last executing test programs:

1m32.370191161s ago: executing program 2 (id=596):
r0 = socket(0xa, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @remote}, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x4)
writev(r1, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100050c100000000000204e0000", 0x58}], 0x1)

1m31.993713261s ago: executing program 2 (id=600):
mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='dir0/per_cpu/cpu0/trace_pipe\x00', 0x0, 0x0)
ppoll(&(0x7f0000000180)=[{r0, 0x4004}, {0xffffffffffffffff, 0x9604}], 0x2, &(0x7f00000001c0), 0x0, 0x0)

1m31.948923792s ago: executing program 2 (id=603):
syz_mount_image$f2fs(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="66617374626f6f742c71756f7461000018bbdecde39739fcd1df176dde746ec834120600000000003b814e50a959736d6572462abc30ef5b65c70f73ecea54b5e5bea9836c319f653557e79a002208ce996dda659bd5ba0f4ce5c2080002223dc60000000000000044cd0a1e3686873600000000005493b4b874cd601d5b9fa9b40fe4d76afc3a989c6d60044e89eb96e44d01a1034e3797ffa86870b82939f41ffa0f3d726f085663c29cbdc4c766a7eb77cc36160191acf5ae7469c82ab4145b595b987d75912a0fcd1c061835294cc0c618aba204f8adaa20c80108d356cd88cc86177056b06e7068c40f807d9e539f8f5b64a8ee0725aa8d00000000007cb6020d90ea79b8027cf75964dd86c2ed2b5e75779677aa8c76b848dd03dab190b5f02ec52830a17b01eaae1c3df076000000000000000000000000000083a48a6b926c668b9b90195018ea3619f9d80a0b894e212178e1a19909d764666264fa29e2c055fd7f8e67c2acfb75f0a8d41692f4542a575ee42ed94a0014fba44985cca9df12fe93bfaccf0122a6e7e593613ac0111701b125cc6799224883d08ce470220a6decad26f0378072a571da000000b1a6bdf03fd56697e348b5b494f6fddb9f56142a47a40ef81690a7eca421bd0ad198afa58ce69d61c29deaa93c0efea0df04f20020ee84075b4e1a2ad43d1be1138de4668e7b6137545708790c501f1ed7f6a571d5000000000000007d2bee8ed5acba62b8ce6eee44e813220ebc37ad7d422bb972c33e626d4d13827d303ee15e254c75ee569a56fa9e"], 0x25, 0x55a8, &(0x7f00000014c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x20)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0)

1m31.308375098s ago: executing program 2 (id=619):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x20044e, &(0x7f0000000340)={[{@minixdf}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@stripe}, {@noblock_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}]}, 0x3, 0x451, &(0x7f0000000f80)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000580)=""/174, 0xff56)

1m30.666256074s ago: executing program 2 (id=628):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'bridge0\x00', <r1=>0x0})
sendto$packet(r0, &(0x7f0000000240)="09000000e70014000000d97bfbf788a83baa88a8000088a8ffff8100009988a8", 0x20, 0x200000c4, &(0x7f0000000100)={0x11, 0x3, r1, 0x1, 0x81, 0x6, @broadcast}, 0x14)

1m30.519293888s ago: executing program 2 (id=630):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x1000, 0x0, 0xa, 0x20, 0x0, 0x87}, {0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000, 0x4}}}, 0xb8}}, 0x2c000010)
sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x4, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x1000, 0x0, 0xa, 0x20}, {}, {0x1, 0x6, 0x0, 0xfffffffffffffffe}}}, 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x987a3a9f32358a4c)

1m30.519152178s ago: executing program 32 (id=630):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x1000, 0x0, 0xa, 0x20, 0x0, 0x87}, {0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000, 0x4}}}, 0xb8}}, 0x2c000010)
sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x4, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x1000, 0x0, 0xa, 0x20}, {}, {0x1, 0x6, 0x0, 0xfffffffffffffffe}}}, 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x987a3a9f32358a4c)

1m28.705783474s ago: executing program 0 (id=653):
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000100)={{0x4000, 0xe000, 0x0, 0x77, 0x0, 0x3, 0xc7, 0x2, 0x0, 0x6, 0x6}, {0x2, 0x9000, 0x3, 0xeb, 0x2, 0x0, 0x0, 0xff, 0x7, 0x2, 0x3}, {0xeeee0000, 0x1000, 0x0, 0x0, 0x7, 0xc4, 0x5, 0x1, 0x45, 0x3, 0x4, 0xfc}, {0x1, 0x0, 0x9, 0x4, 0x81, 0x0, 0x9, 0x5, 0x3, 0x0, 0x9}, {0x0, 0xffff1000, 0x3, 0x4, 0x0, 0x4, 0x0, 0x6, 0x2, 0x34, 0x4}, {0xffff1000, 0x1, 0x0, 0x78, 0x8, 0x0, 0x2, 0x1c, 0xa3, 0xff, 0x5}, {0xeeee8000, 0xdddd1000, 0xa, 0x4, 0x0, 0x0, 0x7, 0x20, 0x0, 0x0, 0x0, 0xff}, {0x0, 0x6000, 0xa, 0x0, 0xa4, 0x7, 0xa, 0x40, 0x26, 0x0, 0x0, 0xfe}, {0x80a0000, 0x3}, {0x3000, 0xfffd}, 0xddf8ffdb, 0x0, 0x0, 0x120, 0x0, 0xf801, 0xdddd1000, [0x80000001, 0x0, 0xffffffffffffffff, 0xfffffffffffffffe]})
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond_slave_1\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001000ffff27bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15010000000000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r1, @ANYBLOB="080004"], 0x4c}, 0x1, 0x0, 0x0, 0x280c1}, 0xc00c012)

1m28.628884576s ago: executing program 0 (id=654):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004", 0x31}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20004080)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000013"], 0x44}}, 0x2000800)
sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0)

1m28.481458159s ago: executing program 0 (id=655):
syz_mount_image$exfat(&(0x7f0000000180), &(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10000, &(0x7f0000000380)={[{@discard}, {@fmask={'fmask', 0x3d, 0x1}}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'cp863'}}, {@fmask={'fmask', 0x3d, 0x4}}, {@namecase}, {@fmask={'fmask', 0x3d, 0x5}}, {@namecase}, {@umask={'umask', 0x3d, 0x81}}, {@errors_continue}, {@gid}]}, 0x3, 0x1535, &(0x7f0000001380)="$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")
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f00000041c0)={0x2020}, 0x2020)

1m28.201532487s ago: executing program 0 (id=660):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x8, &(0x7f0000000600), 0x5, 0x50c, &(0x7f0000001640)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]})

1m27.824710926s ago: executing program 0 (id=668):
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvtap0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14)
writev(r0, &(0x7f0000000280)=[{&(0x7f0000000180)='Y&', 0x2}], 0x1)

1m27.639516791s ago: executing program 0 (id=671):
mkdir(&(0x7f0000000040)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/sys/kernel/osrelease\x00', 0x0, 0x0)
read$FUSE(r0, &(0x7f0000000280)={0x2020}, 0x2020)

1m27.639391581s ago: executing program 33 (id=671):
mkdir(&(0x7f0000000040)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/sys/kernel/osrelease\x00', 0x0, 0x0)
read$FUSE(r0, &(0x7f0000000280)={0x2020}, 0x2020)

59.687479025s ago: executing program 6 (id=1135):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000180), 0x2, 0x786, &(0x7f0000000f80)="$eJzs3c9rHGUfAPDvbLNJ37Tv27zwwms9BQQNlG5Mja2Ch4oHESwU9Gy7bLahZpMt2U1pQkCLCF4EFQ+CXnq2Wm9e/XHVP8C7B2mpmhYjHiQym9102+ymmzSbbdnPByZ5npnZfOc7z8w8T3aG3QD61mj6IxNxOCI+SCIO1ecnEZGtlQYiTq6vt7qyXEinJNbWXvstqa1ze2W5EE2vSR2oVx6LiO/ejTiS2Ry3srg0ky+VivP1+nh19sJ4ZXHp6PnZ/HRxujh3fGJy8tiJZ08c371c//hx6eCND19+6suTf73z/2vvf5/EyThYX9acx24ZjdH6Psmmu/AuL8Vbux2up5JebwA7kp6a+9bP8jicpOWBXm8SANBl6Sh0DQDoM4n+HwD6TON9gNsry4XG1Nt3JPbWzRcjYv96/o37m+tLBur37PbX7oMO307uujOSRMTILsQfjYjPvn7jajpFl+5DArTy9uWIODsyuvn6n2x6ZmG7nu5gndF76hvxf8o+YHTgfr5Jxz/PtRr/ZTbGP9Fi/DPU4tzdibbn/4bM9V0I01Y6/nuh6dm21ab860b21Wv/ro35ssm586Viem37T0SMRXYorU9sEWPs1t+32i1rHv/9/tGbn6fx09931shcHxi6+zVT+Wr+QXJudvNyxOMDrfJPNto/aTP+Pd1hjFeef+/TdsvS/NN8G9Pm/Ltr7UrEky3b/84TbcmWzyeO1w6H8cZB0cJXP38y3C5+c/un0+rK8loScXX3M20tbf/hrfMfSZqf16xsP8YPVw59225Zi/wLjf+F1rU+/geT12vlwfq8S/lqdX4iYjB5dfP8Y3de26g31k/zH3ui9fm/1fGfjk7Odpj/wI1fv9h5/t2V5j+1rfbffuHa6sy+dvE7a//JWmmsPqeT61+nG/gg+w4AAAAAAAAAAAAAAAAAAAAAAAAAOpWJiIORZHIb5Uwml1v/Du//xXCmVK5Uj5wrL8xNRe27skcim2l81OWhps9Dnah/Hn6jfuye+jMR8d+I+HjoX7V6rlAuTfU6eQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACoO9Dm+/9Tvwz1eusAgK7Z3+sNAAD2nP4fAPqP/h8A+o/+HwD6j/4fAPqP/h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAuO33qVDqt/bmyXEjrUxcXF2bKF49OFSszudmFQq5Qnr+Qmy6Xp0vFXKE8e7+/VyqXL0zG3MKl8WqxUh2vLC6dmS0vzFXPnJ/NTxfPFLN7khUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbE9lcWkmXyoV5xUegcJAvdUelu3ZUSHTSGKvgg52K4uHYGd2r9DDixIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAI+SfAAAA///WoyFe")
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x91)
pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c)
pwrite64(r0, &(0x7f0000000000)="22bd7f", 0x3, 0x8)

59.304890505s ago: executing program 6 (id=1145):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000011540)=ANY=[@ANYBLOB="bf16000000000000b7070000000100004070000000800000500000000000000095000000000000002ba728041598fbd30cb599e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f0711e6bd917487960717142fa9ea4318123f602000000000080de89e661168c1886d0d4dd4f204e345c65c26e278ef5b915395b19284a1a4bc72fbc1626e3a2a2ad358061d0ae0209e62f51ee988e6ea604ce974a22a550d6f97080980400003e05df3ceb9f1feae5737ecaa80a666963c474c2a100c788b277beee1cbf9b0a4d3881dcc7b1b85f3c3d44aeaccd3641110bec4e90a6341965c39e4b3431abe802f5ab3e89cf6c662ed4048d3b3e22278d00ce00000000d3a02762c2951257b85802189d74005d2a1bcf9436e192e23fd255985bf31b714f000bcab6fcd610f25f5888000000003f11afc9bd08c6ebfbb89432fb465bc52f49129b9b6150e320c9901de2ebb9000000018e3095c4c5c7a156cec33a667dccaff950ca1e5efdd4c968dacf81baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba175d876defd3541772f26e27c44cfdb2d85d6d29983e830a9cdd79837b3468e8c67a571d0a017c100344c52a6f387a1340bdc8889464f90cc4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae630afd014a337ac5d58bcb5e51723257c872c5255f20100000000000000f041b665ab21372c8d8b7bac5b5c784d20a4a24d8dbd75062e1daef9dead619cc6e7baa72707157791c3d2a286ffb8d35452bb5d36c2a8682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b9935f771fd49e480cd9d48aeb12b1d6acabd38a817bcd222614d1f62734d679039a97d2b74f9e8e997ccd314000f7477137f4e8e7025123e783df8b8a17e3aa9fe1f662aef87a065b03cfb65b4dfe4f1b56e1f23128d743753a1de172d683d5892ce9414a1d98ea93e3d35dbb6c23b90cf36e83b8a434a97d09343d7f83079ccb02e69c584146056d125cfa788237874dd42dae334bda042819a2aa24dba1c25be2794448b4f63483026b5e34d44705b76ef29241adab0dd7d68bf975e02069f6f2425e1bc97a3d588085f16bef63a06578d4f5de7bfb6aaa75f16996d536256c02284cb1d3a6fb8cae87691fae365a70c3fc69e1565bba8dd8a8c7049f798abe646f738bebd69413afc9d8a5edd7aaa000000000000001e6c2f2a287c5278a218dbfaffffff00a14db5cfa6819eb1d39c48cfdc80d215c9e16e0c4736c819363154cca4e2f89800d18c89d7f46f679df6c9e2952ae1ebfd0ca88368ee6ce139e8b5822c22cf2e9dde943d34c432e1001171792c65986146666a5490928441f47e0fe5eac41824ca1fd0eb71aa243c88d5480efd8329d9a733d8f9ffffff5f912ac4e34bf6ea8a86da707b03bddb491ba0cc98f6be92c50008a2b50025419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9b844051f1a642aca9ff98c9036471ccff0522903e7bcf62e18f7696bbc280b95e8e0d6fd5644b0ebde3a95b06548862de809d3dae3cccf109f7c78e8479a345e800000000000000000000009455bf417627ce723a5d9103706aba69239500bb82f6b5a3ddc0bd9856712945b70c75ce5b722578820820d010d7a3cffc99fc647d0b82ef26ab708c0b19ed144be51c3b398f0e6bb7a30006000000cba12953d58cff0f0378740fe6662f377b97d8e7cdb047acd083d3cd3856476a60a49ad127ba6570bafc2bbcf9ee721fd9cb467ff071e5604fbf0491245c0000007d932d7a64de4c4aa433fc0840aff7c47da3a4c6966d0000000000000000f6bfbae29e8a6e2a889f6ef6869d82d6bd73eb76b65c7a35a54a4a6b8ad4600e3a972a0bb5971a5f16590b0a03dafa3fd1118765cc8ab9fccf3b51c41a339f200f2fa33006910a679a9ae0187b4d750c4bd244cb0cbfd23b265f4d4da448a7a0d19c5e43eae50a31609dfa2dde267551467eb6475293dd7012cc449009981f22820e57a0eff234ccfe21d7a2302e000669753d3c3432cc14ee1abe724adb6b5431befedd3e22971118f0e21aed1823cb7dde8212a8531bd9691dd4cc6a370e9eb56b3d790b98f2bd0db1e5de6a146597b2cbb7103040d2a39d7965d34df524b760ab92efcce7dd1574052c735935bf6a752c015c7f5ffee9ff66e5dd2866b15b6e0d17618cb1f5c1ee4b05ebf1445ea110f499f840a5c965443d725556351ee25fe09f69494b053678dcadcf02e063dff2fa4bef1ac3bbbebe6c74d71ec3b23e29895eff1d1017024fe3e8cc759b05785adc346b7ffd05963f92c1d0d7d90ba878ad89e490f3e29ac51d30632869a534418f916bf6fe8167827a8e6c8f8b391c822805cb0adf1b8bd6947ff208753eb0d208ce14f7b206b2e02c21e963abc5ceb735c1b3c46b0a843de52a903375dfb663a8d8ee9c2b2705c1a81d9d3b9656b219c8cd99c9cafcd0d0540884d97aecb19983fc6af29ab44a82aff9cba921192c665b877af6539bdb1b567f481ba07982e7ad758f4e1eac69e7e88a63960975f490e161e371ec8534791e3b61c685d900a9c0839208356b53750e76fcc3c2d1bddcbd83897921414d0c02e8188f3df79ea2a5c5444004830e6cb227ca1bdafb977c00000000003a417193b8c5d793687335a930867094fd6a78218218e04b705ec62f1608cb569b81914e68f175b392af6bc4fd2121d7fd276af2c97a441b56e7a0687d98b8e76d8d0d231e4fe00be1de76bd19cc12e2bd938eb681ed6bc951c1b4f7c51af59eea4d40c6000000000200778a677b72786311153271a3313da02645e11761699e4d04ac86dd14ff7b9a10d3fa74696fe3953a5b7706bf5d1faba4b18808d9cb0e9db696dec4e0820ee4028d7225a2c9c427cf64cbde6fba056b2006b7a37c1181070000005e235cd302f3b4071ee5237ada986b9e5e3144bf479f277f10656ad3744037ccc9c63685a6f1109d2ea73773d3635f61497f1fa1ea4a16f601800bf3e59141fbf05a96113320c445f9ba8504000000000000004fbd99ccefb7c09269dd2c5c25e56e169ac15980f3f85f7ca36dd5950ef5b64fd46f123311829534a82940994199b3cf7a8fabea9930952f5da9b909c1946e55289f668c423fcbb31ae91864c882313151741a67538c9689dc8ecc9903c7041e5c0704e2fa55a756487517a7445cbd9e3f5175e41c00000000000000000000000000bf98efd587fffe326f474b0b089c017b16c0062cbce96f5adebec52a79f9363909842f79c50a1520be46d87003137e4c5031f00123e812a5e37cd52c9eb7336281cb8c6ce9934b157d7875a70eaf103cb3d99e3568c51cd1eab8a26b232ac46bf0ab829c26dab637538b2eb1420d812d2b80c777710ba0f18e4661681aa218d9ba54023ab4305d77eb15611ae2545835e9d30e9f6d4fb43a291c69545a1eea0f8720431132d89f99bf6c5cb060da70cbb59d0a000000000034d083fc37d2449f72de0cbea4bc1dc89c136cdbc504f849d5502d77a95c7bfff4cd9c03058d0d4d07ea64824f1acf2b39389f675f39d01719cdbab3f1ce10609c8d7b3e37cb99b41da5e485a441b6a103549f55ab09dc98767763d1f2fafd45bb7d2b40050d1f8292f4d9ec6d0000000000003932062290c7536fdd55b06023437e9e2072daf7f5d82f6f1b5b89a41134f4dc2e65bb11272fdf8c8141f41d6160b3d8b6ecd16d14267f61b4881adee7f07f3d6af5ae79e16fe2c3f55ac7a6392d2e1d9b4286b6c3e1f5a76b85ed6e1f0000c67e6c5fcdc8c39381be4799b8cb2d08b8262c807dd755e22b801162381aa9d1af2bbc9cfd497585337eac408b8475b47a392a10cae349160f128e5f873a58064eb400c36a90624f6aed398a215e9ce64522ab249f67c38a656d32ecff5cdb2b039c4abf349d2c0f88a42e9189bbfa7f5cf35b6e7ef8f9d33163b7ea87550fb1ba334c83e3aec4714c9c4ca3ecb04f2720237615a28bf310b58ffa2a103216fdcc8c2d8f5d55e5e7ebf147105272aaae56e86d856b3cf79a3f7306436762dd1a08ce873e07cebc7892ec6f9f696da38feed3dc0001500e34adae1ba89a32bad2af9030f840f1ba4664f35547cdadd5cbacc59352c290f55d971b65953533668c25f21d8d62d849e9058eaa97c63491568887548f668cdbca2abf01a361a0b64d8b523e669da350e3ec7445dfbf366b0b3bc5e76824a1e43eaaeca70db90f2fa39596443447671933079a24fe3681ad9ac361f71ac279a688f10a1cc4df1112105edebc5e3bbc394c8305ab129ca2dfb9b7c5e9d097bd01b495cccefddce569117f7f5d6a6270ff0f0f4c371029ca8489571b55841bf3dd003bc81460fcfcbb616c2070237881afdb314cecd1623f3e55ab8b7627fa1be349145a8d6313cbc790eefe2020138e82fb9d351be4ddcbcc9bc048dd3db5828d16baec6e07a007f0030f34ea3cfd524d6fa1d45da5641d6c94e1d3ae7fba1c85035d2a60ef0a96e0d96aa1c60019f73ae0aa6113cd66ef26b5777337c26e1461405d86fdf091edd526f25cada439bb3609ed5c35ab60a539ade786bd6004d0ea3edbd6c4da0d8e8be8c771c8c8a0b07d9859e04adb18964dcce9bce546074c26dffbc2df372a016e8c845d4257000000000000000000000000000000000000f29657697d9c2b132b2dc2f5ea5122836582a7e85fe2bc166f17aefd9d861de0191f5277d4a3b5afb6f23d9eea2459f7844606e1202768d83c24cc791bde44a448022bbfa571fe029a7b2d5152639ee283894ab6168992ff0acc01b39a078f285ce615351f262019586eb9447bb3eaffd7b53d8f37ca6c5f1027dd5b7592996c8a7789ba108979cc9ad07ed86682843e2eaa855dd01443ee6ffde1811f10039d5d14458177096e15cc4d8f2582a1bea5cc98d992f3de7d1cdfb24384b9f10f615c87c441dc970ec896a5af6bf69b50a244bc138a1cae9868c3079bafe69769000000000000000000e99b63029d219cd3545a8426b56554a9f265d3557eefb3602894507c256cb8ee9ebadfecb6afeb84ba757bfa8d00a5af0dd6aa1e8144ef8ef04410d52204c335408941b8eccc5c734cc6a05247142ed647f89bcb5c043acfb382b9cc918bc3cdc368983157851cdf678800aa7eb2a6cbc12c7ae23bc88b8f10223ab2a093429f3f6965bc5af0114cf6f246bae0b04bec8e30b6772b8950f32e87beda060f9af2a0ccd4a8eab8e395ee3628eb976b7fff835e6c1bdc4a6e00acd0fe63ba8425b21845db903b38c80148e6aa497dbf0e2baf938d3ecbd433527602d89f10aca419ff54e47354194f75e343d4c75227448530b0d8d59b9f94a3fa0ca9210177926c58ef46dcd09e79c343d35aa954d12f89410c47ac29c881f8a6bda8dd40df0d1e5881338d2c5a01bf1ee6b28169fef18df13c759e767d3442ae6598106496f42b73074bb804e8763915c3e04400ad44e9f3130e904062d204d385c026722a094255db1572d66e7a4917bba2a0f6a1a57482cdb4070de8dd60fd65dacb9ec5003fb1cca05ce1c9f924cc2ec45e8d5adf7c89e3b0b8da35c1aa7fbbee6f839a8f05294a6c02281afb7601252611583408f1"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000001c0)=r2, 0x4)
sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="25b096f681cd731c3f3a9badc4e3cf5edeae1f3b5082d7ab3a97c053df68744e7c7e24d0b59997bab4bccff8363b275de3510b0ebe4275d8d2f153395668e3d608e358fc2294263c03f8dc4f8bf194e4fde4600a2dec2f483a914e2fde0cbc344a2b9fc18dd198966045a6d4d4eb8571e8bb69e6724e37fcbaa6e4c64050b47256b9bb17f5c0aa5101e015ecdcb62fec46fc0205512535", 0x97}, {&(0x7f0000000280)="d3a88bea5916e313729a3989393caca70c74cd74e62e524bdd37be131ad827f911027e70ccf679d8e7c0cd3333095f83d6d473db345ded2ac8acaa87503de74c82431758e8e11e3ecb7bce02d6cd65f4eb88cc49ceb9e39f7117eb0f62323dc9b80dea447b0c96a383f14281bb87b09de0a6153ceeaae2b50a2b0f0f41810f379f9c3a1f3938461829d716a4bda86ab11b41f754bc15d71b", 0xfed0}], 0x2}, 0x0)

59.169746938s ago: executing program 6 (id=1150):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0)
ioctl(r0, 0xc0184d03, 0x0)

59.11502318s ago: executing program 6 (id=1154):
syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x402, &(0x7f0000000300)=ANY=[@ANYBLOB='iocharset=cp861,iocharset=cp932,errors=continue,errors=remount-ro,errors=continue,discard,allow_utime=00000000000000000000010,discard,allow_utime=00000000000000000000004,uid=', @ANYRESHEX=0x0, @ANYBLOB='\x00\x00'], 0x1, 0x151e, &(0x7f0000007640)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])

