [ 36.582720][ T1104] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 36.598426][ T1104] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.707480][ T289] EXT4-fs (loop3): unmounting filesystem. [ 36.748451][ T1129] loop3: detected capacity change from 0 to 1024 [ 36.771049][ T1129] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 36.814787][ T1129] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 36.883307][ T1140] input: syz0 as /devices/virtual/input/input6 [ 36.926383][ T1142] loop5: detected capacity change from 0 to 512 [ 36.935008][ T289] EXT4-fs (loop3): unmounting filesystem. [ 36.949807][ T1121] syz.1.331 (1121) used greatest stack depth: 18504 bytes left [ 36.964526][ T1142] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 36.999466][ T1142] FAT-fs (loop5): error, invalid access to FAT (entry 0x0fffff00) [ 37.011968][ T1142] FAT-fs (loop5): error, invalid access to FAT (entry 0x0fffff00) [ 37.020279][ T1142] syz.5.343: attempt to access beyond end of device [ 37.020279][ T1142] loop5: rw=2049, sector=17179852706, nr_sectors = 64 limit=512 [ 37.039105][ T1142] syz.5.343: attempt to access beyond end of device [ 37.039105][ T1142] loop5: rw=2049, sector=17179852706, nr_sectors = 64 limit=512 [ 37.083397][ T1153] loop5: detected capacity change from 0 to 128 [ 37.113704][ T1153] syz.5.347: attempt to access beyond end of device [ 37.113704][ T1153] loop5: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 37.207310][ T1160] loop1: detected capacity change from 0 to 512 [ 37.225524][ T1160] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 37.235964][ T1160] ext4 filesystem being mounted at /67/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.262699][ T288] EXT4-fs (loop1): unmounting filesystem. [ 37.359988][ T1174] netlink: 4 bytes leftover after parsing attributes in process `syz.1.365'. [ 37.402939][ T1179] loop5: detected capacity change from 0 to 512 [ 37.500998][ T309] tipc: Node number set to 2130706433 [ 37.549303][ T1179] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 37.561852][ T1179] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.581252][ T1186] loop4: detected capacity change from 0 to 512 [ 37.611220][ T1186] EXT4-fs (loop4): Test dummy encryption mode enabled [ 37.628286][ T1186] EXT4-fs error (device loop4): ext4_orphan_get:1405: inode #15: comm syz.4.358: inode has both inline data and extents flags [ 37.641550][ T1186] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.358: couldn't read orphan inode 15 (err -117) [ 37.654003][ T1186] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 37.659476][ T542] EXT4-fs (loop5): unmounting filesystem. [ 37.672389][ T1193] syz.3.360: attempt to access beyond end of device [ 37.672389][ T1193] loop3: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 37.695085][ T291] EXT4-fs (loop4): unmounting filesystem. [ 37.778470][ T1209] netlink: 8 bytes leftover after parsing attributes in process `syz.0.364'. [ 37.936593][ T1213] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 37.964064][ T1213] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.027380][ T1222] syz.4.371: attempt to access beyond end of device [ 38.027380][ T1222] loop4: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 38.049602][ T289] EXT4-fs (loop3): unmounting filesystem. [ 38.139306][ T1226] EXT4-fs: Ignoring removed oldalloc option [ 38.171664][ T1226] EXT4-fs (loop3): Test dummy encryption mode enabled [ 38.184410][ T1226] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 38.202152][ T1232] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 38.216369][ T1226] EXT4-fs error (device loop3): ext4_orphan_get:1431: comm syz.3.383: bad orphan inode 131083 [ 38.233403][ T1226] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 38.246927][ T1232] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 38.254381][ T1226] fscrypt: AES-256-XTS using blk-crypto-fallback [ 38.316780][ T542] EXT4-fs (loop5): unmounting filesystem. [ 38.365747][ T289] EXT4-fs (loop3): unmounting filesystem. [ 38.400109][ T1243] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002] [ 38.416090][ T1243] System zones: 0-2, 18-18, 34-35 [ 38.437953][ T1243] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 38.461212][ T1243] ext4 filesystem being mounted at /88/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.598416][ T291] EXT4-fs (loop4): unmounting filesystem. [ 38.626881][ T1260] netlink: 8 bytes leftover after parsing attributes in process `syz.4.382'. [ 38.758986][ T1268] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 39.783962][ C1] sched: RT throttling activated [ 39.788016][ T1268] EXT4-fs error (device loop3): ext4_orphan_get:1431: comm syz.3.385: bad orphan inode 131083 [ 40.784311][ T1268] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 41.775844][ T1268] EXT4-fs error (device loop3): ext4_generic_delete_entry:2729: inode #2: block 13: comm syz.3.385: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 41.805895][ T1268] EXT4-fs error (device loop3) in ext4_delete_entry:2800: Corrupt filesystem [ 41.814942][ T1268] EXT4-fs warning (device loop3): ext4_rename_delete:3778: inode #2: comm syz.3.385: Deleting old file: nlink 5, error=-117 [ 41.852470][ T289] EXT4-fs (loop3): unmounting filesystem. [ 41.913878][ T19] smpboot: CPU 1 is now offline [ 41.938183][ T1291] x86: Booting SMP configuration: [ 41.943250][ T1291] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 41.974916][ T1293] input: syz1 as /devices/virtual/input/input7 [ 42.051920][ T1297] set_capacity_and_notify: 8 callbacks suppressed [ 42.051933][ T1297] loop3: detected capacity change from 0 to 128 [ 42.104684][ T1300] loop0: detected capacity change from 0 to 256 [ 42.144363][ T1297] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 42.154726][ T1300] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 42.191725][ T1279] loop5: detected capacity change from 0 to 40427 [ 42.215819][ T1297] ext4 filesystem being mounted at /52/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 42.232080][ T1279] F2FS-fs (loop5): Invalid Fs Meta Ino: node(1) meta(1) root(3) [ 42.269956][ T1279] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 42.278795][ T1300] FAT-fs (loop0): error, invalid FAT chain (i_pos 196, last_block 8200) [ 42.301166][ T1279] F2FS-fs (loop5): Image doesn't support compression [ 42.309251][ T1300] FAT-fs (loop0): Filesystem has been set read-only [ 42.323454][ T1279] F2FS-fs (loop5): heap/no_heap options were deprecated [ 42.331547][ T289] EXT4-fs (loop3): unmounting filesystem. [ 42.356989][ T1305] loop3: detected capacity change from 0 to 16 [ 42.363491][ T1279] F2FS-fs (loop5): invalid crc value [ 42.379907][ T1305] erofs: (device loop3): mounted with root inode @ nid 36. [ 42.395478][ T1305] erofs: (device loop3): z_erofs_readahead: readahead error at page 155 @ nid 36 [ 42.405524][ T1279] F2FS-fs (loop5): Found nat_bits in checkpoint [ 42.412741][ T1305] erofs: (device loop3): z_erofs_readahead: readahead error at page 154 @ nid 36 [ 42.429210][ T1305] erofs: (device loop3): z_erofs_readahead: readahead error at page 153 @ nid 36 [ 42.445853][ T1305] erofs: (device loop3): z_erofs_readahead: readahead error at page 152 @ nid 36 [ 42.464202][ T1305] erofs: (device loop3): z_erofs_readahead: readahead error at page 139 @ nid 36 [ 42.483520][ T1305] erofs: (device loop3): z_erofs_readahead: readahead error at page 138 @ nid 36 [ 42.492862][ T1305] erofs: (device loop3): z_erofs_readahead: readahead error at page 137 @ nid 36 [ 42.496118][ T1279] F2FS-fs (loop5): Start checkpoint disabled! [ 42.502758][ T1305] erofs: (device loop3): z_erofs_readahead: readahead error at page 136 @ nid 36 [ 42.509813][ T1279] F2FS-fs (loop5): f2fs_disable_checkpoint() finish, err:0 [ 42.524217][ T1305] erofs: (device loop3): z_erofs_readahead: readahead error at page 128 @ nid 36 [ 42.525650][ T1279] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 42.540775][ T1279] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 42.540793][ T1305] erofs: (device loop3): z_erofs_readahead: readahead error at page 120 @ nid 36 [ 42.567688][ T1305] erofs: (device loop3): z_erofs_readahead: readahead error at page 99 @ nid 36 [ 42.584023][ T1305] erofs: (device loop3): z_erofs_readahead: readahead error at page 98 @ nid 36 [ 42.593166][ T1305] erofs: (device loop3): z_erofs_readahead: readahead error at page 97 @ nid 36 [ 42.613377][ T1305] erofs: (device loop3): z_erofs_readahead: readahead error at page 96 @ nid 36 [ 42.622693][ T1305] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 42.640094][ T1279] F2FS-fs (loop5): access invalid blkaddr:150994944 [ 42.642297][ T1305] erofs: (device loop3): z_erofs_readahead: readahead error at page 91 @ nid 36 [ 42.646905][ T1279] CPU: 0 PID: 1279 Comm: syz.5.389 Not tainted syzkaller #0 [ 42.663085][ T1279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 42.664146][ T1305] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 42.673177][ T1279] Call Trace: [ 42.673186][ T1279] [ 42.673195][ T1279] __dump_stack+0x21/0x24 [ 42.692919][ T1305] erofs: (device loop3): z_erofs_readahead: readahead error at page 90 @ nid 36 [ 42.693078][ T1279] dump_stack_lvl+0x110/0x170 [ 42.706799][ T1279] ? __cfi_dump_stack_lvl+0x8/0x8 [ 42.711858][ T1279] ? preempt_schedule_irq+0xca/0x120 [ 42.713203][ T1305] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 42.717169][ T1279] ? kernel_text_address+0xa0/0xd0 [ 42.717203][ T1279] dump_stack+0x15/0x24 [ 42.727749][ T1305] erofs: (device loop3): z_erofs_readahead: readahead error at page 89 @ nid 36 [ 42.731597][ T1279] __f2fs_is_valid_blkaddr+0xd2e/0x15a0 [ 42.744123][ T1305] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 42.744814][ T1279] f2fs_is_valid_blkaddr+0x23/0x30 [ 42.750518][ T1305] erofs: (device loop3): z_erofs_readahead: readahead error at page 88 @ nid 36 [ 42.759643][ T1279] f2fs_map_blocks+0xcb3/0x4600 [ 42.759687][ T1279] ? __cfi_f2fs_map_blocks+0x10/0x10 [ 42.774724][ T1305] syz.3.398: attempt to access beyond end of device [ 42.774724][ T1305] loop3: rw=524288, sector=13478624032, nr_sectors = 32 limit=16 [ 42.778697][ T1279] ? kvm_sched_clock_read+0x18/0x40 [ 42.778737][ T1279] ? sched_clock+0x9/0x10 [ 42.794323][ T1305] syz.3.398: attempt to access beyond end of device [ 42.794323][ T1305] loop3: rw=524288, sector=13478624040, nr_sectors = 32 limit=16 [ 42.798173][ T1279] ? sched_clock_cpu+0x6e/0x260 [ 42.803573][ T1305] syz.3.398: attempt to access beyond end of device [ 42.803573][ T1305] loop3: rw=524288, sector=14550773768, nr_sectors = 32 limit=16 [ 42.807744][ T1279] ? __cfi_sched_clock_cpu+0x10/0x10 [ 42.807772][ T1279] ? __alloc_pages+0x1fa/0x610 [ 42.807803][ T1279] ? xas_start+0x31d/0x3e0 [ 42.833093][ T1305] syz.3.398: attempt to access beyond end of device [ 42.833093][ T1305] loop3: rw=524288, sector=13716630376, nr_sectors = 32 limit=16 [ 42.841040][ T1279] ? xa_load+0xad/0xd0 [ 42.841074][ T1279] f2fs_mpage_readpages+0xa46/0x1b20 [ 42.857325][ T1305] syz.3.398: attempt to access beyond end of device [ 42.857325][ T1305] loop3: rw=524288, sector=13716630384, nr_sectors = 32 limit=16 [ 42.869683][ T1279] ? __mem_cgroup_uncharge_list+0x39/0xc0 [ 42.869719][ T1279] ? cgroup_rstat_updated+0xf0/0x360 [ 42.884290][ T1305] syz.3.398: attempt to access beyond end of device [ 42.884290][ T1305] loop3: rw=524288, sector=790384, nr_sectors = 32 limit=16 [ 42.893278][ T1279] ? f2fs_i_blocks_write+0x1f0/0x1f0 [ 42.909928][ T1305] syz.3.398: attempt to access beyond end of device [ 42.909928][ T1305] loop3: rw=524288, sector=790392, nr_sectors = 32 limit=16 [ 42.918023][ T1279] ? cgroup_rstat_updated+0xf0/0x360 [ 42.918058][ T1279] ? xas_nomem+0x6b/0x1f0 [ 42.934254][ T1305] syz.3.398: attempt to access beyond end of device [ 42.934254][ T1305] loop3: rw=524288, sector=72, nr_sectors = 32 limit=16 [ 42.937070][ T1279] f2fs_readahead+0xfc/0x240 [ 42.942504][ T1305] syz.3.398: attempt to access beyond end of device [ 42.942504][ T1305] loop3: rw=524288, sector=80, nr_sectors = 32 limit=16 [ 42.946699][ T1279] ? __cfi_f2fs_readahead+0x10/0x10 [ 42.946732][ T1279] read_pages+0x1bf/0xe10 [ 42.971392][ T1305] syz.3.398: attempt to access beyond end of device [ 42.971392][ T1305] loop3: rw=524288, sector=24, nr_sectors = 32 limit=16 [ 42.978082][ T1279] ? page_cache_ra_unbounded+0x850/0x850 [ 42.978124][ T1279] ? filemap_add_folio+0x113/0x260 [ 43.011781][ T1279] page_cache_ra_unbounded+0x6ff/0x850 [ 43.017292][ T1279] ? __cfi_page_cache_ra_unbounded+0x10/0x10 [ 43.023312][ T1279] ? __kasan_check_read+0x11/0x20 [ 43.028375][ T1279] page_cache_ra_order+0xb0c/0xe50 [ 43.033534][ T1279] ? __cfi_page_cache_ra_order+0x10/0x10 [ 43.039214][ T1279] ? blk_finish_plug+0x5d/0x80 [ 43.044019][ T1279] ? f2fs_fill_dentries+0xb26/0xcb0 [ 43.049274][ T1279] ondemand_readahead+0x821/0xdb0 [ 43.054356][ T1279] ? page_cache_sync_ra+0x3d0/0x3d0 [ 43.059644][ T1279] page_cache_sync_ra+0x35b/0x3d0 [ 43.064706][ T1279] f2fs_readdir+0x473/0x990 [ 43.069244][ T1279] ? __cfi_f2fs_readdir+0x10/0x10 [ 43.074299][ T1279] ? down_read_killable+0xbc/0x110 [ 43.079437][ T1279] ? __cfi_down_read_killable+0x10/0x10 [ 43.085025][ T1279] ? security_file_permission+0x94/0xb0 [ 43.090615][ T1279] iterate_dir+0x26d/0x610 [ 43.095082][ T1279] ? __cfi_f2fs_readdir+0x10/0x10 [ 43.100137][ T1279] __se_sys_getdents64+0xf2/0x250 [ 43.105198][ T1279] ? __x64_sys_getdents64+0x90/0x90 [ 43.110432][ T1279] ? xfd_validate_state+0x70/0x150 [ 43.115591][ T1279] ? __cfi_filldir64+0x10/0x10 [ 43.120392][ T1279] ? fpregs_restore_userregs+0x128/0x260 [ 43.126083][ T1279] __x64_sys_getdents64+0x7b/0x90 [ 43.131160][ T1279] x64_sys_call+0x15c/0x9a0 [ 43.135699][ T1279] do_syscall_64+0x4c/0xa0 [ 43.140176][ T1279] ? clear_bhb_loop+0x30/0x80 [ 43.144898][ T1279] ? clear_bhb_loop+0x30/0x80 [ 43.149605][ T1279] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 43.155530][ T1279] RIP: 0033:0x7fcd6fda8f19 [ 43.159965][ T1279] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 43.179595][ T1279] RSP: 002b:00007fcd70cd4028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 43.188049][ T1279] RAX: ffffffffffffffda RBX: 00007fcd70025fa0 RCX: 00007fcd6fda8f19 [ 43.196048][ T1279] RDX: 000000000000004f RSI: 0000000000000000 RDI: 0000000000000004 [ 43.204048][ T1279] RBP: 00007fcd6fe37f6d R08: 0000000000000000 R09: 0000000000000000 [ 43.212042][ T1279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 43.220030][ T1279] R13: 00007fcd70026038 R14: 00007fcd70025fa0 R15: 00007ffc4d8cec38 [ 43.228023][ T1279] [ 43.232045][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 43.247701][ T1279] F2FS-fs (loop5): access invalid blkaddr:150994944 [ 43.264420][ T1279] CPU: 1 PID: 1279 Comm: syz.5.389 Not tainted syzkaller #0 [ 43.271769][ T1279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 43.281847][ T1279] Call Trace: [ 43.285143][ T1279] [ 43.288100][ T1279] __dump_stack+0x21/0x24 [ 43.292455][ T1279] dump_stack_lvl+0x110/0x170 [ 43.297158][ T1279] ? __cfi_dump_stack_lvl+0x8/0x8 [ 43.302219][ T1279] ? f2fs_lookup_read_extent_cache_block+0x22d/0x420 [ 43.308957][ T1279] dump_stack+0x15/0x24 [ 43.313144][ T1279] __f2fs_is_valid_blkaddr+0xd2e/0x15a0 [ 43.318735][ T1279] f2fs_is_valid_blkaddr+0x23/0x30 [ 43.323892][ T1279] f2fs_get_read_data_page+0x4ef/0x850 [ 43.329400][ T1279] ? __cfi_f2fs_get_read_data_page+0x10/0x10 [ 43.335416][ T1279] ? page_cache_sync_ra+0x3d0/0x3d0 [ 43.340656][ T1279] f2fs_find_data_page+0x198/0x3a0 [ 43.345803][ T1279] f2fs_readdir+0x4a2/0x990 [ 43.350336][ T1279] ? __cfi_f2fs_readdir+0x10/0x10 [ 43.355387][ T1279] ? down_read_killable+0xbc/0x110 [ 43.360544][ T1279] ? __cfi_down_read_killable+0x10/0x10 [ 43.366129][ T1279] ? security_file_permission+0x94/0xb0 [ 43.371716][ T1279] iterate_dir+0x26d/0x610 [ 43.376168][ T1279] ? __cfi_f2fs_readdir+0x10/0x10 [ 43.381215][ T1279] __se_sys_getdents64+0xf2/0x250 [ 43.386271][ T1279] ? __x64_sys_getdents64+0x90/0x90 [ 43.391499][ T1279] ? xfd_validate_state+0x70/0x150 [ 43.396645][ T1279] ? __cfi_filldir64+0x10/0x10 [ 43.401455][ T1279] ? fpregs_restore_userregs+0x128/0x260 [ 43.407123][ T1279] __x64_sys_getdents64+0x7b/0x90 [ 43.412183][ T1279] x64_sys_call+0x15c/0x9a0 [ 43.416712][ T1279] do_syscall_64+0x4c/0xa0 [ 43.421153][ T1279] ? clear_bhb_loop+0x30/0x80 [ 43.425865][ T1279] ? clear_bhb_loop+0x30/0x80 [ 43.430580][ T1279] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 43.436518][ T1279] RIP: 0033:0x7fcd6fda8f19 [ 43.440977][ T1279] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 43.460614][ T1279] RSP: 002b:00007fcd70cd4028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 43.469090][ T1279] RAX: ffffffffffffffda RBX: 00007fcd70025fa0 RCX: 00007fcd6fda8f19 [ 43.477092][ T1279] RDX: 000000000000004f RSI: 0000000000000000 RDI: 0000000000000004 [ 43.485099][ T1279] RBP: 00007fcd6fe37f6d R08: 0000000000000000 R09: 0000000000000000 [ 43.493097][ T1279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 43.501087][ T1279] R13: 00007fcd70026038 R14: 00007fcd70025fa0 R15: 00007ffc4d8cec38 [ 43.509087][ T1279] [ 43.566445][ T1319] loop0: detected capacity change from 0 to 512 [ 43.603602][ T1319] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 43.665949][ T1319] EXT4-fs error (device loop0): ext4_orphan_get:1431: comm syz.0.404: bad orphan inode 131083 [ 43.684220][ T1319] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 43.705323][ T309] smpboot: CPU 1 is now offline [ 43.756068][ T1319] EXT4-fs error (device loop0): ext4_generic_delete_entry:2729: inode #2: block 13: comm syz.0.404: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 43.778378][ T1329] x86: Booting SMP configuration: [ 43.783435][ T1329] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 43.855705][ T1319] EXT4-fs error (device loop0) in ext4_delete_entry:2800: Corrupt filesystem [ 43.883787][ T1319] EXT4-fs warning (device loop0): ext4_rename_delete:3778: inode #2: comm syz.0.404: Deleting old file: nlink 5, error=-117 [ 43.910391][ T1332] loop5: detected capacity change from 0 to 128 [ 43.925791][ T287] EXT4-fs (loop0): unmounting filesystem. [ 43.961566][ T1332] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 43.980869][ T1332] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.992235][ T19] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 44.038043][ T1343] loop0: detected capacity change from 0 to 16 [ 44.064990][ T542] EXT4-fs (loop5): unmounting filesystem. [ 44.093197][ T1343] erofs: (device loop0): mounted with root inode @ nid 36. [ 44.110362][ T1343] erofs: (device loop0): z_erofs_readahead: readahead error at page 155 @ nid 36 [ 44.119670][ T1343] erofs: (device loop0): z_erofs_readahead: readahead error at page 154 @ nid 36 [ 44.138829][ T1343] erofs: (device loop0): z_erofs_readahead: readahead error at page 153 @ nid 36 [ 44.153473][ T1343] erofs: (device loop0): z_erofs_readahead: readahead error at page 152 @ nid 36 [ 44.171946][ T1343] erofs: (device loop0): z_erofs_readahead: readahead error at page 139 @ nid 36 [ 44.185309][ T1343] erofs: (device loop0): z_erofs_readahead: readahead error at page 138 @ nid 36 [ 44.204015][ T309] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 44.211642][ T1343] erofs: (device loop0): z_erofs_readahead: readahead error at page 137 @ nid 36 [ 44.224138][ T1343] erofs: (device loop0): z_erofs_readahead: readahead error at page 136 @ nid 36 [ 44.243483][ T1343] erofs: (device loop0): z_erofs_readahead: readahead error at page 128 @ nid 36 [ 44.262992][ T1343] erofs: (device loop0): z_erofs_readahead: readahead error at page 120 @ nid 36 [ 44.274250][ T1343] erofs: (device loop0): z_erofs_readahead: readahead error at page 99 @ nid 36 [ 44.293556][ T1343] erofs: (device loop0): z_erofs_readahead: readahead error at page 98 @ nid 36 [ 44.314214][ T1343] erofs: (device loop0): z_erofs_readahead: readahead error at page 97 @ nid 36 [ 44.333908][ T1343] erofs: (device loop0): z_erofs_readahead: readahead error at page 96 @ nid 36 [ 44.354245][ T1343] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 44.363582][ T1343] erofs: (device loop0): z_erofs_readahead: readahead error at page 91 @ nid 36 [ 44.394006][ T309] usb 5-1: Using ep0 maxpacket: 16 [ 44.400251][ T309] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 44.420800][ T1343] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 44.430610][ T309] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 44.451775][ T1343] erofs: (device loop0): z_erofs_readahead: readahead error at page 90 @ nid 36 [ 44.460916][ T309] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 44.470932][ T1343] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 44.484036][ T1343] erofs: (device loop0): z_erofs_readahead: readahead error at page 89 @ nid 36 [ 44.491033][ T309] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 44.503525][ T1343] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 44.520786][ T1343] erofs: (device loop0): z_erofs_readahead: readahead error at page 88 @ nid 36 [ 44.522759][ T309] usb 5-1: config 0 interface 0 has no altsetting 0 [ 44.547012][ T309] usb 5-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 44.559246][ T309] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.571854][ T309] usb 5-1: config 0 descriptor?? [ 44.587466][ T19] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 44.600905][ T298] smpboot: CPU 1 is now offline [ 44.617141][ T1360] x86: Booting SMP configuration: [ 44.635388][ T1360] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 44.656264][ T1366] loop0: detected capacity change from 0 to 512 [ 44.684674][ T1366] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 44.692903][ T1366] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e118, mo2=0002] [ 44.701448][ T1366] EXT4-fs (loop0): orphan cleanup on readonly fs [ 44.709227][ T1366] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.425: bg 0: block 15: invalid block bitmap [ 44.731081][ T1366] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 44.740548][ T1366] EXT4-fs (loop0): 1 truncate cleaned up [ 44.747287][ T1366] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 44.761712][ T1366] EXT4-fs error (device loop0): ext4_encrypted_get_link:46: inode #16: comm syz.0.425: bad symlink. [ 44.774830][ T1366] EXT4-fs error (device loop0): ext4_encrypted_get_link:46: inode #16: comm syz.0.425: bad symlink. [ 44.786601][ T1366] EXT4-fs error (device loop0): ext4_encrypted_get_link:46: inode #16: comm syz.0.425: bad symlink. [ 44.806704][ T287] EXT4-fs (loop0): unmounting filesystem. [ 44.995219][ T1352] loop3: detected capacity change from 0 to 131072 [ 45.002711][ T1352] F2FS-fs (loop3): Test dummy encryption mode enabled [ 45.010143][ T1352] F2FS-fs (loop3): invalid crc value [ 45.017856][ T1352] F2FS-fs (loop3): Found nat_bits in checkpoint [ 45.026824][ T309] logitech-djreceiver 0003:046D:C53A.0003: hiddev96,hidraw0: USB HID vff.fc Device [HID 046d:c53a] on usb-dummy_hcd.4-1/input0 [ 45.066830][ T1352] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 45.214217][ T309] usb 5-1: USB disconnect, device number 2 [ 45.443636][ T1392] loop3: detected capacity change from 0 to 512 [ 45.475891][ T1392] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 45.494919][ T289] EXT4-fs (loop3): unmounting filesystem. [ 45.522353][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 45.522369][ T28] audit: type=1400 audit(1794399105.838:317): avc: denied { write } for pid=1401 comm="syz.3.434" name="kmsg" dev="proc" ino=4026532039 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kmsg_t tclass=file permissive=1 [ 45.552043][ T28] audit: type=1400 audit(1794399105.858:318): avc: denied { open } for pid=1401 comm="syz.3.434" path="/64/dev/kmsg" dev="proc" ino=4026532039 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kmsg_t tclass=file permissive=1 [ 45.576493][ T28] audit: type=1400 audit(1794399105.868:319): avc: denied { read } for pid=1401 comm="syz.3.434" name="kmsg" dev="proc" ino=4026532039 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kmsg_t tclass=file permissive=1 [ 45.724290][ T1409] FAT-fs (loop1): error, corrupted file size (i_pos 0, 8960) [ 45.736785][ T1409] FAT-fs (loop1): error, corrupted file size (i_pos 0, 8960) [ 45.745221][ T1409] FAT-fs (loop1): error, corrupted file size (i_pos 0, 8960) [ 45.753479][ T1413] device-mapper: ioctl: Empty message received. [ 45.764026][ T1409] FAT-fs (loop1): error, corrupted file size (i_pos 0, 8960) [ 45.782852][ T1416] exfat: Deprecated parameter 'utf8' [ 45.796246][ T1416] exfat: Deprecated parameter 'namecase' [ 45.806135][ T1416] exfat: Deprecated parameter 'utf8' [ 45.822853][ T1416] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 45.984031][ T308] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 46.022541][ T1420] netlink: 'syz.3.444': attribute type 4 has an invalid length. [ 46.083759][ T1431] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 46.175103][ T308] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 46.194226][ T308] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 46.206624][ T308] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 46.230318][ T308] usb 1-1: New USB device found, idVendor=0425, idProduct=0000, bcdDevice= 0.00 [ 46.243983][ T308] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.254243][ T308] usb 1-1: Product: syz [ 46.258442][ T308] usb 1-1: Manufacturer: syz [ 46.282239][ T308] usb 1-1: SerialNumber: syz [ 47.080562][ T1451] set_capacity_and_notify: 4 callbacks suppressed [ 47.080592][ T1451] loop4: detected capacity change from 0 to 512 [ 47.099022][ T308] cdc_ncm 1-1:1.0: bind() failure [ 47.105391][ T308] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 47.112234][ T308] cdc_ncm 1-1:1.1: bind() failure [ 47.144431][ T1451] FAT-fs (loop4): error, corrupted file size (i_pos 0, 8960) [ 47.155526][ T308] usb 1-1: USB disconnect, device number 2 [ 47.164241][ T1451] FAT-fs (loop4): error, corrupted file size (i_pos 0, 8960) [ 47.171704][ T1451] FAT-fs (loop4): error, corrupted file size (i_pos 0, 8960) [ 47.205598][ T1451] FAT-fs (loop4): error, corrupted file size (i_pos 0, 8960) [ 47.302946][ T1465] loop5: detected capacity change from 0 to 8192 [ 47.367863][ T1467] loop4: detected capacity change from 0 to 512 [ 47.383058][ T1467] EXT4-fs: Ignoring removed nobh option [ 47.406504][ T1467] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 47.431414][ T1467] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.466: attempt to clear invalid blocks 2 len 1 [ 47.445462][ T1467] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 47.489885][ T1463] loop1: detected capacity change from 0 to 40427 [ 47.499729][ T1463] F2FS-fs (loop1): Invalid Fs Meta Ino: node(1) meta(1) root(3) [ 47.507683][ T1463] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 47.512802][ T1467] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.466: invalid indirect mapped block 1819239214 (level 0) [ 47.516270][ T1463] F2FS-fs (loop1): Image doesn't support compression [ 47.536586][ T1463] F2FS-fs (loop1): heap/no_heap options were deprecated [ 47.547139][ T1463] F2FS-fs (loop1): invalid crc value [ 47.563417][ T1463] F2FS-fs (loop1): Found nat_bits in checkpoint [ 47.592046][ T1467] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.466: invalid indirect mapped block 1819239214 (level 1) [ 47.635257][ T1467] EXT4-fs (loop4): 1 truncate cleaned up [ 47.641343][ T1467] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 47.672731][ T1463] F2FS-fs (loop1): Start checkpoint disabled! [ 47.690959][ T1463] F2FS-fs (loop1): f2fs_disable_checkpoint() finish, err:0 [ 47.707211][ T1463] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 47.716693][ T1463] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 47.730508][ T1467] EXT4-fs error (device loop4): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.4.466: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 47.826431][ T1463] F2FS-fs (loop1): access invalid blkaddr:150994944 [ 47.833143][ T1463] CPU: 0 PID: 1463 Comm: syz.1.461 Not tainted syzkaller #0 [ 47.840485][ T1463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 47.850563][ T1463] Call Trace: [ 47.853868][ T1463] [ 47.856825][ T1463] __dump_stack+0x21/0x24 [ 47.861213][ T1463] dump_stack_lvl+0x110/0x170 [ 47.865952][ T1463] ? __cfi_dump_stack_lvl+0x8/0x8 [ 47.871027][ T1463] ? kernel_text_address+0xa0/0xd0 [ 47.876182][ T1463] dump_stack+0x15/0x24 [ 47.880368][ T1463] __f2fs_is_valid_blkaddr+0xd2e/0x15a0 [ 47.885961][ T1463] f2fs_is_valid_blkaddr+0x23/0x30 [ 47.891120][ T1463] f2fs_map_blocks+0xcb3/0x4600 [ 47.896026][ T1463] ? __cfi_f2fs_map_blocks+0x10/0x10 [ 47.901351][ T1463] ? kvm_sched_clock_read+0x18/0x40 [ 47.906606][ T1463] ? sched_clock+0x9/0x10 [ 47.910994][ T1463] ? sched_clock_cpu+0x6e/0x260 [ 47.915888][ T1463] ? __cfi_sched_clock_cpu+0x10/0x10 [ 47.921210][ T1463] ? __alloc_pages+0x1fa/0x610 [ 47.926020][ T1463] ? xas_start+0x31d/0x3e0 [ 47.930472][ T1463] ? xa_load+0xad/0xd0 [ 47.934586][ T1463] f2fs_mpage_readpages+0xa46/0x1b20 [ 47.939919][ T1463] ? __mem_cgroup_uncharge_list+0x39/0xc0 [ 47.945692][ T1463] ? cgroup_rstat_updated+0xf0/0x360 [ 47.951013][ T1463] ? f2fs_i_blocks_write+0x1f0/0x1f0 [ 47.956345][ T1463] ? cgroup_rstat_updated+0xf0/0x360 [ 47.961697][ T1463] ? xas_nomem+0x6b/0x1f0 [ 47.966072][ T1463] f2fs_readahead+0xfc/0x240 [ 47.970709][ T1463] ? __cfi_f2fs_readahead+0x10/0x10 [ 47.975950][ T1463] read_pages+0x1bf/0xe10 [ 47.980362][ T1463] ? page_cache_ra_unbounded+0x850/0x850 [ 47.986043][ T1463] ? filemap_add_folio+0x113/0x260 [ 47.991200][ T1463] page_cache_ra_unbounded+0x6ff/0x850 [ 47.996715][ T1463] ? __cfi_page_cache_ra_unbounded+0x10/0x10 [ 48.002823][ T1463] ? xas_load+0x3a2/0x3c0 [ 48.007194][ T1463] page_cache_ra_order+0xb0c/0xe50 [ 48.012365][ T1463] ? page_cache_prev_miss+0x22e/0x2a0 [ 48.017802][ T1463] ? __cfi_page_cache_ra_order+0x10/0x10 [ 48.023479][ T1463] ? blk_finish_plug+0x5d/0x80 [ 48.028291][ T1463] ? f2fs_fill_dentries+0xb26/0xcb0 [ 48.033531][ T1463] ondemand_readahead+0x821/0xdb0 [ 48.038600][ T1463] ? page_cache_sync_ra+0x3d0/0x3d0 [ 48.043857][ T1463] page_cache_sync_ra+0x35b/0x3d0 [ 48.048925][ T1463] f2fs_readdir+0x473/0x990 [ 48.053467][ T1463] ? __cfi_f2fs_readdir+0x10/0x10 [ 48.058517][ T1463] ? down_read_killable+0xbc/0x110 [ 48.063673][ T1463] ? __cfi_down_read_killable+0x10/0x10 [ 48.069257][ T1463] ? security_file_permission+0x94/0xb0 [ 48.074856][ T1463] iterate_dir+0x26d/0x610 [ 48.079307][ T1463] ? __cfi_f2fs_readdir+0x10/0x10 [ 48.084375][ T1463] __se_sys_getdents64+0xf2/0x250 [ 48.088987][ T1484] loop0: detected capacity change from 0 to 40427 [ 48.089430][ T1463] ? __x64_sys_getdents64+0x90/0x90 [ 48.101064][ T1463] ? xfd_validate_state+0x70/0x150 [ 48.106211][ T1463] ? __cfi_filldir64+0x10/0x10 [ 48.111021][ T1463] ? fpregs_restore_userregs+0x128/0x260 [ 48.116684][ T1463] __x64_sys_getdents64+0x7b/0x90 [ 48.121743][ T1463] x64_sys_call+0x15c/0x9a0 [ 48.126278][ T1463] do_syscall_64+0x4c/0xa0 [ 48.127949][ T1484] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 48.130726][ T1463] ? clear_bhb_loop+0x30/0x80 [ 48.143134][ T1463] ? clear_bhb_loop+0x30/0x80 [ 48.147847][ T1463] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 48.153766][ T1463] RIP: 0033:0x7f55be7a8f19 [ 48.158211][ T1463] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 48.164791][ T1484] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 48.177837][ T1463] RSP: 002b:00007f55bf580028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 48.177864][ T1463] RAX: ffffffffffffffda RBX: 00007f55bea25fa0 RCX: 00007f55be7a8f19 [ 48.177881][ T1463] RDX: 000000000000004f RSI: 0000000000000000 RDI: 0000000000000004 [ 48.177894][ T1463] RBP: 00007f55be837f6d R08: 0000000000000000 R09: 0000000000000000 [ 48.218451][ T1463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 48.226471][ T1463] R13: 00007f55bea26038 R14: 00007f55bea25fa0 R15: 00007ffc9ef358b8 [ 48.230364][ T1484] F2FS-fs (loop0): invalid crc value [ 48.234468][ T1463] [ 48.244676][ T291] EXT4-fs (loop4): unmounting filesystem. [ 48.250796][ T1463] F2FS-fs (loop1): access invalid blkaddr:150994944 [ 48.258003][ T1463] CPU: 1 PID: 1463 Comm: syz.1.461 Not tainted syzkaller #0 [ 48.265354][ T1463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 48.275424][ T1463] Call Trace: [ 48.278722][ T1463] [ 48.281672][ T1463] __dump_stack+0x21/0x24 [ 48.286053][ T1463] dump_stack_lvl+0x110/0x170 [ 48.290741][ T1463] ? __cfi_dump_stack_lvl+0x8/0x8 [ 48.295773][ T1463] ? f2fs_lookup_read_extent_cache_block+0x22d/0x420 [ 48.302473][ T1463] dump_stack+0x15/0x24 [ 48.306644][ T1463] __f2fs_is_valid_blkaddr+0xd2e/0x15a0 [ 48.312206][ T1463] f2fs_is_valid_blkaddr+0x23/0x30 [ 48.317336][ T1463] f2fs_get_read_data_page+0x4ef/0x850 [ 48.322814][ T1463] ? __cfi_f2fs_get_read_data_page+0x10/0x10 [ 48.328815][ T1463] ? page_cache_sync_ra+0x3d0/0x3d0 [ 48.334058][ T1463] f2fs_find_data_page+0x198/0x3a0 [ 48.339220][ T1463] f2fs_readdir+0x4a2/0x990 [ 48.343734][ T1463] ? __cfi_f2fs_readdir+0x10/0x10 [ 48.348769][ T1463] ? down_read_killable+0xbc/0x110 [ 48.353901][ T1463] ? __cfi_down_read_killable+0x10/0x10 [ 48.359486][ T1463] ? security_file_permission+0x94/0xb0 [ 48.365066][ T1463] iterate_dir+0x26d/0x610 [ 48.369495][ T1463] ? __cfi_f2fs_readdir+0x10/0x10 [ 48.374523][ T1463] __se_sys_getdents64+0xf2/0x250 [ 48.379559][ T1463] ? __x64_sys_getdents64+0x90/0x90 [ 48.384767][ T1463] ? xfd_validate_state+0x70/0x150 [ 48.389894][ T1463] ? __cfi_filldir64+0x10/0x10 [ 48.394671][ T1463] ? fpregs_restore_userregs+0x128/0x260 [ 48.400314][ T1463] __x64_sys_getdents64+0x7b/0x90 [ 48.405353][ T1463] x64_sys_call+0x15c/0x9a0 [ 48.409884][ T1463] do_syscall_64+0x4c/0xa0 [ 48.414311][ T1463] ? clear_bhb_loop+0x30/0x80 [ 48.419000][ T1463] ? clear_bhb_loop+0x30/0x80 [ 48.423685][ T1463] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 48.429593][ T1463] RIP: 0033:0x7f55be7a8f19 [ 48.434024][ T1463] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 48.453640][ T1463] RSP: 002b:00007f55bf580028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 48.462064][ T1463] RAX: ffffffffffffffda RBX: 00007f55bea25fa0 RCX: 00007f55be7a8f19 [ 48.470063][ T1463] RDX: 000000000000004f RSI: 0000000000000000 RDI: 0000000000000004 [ 48.478038][ T1463] RBP: 00007f55be837f6d R08: 0000000000000000 R09: 0000000000000000 [ 48.486020][ T1463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 48.494000][ T1463] R13: 00007f55bea26038 R14: 00007f55bea25fa0 R15: 00007ffc9ef358b8 [ 48.501994][ T1463] [ 48.515166][ T1484] F2FS-fs (loop0): Found nat_bits in checkpoint [ 48.614241][ T531] bio_check_eod: 25 callbacks suppressed [ 48.614258][ T531] kworker/u4:5: attempt to access beyond end of device [ 48.614258][ T531] loop1: rw=2049, sector=40960, nr_sectors = 40 limit=40427 [ 48.641061][ T1484] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 48.648388][ T1484] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 48.681372][ T28] audit: type=1400 audit(1794399108.998:320): avc: denied { attach_queue } for pid=1499 comm="syz.5.478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 48.729636][ T28] audit: type=1400 audit(1794399109.048:321): avc: denied { write } for pid=1501 comm="syz.3.479" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 48.806307][ T287] syz-executor: attempt to access beyond end of device [ 48.806307][ T287] loop0: rw=2051, sector=77824, nr_sectors = 4096 limit=40427 [ 48.835482][ T287] syz-executor: attempt to access beyond end of device [ 48.835482][ T287] loop0: rw=2051, sector=49152, nr_sectors = 8 limit=40427 [ 48.859621][ T287] F2FS-fs (loop0): Issue discard(9728, 9728, 512) failed, ret: -5 [ 48.864188][ T287] F2FS-fs (loop0): Issue discard(6144, 6144, 1) failed, ret: -5 [ 48.938069][ T1518] loop5: detected capacity change from 0 to 256 [ 48.998384][ T1518] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 49.045415][ T1518] incfs: ino conflict with backing FS 1 [ 49.051084][ T28] audit: type=1400 audit(1794399109.368:322): avc: denied { mounton } for pid=1517 comm="syz.5.486" path="/64/file2/bus" dev="loop5" ino=1048698 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 49.095008][ T1518] overlayfs: upper fs does not support tmpfile. [ 49.101830][ T1528] loop1: detected capacity change from 0 to 512 [ 49.108295][ T28] audit: type=1400 audit(1794399109.418:323): avc: denied { getattr } for pid=1517 comm="syz.5.486" name="/" dev="incremental-fs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 49.135892][ T28] audit: type=1400 audit(1794399109.418:324): avc: denied { setattr } for pid=1517 comm="syz.5.486" name="work" dev="incremental-fs" ino=1048702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 49.174171][ T1528] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 49.181069][ T28] audit: type=1400 audit(1794399109.498:325): avc: denied { remove_name } for pid=542 comm="syz-executor" name="file0" dev="loop5" ino=1048701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 49.187830][ T1528] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 49.213214][ T1528] System zones: 0-1, 15-15, 18-18, 34-34 [ 49.222506][ T1528] EXT4-fs (loop1): orphan cleanup on readonly fs [ 49.229375][ T1528] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0 [ 49.238779][ T1528] EXT4-fs warning (device loop1): ext4_enable_quotas:7080: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 49.253405][ T1528] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 49.262437][ T1528] EXT4-fs (loop1): 1 truncate cleaned up [ 49.268499][ T1528] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 49.294072][ T1528] fscrypt (loop1, inode 