last executing test programs: 50.871844172s ago: executing program 1 (id=141): syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x18000c6, &(0x7f0000000280)=ANY=[@ANYRES16=0x0, @ANYRES16], 0x0, 0x17d, &(0x7f0000000840)="$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") mkdir(&(0x7f00000009c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000a40)='./bus\x00', &(0x7f0000000a80), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) chdir(&(0x7f0000000b00)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000b40)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000b80)='./file1\x00', 0x2) stat(&(0x7f0000000bc0)='./file0/file0\x00', &(0x7f0000000c00)) 50.79050702s ago: executing program 1 (id=142): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x1000800, &(0x7f0000000080)=ANY=[], 0x2, 0x553b, &(0x7f00000003c0)="$eJzs3L9vG3UUAPDnpGnTH5QIMbD1pAopkWqrTpsKtgCt+CFSRQUGJnBsx3Jr+6LYcUImBkbEwH+CQGJi5G9gYGZDDCA2JJDvzqUpFCHFjZvk85HO7+7rr9+9rxWd9O4iB3BqLSS//1qKy3E+ImYj4lJEtl+KiLnxpNU8vBQRVyJi5pGtVIw/HDgbERci4vIoeZ6zVLz15bXh1ZVf3vntux/Onbn41bc/Tm/VwLS9HBHdrXx/t5vHtJXH+8V4bdjOYvfmsIj5G90HxXGax93mRpZhtzaeV8vijVY+P93a6Y/iZqdWH8VWezMb3+rlJ+wPW+M82Qfu17az40ZzI4vtfprF1n5e195+fm3b7w/yPI0i3ydZ+hgMxjEfb+418/VsPchivTcoxvO8aaO5N4rDIhani3raaWR1bBzmm362vdvu7ewlw+Z2v532kpVK9ZVK9Va5up02moPmzXKt27h1M1lsdUbTyoNmrbvaStNWp1mpp92lZLFVr5er1WTxdnOjXesl1WrlRuV6eWWp2LuWvHn3g6TTSBZH8fV2b2fQ7vSTzXQ7yT+xlCxXbry6lFytJu+trSfr9+7cWVt//6PbH959be3tN4pJ/ygrWVy+vrxcrl4vL1eXTtH6PyuKnuD64VBK0y4A4Pj5r/7/4WVV/w9M2BP7/9EF6FD9//a9iKff/4f+fyKOVf/7zPT/83FS1g+Hov8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADi1fpr7+q1sZyE/vliMP1cMvVAclyJiJiL+/BezcfZAztkiz9wT5s89VsP3pcgyjM5xrtguRMRqsf3x/NP+FgAAAODk+ubTK1/k3Xr+sjDtgjhK+U2bmUsfTyjffETMLfw8oWwzo5cXJ5Qs+/s+E3sTypbdwJqfULL8ltuZSWX7X2YPhPlHQikPM0daDgAAcCQOdgJH24UAAABwlD6fdgFMRynGjzLHz4Kz/7z/+4Hg+QNHAAAAwDFUmnYBAAAAwMQ9/hw/6//9/h8AAACcbPnv/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8xc695CYOA2AAdhICzEuDRrOfq8wOjjFHmOUsRxygl+AAXdArdNcVZ6C7HqEiFYkpj6IqFebR6vukNI2Jf2wUFraFAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4pvtyOrr5/+vq0JxF1dZdCOFlaZreAAAAAPvMy+mo/mfQXH+J5d9i0Y94nYUQ8r0j96oqQncrs4g55fr+6837y5023IZQJyzfoxePzyGE3/F4/H7sTwEAAAA+rtl4MmxG682fQYs6u2N33q1m0ib/+idRXrZ8PAYPidLyZd7PFEnd+Hx3wr8UcasvQT9RWDPl1kmVVitavb6atetvnLLmlO+t9tzIZH0HAABOqNg6pR2FAAAAcEn+nrsBpNZueS4L6/X8uBTY26r/6S1pAAAAwCXKzt0AAAAAII1Xfglcj/9PtP9fZf8/AAAAOI9m/z8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACOaV5OR7PxZHhozqI6TJreAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAT+zPOwqEQBiEwd71ncnc/7DSoKmpSRUIH39jMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALz53V/+T0yNM8nca2PpeSRZOzW2To29c+PoD+Pr1wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwsT8vKRACQRAFc8b/Tvr+h5UEPYMIEdDwqKIWDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAX/S7X/5PTI0zydxpY+l4JFm7amxdNfYeNI4ejLd/AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwsXP/vm1UcQDA3935nLaAMAF5CEIgMcBCXbe0dEMMoIiBPwEpSt0S6vKjzUCrCuGFDWXugmBECAkUtv4PnVupS9k6eCgSM+h8d/G1iYQhzZ3jfD7S8/ve2br3fS9RlO+9SwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABK4/emcZK9dPI4Ls7dfXRzPevvPdFnbm/dX8laFkd1Jn04vFI9iLrNJQIAAMBCG1UPkrK+DyE8SLdXsz7uTOr/tPxMVvP/8Fwel/X8k3V/2Ze1f9Z+/+3hSzsDdfJxsote3BgOTu3Oq/XUZ3pIPP8v7+cLE+X3XpLJFyT+cPTiOJ2sZ/TdnTvvtyfhUh3ZAgD/x8myL4Ly96Gs7zeZGABHRqtSeJf1f9JpNicAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAOoxH4ZkyjkIIK61pnLn36Ob6Xv3trfsrZTt369ZW+GZ6zewSaQjh4sZwcKrW2cy3a9dvXF4bDgdX6w9eDSEc7BBR8R2z+613i+lf/niG64TQyPo0FxwrVmde8tlnEC/WdGoKmvhpBADAIkuLllVpD9Lt1exctBzC3z8+Xv+/UYnDjPX/w0/O3a2OVa3/+7XNcP71Nq980bt2/cZbG1fWLg0uDT57+3T/nf6Z82fPnu9N7pX03DEBAABgf9pFq9b/8fLu/f8TlTjMWP9/+X3/6+pYifp/T9NNv6YzAQAAONpeeO2vP6M9zkftdvhqbXPzaj9/3Tk+nb82kOp/tlS0av2fLDedFQAAAFCH8Sh6bP//QiUOM+7/P/vTy79Ur5mEEI4X+/8n1z8fXqhvOk1YmvWDdfw58cFOFQAAgHl3vGjV/f908vx/vPPIQxxCePP1PC7+DeBM9X/ywbc/V8eqPv9/pr4pzqW4m6/HpO+G0Oo2nREAAACL7FjRsmL/j3R79dNfT3zU9vw/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQN3+CQAA//+g4jQO") r0 = openat(0xffffffffffffff9c, &(0x7f0000005980)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000059c0)='./bus\x00', 0x1c1002, 0x8a) write(r1, &(0x7f0000005a00)="c7", 0x1) sendfile(r1, r0, 0x0, 0x2fffe) sendfile(r1, r0, 0x0, 0x7ffff000) 50.00914823s ago: executing program 1 (id=149): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18000019700600000000000009"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @cgroup_sock_addr=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x18, 0x68, 0x309}, 0x18}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = syz_clone(0x20011, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) wait4(r0, 0x0, 0x80000000, 0x0) ptrace$setsig(0x4203, r0, 0x81, &(0x7f00000000c0)={0x5, 0x4, 0x5}) 49.855910526s ago: executing program 1 (id=154): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$exfat(&(0x7f0000000040), &(0x7f00000004c0)='./file0\x00', 0x80, &(0x7f0000000500)=ANY=[@ANYRES8=r0, @ANYRES16=r0, @ANYRES32=0x0], 0x1, 0x1548, &(0x7f0000000540)="$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") mkdir(&(0x7f0000001ac0)='./bus\x00', 0x0) mount$incfs(&(0x7f0000001b00)='./bus\x00', &(0x7f0000001b40)='./bus\x00', &(0x7f0000001b80), 0x1804002, 0x0) chdir(&(0x7f0000001c40)='./bus\x00') r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000002500)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 49.776034984s ago: executing program 1 (id=155): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x101800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f00009c5000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000340)="b9410101c0b800800000ba000000000f3067f0428170c939000000c744240059000000c7442402ac030231ff1c2435080000002e3636400f3266bad004ed400f239cc01643c744240000000000c744240206000000c7442406000000000f01142466460f2f8c6902000000b9da0b00000f", 0x71}], 0x1, 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 49.662735996s ago: executing program 1 (id=157): r0 = socket(0x1, 0x80802, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000680)={'veth0_to_batadv\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f00000006c0), 0x8) r3 = socket$packet(0x11, 0x2, 0x300) bind$packet(r3, &(0x7f0000000700)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000740), 0x8) 49.662579176s ago: executing program 32 (id=157): r0 = socket(0x1, 0x80802, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000680)={'veth0_to_batadv\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f00000006c0), 0x8) r3 = socket$packet(0x11, 0x2, 0x300) bind$packet(r3, &(0x7f0000000700)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000740), 0x8) 47.148161434s ago: executing program 5 (id=221): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="0a00000004000000080000000a"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xc, 0x4, 0x4, 0x100, 0x0, r1, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0x1d, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) 47.08906799s ago: executing program 5 (id=224): mkdirat(0xffffffffffffff9c, &(0x7f0000002c80)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002cc0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002d00)='./file0\x00', &(0x7f0000002d40), 