58.932132605s ago: executing program 6 (id=1158):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1})

58.756295039s ago: executing program 6 (id=1161):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r1, 0x27, 0x0, 0x45, 0x0, 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50)

58.648291101s ago: executing program 34 (id=1161):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r1, 0x27, 0x0, 0x45, 0x0, 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50)

23.330981142s ago: executing program 4 (id=2020):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xe8001, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2})
ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x13)
ioctl$TUNGETVNETLE(r0, 0x800454dd, &(0x7f00000000c0))

23.259025564s ago: executing program 4 (id=2024):
r0 = userfaultfd(0x1)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x800000)=nil, 0x800000})

23.245814144s ago: executing program 4 (id=2026):
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r1 = dup(r0)
close_range(r1, r0, 0x2)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000240)={r1, 0xffffffffffffffff, 0x0, r1}, 0x10)

23.231897825s ago: executing program 4 (id=2028):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@dioread_lock}, {@norecovery}, {@discard}, {@lazytime}, {@journal_dev={'journal_dev', 0x3d, 0x2}}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x54d, &(0x7f0000000400)="$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")
mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000000), 0x82, 0x0)
chdir(&(0x7f0000000300)='./file0\x00')
link(&(0x7f0000001240)='./file0\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

22.99785895s ago: executing program 4 (id=2034):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x277}]})

22.771275816s ago: executing program 4 (id=2035):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10)
sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{&(0x7f0000000800)={0x2, 0xce24, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000840)="3a822d6f0306bc598a25fbf98ce3df61eddbb19384ec19a1b8cc10cf952b7536e16239cb61c3ba224865dadc4b1088ed0ce5c9ede116bbde6c3a8329413526b61ec377c0f2833a31b0ec1819ae320ead44ca256a14c3c29f6fea826ce6dfcdbde79656574caca7d33f43358c1f09d1809f0fc894ad8dc2339e2acbd7b63580ad7b88bc00000000000000", 0x8a}, {&(0x7f00000005c0)="3c977216b675039a1d3cb9920fbde265b9fde5b6e2b783b007b86348fe27ba25eb95bb5c4801fb54160e8dc5a2dda4a5874012f61bc684f2fea324e5ce4f463d183394e9f1a10d4617821b5e3ab4f2db20309495630dc4069c2e5abcf78f36372b95eb5f7a9ad2fdd2de8dc2b2b8005b1c693326ee358c3ce5f07cc2a060b56dc4d32eda82d690deb953f171dcb504e13d612bddbf039175912c87bff251ecf18ab5fe4568d1219b6b424d0af0b117b73a8ad2c67c8e3597bcba5a86b20b1f3f657ced3bf6d67479cac4f1a1f9b67512acad7521711c33", 0xd7}, {&(0x7f00000006c0)="299b0c039d86bff86edd7b6de6dde7fadb86888a410060def3174d4d4ba1cf8c4fdde03e83abbdf73e695f165346a78d8d79108d9b516d9abf09a136ab52d0e19dfb2f00bb046d00000000001b000000000010000000", 0x56}], 0x3}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000080)="9d70b2a7c34e6a7f3116cfa2b021c3136e6530cfe2b242564adf52d96187131c30b12cada737", 0x26}, {&(0x7f0000000100)="7b4bcc9089864d85e764b6bba256e6af91e69ae71ffef7df313e92c30fed65dae5961c2c163fb13606ee96db7249efdb195eb6cbc8462a0b7df5e9a2f2555d3959af1ca406f89e87409474f6c69230cbc89e4052b59bf2d40986e6547ee78b4c36db49a35f2949daa1dadcdb43d5cfb31839d3ce23eccf139ef9c2286a326d1ca5e18e449fe954cb9d33eb4e6761f41cefcaf0c88adc59a283c091f645fecade2b37c10bf3", 0xa5}, {&(0x7f0000000280)="02e6f3e048e65d33e396c2b739cf5b78f9dbc918cd90d3384c2ca9d13f9ad152d4bb2f24a81055e2dd62fdb07332640926c6c9f54896a6522cb14a6dcee80743e8fac9d9189acebddf920aabd09f4a9aa975877619996a34ff58778b57b6da8e8938b6bc82ad33f637cf60ae5fd21872cf134af66123e18917194dc67bffeff923960c500a", 0x85}, {&(0x7f0000000980)="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", 0x1a9}, {&(0x7f0000000480)="0aa732c38ba9f4ae98f8528cb4a558d6b836a04da29c5fabcb595bbb896d766f9073be7b0346b0ec225618bb72c878b4ac8e1cdadff66cbc6545652f2aba12fce7ee8fc1870ac0d6192d95cf39de108fbd34da90483f34083ffee7980365", 0x5e}, {&(0x7f0000000dc0)="128057c3ecdf99f18b48f0aae1987a57df52c3df6ef6655a29ada4e07fb82bc16b6d09acfd6561625554fabc92cec26138ba1e641d459b332d808d7d7acd57cf2abd209c59d2e676d3a25b109b1ded08377acc67fbd4015e03a13b9f761db934b988d34f45530b2bc710f89c2b0004f62a14c65f6c1a0c018bea98af07fa1dfeb41459930a71e9628b87defa7de243b58eb9eabdcfcedb666bfe5f", 0x9b}], 0x6}}], 0x3, 0x2000c044)
sendto$inet(r0, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0)

22.757648986s ago: executing program 35 (id=2035):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10)
sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{&(0x7f0000000800)={0x2, 0xce24, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000840)="3a822d6f0306bc598a25fbf98ce3df61eddbb19384ec19a1b8cc10cf952b7536e16239cb61c3ba224865dadc4b1088ed0ce5c9ede116bbde6c3a8329413526b61ec377c0f2833a31b0ec1819ae320ead44ca256a14c3c29f6fea826ce6dfcdbde79656574caca7d33f43358c1f09d1809f0fc894ad8dc2339e2acbd7b63580ad7b88bc00000000000000", 0x8a}, {&(0x7f00000005c0)="3c977216b675039a1d3cb9920fbde265b9fde5b6e2b783b007b86348fe27ba25eb95bb5c4801fb54160e8dc5a2dda4a5874012f61bc684f2fea324e5ce4f463d183394e9f1a10d4617821b5e3ab4f2db20309495630dc4069c2e5abcf78f36372b95eb5f7a9ad2fdd2de8dc2b2b8005b1c693326ee358c3ce5f07cc2a060b56dc4d32eda82d690deb953f171dcb504e13d612bddbf039175912c87bff251ecf18ab5fe4568d1219b6b424d0af0b117b73a8ad2c67c8e3597bcba5a86b20b1f3f657ced3bf6d67479cac4f1a1f9b67512acad7521711c33", 0xd7}, {&(0x7f00000006c0)="299b0c039d86bff86edd7b6de6dde7fadb86888a410060def3174d4d4ba1cf8c4fdde03e83abbdf73e695f165346a78d8d79108d9b516d9abf09a136ab52d0e19dfb2f00bb046d00000000001b000000000010000000", 0x56}], 0x3}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000080)="9d70b2a7c34e6a7f3116cfa2b021c3136e6530cfe2b242564adf52d96187131c30b12cada737", 0x26}, {&(0x7f0000000100)="7b4bcc9089864d85e764b6bba256e6af91e69ae71ffef7df313e92c30fed65dae5961c2c163fb13606ee96db7249efdb195eb6cbc8462a0b7df5e9a2f2555d3959af1ca406f89e87409474f6c69230cbc89e4052b59bf2d40986e6547ee78b4c36db49a35f2949daa1dadcdb43d5cfb31839d3ce23eccf139ef9c2286a326d1ca5e18e449fe954cb9d33eb4e6761f41cefcaf0c88adc59a283c091f645fecade2b37c10bf3", 0xa5}, {&(0x7f0000000280)="02e6f3e048e65d33e396c2b739cf5b78f9dbc918cd90d3384c2ca9d13f9ad152d4bb2f24a81055e2dd62fdb07332640926c6c9f54896a6522cb14a6dcee80743e8fac9d9189acebddf920aabd09f4a9aa975877619996a34ff58778b57b6da8e8938b6bc82ad33f637cf60ae5fd21872cf134af66123e18917194dc67bffeff923960c500a", 0x85}, {&(0x7f0000000980)="c29cb7f0d84abb527465781b7e9862d32d94c7c3c6bb8fb89e2ebf411463c2fe2cab5342c357d052845c91b253d417dc628d1278897c0f4e4beacdf809f6bcfeb9fb40a58ce5f0031518ff01cfc839c38b160c99d4f1017bb7365846a626080e1c64746a24bdd0ed6c8fc1caf0ca30810f821f2b8f13bfb5dfae99023043f2062bcb93d6c1b7f8099a90cc0b5c82e41939138dfd535dda3e36996ecd83d13b2bef199f7e84a71f20dd5faf04803b36132ea4386cbde85a7a0b46eccdd0dcc35cf2c084f80c078bf68242a181c7994c80fd54e98e12c3f304c299db2b272d28b8023cf3f9dd2dfd7411ea818c17a6c47744f3aa2cbe81715d0cde3838d49c743c0345b49c64c12ac76cf201f1ca91de799bcf8858284e23d069031a094e067416840d8ee3aac0f45079c4e1782369b0ead6dff1c75680816b39b89a1778806606e28703c58bed5b15a827d0ca0584b40e39769162a633dce5502befcfa695309bad51c71bb1588278ab4deb1dd98e816aa7e7c5af463b6d2858c52737dffa5d3e305da17361972da2e08e04c2232e64cfc4b27030a8933f7d10b66f0383e65cba9e12e1d50910202389", 0x1a9}, {&(0x7f0000000480)="0aa732c38ba9f4ae98f8528cb4a558d6b836a04da29c5fabcb595bbb896d766f9073be7b0346b0ec225618bb72c878b4ac8e1cdadff66cbc6545652f2aba12fce7ee8fc1870ac0d6192d95cf39de108fbd34da90483f34083ffee7980365", 0x5e}, {&(0x7f0000000dc0)="128057c3ecdf99f18b48f0aae1987a57df52c3df6ef6655a29ada4e07fb82bc16b6d09acfd6561625554fabc92cec26138ba1e641d459b332d808d7d7acd57cf2abd209c59d2e676d3a25b109b1ded08377acc67fbd4015e03a13b9f761db934b988d34f45530b2bc710f89c2b0004f62a14c65f6c1a0c018bea98af07fa1dfeb41459930a71e9628b87defa7de243b58eb9eabdcfcedb666bfe5f", 0x9b}], 0x6}}], 0x3, 0x2000c044)
sendto$inet(r0, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0)

17.145786948s ago: executing program 5 (id=2161):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r0 = gettid()
r1 = getpid()
rt_tgsigqueueinfo(r1, r0, 0x1b, &(0x7f0000000280)={0xc, 0x0, 0x4})

17.101017219s ago: executing program 5 (id=2152):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0xf, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000800000000220000000000000000000160500190002000000080009000000000008000b0005000000080017004e214e22080001"], 0x5c}, 0x1, 0x0, 0x0, 0x24008000}, 0x24000000)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}, 0x1, 0x0, 0x0, 0x40801}, 0x40000)

17.015663481s ago: executing program 5 (id=2154):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7, 0x7ffffffe, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
getdents64(0xffffffffffffffff, 0x0, 0x0)

16.545888913s ago: executing program 5 (id=2163):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@dioread_lock}, {@norecovery}, {@discard}, {@lazytime}, {@journal_dev={'journal_dev', 0x3d, 0x2}}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x54d, &(0x7f0000000400)="$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")
mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000000), 0x82, 0x0)
chdir(&(0x7f0000000300)='./file0\x00')
link(&(0x7f0000001240)='./file0\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

16.180503152s ago: executing program 5 (id=2167):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/lru_gen\x00', 0x2, 0x0)
write(r0, &(0x7f00000000c0)='- 1 1 9', 0x7)

16.039313896s ago: executing program 5 (id=2172):
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x20400, 0x0, 0x0, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000500)={0x0, <r1=>0x0}, &(0x7f0000000180)=0xc)
lchown(&(0x7f0000000000)='./file0\x00', r1, 0xffffffffffffffff)

16.038801286s ago: executing program 36 (id=2172):
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x20400, 0x0, 0x0, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000500)={0x0, <r1=>0x0}, &(0x7f0000000180)=0xc)
lchown(&(0x7f0000000000)='./file0\x00', r1, 0xffffffffffffffff)

1.140232031s ago: executing program 7 (id=2451):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x1010459, &(0x7f0000000140)={[{@nodioread_nolock}, {@noload}, {@noblock_validity}, {@dioread_lock}, {@nouid32}, {@data_err_ignore}]}, 0x1, 0x555, &(0x7f0000000e00)="$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")
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20)

1.040318854s ago: executing program 9 (id=2458):
sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0)
r0 = socket$inet(0x2, 0x2, 0x1)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10)
sendmmsg$inet(r0, &(0x7f0000000540)=[{{0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000000c0)="08001497733f5d3e", 0x6c6d}], 0x5}}, {{0x0, 0x0, &(0x7f0000000440), 0x56}}], 0x2, 0x2004000)

894.825648ms ago: executing program 7 (id=2461):
syz_mount_image$exfat(&(0x7f0000000000), &(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x818852, &(0x7f00000043c0)=ANY=[@ANYBLOB='dmask=00000000000000000002621,utf8,umask=00000000000000000200000,namecase=1,discard,errors=remount-ro,umask=00000000000000000200004,umask=00000000000000000003377,namecase=1,utf8,iocharset=iso8859-4,iocharset=cp874,dmask=01777777777777777777770,errors=remount-ro,uid=', @ANYRES32=0x0, @ANYRESHEX=0x0, @ANYRESDEC=0x0, @ANYRES8, @ANYRESDEC=0x0, @ANYBLOB="77661fec16e50a5e0ef4164c420d7c1fbd444f37b3fe4a5442c8b6d81f7e4598b51fc38fef5acfa1569a91b76a9579a836a7f929c8f9e71e1174cef637b1ebb5df06c00dd4220581edafaca4a7bddde2010245741c8517666b2f5b5fc1efda0e0bdc2946a438d5b9040759430cab7d2337422c1c36447e3412ae6f2c8007b5c37700ab7e2dbd08b69a04f1f9bb8fd56ff0", @ANYRES8, @ANYRES16, @ANYRESHEX, @ANYRESOCT, @ANYRESDEC, @ANYRESHEX], 0xff, 0x1508, &(0x7f0000000a00)="$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")
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'bridge_slave_0\x00', &(0x7f0000000040)=@ethtool_gfeatures})
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)

867.005829ms ago: executing program 9 (id=2462):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ed)
mount(0x0, &(0x7f0000000100)='./debug\x00', &(0x7f0000000200)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./debug/tracing/events/x86_fpu/x86_fpu_xstate_check_failed/enable\x00', 0x1, 0x0)
write(r0, &(0x7f0000000400)='1', 0x1)

833.201519ms ago: executing program 9 (id=2463):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4000000000008, 0x8, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x4f, 0x0, 0x0)

731.402152ms ago: executing program 1 (id=2465):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180900000000000000000000000000008500000050"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc)

713.922792ms ago: executing program 1 (id=2466):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x200000, &(0x7f00000018c0)={[{@auto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xe6b}}, {@mb_optimize_scan}, {@oldalloc}]}, 0x1, 0x516, &(0x7f0000000240)="$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")
lsetxattr$security_capability(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080), &(0x7f0000000000)=@v2={0x2000000, [{0xb, 0x6}, {0x0, 0x7ff}]}, 0x14, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x6e)
write$binfmt_elf64(r0, 0x0, 0xfffffe5e)

641.054584ms ago: executing program 7 (id=2467):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000140)="0c03573afa64193f5c0c67f7ed0f08ef102566dce7ec5f66a648", 0x1a}], 0x1}}], 0x1, 0x40080)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="1d000000", @ANYRES16=r1, @ANYBLOB="010025bd7000fcdbdf2501"], 0x28}, 0x1, 0x0, 0x0, 0x1080}, 0x0)

561.698226ms ago: executing program 7 (id=2468):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0)
ioctl(r0, 0xc1b8fd04, &(0x7f0000000000)="0400000000000000000000003801")

518.010087ms ago: executing program 3 (id=2469):
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x24020000)
mount_setattr(0xffffffffffffff9c, &(0x7f0000001080)='.\x00', 0x8000, &(0x7f0000000140)={0x6, 0x8a, 0x20000}, 0x20)

493.603108ms ago: executing program 3 (id=2470):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000280)=[{0x20, 0x0, 0x8, 0xfffbf00c}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10)
syz_emit_ethernet(0x3e, &(0x7f0000000340)=ANY=[], 0x0)

483.118628ms ago: executing program 7 (id=2471):
r0 = socket$inet6(0xa, 0x3, 0x7)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@dev={0xfe, 0x80, '\x00', 0x40}, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @private2}, 0x1c)

476.215338ms ago: executing program 3 (id=2472):
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil})
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
bind$802154_dgram(r0, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14)

463.364608ms ago: executing program 3 (id=2473):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10)
getsockopt$sock_buf(r0, 0x1, 0x1a, &(0x7f00000017c0)=""/4096, &(0x7f0000000100)=0x1000)

435.732299ms ago: executing program 9 (id=2474):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x10008000}, 0x14048010)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x0, 0x5c, 0x160, 0x0, 0x3e0, 0x230, 0x228, 0x25a, 0x230, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [0x0, 0x0, 0x0, 0xffffffff], 'veth0_to_batadv\x00', 'pim6reg\x00', {0xff}, {0xff}, 0x3a}, 0x5002, 0xa8, 0xd0, 0x52020000, {0x0, 0x6802000000000000}}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x3, 0x6, 0x6}, {0x4, 0x4, 0x2}}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @empty, [0xffffffff], [], 'veth1_to_hsr\x00', 'team_slave_0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00', {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310)

415.14132ms ago: executing program 3 (id=2475):
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = syz_pidfd_open(r0, 0x0)
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./bus\x00', 0xa, &(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0xfd, 0x553e, &(0x7f0000006b40)="$eJzs3E1vG0UYAOCx0/SbUiEO3LpShZRItVWnH4JbgVYFRKuq0AMncGzXcmt7o9hxTU49cEQc+CeISpw48hs4cOaGOIC4IRV5Z4IaKJQqm7hNn0dav7uzs+/MWImld71yAF5YJ7Pff62EE+FICGEhhHA8hGK/krbCpRheCyGcCiFUH9kqqf2vhoMhhKMhhBOz5DFnJZ366szk9IVf3v/tux8OHTj29bc/zm/VwLy9HkIYrMX9e4MY826Md1J7c9Ir4uD8JMV4on84nh/ksf1eZ7XIcK+51a9ZxHPd2D9f2xjN4u1+szWL3d7ton1tGAccTbpbeYoL7jTXi+N2Z7WIvVFexO5mHHe6GT/bNkfjmKed8n1WpA/j8VaM7Z1pJ65n7W4RW8Nxao9583ZnOouTFNNwoZX328U8VnfwRj/jPugNN6bZpLM+6uXD7EK98Ua9cbHWWM/bnXHnfK05aF88ny11+73hxvHauNMcXOrmebffqbfywXK21G21ao1GtnS5s9prDrNGo36ufrZ2YTntncmuXr+V9dvZUvX6rezt3nBj3OuPstv5ehavWM5W6ufeXM5ON7IPr93Ibty8cuXajY8+ufzx9beuvfdO6vSPaWVLK2dXVmqNs7WVxvJTLvhh8vTrn+5k/VfLWP/nadI7WT+UqTLvCQA8f9T/wDzspP4f3E3Hj63/12+GsPv1f1D/l+K5qn/LqP+tH8qj/gcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeGH9tPjNu8XOyXh8LLW/lJpeSceVEEI1hPDwMRbCwW05F1KexX/pv/i3OXxfCUWG2RiH0nY0hHApbX+8vNvvAgAAAOxfD+6f+jJW6/FlVu8fePJlkwe7PzXKUfmPc/GmTfX4pyWOtXjy55KyVWcvr5aUrPj7PhCmJWUrbmAdLilZvOX2P/7vSrSwLRx+JFRiqO7pdAAAgD2xvRLY2yoEAACAvfTFvCfAfBTfDadn8dMD/IdiSF8IHtl2BAAAADxz0pPf95/YAwAAANjHivrf7/8BAADA/hZ//w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/mTnbnKWBsI4gD8tbwW/IjHuvYo7OIZHcOnScAAvwQFccAYvwBlw5xEMGDoTPkxdddrmJb9fUoY25d8ZAotnJhkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYEi/ml0T3z5+75tzPPVTZjQAAABAl0OzW7dvlun8db7+Nl96n8+riKgjoqt2n8WLu8xZzmmu9/+4vb/5pw8/I9qE8zPm+XgVEZ/y8efd0N8CAAAAPK79ZrtK1Xp6WU7dIcaUJm3qN58L5VUR0Sx/F0qrz3kfCoW1v++n+FoorZ3AWhQKS1NuT/95yjDav/tl1m5x01SpqTs/dulksbEDAAAjmt01HVUIAAAAD+LL1B1gGlVcFxnzUuA8NXl57+XdGQAAAPAMVVN3AAAAABhcW/+PtP/fyf5/AAAAMLJcT6f9/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjSodmt95vtqm/O8dRPmdEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8Jf9eUeBEAiDMNi7vjOZ+x9WGjQ1NakC4eNvDAYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAePO7v/yfmBpnkrnXxtLzSLJ2amydGnvnxtEfxtevAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALvbnJQVCIAiiYM7430nf/7CSoGcQIQIaHlXUogEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC+6He//J+YGmeSudPG0vFIsnbV2Lpq7D1oHD0Yb/8GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALnbu5zWOKg4A+Hdmdra2KsYoOUREwYNebLqtrb2JByV48E8ohHRbY7f+aHOwpYi5eJOcexE9ighKeuv/0HMLvdRbDzlUEI8rMzuTTNtQE6Ez2+TzgTfvu8Mw7/tmIeQ77yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFDb/HA7zorDzCROq3O3H1xbLvo7j/SFm+t354tWxEmbST8bXq+DG2cikrlukwEAAOBgyOr6PiLu5RuLRZ/OlPV/Xl9T1Pw/vTiJ63r+0bq/7uvav2g3/rj/6tZAM5NxipueWxkNjz2eSu/pzXK6vfSfV/TKJ1++e8nKLyT9ZO2Vzbx8nskPt2591C/DQ21kCwD8H0frvgrq34eKftBlYgAcGL1G4V3X/9lMtzkBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAtGFzLZ6v4yQi5nvbceHOg2vLO/U31+/O1+3U9evr8d32PYtb5BFxbmU0PNbqbKbb5StXLyyNRsNL7QdvRERXo39QTf/CmV1cHNHJ89l78M90pPHkIHptD5pWX3b3c3+Wgg5/KAEAsC/lVSvq+nv5xmJxLpmNGP/8cP3/diOOXdb/9z87dbs5VrP+H7Q2w+m3sHrxq4XLV66+u3Jx6fzw/PCL944P3h+cOH3y5OmF8l3JgjcmAAAA7Nl4PB5vfehXrVn/p7OPr/8facSxy/r/6x8H3zYHztT/O9pe9Os6EwAAgIPt5Tf//ivZ4XzS78c3S6urlwaT49bn45NjB6nu2aGqNev/bLbrrAAAAIA2bK4lD63/n23Escv1/xd+ee235j2ziDhcrf8fXf5ydLa96Uy1Nv6cuOs5AgAA0K3DVWuu/+fl/v90a8tDGhHvvDWJq38D+MT6P6/q/+zj739tjtXc/3+ivSlOpXRu8jzKfi6iN9d1RgAAAOxnz1WtKPb/zDcWP//9yKd9+/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2vZvAAAA//+4GEnN")
process_madvise(r1, 0x0, 0x0, 0x14, 0x0)

414.4831ms ago: executing program 1 (id=2476):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x3, 0x2b5, &(0x7f0000000380)="$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")
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e000000080000000000180003801400038010"], 0x44}}, 0x0)

398.57636ms ago: executing program 7 (id=2477):
r0 = io_uring_setup(0x31a, &(0x7f0000000000)={0x0, 0x1447, 0x10, 0x3, 0xbe})
close(r0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)