16): Error -61 getting encryption context [ 49.311934][ T1528] fscrypt (loop1, inode 16): Error -61 getting encryption context [ 49.324874][ T1528] fscrypt (loop1, inode 16): Error -61 getting encryption context [ 49.340273][ T288] EXT4-fs (loop1): unmounting filesystem. [ 49.350716][ T1520] loop3: detected capacity change from 0 to 40427 [ 49.369035][ T1520] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 49.376889][ T1520] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 49.392778][ T1520] F2FS-fs (loop3): invalid crc value [ 49.408557][ T1542] loop1: detected capacity change from 0 to 512 [ 49.437062][ T1520] F2FS-fs (loop3): Found nat_bits in checkpoint [ 49.484431][ T1542] EXT4-fs: Ignoring removed nobh option [ 49.514415][ T1542] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 49.522960][ T1542] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.495: attempt to clear invalid blocks 2 len 1 [ 49.543358][ T1542] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 49.558282][ T1542] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.495: invalid indirect mapped block 1819239214 (level 0) [ 49.572438][ T1542] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.495: invalid indirect mapped block 1819239214 (level 1) [ 49.586920][ T1542] EXT4-fs (loop1): 1 truncate cleaned up [ 49.596992][ T1542] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 49.617608][ T1520] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 49.631273][ T1520] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 49.664965][ T1542] EXT4-fs error (device loop1): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.1.495: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 49.722945][ T1520] syz.3.487: attempt to access beyond end of device [ 49.722945][ T1520] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 49.742108][ T1520] syz.3.487: attempt to access beyond end of device [ 49.742108][ T1520] loop3: rw=0, sector=45096, nr_sectors = 8 limit=40427 [ 49.772456][ T1553] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.780848][ T288] EXT4-fs (loop1): unmounting filesystem. [ 49.820666][ T1553] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.849078][ T1553] device bridge_slave_0 entered promiscuous mode [ 49.965160][ T1569] loop4: detected capacity change from 0 to 512 [ 49.974652][ T1553] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.981732][ T1553] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.995923][ T1553] device bridge_slave_1 entered promiscuous mode [ 50.018311][ T1569] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 50.030912][ T1569] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 50.039121][ T1569] System zones: 0-1, 15-15, 18-18, 34-34 [ 50.045868][ T1569] EXT4-fs (loop4): orphan cleanup on readonly fs [ 50.057662][ T1569] EXT4-fs warning (device loop4): ext4_enable_quotas:7080: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 50.072637][ T1569] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 50.082369][ T1569] EXT4-fs (loop4): 1 truncate cleaned up [ 50.094839][ T1577] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 50.110839][ T1569] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 50.131633][ T1579] netlink: 16 bytes leftover after parsing attributes in process `syz.3.509'. [ 50.146003][ T1581] EXT4-fs (loop0): Test dummy encryption mode enabled [ 50.155082][ T1569] fscrypt (loop4, inode 16): Error -61 getting encryption context [ 50.167604][ T1579] ip_tables: iptables: counters copy to user failed while replacing table [ 50.177586][ T1581] EXT4-fs error (device loop0): ext4_orphan_get:1405: inode #15: comm syz.0.511: inode has both inline data and extents flags [ 50.178006][ T1272] device bridge_slave_1 left promiscuous mode [ 50.192087][ T1569] fscrypt (loop4, inode 16): Error -61 getting encryption context [ 50.197726][ T1272] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.209668][ T1577] incfs: ino conflict with backing FS 1 [ 50.217663][ T1581] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.511: couldn't read orphan inode 15 (err -117) [ 50.218324][ T1579] nfnetlink_queue: nf_queue: full at 0 entries, dropping packets(s) [ 50.231687][ T1581] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 50.246589][ T1577] overlayfs: upper fs does not support tmpfile. [ 50.246870][ T1272] device bridge_slave_0 left promiscuous mode [ 50.259136][ T1569] fscrypt (loop4, inode 16): Error -61 getting encryption context [ 50.267432][ T1272] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.279474][ T1272] device veth1_macvtap left promiscuous mode [ 50.285616][ T1272] device veth0_vlan left promiscuous mode [ 50.297489][ T291] EXT4-fs (loop4): unmounting filesystem. [ 50.338732][ T287] EXT4-fs (loop0): unmounting filesystem. [ 50.353451][ T1589] EXT4-fs: Ignoring removed nobh option [ 50.368650][ T1589] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 50.384296][ T1589] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.514: attempt to clear invalid blocks 2 len 1 [ 50.404318][ T1589] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 50.430534][ T1589] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.514: invalid indirect mapped block 1819239214 (level 0) [ 50.451679][ T1589] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.514: invalid indirect mapped block 1819239214 (level 1) [ 50.467791][ T1589] EXT4-fs (loop3): 1 truncate cleaned up [ 50.473477][ T1589] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 50.506262][ T1589] EXT4-fs error (device loop3): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.3.514: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 50.530390][ T1553] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.537503][ T1553] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.544846][ T1553] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.551892][ T1553] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.582192][ T289] EXT4-fs (loop3): unmounting filesystem. [ 50.614661][ T531] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.629243][ T1595] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 50.643014][ T531] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.656807][ T1592] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 50.676152][ T531] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.689686][ T1592] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 50.704639][ T1592] F2FS-fs (loop0): invalid crc value [ 50.710651][ T531] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 50.719892][ T531] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.728989][ T1592] F2FS-fs (loop0): Found nat_bits in checkpoint [ 50.758039][ T531] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 50.774007][ T531] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.796890][ T1592] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 50.804515][ T1592] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 50.827342][ T531] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 50.842389][ T531] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 50.871646][ T1553] device veth0_vlan entered promiscuous mode [ 50.882967][ T531] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 50.894881][ T531] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 50.904587][ T1592] syz.0.515: attempt to access beyond end of device [ 50.904587][ T1592] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 50.913244][ T531] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 50.926348][ T531] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 50.935287][ T1592] syz.0.515: attempt to access beyond end of device [ 50.935287][ T1592] loop0: rw=0, sector=45096, nr_sectors = 8 limit=40427 [ 50.953299][ T531] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 50.965117][ T531] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.984956][ T1553] device veth1_macvtap entered promiscuous mode [ 51.002999][ T531] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 51.015164][ T531] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 51.034591][ T531] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 51.062103][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 51.078360][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 51.131537][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 51.131553][ T28] audit: type=1400 audit(1794399111.448:328): avc: denied { mounton } for pid=1553 comm="syz-executor" path="/root/syzkaller.buEXlM/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 51.260517][ T1608] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.274411][ T1631] FAULT_INJECTION: forcing a failure. [ 51.274411][ T1631] name failslab, interval 1, probability 0, space 0, times 0 [ 51.278647][ T1608] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.289680][ T1631] CPU: 0 PID: 1631 Comm: syz.0.531 Not tainted syzkaller #0 [ 51.299437][ T1608] device bridge_slave_0 entered promiscuous mode [ 51.301498][ T1631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 51.317979][ T1631] Call Trace: [ 51.321310][ T1631] [ 51.321974][ T1608] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.324258][ T1631] __dump_stack+0x21/0x24 [ 51.335635][ T1631] dump_stack_lvl+0x110/0x170 [ 51.340348][ T1631] ? __cfi_dump_stack_lvl+0x8/0x8 [ 51.341649][ T1608] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.345398][ T1631] dump_stack+0x15/0x24 [ 51.345422][ T1631] should_fail_ex+0x3bf/0x510 [ 51.345445][ T1631] ? __kernfs_new_node+0xe1/0x670 [ 51.345466][ T1631] __should_failslab+0xac/0xf0 [ 51.345494][ T1631] should_failslab+0x9/0x20 [ 51.368049][ T1608] device bridge_slave_1 entered promiscuous mode [ 51.371162][ T1631] kmem_cache_alloc+0x3b/0x320 [ 51.386767][ T1631] __kernfs_new_node+0xe1/0x670 [ 51.391658][ T1631] ? kernfs_new_node+0x260/0x260 [ 51.396678][ T1631] ? rwsem_write_trylock+0x136/0x300 [ 51.401999][ T1631] ? up_write+0x7b/0x290 [ 51.406308][ T1631] kernfs_new_node+0x150/0x260 [ 51.411102][ T1631] __kernfs_create_file+0x4e/0x270 [ 51.416241][ T1631] cgroup_addrm_files+0x701/0xbb0 [ 51.421303][ T1631] ? trace_raw_output_cgroup_event+0x1e0/0x1e0 [ 51.427500][ T1631] ? kasan_save_alloc_info+0x1f/0x30 [ 51.432814][ T1631] ? __kasan_kmalloc+0x95/0xb0 [ 51.437634][ T1631] ? __kasan_check_write+0x14/0x20 [ 51.442808][ T1631] ? _raw_spin_lock_irq+0x95/0xf0 [ 51.447891][ T1631] css_populate_dir+0x29a/0x370 [ 51.452775][ T1631] cgroup_mkdir+0x12d8/0x1550 [ 51.457496][ T1631] ? __cfi_cgroup_mkdir+0x10/0x10 [ 51.462557][ T1631] ? _raw_spin_lock+0x94/0xf0 [ 51.467269][ T1631] ? up_read+0x56/0x1d0 [ 51.471473][ T1631] ? __cfi_cgroup_mkdir+0x10/0x10 [ 51.476617][ T1631] kernfs_iop_mkdir+0x1b1/0x2b0 [ 51.481503][ T1631] vfs_mkdir+0x39c/0x580 [ 51.485784][ T1631] do_mkdirat+0x174/0x4d0 [ 51.490173][ T1631] __x64_sys_mkdirat+0x89/0xa0 [ 51.494974][ T1631] x64_sys_call+0x73d/0x9a0 [ 51.499526][ T1631] do_syscall_64+0x4c/0xa0 [ 51.503974][ T1631] ? clear_bhb_loop+0x30/0x80 [ 51.508687][ T1631] ? clear_bhb_loop+0x30/0x80 [ 51.513496][ T1631] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 51.519435][ T1631] RIP: 0033:0x7f4d71fa8f19 [ 51.523885][ T1631] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 51.543520][ T1631] RSP: 002b:00007f4d72e9f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 51.551973][ T1631] RAX: ffffffffffffffda RBX: 00007f4d72225fa0 RCX: 00007f4d71fa8f19 [ 51.555714][ T1608] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.559966][ T1631] RDX: 00000000000001ff RSI: 0000200000000180 RDI: ffffffffffffff9c [ 51.559987][ T1631] RBP: 00007f4d72037f6d R08: 0000000000000000 R09: 0000000000000000 [ 51.567074][ T1608] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.574988][ T1631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 51.575004][ T1631] R13: 00007f4d72226038 R14: 00007f4d72225fa0 R15: 00007ffc31593538 [ 51.583245][ T1608] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.590190][ T1631] [ 51.606362][ T1631] cgroup: cgroup_addrm_files: failed to add cgroup.max.depth, err=-12 [ 51.613232][ T1608] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.704917][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.721522][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.757770][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.765563][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.794557][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.804540][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.828415][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.835513][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.851402][ T28] audit: type=1400 audit(1794399112.168:329): avc: denied { unlink } for pid=1660 comm="syz.4.544" name="#5" dev="tmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 51.883445][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.902113][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.904144][ T28] audit: type=1326 audit(1794399112.198:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1663 comm="syz.0.552" exe="/root/ci2-android-6-1/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4d71fa8f19 code=0x0 [ 51.923049][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.941296][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.993657][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 52.003747][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.012447][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 52.021388][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.040268][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 52.056654][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 52.076655][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 52.089402][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 52.122813][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 52.133274][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 52.140751][ T1679] capability: warning: `syz.4.549' uses deprecated v2 capabilities in a way that may be insecure [ 52.149938][ T1654] set_capacity_and_notify: 6 callbacks suppressed [ 52.149987][ T1654] loop3: detected capacity change from 0 to 40427 [ 52.165859][ T1608] device veth0_vlan entered promiscuous mode [ 52.176371][ T1272] device bridge_slave_1 left promiscuous mode [ 52.182547][ T1654] F2FS-fs (loop3): invalid crc value [ 52.195288][ T1272] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.210163][ T1654] F2FS-fs (loop3): Found nat_bits in checkpoint [ 52.216770][ T1272] device bridge_slave_0 left promiscuous mode [ 52.223097][ T1272] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.244926][ T1272] device veth1_macvtap left promiscuous mode [ 52.253556][ T1272] device veth0_vlan left promiscuous mode [ 52.282938][ T1654] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 52.367158][ T1692] netlink: 28 bytes leftover after parsing attributes in process `syz.4.554'. [ 52.374104][ T6] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 52.376322][ T1692] netlink: 28 bytes leftover after parsing attributes in process `syz.4.554'. [ 52.397063][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 52.409538][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 52.429757][ T1608] device veth1_macvtap entered promiscuous mode [ 52.445385][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 52.459827][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 52.469446][ T1697] mtrr: base(0x2000) is not aligned on a size(0x0000) boundary [ 52.478033][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 52.494800][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 52.503906][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 52.513785][ T1699] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 52.544068][ T28] audit: type=1400 audit(1794399112.858:331): avc: denied { mount } for pid=1608 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 52.581573][ T6] usb 7-1: unable to get BOS descriptor or descriptor too short [ 52.590044][ T28] audit: type=1400 audit(1794399112.888:332): avc: denied { shutdown } for pid=1676 comm="syz.6.548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 52.610472][ T6] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 52.630016][ T6] usb 7-1: can't read configurations, error -71 [ 52.642487][ T1707] netlink: 16 bytes leftover after parsing attributes in process `syz.4.560'. [ 52.646299][ T28] audit: type=1400 audit(1794399112.888:333): avc: denied { read } for pid=1676 comm="syz.6.548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 52.682456][ T1707] ip_tables: iptables: counters copy to user failed while replacing table [ 52.694672][ T1654] syz.3.539: attempt to access beyond end of device [ 52.694672][ T1654] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 52.702453][ T1707] nfnetlink_queue: nf_queue: full at 0 entries, dropping packets(s) [ 52.740327][ T28] audit: type=1400 audit(1794399113.058:334): avc: denied { create } for pid=1710 comm="syz.7.562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 52.778582][ T28] audit: type=1400 audit(1794399113.068:335): avc: denied { sys_admin } for pid=1710 comm="syz.7.562" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 52.814446][ T28] audit: type=1400 audit(1794399113.128:336): avc: denied { setopt } for pid=1713 comm="syz.4.564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 52.876125][ T1722] loop7: detected capacity change from 0 to 128 [ 52.921219][ T1722] EXT4-fs: Ignoring removed i_version option [ 52.949638][ T1722] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 52.965731][ T1722] ext4 filesystem being mounted at /2/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 53.006973][ T1737] loop3: detected capacity change from 0 to 4 [ 53.014251][ T1722] EXT4-fs error (device loop7): dx_make_map:1328: inode #2: block 34: comm syz.7.568: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 53.037941][ T1722] EXT4-fs (loop7): Remounting filesystem read-only [ 53.045239][ T1722] EXT4-fs error (device loop7) in do_split:2095: Corrupt filesystem [ 53.057449][ T1722] EXT4-fs (loop7): Remounting filesystem read-only [ 53.076924][ T1608] EXT4-fs (loop7): unmounting filesystem. [ 53.107497][ T1747] FAULT_INJECTION: forcing a failure. [ 53.107497][ T1747] name failslab, interval 1, probability 0, space 0, times 0 [ 53.128515][ T1750] loop6: detected capacity change from 0 to 512 [ 53.129416][ T1747] CPU: 1 PID: 1747 Comm: syz.3.575 Not tainted syzkaller #0 [ 53.142101][ T1747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 53.152005][ T1750] EXT4-fs: Ignoring removed nobh option [ 53.152181][ T1747] Call Trace: [ 53.152190][ T1747] [ 53.163233][ T1750] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -13 [ 53.163975][ T1747] __dump_stack+0x21/0x24 [ 53.164003][ T1747] dump_stack_lvl+0x110/0x170 [ 53.174479][ T1750] EXT4-fs error (device loop6): ext4_clear_blocks:883: inode #13: comm syz.6.577: attempt to clear invalid blocks 2 len 1 [ 53.176414][ T1747] ? __cfi_dump_stack_lvl+0x8/0x8 [ 53.182106][ T1750] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1126: group 0, [ 53.193774][ T1747] ? avc_has_perm+0x163/0x250 [ 53.193826][ T1747] dump_stack+0x15/0x24 [ 53.193846][ T1747] should_fail_ex+0x3bf/0x510 [ 53.193872][ T1747] __should_failslab+0xac/0xf0 [ 53.198998][ T1750] block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 53.207331][ T1747] should_failslab+0x9/0x20 [ 53.207365][ T1747] slab_pre_alloc_hook+0x30/0x1d0 [ 53.243572][ T1747] kmem_cache_alloc_lru+0x49/0x280 [ 53.248719][ T1747] ? sock_alloc_inode+0x28/0xc0 [ 53.253627][ T1747] sock_alloc_inode+0x28/0xc0 [ 53.258321][ T1747] ? __cfi_sock_alloc_inode+0x10/0x10 [ 53.263715][ T1747] new_inode_pseudo+0x70/0x1f0 [ 53.268496][ T1747] __sock_create+0x12c/0x7c0 [ 53.273127][ T1747] __sys_socket+0xcd/0x1a0 [ 53.277566][ T1747] __x64_sys_socket+0x7a/0x90 [ 53.282260][ T1747] x64_sys_call+0x449/0x9a0 [ 53.286771][ T1747] do_syscall_64+0x4c/0xa0 [ 53.291208][ T1747] ? clear_bhb_loop+0x30/0x80 [ 53.295906][ T1747] ? clear_bhb_loop+0x30/0x80 [ 53.300629][ T1747] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 53.306534][ T1747] RIP: 0033:0x7f2a4c1a8f19 [ 53.310964][ T1747] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 53.330575][ T1747] RSP: 002b:00007f2a4d14d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 53.338997][ T1747] RAX: ffffffffffffffda RBX: 00007f2a4c425fa0 RCX: 00007f2a4c1a8f19 [ 53.346981][ T1747] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 53.354960][ T1747] RBP: 00007f2a4c237f6d R08: 0000000000000000 R09: 0000000000000000 [ 53.362941][ T1747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 53.371093][ T1747] R13: 00007f2a4c426038 R14: 00007f2a4c425fa0 R15: 00007fff5cdac878 [ 53.379104][ T1747] [ 53.383579][ T1747] socket: no more sockets [ 53.421277][ T28] audit: type=1400 audit(1794399113.738:337): avc: denied { create } for pid=1756 comm="syz.0.580" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=chr_file permissive=1 [ 53.422693][ T1750] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.577: invalid indirect mapped block 1819239214 (level 0) [ 53.472508][ T1759] loop0: detected capacity change from 0 to 512 [ 53.479115][ T1750] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.577: invalid indirect mapped block 1819239214 (level 1) [ 53.495586][ T1750] EXT4-fs (loop6): 1 truncate cleaned up [ 53.501625][ T1750] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 53.521419][ T1759] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002] [ 53.531952][ T1759] System zones: 0-2, 18-18, 34-35 [ 53.540600][ T1750] EXT4-fs error (device loop6): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.6.577: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 53.563225][ T1759] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 53.572911][ T1759] ext4 filesystem being mounted at /139/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.592458][ T1553] EXT4-fs (loop6): unmounting filesystem. [ 53.621411][ T287] EXT4-fs (loop0): unmounting filesystem. [ 53.666217][ T1779] loop0: detected capacity change from 0 to 512 [ 53.680600][ T1779] EXT4-fs (loop0): invalid journal inode [ 53.686425][ T1779] EXT4-fs (loop0): can't get journal size [ 53.693335][ T1779] EXT4-fs error (device loop0): ext4_orphan_get:1405: inode #15: comm syz.0.591: iget: bad extended attribute block 1 [ 53.707175][ T1779] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.591: couldn't read orphan inode 15 (err -117) [ 53.719874][ T1779] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 53.738168][ T287] EXT4-fs (loop0): unmounting filesystem. [ 53.884015][ T309] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 53.930904][ T1791] loop6: detected capacity change from 0 to 40427 [ 53.945317][ T1799] loop4: detected capacity change from 0 to 512 [ 53.951738][ T1791] F2FS-fs (loop6): fault_injection options not supported [ 53.962210][ T1791] F2FS-fs (loop6): fault_type options not supported [ 53.972638][ T1791] F2FS-fs (loop6): invalid crc value [ 53.980573][ T1791] F2FS-fs (loop6): Found nat_bits in checkpoint [ 54.000596][ T1799] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 54.009719][ T1799] ext4 filesystem being mounted at /139/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.035052][ T1791] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 54.043694][ T291] EXT4-fs (loop4): unmounting filesystem. [ 54.068100][ T1791] syz.6.596: attempt to access beyond end of device [ 54.068100][ T1791] loop6: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 54.082026][ T309] usb 8-1: Using ep0 maxpacket: 16 [ 54.088770][ T309] usb 8-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 54.099868][ T309] usb 8-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 54.110189][ T309] usb 8-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 54.123215][ T309] usb 8-1: config 0 interface 0 has no altsetting 0 [ 54.129884][ T309] usb 8-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 54.138981][ T309] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.152696][ T309] usb 8-1: config 0 descriptor?? [ 54.239534][ T1814] xt_hashlimit: size too large, truncated to 1048576 [ 54.458968][ T1824] FAULT_INJECTION: forcing a failure. [ 54.458968][ T1824] name failslab, interval 1, probability 0, space 0, times 0 [ 54.471784][ T1824] CPU: 1 PID: 1824 Comm: syz.4.607 Not tainted syzkaller #0 [ 54.479102][ T1824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 54.489178][ T1824] Call Trace: [ 54.492477][ T1824] [ 54.495470][ T1824] __dump_stack+0x21/0x24 [ 54.499826][ T1824] dump_stack_lvl+0x110/0x170 [ 54.504532][ T1824] ? __cfi_dump_stack_lvl+0x8/0x8 [ 54.509586][ T1824] dump_stack+0x15/0x24 [ 54.513776][ T1824] should_fail_ex+0x3bf/0x510 [ 54.518499][ T1824] ? vm_area_dup+0x65/0x280 [ 54.523047][ T1824] __should_failslab+0xac/0xf0 [ 54.527847][ T1824] should_failslab+0x9/0x20 [ 54.532380][ T1824] kmem_cache_alloc+0x3b/0x320 [ 54.537184][ T1824] vm_area_dup+0x65/0x280 [ 54.541554][ T1824] __split_vma+0x1c6/0x980 [ 54.546009][ T1824] ? find_vma_prev+0x111/0x190 [ 54.550814][ T1824] madvise_update_vma+0x338/0xa20 [ 54.555878][ T1824] do_madvise+0xdc1/0x3290 [ 54.560330][ T1824] ? __cfi_do_madvise+0x10/0x10 [ 54.565216][ T1824] ? try_to_wake_up+0x6c6/0x1250 [ 54.570204][ T1824] ? __kasan_check_write+0x14/0x20 [ 54.575384][ T1824] ? wake_up_q+0x101/0x1a0 [ 54.579845][ T1824] ? futex_wake+0x5fa/0x8e0 [ 54.584384][ T1824] ? __cfi_futex_wake+0x10/0x10 [ 54.589264][ T1824] ? proc_fail_nth_write+0x180/0x200 [ 54.594604][ T1824] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 54.600265][ T1824] ? security_file_permission+0x8a/0xb0 [ 54.605861][ T1824] ? vfs_write+0xa51/0xd00 [ 54.610308][ T1824] ? do_futex+0x2bf/0x430 [ 54.614663][ T1824] ? __cfi_do_futex+0x10/0x10 [ 54.619367][ T1824] ? __kasan_check_write+0x14/0x20 [ 54.624510][ T1824] ? mutex_unlock+0x8f/0x230 [ 54.629145][ T1824] ? __se_sys_futex+0x136/0x310 [ 54.634034][ T1824] ? __this_cpu_preempt_check+0x13/0x20 [ 54.639614][ T1824] ? xfd_validate_state+0x70/0x150 [ 54.644758][ T1824] ? fpregs_restore_userregs+0x128/0x260 [ 54.650414][ T1824] __x64_sys_madvise+0xa9/0xc0 [ 54.655217][ T1824] x64_sys_call+0x99e/0x9a0 [ 54.659777][ T1824] do_syscall_64+0x4c/0xa0 [ 54.664229][ T1824] ? clear_bhb_loop+0x30/0x80 [ 54.668926][ T1824] ? clear_bhb_loop+0x30/0x80 [ 54.673626][ T1824] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 54.679540][ T1824] RIP: 0033:0x7ffbb81a8f19 [ 54.683970][ T1824] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 54.703598][ T1824] RSP: 002b:00007ffbb901e028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 54.712037][ T1824] RAX: ffffffffffffffda RBX: 00007ffbb8425fa0 RCX: 00007ffbb81a8f19 [ 54.720040][ T1824] RDX: 0000000000000001 RSI: 0000000000003000 RDI: 0000200000ffd000 [ 54.728036][ T1824] RBP: 00007ffbb8237f6d R08: 0000000000000000 R09: 0000000000000000 [ 54.732053][ T309] hid (null): invalid report_size 27745 [ 54.736051][ T1824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 54.736066][ T1824] R13: 00007ffbb8426038 R14: 00007ffbb8425fa0 R15: 00007ffe8be760f8 [ 54.736089][ T1824] [ 54.837077][ T1835] loop4: detected capacity change from 0 to 512 [ 54.858932][ T1835] FAT-fs (loop4): Directory bread(block 2080) failed [ 54.867998][ T1835] FAT-fs (loop4): Directory bread(block 2081) failed [ 54.875857][ T1835] FAT-fs (loop4): Directory bread(block 2082) failed [ 54.884217][ T1835] FAT-fs (loop4): Directory bread(block 2083) failed [ 54.892203][ T1835] FAT-fs (loop4): Directory bread(block 2084) failed [ 54.901602][ T1835] FAT-fs (loop4): Directory bread(block 2085) failed [ 54.908428][ T1835] FAT-fs (loop4): Directory bread(block 2086) failed [ 54.914946][ T1841] loop6: detected capacity change from 0 to 512 [ 54.915986][ T1835] FAT-fs (loop4): Directory bread(block 2087) failed [ 54.934891][ T1445] usb 8-1: USB disconnect, device number 2 [ 54.953099][ T1841] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 54.961946][ T1841] FAT-fs (loop6): Filesystem has been set read-only [ 54.968736][ T1841] FAT-fs (loop6): error, fat_free: invalid cluster chain (i_pos 548) [ 54.977357][ T1841] FAT-fs (loop6): error, fat_free: invalid cluster chain (i_pos 548) [ 55.012978][ T1843] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 55.030301][ T1843] EXT4-fs (loop4): 1 truncate cleaned up [ 55.036701][ T1843] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 55.057924][ T291] EXT4-fs (loop4): unmounting filesystem. [ 55.164054][ T221] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 55.333177][ T1848] F2FS-fs (loop6): Test dummy encryption mode enabled [ 55.340603][ T1848] F2FS-fs (loop6): invalid crc value [ 55.348414][ T221] usb 1-1: unable to get BOS descriptor or descriptor too short [ 55.357174][ T221] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 55.362138][ T1848] F2FS-fs (loop6): Found nat_bits in checkpoint [ 55.365488][ T221] usb 1-1: can't read configurations, error -71 [ 55.407269][ T1848] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 55.470683][ T1855] EXT4-fs: Ignoring removed i_version option [ 55.493384][ T1855] ext4 filesystem being mounted at /149/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 55.552204][ T1855] EXT4-fs error (device loop4): dx_make_map:1328: inode #2: block 34: comm syz.4.621: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 55.578332][ T1855] EXT4-fs (loop4): Remounting filesystem read-only [ 55.585030][ T1855] EXT4-fs error (device loop4) in do_split:2095: Corrupt filesystem [ 55.593202][ T1855] EXT4-fs (loop4): Remounting filesystem read-only [ 55.614108][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 55.688106][ T1869] EXT4-fs (loop7): Test dummy encryption mode enabled [ 55.709364][ T1869] EXT4-fs error (device loop7): ext4_orphan_get:1405: inode #15: comm syz.7.626: inode has both inline data and extents flags [ 55.736361][ T1871] ext4 filesystem being mounted at /151/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.750740][ T1871] fs-verity: sha512 using implementation "sha512-avx2" [ 55.759882][ T1869] EXT4-fs error (device loop7): ext4_orphan_get:1410: comm syz.7.626: couldn't read orphan inode 15 (err -117) [ 55.868427][ T1867] F2FS-fs (loop3): invalid crc value [ 55.895115][ T1867] F2FS-fs (loop3): Found nat_bits in checkpoint [ 55.937562][ T1876] ext4 filesystem being mounted at /152/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 55.978320][ T1881] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 55.990507][ T1881] FAT-fs (loop7): Filesystem has been set read-only [ 56.000069][ T1867] F2FS-fs (loop3): Start checkpoint disabled! [ 56.011613][ T1881] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 548) [ 56.019409][ T1867] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0 [ 56.028892][ T1881] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 548) [ 56.074260][ T1867] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 56.129392][ T1867] syz.3.625: attempt to access beyond end of device [ 56.129392][ T1867] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 56.228370][ T1272] kworker/u4:8: attempt to access beyond end of device [ 56.228370][ T1272] loop3: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 56.365468][ T1913] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 56.384388][ T1913] FAT-fs (loop4): Filesystem has been set read-only [ 56.391272][ T1913] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 548) [ 56.419318][ T1913] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 548) [ 56.488239][ T1921] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002] [ 56.503915][ T1921] System zones: 0-2, 18-18, 34-35 [ 56.523283][ T1921] ext4 filesystem being mounted at /100/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.744654][ T1934] F2FS-fs (loop6): invalid crc value [ 56.768833][ T1934] F2FS-fs (loop6): Found nat_bits in checkpoint [ 56.844388][ T1934] F2FS-fs (loop6): Start checkpoint disabled! [ 56.853797][ T1934] F2FS-fs (loop6): f2fs_disable_checkpoint() finish, err:0 [ 56.921348][ T1934] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 56.944016][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 56.944031][ T28] audit: type=1400 audit(1794399117.258:342): avc: denied { ioctl } for pid=1979 comm="syz.4.667" path="/164/trace/trace" dev="tracefs" ino=12931 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 56.974769][ T1972] ext4 filesystem being mounted at /103/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.984945][ T28] audit: type=1400 audit(1794399117.298:343): avc: denied { mount } for pid=1981 comm="syz.7.668" name="/" dev="configfs" ino=6960 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 57.029215][ T1987] syz.4.669 uses obsolete (PF_INET,SOCK_PACKET) [ 57.038005][ T28] audit: type=1400 audit(1794399117.298:344): avc: denied { search } for pid=1981 comm="syz.7.668" name="/" dev="configfs" ino=6960 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 57.071276][ T1987] netlink: 'syz.4.669': attribute type 8 has an invalid length. [ 57.105489][ T28] audit: type=1400 audit(1794399117.298:345): avc: denied { write } for pid=1981 comm="syz.7.668" name="usb_gadget" dev="configfs" ino=6961 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 57.153999][ T28] audit: type=1400 audit(1794399117.298:346): avc: denied { add_name } for pid=1981 comm="syz.7.668" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 57.179843][ T1990] set_capacity_and_notify: 14 callbacks suppressed [ 57.179861][ T1990] loop7: detected capacity change from 0 to 8192 [ 57.198247][ T1996] loop3: detected capacity change from 0 to 128 [ 57.200512][ T28] audit: type=1400 audit(1794399117.298:347): avc: denied { create } for pid=1981 comm="syz.7.668" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 57.219381][ T531] kworker/u4:5: attempt to access beyond end of device [ 57.219381][ T531] loop6: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 57.244312][ T28] audit: type=1400 audit(1794399117.388:348): avc: denied { unmount } for pid=1608 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 57.348200][ T1988] loop0: detected capacity change from 0 to 40427 [ 57.365727][ T1988] F2FS-fs (loop0): invalid crc value [ 57.398100][ T1988] F2FS-fs (loop0): Found nat_bits in checkpoint [ 57.449223][ T2006] loop6: detected capacity change from 0 to 512 [ 57.468348][ T2006] FAT-fs (loop6): Unrecognized mount option "°êÌ‹´¡Nº(ñ’Ç Ëÿ•­Ñç-¬mìã" or missing value [ 57.484378][ T1988] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 57.495757][ T312] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 57.572401][ T287] syz-executor: attempt to access beyond end of device [ 57.572401][ T287] loop0: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 57.621820][ T2011] loop4: detected capacity change from 0 to 512 [ 57.632229][ T2011] EXT4-fs (loop4): invalid journal inode [ 57.664012][ T2011] EXT4-fs (loop4): can't get journal size [ 57.681951][ T2011] EXT4-fs error (device loop4): ext4_orphan_get:1405: inode #15: comm syz.4.680: iget: bad extended attribute block 1 [ 57.694700][ T6] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 57.739698][ T2006] loop6: detected capacity change from 0 to 40427 [ 57.750578][ T2006] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 57.758664][ T2011] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.680: couldn't read orphan inode 15 (err -117) [ 57.795471][ T2006] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 57.837660][ T2006] F2FS-fs (loop6): invalid crc value [ 57.864324][ T2006] F2FS-fs (loop6): Found nat_bits in checkpoint [ 57.871712][ T2025] loop4: detected capacity change from 0 to 512 [ 57.885127][ T6] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 57.898887][ T2025] EXT4-fs (loop4): Test dummy encryption mode enabled [ 57.903440][ T6] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 57.924222][ T2024] loop0: detected capacity change from 0 to 2048 [ 57.938600][ T2025] EXT4-fs error (device loop4): ext4_orphan_get:1405: inode #15: comm syz.4.683: inode has both inline data and extents flags [ 57.955865][ T6] usb 4-1: config 0 interface 0 has no altsetting 0 [ 57.984546][ T2006] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 57.996157][ T2024] ext4 filesystem being mounted at /167/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.002968][ T2006] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 58.017038][ T6] usb 4-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 58.017178][ T2025] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.683: couldn't read orphan inode 15 (err -117) [ 58.035458][ T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.046850][ T6] usb 4-1: config 0 descriptor?? [ 58.172731][ T2039] syz.6.674: attempt to access beyond end of device [ 58.172731][ T2039] loop6: rw=2049, sector=77824, nr_sectors = 2088 limit=40427 [ 58.229174][ T28] audit: type=1400 audit(1794399118.548:349): avc: denied { append } for pid=2047 comm="syz.7.691" name="usbmon3" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 58.229376][ T2048] FAULT_INJECTION: forcing a failure. [ 58.229376][ T2048] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 58.267637][ T2039] syz.6.674: attempt to access beyond end of device [ 58.267637][ T2039] loop6: rw=2049, sector=79912, nr_sectors = 2008 limit=40427 [ 58.326133][ T2039] syz.6.674: attempt to access beyond end of device [ 58.326133][ T2039] loop6: rw=2049, sector=49152, nr_sectors = 3032 limit=40427 [ 58.341264][ T2048] CPU: 0 PID: 2048 Comm: syz.7.691 Not tainted syzkaller #0 [ 58.348612][ T2048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 58.358713][ T2048] Call Trace: [ 58.362020][ T2048] [ 58.364975][ T2048] __dump_stack+0x21/0x24 [ 58.369345][ T2048] dump_stack_lvl+0x110/0x170 [ 58.374053][ T2048] ? __cfi_dump_stack_lvl+0x8/0x8 [ 58.379110][ T2048] dump_stack+0x15/0x24 [ 58.383299][ T2048] should_fail_ex+0x3bf/0x510 [ 58.388011][ T2048] should_fail_alloc_page+0x61/0x90 [ 58.389281][ T2039] syz.6.674: attempt to access beyond end of device [ 58.389281][ T2039] loop6: rw=2049, sector=52184, nr_sectors = 1064 limit=40427 [ 58.393253][ T2048] prepare_alloc_pages+0x131/0x570 [ 58.412260][ T2048] ? __alloc_pages_bulk+0x9d0/0x9d0 [ 58.417522][ T2048] __alloc_pages+0x15b/0x610 [ 58.422158][ T2048] ? __cfi___alloc_pages+0x10/0x10 [ 58.427323][ T2048] ? kasan_save_alloc_info+0x1f/0x30 [ 58.429922][ T2039] syz.6.674: attempt to access beyond end of device [ 58.429922][ T2039] loop6: rw=2049, sector=57344, nr_sectors = 2912 limit=40427 [ 58.432635][ T2048] ? __kasan_kmalloc+0x95/0xb0 [ 58.451301][ T2048] ? mon_bin_open+0x192/0x590 [ 58.456020][ T2048] get_zeroed_page+0x19/0x40 [ 58.460654][ T2048] mon_bin_open+0x21e/0x590 [ 58.465200][ T2048] chrdev_open+0x593/0x600 [ 58.469654][ T2048] ? __cfi_chrdev_open+0x10/0x10 [ 58.474627][ T2048] ? fsnotify_perm+0x3e9/0x5b0 [ 58.479427][ T2048] do_dentry_open+0x885/0x11f0 [ 58.484240][ T2048] ? __cfi_chrdev_open+0x10/0x10 [ 58.489210][ T2048] vfs_open+0x73/0x80 [ 58.493240][ T2048] path_openat+0x2699/0x2f30 [ 58.497870][ T2048] ? slab_post_alloc_hook+0x4f/0x2d0 [ 58.503191][ T2048] ? kmem_cache_alloc+0x166/0x320 [ 58.508284][ T2048] ? getname_flags+0xba/0x510 [ 58.513011][ T2048] ? do_sys_openat2+0xeb/0x820 [ 58.517796][ T2048] ? do_filp_open+0x420/0x420 [ 58.522545][ T2048] do_filp_open+0x1ee/0x420 [ 58.527060][ T2048] ? __cfi_do_filp_open+0x10/0x10 [ 58.532116][ T2048] ? alloc_fd+0x4c1/0x570 [ 58.536459][ T2048] do_sys_openat2+0x15e/0x820 [ 58.541147][ T2048] ? do_sys_open+0xe0/0xe0 [ 58.545573][ T2048] ? do_user_addr_fault+0x9a5/0x1030 [ 58.550870][ T2048] __x64_sys_openat+0x136/0x160 [ 58.555726][ T2048] x64_sys_call+0x783/0x9a0 [ 58.560229][ T2048] do_syscall_64+0x4c/0xa0 [ 58.564638][ T2048] ? clear_bhb_loop+0x30/0x80 [ 58.569340][ T2048] ? clear_bhb_loop+0x30/0x80 [ 58.574034][ T2048] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 58.579959][ T2048] RIP: 0033:0x7f1a7b96974e [ 58.584375][ T2048] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 58.603998][ T2048] RSP: 002b:00007f1a7c7f7b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 58.612431][ T2048] RAX: ffffffffffffffda RBX: 00007f1a7c7f86c0 RCX: 00007f1a7b96974e [ 58.620409][ T2048] RDX: 0000000000004400 RSI: 00007f1a7c7f7c00 RDI: ffffffffffffff9c [ 58.628376][ T2048] RBP: 00007f1a7c7f7c00 R08: 0000000000000000 R09: 0000000000000000 [ 58.636352][ T2048] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 58.644323][ T2048] R13: 00007f1a7bc26038 R14: 00007f1a7bc25fa0 R15: 00007fff7ceebdb8 [ 58.652313][ T2048] [ 58.657826][ T6] hid-thrustmaster 0003:044F:B65D.0005: unknown main item tag 0x0 [ 58.665825][ T6] hid-thrustmaster 0003:044F:B65D.0005: unknown main item tag 0x0 [ 58.678967][ T6] hid-thrustmaster 0003:044F:B65D.0005: unknown main item tag 0x0 [ 58.687057][ T6] hid-thrustmaster 0003:044F:B65D.0005: unknown main item tag 0x0 [ 58.695106][ T6] hid-thrustmaster 0003:044F:B65D.0005: unknown main item tag 0x0 [ 58.702981][ T6] hid-thrustmaster 0003:044F:B65D.0005: unknown main item tag 0x0 [ 58.711037][ T6] hid-thrustmaster 0003:044F:B65D.0005: unknown main item tag 0x0 [ 58.719071][ T6] hid-thrustmaster 0003:044F:B65D.0005: unknown main item tag 0x0 [ 58.727230][ T6] hid-thrustmaster 0003:044F:B65D.0005: unknown main item tag 0x0 [ 58.735239][ T6] hid-thrustmaster 0003:044F:B65D.0005: unknown main item tag 0x0 [ 58.743128][ T6] hid-thrustmaster 0003:044F:B65D.0005: unknown main item tag 0x0 [ 58.751170][ T6] hid-thrustmaster 0003:044F:B65D.0005: unknown main item tag 0x0 [ 58.764024][ T6] hid-thrustmaster 0003:044F:B65D.0005: unknown main item tag 0x0 [ 58.782042][ T6] hid-thrustmaster 0003:044F:B65D.0005: unknown main item tag 0x0 [ 58.795957][ T6] hid-thrustmaster 0003:044F:B65D.0005: unknown main item tag 0x0 [ 58.813986][ T6] hid-thrustmaster 0003:044F:B65D.0005: unknown main item tag 0x0 [ 58.822015][ T6] hid-thrustmaster 0003:044F:B65D.0005: unknown main item tag 0x0 [ 58.846754][ T2064] loop9: detected capacity change from 0 to 7 [ 58.850443][ T6] hid-thrustmaster 0003:044F:B65D.0005: unknown main item tag 0x0 [ 58.864622][ T6] hid-thrustmaster 0003:044F:B65D.0005: unknown main item tag 0x0 [ 58.873294][ T6] hid-thrustmaster 0003:044F:B65D.0005: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.3-1/input0 [ 58.907979][ T6] hid-thrustmaster 0003:044F:B65D.0005: Wrong number of endpoints? [ 58.924149][ C0] hid-thrustmaster 0003:044F:B65D.0005: URB to get model id failed with error -71 [ 58.935852][ T6] usb 4-1: USB disconnect, device number 4 [ 58.999037][ T2070] fido_id[2070]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 59.021263][ T28] audit: type=1400 audit(1794399119.338:350): avc: denied { getopt } for pid=2073 comm="syz.0.701" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 59.048831][ T2078] loop6: detected capacity change from 0 to 512 [ 59.074449][ T2078] EXT4-fs (loop6): invalid journal inode [ 59.088834][ T2078] EXT4-fs (loop6): can't get journal size [ 59.142111][ T2078] EXT4-fs error (device loop6): ext4_orphan_get:1405: inode #15: comm syz.6.695: iget: bad extended attribute block 1 [ 59.161914][ T2087] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 59.178436][ T2078] EXT4-fs error (device loop6): ext4_orphan_get:1410: comm syz.6.695: couldn't read orphan inode 15 (err -117) [ 59.192830][ T2087] FAT-fs (loop4): Filesystem has been set read-only [ 59.250922][ T2092] ip_tables: iptables: counters copy to user failed while replacing table [ 59.294668][ T2080] F2FS-fs (loop7): invalid crc value [ 59.320938][ T2080] F2FS-fs (loop7): Found nat_bits in checkpoint [ 59.342962][ T2098] ext4 filesystem being mounted at /26/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 59.390069][ T2080] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 59.498824][ T1608] bio_check_eod: 2 callbacks suppressed [ 59.498843][ T1608] syz-executor: attempt to access beyond end of device [ 59.498843][ T1608] loop7: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 59.641620][ T2104] F2FS-fs (loop0): invalid crc value [ 59.665175][ T2104] F2FS-fs (loop0): Found nat_bits in checkpoint [ 59.685519][ T28] audit: type=1400 audit(1794399120.008:351): avc: denied { remount } for pid=2126 comm="syz.3.725" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 59.715725][ T2128] EXT4-fs (sda1): re-mounted. Quota mode: none. [ 59.741769][ T2130] xt_hashlimit: size too large, truncated to 1048576 [ 59.764130][ T2104] F2FS-fs (loop0): Start checkpoint disabled! [ 59.780817][ T2104] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0 [ 59.804039][ T2104] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 59.868987][ T2104] syz.0.713: attempt to access beyond end of device [ 59.868987][ T2104] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 59.974406][ T43] kworker/u4:2: attempt to access beyond end of device [ 59.974406][ T43] loop0: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 60.130994][ T2153] synth uevent: /bus/acpi: unknown uevent action string [ 60.222213][ T2143] F2FS-fs (loop3): invalid crc value [ 60.255623][ T2143] F2FS-fs (loop3): Found nat_bits in checkpoint [ 60.275130][ T2165] FAULT_INJECTION: forcing a failure. [ 60.275130][ T2165] name failslab, interval 1, probability 0, space 0, times 0 [ 60.284609][ T2094] F2FS-fs (loop4): Test dummy encryption mode enabled [ 60.320595][ T2094] F2FS-fs (loop4): invalid crc value [ 60.329993][ T2143] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 60.337853][ T2165] CPU: 0 PID: 2165 Comm: syz.7.738 Not tainted syzkaller #0 [ 60.345174][ T2165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 60.346291][ T2094] F2FS-fs (loop4): Found nat_bits in checkpoint [ 60.355243][ T2165] Call Trace: [ 60.355252][ T2165] [ 60.355259][ T2165] __dump_stack+0x21/0x24 [ 60.372088][ T2165] dump_stack_lvl+0x110/0x170 [ 60.376802][ T2165] ? __cfi_dump_stack_lvl+0x8/0x8 [ 60.381861][ T2165] ? __cfi_avc_has_perm+0x10/0x10 [ 60.386929][ T2165] ? stack_trace_save+0xa6/0xf0 [ 60.391810][ T2165] dump_stack+0x15/0x24 [ 60.396003][ T2165] should_fail_ex+0x3bf/0x510 [ 60.400719][ T2165] __should_failslab+0xac/0xf0 [ 60.405520][ T2165] should_failslab+0x9/0x20 [ 60.410056][ T2165] __kmem_cache_alloc_node+0x3d/0x2d0 [ 60.415466][ T2165] ? proc_self_get_link+0xe6/0x180 [ 60.420605][ T2165] ? proc_self_get_link+0xe6/0x180 [ 60.425734][ T2165] kmalloc_trace+0x29/0xb0 [ 60.430178][ T2165] proc_self_get_link+0xe6/0x180 [ 60.435137][ T2165] ? __cfi_proc_self_get_link+0x10/0x10 [ 60.440712][ T2165] pick_link+0x728/0xe30 [ 60.444975][ T2165] step_into+0xc27/0xf00 [ 60.449232][ T2165] ? __d_lookup_rcu+0x37b/0x400 [ 60.454130][ T2165] ? set_root+0x400/0x400 [ 60.458515][ T2165] ? lookup_fast+0x15f/0x520 [ 60.463125][ T2165] ? inode_permission+0xef/0x4b0 [ 60.468088][ T2165] link_path_walk+0x744/0xeb0 [ 60.472798][ T2165] ? handle_lookup_down+0x130/0x130 [ 60.478031][ T2165] ? __alloc_file+0x181/0x2a0 [ 60.482743][ T2165] path_openat+0x27f/0x2f30 [ 60.487356][ T2165] ? slab_post_alloc_hook+0x4f/0x2d0 [ 60.492732][ T2165] ? kmem_cache_alloc+0x166/0x320 [ 60.497791][ T2165] ? getname_flags+0xba/0x510 [ 60.502497][ T2165] ? getname+0x19/0x20 [ 60.506588][ T2165] ? do_sys_openat2+0xeb/0x820 [ 60.511385][ T2165] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 60.517497][ T2165] ? do_filp_open+0x420/0x420 [ 60.522247][ T2165] do_filp_open+0x1ee/0x420 [ 60.526789][ T2165] ? __cfi_do_filp_open+0x10/0x10 [ 60.531848][ T2165] ? alloc_fd+0x4c1/0x570 [ 60.536199][ T2165] do_sys_openat2+0x15e/0x820 [ 60.540904][ T2165] ? __se_sys_futex+0x136/0x310 [ 60.545790][ T2165] ? do_sys_open+0xe0/0xe0 [ 60.550236][ T2165] ? __this_cpu_preempt_check+0x13/0x20 [ 60.555820][ T2165] ? xfd_validate_state+0x70/0x150 [ 60.560967][ T2165] __x64_sys_openat+0x136/0x160 [ 60.565867][ T2165] x64_sys_call+0x783/0x9a0 [ 60.570419][ T2165] do_syscall_64+0x4c/0xa0 [ 60.574863][ T2165] ? clear_bhb_loop+0x30/0x80 [ 60.579570][ T2165] ? clear_bhb_loop+0x30/0x80 [ 60.584297][ T2165] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 60.590217][ T2165] RIP: 0033:0x7f1a7b96974e [ 60.594658][ T2165] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 60.614292][ T2165] RSP: 002b:00007f1a7c7f7ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 60.622734][ T2165] RAX: ffffffffffffffda RBX: 00007f1a7c7f86c0 RCX: 00007f1a7b96974e [ 60.630731][ T2165] RDX: 0000000000000002 RSI: 00007f1a7c7f7f90 RDI: ffffffffffffff9c [ 60.638740][ T2165] RBP: 00007f1a7ba37f6d R08: 0000000000000000 R09: 0000000000000000 [ 60.646740][ T2165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 60.654742][ T2165] R13: 00007f1a7bc26038 R14: 00007f1a7bc25fa0 R15: 00007fff7ceebdb8 [ 60.662746][ T2165] [ 60.700989][ T289] syz-executor: attempt to access beyond end of device [ 60.700989][ T289] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 60.717696][ T2094] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 60.729353][ T2174] ip_tables: iptables: counters copy to user failed while replacing table [ 60.764403][ T2176] device-mapper: ioctl: Invalid ioctl structure: uuid ,, name , dev 30 [ 60.775001][ T2178] input: syz1 as /devices/virtual/input/input8 [ 60.944664][ T2194] EXT4-fs error (device loop6): ext4_map_blocks:747: inode #3: block 1: comm syz.6.751: lblock 1 mapped to illegal pblock 1 (length 1) [ 60.984525][ T2194] EXT4-fs error (device loop6): ext4_acquire_dquot:6828: comm syz.6.751: Failed to acquire dquot type 0 [ 61.025283][ T2194] EXT4-fs error (device loop6): ext4_free_blocks:6220: comm syz.6.751: Freeing blocks not in datazone - block = 0, count = 4096 [ 61.072666][ T2186] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 61.103748][ T2186] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 61.112608][ T2194] EXT4-fs error (device loop6): ext4_read_inode_bitmap:140: comm syz.6.751: Invalid inode bitmap blk 0 in block_group 0 [ 61.126035][ T1272] EXT4-fs error (device loop6): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 61.140734][ T2186] F2FS-fs (loop0): invalid crc value [ 61.141438][ T2194] EXT4-fs error (device loop6) in ext4_free_inode:362: Corrupt filesystem [ 61.146200][ T2186] F2FS-fs (loop0): Ignore s_resuid=0, s_resgid=65535 w/o reserve_root and reserve_node [ 61.174074][ T1272] EXT4-fs error (device loop6): ext4_release_dquot:6864: comm kworker/u4:8: Failed to release dquot type 0 [ 61.186626][ T2186] F2FS-fs (loop0): Found nat_bits in checkpoint [ 61.224848][ T2194] EXT4-fs (loop6): 1 orphan inode deleted [ 61.273794][ T2186] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 61.303588][ T2186] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 61.354410][ T2213] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 61.364398][ T2213] FAT-fs (loop3): Filesystem has been set read-only [ 61.435210][ T2186] syz.0.747: attempt to access beyond end of device [ 61.435210][ T2186] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 61.464742][ T2225] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 61.477027][ T2186] syz.0.747: attempt to access beyond end of device [ 61.477027][ T2186] loop0: rw=2049, sector=45136, nr_sectors = 8 limit=40427 [ 61.498158][ T2225] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 61.561143][ T2225] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.700330][ T2238] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 61.806677][ T2247] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 61.820994][ T2247] FAT-fs (loop6): Filesystem has been set read-only [ 61.954285][ T2263] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 61.984027][ T2263] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 62.020432][ T2269] ip_tables: iptables: counters copy to user failed while replacing table [ 62.035079][ T2263] ext4 filesystem being mounted at /124/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.176541][ T2256] F2FS-fs (loop6): Invalid SB checksum offset: 0 [ 62.191543][ T2256] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock [ 62.231751][ T2256] F2FS-fs (loop6): invalid crc value [ 62.250931][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 62.250946][ T28] audit: type=1400 audit(1794399122.568:359): avc: denied { set_context_mgr } for pid=2279 comm="syz.0.785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 62.277860][ T2280] binder: BINDER_SET_CONTEXT_MGR already set [ 62.283879][ T2280] binder: 2279:2280 ioctl 40046207 0 returned -16 [ 62.339086][ T2256] F2FS-fs (loop6): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 62.355668][ T2291] set_capacity_and_notify: 15 callbacks suppressed [ 62.355687][ T2291] loop0: detected capacity change from 0 to 512 [ 62.371489][ T28] audit: type=1400 audit(1794399122.698:360): avc: denied { ioctl } for pid=2292 comm="syz.4.790" path="socket:[25738]" dev="sockfs" ino=25738 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 62.454555][ T2256] F2FS-fs (loop6): Try to recover 2th superblock, ret: 0 [ 62.461659][ T2256] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 62.473491][ T2291] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 62.509623][ T2291] FAT-fs (loop0): Filesystem has been set read-only [ 62.516365][ T28] audit: type=1400 audit(1794399122.838:361): avc: denied { mounton } for pid=2255 comm="syz.6.776" path="/45/file1/file0" dev="loop6" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 62.548239][ T1553] syz-executor: attempt to access beyond end of device [ 62.548239][ T1553] loop6: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 62.584144][ T1553] syz-executor: attempt to access beyond end of device [ 62.584144][ T1553] loop6: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 62.631119][ T1553] syz-executor: attempt to access beyond end of device [ 62.631119][ T1553] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 62.663875][ T2232] loop7: detected capacity change from 0 to 131072 [ 62.694706][ T2232] F2FS-fs (loop7): Test dummy encryption mode enabled [ 62.722111][ T2232] F2FS-fs (loop7): invalid crc value [ 62.763373][ T2232] F2FS-fs (loop7): Found nat_bits in checkpoint [ 62.793587][ T2321] loop0: detected capacity change from 0 to 512 [ 62.830671][ T2321] EXT4-fs: Ignoring removed oldalloc option [ 62.870124][ T2321] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 62.907788][ T2232] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 63.080435][ T2317] loop3: detected capacity change from 0 to 40427 [ 63.101279][ T2317] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 63.109042][ T2317] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 63.115137][ T28] audit: type=1400 audit(1794399123.438:362): avc: denied { mount } for pid=2334 comm="syz.4.807" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 63.142010][ T2317] F2FS-fs (loop3): invalid crc value [ 63.146619][ T2335] overlayfs: failed to clone lowerpath [ 63.173455][ T2317] F2FS-fs (loop3): Ignore s_resuid=0, s_resgid=65535 w/o reserve_root and reserve_node [ 63.183322][ T28] audit: type=1400 audit(1794399123.458:363): avc: denied { mounton } for pid=2334 comm="syz.4.807" path="/187/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 63.242358][ T2317] F2FS-fs (loop3): Found nat_bits in checkpoint [ 63.250901][ T28] audit: type=1400 audit(1794399123.488:364): avc: denied { unmount } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 63.304972][ T43] device bridge_slave_1 left promiscuous mode [ 63.313160][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.351953][ T43] device bridge_slave_0 left promiscuous mode [ 63.361678][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.383255][ T2317] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 63.391342][ T43] device veth1_macvtap left promiscuous mode [ 63.404059][ T43] device veth0_vlan left promiscuous mode [ 63.409859][ T2317] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 63.553514][ T2317] syz.3.800: attempt to access beyond end of device [ 63.553514][ T2317] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 63.588921][ T2340] loop0: detected capacity change from 0 to 40427 [ 63.609086][ T2340] F2FS-fs (loop0): invalid crc value [ 63.660495][ T2340] F2FS-fs (loop0): Found nat_bits in checkpoint [ 63.740241][ T1272] Bluetooth: hci0: Frame reassembly failed (-84) [ 63.794563][ T2340] F2FS-fs (loop0): Start checkpoint disabled! [ 63.800758][ T2346] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.814024][ T2346] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.815431][ T2340] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0 [ 63.826616][ T2346] device bridge_slave_0 entered promiscuous mode [ 63.852935][ T2346] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.870317][ T2346] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.870343][ T2340] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 63.880983][ T2346] device bridge_slave_1 entered promiscuous mode [ 64.027019][ T2340] VFS:Filesystem freeze failed [ 64.042183][ T2346] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.049382][ T2346] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.056718][ T2346] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.063773][ T2346] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.147564][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.155922][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.173773][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.187039][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.216935][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.237027][ T2374] FAULT_INJECTION: forcing a failure. [ 64.237027][ T2374] name failslab, interval 1, probability 0, space 0, times 0 [ 64.238911][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.256900][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.268702][ T2374] CPU: 0 PID: 2374 Comm: syz.0.820 Not tainted syzkaller #0 [ 64.276038][ T2374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 64.286198][ T2374] Call Trace: [ 64.289501][ T2374] [ 64.292458][ T2374] __dump_stack+0x21/0x24 [ 64.296820][ T2374] dump_stack_lvl+0x110/0x170 [ 64.301512][ T2374] ? __cfi_dump_stack_lvl+0x8/0x8 [ 64.306584][ T2374] ? __cfi_avc_has_perm+0x10/0x10 [ 64.311663][ T2374] ? stack_trace_save+0xa6/0xf0 [ 64.316538][ T2374] dump_stack+0x15/0x24 [ 64.320709][ T2374] should_fail_ex+0x3bf/0x510 [ 64.325411][ T2374] __should_failslab+0xac/0xf0 [ 64.330198][ T2374] should_failslab+0x9/0x20 [ 64.334724][ T2374] __kmem_cache_alloc_node+0x3d/0x2d0 [ 64.340118][ T2374] ? proc_self_get_link+0xe6/0x180 [ 64.345249][ T2374] ? proc_self_get_link+0xe6/0x180 [ 64.350376][ T2374] kmalloc_trace+0x29/0xb0 [ 64.354806][ T2374] proc_self_get_link+0xe6/0x180 [ 64.359763][ T2374] ? __cfi_proc_self_get_link+0x10/0x10 [ 64.365414][ T2374] pick_link+0x728/0xe30 [ 64.369674][ T2374] step_into+0xc27/0xf00 [ 64.373930][ T2374] ? __d_lookup_rcu+0x37b/0x400 [ 64.378798][ T2374] ? set_root+0x400/0x400 [ 64.383142][ T2374] ? lookup_fast+0x15f/0x520 [ 64.387746][ T2374] ? inode_permission+0xef/0x4b0 [ 64.392719][ T2374] link_path_walk+0x744/0xeb0 [ 64.397416][ T2374] ? handle_lookup_down+0x130/0x130 [ 64.402635][ T2374] path_openat+0x27f/0x2f30 [ 64.407174][ T2374] ? slab_post_alloc_hook+0x4f/0x2d0 [ 64.412481][ T2374] ? kmem_cache_alloc+0x166/0x320 [ 64.417546][ T2374] ? getname_flags+0xba/0x510 [ 64.422240][ T2374] ? getname+0x19/0x20 [ 64.426321][ T2374] ? do_sys_openat2+0xeb/0x820 [ 64.431137][ T2374] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 64.437225][ T2374] ? do_filp_open+0x420/0x420 [ 64.441929][ T2374] do_filp_open+0x1ee/0x420 [ 64.446453][ T2374] ? __cfi_do_filp_open+0x10/0x10 [ 64.451498][ T2374] ? alloc_fd+0x4c1/0x570 [ 64.455850][ T2374] do_sys_openat2+0x15e/0x820 [ 64.460557][ T2374] ? __se_sys_futex+0x136/0x310 [ 64.465427][ T2374] ? do_sys_open+0xe0/0xe0 [ 64.469888][ T2374] ? __this_cpu_preempt_check+0x13/0x20 [ 64.475461][ T2374] ? xfd_validate_state+0x70/0x150 [ 64.480600][ T2374] __x64_sys_openat+0x136/0x160 [ 64.485476][ T2374] x64_sys_call+0x783/0x9a0 [ 64.490010][ T2374] do_syscall_64+0x4c/0xa0 [ 64.494460][ T2374] ? clear_bhb_loop+0x30/0x80 [ 64.499167][ T2374] ? clear_bhb_loop+0x30/0x80 [ 64.503884][ T2374] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 64.509813][ T2374] RIP: 0033:0x7f4d71f6974e [ 64.514250][ T2374] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 64.533876][ T2374] RSP: 002b:00007f4d72e9eec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 64.542309][ T2374] RAX: ffffffffffffffda RBX: 00007f4d72e9f6c0 RCX: 00007f4d71f6974e [ 64.550299][ T2374] RDX: 0000000000000002 RSI: 00007f4d72e9ef90 RDI: ffffffffffffff9c [ 64.558289][ T2374] RBP: 00007f4d72037f6d R08: 0000000000000000 R09: 0000000000000000 [ 64.566286][ T2374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 64.574271][ T2374] R13: 00007f4d72226038 R14: 00007f4d72225fa0 R15: 00007ffc31593538 [ 64.582260][ T2374] [ 64.586078][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.594644][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.601734][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.617700][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.635489][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.668700][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.686748][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.696796][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.704623][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.713133][ T2346] device veth0_vlan entered promiscuous mode [ 64.735291][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.752877][ T2386] loop0: detected capacity change from 0 to 1024 [ 64.761471][ T2346] device veth1_macvtap entered promiscuous mode [ 64.776197][ T2386] EXT4-fs: Ignoring removed mblk_io_submit option [ 64.782903][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.791311][ T2386] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 64.809087][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.810543][ T2390] loop3: detected capacity change from 0 to 512 [ 64.828074][ T2390] EXT4-fs: Ignoring removed oldalloc option [ 64.834500][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.843164][ T2386] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #11: comm syz.0.835: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 64.843705][ T2390] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 64.870962][ T2386] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.835: couldn't read orphan inode 11 (err -117) [ 64.887267][ T2386] EXT4-fs mount: 30 callbacks suppressed [ 64.887287][ T2386] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 64.914462][ T2389] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 10: padding at end of block bitmap is not set [ 64.940141][ T2390] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 64.949389][ T2386] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:477: comm syz.0.835: Invalid block bitmap block 0 in block_group 0 [ 64.970925][ T2386] Quota error (device loop0): write_blk: dquota write failed [ 64.978929][ T2386] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 64.997703][ T2386] EXT4-fs error (device loop0): ext4_acquire_dquot:6828: comm syz.0.835: Failed to acquire dquot type 0 [ 65.010085][ T289] EXT4-fs (loop3): unmounting filesystem. [ 65.010121][ T2398] EXT4-fs error (device loop0): __ext4_get_inode_loc:4522: comm syz.0.835: Invalid inode table block 8589934593 in block_group 0 [ 65.031948][ T2398] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5954: Corrupt filesystem [ 65.064393][ T2403] loop3: detected capacity change from 0 to 256 [ 65.073485][ T2403] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011e7e, chksum : 0x04bede55, utbl_chksum : 0xe619d30d) [ 65.105696][ T2405] loop8: detected capacity change from 0 to 512 [ 65.118438][ T43] EXT4-fs error (device loop0): __ext4_get_inode_loc:4522: comm kworker/u4:2: Invalid inode table block 8589934593 in block_group 0 [ 65.138037][ T2410] netlink: 57 bytes leftover after parsing attributes in process `syz.3.844'. [ 65.150163][ T2410] netlink: 57 bytes leftover after parsing attributes in process `syz.3.844'. [ 65.159150][ T287] EXT4-fs (loop0): unmounting filesystem. [ 65.171035][ T2405] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 65.204364][ T28] audit: type=1326 audit(1794399125.528:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2414 comm="syz.3.836" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a4c1a8f19 code=0x7ffc0000 [ 65.211750][ T2405] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.254296][ T28] audit: type=1326 audit(1794399125.568:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2414 comm="syz.3.836" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a4c1a8f19 code=0x7ffc0000 [ 65.291261][ T2418] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526 [ 65.303769][ T2346] EXT4-fs (loop8): unmounting filesystem. [ 65.323250][ T2421] loop0: detected capacity change from 0 to 512 [ 65.370291][ T2421] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 65.382653][ T2421] ext4 filesystem being mounted at /203/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.414533][ T2431] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0xda10bcab, utbl_chksum : 0xe619d30d) [ 65.451421][ T2421] EXT4-fs error (device loop0): ext4_acquire_dquot:6828: comm syz.0.839: Failed to acquire dquot type 0 [ 65.481782][ T287] EXT4-fs (loop0): unmounting filesystem. [ 65.513245][ T2436] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 65.522448][ T2438] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011e7e, chksum : 0x04bede55, utbl_chksum : 0xe619d30d) [ 65.550711][ T289] EXT4-fs (loop3): unmounting filesystem. [ 65.638019][ T2449] EXT4-fs: Ignoring removed bh option [ 65.649282][ T2449] EXT4-fs: Ignoring removed bh option [ 65.664451][ T2449] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 65.710679][ T2449] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 65.719795][ T2449] ext4 filesystem being mounted at /207/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 65.761971][ T287] EXT4-fs (loop0): unmounting filesystem. [ 65.774052][ T1767] Bluetooth: hci0: command 0x1003 tx timeout [ 65.775163][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 65.794056][ T2441] F2FS-fs (loop7): Invalid SB checksum offset: 0 [ 65.806844][ T2441] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock [ 65.819547][ T2441] F2FS-fs (loop7): invalid crc value [ 65.842424][ T2441] F2FS-fs (loop7): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 65.904312][ T2441] F2FS-fs (loop7): Try to recover 2th superblock, ret: 0 [ 65.911428][ T2441] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 65.923325][ T2471] EXT4-fs (loop0): Test dummy encryption mode enabled [ 65.938168][ T2471] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 65.960392][ T2471] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2802: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 65.993764][ T2471] EXT4-fs (loop0): 1 truncate cleaned up [ 65.999570][ T2471] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 66.020719][ T287] EXT4-fs (loop0): unmounting filesystem. [ 66.051239][ T1608] bio_check_eod: 1 callbacks suppressed [ 66.051255][ T1608] syz-executor: attempt to access beyond end of device [ 66.051255][ T1608] loop7: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 66.072082][ T1608] syz-executor: attempt to access beyond end of device [ 66.072082][ T1608] loop7: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 66.111484][ T1608] syz-executor: attempt to access beyond end of device [ 66.111484][ T1608] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 66.132223][ T2487] input: syz1 as /devices/virtual/input/input9 [ 66.292064][ T2492] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 66.303073][ T2492] ext4 filesystem being mounted at /195/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.336845][ T2496] rtc_cmos 00:00: Alarms can be up to one day in the future [ 66.351611][ T291] EXT4-fs (loop4): unmounting filesystem. [ 66.510668][ T2507] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 66.537406][ T287] EXT4-fs (loop0): unmounting filesystem. [ 66.633057][ T1445] rtc_cmos 00:00: Alarms can be up to one day in the future [ 66.641755][ T1445] rtc_cmos 00:00: Alarms can be up to one day in the future [ 66.657877][ T1445] rtc_cmos 00:00: Alarms can be up to one day in the future [ 66.674405][ T1445] rtc_cmos 00:00: Alarms can be up to one day in the future [ 66.689424][ T1445] rtc rtc0: __rtc_set_alarm: err=-22 [ 66.763346][ T2524] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.770536][ T2524] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.778152][ T2524] device bridge_slave_0 entered promiscuous mode [ 66.787934][ T2524] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.795118][ T2524] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.802711][ T2524] device bridge_slave_1 entered promiscuous mode [ 66.848743][ T2464] F2FS-fs (loop3): Test dummy encryption mode enabled [ 66.857296][ T2464] F2FS-fs (loop3): invalid crc value [ 66.882929][ T2464] F2FS-fs (loop3): Found nat_bits in checkpoint [ 66.898030][ T2524] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.905136][ T2524] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.912468][ T2524] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.919539][ T2524] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.947873][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.965287][ T1272] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.989389][ T1272] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.020473][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.029918][ T2464] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 67.043250][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.050357][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.064444][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.075511][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.082572][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.101690][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.112558][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.132371][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.145888][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.154333][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.164502][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.172857][ T2524] device veth0_vlan entered promiscuous mode [ 67.186653][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.198286][ T2524] device veth1_macvtap entered promiscuous mode [ 67.214800][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.233670][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.286594][ T313] device bridge_slave_1 left promiscuous mode [ 67.297946][ T313] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.317829][ T313] device bridge_slave_0 left promiscuous mode [ 67.329751][ T313] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.344002][ T40] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 67.352467][ T313] device veth1_macvtap left promiscuous mode [ 67.360021][ T313] device veth0_vlan left promiscuous mode [ 67.425595][ T2574] set_capacity_and_notify: 10 callbacks suppressed [ 67.425641][ T2574] loop0: detected capacity change from 0 to 512 [ 67.455606][ T2574] EXT4-fs: Ignoring removed nobh option [ 67.490964][ T2574] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 67.509621][ T2574] ext4 filesystem being mounted at /219/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.524527][ T40] usb 5-1: Using ep0 maxpacket: 32 [ 67.531885][ T40] usb 5-1: unable to get BOS descriptor or descriptor too short [ 67.554857][ T40] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b1, bcdDevice= 0.40 [ 67.569391][ T2580] loop8: detected capacity change from 0 to 1024 [ 67.578368][ T2574] EXT4-fs error (device loop0): ext4_do_update_inode:5281: inode #2: comm syz.0.901: corrupted inode contents [ 67.590403][ T40] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.602889][ T40] usb 5-1: Product: syz [ 67.612698][ T2574] EXT4-fs error (device loop0): ext4_dirty_inode:6158: inode #2: comm syz.0.901: mark_inode_dirty error [ 67.625161][ T40] usb 5-1: Manufacturer: syz [ 67.629929][ T40] usb 5-1: SerialNumber: syz [ 67.640604][ T2580] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 67.653070][ T2574] EXT4-fs error (device loop0): ext4_do_update_inode:5281: inode #2: comm syz.0.901: corrupted inode contents [ 67.665660][ T2580] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.691101][ T2583] EXT4-fs error (device loop0): ext4_do_update_inode:5281: inode #2: comm syz.0.901: corrupted inode contents [ 67.704356][ T2583] EXT4-fs error (device loop0): ext4_dirty_inode:6158: inode #2: comm syz.0.901: mark_inode_dirty error [ 67.725375][ T2346] EXT4-fs (loop8): unmounting filesystem. [ 67.737945][ T2583] EXT4-fs error (device loop0): ext4_do_update_inode:5281: inode #2: comm syz.0.901: corrupted inode contents [ 67.770876][ T2583] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #2: comm syz.0.901: mark_inode_dirty error [ 67.803272][ T2583] EXT4-fs error (device loop0): ext4_do_update_inode:5281: inode #2: comm syz.0.901: corrupted inode contents [ 67.833584][ T2583] EXT4-fs error (device loop0): ext4_dirty_inode:6158: inode #2: comm syz.0.901: mark_inode_dirty error [ 67.847796][ T2574] EXT4-fs error (device loop0): ext4_do_update_inode:5281: inode #2: comm syz.0.901: corrupted inode contents [ 67.866937][ T40] snd-usb-audio: probe of 5-1:1.0 failed with error -71 [ 67.879009][ T40] usb 5-1: USB disconnect, device number 3 [ 67.924811][ T287] EXT4-fs (loop0): unmounting filesystem. [ 67.949069][ T2602] loop9: detected capacity change from 0 to 1024 [ 67.968003][ T2605] loop0: detected capacity change from 0 to 512 [ 67.981182][ T2602] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 68.027031][ T2589] loop8: detected capacity change from 0 to 40427 [ 68.045132][ T2602] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 68.060770][ T2589] F2FS-fs (loop8): invalid crc value [ 68.073763][ T2589] F2FS-fs (loop8): Found nat_bits in checkpoint [ 68.120623][ T2524] EXT4-fs (loop9): unmounting filesystem. [ 68.130571][ T2589] F2FS-fs (loop8): Start checkpoint disabled! [ 68.148690][ T2589] F2FS-fs (loop8): f2fs_disable_checkpoint() finish, err:0 [ 68.157166][ T2589] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6 [ 68.212415][ T2632] loop0: detected capacity change from 0 to 256 [ 68.225737][ T313] kworker/u4:3: attempt to access beyond end of device [ 68.225737][ T313] loop8: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 68.255084][ T2632] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 68.392435][ T2650] loop4: detected capacity change from 0 to 1024 [ 68.401806][ T2651] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.402261][ T2650] EXT4-fs: Ignoring removed mblk_io_submit option [ 68.416424][ T2651] Zero length message leads to an empty skb [ 68.424481][ T2650] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 68.444539][ T2650] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #11: comm syz.4.931: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 68.477358][ T2650] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.931: couldn't read orphan