0x404, &(0x7f0000002d80)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002e00)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004e40)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x2b418842, 0x6}}, 0x50) statx(0xffffffffffffff9c, &(0x7f0000004ec0)='./file0/file1\x00', 0x1000, 0x100, 0x0) syz_fuse_handle_req(r0, &(0x7f0000007080)="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", 0x2000, &(0x7f0000009080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000009140)={0x90, 0x0, 0xffffffffffffffff, {0x6, 0x3, 0x0, 0x4000000000800, 0xfffffffd, 0x6, {0x2, 0x8000000000000000, 0x8, 0x100000000000, 0x2000000000000db4, 0x85, 0x8, 0x6, 0x2010, 0x4000, 0xe44, r2, r3, 0x40fe, 0x81}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 46.98592846s ago: executing program 5 (id=231): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8082, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./file2\x00', 0x143042, 0x40) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0xca02}) readv(r0, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/84, 0x54}], 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x30, 0x10, 0x1, 0x70bd28, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x3}, [@IFLA_TXQLEN={0x8, 0xd, 0x1}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) 46.685653391s ago: executing program 5 (id=237): syz_mount_image$ext4(&(0x7f0000000480)='ext4\x00', &(0x7f0000001a80)='./bus\x00', 0x20081e, &(0x7f0000001d80)={[{@nodelalloc}, {@nombcache}, {@auto_da_alloc}]}, 0x1, 0x4ef, &(0x7f0000001dc0)="$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") symlink(&(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000a80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') creat(&(0x7f0000003800)='./bus\x00', 0x0) mount(&(0x7f0000003840)=@loop={'/dev/loop', 0x0}, &(0x7f0000003880)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f00000038c0)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000003900)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) readlinkat(0xffffffffffffff9c, &(0x7f0000000b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0xb4) 46.40570184s ago: executing program 5 (id=241): fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='mem\x00\xffEev\xf2r\xf1\x18\x1d\xb9\x00y_hug$\bo-\x03Q`]o\x8cr\x9d_etl\xf9\xdd\a\xad\\H\xe94\b,H\xbf', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)) mkdir(&(0x7f0000000000)='my_sys\x00', 0x1fd) mount(0x0, &(0x7f0000000080)='my_sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xff, 0x0, 0x12, r1, 0x0) preadv2(r0, &(0x7f0000000340)=[{&(0x7f0000000140)=""/99, 0x63}], 0x1, 0x1, 0xfffff53a, 0x0) 45.850640737s ago: executing program 5 (id=252): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000009c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a00)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b703000000000000a500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000b40)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x18, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000b80)=@generic={0x0, r4}, 0x18) close_range(r0, 0xffffffffffffffff, 0x0) 45.818875311s ago: executing program 33 (id=252): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000009c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a00)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b703000000000000a500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000b40)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x18, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000b80)=@generic={0x0, r4}, 0x18) close_range(r0, 0xffffffffffffffff, 0x0) 42.887659452s ago: executing program 3 (id=296): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x2041, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f00000002c0)={0x160003, 0x0, {[0xfffffffffffffffc, 0x9, 0x40000004, 0x4, 0x20000080005, 0x4, 0x1, 0xfffffc]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 42.755538185s ago: executing program 3 (id=299): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000180)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8d}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000200)=[{{0x0, 0x0, 0x0}}], 0x40000000000027f, 0x0) 42.406982531s ago: executing program 3 (id=305): r0 = gettid() r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000200)="0022040000ffffebfffffffeffffff0700000000ff000207835eeb1317b208feefaf234b4ff8b4cc4c39bdc8451792b903f4b7d8c8cf2153622652328c19ef68234f905557c4070000008735e9ab2f77c62e0a5cdd2cf9984c070400000000000003ff23353d8b2fc6a3ae1ebfcb49004a3ccd3560ae01010000079c60ed7449b842f3e253be8a62b37f820fe75a9ea937ea4efbfb9b4a128f2dbe2837496d00ad7765abaac2ec0f91c88a1ea1ff6ee308c72febedcf00798d41991ac25bb6fce2220c25ea380c7e112ab358c3a6bd8a59c100000001b4e82cb03419544a3988bc226a85abe6eb60cd7cf8d103d38c31c7c86d16c4d86cbe4ab190c092d077ce70590fbbd4f8bf4d6ab1cea6dbe9d4a54c17aac0db6e3845", 0x118) connect$inet6(r1, &(0x7f0000000380)={0xa, 0x4e23, 0x8020000c, @loopback={0x91}, 0xffffffff}, 0x1c) timer_create(0x0, &(0x7f00000003c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000400)) timer_settime(0x0, 0x0, &(0x7f0000000440)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) 42.370259745s ago: executing program 3 (id=307): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$exfat(&(0x7f0000000500), &(0x7f0000000600)='./file0\x00', 0x80, &(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r0, @ANYRES32=0x0], 0x1, 0x1548, &(0x7f0000000680)="$eJzs3AuYTlXbOPD7XmvtMSSeJjkMa6178ySHRZLkkCSHJEmSJKfklCZ5JSExhCQNSUgOQxJDSA4Tk8b5fD4kJEmTJCE5Jet/Tbi8vdW/vq++1/e9c/+ua1+z7mfve+21n3s/z7P2npnnm65DazauVa0hEcFfghd+JAJALAAMBIDcABAAQLm4cnGZ67NLTPxrO2F/rwdTrvQI2JXE9c/auP5ZG9c/a+P6Z21c/6yN65+1cf2zNq4/Y1nZpmkFruEl6y58////uNi/ksyf//9BMkqN/WJNqeu6AcT8ia2zA9c/y+P6/8cK/sxGXP+sjeufVf2laSP7P+DpP7ENv/6zgmy/u4brn7Vx/RnLyq70/ec/vyAA/P39QuR/2XNwJPuFwvyb9nelzz/GGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY1nDaX+ZAoBL7Ss9LsYYY4wxxhhjjP19fLYrPQLGGGOMMcYYY4z9z0MQIEFBADGQDWIhO+QAAQBXQy7IDRG4BuLgWsgD10FeyAf5oQDEQ0EoBBoMWCAIoTAUgShcD0XhBigGxaEElAQHpaA03Ahl4CYoCzdDObgFysOtUAEqQiWoDLdBFbgdqsIdUA3uhOpQA2pCLbgLasPdUAfugbpwL9SD+6A+3A8N4AFoCA9CI3gIGsPD0AQegabQDJpDC2j5+/ntEOB38p+DnvA89ILekAh9oC+8AP2gPwyAF2EgvASD4GUYDK9AEgyBofAqDIPXYDi8DiNgJIyCN2A0vAljYCyMg/GQDBNgIrwFk+BtmAzvwBSYCikwDabDuzADZsIseA9mw/swB+bCPJgPqfABLICFkAYfwiL4CNJhMSyBpbAMlsMKWAmrYDWsgbWwDtbDBtgIm2AzbIGtsA22ww74GHbCJ7ALdsMe+BT2wmf/xfxT/5LfDQEBBQpUqDAGYzAWYzEH5sCcmBNzYS6MYATjMA7zYB7Mi3kxP+bHeIzHQlgIDRokJCyMhTGKUSyKRbEYFsMSWAIdOiyNpbEM3oRlsSyWw3JYHstjBayIFbEyVsYqWAWrYlWshtWwOlbHmlgT78K7sA/WwTpYF+tiPax36fYUNsSG2AgbYWNsjE2wCTbFptgcm2NLbImtsBW2xtbYFttie2yPHbADJmACdsSO2Ak7YWfsjF2wC3bFrtgNu2P3jOeyAT6Pz2NvrC76YF/si/0wKdsAfBFfxJdwEL6ML+MrmIRDcCi+iq/iazgcT+IIHImjcBRWEW/iGByLJMZjMibjRJyIk3BS5ukG7+BUTMFpOB2n4wyciTPxPZyN7+P7OBfn4nxMxVRcgAsxDdNwEZ7CdFyMS3ApLsPluAxX4ipciWtwLa7B9bgeN+JG3IybcStuxe24HT9GBYCf4G7cjUm4F/fiPtyH+3E/HsADmIEZeBAP4iE8hIfxMB7BI3gUj+FxPIYn8ASexFN4Gk/jWTyL5/CZ+K8afVx8dRKITEooESNiRKyIFTlEDpFT5BS5RC4RERERJ+JEHpFH5BV5RX6RX8SLeFFIFBJGGEEijAEAERVRUVQUFcVEMVFClBBOOFFalBZlRBlRVpQV5cQtory4VVQQFUUbV1lUFlVEW1dV3CGqiWqiuqghaopaopaoLWqLOqKOqCvqinqinqgv7hcNRB8cgA+KzMo0FkOwiRiKTUUzIS++g7USw7G1aCPainZiJI7ADqKVSxBPio5iDHYS/xBj8WnRRYzHruJZ0U10Fz3Ec6KnaO16id5iMvYRfcVU7Cf6iwHiRTEDa4j3