388.177401ms ago: executing program 9 (id=2478):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x2008002, &(0x7f00000000c0)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1000}}, {@nobh}, {@quota}]}, 0x1, 0x560, &(0x7f0000000440)="$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")
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2800040, 0x0, 0x1, 0x0, &(0x7f0000000140))
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000300)=0x20)

328.017842ms ago: executing program 8 (id=2480):
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000000)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x2}}, 0x30)

308.982672ms ago: executing program 8 (id=2481):
mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/class/tty/ttyS0/console\x00', 0x2, 0x0)
write(r0, &(0x7f0000000440)='Y\x00', 0x2)

295.799263ms ago: executing program 8 (id=2482):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f0000000200)=r1}, 0x20)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001040)={{r0}, &(0x7f0000000fc0), &(0x7f0000001000)='%pK    \x00'}, 0x20)

255.745604ms ago: executing program 1 (id=2483):
r0 = socket$netlink(0x10, 0x3, 0x4)
setreuid(0x0, 0xee01)
writev(r0, &(0x7f0000000140)=[{&(0x7f00000000c0)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100050c100000000000224e0000", 0x58}], 0x1)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)

245.692194ms ago: executing program 8 (id=2484):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/vmallocinfo\x00', 0x0, 0x0)
r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
read$char_usb(r0, &(0x7f00000000c0)=""/104, 0x12)
sendfile(r1, r0, 0x0, 0x4)

228.851425ms ago: executing program 8 (id=2485):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0)
fcntl$lock(r0, 0x6, &(0x7f0000000080)={0x1, 0x1})
fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x0, 0x2, 0x600000000000000, 0x1d})
fcntl$lock(r0, 0x6, &(0x7f00000001c0)={0x1, 0x1, 0x5, 0x1000000000003})

150.367036ms ago: executing program 8 (id=2486):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000000080), 0x2)
futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0)

97.480828ms ago: executing program 1 (id=2487):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x181403, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x4000009c, 0x0, 0xea00}]})

18.7706ms ago: executing program 1 (id=2488):
mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='dir0/per_cpu/cpu0/trace_pipe\x00', 0x0, 0x0)
read(r0, &(0x7f0000000b00), 0x64)

3.18782ms ago: executing program 9 (id=2489):
r0 = socket$nl_route(0x10, 0x3, 0x0)
close(0x3)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0xff}}, 0x1c}}, 0x0)

0s ago: executing program 3 (id=2490):
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
io_setup(0x3ff, &(0x7f0000000500)=<r2=>0x0)
read$FUSE(r0, &(0x7f0000001740)={0x2020}, 0x2020)
io_submit(r2, 0x2, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x2, r0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)='m', 0x1, 0x0, 0x0, 0x0, r1}])

kernel console output (not intermixed with test programs):