inode 11 (err -117) [ 68.490562][ T2660] netlink: 104 bytes leftover after parsing attributes in process `syz.3.935'. [ 68.516152][ T2662] tipc: Started in network mode [ 68.536488][ T2650] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 68.545633][ T2662] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 68.552892][ T2662] tipc: Enabled bearer , priority 0 [ 68.617542][ T2640] loop0: detected capacity change from 0 to 40427 [ 68.628500][ T2650] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:477: comm syz.4.931: Invalid block bitmap block 0 in block_group 0 [ 68.663085][ T2640] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 68.684000][ T2640] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 68.702664][ T2650] __quota_error: 21 callbacks suppressed [ 68.702681][ T2650] Quota error (device loop4): write_blk: dquota write failed [ 68.716374][ T2640] F2FS-fs (loop0): invalid crc value [ 68.735117][ T2676] loop9: detected capacity change from 0 to 128 [ 68.746334][ T2650] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 68.763078][ T2640] F2FS-fs (loop0): Found nat_bits in checkpoint [ 68.809882][ T2650] EXT4-fs error (device loop4): ext4_acquire_dquot:6828: comm syz.4.931: Failed to acquire dquot type 0 [ 68.829277][ T2682] loop9: detected capacity change from 0 to 512 [ 68.847855][ T2682] EXT4-fs error (device loop9): ext4_orphan_get:1405: inode #15: comm syz.9.943: iget: bad i_size value: 38620345925642 [ 68.872516][ T2682] EXT4-fs error (device loop9): ext4_orphan_get:1410: comm syz.9.943: couldn't read orphan inode 15 (err -117) [ 68.884571][ T2640] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 68.891785][ T2640] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 68.891808][ T2682] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 68.912177][ T2682] EXT4-fs error (device loop9): ext4_validate_block_bitmap:429: comm syz.9.943: bg 0: block 5: invalid block bitmap [ 68.912622][ T2673] EXT4-fs error (device loop4): __ext4_get_inode_loc:4522: comm syz.4.931: Invalid inode table block 8589934593 in block_group 0 [ 68.938127][ T2682] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 64 with error 28 [ 68.958811][ T2682] EXT4-fs (loop9): This should not happen!! Data will be lost [ 68.958811][ T2682] [ 68.968709][ T2682] EXT4-fs (loop9): Total free blocks count 0 [ 68.975143][ T2682] EXT4-fs (loop9): Free/Dirty block details [ 68.981120][ T2682] EXT4-fs (loop9): free_blocks=0 [ 68.986294][ T2682] EXT4-fs (loop9): dirty_blocks=64 [ 68.991486][ T2682] EXT4-fs (loop9): Block reservation details [ 68.997729][ T2682] EXT4-fs (loop9): i_reserved_data_blocks=64 [ 69.008901][ T2673] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5954: Corrupt filesystem [ 69.024665][ T2524] EXT4-fs (loop9): unmounting filesystem. [ 69.126662][ T43] EXT4-fs error (device loop4): __ext4_get_inode_loc:4522: comm kworker/u4:2: Invalid inode table block 8589934593 in block_group 0 [ 69.154625][ T291] EXT4-fs (loop4): unmounting filesystem. [ 69.230402][ T28] audit: type=1400 audit(1794399129.548:386): avc: denied { watch } for pid=2694 comm="syz.4.949" path="/211/file0" dev="tmpfs" ino=1156 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 69.430302][ T2703] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 69.453662][ T2687] F2FS-fs (loop9): Invalid SB checksum offset: 0 [ 69.504764][ T2687] F2FS-fs (loop9): Can't find valid F2FS filesystem in 2th superblock [ 69.541524][ T2687] F2FS-fs (loop9): invalid crc value [ 69.572360][ T287] EXT4-fs (loop0): unmounting filesystem. [ 69.596354][ T2691] F2FS-fs (loop8): invalid crc value [ 69.602368][ T2665] F2FS-fs (loop3): Found nat_bits in checkpoint [ 69.603113][ T2710] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 69.614164][ T2687] F2FS-fs (loop9): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 69.652346][ T291] EXT4-fs (loop4): unmounting filesystem. [ 69.661669][ T2691] F2FS-fs (loop8): Found nat_bits in checkpoint [ 69.668193][ T309] tipc: Node number set to 0 [ 69.711983][ T2665] F2FS-fs (loop3): Mounted with checkpoint version = 753bd00b [ 69.723666][ T2687] F2FS-fs (loop9): Try to recover 2th superblock, ret: 0 [ 69.738565][ T2691] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 69.753994][ T2687] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 69.779065][ T2665] syz.3.937 (pid 2665) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 69.790116][ T2524] syz-executor: attempt to access beyond end of device [ 69.790116][ T2524] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 69.814083][ T309] tipc: Node number set to 0 [ 69.818797][ T309] tipc: Failed to bind to 0,0,0 [ 69.964972][ T309] tipc: Node number set to 0 [ 69.970203][ T309] tipc: Failed to bind to 0,0,0 [ 70.034047][ T2742] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 70.044141][ T2742] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.104108][ T309] tipc: Node number set to 0 [ 70.108968][ T309] tipc: Failed to bind to 0,0,0 [ 70.130546][ T2749] netlink: 8 bytes leftover after parsing attributes in process `syz.0.964'. [ 70.139543][ T2524] EXT4-fs (loop9): unmounting filesystem. [ 70.148102][ T2749] netlink: 4 bytes leftover after parsing attributes in process `syz.0.964'. [ 70.179944][ T2749] netlink: 8 bytes leftover after parsing attributes in process `syz.0.964'. [ 70.190534][ T2749] netlink: 4 bytes leftover after parsing attributes in process `syz.0.964'. [ 70.244441][ T309] tipc: Node number set to 0 [ 70.257032][ T28] audit: type=1400 audit(1794399130.578:387): avc: denied { mounton } for pid=2763 comm="syz.3.969" path="/proc/357/cgroup" dev="proc" ino=28686 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 70.280425][ T309] tipc: Failed to bind to 0,0,0 [ 70.322721][ T28] audit: type=1400 audit(1794399130.618:388): avc: denied { write } for pid=2765 comm="syz.0.970" name="mcfilter" dev="proc" ino=4026532420 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 70.372279][ T2771] 9p: Unknown uid 00000000004294967295 [ 70.384070][ T309] tipc: Node number set to 0 [ 70.389278][ T309] tipc: Failed to bind to 0,0,0 [ 70.395348][ T2775] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 70.418237][ T878] udevd[878]: symlink '../../loop3' '/dev/disk/by-diskseq/414.tmp-b7:3' failed: Read-only file system [ 70.439274][ T878] udevd[878]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 70.452267][ T2779] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 70.461627][ T2779] ext4 filesystem being mounted at /170/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.470768][ T2775] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 70.493765][ T289] EXT4-fs (loop3): unmounting filesystem. [ 70.503579][ T312] udevd[312]: symlink '../../loop3' '/dev/disk/by-diskseq/414.tmp-b7:3' failed: Read-only file system [ 70.524037][ T309] tipc: Node number set to 0 [ 70.528695][ T309] tipc: Failed to bind to 0,0,0 [ 70.537948][ T312] udevd[312]: symlink '../../loop3' '/dev/disk/by-diskseq/414.tmp-b7:3' failed: Read-only file system [ 70.550323][ T28] audit: type=1400 audit(1794399130.878:389): avc: denied { listen } for pid=2784 comm="syz.3.978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 70.591822][ T28] audit: type=1400 audit(1794399130.898:390): avc: denied { accept } for pid=2784 comm="syz.3.978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 70.634303][ T28] audit: type=1400 audit(1794399130.938:391): avc: denied { wake_alarm } for pid=2792 comm="syz.0.982" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 70.664150][ T309] tipc: Node number set to 0 [ 70.668851][ T309] tipc: Failed to bind to 0,0,0 [ 70.681577][ T2802] netlink: 8 bytes leftover after parsing attributes in process `syz.0.987'. [ 70.690475][ T2802] IPv6: NLM_F_REPLACE set, but no existing node found! [ 70.804009][ T309] tipc: Node number set to 0 [ 70.808737][ T309] tipc: Failed to bind to 0,0,0 [ 70.875817][ T2822] netlink: 16 bytes leftover after parsing attributes in process `syz.9.996'. [ 70.913822][ T2822] netlink: 16 bytes leftover after parsing attributes in process `syz.9.996'. [ 70.944001][ T309] tipc: Node number set to 0 [ 70.948695][ T309] tipc: Failed to bind to 0,0,0 [ 71.007103][ T2831] binder: 2828:2831 unknown command 1 [ 71.024072][ T2831] binder: 2828:2831 ioctl c0306201 200000000880 returned -22 [ 71.056191][ T2833] EXT4-fs error (device loop9): ext4_map_blocks:637: inode #3: block 2: comm syz.9.1001: lblock 2 mapped to illegal pblock 2 (length 1) [ 71.084045][ T6] tipc: Node number set to 0 [ 71.088714][ T6] tipc: Failed to bind to 0,0,0 [ 71.093763][ T2833] Quota error (device loop9): qtree_write_dquot: dquota write failed [ 71.103375][ T2833] EXT4-fs error (device loop9): ext4_map_blocks:637: inode #3: block 48: comm syz.9.1001: lblock 0 mapped to illegal pblock 48 (length 1) [ 71.164353][ T2833] Quota error (device loop9): v2_write_file_info: Can't write info structure [ 71.193469][ T2833] EXT4-fs error (device loop9): ext4_acquire_dquot:6828: comm syz.9.1001: Failed to acquire dquot type 0 [ 71.206073][ T2836] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 71.224188][ T309] tipc: Node number set to 0 [ 71.228903][ T309] tipc: Failed to bind to 0,0,0 [ 71.234532][ T2836] ext4 filesystem being mounted at /180/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.251266][ T2833] EXT4-fs error (device loop9) in ext4_reserve_inode_write:5954: Corrupt filesystem [ 71.286893][ T2833] EXT4-fs error (device loop9): ext4_evict_inode:281: inode #11: comm syz.9.1001: mark_inode_dirty error [ 71.309836][ T2833] EXT4-fs warning (device loop9): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 71.313458][ T2814] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 71.330442][ T2833] EXT4-fs (loop9): 1 orphan inode deleted [ 71.340243][ T2833] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 71.349369][ T8] EXT4-fs error (device loop9): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 71.349976][ T2814] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 71.372490][ T309] tipc: Node number set to 0 [ 71.377150][ T309] tipc: Failed to bind to 0,0,0 [ 71.382642][ T8] EXT4-fs error (device loop9): ext4_release_dquot:6864: comm kworker/u4:0: Failed to release dquot type 0 [ 71.382684][ T2814] F2FS-fs (loop0): invalid crc value [ 71.400593][ T289] EXT4-fs (loop3): unmounting filesystem. [ 71.415627][ T2814] F2FS-fs (loop0): Found nat_bits in checkpoint [ 71.427486][ T2524] EXT4-fs (loop9): unmounting filesystem. [ 71.443170][ T2524] EXT4-fs error (device loop9): __ext4_get_inode_loc:4522: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 71.471479][ T2814] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 71.478644][ T2814] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 71.494993][ T2524] EXT4-fs error (device loop9) in ext4_reserve_inode_write:5954: Corrupt filesystem [ 71.513653][ T2524] EXT4-fs error (device loop9): ext4_quota_off:7134: inode #3: comm syz-executor: mark_inode_dirty error [ 71.525039][ T309] tipc: Node number set to 0 [ 71.529774][ T309] tipc: Failed to bind to 0,0,0 [ 71.553216][ T2857] EXT4-fs error (device loop9): ext4_get_journal_inode:5749: comm syz.9.1008: inode #1792: comm syz.9.1008: iget: illegal inode # [ 71.567967][ T2857] EXT4-fs (loop9): Remounting filesystem read-only [ 71.579456][ T2857] EXT4-fs (loop9): no journal found [ 71.590755][ T2857] EXT4-fs (loop9): can't get journal size [ 71.601631][ T287] syz-executor: attempt to access beyond end of device [ 71.601631][ T287] loop0: rw=2051, sector=77824, nr_sectors = 4096 limit=40427 [ 71.601987][ T2857] EXT4-fs (loop9): warning: mounting fs with errors, running e2fsck is recommended [ 71.624682][ T287] syz-executor: attempt to access beyond end of device [ 71.624682][ T287] loop0: rw=2051, sector=49152, nr_sectors = 8 limit=40427 [ 71.629295][ T2857] EXT4-fs (loop9): Errors on filesystem, clearing orphan list. [ 71.648448][ T2857] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 71.662055][ T287] F2FS-fs (loop0): Issue discard(9728, 9728, 512) failed, ret: -5 [ 71.662140][ T2857] EXT4-fs (loop9): re-mounted. Quota mode: writeback. [ 71.672728][ T287] F2FS-fs (loop0): Issue discard(6144, 6144, 1) failed, ret: -5 [ 71.676870][ T309] tipc: Node number set to 0 [ 71.676902][ T309] tipc: Failed to bind to 0,0,0 [ 71.704181][ T2524] EXT4-fs (loop9): unmounting filesystem. [ 71.804471][ T309] tipc: Node number set to 0 [ 71.810514][ T309] tipc: Failed to bind to 0,0,0 [ 71.855001][ T2870] FAT-fs (loop0): bogus number of reserved sectors [ 71.864001][ T2870] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 71.876918][ T2870] FAT-fs (loop0): Can't find a valid FAT filesystem [ 71.943991][ T309] tipc: Node number set to 0 [ 71.953112][ T309] tipc: Failed to bind to 0,0,0 [ 71.998181][ T2878] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 72.006844][ T2878] FAT-fs (loop0): Filesystem has been set read-only [ 72.094087][ T309] tipc: Node number set to 0 [ 72.098827][ T309] tipc: Failed to bind to 0,0,0 [ 72.234012][ T309] tipc: Node number set to 0 [ 72.238763][ T309] tipc: Failed to bind to 0,0,0 [ 72.294026][ T40] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 72.340980][ T2866] F2FS-fs (loop9): Test dummy encryption mode enabled [ 72.348394][ T2866] F2FS-fs (loop9): invalid crc value [ 72.358259][ T2866] F2FS-fs (loop9): Found nat_bits in checkpoint [ 72.374361][ T6] tipc: Node number set to 0 [ 72.379131][ T6] tipc: Failed to bind to 0,0,0 [ 72.405422][ T2866] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 72.464377][ T2908] loop8: p1 < > p4 [ 72.469275][ T2908] loop8: p4 size 8388608 extends beyond EOD, truncated [ 72.476214][ T40] usb 1-1: Using ep0 maxpacket: 16 [ 72.482527][ T40] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 130, changing to 11 [ 72.512557][ T40] usb 1-1: New USB device found, idVendor=04b4, idProduct=0001, bcdDevice= 0.00 [ 72.521978][ T40] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.524123][ T309] tipc: Node number set to 0 [ 72.539138][ T309] tipc: Failed to bind to 0,0,0 [ 72.559788][ T40] usb 1-1: config 0 descriptor?? [ 72.654070][ T309] tipc: Node number set to 0 [ 72.658889][ T309] tipc: Failed to bind to 0,0,0 [ 72.790940][ T2915] set_capacity_and_notify: 21 callbacks suppressed [ 72.790960][ T2915] loop3: detected capacity change from 0 to 40427 [ 72.804055][ T309] tipc: Node number set to 0 [ 72.808984][ T309] tipc: Failed to bind to 0,0,0 [ 72.834163][ T2915] F2FS-fs (loop3): Fix alignment : internally, start(4096) end(16896) block(12288) [ 72.864442][ T2915] F2FS-fs (loop3): invalid crc value [ 72.887446][ T2915] F2FS-fs (loop3): Found nat_bits in checkpoint [ 72.934029][ T309] tipc: Node number set to 0 [ 72.938694][ T309] tipc: Failed to bind to 0,0,0 [ 72.963961][ T2915] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 72.980840][ T40] input: HID 04b4:0001 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:04B4:0001.0006/input/input10 [ 73.012151][ T2915] F2FS-fs (loop3): Try to recover all the superblocks, ret: 0 [ 73.033625][ T2937] loop4: detected capacity change from 0 to 512 [ 73.044492][ T2936] f2fs_ckpt-7:3: attempt to access beyond end of device [ 73.044492][ T2936] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 73.051854][ T2937] FAT-fs (loop4): Unrecognized mount option "°êÌ‹´¡Nº(ñ’Ç Ëÿ•­Ñç-¬mìã" or missing value [ 73.074100][ T309] tipc: Node number set to 0 [ 73.079021][ T309] tipc: Failed to bind to 0,0,0 [ 73.087119][ T40] cypress 0003:04B4:0001.0006: input,hiddev96,hidraw0: USB HID v0.01 Device [HID 04b4:0001] on usb-dummy_hcd.0-1/input0 [ 73.203790][ T40] usb 1-1: USB disconnect, device number 5 [ 73.214541][ T309] tipc: Node number set to 0 [ 73.219217][ T309] tipc: Failed to bind to 0,0,0 [ 73.353987][ T309] tipc: Node number set to 0 [ 73.358665][ T309] tipc: Failed to bind to 0,0,0 [ 73.426112][ T2938] loop9: detected capacity change from 0 to 40427 [ 73.455136][ T2938] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 73.463029][ T2937] loop4: detected capacity change from 0 to 40427 [ 73.473055][ T2938] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 73.489841][ T2937] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 73.497702][ T309] tipc: Node number set to 0 [ 73.502452][ T309] tipc: Failed to bind to 0,0,0 [ 73.507518][ T2938] F2FS-fs (loop9): invalid crc value [ 73.519060][ T2937] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 73.544889][ T2938] F2FS-fs (loop9): Found nat_bits in checkpoint [ 73.549911][ T2937] F2FS-fs (loop4): invalid crc value [ 73.599028][ T2937] F2FS-fs (loop4): Found nat_bits in checkpoint [ 73.613036][ T2958] mmap: syz.3.1047 (2958) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 73.634057][ T1445] tipc: Node number set to 0 [ 73.639833][ T1445] tipc: Failed to bind to 0,0,0 [ 73.649169][ T2938] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 73.663701][ T2938] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 73.684244][ T2937] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 73.701517][ T2937] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 73.712393][ T2938] syz.9.1041: attempt to access beyond end of device [ 73.712393][ T2938] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 73.764407][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 73.764423][ T28] audit: type=1400 audit(1794399141.090:415): avc: denied { append } for pid=2933 comm="syz.4.1042" path="/230/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/memory.events.local" dev="loop4" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 73.824196][ T1445] tipc: Node number set to 0 [ 73.848386][ T28] audit: type=1400 audit(1794399141.170:416): avc: denied { unmount } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 73.854129][ T1445] tipc: Failed to bind to 0,0,0 [ 73.916784][ T2976] tipc: Enabling of bearer rejected, already enabled [ 73.930435][ T2971] syz.4.1042: attempt to access beyond end of device [ 73.930435][ T2971] loop4: rw=2049, sector=77824, nr_sectors = 3728 limit=40427 [ 73.947506][ T2971] syz.4.1042: attempt to access beyond end of device [ 73.947506][ T2971] loop4: rw=2049, sector=81552, nr_sectors = 368 limit=40427 [ 73.963998][ T1445] tipc: Node number set to 0 [ 73.967303][ T2976] loop3: detected capacity change from 0 to 512 [ 73.968661][ T1445] tipc: Failed to bind to 0,0,0 [ 74.023702][ T2976] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 74.034666][ T2976] EXT4-fs (loop3): orphan cleanup on readonly fs [ 74.041485][ T2971] syz.4.1042: attempt to access beyond end of device [ 74.041485][ T2971] loop4: rw=2049, sector=49152, nr_sectors = 4096 limit=40427 [ 74.044126][ T2976] EXT4-fs error (device loop3): ext4_quota_enable:7036: inode #15: comm syz.3.1052: iget: bad i_size value: 360287970189639690 [ 74.081320][ T2976] EXT4-fs error (device