cHb2muIVkSSGiKHiVTEfXxPDxetihBgpRok3so8Wb4oxYqwYJ8aLZDFBTBRviUnibTFZvCOmiKkiRUwT08W7YoaYKWaJ98Rs8b6YI+aKeWK+SBUfiAVioUgTH4pF4iORLhaLJWKpWCaWixVipVglVos1Yq1YJ9aLDWKj2CQ2iy1iq9gmtosd4mOxU3widondYo/4VOwVn4l94nOxX3whDogvRYb4ShwUX4tD4htxWHwrjojvxFFxTBwX34sT4gdxUpwSp8UZcVb8KM6Jn8R54QVIlEJKqWQgY2Q2GSuzyxzyKplTBhef3WtknLxW5pHXybwyn8wvC8h4WVAWkloaaSXJUBaWRWRUXi+LyhtkMVlclpAlpZOlZGl5oywjb5Jl5c2ynLxFlpe3ygqyoqwkK8vbZBV5u4TIhX1UlzVkTVlL3iUT4W5ZR94j68p7ZT15n6wv75cN5AOyoXxQNpIPycbyYdlEPiKbymayuWwhW8pHZSv5mGwt28i2sp1sLx+XHeQTMkE+KTtKf/EUeVp2kc/IrvJZ2U12lz3kT/K89LKX7C2hD8i+8gXZT/aXA2IBQL4kB8mX5WD5ikySQ+RQ+aocJl+Tw+XrcoQcKUfJN+Ro+aYcI8fKcXK8TJYT5ET5lpwk35aT5TtyipwqU+Q0OUAO/LmnWVL+Yf5bv5E/+Oe9b5Sb5Ga5RW6V2+R2uUN+LHfKnXKX3CX3yD1yr9wr98l9cr/cLw/IAzJDZsiD8qA8JA/Jw/KwPCKPyKPymDwjv5cn5A/ypDwlT8kz8qw8K89dfA5AoRJKKqUCFaOyqViVXeVQV6mc6mqVS+VWEXWNist8F1bXqbwqn8qvCqh4VVAVUloZZRWpUBVWRVRUXY8XTxhVQpVUTpVSpdWNF/LVtSrPH+erouoGVUwV/0X+pfEl/s74WqqWqpVqpVqr1qqtaqvaq/aqg+qgElSC6qg6qk6qk+qsOqsuqovqqrqqbqqb6qF6qJ6qp+qleqlElaj6qhdUP9VfDVAvqoHqJTVIDVKD1WCVpJLUUDVUDVPD1HA1XI1QI9QoNUqNVqPVGDVGjVPjVLJKVhPVRDVJTVKT1WQ1RU1RKSpFTVfT1Qw1Q81Ss9RsNVvNUXPUPDVPpapUtUAtUGkqTS1Si1S6WqwWq6VqqVqulquVaqVarVartWqtWq/Wq3S1SW1SW9QWtU1tUzvUDrVT7VS71C61R+1Re9VetU/tU/vVfnVAHVAZKkMdVAfVIXVIHVaH1RF1RB1VR9VxdVydUCfUSXVSnVan1Vl1Vp1T59R5dT5z2heIQAQqUEFMEBPEBrFBjiBHkDPIGeQKcgWRIBLEBXFBnuC6IG+QL8gfFAjig4JBoUAHJrCBuFj0aHB9UDS4ISgWFA9KBCUDF5QKSgc3BmWCm4Kywc1BueCWoHxwa1AhqBhUCioHtwVVgtuDqsEdQbXgzqB6UCOoGdQK7gpqB3cHdYJ7grrBvUG94L6gfnB/0CB4IGgYPBg0Ch4KGgcPB02CR4KmQbOgedAiaPm39u/9yXyPuV66t07UfXRf/YLup/vrAfpFPVC/pAfpl/Vg/YpO0kP0UP2qHqZf08P163qEHqlH6Tf0aP2mHqPH6nF6vE7WE/RE/ZaepN/Wk/U7eoqeqlP0ND1dv6tn6Jl6ln5Pz9bv6zl6rp6n5+tU/YFeoBfqNP2hXqQ/0ul6sV6il+plerleoVfqVXq1XqPX6nV6vQK9UW/Sm/UWvVVv09v1Dv2x3qk/0bv0br1Hf6r36s/0Pv253q+/0Af0lzpDf6UP6q/1If2NPqy/1Uf0d/qoPqaP6+/1Cf2DPqlP6dP6jD6rf9Tn9E/6vPaZk/vMj3ejjDIxJsbEmliTw+QwOU1Ok8vkMhETMXEmzuQxeUxek9fkN/lNvIk3hUwhk4kMmcKmsImaqClqippippgpYUoYZ5wpbUqbMqaMKWvKmnKmnClvypsKpoKpZCqZ28xt5nZzu7nD3GHuNHeaGqaGqWVqmdqmtqlj6pi6pq6pZ+qZ+qa+aWAamIamoWlkGpnGprFpYpqYpqapaW6am5ampWllWpnWprVpa9qa9qa96WA6mASTYDqajqaT6WQ6m86mi+liupquppvpZnqYHqan6Wl6mV4m0SSavqav6Wf6mQFmgBloBppBZpAZbAabJJNkhpqhZpgZZoab4WaEGWlGZU5UzZtmjBlrxpnxJtkkm4lmoplkJpnJZrKZYqaYFJNippvpZoaZYWaZWWa2mW3mmDlmnplnUk2qWWAWmDSTZhaZRSbdpJslZolZZpaZFWaFWWVWmTVmjVkH68wGs8FsMpvMFrPFbDPbzA6zw+w0O80us8vsMXvMXrPXI4DZb/abA+aAyTAZ5qA5aA6ZQ+awOWyOmCPmqDlqjpvj5oQ5YU6ak+a0OW3OmnwXPy+9ibXZbQ57lc1pr7a5bG77r3F+W8DG24K2kNU2r833i9hYa4vZ4raELWmdLWVL2xt/FVewFW0lW9neZqvY223VX8W17d22jr3H1rX32lr2rl/E9ex9tr592DZABLDNbCPbwja2D9sm9hHb1DazzW0L294+bjvYJ2yCfdJ2tE/9Kl5gF9pVdrVdY9faXXa3PW3P2EP2G3vW/mh72d52oH3JDrIv28H2FZtkh/wqHmXfsKPtm3aMHWvH2fG/iqfYqTbFTrPT7bt2hp35qzjVfmBn2zQ7x8618+z8n+PMMaXZD+0i+5FNtwEssUvtMrvcrrArL43V57br7Qa70e60n9gtdqvdZrfbHZcmwna33WM/tXvtZ/ag/drut1/YA/awzbBf/RxnHt9h+609Yr+zR+0xe9x+b0/YH9Sl7Mxj/97+ZM9bb4GQgCQpCiiGslEsZaccdBXlpKspF+WmCF1DcXQt5aHrKC/lo/xUgOKpIBUiTYYsEYVUmIpQlK6nS8MrQSXJUSkqTTdSGbqJytLNVI5uofJ0K1WgilSJKtNtVIVup6p0B1WjO6k61aCaVIvuotp0N9Whe6gu3Uv16D6qT/dTA3qAGtKD1Igeosb0MDWhR6gpNaPm1IJa0qPUih6j1tSG2lI7ak+PUwd6ghLoSepIT1En+gd1pqepCz1DXelZ6kbdqQc9Rz3peepFvSmR+lBfeoH6UX8aQC/SQHqJBtHLNJheoSQaQkPpVRpGr9Fwep1G0EgaRW/QaHqTxtBYGkfjKZkm0ER6iybR2zSZ3qEpNJVSaBpNp3dpBs2kWfQezab3aQ7NpXk0n1LpA1pACymNPqRF9BGl02JaQktpGS2nFbSSVtFqWkNraR2tpw20kTbRZtpCW2kbbacd9DHtpE9oF+2mPfQp7aXPaB99TvvpCzpAX1IGfUUH6Ws6RN/QYfrW96bv6Cgdo+P0PZ2gH+gknaLTdIbO0o90jn6i8+QJQgxFKEMVBmFMmC2MDbOHOcKrwpzh1WGuMHcYCa8J48JrwzzhdWHeMF+YPywQxocFw0KhDk1oQwrDsHBYJIyG14dFwxvCYmHxsERYMnRhqbB0eGNYJrwpLBveHJYLbwnLh7eGFcKK4cP3Vg5vC6uEt4dVwzvCauGdYfWwRlgzrBXeFdYO7w7rhPeEdcN7w7LhfWH98P6wQfhA2DB8MGwUPhQ2Dh8Om4SPhE3DZmHzsEXYMnw0bBU+FrYO24Rtw3Zh+/DxsEP4RJgQPhl2DJ/6ef19C39/fWLYJ+wbvhC+EHp/j5wXnR9NjX4QXRBdGE2LfhhdFP0omh5dHF0SXRpdFl0eXRFdGV0VXR1dE10bXRddH90Q3Rj1vlY2cOiEk065wMW4bC7WZXc53FUup7va5XK5XcRd4+LctS6Pu87ldflcflfAxbuCrpDTzjjryIWusCviou56V9Td4Iq54q6EK+mcK+VKuxaupWvpWrnHXGvXxrV17Vw797h73D3hnnBPuo7uKdfJ/cN1dk+7Lu4Z94x71nVz3V0P95zr6SbkuvCaTHR9XV/Xz/VzA9wAN9ANdIPcIDfYDXZJLskNdUPdMDfMDXfD3Qg3wo1yo9xoN9qNcWPcODfOJbtkN9FNdJPcJDfZTXZT3BSX4lLcdDfdzXAzXJWZF/Yyx81x89w8l+pS3QKXOWdMc4vcIpfu0t0St8Qtc8vcCrfCrXKr3Bq3xq1z69wGt8FtcpvcFrfFbXPb3A63w+10O90un/tCp26v2+f2uf1uvzvgvnQZ7it30H3tDrlv3GH3rTvivnNH3TF33H3vTrgf3El3yp12Z9xZ96M7535y5513yZEJkYmRtyKTIm9HJkfeiUyJTI2kRKZFpkfejcyIzIzMirwXmR15PzInMjcyLzI/khr5ILIgsjCSFvkwsijyUSQ9sjiyJLI0siyyPOJ9wS2hL+yL+Ki/3hf1N/hivrgv4Ut650v50v5GX8bf5Mv6m305f4sv72/1FXxFX8k/4pv6Zr65b+Fb+kd9K/+Yb+3b+La+nW/vH/cd/BM+wT/pO/qnfCf/D9/ZP+27+Gd8V/+s7+a7+x7+Od/TP+97+d4+0ffxff0Lvp/v7wf4F/1A/5If5F/2g/0rPskP8UP9q36Yf80P96/7EX6kHxXzhh996RIZxvtkP8FP9G/5Sf5tP9m/46f4qT7FT/PT/bt+hp/pZ/n3/Gz/vp/j5/p5fr5P9R/4BX6hT/Mf+kX+I5/uF1+6qexX+JV+lV/t1/i1fp1f7zf4jX6T3+y3+K1+m9/ud/iP/U7/id/ld/s9/lO/13/m9/nP/X7/hT/gv/QZ/it/0H/tD/lv/GH/rT/iv/NH/TF/3H/vT/gf/El/yp/2Z/xZ/6M/53/y5/l/1hhjjDHG/pQJl5vil2su3M7v8xs54p827gsAV28tkPHP6zNnlOvyXmj3F/HtIwDwZO+uD15aqldPTEy8uG26hKDIXIBLvwnKFAOX48XQFh6HBGgDZX5z/P1F97P0B/1HbwHI8U85sXA5vtz/5wCY+Bv9P9pu1ILy4em4/0//cwGKFbmckx0ux4uh7c/3V9pA2d8Zf75WfzD+7F8kA7T+p5yccCk+ePHbGjLHXxoeg6cg4RdbMsYYY4wxxhhjF/QXlTpfuv689Befv3V9Hq8u52SDy/EfXZ8zxhhjjDHGGGPsynu6e48nHk1IaNP5v96o+t/K+tONJvA/1TM3frPhPcClRxQA/MUOATIb8t95FJv/LftKuvjS+ddVy874AP53lPLvaFzhNybGGGOMMcbY3+7ypP+Xj6srNSDGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYYywL+nd8ndiVPkbGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGPsSvt/AQAA///BeAKt") mkdir(&(0x7f0000001c00)='./bus\x00', 0x0) mount$incfs(&(0x7f0000001c40)='./bus\x00', &(0x7f0000001c80)='./bus\x00', &(0x7f0000001cc0), 0x1804002, 0x0) chdir(&(0x7f0000001d00)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000540)='./file0\x00', 0x0, 0x8, 0x0) 42.23100048s ago: executing program 3 (id=310): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x3, 0x4, 0x8}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000003c0)=r1, 0x4) r3 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x4098884, &(0x7f0000000400)={0xa, 0x4e1d, 0x4, @mcast2}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) 42.122275891s ago: executing program 3 (id=313): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x87) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000000)=""/49, 0x31) getdents(r2, 0xfffffffffffffffd, 0x58) 42.02698968s ago: executing program 34 (id=313): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x87) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000000)=""/49, 0x31) getdents(r2, 0xfffffffffffffffd, 0x58) 39.237079257s ago: executing program 6 (id=363): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@newtfilter={0x24, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x9}, {0x0, 0xffff}, {0x300, 0x1}}}, 0x24}}, 0x0) 39.133453147s ago: executing program 6 (id=367): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0xca02}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000240)={0x0, 'syzkaller0\x00', {0x1}, 0xb5}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000300)=""/29, 0x1d}], 0x1, 0x402, 0x200007c) 38.980108233s ago: executing program 6 (id=370): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001100)={0x3, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@base={0x1, 0x4, 0x20008, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000940)={{r0}, &(0x7f00000008c0), &(0x7f0000000900)='%-010d \x00'}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 38.886106863s ago: executing program 6 (id=374): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x10000, &(0x7f00000000c0)=ANY=[], 0x1, 0x553a, &(0x7f0000002880)="$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") mkdir(&(0x7f0000000000)='./bus\x00', 0x49) r0 = open(&(0x7f00000006c0)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000800)={0xa0, 0x0, 0x0, {{0x3, 0x0, 0x8000000200007, 0x282b, 0x5920, 0x80001, {0x200000000200004, 0x10005c62, 0x206, 0x1000000000, 0x83, 0x4, 0x10000006, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee00, 0x8, 0x1}}, {0x0, 0xa}}}, 0xa0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x8, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x42, 0x1ff) 38.270680846s ago: executing program 6 (id=392): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_mount_image$erofs(&(0x7f0000000640), &(0x7f0000000680)='./file0\x00', 0x2800091, &(0x7f0000000740)=ANY=[@ANYRES64=0x0, @ANYBLOB="333ed5fca4fdc9da41dc5525a31e2eabcdf2226f58d7bbdaa080715a87526444f694c24bc9dcde8d7b23b254e1004eca8b8da13ab3013dd83f54c309d8aa225fc6f134488184e57f6d604e614457290fd158133e36ecff45f77a818df131c24d37d26a6d12810be5c781ee1406efd1e6e194a04db64a13f8c019f54bcb0fc4d3b629670d76e9512b4a630436da731000000000000000", @ANYRES32, @ANYRES16=0x0, @ANYBLOB="d016c8d55cc9329d2e0101797fb5f52944f2b8694bae76ff77df23047285b916fba6b36c1b409890d28883acf4093105048a0c8cea76a257b7ee39a0fa772953b17ccd5d14328bcd8cd30f4cf0aa220eb9fcb0883de194766c39954634b5f9a0ca862e09200c5cf06ec1214c819ffadf5291b8ed1536d9145da9796ebeb922e3eea04914e29748eca2c90ffd65bace2ec8cb6808e9e719426ee9bb119acecbf8a735429439a2093d21aecabbdd15d44ddcf79b892ccb1b096880abd5988d69079281b4619ee58eaae0d054eaa813a0a1ee847cbef8563408ab7db29a8965f5a121b56175f4be4dfbf2e6da7e4b74b67f37ec6660227c655b67e0f1a41c18ae60ab4bf766c5460f296625113944f84df515da615e597357d29059cb92f354e88594b05de4328d59b0e0e099e996c126c6663c9751466f81e2059cd90aef508fa30a1b0cd6b0c1d9fc04a8831801d0c7ba813dc1e59614bf56c69ae20f1683889e7247a12b740a9656421981e0763c64e4ade9be51ff260d61fb3a8ad54bfe09225d3a8402f426fcd2243a4c246669dddec2bf5fd601dccfd57e680f0e869deffb3f91c6a12fd339a61bf2027566c590343154e79969abee74a57e0916438c58198a4816d31b2ee9d481fd2ea6264fa36185d7e025d245dc151fcb87c3502ef537695b244dccaf592c543565cccb52e177ecfa5a5adf612afe4b98edfaa1d2d4ad14ddf67ad5c33bc86967c305312b1df912286ad92e21fb025dc18c1f262f733eeaa0f17f437f41a2ea816cad63e736d6182b96da94b23dd86130a388b4b0b84554eb4ce851ce5610049ace33cf1282b21b771733baad9030dee46cd6209df098d04a131eafc8b2ed58c71461c50cadcc912ab0edd9eb090d36661df4653053608b6156d99298b7dfea7fe67ede7d040dac6ac66e78967eb3c05ddb469c90bc8e5a8f1c74088caa5ba98db4ffb9a8aca8f8f01a0383c349a5dfb139362a5f665abb5f5d07a5c59b5c35c7cb8bb53e6baaaa42352b09f443477dfa6bed6049339101ceecc3bd1b327fdf2ec8ed7d1e5cbd02d1630e34e6f2c7150f47ff9a974a88ac2e8f94fde99f4cad1554ca0f7520b0a5af672346f0cca349153c5b939a32b07ac78909bebdccdbd3b1ab3532c6d061c2665ee9d67887ec209d1cf5125989588c79a18b99e2ae30bf3bafeffd6b2ff032ba4b6f64b62abdf0f53feb4b7d722dfe13dddc79c9d6f655f01db1cf6d92057332a96d92069a4347235a08b6ae91417cee0fe37a339beaedcf50b3b68cf7b99d22b29d49137bbc7bc38ad6cf6e200e29b94077305293825c4476dc17634a3ecb1c75b289c8e270f68c9dcb8341471fef9a1b8e0d191a8cbe6192b0738f44144379b15d2db2269797c09c1789be60c9e52f452a5205c66782c91fd2573d27f65161a5eda08df1b0e7ee3d4e8b6c1a9b4fc87392e16e8c0dba1884adc52acc7cdd93c8f83feb5d44cab62b9856678eaaf9bb82825230c44ea177bb62ab36fcb8875bed5b4f9ad3eba65a75fc6428fe3abce7b42b992fa4dc218669e848f3d07553e6d381ecc3e1f9c9ac3650c1d11844cd29352132a07e9324b3fb70166977855669ec0cfe75cc34b8e21044e142ac7da564b1ececd3a985c4b3d0bdefec84a96c13c9a496b80cfc1a915804646fd14ca5e90b036c9f247f564af75ae851203c8640ecfa25c1837167c91b977a07fc1b88de3a257b3bb63a380bee62d7300dd84aa087f579172651f2db55f8e0c6efcf759a5343f5e59110177e3f7b948dcb0d33ab9ebec1d1b987c55d10bc6214cb81866dd5ae794ae89a3e9ceef6f73714138b69ccf6562a136bbff44eaf0d2b8587db3b9a6dbedb48930b9541e0d6c21239ec2ee78b77957742490c651cabdec8fe87731eaa77811ab31a6e47f21bc1e6000b20f6e9118bf7baeb6985047f937c7ca4e27ad16a8b108e0e1e7645c5e181bdf3354c7b11ff44c7a9600f8e0b4919f24cdf72abcacb509fe56418430bb1a46fe4044e886574c0ca22e1a9e316784510220d9e628744e9cb38c9805570935f0407f1596fb9965c1575963643d85a7f1e4f641d66c4fbb8d962857aea040d0d6f4e324bcc2c157efd5e9313a41069728ac75a84022814011420428f0c84d8808cf228379c5770a10dd4a2540ee9b49cf4c67423ce11545415cb3b3a271fad52979dfb205e765bbbdf27db6871373e5704aea7f8da0f71b6d2cd51a4c13e5140c9018d98c820e572df54a8accb9f378bf768325939913efdf90b69debc59d2d4195f2c60be37683201a157bdd25f365d35c97eb3d8579d98b1d270164b2f4b0f590f6cdbb9bcc8d0da4439b6cdad548c7a7976b89fabd64ee53f65c3bac50702a14d393bc1469db6f7fa5a607c6b09eb6157982fe7b70a50e2508bc9f2d6e6ed98f7f68e8a26683db2776f19422688d72c2d3c128c10382a81c970064dac4fdfd5873c711bdb902f70bb72c95b2db18ab3d4001f38a0d59a43b12f5002909513df9d90fe1abb35111ca57847f37b56242676fd2ca33b7bf0f858ccfc3c600af12235b26f488f94c6bbdee6d3b42f1cc9db75d8219b9a2c96f4ea153d3fa14517a1a5369c71f136c2a9ae234a85882d21b66354d08eadb2f68a5e932341596b44bea306f11a0a4ac5c2561c2540d025545a8735dbda092003709e8f4db40a744ae99f96750a036b0958a521202477b4d3eb94aada9a94045cdc70861a8d8fc08e79a960022f34231897f1a4816e998d0589146ce4b2426050d166424d7c3d5209f7814d824172aec43c4bd68f49855363917a71c7f91636f74bd0eeb4df24a846cb627ab8248b5400d3e2d8fe1297c6422cb5fae73be62c3015d4d4b5d40dd1206eb7228884ac609fbd255b12677ad5a535ec3bf2855ea4004ae625ceb787da5a2b17cf6de63a9890658e8f0fd497e029418752193344486d284059d1d7c13c8b170dc1a54db0192af587fdb94da913cfdefb2939c586f34ae3ec3d2fce5d08ba13de9bf027ff4fbfcb2cb2a20df6f5600a33c7d5026e5e6091fe904445ee23bcf156a7945136c4002a4b060085f36178f8909770847bba3ed7aa4ae35e76b77dd4782d73fa7f07e4b1851d51bac51bb8f6ab029a936e321c2401d061db416da765b6752b1c1b7562f2292315acb39b87d3763426dadf0b6097ad6221be9594ad73fe562b84c2e7113c8587bb6234b023bf421b1964fbda393f38a593c31a99679065f0bb2ed89d232b70355021def8327706e70a3f8efc42f048ef4de94e676e9d2c7bc618ee9b5778b90068f4405f0787682a5b7d1e641a5ad595ddbc2476b6b17ef86df5c474b8299a0ab5fe884bef5f172cf945224b5ddc24d7004ae2bcf26d6efa44f4fa9810f05c3430aa25812e31110a3e2ca2ef48189729ef0317e71895bda2106596351a3f77d1457361b7fe32ca77422e7eccb8ea3f8946a2ca0a031e2f2d0862bb3e64ecfaf4cf6b8c976de12848bb21ac75924245a95eab2509da5cfd9c1da5de34f473412611320096c82e9a924f343c1ee6008277d82020fd842669eb3e2945e96306b9cd869872687f421dd8f0c0891fc481c2a0154b23c229cc20444b4d8713722be4b9142c511f237cfd49a3fe8e296f8a6dbdb28e73e8f0b4c489287cee53388dc6d839d23db1f9e90ff475dd4ee5e728666edf8c9d872a6902204ee7d11e37fc32d4a7748267a26bab65335421f5898dfd50dfc2d0a9b9a7829fb1a5a6c2088337363f7a2088f2dfa9617fa299fbe2f6162aebb7847fad46017ff078c53354d7a8a7fe86e440299fe7d7d654ad045d5b9849a906b0ecce0cf46fc4f348a9c240e8f9d7efb699e9ff4868f28f560521502929c32d7447ab4b7c196fbb706c41bef4e8b655a185140d24d39f8c043fc5f304856cff55bd881ed52fe385f93d48320683fccc8299f514bdda70bae383c00e519c2bfc4ff03df76f91d270c86dd0499f145ada66dcb9d4cfbad8b97fa43873fb4695559af885daf12866be73f01c98ad836a652afbbb66e8ea6308884feae5efe796ce67ea24f83f3a7938c55f216daf22d0133cc0476d851b8449c10b5e6fa1c598c10de9f7085c66930cf24520fac24e71bebb0320c08e8cdf3fa2e8b