tart checkpoint disabled!
[  116.060727][ T3151] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  116.076298][ T3151] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  116.106956][ T3173] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  116.162203][ T3173] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters
[  116.179906][ T3173] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28
[  116.193567][ T3173] EXT4-fs (loop6): This should not happen!! Data will be lost
[  116.193567][ T3173] 
[  116.203976][ T3173] EXT4-fs (loop6): Total free blocks count 0
[  116.210668][ T3173] EXT4-fs (loop6): Free/Dirty block details
[  116.217180][ T3173] EXT4-fs (loop6): free_blocks=4096
[  116.222524][ T3173] EXT4-fs (loop6): dirty_blocks=48
[  116.228160][ T3173] EXT4-fs (loop6): Block reservation details
[  116.234655][ T3173] EXT4-fs (loop6): i_reserved_data_blocks=3
[  116.243008][ T3191] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  116.258076][ T3191] EXT4-fs (loop6): This should not happen!! Data will be lost
[  116.258076][ T3191] 
[  116.331068][   T30] audit: type=1400 audit(1786097680.063:479): avc:  denied  { write } for  pid=3196 comm="syz.1.1146" path="socket:[26853]" dev="sockfs" ino=26853 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  116.363472][    T8] attempt to access beyond end of device
[  116.363472][    T8] loop4: rw=2049, want=45104, limit=40427
[  116.494811][ T3213] loop6: detected capacity change from 0 to 256
[  116.520499][ T3213] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d)
[  116.563945][   T30] audit: type=1400 audit(1786097680.293:480): avc:  denied  { create } for  pid=3218 comm="syz.3.1156" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  116.633829][   T30] audit: type=1400 audit(1786097680.293:481): avc:  denied  { read } for  pid=3218 comm="syz.3.1156" name="file2" dev="tmpfs" ino=1720 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  116.705703][ T3224] loop3: detected capacity change from 0 to 256
[  116.719069][ T3226] loop4: detected capacity change from 0 to 2048
[  116.744013][   T30] audit: type=1400 audit(1786097680.293:482): avc:  denied  { open } for  pid=3218 comm="syz.3.1156" path="/325/file2" dev="tmpfs" ino=1720 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  116.788818][ T3226] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  116.803112][ T3226] ext4 filesystem being mounted at /237/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  116.814160][   T30] audit: type=1400 audit(1786097680.323:483): avc:  denied  { ioctl } for  pid=3218 comm="syz.3.1156" path="/325/file2" dev="tmpfs" ino=1720 ioctlcmd=0x4c06 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  116.854460][ T3226] incfs: iterate_incfs_dir / -22
[  116.893885][  T289] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 16: comm syz-executor: path /237/file0: bad entry in directory: rec_len is smaller than minimal - offset=108, inode=646161, rec_len=0, size=4096 fake=0
[  116.965116][ T3236] loop1: detected capacity change from 0 to 256
[  117.022869][ T3237] loop3: detected capacity change from 0 to 2048
[  117.066651][ T3236] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  117.087415][ T3237] EXT4-fs (loop3): Ignoring removed oldalloc option
[  117.097870][ T3236] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  117.128970][ T3237] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable,usrjquota=,abort,oldalloc,,errors=continue. Quota mode: none.
[  117.151163][ T3237] ext4 filesystem being mounted at /329/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  117.161984][   T30] kauditd_printk_skb: 5 callbacks suppressed
[  117.162084][   T30] audit: type=1400 audit(1786097680.883:489): avc:  denied  { write } for  pid=3248 comm="syz.5.1168" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[  117.337994][ T3243] bridge0: port 1(bridge_slave_0) entered blocking state
[  117.360700][ T3243] bridge0: port 1(bridge_slave_0) entered disabled state
[  117.396791][ T3243] device bridge_slave_0 entered promiscuous mode
[  117.416198][ T3243] bridge0: port 2(bridge_slave_1) entered blocking state
[  117.424430][ T3243] bridge0: port 2(bridge_slave_1) entered disabled state
[  117.433546][ T3243] device bridge_slave_1 entered promiscuous mode
[  117.438735][   T30] audit: type=1400 audit(1786097681.173:490): avc:  denied  { remount } for  pid=3263 comm="syz.5.1173" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[  117.537113][    T8] device bridge_slave_1 left promiscuous mode
[  117.543473][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[  117.565879][    T8] device bridge_slave_0 left promiscuous mode
[  117.578739][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[  117.608797][    T8] device veth1_macvtap left promiscuous mode
[  117.616683][    T8] device veth0_vlan left promiscuous mode
[  117.768708][ T3280] loop1: detected capacity change from 0 to 128
[  117.822366][ T3280] EXT4-fs (loop1): Test dummy encryption mode enabled
[  117.887246][ T3280] EXT4-fs (loop1): mounted filesystem without journal. Opts: discard,dioread_lock,test_dummy_encryption,,errors=continue. Quota mode: none.
[  117.943073][ T3280] ext4 filesystem being mounted at /165/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  117.948375][ T3237] fs-verity (loop3, inode 13): Error -4 building Merkle tree
[  118.046186][   T30] audit: type=1400 audit(1786097681.773:491): avc:  denied  { watch watch_reads } for  pid=3293 comm="syz.4.1187" path="/243/file0" dev="tmpfs" ino=1311 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  118.234799][ T3302] exfat: Deprecated parameter 'utf8'
[  118.251523][ T3302] exfat: Deprecated parameter 'utf8'
[  118.258665][ T3302] exfat: Deprecated parameter 'utf8'
[  118.265532][  T710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  118.296641][  T710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  118.339295][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  118.351047][ T3302] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xc70f51ff, utbl_chksum : 0xe619d30d)
[  118.377674][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  118.393277][   T43] bridge0: port 1(bridge_slave_0) entered blocking state
[  118.400899][   T43] bridge0: port 1(bridge_slave_0) entered forwarding state
[  118.409764][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  118.424930][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  118.435303][   T43] bridge0: port 2(bridge_slave_1) entered blocking state
[  118.442685][   T43] bridge0: port 2(bridge_slave_1) entered forwarding state
[  118.455648][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  118.504042][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  118.532033][  T710] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  118.542437][   T30] audit: type=1400 audit(1786097682.283:492): avc:  denied  { bind } for  pid=3325 comm="syz.5.1199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  118.581059][  T710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  118.613040][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  118.631459][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  118.656859][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  118.677492][ T3243] device veth0_vlan entered promiscuous mode
[  118.707522][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  118.721294][ T3243] device veth1_macvtap entered promiscuous mode
[  118.750770][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  118.761683][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  118.789634][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  118.809282][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  118.841640][   T30] audit: type=1400 audit(2000000000.130:493): avc:  denied  { append } for  pid=3346 comm="syz.5.1210" name="file0" dev="tmpfs" ino=506 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  118.953887][   T30] audit: type=1400 audit(2000000000.240:494): avc:  denied  { set_context_mgr } for  pid=3355 comm="syz.3.1213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  119.021918][   T30] audit: type=1326 audit(2000000000.310:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3364 comm="syz.5.1218" exe="/root/ci2-android-5-15/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7173f940d9 code=0x0
[  119.024425][ T3366] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1217'.
[  119.089081][ T3362] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable=0x0000000000000001,errors=remount-ro,resgid=0x0000000000000000,barrier,quota,delalloc,. Quota mode: writeback.
[  119.108444][ T3362] ext4 filesystem being mounted at /340/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  119.196656][ T3375] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.1216: bg 0: block 345: padding at end of block bitmap is not set
[  119.221433][ T3375] EXT4-fs (loop3): Remounting filesystem read-only
[  119.333497][ T3381] FAT-fs (loop1): Directory bread(block 64) failed
[  119.340789][ T3381] FAT-fs (loop1): Directory bread(block 65) failed
[  119.347486][ T3381] FAT-fs (loop1): Directory bread(block 66) failed
[  119.349268][ T3383] ip_tables: iptables: counters copy to user failed while replacing table
[  119.354200][ T3381] FAT-fs (loop1): Directory bread(block 67) failed
[  119.354354][ T3381] FAT-fs (loop1): Directory bread(block 68) failed
[  119.376891][ T3381] FAT-fs (loop1): Directory bread(block 69) failed
[  119.383805][ T3381] FAT-fs (loop1): Directory bread(block 70) failed
[  119.391296][ T3381] FAT-fs (loop1): Directory bread(block 71) failed
[  119.399253][ T3381] FAT-fs (loop1): Directory bread(block 72) failed
[  119.409220][ T3381] FAT-fs (loop1): Directory bread(block 73) failed
[  119.551816][   T30] audit: type=1400 audit(2000000000.840:496): avc:  denied  { listen } for  pid=3399 comm="syz.3.1232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  119.583099][ T3402] sit0: mtu less than device minimum
[  119.671778][ T3406] FAT-fs (loop3): Invalid FSINFO signature: 0x41613352, 0x61417272 (sector = 1)
[  119.881865][ T3429] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,noblock_validity,,errors=continue. Quota mode: writeback.
[  119.910963][ T3429] EXT4-fs warning (device loop3): ext4_resize_fs:1981: can't read last block, resize aborted
[  120.133314][ T3454] capability: warning: `syz.3.1256' uses 32-bit capabilities (legacy support in use)
[  120.180126][ T3454] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option
[  120.210643][ T3454] EXT4-fs error (device loop3): ext4_map_blocks:632: inode #3: block 2: comm syz.3.1256: lblock 2 mapped to illegal pblock 2 (length 1)
[  120.235061][ T3454] Quota error (device loop3): qtree_write_dquot: dquota write failed
[  120.244525][ T3454] EXT4-fs error (device loop3): ext4_map_blocks:632: inode #3: block 48: comm syz.3.1256: lblock 0 mapped to illegal pblock 48 (length 1)
[  120.263276][ T3454] Quota error (device loop3): v2_write_file_info: Can't write info structure
[  120.276891][ T3454] EXT4-fs error (device loop3): ext4_acquire_dquot:6227: comm syz.3.1256: Failed to acquire dquot type 0
[  120.303697][ T3454] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5904: Corrupt filesystem
[  120.320683][ T3454] EXT4-fs error (device loop3): ext4_evict_inode:285: inode #11: comm syz.3.1256: mark_inode_dirty error
[  120.333827][ T3454] EXT4-fs warning (device loop3): ext4_evict_inode:288: couldn't mark inode dirty (err -117)
[  120.346719][ T3454] EXT4-fs (loop3): 1 orphan inode deleted
[  120.353459][ T3454] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,resuid=0x0000000000000000,norecovery,nodiscard,nodioread_nolock,nomblk_io_submit,,errors=continue. Quota mode: none.
[  120.384422][  T710] EXT4-fs error (device loop3): ext4_map_blocks:632: inode #3: block 1: comm kworker/u4:5: lblock 1 mapped to illegal pblock 1 (length 1)
[  120.422116][  T710] EXT4-fs error (device loop3): ext4_release_dquot:6263: comm kworker/u4:5: Failed to release dquot type 0
[  120.446635][  T287] EXT4-fs error (device loop3): __ext4_get_inode_loc:4365: comm syz-executor: Invalid inode table block 1 in block_group 0
[  120.467963][  T287] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5904: Corrupt filesystem
[  120.524986][  T287] EXT4-fs error (device loop3): ext4_quota_off:6533: inode #3: comm syz-executor: mark_inode_dirty error
[  120.658132][ T3485] set_capacity_and_notify: 6 callbacks suppressed
[  120.658153][ T3485] loop3: detected capacity change from 0 to 4096
[  121.106016][  T311] kernel write not supported for file /ppp (pid: 311 comm: kworker/0:3)
[  121.120536][ T3543] overlayfs: upper fs does not support file handles, falling back to index=off.
[  121.145411][ T3543] overlayfs: NFS export requires "index=on", falling back to nfs_export=off.
[  121.171641][ T3545] loop1: detected capacity change from 0 to 256
[  121.230279][ T3545] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  121.373827][ T3561] loop7: detected capacity change from 0 to 4096
[  121.414623][ T3565] loop1: detected capacity change from 0 to 512
[  121.427026][ T3561] EXT4-fs (loop7): Test dummy encryption mode enabled
[  121.436478][ T3561] EXT4-fs (loop7): Quota format mount options ignored when QUOTA feature is enabled
[  121.456451][ T3567] loop5: detected capacity change from 0 to 4096
[  121.463634][ T3569] ËåÍ"2
[  121.472659][ T3561] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003]
[  121.490585][ T3561] System zones: 0-5
[  121.499391][ T3561] EXT4-fs (loop7): mounted filesystem without journal. Opts: debug,test_dummy_encryption=v1,inlinecrypt,delalloc,noinit_itable,norecovery,minixdf,nodioread_nolock,errors=remount-ro,jqfmt=vfsv0,usrquota,max_dir_size_kb=0x0000000000000008,. Quota mode: writeback.
[  121.527141][ T3567] EXT4-fs (loop5): Test dummy encryption mode enabled
[  121.534728][ T3567] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled
[  121.563370][ T3565] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrquota,grpjquota=,nodelalloc,,errors=continue. Quota mode: writeback.
[  121.578382][ T3561] EXT4-fs (loop7): shut down requested (0)
[  121.586967][ T3567] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003]
[  121.598889][ T3567] System zones: 0-5
[  121.603965][ T3565] ext4 filesystem being mounted at /185/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  121.621833][ T3565] EXT4-fs warning (device loop1): verify_group_input:165: Last group not full
[  121.631778][ T3567] EXT4-fs (loop5): mounted filesystem without journal. Opts: debug,test_dummy_encryption=v1,inlinecrypt,delalloc,noinit_itable,norecovery,minixdf,nodioread_nolock,errors=remount-ro,jqfmt=vfsv0,usrquota,max_dir_size_kb=0x0000000000000008,. Quota mode: writeback.
[  121.665698][ T3579] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop7 ino=12
[  121.682705][ T3579] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop7 ino=12
[  121.700057][ T3579] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop7 ino=13
[  121.715166][ T3579] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop7 ino=15
[  121.724926][ T3579] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop7 ino=12
[  121.735565][ T3579] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop7 ino=12
[  121.745672][ T3579] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop7 ino=13
[  121.761147][ T3579] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop7 ino=15
[  121.798303][ T3583] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1315'.
[  121.833832][ T3583] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  122.028622][ T3602] loop1: detected capacity change from 0 to 256
[  122.096780][ T3602] exfat: Deprecated parameter 'utf8'
[  122.123860][ T3602] exfat: Deprecated parameter 'namecase'
[  122.142155][ T3617] loop4: detected capacity change from 0 to 512
[  122.159926][ T3616] loop7: detected capacity change from 0 to 512
[  122.189965][ T3602] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d)
[  122.250379][ T3617] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  122.270974][ T3623] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1333'.
[  122.283194][ T3616] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  122.294810][ T3616] ext4 filesystem being mounted at /32/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  122.296552][ T3617] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[  122.366832][ T3616] EXT4-fs error (device loop7): ext4_map_blocks:632: inode #2: block 18: comm syz.7.1329: lblock 23 mapped to illegal pblock 18 (length 1)
[  122.367469][ T3617] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended
[  122.405641][ T3617] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  122.458058][ T3593] loop3: detected capacity change from 0 to 40427
[  122.466843][ T3617] System zones: 0-2, 18-18, 34-35
[  122.472964][ T3617] EXT4-fs (loop4): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000000,,errors=continue. Quota mode: none.
[  122.499538][ T3630] xt_hashlimit: size too large, truncated to 1048576
[  122.524114][ T3617] netlink: 'syz.4.1330': attribute type 298 has an invalid length.
[  122.761784][ T3646] loop7: detected capacity change from 0 to 1024
[  122.876601][ T3646] EXT4-fs (loop7): Ignoring removed bh option
[  122.934482][ T3646] EXT4-fs (loop7): mounted filesystem without journal. Opts: data_err=ignore,max_dir_size_kb=0x0000000000000003,jqfmt=vfsv1,abort,debug_want_extra_isize=0x0000000000000008,lazytime,errors=remount-ro,stripe=0x0000000000000007,bh,auto_da_alloc,. Quota mode: none.
[  123.078223][ T3670] erofs: (device loop4): mounted with root inode @ nid 36.
[  123.172301][ T3670] attempt to access beyond end of device
[  123.172301][ T3670] loop4: rw=524288, want=1348714848, limit=16
[  123.347437][ T3678] WARNING! power/level is deprecated; use power/control instead
[  123.458038][ T3666] F2FS-fs (loop5): invalid crc value
[  123.488097][ T3666] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  123.527778][ T3672] F2FS-fs (loop7): invalid crc value
[  123.547332][ T3672] F2FS-fs (loop7): Found nat_bits in checkpoint
[  123.581288][ T3666] F2FS-fs (loop5): Start checkpoint disabled!
[  123.604874][ T3666] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[  123.645251][ T3672] F2FS-fs (loop7): Start checkpoint disabled!
[  123.669695][ T3672] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6
[  123.731414][ T3698] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1362'.
[  123.803668][   T43] attempt to access beyond end of device
[  123.803668][   T43] loop7: rw=2049, want=40976, limit=40427
[  123.976512][   T30] kauditd_printk_skb: 2 callbacks suppressed
[  123.976537][   T30] audit: type=1400 audit(2000000005.260:498): avc:  denied  { write } for  pid=3709 comm="syz.5.1369" name="ptp0" dev="devtmpfs" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  124.186985][   T26] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  124.247025][ T3729] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d)
[  124.347258][  T287] ------------[ cut here ]------------
[  124.352905][ T3741] exfat: Deprecated parameter 'namecase'
[  124.367286][ T3741] exfat: Deprecated parameter 'namecase'
[  124.376824][  T287] WARNING: CPU: 0 PID: 287 at fs/overlayfs/util.c:475 ovl_dir_modified+0x189/0x1c0
[  124.406238][ T3741] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d)
[  124.427910][  T287] Modules linked in:
[  124.449939][  T287] CPU: 0 PID: 287 Comm: syz-executor Not tainted syzkaller #0
[  124.452214][ T3741] exFAT-fs (loop4): hint_cluster is invalid (4278190089)
[  124.473495][  T287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  124.505193][ T3741] exFAT-fs (loop4): error, failed to bmap (inode : ffff888129158520 iblock : 8, err : -5)
[  124.523883][  T287] RIP: 0010:ovl_dir_modified+0x189/0x1c0
[  124.532261][  T287] Code: 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 ee 87 a7 ff 49 ff 06 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 67 18 68 ff <0f> 0b e9 17 ff ff ff e8 5b 18 68 ff 0f 0b e9 51 ff ff ff 44 89 e1
[  124.547031][ T3741] exFAT-fs (loop4): error, invalid access to FAT (entry 0xff000008)
[  124.573052][ T3741] attempt to access beyond end of device
[  124.573052][ T3741] loop4: rw=2049, want=34225520826, limit=256
[  124.589414][  T287] RSP: 0000:ffffc90000a07be0 EFLAGS: 00010293
[  124.598055][ T3741] Buffer I/O error on dev loop4, logical block 34225520825, lost async page write
[  124.624845][ T3741] attempt to access beyond end of device
[  124.624845][ T3741] loop4: rw=2049, want=34225520827, limit=256
[  124.637339][  T287] RAX: ffffffff82019e79 RBX: 1ffff11025255206 RCX: ffff8881200713c0
[  124.660451][  T287] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  124.671962][  T287] RBP: ffffc90000a07c10 R08: ffff88812d0bcc4f R09: 1ffff11025a17989
[  124.685157][  T287] R10: dffffc0000000000 R11: ffffed1025a1798a R12: ffff8881292a9000
[  124.685158][ T3741] Buffer I/O error on dev loop4, logical block 34225520826, lost async page write
[  124.685281][ T3741] attempt to access beyond end of device
[  124.685281][ T3741] loop4: rw=2049, want=34225520828, limit=256
[  124.697869][  T287] R13: 0000000000000000 R14: ffff88812d0bcba8 R15: ffff8881292a9030
[  124.723538][ T3750] sd 0:0:1:0: PR command failed: 2
[  124.731956][ T3741] Buffer I/O error on dev loop4, logical block 34225520827, lost async page write
[  124.745493][ T3750] sd 0:0:1:0: Sense Key : 0x5 [current] 
[  124.769233][  T287] FS:  000055555f993500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[  124.769263][  T287] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  124.769277][  T287] CR2: 00007f7174d4e060 CR3: 0000000126308000 CR4: 00000000003506b0
[  124.776812][   T26] usb 2-1: unable to get BOS descriptor or descriptor too short
[  124.798794][ T3741] attempt to access beyond end of device
[  124.798794][ T3741] loop4: rw=2049, want=34225520829, limit=256
[  124.815922][ T3750] sd 0:0:1:0: ASC=0x20 ASCQ=0x0 
[  124.821895][  T287] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  124.865787][ T3741] Buffer I/O error on dev loop4, logical block 34225520828, lost async page write
[  124.883455][ T3741] attempt to access beyond end of device
[  124.883455][ T3741] loop4: rw=2049, want=34225520830, limit=256
[  124.899788][  T287] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  124.906515][   T26] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  124.913130][  T287] Call Trace:
[  124.931440][ T3741] Buffer I/O error on dev loop4, logical block 34225520829, lost async page write
[  124.942919][ T3741] attempt to access beyond end of device
[  124.942919][ T3741] loop4: rw=2049, want=34225520831, limit=256
[  124.957154][  T287]  <TASK>
[  124.960865][  T287]  ovl_do_remove+0x688/0x960
[  124.973352][  T287]  ? ovl_set_redirect+0x670/0x670
[  124.985175][ T3741] Buffer I/O error on dev loop4, logical block 34225520830, lost async page write
[  124.994754][  T287]  ? selinux_inode_rmdir+0x22/0x30
[  125.001688][ T3741] attempt to access beyond end of device
[  125.001688][ T3741] loop4: rw=2049, want=34225520832, limit=256
[  125.015900][  T287]  ovl_rmdir+0x1a/0x20
[  125.023675][  T287]  vfs_rmdir+0x1ae/0x450
[  125.029135][ T3741] Buffer I/O error on dev loop4, logical block 34225520831, lost async page write
[  125.041830][  T287]  incfs_kill_sb+0xfe/0x210
[  125.046911][  T287]  deactivate_locked_super+0xa0/0x100
[  125.055026][  T287]  deactivate_super+0xaf/0xe0
[  125.076253][  T287]  cleanup_mnt+0x44f/0x500
[  125.081195][  T287]  __cleanup_mnt+0x19/0x20
[  125.096339][  T287]  task_work_run+0x127/0x190
[  125.101025][  T287]  exit_to_user_mode_loop+0xd0/0xe0
[  125.125786][  T287]  exit_to_user_mode_prepare+0x87/0xd0
[  125.134271][  T287]  syscall_exit_to_user_mode+0x1a/0x30
[  125.140326][  T287]  do_syscall_64+0x58/0xa0
[  125.144792][  T287]  ? clear_bhb_loop+0x50/0xa0
[  125.157639][  T287]  ? clear_bhb_loop+0x50/0xa0
[  125.163653][  T287]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  125.186984][  T287] RIP: 0033:0x7f369861b317
[  125.191885][  T287] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  125.196347][   T26] usb 2-1: string descriptor 0 read error: -22
[  125.237719][   T26] usb 2-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40
[  125.237896][  T287] RSP: 002b:00007fffbb29f1d8 EFLAGS: 00000246
[  125.252876][ T3769] xt_hashlimit: size too large, truncated to 1048576
[  125.264264][  T287]  ORIG_RAX: 00000000000000a6
[  125.266890][   T26] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  125.289102][ T3771] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1396'.
[  125.290763][  T287] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f369861b317
[  125.322790][  T287] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffbb29f290
[  125.331533][  T287] RBP: 00007fffbb29f290 R08: 00007fffbb2a0290 R09: 00000000ffffffff
[  125.351003][  T287] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffbb2a0320
[  125.368003][  T287] R13: 00007f36986b0474 R14: 000000000001e553 R15: 00007fffbb2a0360
[  125.378721][  T287]  </TASK>
[  125.381862][  T287] ---[ end trace 2a13bfc80ab53e57 ]---
[  125.387923][  T287] ------------[ cut here ]------------
[  125.393475][  T287] WARNING: CPU: 0 PID: 287 at fs/overlayfs/util.c:475 ovl_dir_modified+0x189/0x1c0
[  125.403286][  T287] Modules linked in:
[  125.407604][  T287] CPU: 0 PID: 287 Comm: syz-executor Tainted: G        W         syzkaller #0
[  125.416646][  T287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  125.427130][  T287] RIP: 0010:ovl_dir_modified+0x189/0x1c0
[  125.440256][  T287] Code: 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 ee 87 a7 ff 49 ff 06 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 67 18 68 ff <0f> 0b e9 17 ff ff ff e8 5b 18 68 ff 0f 0b e9 51 ff ff ff 44 89 e1
[  125.469505][  T287] RSP: 0000:ffffc90000a07be0 EFLAGS: 00010293
[  125.475769][  T287] RAX: ffffffff82019e79 RBX: 1ffff11025255206 RCX: ffff8881200713c0
[  125.484572][  T287] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  125.494479][  T287] RBP: ffffc90000a07c10 R08: ffff88812d0bcc4f R09: 1ffff11025a17989
[  125.502672][  T287] R10: dffffc0000000000 R11: ffffed1025a1798a R12: ffff8881292a9000
[  125.511327][  T287] R13: 0000000000000000 R14: ffff88812d0bcba8 R15: ffff8881292a9030
[  125.521315][  T287] FS:  000055555f993500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[  125.533204][  T287] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  125.540862][  T287] CR2: 00007fbbab6c1dac CR3: 0000000126308000 CR4: 00000000003506b0
[  125.549252][  T287] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  125.557754][  T287] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  125.568055][  T287] Call Trace:
[  125.572643][  T287]  <TASK>
[  125.587557][  T287]  ovl_do_remove+0x688/0x960
[  125.594196][  T287]  ? ovl_set_redirect+0x670/0x670
[  125.603873][  T287]  ? selinux_inode_rmdir+0x22/0x30
[  125.617193][  T287]  ovl_rmdir+0x1a/0x20
[  125.621816][  T287]  vfs_rmdir+0x1ae/0x450
[  125.627155][  T287]  incfs_kill_sb+0x18f/0x210
[  125.634381][  T287]  deactivate_locked_super+0xa0/0x100
[  125.645832][  T287]  deactivate_super+0xaf/0xe0
[  125.653432][  T287]  cleanup_mnt+0x44f/0x500
[  125.658272][  T287]  __cleanup_mnt+0x19/0x20
[  125.663004][  T287]  task_work_run+0x127/0x190
[  125.668748][  T287]  exit_to_user_mode_loop+0xd0/0xe0
[  125.674114][  T287]  exit_to_user_mode_prepare+0x87/0xd0
[  125.680161][  T287]  syscall_exit_to_user_mode+0x1a/0x30
[  125.686394][  T287]  do_syscall_64+0x58/0xa0
[  125.691038][  T287]  ? clear_bhb_loop+0x50/0xa0
[  125.695874][  T287]  ? clear_bhb_loop+0x50/0xa0
[  125.701706][  T287]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  125.710256][  T287] RIP: 0033:0x7f369861b317
[  125.715124][  T287] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  125.746206][  T287] RSP: 002b:00007fffbb29f1d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  125.766178][  T287] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f369861b317
[  125.805249][  T287] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffbb29f290
[  125.819138][  T287] RBP: 00007fffbb29f290 R08: 00007fffbb2a0290 R09: 00000000ffffffff
[  125.841551][  T287] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffbb2a0320
[  125.860643][  T287] R13: 00007f36986b0474 R14: 000000000001e553 R15: 00007fffbb2a0360
[  125.877308][  T287]  </TASK>
[  125.889795][  T287] ---[ end trace 2a13bfc80ab53e58 ]---