loop3): ext4_quota_enable:7039: comm syz.3.1052: Bad quota inode: 15, type: 2 [ 74.104177][ T2976] EXT4-fs warning (device loop3): ext4_enable_quotas:7080: Failed to enable quota tracking (type=2, err=-117, ino=15). Please run e2fsck to fix. [ 74.118979][ T309] tipc: Node number set to 0 [ 74.123860][ T309] tipc: Failed to bind to 0,0,0 [ 74.135114][ T2976] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 74.150542][ T2976] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 74.194935][ T289] EXT4-fs (loop3): unmounting filesystem. [ 74.216600][ T2971] syz.4.1042: attempt to access beyond end of device [ 74.216600][ T2971] loop4: rw=2049, sector=57344, nr_sectors = 3632 limit=40427 [ 74.264004][ T309] tipc: Node number set to 0 [ 74.268711][ T309] tipc: Failed to bind to 0,0,0 [ 74.285920][ T2987] loop0: detected capacity change from 0 to 1024 [ 74.287923][ T2989] loop3: detected capacity change from 0 to 256 [ 74.313873][ T2991] program syz.9.1049 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 74.330920][ T2989] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xa9436649, utbl_chksum : 0xe619d30d) [ 74.384418][ T2987] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 74.394060][ T2987] ext4 filesystem being mounted at /248/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.404759][ T309] tipc: Node number set to 0 [ 74.409387][ T309] tipc: Failed to bind to 0,0,0 [ 74.424311][ T2997] loop9: detected capacity change from 0 to 256 [ 74.452517][ T2997] exfat: Deprecated parameter 'namecase' [ 74.464440][ T291] syz-executor: attempt to access beyond end of device [ 74.464440][ T291] loop4: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 74.476972][ T2997] exfat: Deprecated parameter 'namecase' [ 74.511164][ T28] audit: type=1400 audit(1794399141.830:417): avc: denied { nlmsg_write } for pid=3002 comm="syz.3.1061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 74.542148][ T2997] exFAT-fs (loop9): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 74.563776][ T3005] loop3: detected capacity change from 0 to 1024 [ 74.564074][ T309] tipc: Node number set to 0 [ 74.592388][ T2949] loop8: detected capacity change from 0 to 131072 [ 74.599176][ T309] tipc: Failed to bind to 0,0,0 [ 74.627499][ T3005] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 74.636540][ T1272] EXT4-fs error (device loop0): ext4_map_blocks:747: inode #15: comm kworker/u4:8: lblock 0 mapped to illegal pblock 0 (length 6) [ 74.651604][ T28] audit: type=1400 audit(1794399141.980:418): avc: denied { remount } for pid=3008 comm="syz.9.1063" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 74.656340][ T2949] F2FS-fs (loop8): Test dummy encryption mode enabled [ 74.686835][ T3005] ext4 filesystem being mounted at /199/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.694425][ T2949] F2FS-fs (loop8): invalid crc value [ 74.697973][ T1445] tipc: Node number set to 0 [ 74.707359][ T1445] tipc: Failed to bind to 0,0,0 [ 74.712786][ T1272] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 74.725247][ T1272] EXT4-fs (loop0): This should not happen!! Data will be lost [ 74.725247][ T1272] [ 74.728613][ T2949] F2FS-fs (loop8): Found nat_bits in checkpoint [ 74.736090][ T1272] EXT4-fs error (device loop0): ext4_map_blocks:747: inode #15: block 8: comm kworker/u4:8: lblock 8 mapped to illegal pblock 8 (length 8) [ 74.752229][ T3005] EXT4-fs (loop3): shut down requested (0) [ 74.764029][ T1272] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 74.779165][ T3005] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=15 [ 74.788112][ T1272] EXT4-fs (loop0): This should not happen!! Data will be lost [ 74.788112][ T1272] [ 74.815126][ T287] EXT4-fs (loop0): unmounting filesystem. [ 74.816979][ T3005] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=15 [ 74.854929][ T1445] tipc: Node number set to 0 [ 74.859902][ T1445] tipc: Failed to bind to 0,0,0 [ 74.872517][ T3005] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=15 [ 74.881926][ T28] audit: type=1400 audit(1794399142.200:419): avc: denied { watch } for pid=3004 comm="syz.3.1062" path="/199/file1/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 74.931697][ T289] EXT4-fs (loop3): unmounting filesystem. [ 74.954227][ T2949] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 74.988250][ T309] tipc: Node number set to 0 [ 74.993021][ T309] tipc: Failed to bind to 0,0,0 [ 75.039958][ T3029] FAT-fs (loop0): Unrecognized mount option "°êÌ‹´¡Nº(ñ’Ç Ëÿ•­Ñç-¬mìã" or missing value [ 75.124001][ T309] tipc: Node number set to 0 [ 75.128711][ T309] tipc: Failed to bind to 0,0,0 [ 75.143461][ T3033] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 75.168575][ T3033] EXT4-fs (loop3): orphan cleanup on readonly fs [ 75.237287][ T3033] EXT4-fs warning (device loop3): ext4_enable_quotas:7080: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 75.239804][ T3024] F2FS-fs (loop4): invalid crc value [ 75.252550][ T3033] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 75.263996][ T3033] EXT4-fs error (device loop3): ext4_orphan_get:1431: comm syz.3.1074: bad orphan inode 768 [ 75.274194][ T309] tipc: Node number set to 0 [ 75.278874][ T309] tipc: Failed to bind to 0,0,0 [ 75.284091][ T3033] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 75.324648][ T289] EXT4-fs (loop3): unmounting filesystem. [ 75.354786][ T3024] F2FS-fs (loop4): Found nat_bits in checkpoint [ 75.376199][ T3038] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xdd63664a, utbl_chksum : 0xe619d30d) [ 75.428038][ T3038] incfs: ino conflict with backing FS 1 [ 75.439916][ T3024] F2FS-fs (loop4): Start checkpoint disabled! [ 75.446584][ T1445] tipc: Node number set to 0 [ 75.451245][ T1445] tipc: Failed to bind to 0,0,0 [ 75.457235][ T3038] incfs: Can't find or create .incomplete dir in ./bus [ 75.464781][ T3024] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0 [ 75.498950][ T3038] incfs: mount failed -28 [ 75.503430][ T3024] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 75.563996][ T1445] tipc: Node number set to 0 [ 75.568826][ T1445] tipc: Failed to bind to 0,0,0 [ 75.579277][ T3036] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.590285][ T3029] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 75.617170][ T3024] F2FS-fs (loop4): f2fs_enable_checkpoint() starts, meta: 0, node: 5, data: 0 [ 75.624068][ T3036] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.633589][ T3036] device bridge_slave_0 entered promiscuous mode [ 75.640092][ T531] kworker/u4:5: attempt to access beyond end of device [ 75.640092][ T531] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 75.665512][ T3029] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 75.685431][ T8] device bridge_slave_1 left promiscuous mode [ 75.691712][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.701469][ T3029] F2FS-fs (loop0): invalid crc value [ 75.714666][ T8] device bridge_slave_0 left promiscuous mode [ 75.721066][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.730318][ T8] device veth1_macvtap left promiscuous mode [ 75.736489][ T8] device veth0_vlan left promiscuous mode [ 75.743044][ T3029] F2FS-fs (loop0): Found nat_bits in checkpoint [ 75.754052][ T3024] F2FS-fs (loop4): sync_inode_sb done, dirty_data: 0, 0, skipped write: 0, 0, retry: 3 [ 75.764044][ T3024] F2FS-fs (loop4): f2fs_enable_checkpoint() finishes, writeback:129, sync:0 [ 75.835462][ T3029] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 75.842706][ T3029] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 75.930718][ T3036] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.944043][ T3036] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.957223][ T3054] FAULT_INJECTION: forcing a failure. [ 75.957223][ T3054] name fail_futex, interval 1, probability 0, space 0, times 1 [ 75.960596][ T3036] device bridge_slave_1 entered promiscuous mode [ 75.971074][ T3054] CPU: 0 PID: 3054 Comm: syz.4.1078 Not tainted syzkaller #0 [ 75.983793][ T3054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 75.993866][ T3054] Call Trace: [ 75.997159][ T3054] [ 76.000101][ T3054] __dump_stack+0x21/0x24 [ 76.004453][ T3054] dump_stack_lvl+0x110/0x170 [ 76.009213][ T3054] ? __cfi_dump_stack_lvl+0x8/0x8 [ 76.014271][ T3054] ? kernel_text_address+0xa0/0xd0 [ 76.019406][ T3054] ? unwind_get_return_address+0x4d/0x90 [ 76.025050][ T3054] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 76.031231][ T3054] dump_stack+0x15/0x24 [ 76.035405][ T3054] should_fail_ex+0x3bf/0x510 [ 76.040094][ T3054] should_fail+0xb/0x10 [ 76.044255][ T3054] get_futex_key+0x143/0xb10 [ 76.048861][ T3054] ? __cfi_get_futex_key+0x10/0x10 [ 76.053992][ T3054] futex_wake+0x150/0x8e0 [ 76.058440][ T3054] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 76.064524][ T3054] ? __cfi_futex_wake+0x10/0x10 [ 76.069383][ T3054] do_futex+0x2bf/0x430 [ 76.073559][ T3054] ? __cfi_do_futex+0x10/0x10 [ 76.078244][ T3054] __se_sys_futex+0x136/0x310 [ 76.082927][ T3054] ? __x64_sys_futex+0x100/0x100 [ 76.087880][ T3054] __x64_sys_futex+0xe5/0x100 [ 76.092567][ T3054] x64_sys_call+0x7ec/0x9a0 [ 76.097083][ T3054] do_syscall_64+0x4c/0xa0 [ 76.101511][ T3054] ? clear_bhb_loop+0x30/0x80 [ 76.106206][ T3054] ? clear_bhb_loop+0x30/0x80 [ 76.110917][ T3054] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 76.116827][ T3054] RIP: 0033:0x7ffbb81a8f19 [ 76.121254][ T3054] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.140866][ T3054] RSP: 002b:00007ffbb901e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 76.149289][ T3054] RAX: ffffffffffffffda RBX: 00007ffbb8425fa8 RCX: 00007ffbb81a8f19 [ 76.157294][ T3054] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007ffbb8425fac [ 76.165289][ T3054] RBP: 00007ffbb8425fa0 R08: 0036ffe9396551e8 R09: 0000000000000000 [ 76.173273][ T3054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 76.181255][ T3054] R13: 00007ffbb8426038 R14: 00007ffe8be76010 R15: 00007ffe8be760f8 [ 76.189246][ T3054] [ 76.211091][ T1445] tipc: Node number set to 0 [ 76.215821][ T1445] tipc: Failed to bind to 0,0,0 [ 76.224195][ T1445] tipc: Node number set to 0 [ 76.228839][ T1445] tipc: Failed to bind to 0,0,0 [ 76.329209][ T531] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 76.356912][ T531] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 76.378654][ T309] tipc: Node number set to 0 [ 76.383754][ T309] tipc: Failed to bind to 0,0,0 [ 76.404196][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 76.413284][ T3062] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 76.434537][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 76.442815][ T3062] ext4 filesystem being mounted at /234/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.453687][ T313] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.460757][ T313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.476969][ T28] audit: type=1400 audit(1794399143.800:420): avc: denied { setattr } for pid=3060 comm="syz.4.1084" path="/234/file1/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 76.503798][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 76.512319][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 76.520955][ T313] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.522663][ T291] EXT4-fs (loop4): unmounting filesystem. [ 76.528040][ T313] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.528428][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 76.560518][ T309] tipc: Node number set to 0 [ 76.565222][ T309] tipc: Failed to bind to 0,0,0 [ 76.571586][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 76.600347][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 76.603085][ T28] audit: type=1404 audit(1794399143.920:421): enforcing=1 old_enforcing=0 auid=0 ses=1 enabled=1 old-enabled=1 lsm=selinux res=1 [ 76.644171][ T28] audit: type=1400 audit(1794399143.950:422): avc: denied { module_request } for pid=3036 comm="syz-executor" kmod="netdev-netdevsim2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=0 [ 76.669708][ T309] tipc: Node number set to 0 [ 76.674387][ T309] tipc: Failed to bind to 0,0,0 [ 76.687946][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.694051][ T28] audit: type=1400 audit(1794399143.950:423): avc: denied { sys_module } for pid=3036 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=0 [ 76.723456][ T3036] device veth0_vlan entered promiscuous mode [ 76.727433][ T28] audit: type=1400 audit(1794399143.960:424): avc: denied { module_request } for pid=3067 comm="syz-executor" kmod="netdev-nr5" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=0 [ 76.769238][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.777652][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.792210][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.800521][ T1445] tipc: Node number set to 0 [ 76.805361][ T1445] tipc: Failed to bind to 0,0,0 [ 76.816286][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.834942][ T3036] device veth1_macvtap entered promiscuous mode [ 76.872968][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.904180][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.916051][ T1445] tipc: Node number set to 0 [ 76.920715][ T1445] tipc: Failed to bind to 0,0,0 [ 76.979287][ T3067] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.987174][ T3067] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.994993][ T3067] device bridge_slave_0 entered promiscuous mode [ 77.003744][ T3067] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.012195][ T3067] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.019893][ T3067] device bridge_slave_1 entered promiscuous mode [ 77.045729][ T309] tipc: Node number set to 0 [ 77.050447][ T309] tipc: Failed to bind to 0,0,0 [ 77.177621][ T3067] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.184744][ T3067] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.192070][ T3067] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.199153][ T3067] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.215972][ T309] tipc: Node number set to 0 [ 77.220692][ T309] tipc: Failed to bind to 0,0,0 [ 77.229026][ T313] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.236465][ T313] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.257528][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 77.265018][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 77.276163][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 77.284649][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 77.292810][ T313] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.299890][ T313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.308890][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 77.317442][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 77.326003][ T313] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.333030][ T313] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.342352][ T1445] tipc: Node number set to 0 [ 77.347007][ T1445] tipc: Failed to bind to 0,0,0 [ 77.356190][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 77.364465][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 77.376371][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 77.384553][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 77.401510][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 77.410103][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 77.423440][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 77.431561][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 77.439775][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 77.447385][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 77.458169][ T3067] device veth0_vlan entered promiscuous mode [ 77.470092][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 77.478332][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.486738][ T1445] tipc: Node number set to 0 [ 77.491386][ T1445] tipc: Failed to bind to 0,0,0 [ 77.499376][ T3067] device veth1_macvtap entered promiscuous mode [ 77.508872][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 77.516789][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.525142][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.537044][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.545384][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.576600][ T43] device bridge_slave_1 left promiscuous mode [ 77.582747][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.591898][ T43] device bridge_slave_0 left promiscuous mode [ 77.598174][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.607053][ T43] device veth1_macvtap left promiscuous mode [ 77.613118][ T43] device veth0_vlan left promiscuous mode [ 77.746899][ T6] tipc: Node number set to 0 [ 77.751671][ T6] tipc: Failed to bind to 0,0,0 [ 77.767366][ T6] tipc: Node number set to 0 [ 77.776978][ T6] tipc: Failed to bind to 0,0,0 [ 77.914046][ T6] tipc: Node number set to 0 [ 77.919430][ T6] tipc: Failed to bind to 0,0,0 [ 78.054044][ T6] tipc: Node number set to 0 [ 78.058769][ T6] tipc: Failed to bind to 0,0,0 [ 78.193985][ T1445] tipc: Node number set to 0 [ 78.198680][ T1445] tipc: Failed to bind to 0,0,0 [ 78.334280][ T1445] tipc: Node number set to 0 [ 78.339000][ T1445] tipc: Failed to bind to 0,0,0 [ 78.457873][ T3169] tipc: Resetting bearer [ 78.465634][ T3169] tipc: Disabling bearer [ 78.514701][ T43] device bridge_slave_1 left promiscuous mode [ 78.520883][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.529672][ T43] device bridge_slave_0 left promiscuous mode [ 78.536102][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.544534][ T43] device veth1_macvtap left promiscuous mode [ 78.550588][ T43] device veth0_vlan left promiscuous mode [ 78.875511][ T43] tipc: Left network mode [ 79.814688][ T43] device bridge_slave_1 left promiscuous mode [ 79.820838][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.828503][ T43] device bridge_slave_0 left promiscuous mode [ 79.834751][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.842798][ T43] device bridge_slave_1 left promiscuous mode [ 79.849022][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.857402][ T43] device bridge_slave_0 left promiscuous mode [ 79.863516][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.871825][ T43] device bridge_slave_1 left promiscuous mode [ 79.878072][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.885687][ T43] device bridge_slave_0 left promiscuous mode [ 79.891802][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.900551][ T43] device veth1_macvtap left promiscuous mode [ 79.906647][ T43] device veth0_vlan left promiscuous mode [ 79.912685][ T43] device veth1_macvtap left promiscuous mode [ 79.918797][ T43] device veth0_vlan left promiscuous mode [ 79.924960][ T43] device veth1_macvtap left promiscuous mode [ 79.930968][ T43] device veth0_vlan left promiscuous mode