2517285208de28e251f5b6f796d3ef0749bf67e1f2c178b2615705dfc0fdddf8d2a6c856323fd9af1a79855cc9ac9662df8664d483252a04ce639eeb4e73ea685e617e844b9aca90758f98c5ced2766f67e845ad3e8afa379bc56bb4512aab985d8e8e3ebcd3cb91ad2af343936c11e7e3dc549f9cdb754ef5296175e6252b22788bb4c25c7d785b82541c63c2bf84770ba032008b794bdd166402bb27fe65aaf15f2febf80e34038b771ed5fb7ed7417799a0d7895ec6226206c415da2dc59f09e1086a38b62ae2125522714a8f1ec56a4b376800937e62c42d030fb025789e1e30dc56df4d6658d67b1d0690b5d33364329b6f2e9e13166f5520064223661d08eb774dde4a6abb7e549b708ce92db767829ab585d3fdc773513d14dc8532618da09d60abcb341f50936bf45ce2d14dcc0ff14f9e58aa0069c0dcba9ee8f53f32b49450f18db0c47ce85ea935baa4729bd1d576364429e88b0b9792ff6e8095c0ca8701257685ce97a3b47340b45ff902d7fe66ad00e655902a98589e63a1f7916866f50a9ba8660e4c15b0aa60b14f21081923cdc61c085018d345592301a989ae3c64e7cff3f094e7fafe723eb2719a4fda9536005f84e5c8a107963f6b2681cff060dcd537481fb4f50c756df258bf7210c52252558c3df00c2e1f82cb1faa740de72d0f974de9cd4a2a1c37027d381f8689fd4d08f3a5c228a89e9b096a73189be0c8ce2660b571db8bed81252fa7d1122da07df6212a0d0adbf911d7dc16660bf7abf4764d4b7708d0912287493c8fddaea467cfaae7a24ba0907d98c847e8697d507cf82a86203a1d89c34b04db579ba03cb1cfbcdd65a652a36435c989b423de545f368bde41f33e76ee65ca5538bc89c29e36f725ad8385611ebd32afdb2e209676aff0df1577620524c6818e064cea1a349066c9ad27643494c91fb0af9c54ce88568197e8dea217df827981cf4b6affd2078fc5f09c5c292dc70000188e977901a20cafe90c3463a8274f02e65f8d3c42242c61813adb21a0807ad474347d429aadd7d05a63cedd93f9c6cfdc74996068dcbda1ec88621871e1f3dc67fb7e883150946ab498141775ec710413f0154f8ef088777997a5b9b3103f00a04b4ad3cb5018864c7e456b17d732274dce1c9b1a574a7a4e86b8f609c0a58a08e6acfc0ac0961604a8dc6663b0fcfae347881b7383577fb6267c30efe043e052a569eaa76d4e0168d6333bd11b9d5c1479a9b24216b9dd1b56dfc3a94ff37ae2a95844f6bd878a8191d078426c7932911acc89407709c1abd0165b0a53f93612574e77daf90d4f18566d1ed90764f19615c2a8e860d18d2f7bde00a865533418d070e175a09f237a63dd007916d9e80e8f2b985f6732274841aaa815afc8a769db6a18d4a832687731e54be2ffb182fd9802335ea2fde0a39fccf1ef3d8374fc416c5954697195acdafa90daf37c43b6fd218ee7b6365d1bcc3e5372ac6e30f474ccfa76c7004d7c860d13bc1bdfa121756d9d39478e18827a8dc8263771a62524eb2c32683117b47892fff88708b50082d3f9f50e66684ead47776fde241596c4005631e438d95b3213fd660f8824f27045d7e0c8974b0c44df4503bd2203681c159e389f5230d5ebf8025ae27c8348915dc014a1a539d5a55e3c7e1bff39430f254c19be188b838ae6bdd65a1e1b27a137849efb6c917c0867722d431c7cad35b637cecf55a6057b8c2ac9f905980fceaacef67f685760c6be0c8df0a52faa88c3e33dd42735feb44a4e7d52d1cb69e96b1e89f27c4be4e8173b3bec478294a22b3b9140e6358035e9765162f4df2bf34cc1762f737bd6c057c918032ab8889ae44a244d270f4ee5656e3f8065c8ce6feb49d247699222226a7ec58bdf0691d7eb775f180e61ad9ecbee7c7c6e6fc0394e253ae4463377f11c6b7be", @ANYRES8], 0x56, 0x1c0, &(0x7f00000018c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000001a80)='./file2\x00', 0x80000, 0x40) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x13, r1, 0x4000) madvise(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001ac0)={'bridge0\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) 38.03854381s ago: executing program 6 (id=399): unshare(0x24020400) r0 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f00000002c0)) timer_settime(0x0, 0x0, &(0x7f0000000600)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000800)={0xffffffffffffffff}, 0x4000) pipe2(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r1, r2, 0xfffffffffffffc01, 0x0) 37.995074155s ago: executing program 35 (id=399): unshare(0x24020400) r0 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f00000002c0)) timer_settime(0x0, 0x0, &(0x7f0000000600)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000800)={0xffffffffffffffff}, 0x4000) pipe2(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r1, r2, 0xfffffffffffffc01, 0x0) 36.673140511s ago: executing program 8 (id=430): r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @empty}, 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffff3, 0x4031, 0xffffffffffffffff, 0x5d4da000) r1 = epoll_create(0x3) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x10000000}) 36.656394122s ago: executing program 8 (id=431): r0 = openat$selinux_policy(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x700000b, 0x12, r0, 0x0) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4ea3, 0xe3, @mcast2, 0x9}, 0x1c) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xff8a}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 36.560236652s ago: executing program 8 (id=434): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000140)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000280)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f00000003c0)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) close(r0) 36.495683699s ago: executing program 8 (id=435): unshare(0x22020600) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1108083, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x20045a, &(0x7f0000000200)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0xeaf9) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000100)={{r0}, 0x8, 0x4, 0x6}) 36.495189689s ago: executing program 8 (id=436): openat$tun(0xffffffffffffff9c, 0x0, 0x189001, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000540)='./mysys\x00', &(0x7f0000000580)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x4000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 36.406689508s ago: executing program 8 (id=437): r0 = fsopen(&(0x7f00000007c0)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x19, 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000940)={r2, r1, 0x15, 0x0, @val=@iter={0x0}}, 0x20) r3 = socket(0x2c, 0x803, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, 0x0, 0x0) 21.170914104s ago: executing program 36 (id=437): r0 = fsopen(&(0x7f00000007c0)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x19, 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000940)={r2, r1, 0x15, 0x0, @val=@iter={0x0}}, 0x20) r3 = socket(0x2c, 0x803, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, 0x0, 0x0) 9.231970701s ago: executing program 0 (id=678): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = epoll_create1(0x80000) r2 = fcntl$dupfd(r0, 0x0, r0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000001540)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000015c0)={0x10000014}) r3 = getpid() r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r3, r4, 0x7, r2, &(0x7f0000001600)={r1, r2}) 9.231062511s ago: executing program 2 (id=679): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000640)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000680)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000000700), 0x800001d, 0x300) setsockopt$inet_int(r0, 0x0, 0x19, &(0x7f0000000800)=0x1f5, 0x4) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000840)=0x40, 0x4) recvmmsg(r0, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=""/143, 0x8f}, 0x3}], 0x1, 0x45833af92e4b39ff, 0x0) 9.227985111s ago: executing program 7 (id=680): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000001c0), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000200), 0x80002c1, 0x2, 0x0) ppoll(&(0x7f0000000740)=[{0xffffffffffffffff, 