[  125.994813][ T3810] bridge0: port 2(bridge_slave_1) entered disabled state
[  126.186278][ T3828] tap0: tun_chr_ioctl cmd 1074025677
[  126.189474][   T26] usb 2-1: USB disconnect, device number 6
[  126.201726][ T3828] tap0: linktype set to 769
[  126.240550][ T3833] set_capacity_and_notify: 8 callbacks suppressed
[  126.240573][ T3833] loop5: detected capacity change from 0 to 256
[  126.323203][ T3833] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  126.356360][ T3833] exFAT-fs (loop5): Medium has reported failures. Some data may be lost.
[  126.383723][ T3833] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000ff98, chksum : 0x05c65c57, utbl_chksum : 0xe619d30d)
[  126.437984][ T3833] exFAT-fs (loop5): hint_cluster is invalid (17)
[  126.447416][ T3833] exFAT-fs (loop5): error, invalid access to FAT (entry 0xffffffff)
[  126.455657][ T3833] exFAT-fs (loop5): Filesystem has been set read-only
[  126.484112][ T3849] exFAT-fs (loop5): error, invalid access to FAT (entry 0xffffffff)
[  126.646554][ T3860] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1436'.
[  126.657091][ T3858] xt_hashlimit: size too large, truncated to 1048576
[  126.669166][ T3860] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1436'.
[  126.686448][ T3860] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1436'.
[  126.704739][ T3860] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1436'.
[  126.730882][ T3864] clocksource: Switched to clocksource kvm-clock
[  126.734160][ T3865] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  126.787203][ T3873] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1442'.
[  126.796535][ T3873] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1442'.
[  126.807722][ T3873] netlink: 39 bytes leftover after parsing attributes in process `syz.4.1442'.
[  126.911109][ T3884] loop5: detected capacity change from 0 to 256
[  126.933956][ T3886] loop1: detected capacity change from 0 to 512
[  126.997185][ T3886] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  127.036637][ T3886] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002]
[  127.066287][ T3886] System zones: 1-12
[  127.072796][   T30] audit: type=1400 audit(2000000008.362:499): avc:  denied  { read } for  pid=3895 comm="syz.5.1452" name="usbmon0" dev="devtmpfs" ino=155 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  127.121877][   T30] audit: type=1400 audit(2000000008.392:500): avc:  denied  { open } for  pid=3895 comm="syz.5.1452" path="/dev/usbmon0" dev="devtmpfs" ino=155 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  127.200108][ T3886] EXT4-fs (loop1): 1 truncate cleaned up
[  127.219445][ T3886] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,debug,data=journal,,errors=continue. Quota mode: none.
[  127.247900][ T3893] loop4: detected capacity change from 0 to 40427
[  127.283550][ T3893] F2FS-fs (loop4): invalid crc value
[  127.327926][ T3893] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  127.374299][ T3893] F2FS-fs (loop4): Cannot turn on quotas: -2 on 0
[  127.384032][ T3893] F2FS-fs (loop4): Start checkpoint disabled!
[  127.403682][ T3893] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  127.487052][    T8] attempt to access beyond end of device
[  127.487052][    T8] loop4: rw=2049, want=40976, limit=40427
[  127.567768][ T3911] loop7: detected capacity change from 0 to 2048
[  127.607085][ T3915] loop1: detected capacity change from 0 to 4096
[  127.645224][ T3911] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  127.688966][ T3920] loop3: detected capacity change from 0 to 512
[  127.707906][ T3915] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback.
[  127.729165][ T3924] ------------[ cut here ]------------
[  127.742400][ T3924] WARNING: CPU: 1 PID: 3924 at mm/page_alloc.c:5799 __alloc_pages+0x392/0x460
[  127.776255][ T3924] Modules linked in:
[  127.786697][ T3924] CPU: 1 PID: 3924 Comm: syz.4.1462 Tainted: G        W         syzkaller #0
[  127.806164][ T3924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  127.862326][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  127.881342][ T3924] RIP: 0010:__alloc_pages+0x392/0x460
[  127.894320][ T3924] Code: ff e8 82 f3 09 03 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 6c fd ff ff 41 89 ff 4c 89 e7 e8 a6 cb 04 00 44 89 ff e9 59 fd ff ff <0f> 0b e9 16 ff ff ff 65 8b 05 a8 b6 5d 7e 89 44 24 08 c1 e8 06 48
[  127.924428][ T3924] RSP: 0018:ffffc90000937920 EFLAGS: 00010246
[  127.932722][ T3924] RAX: ffffc90000937980 RBX: 0000000000000013 RCX: 0000000000000000
[  127.933001][   T30] audit: type=1400 audit(2000000009.222:501): avc:  denied  { bind } for  pid=3934 comm="syz.3.1468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  127.943643][ T3924] RDX: 0000000000000018 RSI: 0000000000000000 RDI: ffffc90000937998
[  128.003118][ T3924] RBP: ffffc90000937a18 R08: ffffc90000937997 R09: ffffc90000937980
[  128.026035][ T3924] R10: dffffc0000000000 R11: fffff52000126f33 R12: ffffc90000937960
[  128.034607][ T3924] R13: dffffc0000000000 R14: 1ffff92000126f28 R15: 0000000000000000
[  128.066400][ T3924] FS:  00007fbba9e916c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
[  128.066434][ T3942] xt_hashlimit: max too large, truncated to 1048576
[  128.101061][ T3924] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  128.118304][ T3924] CR2: 0000200000000540 CR3: 00000001176f9000 CR4: 00000000003506a0
[  128.143769][ T3924] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  128.160899][ T3924] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  128.189381][ T3924] Call Trace:
[  128.206035][ T3924]  <TASK>
[  128.211877][ T3924]  ? prep_new_page+0x110/0x110
[  128.219972][ T3946] loop5: detected capacity change from 0 to 7
[  128.236217][ T3924]  ? __stack_depot_save+0x34/0x480
[  128.247441][ T3924]  ? path_openat+0x284f/0x2f80
[  128.255276][    T8] loop: Write error at byte offset 4, length 3584.
[  128.266262][    C1] blk_update_request: I/O error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0
[  128.277643][    C1] Buffer I/O error on dev loop5, logical block 0, lost async page write
[  128.286685][ T3924]  ? __asan_set_shadow_00+0xe/0x10
[  128.306183][ T3924]  ? do_futex+0xdd3/0x27f0
[  128.316354][ T3924]  ? kasan_set_track+0x4a/0x70
[  128.326416][ T3924]  kmalloc_order+0x4c/0x160
[  128.336361][ T3924]  ? x64_sys_call+0x219/0x9a0
[  128.346328][ T3924]  ? do_syscall_64+0x4c/0xa0
[  128.356834][ T3924]  kmalloc_order_trace+0x18/0xb0
[  128.372510][ T3924]  __kmalloc_track_caller+0x198/0x2c0
[  128.386320][ T3924]  ? radix_tree_lookup+0x248/0x290
[  128.432086][ T3924]  memdup_user_nul+0x26/0xf0
[  128.437688][ T3924]  bitmap_parse_user+0x25/0x70
[  128.453113][ T3924]  irq_affinity_proc_write+0x107/0x1d0
[  128.471917][ T3944] loop3: detected capacity change from 0 to 40427
[  128.485127][ T3924]  ? irq_affinity_proc_open+0x40/0x40
[  128.496105][ T3924]  ? avc_policy_seqno+0x1b/0x70
[  128.529378][ T3924]  ? selinux_file_permission+0x2aa/0x510
[  128.535441][ T3928] loop7: detected capacity change from 0 to 40427
[  128.572502][ T3928] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12
[  128.577876][ T3924]  ? irq_affinity_proc_open+0x40/0x40
[  128.592454][ T3928] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[  128.604883][    C1] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  128.617817][    C1] Buffer I/O error on dev loop5, logical block 0, async page read
[  128.628455][    C1] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  128.634059][ T3928] F2FS-fs (loop7): invalid crc_offset: 33558524
[  128.642945][    C1] Buffer I/O error on dev loop5, logical block 0, async page read
[  128.658966][ T1797]  loop5: unable to read partition table
[  128.667046][    C0] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  128.696153][    C0] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  128.707694][    C0] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  128.720494][ T3953]  loop5: unable to read partition table
[  128.727325][ T3953] loop_reread_partitions: partition scan of loop5 (úùƒå¡™‰ü�¾CêjÌ–ã¢P=ý?ã}X‹ºÐ	œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö�˜Èµ4FLQkÝŠ) failed (rc=-5)
[  128.743403][    C1] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  128.756137][    C1] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  128.766419][ T3924]  proc_reg_write+0x1c4/0x2b0
[  128.772942][    C1] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  128.786052][ T3924]  ? proc_reg_llseek+0x280/0x280
[  128.787514][    C1] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  128.799763][ T3924]  vfs_write+0x404/0xfd0
[  128.825066][ T3928] F2FS-fs (loop7): Found nat_bits in checkpoint
[  128.829481][ T3924]  ? file_end_write+0x1b0/0x1b0
[  128.856353][ T3924]  ? __kasan_check_write+0x14/0x20
[  128.875169][ T3924]  ? mutex_lock+0x9b/0x1c0
[  128.889658][ T3924]  ? wait_for_completion_killable_timeout+0x10/0x10
[  128.904486][ T3924]  ? __fget_files+0x2e1/0x340
[  128.914444][ T3924]  ? __fdget_pos+0x2d2/0x380
[  128.920111][ T3924]  ? ksys_write+0x70/0x260
[  128.924660][ T3928] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0
[  128.932110][ T3928] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  128.940412][ T3924]  ksys_write+0x14a/0x260
[  128.957464][ T3899] F2FS-fs (loop5): Test dummy encryption mode enabled
[  128.963534][ T3924]  ? __ia32_sys_read+0x90/0x90
[  128.974239][ T3899] F2FS-fs (loop5): invalid crc value
[  128.995067][ T3924]  ? __kasan_check_write+0x14/0x20
[  129.018043][ T3924]  ? switch_fpu_return+0x15d/0x2c0
[  129.025716][ T3899] F2FS-fs (loop5): Found nat_bits in checkpoint
[  129.035678][ T3924]  __x64_sys_write+0x7b/0x90
[  129.047579][ T3924]  x64_sys_call+0x8ef/0x9a0
[  129.057782][ T3924]  do_syscall_64+0x4c/0xa0
[  129.068215][ T3924]  ? clear_bhb_loop+0x50/0xa0
[  129.080064][ T3924]  ? clear_bhb_loop+0x50/0xa0
[  129.088243][ T3924]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  129.096551][ T3924] RIP: 0033:0x7fbbab4380d9
[  129.101953][ T3924] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  129.122662][ T3924] RSP: 002b:00007fbba9e91028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  129.125246][ T3899] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  129.131852][ T3924] RAX: ffffffffffffffda RBX: 00007fbbab6bffa0 RCX: 00007fbbab4380d9
[  129.165810][ T3924] RDX: 00000000fffffdd4 RSI: 0000200000000340 RDI: 0000000000000003
[  129.175094][ T3924] RBP: 00007fbbab4cf024 R08: 0000000000000000 R09: 0000000000000000
[  129.183497][ T3924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  129.192643][ T3924] R13: 00007fbbab6c0038 R14: 00007fbbab6bffa0 R15: 00007ffda21cd2d8
[  129.201207][ T3924]  </TASK>
[  129.204372][ T3924] ---[ end trace 2a13bfc80ab53e59 ]---
[  129.306230][   T39] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  129.439964][   T30] audit: type=1400 audit(2000000010.732:502): avc:  denied  { mount } for  pid=3982 comm="syz.1.1486" name="/" dev="pstore" ino=13308 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1
[  129.495565][   T30] audit: type=1400 audit(2000000010.782:503): avc:  denied  { unmount } for  pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1
[  129.596236][   T39] usb 4-1: Using ep0 maxpacket: 16
[  129.726285][   T39] usb 4-1: config 1 has an invalid interface number: 105 but max is 0
[  129.735871][   T39] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  129.765579][   T39] usb 4-1: config 1 has no interface number 0
[  129.774631][   T39] usb 4-1: config 1 interface 105 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  129.791615][   T39] usb 4-1: config 1 interface 105 has no altsetting 0
[  129.850708][ T4011] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  129.908794][ T4032] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  129.922503][ T4032] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1)
[  129.938731][ T4032] FAT-fs (loop7): Filesystem has been set read-only
[  129.948670][ T4032] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1)
[  129.966974][   T39] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[  129.995067][ T4027] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011a39, chksum : 0xd4e5c97b, utbl_chksum : 0xe619d30d)
[  130.012437][ T4032] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1)
[  130.047989][   T39] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  130.076652][ T4032] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1)
[  130.086686][   T39] usb 4-1: Product: syz
[  130.091012][   T39] usb 4-1: Manufacturer: syz
[  130.105886][   T39] usb 4-1: SerialNumber: syz
[  130.155613][ T3243] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  130.213629][ T4036] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  130.285214][ T4036] fs-verity (loop5, inode 13): Unknown hash algorithm number: 3
[  130.416320][   T39] aqc111: probe of 4-1:1.105 failed with error -22
[  130.624219][   T39] usb 4-1: USB disconnect, device number 3
[  130.781520][ T4050] F2FS-fs (loop5): invalid crc value
[  130.822809][ T4073] netlink: 232 bytes leftover after parsing attributes in process `syz.1.1525'.
[  130.835507][ T4050] F2FS-fs (loop5): Found nat_bits in checkpoint
[  130.954273][ T4086] netlink: 4804 bytes leftover after parsing attributes in process `syz.1.1530'.
[  130.970268][ T4084] EXT4-fs (loop7): 1 truncate cleaned up
[  130.977895][ T4050] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  130.986897][ T4084] EXT4-fs (loop7): mounted filesystem without journal. Opts: bsddf,,errors=continue. Quota mode: none.
[  131.044963][ T1914] attempt to access beyond end of device
[  131.044963][ T1914] loop5: rw=2049, want=45104, limit=40427
[  131.312513][ T4104] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  131.668201][   T30] audit: type=1400 audit(2000000012.962:504): avc:  denied  { execmem } for  pid=4138 comm="syz.1.1554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  131.856241][  T311] usb 6-1: new full-speed USB device number 4 using dummy_hcd
[  132.000424][ T4176] set_capacity_and_notify: 10 callbacks suppressed
[  132.000438][ T4176] loop1: detected capacity change from 0 to 256
[  132.236324][  T311] usb 6-1: config index 0 descriptor too short (expected 164, got 36)
[  132.245560][  T311] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  132.259088][  T311] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  132.272717][  T311] usb 6-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00
[  132.285343][  T311] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  132.296053][  T311] usb 6-1: config 0 descriptor??
[  132.777821][  T311] logitech 0003:046D:C29C.0006: unknown main item tag 0x2
[  132.789762][  T311] logitech 0003:046D:C29C.0006: hidraw0: USB HID v0.00 Device [HID 046d:c29c] on usb-dummy_hcd.5-1/input0
[  132.828760][ T4195] loop4: detected capacity change from 0 to 256
[  132.868796][ T4195] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x190b464b, utbl_chksum : 0xe619d30d)
[  132.931154][   T30] audit: type=1400 audit(2000000014.222:505): avc:  denied  { getopt } for  pid=4196 comm="syz.1.1580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  133.176893][ T4219] loop7: detected capacity change from 0 to 256
[  133.196330][  T311] logitech 0003:046D:C29C.0006: no inputs found
[  133.225970][  T311] usb 6-1: USB disconnect, device number 4
[  133.240032][ T4221] loop3: detected capacity change from 0 to 512
[  133.284576][ T4219] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  133.343400][ T4203] loop4: detected capacity change from 0 to 40427
[  133.385762][   T30] audit: type=1400 audit(2000000014.672:506): avc:  denied  { create } for  pid=4222 comm="syz.7.1592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  133.410124][ T4223] loop7: detected capacity change from 0 to 256
[  133.421534][ T4203] F2FS-fs (loop4): invalid crc value
[  133.433132][   T30] audit: type=1400 audit(2000000014.672:507): avc:  denied  { getopt } for  pid=4222 comm="syz.7.1592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  133.467347][ T4203] F2FS-fs (loop4): Found nat_bits in checkpoint
[  133.506426][ T4223] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d)
[  133.545480][ T4224] fido_id[4224]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[  133.627974][ T4203] F2FS-fs (loop4): Start checkpoint disabled!
[  133.640820][ T4231] loop3: detected capacity change from 0 to 8192
[  133.651859][ T4203] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  133.781034][ T4241] loop7: detected capacity change from 0 to 128
[  133.799853][ T4244] syz.3.1601 uses obsolete (PF_INET,SOCK_PACKET)
[  133.821455][ T4241] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  133.928989][  T710] attempt to access beyond end of device
[  133.928989][  T710] loop4: rw=2049, want=40984, limit=40427
[  134.058226][ T4261] loop7: detected capacity change from 0 to 4096
[  134.065206][ T4263] loop3: detected capacity change from 0 to 512
[  134.108427][ T4261] EXT4-fs (loop7): Ignoring removed nobh option
[  134.137343][ T4261] EXT4-fs (loop7): Test dummy encryption mode enabled
[  134.166197][ T4261] EXT4-fs (loop7): Mount option "noacl" will be removed by 3.5
[  134.166197][ T4261] Contact linux-ext4@vger.kernel.org if you think we should keep it.
[  134.166197][ T4261] 
[  134.228779][ T4205] F2FS-fs (loop1): Wrong CP boundary, start(512) end(1536) blocks(0)
[  134.250422][ T4271] netlink: 'syz.4.1603': attribute type 1 has an invalid length.
[  134.286619][ T4205] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  134.311745][ T4261] EXT4-fs (loop7): Ignoring removed oldalloc option
[  134.324609][ T4205] F2FS-fs (loop1): invalid crc value
[  134.353558][ T4261] EXT4-fs (loop7): Mount option "nouser_xattr" will be removed by 3.5
[  134.353558][ T4261] Contact linux-ext4@vger.kernel.org if you think we should keep it.
[  134.353558][ T4261] 
[  134.398685][ T4205] F2FS-fs (loop1): Found nat_bits in checkpoint
[  134.434569][ T4261] EXT4-fs (loop7): mounted filesystem without journal. Opts: nobh,test_dummy_encryption=v1,inlinecrypt,journal_dev=0x0000000000000006,noacl,nombcache,minixdf,nodioread_nolock,errors=remount-ro,oldalloc,nolazytime,nouser_xattr,. Quota mode: writeback.
[  134.528089][ T4205] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  134.549027][ T4205] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  134.556725][   T30] audit: type=1400 audit(2000000015.842:508): avc:  denied  { create } for  pid=4294 comm="syz.3.1621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  134.638100][ T4295] EXT4-fs (loop3): write access unavailable, skipping orphan cleanup
[  134.656428][ T4295] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  134.772759][   T30] audit: type=1400 audit(2000000016.062:509): avc:  denied  { ioctl } for  pid=4302 comm="syz.4.1626" path="/dev/fuse" dev="devtmpfs" ino=91 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[  134.874307][ T4308] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  134.904525][ T4308] ext4 filesystem being mounted at /340/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  134.956986][ T4308] fscrypt (loop4, inode 12): Mutually exclusive encryption flags (0x14)
[  134.978058][ T4313] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  135.033294][ T4313] ext4 filesystem being mounted at /86/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  135.307635][ T4324] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  135.353007][ T4324] ext4 filesystem being mounted at /343/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  135.455455][ T4318] EXT4-fs error (device loop7): ext4_map_blocks:742: inode #15: comm syz.7.1629: lblock 0 mapped to illegal pblock 0 (length 6)
[  135.466808][ T4273] F2FS-fs (loop5): Segment count (31) mismatch with total segments from devices (0)
[  135.480364][ T4318] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117
[  135.505458][ T4330] tipc: New replicast peer: 127.0.0.1
[  135.511360][ T4318] EXT4-fs (loop7): This should not happen!! Data will be lost
[  135.511360][ T4318] 
[  135.523515][ T4330] tipc: Enabled bearer <udp:syz0>, priority 10
[  135.539842][ T4273] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  135.556349][ T4284] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set
[  135.568955][ T4273] F2FS-fs (loop5): invalid crc value
[  135.587055][ T4318] EXT4-fs error (device loop7): ext4_map_blocks:742: inode #15: block 8: comm syz.7.1629: lblock 8 mapped to illegal pblock 8 (length 8)
[  135.618056][ T4318] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  135.633796][ T4318] EXT4-fs (loop7): This should not happen!! Data will be lost
[  135.633796][ T4318] 
[  135.655556][ T4273] F2FS-fs (loop5): Found nat_bits in checkpoint
[  135.785945][   T43] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 2060 with max blocks 2048 with error 28
[  135.811104][ T4273] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  135.819935][ T4349] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1640'.
[  135.829923][   T43] EXT4-fs (loop7): This should not happen!! Data will be lost
[  135.829923][   T43] 
[  135.843064][ T4273] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4
[  135.856795][   T43] EXT4-fs (loop7): Total free blocks count 0
[  135.868483][   T30] audit: type=1400 audit(2000000017.162:510): avc:  denied  { mount } for  pid=4352 comm="syz.4.1644" name="/" dev="configfs" ino=13781 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[  135.944452][   T30] audit: type=1400 audit(2000000017.212:511): avc:  denied  { search } for  pid=4352 comm="syz.4.1644" name="/" dev="configfs" ino=13781 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  135.964070][   T43] EXT4-fs (loop7): Free/Dirty block details
[  135.978080][ T4273] F2FS-fs (loop5): f2fs_fill_dentries: corrupted namelen=24152, run fsck to fix.
[  135.997239][   T30] audit: type=1400 audit(2000000017.232:512): avc:  denied  { unmount } for  pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[  135.998500][   T43] EXT4-fs (loop7): free_blocks=0
[  136.030856][ T4273] F2FS-fs (loop5): checksum invalid, nid = 7, ino_of_node = 7, 32dd6215 vs. 1de10dc4
[  136.063912][   T43] EXT4-fs (loop7): dirty_blocks=14336
[  136.526244][   T39] tipc: Node number set to 2886997007
[  136.767541][   T30] audit: type=1400 audit(2000000018.062:513): avc:  denied  { remount } for  pid=4372 comm="syz.3.1653" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  136.841533][   T30] audit: type=1400 audit(2000000018.122:514): avc:  denied  { bind } for  pid=4393 comm="syz.7.1661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  137.045483][ T4397] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  137.418342][ T4435] set_capacity_and_notify: 11 callbacks suppressed
[  137.418362][ T4435] loop3: detected capacity change from 0 to 512
[  137.607108][ T4435] EXT4-fs (loop3): write access unavailable, skipping orphan cleanup
[  137.635519][ T4435] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpjquota=,errors=continue,noblock_validity,,errors=continue. Quota mode: none.
[  137.684993][ T4456] netem: change failed
[  137.733974][ T4435] EXT4-fs (loop3): Couldn't remount RDWR because of unprocessed orphan inode list.  Please umount/remount instead
[  137.875469][ T4480] loop7: detected capacity change from 0 to 1024
[  137.909145][ T4480] EXT4-fs (loop7): Ignoring removed bh option
[  137.956604][ T4480] EXT4-fs (loop7): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none.
[  138.032017][ T4498] loop3: detected capacity change from 0 to 512
[  138.189651][ T4509] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1711'.
[  138.313496][ T4519] loop3: detected capacity change from 0 to 256
[  138.344261][ T4519] exfat: Deprecated parameter 'utf8'
[  138.366219][ T4519] exfat: Deprecated parameter 'namecase'
[  138.372348][ T4519] exfat: Deprecated parameter 'namecase'
[  138.446183][ T4519] /dev/loop3: Can't open blockdev
[  138.600952][ T4537] loop3: detected capacity change from 0 to 512
[  138.912198][ T4563] loop3: detected capacity change from 0 to 512
[  138.970883][ T4565] loop4: detected capacity change from 0 to 512
[  138.981451][   T30] audit: type=1400 audit(2000000020.272:515): avc:  denied  { ioctl } for  pid=4566 comm="syz.5.1738" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  139.128019][ T4565] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  139.192535][ T4565] ext4 filesystem being mounted at /378/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  139.243578][ T4502] loop1: detected capacity change from 0 to 131072
[  139.265988][ T4502] F2FS-fs (loop1): Test dummy encryption mode enabled
[  139.303266][ T4502] F2FS-fs (loop1): invalid crc value
[  139.325398][ T4583] loop5: detected capacity change from 0 to 256
[  139.332893][ T4502] F2FS-fs (loop1): Found nat_bits in checkpoint
[  139.406298][ T4502] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  139.436384][ T4583] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  139.487326][ T4583] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  139.745470][ T4600] loop5: detected capacity change from 0 to 512
[  139.826656][ T4606] binder: BINDER_SET_CONTEXT_MGR already set
[  139.848377][ T4606] binder: 4604:4606 ioctl 4018620d 200000000080 returned -16
[  139.874350][ T4600] EXT4-fs (loop5): 1 truncate cleaned up
[  139.886484][   T30] audit: type=1400 audit(2000000021.182:516): avc:  denied  { map } for  pid=4609 comm="syz.4.1757" path="socket:[32723]" dev="sockfs" ino=32723 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  139.926031][ T4600] EXT4-fs (loop5): mounted filesystem without journal. Opts: bsddf,,errors=continue. Quota mode: none.
[  140.021710][ T4600] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.1750: invalid indirect mapped block 234881024 (level 0)
[  140.031121][   T30] audit: type=1400 audit(2000000021.202:517): avc:  denied  { read } for  pid=4609 comm="syz.4.1757" path="socket:[32723]" dev="sockfs" ino=32723 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  140.106211][   T30] audit: type=1400 audit(2000000021.312:518): avc:  denied  { map } for  pid=4604 comm="syz.3.1754" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  140.166293][ T4635] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1766'.
[  140.175627][   T30] audit: type=1400 audit(2000000021.352:519): avc:  denied  { bind } for  pid=4618 comm="syz.7.1759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  140.221169][   T30] audit: type=1400 audit(2000000021.452:520): avc:  denied  { write } for  pid=4633 comm="syz.3.1766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  140.262638][   T30] audit: type=1400 audit(2000000021.452:521): avc:  denied  { nlmsg_write } for  pid=4633 comm="syz.3.1766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  140.678704][ T4689] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1789'.
[  141.112928][ T4707] SELinux: failed to load policy
[  141.146880][   T30] audit: type=1400 audit(2000000022.442:522): avc:  denied  { ioctl } for  pid=4710 comm="syz.3.1800" path="socket:[33490]" dev="sockfs" ino=33490 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  141.333011][ T4723] netlink: 96 bytes leftover after parsing attributes in process `syz.7.1806'.
[  141.506236][  T290] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  141.878574][  T290] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  141.890330][  T290] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  141.900969][  T290] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  141.914326][  T290] usb 4-1: New USB device found, idVendor=044f, idProduct=b324, bcdDevice= 0.00
[  141.923649][  T290] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  141.974817][  T290] usb 4-1: config 0 descriptor??
[  142.607374][  T290] thrustmaster 0003:044F:B324.0007: item 0 4 0 8 parsing failed
[  142.622900][  T290] thrustmaster 0003:044F:B324.0007: parse failed
[  142.635467][  T290] thrustmaster: probe of 0003:044F:B324.0007 failed with error -22
[  142.702717][  T710] Bluetooth: hci0: Frame reassembly failed (-84)
[  142.814529][ T1635] usb 4-1: USB disconnect, device number 4
[  142.985969][ T4760] set_capacity_and_notify: 4 callbacks suppressed
[  142.985988][ T4760] loop4: detected capacity change from 0 to 512
[  143.031231][ T4760] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -13
[  143.041497][ T4760] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.1822: inode #15: comm syz.4.1822: iget: illegal inode #
[  143.060220][ T4760] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.1822: couldn't read orphan inode 15 (err -117)
[  143.073481][ T4760] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,jqfmt=vfsv0,min_batch_time=0x00000000000003ff,noload,grpjquota=.,noblock_validity,resgid=0x0000000000000000,inode_readahead_blks=0x0000000000008000,errors=continue,,errors=continue. Quota mode: writeback.
[  143.110666][ T4764] loop1: detected capacity change from 0 to 256
[  143.119478][ T4760] EXT4-fs error (device loop4): ext4_lookup:1858: comm syz.4.1822: inode #15: comm syz.4.1822: iget: illegal inode #
[  143.164867][ T4764] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  143.390115][ T4792] loop3: detected capacity change from 0 to 256
[  143.492082][ T4798] loop3: detected capacity change from 0 to 512
[  143.512205][   T30] audit: type=1400 audit(2000000024.802:523): avc:  denied  { watch watch_reads } for  pid=4799 comm="syz.1.1841" path="/278/cgroup" dev="tmpfs" ino=1491 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=lnk_file permissive=1
[  143.641429][ T4809] loop5: detected capacity change from 0 to 2048
[  143.705118][ T4809] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  143.794422][ T4818] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1849'.
[  143.816013][ T4816] loop4: detected capacity change from 0 to 8192
[  145.069613][   T58] Bluetooth: hci0: command 0x1003 tx timeout
[  145.075720][ T1873] Bluetooth: hci0: sending frame failed (-49)
[  145.135496][ T1642]  loop4: p4 < >
[  145.141316][ T4816]  loop4: p4 < >
[  145.177731][ T4831] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  145.231690][ T4835] loop5: detected capacity change from 0 to 4096
[  145.275094][ T4847] loop3: detected capacity change from 0 to 256
[  145.285276][ T1642] udevd[1642]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory
[  145.295361][ T4835] EXT4-fs (loop5): Test dummy encryption mode enabled
[  145.304587][ T4835] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled
[  145.328438][ T4835] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec098, mo2=0003]
[  145.336726][ T4835] System zones: 0-5
[  145.341706][ T4835] EXT4-fs (loop5): mounted filesystem without journal. Opts: debug,test_dummy_encryption=v1,inlinecrypt,delalloc,noinit_itable,nogrpid,minixdf,nodioread_nolock,dioread_lock,jqfmt=vfsv0,usrquota,max_batch_time=0x0000000000000000,,errors=continue. Quota mode: writeback.
[  145.417221][ T1642] udevd[1642]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory
[  145.446849][ T4855] netlink: 4324 bytes leftover after parsing attributes in process `syz.5.1865'.
[  145.587434][ T4868] netem: change failed
[  145.663990][ T4877] loop5: detected capacity change from 0 to 512
[  145.699108][ T4880] loop3: detected capacity change from 0 to 512
[  145.709822][ T4877] EXT4-fs (loop5): Ignoring removed oldalloc option
[  145.729020][ T4877] EXT4-fs (loop5): mounted filesystem without journal. Opts: lazytime,acl,oldalloc,delalloc,,errors=continue. Quota mode: writeback.
[  145.790810][ T4881] EXT4-fs (loop4): Test dummy encryption mode enabled
[  145.807590][ T4881] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled
[  145.847675][ T4881] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec098, mo2=0003]
[  145.856253][ T4881] System zones: 0-5
[  145.861899][ T4881] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,test_dummy_encryption=v1,inlinecrypt,delalloc,noinit_itable,nogrpid,minixdf,nodioread_nolock,dioread_lock,jqfmt=vfsv0,usrquota,max_batch_time=0x0000000000000000,,errors=continue. Quota mode: writeback.
[  146.058588][ T4897] FAT-fs (loop4): error, corrupted file size (i_pos 53, 8960)
[  146.089659][ T4897] FAT-fs (loop4): error, corrupted file size (i_pos 53, 8960)
[  146.169716][ T4899] F2FS-fs (loop5): Corrupted extension count (64 + 1 > 64)
[  146.177292][ T4899] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  146.186668][ T4899] F2FS-fs (loop5): invalid crc value
[  146.192984][ T4899] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  146.226187][ T1635] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  146.249375][ T4899] F2FS-fs (loop5): Start checkpoint disabled!
[  146.256615][ T4899] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  146.263828][ T4899] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[  146.288000][ T4908] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  146.313160][    T8] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  146.327143][ T4909] attempt to access beyond end of device
[  146.327143][ T4909] loop5: rw=1, want=77960, limit=40427
[  146.391984][ T4915] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1892'.
[  146.494215][ T4899] attempt to access beyond end of device
[  146.494215][ T4899] loop5: rw=2049, want=80016, limit=40427
[  146.551587][ T4899] attempt to access beyond end of device
[  146.551587][ T4899] loop5: rw=2049, want=81920, limit=40427
[  146.570621][ T4899] attempt to access beyond end of device
[  146.570621][ T4899] loop5: rw=2049, want=72256, limit=40427
[  146.588595][ T4899] attempt to access beyond end of device
[  146.588595][ T4899] loop5: rw=2049, want=73728, limit=40427
[  146.609049][ T4899] attempt to access beyond end of device
[  146.609049][ T4899] loop5: rw=2049, want=65536, limit=40427
[  146.620482][ T1635] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  146.630921][ T4899] attempt to access beyond end of device
[  146.630921][ T4899] loop5: rw=2049, want=73736, limit=40427
[  146.643352][ T1635] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  146.653319][ T4899] attempt to access beyond end of device
[  146.653319][ T4899] loop5: rw=2049, want=73744, limit=40427
[  146.664910][ T4899] attempt to access beyond end of device
[  146.664910][ T4899] loop5: rw=2049, want=73752, limit=40427
[  146.676461][ T4899] attempt to access beyond end of device
[  146.676461][ T4899] loop5: rw=2049, want=73760, limit=40427
[  146.746308][ T1635] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  146.765622][ T1635] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67
[  146.773956][ T1635] usb 2-1: SerialNumber: syz
[  147.066949][ T1635] usb 2-1: 0:2 : does not exist
[  147.086237][ T1635] usb 2-1: USB disconnect, device number 7
[  147.166229][  T311] Bluetooth: hci0: command 0x1001 tx timeout
[  147.172440][ T1873] Bluetooth: hci0: sending frame failed (-49)
[  147.587481][   T30] audit: type=1400 audit(2000000028.882:524): avc:  denied  { mounton } for  pid=4969 comm="syz.1.1917" path="/284/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1
[  149.080649][ T4976] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1921'.
[  150.066216][  T290] Bluetooth: hci0: command 0x1009 tx timeout
[  150.134321][   T30] audit: type=1400 audit(2000000031.422:525): avc:  denied  { remount } for  pid=4988 comm="syz.1.1919" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  150.502978][ T5021] set_capacity_and_notify: 9 callbacks suppressed
[  150.502996][ T5021] loop5: detected capacity change from 0 to 512
[  150.511860][ T5006] loop3: detected capacity change from 0 to 40427
[  150.551004][ T5031] loop4: detected capacity change from 0 to 256
[  150.579111][ T5021] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback.
[  150.592301][ T5031] exfat: Deprecated parameter 'namecase'
[  150.598824][ T5031] exfat: Deprecated parameter 'namecase'
[  150.603493][ T5021] ext4 filesystem being mounted at /222/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  150.625459][ T5031] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d)
[  150.717510][ T5021] syz.5.1940 (5021) used greatest stack depth: 20104 bytes left
[  150.800340][   T30] audit: type=1400 audit(2000000032.092:526): avc:  denied  { audit_control } for  pid=5043 comm="syz.4.1949" capability=30  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  150.928888][ T5058] loop5: detected capacity change from 0 to 256
[  150.972170][ T5058] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  150.972208][ T5063] loop3: detected capacity change from 0 to 256
[  151.002015][ T5058] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  151.024334][ T5058] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  151.036434][ T5067] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF
[  151.066062][ T5058] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 198, start 00000001)
[  151.107993][ T5069] loop1: detected capacity change from 0 to 8192
[  151.127717][ T5069] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  151.143993][ T5063] binfmt_misc: register: failed to install interpreter file ./file0
[  151.208705][ T5083] loop4: detected capacity change from 0 to 16
[  151.261645][ T5083] erofs: (device loop4): mounted with root inode @ nid 36.
[  151.263016][ T5093] input: syz0 as /devices/virtual/input/input9
[  151.477663][ T5111] loop4: detected capacity change from 0 to 256
[  151.517730][ T5115] tmpfs: Bad value for 'uid'
[  151.523161][   T30] audit: type=1400 audit(2000000032.812:527): avc:  denied  { getopt } for  pid=5114 comm="syz.3.1980" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  151.641785][ T5130] loop4: detected capacity change from 0 to 512
[  151.706738][ T5134] binder: BC_ATTEMPT_ACQUIRE not supported
[  151.713769][ T5134] binder: 5131:5134 ioctl c0306201 2000000001c0 returned -22
[  151.835960][ T5148] loop5: detected capacity change from 0 to 512
[  151.935750][ T5161] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2002'.
[  151.970528][ T5163] netlink: 384 bytes leftover after parsing attributes in process `syz.5.2000'.
[  151.999690][ T5168] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2002'.
[  152.283899][ T5205] syzkaller1: tun_chr_ioctl cmd 2147767517
[  152.299664][ T5199] /dev/loop3: Can't open blockdev
[  152.382057][ T5209] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  152.402631][ T5209] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2
[  152.412179][ T5209] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.2022: invalid indirect mapped block 2683928664 (level 1)
[  152.427984][ T5209] EXT4-fs (loop5): 1 truncate cleaned up
[  152.433921][ T5209] EXT4-fs (loop5): mounted filesystem without journal. Opts: noblock_validity,dioread_nolock,init_itable=0x0000000000000b8f,jqfmt=vfsv1,inlinecrypt,usrjquota=.sb=0x0000000000000007,nodiscard,jqfmt=vfsv0,noload,debug_want_extra_isize=0x0000000000000006,noload,,,errors=continue. Quota mode: writeback.
[  152.468815][ T5209] EXT4-fs error (device loop5): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.5.2022: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0
[  152.497551][ T5219] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,max_dir_size_kb=0x0000000000000001,dioread_lock,norecovery,discard,lazytime,journal_dev=0x0000000000000002,usrquota,noauto_da_alloc,,errors=continue. Quota mode: writeback.
[  152.543052][   T30] audit: type=1400 audit(2000000033.832:528): avc:  denied  { link } for  pid=5218 comm="syz.4.2028" name="file0" dev="incremental-fs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  152.575108][   T30] audit: type=1400 audit(2000000033.862:529): avc:  denied  { write } for  pid=5229 comm="syz.1.2031" name="file0" dev="tmpfs" ino=1631 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  152.618575][  T289] EXT4-fs error (device loop4): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 11
[  152.647552][  T289] EXT4-fs error (device loop4): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 11
[  152.749587][ T5233] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  152.756395][  T311] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  152.783722][ T5233] ext4 filesystem being mounted at /243/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  152.994663][ T5242] bridge0: port 1(bridge_slave_0) entered blocking state
[  153.008674][ T5242] bridge0: port 1(bridge_slave_0) entered disabled state
[  153.034400][ T5242] device bridge_slave_0 entered promiscuous mode
[  153.046251][  T311] usb 4-1: Using ep0 maxpacket: 8
[  153.046513][ T5242] bridge0: port 2(bridge_slave_1) entered blocking state
[  153.064452][ T5242] bridge0: port 2(bridge_slave_1) entered disabled state
[  153.079390][ T5242] device bridge_slave_1 entered promiscuous mode
[  153.145975][ T5244] F2FS-fs (loop1): Wrong segment_count / block_count (64 > 16384)
[  153.166348][  T311] usb 4-1: config 179 has an invalid interface number: 65 but max is 0
[  153.175534][  T311] usb 4-1: config 179 has no interface number 0
[  153.185067][ T5244] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  153.188871][  T311] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  153.206656][ T5244] F2FS-fs (loop1): Found nat_bits in checkpoint
[  153.216200][  T311] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  153.246314][  T311] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  153.261446][ T5242] bridge0: port 2(bridge_slave_1) entered blocking state
[  153.270980][ T5242] bridge0: port 2(bridge_slave_1) entered forwarding state
[  153.279247][ T5242] bridge0: port 1(bridge_slave_0) entered blocking state
[  153.282670][ T5244] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  153.286931][ T5242] bridge0: port 1(bridge_slave_0) entered forwarding state
[  153.287362][  T311] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  153.296350][ T5244] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  153.333501][  T311] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  153.347312][   T43] device bridge_slave_1 left promiscuous mode
[  153.349649][  T311] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  153.369538][  T311] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  153.381522][   T43] bridge0: port 2(bridge_slave_1) entered disabled state
[  153.389747][   T43] device bridge_slave_0 left promiscuous mode
[  153.396448][ T5228] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  153.407334][   T43] bridge0: port 1(bridge_slave_0) entered disabled state
[  153.443671][   T43] device veth1_macvtap left promiscuous mode
[  153.452810][   T43] device veth0_vlan left promiscuous mode
[  153.612322][  T498] bridge0: port 1(bridge_slave_0) entered disabled state
[  153.624156][  T498] bridge0: port 2(bridge_slave_1) entered disabled state
[  153.637533][ T5257] netlink: 87 bytes leftover after parsing attributes in process `syz.7.2042'.
[  153.687549][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  153.700951][   T58] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input10
[  153.718392][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  153.737021][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  153.746635][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  153.757487][    T8] bridge0: port 1(bridge_slave_0) entered blocking state
[  153.766987][    T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[  153.781439][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  153.800712][ T5267] FAT-fs (loop1): Directory bread(block 64) failed
[  153.809635][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  153.821275][ T5267] FAT-fs (loop1): Directory bread(block 65) failed
[  153.830564][    T8] bridge0: port 2(bridge_slave_1) entered blocking state
[  153.843021][    T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[  153.855820][ T5267] FAT-fs (loop1): Directory bread(block 66) failed
[  153.873796][ T5267] FAT-fs (loop1): Directory bread(block 67) failed
[  153.886327][   T58] usb 4-1: USB disconnect, device number 5
[  153.906173][    C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  153.917074][   T58] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  153.928947][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  153.947316][ T5267] FAT-fs (loop1): Directory bread(block 68) failed
[  153.963824][ T5267] FAT-fs (loop1): Directory bread(block 69) failed
[  153.974310][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  153.984985][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  153.995012][ T5267] FAT-fs (loop1): Directory bread(block 70) failed
[  154.003414][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  154.012113][ T5267] FAT-fs (loop1): Directory bread(block 71) failed
[  154.021844][ T5267] FAT-fs (loop1): Directory bread(block 72) failed
[  154.029370][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  154.038885][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  154.047986][ T5267] FAT-fs (loop1): Directory bread(block 73) failed
[  154.061395][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  154.085030][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  154.100852][ T5267] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2046'.
[  154.112533][ T5242] device veth0_vlan entered promiscuous mode
[  154.121393][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  154.131802][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  154.164470][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  154.175205][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  154.186800][ T5242] device veth1_macvtap entered promiscuous mode
[  154.220594][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  154.235278][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  154.254814][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  154.283932][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  154.323775][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  154.614740][ T5311] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5311 comm=syz.1.2066
[  154.917435][ T5323] EXT4-fs (loop1): Ignoring removed bh option
[  154.923801][ T5323] EXT4-fs (loop1): Ignoring removed bh option
[  154.960799][ T5323] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,barrier=0x0000000000000004,nolazytime,bh,min_batch_time=0x0000000000000008,errors=remount-ro,stripe=0x0000000000000005,bh,init_itable,. Quota mode: none.
[  155.003419][ T5323] EXT4-fs error (device loop1): ext4_find_dest_de:2115: inode #12: block 7: comm syz.1.2072: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0
[  155.023366][ T5271] F2FS-fs (loop5): Wrong CP boundary, start(512) end(1536) blocks(0)
[  155.033826][ T5271] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  155.047168][ T5271] F2FS-fs (loop5): invalid crc value
[  155.077968][ T5323] EXT4-fs (loop1): Remounting filesystem read-only
[  155.097335][ T5271] F2FS-fs (loop5): Found nat_bits in checkpoint
[  155.169234][ T5271] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  155.179999][ T5271] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4
[  155.245833][ T5271] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  155.283452][ T5271] F2FS-fs (loop5): checksum invalid, nid = 8, ino_of_node = 8, 69acdb87 vs. 52f78b0b
[  155.306237][ T5339] input: syz1 as /devices/virtual/input/input11
[  155.364924][ T5343] binder: 5342:5343 ioctl d000943d 0 returned -22
[  155.448037][ T5352] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  155.555029][ T5365] set_capacity_and_notify: 13 callbacks suppressed
[  155.555050][ T5365] loop1: detected capacity change from 0 to 256
[  155.557111][ T5357] /dev/loop3: Can't open blockdev
[  155.633987][ T5365] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0xda1520ab, utbl_chksum : 0xe619d30d)
[  155.690232][ T5365] exFAT-fs (loop1): error, invalid access to FAT free cluster (entry 0x00000008)
[  155.714322][ T5374] loop3: detected capacity change from 0 to 128
[  155.744542][ T5365] exFAT-fs (loop1): Filesystem has been set read-only
[  155.765823][ T5365] exFAT-fs (loop1): error, failed to bmap (inode : ffff88812915b490 iblock : 8, err : -5)
[  155.796997][ T5365] exFAT-fs (loop1): error, invalid access to FAT free cluster (entry 0x00000008)
[  155.818617][ T5375] exFAT-fs (loop1): error, invalid access to FAT free cluster (entry 0x00000008)
[  155.838730][ T5375] exFAT-fs (loop1): error, failed to bmap (inode : ffff88812915b490 iblock : 8, err : -5)
[  155.872617][ T5375] exFAT-fs (loop1): error, invalid access to FAT free cluster (entry 0x00000008)
[  156.056197][  T290] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  156.205021][   T30] audit: type=1400 audit(2000000037.492:530): avc:  denied  { getopt } for  pid=5403 comm="syz.5.2105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  156.326246][  T290] usb 4-1: Using ep0 maxpacket: 8
[  156.357608][   T30] audit: type=1400 audit(2000000037.652:531): avc:  denied  { write } for  pid=5409 comm="syz.1.2108" name="vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  156.412615][   T30] audit: type=1400 audit(2000000037.652:532): avc:  denied  { open } for  pid=5409 comm="syz.1.2108" path="/dev/vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  156.447028][ T5412] loop1: detected capacity change from 0 to 256
[  156.536236][  T290] usb 4-1: unable to get BOS descriptor or descriptor too short
[  156.580907][   T30] audit: type=1400 audit(2000000037.872:533): avc:  denied  { name_bind } for  pid=5421 comm="syz.5.2115" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1
[  156.606206][   T30] audit: type=1400 audit(2000000037.892:534): avc:  denied  { ioctl } for  pid=5376 comm="syz.3.2095" path="/dev/raw-gadget" dev="devtmpfs" ino=254 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  156.647615][  T290] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  156.660420][  T290] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  156.697548][   T30] audit: type=1400 audit(2000000037.992:535): avc:  denied  { write } for  pid=5427 comm="syz.5.2117" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1
[  156.761819][   T30] audit: type=1400 audit(2000000038.052:536): avc:  denied  { read write } for  pid=5432 comm="syz.8.2119" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  156.786210][   T30] audit: type=1400 audit(2000000038.052:537): avc:  denied  { open } for  pid=5432 comm="syz.8.2119" path="/dev/raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  156.883064][  T290] usb 4-1: New USB device found, idVendor=2b73, idProduct=0013, bcdDevice= 0.40
[  156.895640][  T290] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  156.905049][  T290] usb 4-1: Product: syz
[  156.912038][  T290] usb 4-1: Manufacturer: syz
[  156.917215][  T290] usb 4-1: SerialNumber: syz
[  157.011166][ T5449] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  157.026203][   T58] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  157.200601][ T5457] loop5: detected capacity change from 0 to 40427
[  157.212055][ T5457] F2FS-fs (loop5): invalid crc value
[  157.219917][ T5457] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  157.249770][ T5457] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  157.269541][ T5463] loop1: detected capacity change from 0 to 16
[  157.306255][  T290] usb 4-1: 0:1 : does not exist
[  157.325634][ T5463] erofs: (device loop1): mounted with root inode @ nid 36.
[  157.338241][  T290] snd-usb-audio: probe of 4-1:1.0 failed with error -71
[  157.346435][  T290] usb 4-1: USB disconnect, device number 6
[  157.386286][   T58] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  157.412045][   T58] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  157.422465][   T58] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0
[  157.438507][   T58] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  157.578255][  T710] handle_bad_sector: 2535 callbacks suppressed
[  157.578272][  T710] attempt to access beyond end of device
[  157.578272][  T710] loop5: rw=2049, want=45104, limit=40427
[  157.598984][ T5457] F2FS-fs (loop5): Start checkpoint disabled!
[  157.616367][   T58] usb 9-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00
[  157.625910][   T58] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  157.634586][   T58] usb 9-1: Product: syz
[  157.641888][   T58] usb 9-1: Manufacturer: syz
[  157.648257][   T58] usb 9-1: SerialNumber: syz
[  157.705209][   T58] usbserial_generic 9-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes.
[  157.724441][   T58] usbserial_generic 9-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver.
[  157.736044][   T58] usbserial_generic 9-1:1.0: generic converter detected
[  157.744855][   T58] usb 9-1: generic converter now attached to ttyUSB0
[  157.801048][ T5482] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2138'.
[  157.820237][ T5482] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2138'.
[  157.924648][   T58] usb 9-1: USB disconnect, device number 2
[  157.945766][   T58] generic ttyUSB0: generic converter now disconnected from ttyUSB0
[  157.968850][   T58] usbserial_generic 9-1:1.0: device disconnected
[  158.053655][ T5498] loop5: detected capacity change from 0 to 16
[  158.127020][ T5488] loop3: detected capacity change from 0 to 40427
[  158.160473][ T5498] erofs: (device loop5): mounted with root inode @ nid 36.
[  158.508957][ T5516] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2152'.
[  158.530540][ T5516] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2152'.
[  158.546084][ T5504] loop1: detected capacity change from 0 to 40427
[  158.570744][ T5504] F2FS-fs (loop1): invalid crc value
[  158.603135][ T5488] loop3: detected capacity change from 0 to 40427
[  158.638517][ T5518] loop8: detected capacity change from 0 to 8192
[  158.644651][ T5504] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  158.665410][ T5518] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  158.726471][ T5525] netlink: 'syz.3.2155': attribute type 16 has an invalid length.
[  158.743962][ T5504] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  158.872162][ T5530] exFAT-fs (loop8): failed to load upcase table (idx : 0x0001207b, chksum : 0x1e861e4d, utbl_chksum : 0xe619d30d)
[  159.089966][ T5539] exFAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  159.141156][ T5539] exFAT-fs (loop8): Medium has reported failures. Some data may be lost.
[  159.151377][ T5544] EXT4-fs (loop5): mounted filesystem without journal. Opts: noauto_da_alloc,max_dir_size_kb=0x0000000000000001,dioread_lock,norecovery,discard,lazytime,journal_dev=0x0000000000000002,usrquota,noauto_da_alloc,,errors=continue. Quota mode: writeback.
[  159.199813][ T5539] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  159.325287][ T1914] EXT4-fs error (device loop5): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 11
[  159.336306][ T1635] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  159.349877][ T1914] EXT4-fs error (device loop5): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 11
[  159.362930][  T710] attempt to access beyond end of device
[  159.362930][  T710] loop1: rw=2049, want=45104, limit=40427
[  159.381494][ T5504] F2FS-fs (loop1): Start checkpoint disabled!
[  159.436536][ T5555] netlink: 260 bytes leftover after parsing attributes in process `syz.8.2168'.
[  159.445928][ T5555] netlink: 'syz.8.2168': attribute type 1 has an invalid length.
[  159.454235][ T5555] netlink: 76 bytes leftover after parsing attributes in process `syz.8.2168'.
[  159.464974][ T5555] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2168'.
[  159.648613][   T30] audit: type=1400 audit(2000000040.942:538): avc:  denied  { module_request } for  pid=5570 comm="syz-executor" kmod="netdev-nr9" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  159.693494][ T5574] kernel profiling enabled (shift: 9)
[  159.706211][ T1635] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  159.721209][ T1635] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  159.749446][ T1635] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  159.783427][ T5570] bridge0: port 1(bridge_slave_0) entered blocking state
[  159.790738][ T5570] bridge0: port 1(bridge_slave_0) entered disabled state
[  159.800606][ T5570] device bridge_slave_0 entered promiscuous mode
[  159.810654][ T5570] bridge0: port 2(bridge_slave_1) entered blocking state
[  159.818720][ T5570] bridge0: port 2(bridge_slave_1) entered disabled state
[  159.826954][ T5570] device bridge_slave_1 entered promiscuous mode
[  159.908799][ T5570] bridge0: port 2(bridge_slave_1) entered blocking state
[  159.916961][ T5570] bridge0: port 2(bridge_slave_1) entered forwarding state
[  159.925130][ T5570] bridge0: port 1(bridge_slave_0) entered blocking state
[  159.932409][ T5570] bridge0: port 1(bridge_slave_0) entered forwarding state
[  159.940405][ T1635] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  159.955446][ T1635] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  159.964176][ T1635] usb 4-1: Product: syz