0x1}, {r2, 0x8000}, {r2, 0x206}], 0x3, 0x0, 0x0, 0x0) 9.205198793s ago: executing program 4 (id=681): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x80) open(0x0, 0x148640, 0x78e22799f4a46eaf) 7.600676198s ago: executing program 0 (id=682): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000200), 0x1, 0x4bc, &(0x7f0000000a40)="$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") quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc_mnt\x00', 0x1ff) 7.600318328s ago: executing program 2 (id=683): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x3ed3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) capset(0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) open_tree(0xffffffffffffffff, 0x0, 0x89100) 7.600093428s ago: executing program 7 (id=684): mount(0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x103) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000600)=0x695d8e8, 0x4) setsockopt$sock_int(r0, 0x1, 0x31, &(0x7f0000000640), 0x4) bind$inet6(r0, &(0x7f0000000680)={0xa, 0xe22, 0x0, @empty, 0x80002}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000740)=[{&(0x7f0000000780)="580000001500add427323b472545b45602117fffffff81000e22d991000005000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 7.599752928s ago: executing program 4 (id=685): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x19, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = fsopen(&(0x7f0000000380)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000400)={r0, r2, 0x16, 0x0, @void}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x4001, 0x3, 0x208, 0x208, 0x700001b, 0x148, 0x0, 0x148, 0x2a0, 0x206, 0x240, 0x2a0, 0x240, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @remote, 0x0, 0x0, 'ip6gretap0\x00', 'sit0\x00'}, 0x1ea, 0x70, 0xd8, 0x0, {0x390, 0x8f00}}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1f, 0x8000, 0x0, 0x2, '\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x208}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x268) 5.877647085s ago: executing program 0 (id=686): r0 = socket$inet6(0xa, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f00000000c0)=0x0) readv(r0, &(0x7f0000002480)=[{&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f0000001400)=""/4096}, {&(0x7f0000002400)=""/65}], 0x100000000000030f) timer_settime(r2, 0x1, &(0x7f00000013c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 5.877396636s ago: executing program 2 (id=687): r0 = epoll_create1(0x80000) r1 = socket(0x1, 0x80802, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0x10000005}) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000140)={0x60000008}) 5.877072836s ago: executing program 7 (id=688): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), r2) getsockname$packet(r2, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newqdisc={0x74, 0x24, 0xe0b, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x1ff, 0xf5, 0x1, 0x3, 0x80000000, 0x8}}}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x1, 0xbff8, 0xfffffffe, 0x2, 0x4, 0x7, 0x1}}, {0x6, 0x2, [0xfffe]}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendto$packet(r0, &(0x7f0000000480)="44c33b69ebc9e05e9bdec0c286dd", 0xe, 0x830, &(0x7f00000004c0)={0x11, 0x0, r3, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}, 0x14) 5.876875825s ago: executing program 4 (id=689): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x0, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000002c0)=[@increfs]}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000340)={0x73622a85, 0xb}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000400)={0x18, 0x0, &(0x7f0000000440)=[@acquire, @request_death={0x400c630e, 0x1, 0x1}]}) 4.043608084s ago: executing program 0 (id=690): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r2) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000640)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f00000072c0)={0x0, 0x0, &(0x7f0000007280)={&(0x7f0000001040)=@deltfilter={0x24, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xa, 0xffff}, {0xd, 0xc}, {0x10, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040085}, 0x24000850) 4.043288844s ago: executing program 2 (id=691): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6(0xa, 0x3, 0x5) syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000001280)='./bus\x00', 0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="61636c2c757365725f78617474722c6e6f61636c2c63616368655f73747261746567793d64697361626c65642c6e6f757365725f78617474722c6e6f61636c2c00d4a87b439fa421753f060fe37a330d2dfca47c4e52e78d71fc65b972e2bb306bb4a29b1fe3019842462c5fee84a2e6eb90d57b8725e3a2eff0b0b471dac5c01bee53cd8d"], 0xfe, 0x17f, &(0x7f0000001380)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000001500)='./file2\x00', 0x80000, 0x40) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r1, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000001540)) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000002300)=0xffffffc3, 0x4) 3.990965429s ago: executing program 7 (id=692): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) shutdown(r0, 0x0) connect$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = accept(r1, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000000200)='d', 0x1, 0x54000, 0x0, 0x0) 3.990580549s ago: executing program 4 (id=693): r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000100)={0x2, 0x3, @loopback}, 0x70) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}, {&(0x7f0000000340)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62", 0xe}, {&(0x7f00000003c0)="8a", 0x1}, {&(0x7f0000000400)="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", 0xfe}], 0x5}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000540)="ce90bfdb", 0x68}, {&(0x7f0000000580)="f2e659", 0x3}, {&(0x7f00000005c0)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000b80)="e1", 0x1}, {&(0x7f0000000bc0)="fa", 0x1}, {&(0x7f0000000c00)="d8", 0x1}, {&(0x7f0000000c40)="f2964dd1", 0x4}, {&(0x7f0000000c80)="b8a2f6", 0x3}, {&(0x7f0000000cc0)="7940e900e0377757a9edc0d9376c21328ad2f7584fe4c8b712b3e5e08ecff5258151bd9eea7b4ce21f67ab51922ce035987127fda5812df903188e321419610f4beb6cdf6fa073876157c4f1d2054439d8db3f4d937872de928b62741fd60e6b56979ad883f89a02e24a577275bfb498b7a127abd0eb099e704d18d63dad611b45acfc3b8dc5457c8383d7d8621942e8e2ce6e4017dd6e5ed9732e739be6593c3b033524669ce17c3b822a6953eb11a20921220000000000000000", 0xbb}, {&(0x7f0000000d80)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000e00)="87", 0x1}, {&(0x7f0000000e40)="11e09017", 0xfffffec4}], 0x2}}], 0x4, 0x4000000) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000e80)=0x7fffffff, 0x4) 2.018857372s ago: executing program 0 (id=694): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000540)='./file1/file0\x00', &(0x7f0000000580), 0x0, 0x0, 0x1) mount$bind(&(0x7f0000000340)='.