[  159.984609][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  159.986355][ T1635] usb 4-1: Manufacturer: syz
[  159.997163][ T1635] usb 4-1: SerialNumber: syz
[  160.002274][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[  160.010733][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[  160.032137][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  160.041042][    T8] bridge0: port 1(bridge_slave_0) entered blocking state
[  160.048344][    T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[  160.058584][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  160.067211][    T8] bridge0: port 2(bridge_slave_1) entered blocking state
[  160.074683][    T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[  160.093498][  T710] device bridge_slave_1 left promiscuous mode
[  160.100440][  T710] bridge0: port 2(bridge_slave_1) entered disabled state
[  160.108813][  T710] device bridge_slave_0 left promiscuous mode
[  160.115539][  T710] bridge0: port 1(bridge_slave_0) entered disabled state
[  160.125507][  T710] device veth1_macvtap left promiscuous mode
[  160.132313][  T710] device veth0_vlan left promiscuous mode
[  160.209617][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  160.217861][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  160.233113][ T5570] device veth0_vlan entered promiscuous mode
[  160.240602][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  160.249684][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  160.258741][ T1635] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  160.261869][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  160.280275][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  160.295917][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  160.306504][ T5570] device veth1_macvtap entered promiscuous mode
[  160.339180][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  160.365081][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  160.476847][   T30] audit: type=1400 audit(2000000041.772:539): avc:  denied  { ioctl } for  pid=5542 comm="syz.3.2164" path="/dev/usb/lp0" dev="devtmpfs" ino=1632 ioctlcmd=0x604 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1
[  160.502635][   T58] usb 4-1: USB disconnect, device number 7
[  160.526155][   T58] usblp0: removed
[  160.599634][ T5610] netlink: 'syz.8.2192': attribute type 4 has an invalid length.
[  160.641555][ T5610] netlink: 'syz.8.2192': attribute type 4 has an invalid length.
[  160.835866][ T5608] set_capacity_and_notify: 4 callbacks suppressed
[  160.835883][ T5608] loop1: detected capacity change from 0 to 40427
[  160.855247][ T5608] F2FS-fs (loop1): Corrupted extension count (64 + 1 > 64)
[  160.863353][ T5608] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  160.880620][ T5608] F2FS-fs (loop1): invalid crc value
[  160.892681][ T5608] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  160.961099][ T5608] F2FS-fs (loop1): Start checkpoint disabled!
[  160.976529][ T5608] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  160.983962][ T5608] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  161.212394][ T5645] loop1: detected capacity change from 0 to 1024
[  161.318428][ T5645] EXT4-fs (loop1): Ignoring removed orlov option
[  161.351180][ T5645] EXT4-fs (loop1): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none.
[  161.395150][ T5656] loop3: detected capacity change from 0 to 512
[  161.549825][ T5675] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  161.581132][ T5678] loop7: detected capacity change from 0 to 256
[  161.611600][ T5683] loop9: detected capacity change from 0 to 256
[  161.628937][ T5685] loop3: detected capacity change from 0 to 1024
[  161.638736][ T5688] loop1: detected capacity change from 0 to 512
[  161.648137][ T5678] exfat: Deprecated parameter 'utf8'
[  161.660797][ T5691] loop8: detected capacity change from 0 to 512
[  161.672215][ T5678] exfat: Deprecated parameter 'namecase'
[  161.678432][ T5678] exfat: Deprecated parameter 'namecase'
[  161.684437][ T5678] exfat: Deprecated parameter 'utf8'
[  161.694823][ T5678] exFAT-fs (loop7): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d)
[  161.698223][ T5688] EXT4-fs error (device loop1): ext4_orphan_get:1406: inode #15: comm syz.1.2227: iget: bad i_size value: 38620345925642
[  161.719982][ T5691] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  161.733162][ T5688] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.2227: couldn't read orphan inode 15 (err -117)
[  161.751289][ T5688] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  161.765425][   T30] kauditd_printk_skb: 6 callbacks suppressed
[  161.765441][   T30] audit: type=1400 audit(2000000043.052:546): avc:  denied  { map } for  pid=5687 comm="syz.1.2227" path="/367/file0/cpuset.effective_mems" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  161.815183][ T5691] FAT-fs (loop8): error, fat_free_clusters: deleting FAT entry beyond EOF
[  161.892723][ T5708] netlink: 'syz.9.2236': attribute type 1 has an invalid length.
[  161.900667][ T5708] netlink: 5696 bytes leftover after parsing attributes in process `syz.9.2236'.
[  161.915610][ T5710] loop8: detected capacity change from 0 to 1024
[  161.959411][ T5718] netlink: 'syz.1.2241': attribute type 4 has an invalid length.
[  161.968373][ T5721] loop7: detected capacity change from 0 to 256
[  161.978922][ T5718] netlink: 'syz.1.2241': attribute type 4 has an invalid length.
[  161.986804][ T5710] EXT4-fs (loop8): Ignoring removed bh option
[  162.024180][   T30] audit: type=1400 audit(2000000043.312:547): avc:  denied  { mounton } for  pid=5725 comm="syz.9.2244" path="/12/file0" dev="cgroup" ino=997 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1
[  162.024197][ T5726] tmpfs: Unknown parameter 'permit_directio'
[  162.028531][ T5726] cgroup: noprefix used incorrectly
[  162.067556][ T5710] EXT4-fs (loop8): mounted filesystem without journal. Opts: norecovery,min_batch_time=0x000000007fffffff,barrier=0x0000000000000004,quota,debug_want_extra_isize=0x0000000000000080,errors=continue,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: writeback.
[  162.104926][ T5710] EXT4-fs (loop8): shut down requested (2)
[  162.114082][ T5710] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop8 ino=16
[  162.126931][ T1635] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  162.130938][   T30] audit: type=1400 audit(2000000043.412:548): avc:  denied  { search } for  pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  162.174840][ T5710] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop8 ino=16
[  162.184255][ T5710] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop8 ino=16
[  162.338165][   T30] audit: type=1400 audit(2000000043.632:549): avc:  denied  { mounton } for  pid=5739 comm="syz.8.2250" path="/proc/94/net/netfilter" dev="proc" ino=4026532631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=dir permissive=1
[  162.442310][ T5754] netpci0: tun_chr_ioctl cmd 1074025676
[  162.448312][ T5754] netpci0: owner set to 60928
[  162.576213][ T1635] usb 4-1: unable to get BOS descriptor or descriptor too short
[  162.579945][ T5769] exfat: Deprecated parameter 'utf8'
[  162.592764][ T5769] exfat: Deprecated parameter 'namecase'
[  162.636856][ T5775] FAT-fs (loop8): Unrecognized mount option "s€'n=mixed" or missing value
[  162.649471][ T5769] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[  162.667258][ T1635] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0xD has invalid maxpacket 1023, setting to 64
[  162.702474][ T5779] xt_hashlimit: size too large, truncated to 1048576
[  162.822894][ T5791] tap0: tun_chr_ioctl cmd 35111
[  162.846269][ T1635] usb 4-1: New USB device found, idVendor=0582, idProduct=000c, bcdDevice= 0.40
[  162.857131][ T1635] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  162.865278][ T1635] usb 4-1: Product: syz
[  162.869875][ T1635] usb 4-1: Manufacturer: syz
[  162.874783][ T1635] usb 4-1: SerialNumber: syz
[  162.967873][   T30] audit: type=1400 audit(2000000044.262:550): avc:  denied  { append } for  pid=5798 comm="syz.9.2277" name="mtrr" dev="proc" ino=4026532003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1
[  163.540380][ T5819] F2FS-fs (loop1): invalid crc value
[  163.550352][ T5819] F2FS-fs (loop1): Found nat_bits in checkpoint
[  163.598956][ T5819] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  163.778804][ T1635] usb 4-1: USB disconnect, device number 8
[  163.814440][ T5848] EXT4-fs (loop9): orphan cleanup on readonly fs
[  163.822260][ T5848] EXT4-fs (loop9): 1 orphan inode deleted
[  163.829113][ T5848] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  163.876087][   T30] audit: type=1400 audit(2000000045.162:551): avc:  denied  { mounton } for  pid=5850 comm="syz.1.2296" path="/383/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1
[  163.906755][ T5848] EXT4-fs (loop9): re-mounted. Opts: . Quota mode: none.
[  163.914372][ T5848] ext4 filesystem being remounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  163.927102][ T5848] EXT4-fs (loop9): resizing filesystem from 64 to 2 blocks
[  163.941728][ T5848] EXT4-fs warning (device loop9): ext4_resize_fs:2004: can't shrink FS - resize aborted
[  164.040322][ T5864] usbcore.quirks: string doesn't fit in 127 chars.
[  164.051258][   T30] audit: type=1400 audit(2000000045.342:552): avc:  denied  { append } for  pid=5865 comm="syz.9.2305" name="event0" dev="devtmpfs" ino=256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  164.103790][ T5870] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0)
[  164.113328][ T5870] SELinux: failed to load policy
[  164.220479][ T5879] erofs: (device loop1): mounted with root inode @ nid 36.
[  166.078949][ T5883] exfat: Deprecated parameter 'utf8'
[  166.084715][ T5883] exfat: Deprecated parameter 'utf8'
[  166.095892][ T5883] exfat: Deprecated parameter 'utf8'
[  168.166535][ T5883] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xc70f51ff, utbl_chksum : 0xe619d30d)
[  168.308263][ T5916] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2326'.
[  168.363847][ T5918] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2329'.
[  168.401580][ T5918] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2329'.
[  168.701987][  T286] bridge0: port 3(syz_tun) entered disabled state
[  168.718766][  T286] device syz_tun left promiscuous mode
[  168.725557][ T5942] set_capacity_and_notify: 8 callbacks suppressed
[  168.725576][ T5942] loop8: detected capacity change from 0 to 16
[  168.740576][ T5938] loop3: detected capacity change from 0 to 4096
[  168.745473][  T286] bridge0: port 3(syz_tun) entered disabled state
[  168.792487][ T5942] erofs: (device loop8): mounted with root inode @ nid 36.
[  168.813023][   T10] tipc: Disabling bearer <udp:syz0>
[  168.818613][   T10] tipc: Left network mode
[  168.835465][ T5952] loop9: detected capacity change from 0 to 128
[  168.866832][ T5952] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  168.899579][ T5952] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  168.930187][ T5955] device hsr0 entered promiscuous mode
[  168.996483][    T8] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  169.047869][ T5958] loop8: detected capacity change from 0 to 512
[  169.099941][ T5958] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  169.155043][ T5974] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2353'.
[  169.179885][ T5956] bridge0: port 1(bridge_slave_0) entered blocking state
[  169.193853][ T5956] bridge0: port 1(bridge_slave_0) entered disabled state
[  169.205336][ T5956] device bridge_slave_0 entered promiscuous mode
[  169.218681][ T5956] bridge0: port 2(bridge_slave_1) entered blocking state
[  169.225999][ T5956] bridge0: port 2(bridge_slave_1) entered disabled state
[  169.240460][ T5956] device bridge_slave_1 entered promiscuous mode
[  169.460579][ T5956] bridge0: port 2(bridge_slave_1) entered blocking state
[  169.468587][ T5956] bridge0: port 2(bridge_slave_1) entered forwarding state
[  169.476017][ T5956] bridge0: port 1(bridge_slave_0) entered blocking state
[  169.484567][ T5956] bridge0: port 1(bridge_slave_0) entered forwarding state
[  169.510652][   T10] device bridge_slave_1 left promiscuous mode
[  169.523210][ T6016] loop9: detected capacity change from 0 to 256
[  169.536340][   T10] bridge0: port 2(bridge_slave_1) entered disabled state
[  169.559962][   T10] device bridge_slave_0 left promiscuous mode
[  169.566347][   T10] bridge0: port 1(bridge_slave_0) entered disabled state
[  169.581178][   T10] device veth1_macvtap left promiscuous mode
[  169.587728][   T10] device veth0_vlan left promiscuous mode
[  169.601667][ T6016] FAT-fs (loop9): Directory bread(block 64) failed
[  169.608597][ T6016] FAT-fs (loop9): Directory bread(block 65) failed
[  169.615281][ T6016] FAT-fs (loop9): Directory bread(block 66) failed
[  169.622516][ T6016] FAT-fs (loop9): Directory bread(block 67) failed
[  169.629354][ T6016] FAT-fs (loop9): Directory bread(block 68) failed
[  169.636586][ T6016] FAT-fs (loop9): Directory bread(block 69) failed
[  169.643391][ T6016] FAT-fs (loop9): Directory bread(block 70) failed
[  169.650722][ T6016] FAT-fs (loop9): Directory bread(block 71) failed
[  169.657861][ T6016] FAT-fs (loop9): Directory bread(block 72) failed
[  169.665536][ T6016] FAT-fs (loop9): Directory bread(block 73) failed
[  169.785918][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  169.796209][  T290] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  169.804368][   T43] bridge0: port 1(bridge_slave_0) entered disabled state
[  169.814253][   T43] bridge0: port 2(bridge_slave_1) entered disabled state
[  169.837166][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  169.856680][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  169.872291][   T43] bridge0: port 1(bridge_slave_0) entered blocking state
[  169.879430][   T43] bridge0: port 1(bridge_slave_0) entered forwarding state
[  169.892418][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  169.901671][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  169.910215][   T43] bridge0: port 2(bridge_slave_1) entered blocking state
[  169.917324][   T43] bridge0: port 2(bridge_slave_1) entered forwarding state
[  169.941628][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  169.957065][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  169.985066][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  169.995127][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  170.022875][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  170.031976][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  170.035560][ T6028] loop9: detected capacity change from 0 to 40427
[  170.050912][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  170.059107][  T290] usb 9-1: Using ep0 maxpacket: 8
[  170.064712][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  170.076331][ T6028] F2FS-fs (loop9): Corrupted extension count (64 + 1 > 64)
[  170.094054][ T6028] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock
[  170.098580][ T5956] device veth0_vlan entered promiscuous mode
[  170.113524][ T6028] F2FS-fs (loop9): invalid crc value
[  170.119774][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  170.128164][ T6028] F2FS-fs (loop9): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  170.128319][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  170.158612][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  170.167112][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  170.176027][ T5956] device veth1_macvtap entered promiscuous mode
[  170.186256][  T290] usb 9-1: config 0 has no interfaces?
[  170.191786][  T290] usb 9-1: New USB device found, idVendor=05a9, idProduct=2630, bcdDevice=55.12
[  170.205626][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  170.213786][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  170.222207][  T290] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  170.231357][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  170.246309][  T290] usb 9-1: config 0 descriptor??
[  170.257634][ T6028] F2FS-fs (loop9): Start checkpoint disabled!
[  170.270627][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  170.287024][ T6028] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0
[  170.294238][ T6028] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e6
[  170.306877][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  170.366500][    T8] attempt to access beyond end of device
[  170.366500][    T8] loop9: rw=2049, want=45104, limit=40427
[  170.374489][ T6037] loop3: detected capacity change from 0 to 40427
[  170.455691][ T6049] loop1: detected capacity change from 0 to 128
[  170.491831][  T290] usb 9-1: USB disconnect, device number 3
[  170.572466][ T6055] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2390'.
[  170.635303][ T6064] loop3: detected capacity change from 0 to 512
[  170.687275][ T6064] loop3: detected capacity change from 0 to 2048
[  170.718758][ T1642] Alternate GPT is invalid, using primary GPT.
[  170.725397][ T1642]  loop3: p2 p3 p7
[  170.737277][ T6064] Alternate GPT is invalid, using primary GPT.
[  170.743593][ T6064]  loop3: p2 p3 p7
[  170.769563][ T6073] EXT4-fs (loop9): Test dummy encryption mode enabled
[  170.778820][  T101] Alternate GPT is invalid, using primary GPT.
[  170.781103][ T6073] EXT4-fs error (device loop9): ext4_orphan_get:1406: inode #15: comm syz.9.2398: inode has both inline data and extents flags
[  170.785245][  T101]  loop3: p2 p3 p7
[  170.800676][ T6073] EXT4-fs error (device loop9): ext4_orphan_get:1411: comm syz.9.2398: couldn't read orphan inode 15 (err -117)
[  170.814303][ T6073] EXT4-fs (loop9): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: writeback.
[  170.833370][ T6073] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2398'.
[  170.923474][ T6080] rtc_cmos 00:00: Alarms can be up to one day in the future
[  170.937201][ T6081] overlayfs: invalid origin (0000)
[  170.943250][ T1722] udevd[1722]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory
[  170.952158][ T1797] udevd[1797]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory
[  170.962044][ T1642] udevd[1642]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory
[  170.991024][ T1797] udevd[1797]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory
[  170.993971][ T1722] udevd[1722]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory
[  171.021899][ T1642] udevd[1642]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory
[  171.037588][ T6085] netlink: 'syz.3.2403': attribute type 3 has an invalid length.
[  171.048960][ T1797] udevd[1797]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory
[  171.052586][ T1642] udevd[1642]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory
[  171.063002][ T1634] udevd[1634]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory
[  171.070015][ T6085] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2403'.
[  171.088084][ T1722]  loop9: p1 < > p3 < p5 > p4
[  171.089441][  T311] rtc_cmos 00:00: Alarms can be up to one day in the future
[  171.093472][ T1722] loop9: partition table partially beyond EOD, truncated
[  171.108976][ T1722] loop9: p1 start 3405774849 is beyond EOD, truncated
[  171.112682][  T311] rtc_cmos 00:00: Alarms can be up to one day in the future
[  171.127734][ T6083]  loop9: p1 < > p3 < p5 > p4
[  171.135875][  T311] rtc_cmos 00:00: Alarms can be up to one day in the future
[  171.147119][ T6083] loop9: partition table partially beyond EOD, truncated
[  171.152506][  T311] rtc_cmos 00:00: Alarms can be up to one day in the future
[  171.169897][ T6083] loop9: p1 start 3405774849 is beyond EOD, truncated
[  171.178037][   T30] audit: type=1400 audit(2000000052.472:553): avc:  denied  { accept } for  pid=6088 comm="syz.8.2405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  171.199347][  T311] rtc rtc0: __rtc_set_alarm: err=-22
[  171.283138][ T6099] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied.
[  171.317233][ T1642] udevd[1642]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory
[  171.364952][   T30] audit: type=1400 audit(2000000052.652:554): avc:  denied  { setcheckreqprot } for  pid=6105 comm="syz.9.2410" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[  171.404744][ T6109] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d)
[  171.536948][ T6120] EXT4-fs (loop9): Quota format mount options ignored when QUOTA feature is enabled
[  171.559272][ T6120] EXT4-fs (loop9): Test dummy encryption mode enabled
[  171.568514][ T6120] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c1a8, mo2=0003]
[  171.577007][ T6120] System zones: 0-5
[  171.582071][ T6120] EXT4-fs (loop9): mounted filesystem without journal. Opts: debug,jqfmt=vfsv0,inlinecrypt,errors=remount-ro,test_dummy_encryption=v1,norecovery,delalloc,nogrpid,minixdf,. Quota mode: writeback.
[  174.208961][ T6162] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  174.228477][ T6162] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready
[  174.249365][ T6162] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready
[  174.261775][ T6162] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready
[  174.269699][ T6162] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready
[  174.280763][ T6162] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[  174.289956][ T6162] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[  174.299498][ T6162] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready
[  174.308904][ T6162] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready
[  174.501954][ T6194] set_capacity_and_notify: 5 callbacks suppressed
[  174.501973][ T6194] loop7: detected capacity change from 0 to 512
[  174.596561][ T6194] EXT4-fs (loop7): revision level too high, forcing read-only mode
[  174.614416][ T6194] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e118, mo2=0002]
[  174.623311][ T6194] EXT4-fs (loop7): orphan cleanup on readonly fs
[  174.631646][ T6194] EXT4-fs error (device loop7): ext4_ext_check_inode:501: inode #16: comm syz.7.2451: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 257(257)
[  174.651799][ T6194] EXT4-fs error (device loop7): ext4_orphan_get:1411: comm syz.7.2451: couldn't read orphan inode 16 (err -117)
[  174.665547][ T6214] loop1: detected capacity change from 0 to 256
[  174.672064][ T6194] EXT4-fs (loop7): mounted filesystem without journal. Opts: nodioread_nolock,noload,noblock_validity,dioread_lock,nouid32,data_err=ignore,,errors=continue. Quota mode: none.
[  174.704932][ T6214] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d)
[  174.747413][ T6216] loop7: detected capacity change from 0 to 256
[  174.786513][ T6216] exfat: Deprecated parameter 'utf8'
[  174.809780][ T6216] exfat: Deprecated parameter 'namecase'
[  174.837488][ T6216] exfat: Deprecated parameter 'namecase'
[  174.838485][ T6222] zero sized request
[  174.852432][ T6216] exfat: Deprecated parameter 'utf8'
[  174.889950][ T6216] exFAT-fs (loop7): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d)
[  174.910987][ T6226] loop1: detected capacity change from 0 to 512
[  174.940072][ T6226] EXT4-fs (loop1): Ignoring removed oldalloc option
[  175.007077][ T6226] EXT4-fs (loop1): mounted filesystem without journal. Opts: auto_da_alloc,max_dir_size_kb=0x0000000000000e6b,mb_optimize_scan=0x0000000000000000,oldalloc,,errors=continue. Quota mode: writeback.
[  175.028316][ T6213] loop3: detected capacity change from 0 to 40427
[  175.046269][ T6226] ext4 filesystem being mounted at /22/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  175.079855][ T6226] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.2466: bg 0: block 217: padding at end of block bitmap is not set
[  175.140797][ T6226] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6191: Corrupt filesystem
[  175.232274][ T6253] loop9: detected capacity change from 0 to 512
[  175.240713][ T6254] loop1: detected capacity change from 0 to 256
[  175.307849][ T6254] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  175.320056][ T6253] EXT4-fs (loop9): Ignoring removed nobh option
[  175.365894][ T6253] EXT4-fs (loop9): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,nobh,quota,,errors=continue. Quota mode: writeback.
[  175.417018][ T6253] ext4 filesystem being mounted at /73/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  175.429394][ T6271] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6271 comm=syz.1.2483
[  175.482205][ T6253] EXT4-fs error (device loop9): ext4_do_update_inode:5260: inode #2: comm syz.9.2478: corrupted inode contents
[  175.511109][ T6253] EXT4-fs error (device loop9): ext4_dirty_inode:6108: inode #2: comm syz.9.2478: mark_inode_dirty error
[  175.523440][ T6253] EXT4-fs error (device loop9): ext4_do_update_inode:5260: inode #2: comm syz.9.2478: corrupted inode contents
[  175.536544][ T6253] EXT4-fs error (device loop9): __ext4_ext_dirty:183: inode #2: comm syz.9.2478: mark_inode_dirty error
[  175.598956][ T6279] ------------[ cut here ]------------
[  175.604483][ T6279] WARNING: CPU: 0 PID: 6279 at kernel/trace/ring_buffer.c:4527 rb_get_reader_page+0xa68/0xc00
[  175.614998][ T6279] Modules linked in:
[  175.619248][ T6279] CPU: 0 PID: 6279 Comm: syz.1.2488 Tainted: G        W         syzkaller #0
[  175.628227][ T6279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  175.638581][ T6279] RIP: 0010:rb_get_reader_page+0xa68/0xc00
[  175.644424][ T6279] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 dd 2e 3d 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 cc 30 3d 00 f0 ff 43 08 <0f> 0b 4c 8b 64 24 38 4d 85 e4 74 3d 43 0f b6 44 3d 00 84 c0 0f 85
[  175.664061][ T6279] RSP: 0018:ffffc90000bf77a0 EFLAGS: 00010002
[  175.670160][ T6279] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff816bf784
[  175.678158][ T6279] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[  175.686146][ T6279] RBP: ffffc90000bf7918 R08: ffff88810005260b R09: 1ffff1102000a4c1
[  175.694183][ T6279] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 00000000216c005d
[  175.702172][ T6279] R13: 1ffff1102000a123 R14: 1ffff1102000a126 R15: dffffc0000000000
[  175.710166][ T6279] FS:  00007f3abb6d06c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[  175.719559][ T6279] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  175.726369][ T6279] CR2: 0000001b31321ff8 CR3: 000000013f5d6000 CR4: 00000000003506b0
[  175.734470][ T6279] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  175.742666][ T6279] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  175.750892][ T6279] Call Trace:
[  175.754202][ T6279]  <TASK>
[  175.757156][ T6279]  ? ring_buffer_read_page+0x1210/0x1210
[  175.762910][ T6279]  ? vsnprintf+0x14e/0x1990
[  175.767443][ T6279]  ? __kasan_check_write+0x14/0x20
[  175.772687][ T6279]  ? _raw_spin_lock+0x94/0xf0
[  175.777392][ T6279]  rb_buffer_peek+0x60/0x7a0
[  175.782005][ T6279]  ? _raw_spin_trylock_bh+0x150/0x150
[  175.787407][ T6279]  ring_buffer_peek+0x184/0x3b0
[  175.792286][ T6279]  ? ring_buffer_iter_empty+0x370/0x370
[  175.797859][ T6279]  ? ring_buffer_empty+0x470/0x470
[  175.803001][ T6279]  peek_next_entry+0x141/0x200
[  175.807802][ T6279]  __find_next_entry+0x534/0x6b0
[  175.812810][ T6279]  ? rb_advance_reader+0x39c/0x6b0
[  175.818274][ T6279]  ? ring_buffer_consume+0x324/0x370
[  175.823605][ T6279]  ? trace_find_next_entry+0x370/0x370
[  175.829709][ T6279]  ? ring_buffer_iter_dropped+0x60/0x60
[  175.835301][ T6279]  ? print_trace_line+0x385/0x690
[  175.840369][ T6279]  tracing_read_pipe+0x3b8/0xab0
[  175.845337][ T6279]  ? s_show+0x320/0x320
[  175.849517][ T6279]  vfs_read+0x28c/0xc20
[  175.853698][ T6279]  ? kernel_read+0x1f0/0x1f0
[  175.858314][ T6279]  ? __kasan_check_write+0x14/0x20
[  175.863625][ T6279]  ? mutex_lock+0x9b/0x1c0
[  175.868334][ T6279]  ? wait_for_completion_killable_timeout+0x10/0x10
[  175.874947][ T6279]  ? __fget_files+0x2e1/0x340
[  175.879659][ T6279]  ? __fdget_pos+0x2d2/0x380
[  175.884283][ T6279]  ? ksys_read+0x70/0x260
[  175.889241][ T6279]  ksys_read+0x14a/0x260
[  175.893953][ T6279]  ? vfs_write+0xfd0/0xfd0
[  175.898414][ T6279]  ? __kasan_check_write+0x14/0x20
[  175.903567][ T6279]  ? switch_fpu_return+0x15d/0x2c0
[  175.908764][ T6279]  __x64_sys_read+0x7b/0x90
[  175.913324][ T6279]  x64_sys_call+0x96d/0x9a0
[  175.917857][ T6279]  do_syscall_64+0x4c/0xa0
[  175.922329][ T6279]  ? clear_bhb_loop+0x50/0xa0
[  175.927033][ T6279]  ? clear_bhb_loop+0x50/0xa0
[  175.931735][ T6279]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  175.937736][ T6279] RIP: 0033:0x7f3abcc770d9
[  175.942173][ T6279] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  175.962262][ T6279] RSP: 002b:00007f3abb6d0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  175.970815][ T6279] RAX: ffffffffffffffda RBX: 00007f3abcefefa0 RCX: 00007f3abcc770d9
[  175.978930][ T6279] RDX: 0000000000000064 RSI: 0000200000000b00 RDI: 0000000000000003
[  175.987087][ T6279] RBP: 00007f3abcd0e024 R08: 0000000000000000 R09: 0000000000000000
[  175.995171][ T6279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  176.003163][ T6279] R13: 00007f3abceff038 R14: 00007f3abcefefa0 R15: 00007ffcf6579d68
[  176.011169][ T6279]  </TASK>
[  176.014207][ T6279] ---[ end trace 2a13bfc80ab53e5a ]---
[  176.019691][ T6279] ==================================================================
[  176.028207][ T6279] BUG: KASAN: use-after-free in rb_buffer_peek+0x71a/0x7a0
[  176.035427][ T6279] Read of size 4 at addr ffff88812172b06d by task syz.1.2488/6279
[  176.043420][ T6279] 
[  176.045762][ T6279] CPU: 0 PID: 6279 Comm: syz.1.2488 Tainted: G        W         syzkaller #0
[  176.054542][ T6279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  176.064614][ T6279] Call Trace:
[  176.067907][ T6279]  <TASK>
[  176.070896][ T6279]  __dump_stack+0x21/0x30
[  176.075262][ T6279]  dump_stack_lvl+0x110/0x170
[  176.080048][ T6279]  ? show_regs_print_info+0x20/0x20
[  176.085268][ T6279]  ? load_image+0x3f0/0x3f0
[  176.089900][ T6279]  print_address_description+0x7f/0x2c0
[  176.095569][ T6279]  ? rb_buffer_peek+0x71a/0x7a0
[  176.100448][ T6279]  kasan_report+0x10f/0x150
[  176.105169][ T6279]  ? rb_buffer_peek+0x71a/0x7a0
[  176.110051][ T6279]  __asan_report_load4_noabort+0x14/0x20
[  176.115714][ T6279]  rb_buffer_peek+0x71a/0x7a0
[  176.120437][ T6279]  ? _raw_spin_trylock_bh+0x150/0x150
[  176.125850][ T6279]  ring_buffer_peek+0x184/0x3b0
[  176.130724][ T6279]  ? ring_buffer_iter_empty+0x370/0x370
[  176.136303][ T6279]  ? ring_buffer_empty+0x470/0x470
[  176.141432][ T6279]  peek_next_entry+0x141/0x200
[  176.146222][ T6279]  __find_next_entry+0x534/0x6b0
[  176.151181][ T6279]  ? rb_advance_reader+0x39c/0x6b0
[  176.156319][ T6279]  ? ring_buffer_consume+0x324/0x370
[  176.161621][ T6279]  ? trace_find_next_entry+0x370/0x370
[  176.167105][ T6279]  ? ring_buffer_iter_dropped+0x60/0x60
[  176.172842][ T6279]  ? print_trace_line+0x385/0x690
[  176.177886][ T6279]  tracing_read_pipe+0x3b8/0xab0
[  176.182952][ T6279]  ? s_show+0x320/0x320
[  176.187124][ T6279]  vfs_read+0x28c/0xc20
[  176.191463][ T6279]  ? kernel_read+0x1f0/0x1f0
[  176.196180][ T6279]  ? __kasan_check_write+0x14/0x20
[  176.201336][ T6279]  ? mutex_lock+0x9b/0x1c0
[  176.205813][ T6279]  ? wait_for_completion_killable_timeout+0x10/0x10
[  176.212526][ T6279]  ? __fget_files+0x2e1/0x340
[  176.217228][ T6279]  ? __fdget_pos+0x2d2/0x380
[  176.221834][ T6279]  ? ksys_read+0x70/0x260
[  176.226190][ T6279]  ksys_read+0x14a/0x260
[  176.230462][ T6279]  ? vfs_write+0xfd0/0xfd0
[  176.234915][ T6279]  ? __kasan_check_write+0x14/0x20
[  176.240058][ T6279]  ? switch_fpu_return+0x15d/0x2c0
[  176.245216][ T6279]  __x64_sys_read+0x7b/0x90
[  176.249743][ T6279]  x64_sys_call+0x96d/0x9a0
[  176.254495][ T6279]  do_syscall_64+0x4c/0xa0
[  176.258946][ T6279]  ? clear_bhb_loop+0x50/0xa0
[  176.263650][ T6279]  ? clear_bhb_loop+0x50/0xa0
[  176.268614][ T6279]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  176.274536][ T6279] RIP: 0033:0x7f3abcc770d9
[  176.278974][ T6279] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  176.298860][ T6279] RSP: 002b:00007f3abb6d0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  176.307301][ T6279] RAX: ffffffffffffffda RBX: 00007f3abcefefa0 RCX: 00007f3abcc770d9
[  176.315307][ T6279] RDX: 0000000000000064 RSI: 0000200000000b00 RDI: 0000000000000003
[  176.323312][ T6279] RBP: 00007f3abcd0e024 R08: 0000000000000000 R09: 0000000000000000
[  176.331348][ T6279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  176.339537][ T6279] R13: 00007f3abceff038 R14: 00007f3abcefefa0 R15: 00007ffcf6579d68
[  176.347558][ T6279]  </TASK>
[  176.350595][ T6279] 
[  176.352931][ T6279] Allocated by task 1642:
[  176.357386][ T6279]  __kasan_slab_alloc+0xb7/0xe0
[  176.362516][ T6279]  slab_post_alloc_hook+0x4f/0x2b0
[  176.367644][ T6279]  kmem_cache_alloc+0xf7/0x260
[  176.372425][ T6279]  getname_flags+0xba/0x510
[  176.376947][ T6279]  __x64_sys_rename+0x5f/0x90
[  176.381765][ T6279]  x64_sys_call+0x680/0x9a0
[  176.386374][ T6279]  do_syscall_64+0x4c/0xa0
[  176.390820][ T6279]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  176.396735][ T6279] 
[  176.399079][ T6279] Freed by task 1642:
[  176.403093][ T6279]  kasan_set_track+0x4a/0x70
[  176.407703][ T6279]  kasan_set_free_info+0x23/0x40
[  176.413093][ T6279]  ____kasan_slab_free+0x125/0x160
[  176.418241][ T6279]  __kasan_slab_free+0x11/0x20
[  176.423046][ T6279]  slab_free_freelist_hook+0xc2/0x190
[  176.428431][ T6279]  kmem_cache_free+0x100/0x320
[  176.433221][ T6279]  do_renameat2+0xea9/0xfc0
[  176.437882][ T6279]  __x64_sys_rename+0x86/0x90
[  176.442868][ T6279]  x64_sys_call+0x680/0x9a0
[  176.447440][ T6279]  do_syscall_64+0x4c/0xa0
[  176.451885][ T6279]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  176.457799][ T6279] 
[  176.460142][ T6279] The buggy address belongs to the object at ffff88812172a200
[  176.460142][ T6279]  which belongs to the cache names_cache of size 4096
[  176.474305][ T6279] The buggy address is located 3693 bytes inside of
[  176.474305][ T6279]  4096-byte region [ffff88812172a200, ffff88812172b200)
[  176.487804][ T6279] The buggy address belongs to the page:
[  176.493472][ T6279] page:ffffea000485ca00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x121728
[  176.503768][ T6279] head:ffffea000485ca00 order:3 compound_mapcount:0 compound_pincount:0
[  176.512200][ T6279] flags: 0x4000000000010200(slab|head|zone=1)
[  176.518319][ T6279] raw: 4000000000010200 0000000000000000 dead000000000122 ffff8881001c4d80
[  176.527013][ T6279] raw: 0000000000000000 0000000000070007 00000001ffffffff 0000000000000000
[  176.535872][ T6279] page dumped because: kasan: bad access detected
[  176.542302][ T6279] page_owner tracks the page as allocated
[  176.548056][ T6279] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 1642, ts 175109413511, free_ts 169027706398
[  176.568753][ T6279]  post_alloc_hook+0x192/0x1b0
[  176.573543][ T6279]  prep_new_page+0x1c/0x110
[  176.578066][ T6279]  get_page_from_freelist+0x2c3a/0x2cd0
[  176.583635][ T6279]  __alloc_pages+0x1a2/0x460
[  176.588253][ T6279]  new_slab+0xa0/0x4d0
[  176.592338][ T6279]  ___slab_alloc+0x3ac/0x840
[  176.597032][ T6279]  __slab_alloc+0x49/0x90
[  176.601384][ T6279]  kmem_cache_alloc+0x138/0x260
[  176.606258][ T6279]  getname_flags+0xba/0x510
[  176.610780][ T6279]  __x64_sys_mkdir+0x5f/0x80
[  176.615389][ T6279]  x64_sys_call+0x124/0x9a0
[  176.619911][ T6279]  do_syscall_64+0x4c/0xa0
[  176.624351][ T6279]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  176.630269][ T6279] page last free stack trace:
[  176.634960][ T6279]  free_unref_page_prepare+0x5fa/0x600
[  176.640523][ T6279]  free_unref_page+0xae/0x540
[  176.645223][ T6279]  __free_pages+0x6c/0x100
[  176.649657][ T6279]  __free_slab+0xe5/0x1e0
[  176.654167][ T6279]  __unfreeze_partials+0x15a/0x190
[  176.659328][ T6279]  put_cpu_partial+0xc6/0x120
[  176.664034][ T6279]  __slab_free+0x1d4/0x290
[  176.668471][ T6279]  ___cache_free+0x104/0x120
[  176.673094][ T6279]  qlink_free+0x4d/0x90
[  176.677288][ T6279]  qlist_free_all+0x5f/0xb0
[  176.681824][ T6279]  kasan_quarantine_reduce+0x14a/0x170
[  176.687408][ T6279]  __kasan_slab_alloc+0x2f/0xe0
[  176.692277][ T6279]  slab_post_alloc_hook+0x4f/0x2b0
[  176.697425][ T6279]  kmem_cache_alloc_trace+0xfb/0x270
[  176.703404][ T6279]  kernfs_iop_get_link+0x66/0x600
[  176.708481][ T6279]  vfs_readlink+0x16f/0x3e0
[  176.713040][ T6279] 
[  176.715387][ T6279] Memory state around the buggy address:
[  176.721033][ T6279]  ffff88812172af00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  176.729122][ T6279]  ffff88812172af80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  176.737205][ T6279] >ffff88812172b000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  176.745290][ T6279]                                                           ^
[  176.752777][ T6279]  ffff88812172b080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  176.760854][ T6279]  ffff88812172b100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  176.769021][ T6279] ==================================================================
[  176.777098][ T6279] Disabling lock debugging due to kernel taint
[  176.785080][ T6279] ------------[ cut here ]------------
[  176.790586][ T6279] WARNING: CPU: 1 PID: 6279 at kernel/trace/ring_buffer.c:4527 rb_get_reader_page+0xa68/0xc00
[  176.801013][ T6279] Modules linked in:
[  176.805035][ T6279] CPU: 1 PID: 6279 Comm: syz.1.2488 Tainted: G    B   W         syzkaller #0
[  176.814053][ T6279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  176.824371][ T6279] RIP: 0010:rb_get_reader_page+0xa68/0xc00
[  176.830377][ T6279] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 dd 2e 3d 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 cc 30 3d 00 f0 ff 43 08 <0f> 0b 4c 8b 64 24 38 4d 85 e4 74 3d 43 0f b6 44 3d 00 84 c0 0f 85
[  176.850050][ T6279] RSP: 0018:ffffc90000bf7920 EFLAGS: 00010002
[  176.856189][ T6279] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff816bf784
[  176.864390][ T6279] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[  176.872515][ T6279] RBP: ffffc90000bf7a98 R08: ffff88810005260b R09: 1ffff1102000a4c1
[  176.880708][ T6279] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 00000000216c005d
[  176.888727][ T6279] R13: 1ffff1102000a123 R14: 1ffff1102000a126 R15: dffffc0000000000
[  176.896761][ T6279] FS:  00007f3abb6d06c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
[  176.905741][ T6279] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  176.912391][ T6279] CR2: 000000110c2f2ece CR3: 000000013f5d6000 CR4: 00000000003506a0
[  176.920423][ T6279] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  176.928442][ T6279] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  176.936493][ T6279] Call Trace:
[  176.939817][ T6279]  <TASK>
[  176.942793][ T6279]  ? ring_buffer_read_page+0x1210/0x1210
[  176.948481][ T6279]  ? __kasan_check_write+0x14/0x20
[  176.953643][ T6279]  ? _raw_spin_lock+0x94/0xf0
[  176.958411][ T6279]  rb_buffer_peek+0x60/0x7a0
[  176.963072][ T6279]  ring_buffer_consume+0x1aa/0x370
[  176.968329][ T6279]  ? ring_buffer_iter_dropped+0x60/0x60
[  176.974052][ T6279]  ? print_trace_line+0x385/0x690
[  176.979131][ T6279]  tracing_read_pipe+0x599/0xab0
[  176.984128][ T6279]  ? s_show+0x320/0x320
[  176.988390][ T6279]  vfs_read+0x28c/0xc20
[  176.992598][ T6279]  ? kernel_read+0x1f0/0x1f0
[  176.997238][ T6279]  ? __kasan_check_write+0x14/0x20
[  177.002404][ T6279]  ? mutex_lock+0x9b/0x1c0
[  177.006869][ T6279]  ? wait_for_completion_killable_timeout+0x10/0x10
[  177.013514][ T6279]  ? __fget_files+0x2e1/0x340
[  177.018235][ T6279]  ? __fdget_pos+0x2d2/0x380
[  177.022851][ T6279]  ? ksys_read+0x70/0x260
[  177.027228][ T6279]  ksys_read+0x14a/0x260
[  177.031762][ T6279]  ? vfs_write+0xfd0/0xfd0
[  177.036205][ T6279]  ? __kasan_check_write+0x14/0x20
[  177.041342][ T6279]  ? switch_fpu_return+0x15d/0x2c0
[  177.046485][ T6279]  __x64_sys_read+0x7b/0x90
[  177.051106][ T6279]  x64_sys_call+0x96d/0x9a0
[  177.055632][ T6279]  do_syscall_64+0x4c/0xa0
[  177.060077][ T6279]  ? clear_bhb_loop+0x50/0xa0
[  177.064871][ T6279]  ? clear_bhb_loop+0x50/0xa0
[  177.069607][ T6279]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  177.075620][ T6279] RIP: 0033:0x7f3abcc770d9
[  177.080094][ T6279] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  177.101157][ T6279] RSP: 002b:00007f3abb6d0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  177.109753][ T6279] RAX: ffffffffffffffda RBX: 00007f3abcefefa0 RCX: 00007f3abcc770d9
[  177.117770][ T6279] RDX: 0000000000000064 RSI: 0000200000000b00 RDI: 0000000000000003
[  177.125854][ T6279] RBP: 00007f3abcd0e024 R08: 0000000000000000 R09: 0000000000000000
[  177.133941][ T6279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  177.141932][ T6279] R13: 00007f3abceff038 R14: 00007f3abcefefa0 R15: 00007ffcf6579d68
[  177.150076][ T6279]  </TASK>
[  177.153119][ T6279] ---[ end trace 2a13bfc80ab53e5b ]---
[  177.158636][ T6279] ------------[ cut here ]------------
[  177.164099][ T6279] WARNING: CPU: 1 PID: 6279 at kernel/trace/ring_buffer.c:4527 rb_get_reader_page+0xa68/0xc00
[  177.174371][ T6279] Modules linked in:
[  177.178324][ T6279] CPU: 1 PID: 6279 Comm: syz.1.2488 Tainted: G    B   W         syzkaller #0
[  177.187112][ T6279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  177.197190][ T6279] RIP: 0010:rb_get_reader_page+0xa68/0xc00
[  177.203031][ T6279] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 dd 2e 3d 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 cc 30 3d 00 f0 ff 43 08 <0f> 0b 4c 8b 64 24 38 4d 85 e4 74 3d 43 0f b6 44 3d 00 84 c0 0f 85
[  177.222665][ T6279] RSP: 0018:ffffc90000bf7940 EFLAGS: 00010006
[  177.228757][ T6279] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff816bf784
[  177.236763][ T6279] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[  177.245033][ T6279] RBP: ffffc90000bf7aa8 R08: ffff88810005260b R09: 1ffff1102000a4c1
[  177.253209][ T6279] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 00000000216c005d
[  177.261217][ T6279] R13: 1ffff1102000a123 R14: 1ffff1102000a126 R15: dffffc0000000000
[  177.269222][ T6279] FS:  00007f3abb6d06c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
[  177.278202][ T6279] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  177.284892][ T6279] CR2: 000000110c2f2ece CR3: 000000013f5d6000 CR4: 00000000003506a0
[  177.293382][ T6279] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  177.301387][ T6279] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  177.309469][ T6279] Call Trace:
[  177.312765][ T6279]  <TASK>
[  177.315723][ T6279]  ? ring_buffer_read_page+0x1210/0x1210
[  177.321385][ T6279]  ? __kasan_check_write+0x14/0x20
[  177.326521][ T6279]  ? _raw_spin_lock+0x94/0xf0
[  177.331254][ T6279]  rb_advance_reader+0x2b/0x6b0
[  177.336132][ T6279]  ring_buffer_consume+0x1e7/0x370
[  177.341294][ T6279]  ? ring_buffer_iter_dropped+0x60/0x60
[  177.346861][ T6279]  ? print_trace_line+0x385/0x690
[  177.352008][ T6279]  tracing_read_pipe+0x599/0xab0
[  177.356966][ T6279]  ? s_show+0x320/0x320
[  177.361146][ T6279]  vfs_read+0x28c/0xc20
[  177.365351][ T6279]  ? kernel_read+0x1f0/0x1f0
[  177.369963][ T6279]  ? __kasan_check_write+0x14/0x20
[  177.375093][ T6279]  ? mutex_lock+0x9b/0x1c0
[  177.379531][ T6279]  ? wait_for_completion_killable_timeout+0x10/0x10
[  177.386142][ T6279]  ? __fget_files+0x2e1/0x340
[  177.390862][ T6279]  ? __fdget_pos+0x2d2/0x380
[  177.395472][ T6279]  ? ksys_read+0x70/0x260
[  177.399843][ T6279]  ksys_read+0x14a/0x260
[  177.404151][ T6279]  ? vfs_write+0xfd0/0xfd0
[  177.408698][ T6279]  ? __kasan_check_write+0x14/0x20
[  177.413851][ T6279]  ? switch_fpu_return+0x15d/0x2c0
[  177.419036][ T6279]  __x64_sys_read+0x7b/0x90
[  177.423559][ T6279]  x64_sys_call+0x96d/0x9a0
[  177.428084][ T6279]  do_syscall_64+0x4c/0xa0
[  177.432548][ T6279]  ? clear_bhb_loop+0x50/0xa0
[  177.437337][ T6279]  ? clear_bhb_loop+0x50/0xa0
[  177.442040][ T6279]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  177.447978][ T6279] RIP: 0033:0x7f3abcc770d9
[  177.452942][ T6279] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  177.472658][ T6279] RSP: 002b:00007f3abb6d0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  177.481256][ T6279] RAX: ffffffffffffffda RBX: 00007f3abcefefa0 RCX: 00007f3abcc770d9
[  177.489334][ T6279] RDX: 0000000000000064 RSI: 0000200000000b00 RDI: 0000000000000003
[  177.497337][ T6279] RBP: 00007f3abcd0e024 R08: 0000000000000000 R09: 0000000000000000
[  177.505331][ T6279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  177.513324][ T6279] R13: 00007f3abceff038 R14: 00007f3abcefefa0 R15: 00007ffcf6579d68
[  177.521415][ T6279]  </TASK>
[  177.524459][ T6279] ---[ end trace 2a13bfc80ab53e5c ]---
[  177.532184][ T6279] ------------[ cut here ]------------
[  177.537700][ T6279] WARNING: CPU: 1 PID: 6279 at kernel/trace/ring_buffer.c:4527 rb_get_reader_page+0xa68/0xc00
[  177.548228][ T6279] Modules linked in:
[  177.552149][ T6279] CPU: 1 PID: 6279 Comm: syz.1.2488 Tainted: G    B   W         syzkaller #0
[  177.560940][ T6279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  177.571030][ T6279] RIP: 0010:rb_get_reader_page+0xa68/0xc00
[  177.577008][ T6279] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 dd 2e 3d 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 cc 30 3d 00 f0 ff 43 08 <0f> 0b 4c 8b 64 24 38 4d 85 e4 74 3d 43 0f b6 44 3d 00 84 c0 0f 85
[  177.596649][ T6279] RSP: 0018:ffffc90000bf77a0 EFLAGS: 00010002
[  177.602745][ T6279] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff816bf784
[  177.610723][ T6279] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[  177.618699][ T6279] RBP: ffffc90000bf7918 R08: ffff88810005260b R09: 1ffff1102000a4c1
[  177.626697][ T6279] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 00000000216c0061
[  177.634705][ T6279] R13: 1ffff1102000a123 R14: 1ffff1102000a126 R15: dffffc0000000000
[  177.642774][ T6279] FS:  00007f3abb6d06c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
[  177.651820][ T6279] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  177.658424][ T6279] CR2: 000000110c2f2ece CR3: 000000013f5d6000 CR4: 00000000003506a0
[  177.666500][ T6279] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  177.674479][ T6279] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  177.682464][ T6279] Call Trace:
[  177.685752][ T6279]  <TASK>
[  177.688697][ T6279]  ? ring_buffer_read_page+0x1210/0x1210
[  177.694351][ T6279]  ? __kasan_check_write+0x14/0x20
[  177.699478][ T6279]  ? __kasan_check_write+0x14/0x20
[  177.704618][ T6279]  ? _raw_spin_lock+0x94/0xf0
[  177.709306][ T6279]  rb_buffer_peek+0x60/0x7a0
[  177.713902][ T6279]  ? _raw_spin_trylock_bh+0x150/0x150
[  177.719313][ T6279]  ring_buffer_peek+0x184/0x3b0
[  177.724191][ T6279]  ? ring_buffer_iter_empty+0x370/0x370
[  177.729770][ T6279]  ? ring_buffer_empty+0x470/0x470
[  177.734895][ T6279]  ? preempt_schedule+0xbc/0xd0
[  177.739771][ T6279]  peek_next_entry+0x141/0x200
[  177.744572][ T6279]  __find_next_entry+0x534/0x6b0
[  177.749523][ T6279]  ? preempt_schedule_thunk+0x16/0x18
[  177.754904][ T6279]  ? ring_buffer_consume+0x324/0x370
[  177.760203][ T6279]  ? trace_find_next_entry+0x370/0x370
[  177.765675][ T6279]  ? ring_buffer_iter_dropped+0x60/0x60
[  177.771231][ T6279]  ? print_trace_line+0x385/0x690
[  177.776520][ T6279]  tracing_read_pipe+0x3b8/0xab0
[  177.781917][ T6279]  ? s_show+0x320/0x320
[  177.786108][ T6279]  vfs_read+0x28c/0xc20
[  177.790482][ T6279]  ? kernel_read+0x1f0/0x1f0
[  177.795100][ T6279]  ? __kasan_check_write+0x14/0x20
[  177.800229][ T6279]  ? mutex_lock+0x9b/0x1c0
[  177.804663][ T6279]  ? wait_for_completion_killable_timeout+0x10/0x10
[  177.811286][ T6279]  ? __fget_files+0x2e1/0x340
[  177.816007][ T6279]  ? __fdget_pos+0x2d2/0x380
[  177.820634][ T6279]  ? ksys_read+0x70/0x260
[  177.825122][ T6279]  ksys_read+0x14a/0x260
[  177.829480][ T6279]  ? vfs_write+0xfd0/0xfd0
[  177.833910][ T6279]  ? __kasan_check_write+0x14/0x20
[  177.839033][ T6279]  ? switch_fpu_return+0x15d/0x2c0
[  177.844163][ T6279]  __x64_sys_read+0x7b/0x90
[  177.848753][ T6279]  x64_sys_call+0x96d/0x9a0
[  177.853363][ T6279]  do_syscall_64+0x4c/0xa0
[  177.857818][ T6279]  ? clear_bhb_loop+0x50/0xa0
[  177.862531][ T6279]  ? clear_bhb_loop+0x50/0xa0
[  177.867247][ T6279]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  177.873170][ T6279] RIP: 0033:0x7f3abcc770d9
[  177.877628][ T6279] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  177.897557][ T6279] RSP: 002b:00007f3abb6d0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  177.906722][ T6279] RAX: ffffffffffffffda RBX: 00007f3abcefefa0 RCX: 00007f3abcc770d9
[  177.914730][ T6279] RDX: 0000000000000064 RSI: 0000200000000b00 RDI: 0000000000000003
[  177.922739][ T6279] RBP: 00007f3abcd0e024 R08: 0000000000000000 R09: 0000000000000000
[  177.930746][ T6279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  177.938801][ T6279] R13: 00007f3abceff038 R14: 00007f3abcefefa0 R15: 00007ffcf6579d68
[  177.946957][ T6279]  </TASK>
[  177.950141][ T6279] ---[ end trace 2a13bfc80ab53e5d ]---
[  177.957836][ T6279] ------------[ cut here ]------------
[  177.963347][ T6279] WARNING: CPU: 1 PID: 6279 at kernel/trace/ring_buffer.c:4527 rb_get_reader_page+0xa68/0xc00
[  177.973625][ T6279] Modules linked in:
[  177.977625][ T6279] CPU: 1 PID: 6279 Comm: syz.1.2488 Tainted: G    B   W         syzkaller #0
[  177.986389][ T6279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  177.996493][ T6279] RIP: 0010:rb_get_reader_page+0xa68/0xc00
[  178.002333][ T6279] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 dd 2e 3d 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 cc 30 3d 00 f0 ff 43 08 <0f> 0b 4c 8b 64 24 38 4d 85 e4 74 3d 43 0f b6 44 3d 00 84 c0 0f 85
[  178.021949][ T6279] RSP: 0018:ffffc90000bf7920 EFLAGS: 00010006
[  178.028339][ T6279] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff816bf784
[  178.036328][ T6279] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[  178.044311][ T6279] RBP: ffffc90000bf7a98 R08: ffff88810005260b R09: 1ffff1102000a4c1
[  178.052310][ T6279] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 00000000216c0061
[  178.060378][ T6279] R13: 1ffff1102000a123 R14: 1ffff1102000a126 R15: dffffc0000000000
[  178.068383][ T6279] FS:  00007f3abb6d06c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
[  178.077324][ T6279] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  178.083923][ T6279] CR2: 000000110c2f2ece CR3: 000000013f5d6000 CR4: 00000000003506a0
[  178.091923][ T6279] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  178.099949][ T6279] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  178.108319][ T6279] Call Trace:
[  178.111615][ T6279]  <TASK>
[  178.114571][ T6279]  ? ring_buffer_read_page+0x1210/0x1210
[  178.120623][ T6279]  ? __kasan_check_write+0x14/0x20
[  178.125772][ T6279]  ? _raw_spin_lock+0x94/0xf0
[  178.130481][ T6279]  rb_buffer_peek+0x60/0x7a0
[  178.135100][ T6279]  ring_buffer_consume+0x1aa/0x370
[  178.140234][ T6279]  ? ring_buffer_iter_dropped+0x60/0x60
[  178.145813][ T6279]  ? print_trace_line+0x385/0x690
[  178.150880][ T6279]  tracing_read_pipe+0x599/0xab0
[  178.155845][ T6279]  ? s_show+0x320/0x320
[  178.160015][ T6279]  vfs_read+0x28c/0xc20
[  178.164218][ T6279]  ? kernel_read+0x1f0/0x1f0
[  178.168823][ T6279]  ? __kasan_check_write+0x14/0x20
[  178.173943][ T6279]  ? mutex_lock+0x9b/0x1c0
[  178.178379][ T6279]  ? wait_for_completion_killable_timeout+0x10/0x10
[  178.184994][ T6279]  ? __fget_files+0x2e1/0x340
[  178.189685][ T6279]  ? __fdget_pos+0x2d2/0x380
[  178.194286][ T6279]  ? ksys_read+0x70/0x260
[  178.198634][ T6279]  ksys_read+0x14a/0x260
[  178.202888][ T6279]  ? vfs_write+0xfd0/0xfd0
[  178.207314][ T6279]  ? __kasan_check_write+0x14/0x20
[  178.212446][ T6279]  ? switch_fpu_return+0x15d/0x2c0
[  178.217579][ T6279]  __x64_sys_read+0x7b/0x90
[  178.222137][ T6279]  x64_sys_call+0x96d/0x9a0
[  178.226680][ T6279]  do_syscall_64+0x4c/0xa0
[  178.231272][ T6279]  ? clear_bhb_loop+0x50/0xa0
[  178.236120][ T6279]  ? clear_bhb_loop+0x50/0xa0
[  178.240842][ T6279]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  178.246768][ T6279] RIP: 0033:0x7f3abcc770d9
[  178.251230][ T6279] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  178.270891][ T6279] RSP: 002b:00007f3abb6d0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  178.279316][ T6279] RAX: ffffffffffffffda RBX: 00007f3abcefefa0 RCX: 00007f3abcc770d9
[  178.287476][ T6279] RDX: 0000000000000064 RSI: 0000200000000b00 RDI: 0000000000000003
[  178.295458][ T6279] RBP: 00007f3abcd0e024 R08: 0000000000000000 R09: 0000000000000000
[  178.303551][ T6279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  178.311546][ T6279] R13: 00007f3abceff038 R14: 00007f3abcefefa0 R15: 00007ffcf6579d68
[  178.319557][ T6279]  </TASK>
[  178.322605][ T6279] ---[ end trace 2a13bfc80ab53e5e ]---
[  178.328117][ T6279] ------------[ cut here ]------------
[  178.333613][ T6279] WARNING: CPU: 1 PID: 6279 at kernel/trace/ring_buffer.c:4527 rb_get_reader_page+0xa68/0xc00
[  178.344196][ T6279] Modules linked in:
[  178.348145][ T6279] CPU: 1 PID: 6279 Comm: syz.1.2488 Tainted: G    B   W         syzkaller #0
[  178.356911][ T6279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  178.367090][ T6279] RIP: 0010:rb_get_reader_page+0xa68/0xc00
[  178.372911][ T6279] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 dd 2e 3d 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 cc 30 3d 00 f0 ff 43 08 <0f> 0b 4c 8b 64 24 38 4d 85 e4 74 3d 43 0f b6 44 3d 00 84 c0 0f 85
[  178.392627][ T6279] RSP: 0018:ffffc90000bf7940 EFLAGS: 00010006
[  178.398738][ T6279] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff816bf784
[  178.406727][ T6279] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608
[  178.414747][ T6279] RBP: ffffc90000bf7aa8 R08: ffff88810005260b R09: 1ffff1102000a4c1
[  178.422741][ T6279] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 00000000216c0061
[  178.430923][ T6279] R13: 1ffff1102000a123 R14: 1ffff1102000a126 R15: dffffc0000000000
[  178.438912][ T6279] FS:  00007f3abb6d06c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
[  178.447858][ T6279] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  178.454470][ T6279] CR2: 000000110c2f2ece CR3: 000000013f5d6000 CR4: 00000000003506a0
[  178.462450][ T6279] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  178.470430][ T6279] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  178.478415][ T6279] Call Trace:
[  178.481708][ T6279]  <TASK>
[  178.484651][ T6279]  ? ring_buffer_read_page+0x1210/0x1210
[  178.490877][ T6279]  ? __kasan_check_write+0x14/0x20
[  178.496017][ T6279]  ? _raw_spin_lock+0x94/0xf0
[  178.500721][ T6279]  rb_advance_reader+0x2b/0x6b0
[  178.505584][ T6279]  ring_buffer_consume+0x1e7/0x370
[  178.510711][ T6279]  ? ring_buffer_iter_dropped+0x60/0x60
[  178.516268][ T6279]  ? print_trace_line+0x385/0x690
[  178.521335][ T6279]  tracing_read_pipe+0x599/0xab0
[  178.526285][ T6279]  ? s_show+0x320/0x320
[  178.530450][ T6279]  vfs_read+0x28c/0xc20
[  178.534638][ T6279]  ? kernel_read+0x1f0/0x1f0
[  178.539244][ T6279]  ? __kasan_check_write+0x14/0x20
[  178.544413][ T6279]  ? mutex_lock+0x9b/0x1c0
[  178.548837][ T6279]  ? wait_for_completion_killable_timeout+0x10/0x10
[  178.555438][ T6279]  ? __fget_files+0x2e1/0x340
[  178.560141][ T6279]  ? __fdget_pos+0x2d2/0x380
[  178.564768][ T6279]  ? ksys_read+0x70/0x260
[  178.569145][ T6279]  ksys_read+0x14a/0x260
[  178.573425][ T6279]  ? vfs_write+0xfd0/0xfd0
[  178.577854][ T6279]  ? __kasan_check_write+0x14/0x20
[  178.583031][ T6279]  ? switch_fpu_return+0x15d/0x2c0
[  178.588176][ T6279]  __x64_sys_read+0x7b/0x90
[  178.592691][ T6279]  x64_sys_call+0x96d/0x9a0
[  178.597218][ T6279]  do_syscall_64+0x4c/0xa0
[  178.601641][ T6279]  ? clear_bhb_loop+0x50/0xa0
[  178.606335][ T6279]  ? clear_bhb_loop+0x50/0xa0
[  178.611023][ T6279]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  178.616926][ T6279] RIP: 0033:0x7f3abcc770d9
[  178.621382][ T6279] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  178.641010][ T6279] RSP: 002b:00007f3abb6d0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  178.649466][ T6279] RAX: ffffffffffffffda RBX: 00007f3abcefefa0 RCX: 00007f3abcc770d9
[  178.657493][ T6279] RDX: 0000000000000064 RSI: 0000200000000b00 RDI: 0000000000000003
[  178.665526][ T6279] RBP: 00007f3abcd0e024 R08: 0000000000000000 R09: 0000000000000000
[  178.673512][ T6279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  178.681493][ T6279] R13: 00007f3abceff038 R14: 00007f3abcefefa0 R15: 00007ffcf6579d68
[  178.689509][ T6279]  </TASK>
[  178.692549][ T6279] ---[ end trace 2a13bfc80ab53e5f ]---
[  178.717626][ T6284] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2489'.