\x00', &(0x7f0000000380)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./bus\x00', &(0x7f0000000400), 0x40, &(0x7f0000000440)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000480)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0/file0\x00', 0x0) 2.017805892s ago: executing program 2 (id=695): mknodat(0xffffffffffffff9c, 0x0, 0x1, 0x0) mount$cgroup(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x20040af, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x2, {0x2, 0x0, 0x0, 0x4, 0xfe, 0x0, 0x0, 0x6, 0x1400}}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x6, 0x2900}}, 0x1c}}, 0x8c0) 2.017561472s ago: executing program 7 (id=696): r0 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000200)=0x7, 0x4) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/44, 0x2c}, 0xaa}], 0x1, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000380)=0x9, 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_emit_ethernet(0x42, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c89000c2c0120010000000000000000000000000001fe8000000000000000000000000000aaff"], 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) 2.017390542s ago: executing program 4 (id=697): mprotect(&(0x7f0000bde000/0x4000)=nil, 0x4000, 0x9) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x8, 0x20132, 0xffffffffffffffff, 0xb2993000) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) wait4(r0, 0x0, 0x8, 0x0) ptrace$poke(0x4, r0, &(0x7f00000011c0), 0xfffffffffffffffe) 949.059µs ago: executing program 0 (id=698): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080)=0xffffffffffffffff, 0x4) 603.099µs ago: executing program 2 (id=699): r0 = epoll_create1(0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0xffffffffffffffff) r1 = userfaultfd(0x80001) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000007c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) syz_genetlink_get_family_id$ethtool(&(0x7f0000001b00), 0xffffffffffffffff) 324.54µs ago: executing program 7 (id=700): r0 = socket$inet6(0xa, 0x1, 0x0) close(0x3) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e04, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}, 0x23}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000001980)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x64}, 0x10}, 0x1c, 0x0}}], 0x40000000000024e, 0x20002040) sendto$inet6(r1, 0x0, 0x0, 0x8000, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f0000000280)={0xa, 0x4e20, 0x97, @remote, 0x800}, 0x1c) 0s ago: executing program 4 (id=701): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000140)=0x1, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000000) socket(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@rand_addr=0x64010100, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e23, 0x0, 0xffff, 0x8000, 0x2}, {0x0, 0x1, 0xfffffffffffffffc, 0x1000000000000, 0x5, 0xfffffffffffffffa, 0x100000000000000, 0x10000000000000}, {0x0, 0x0, 0xfffffffffffffffe, 0x2}, 0x7, 0x0, 0x1, 0x0, 0x3}, {{@in=@loopback, 0x0, 0x33}, 0x2, @in=@private=0xa010102, 0x3507, 0x4, 0x1, 0x0, 0x77, 0x7c, 0xfffffffb}}, 0xe8) connect$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e23, 0xaf, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}}, 0x1c) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.99' (ED25519) to the list of known hosts. [ 18.453529][ T28] audit: type=1400 audit(1793807948.590:64): avc: denied { mounton } for pid=279 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 18.454949][ T279] cgroup: Unknown subsys name 'net' [ 18.456838][ T28] audit: type=1400 audit(1793807948.590:65): avc: denied { mount } for pid=279 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 18.460666][ T28] audit: type=1400 audit(1793807948.600:66): avc: denied { unmount } for pid=279 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 18.460815][ T279] cgroup: Unknown subsys name 'devices' [ 18.586314][ T279] cgroup: Unknown subsys name 'hugetlb' [ 18.592043][ T279] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 18.694605][ T28] audit: type=1400 audit(1793807948.840:67): avc: denied { setattr } for pid=279 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 18.713511][ T281] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 18.717778][ T28] audit: type=1400 audit(1793807948.840:68): avc: denied { mounton } for pid=279 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 18.735927][ T279] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 18.751213][ T28] audit: type=1400 audit(1793807948.840:69): avc: denied { mount } for pid=279 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 18.782926][ T28] audit: type=1400 audit(1793807948.880:70): avc: denied { relabelto } for pid=281 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 18.808371][ T28] audit: type=1400 audit(1793807948.880:71): avc: denied { write } for pid=281 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 18.834041][ T28] audit: type=1400 audit(1793807948.880:72): avc: denied { read } for pid=279 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 18.859701][ T28] audit: type=1400 audit(1793807948.880:73): avc: denied { open } for pid=279 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 19.493577][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.500711][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.508425][ T287] device bridge_slave_0 entered promiscuous mode [ 19.518231][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.525404][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.532677][ T287] device bridge_slave_1 entered promiscuous mode [ 19.560258][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.567353][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.574755][ T288] device bridge_slave_0 entered promiscuous mode [ 19.584604][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.591639][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.599126][ T288] device bridge_slave_1 entered promiscuous mode [ 19.691210][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.698398][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.705866][ T289] device bridge_slave_0 entered promiscuous mode [ 19.728500][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.735719][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.743171][ T289] device bridge_slave_1 entered promiscuous mode [ 19.819261][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.826409][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.833854][ T293] device bridge_slave_0 entered promiscuous mode [ 19.840816][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.847886][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.855302][ T291] device bridge_slave_0 entered promiscuous mode [ 19.869834][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.877156][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.884583][ T293] device bridge_slave_1 entered promiscuous mode [ 19.891108][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.898178][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.905487][ T291] device bridge_slave_1 entered promiscuous mode [ 19.959290][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.966364][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 19.973588][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.980618][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.015746][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.022809][ T287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.030100][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.037139][ T287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.116607][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.123672][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.130962][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.138002][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.156143][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 20.163838][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.171106][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.178755][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.186269][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.193760][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.201115][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.209475][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 20.216934][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 20.238508][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 20.246737][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.253772][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.282389][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 20.290919][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.297964][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.305550][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 20.313687][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.320747][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.328400][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 20.336656][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 20.344841][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.351887][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.359273][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 20.382561][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 20.390231][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 20.398224][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 20.406881][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.413919][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.421425][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 20.442803][ T287] device veth0_vlan entered promiscuous mode [ 20.454382][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 20.462832][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 20.471149][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 20.478532][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 20.486153][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 20.493593][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 20.501206][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 20.509877][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.516936][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.524895][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 20.542684][ T288] device veth0_vlan entered promiscuous mode [ 20.555061][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 20.563388][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 20.571619][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.578650][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.586108][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 20.595498][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 20.603568][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.610610][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.617938][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 20.626303][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 20.634687][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 20.642457][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 20.650423][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 20.658500][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 20.666518][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 20.674894][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 20.682996][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.690029][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.697396][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 20.705838][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 20.713897][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 20.722315][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 20.730510][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.737621][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.745205][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 20.752848][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 20.760315][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 20.769678][ T287] device veth1_macvtap entered promiscuous mode [ 20.779820][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 20.787435][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 20.795534][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 20.818820][ T288] device veth1_macvtap entered promiscuous mode [ 20.829668][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 20.837811][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 20.845732][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 20.853688][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 20.862000][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 20.870445][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 20.878817][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 20.886953][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 20.895137][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 20.902664][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 20.910987][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 20.919316][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 20.927511][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 20.938836][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 20.946825][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 20.973207][ T291] device veth0_vlan entered promiscuous mode [ 20.979869][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 20.987621][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 20.995788][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 21.003759][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 21.011757][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 21.019738][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 21.027893][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 21.036297][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 21.044828][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 21.052633][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 21.060830][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 21.069241][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 21.077703][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 21.086026][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 21.094340][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 21.101824][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 21.116866][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 21.125217][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 21.135707][ T289] device veth0_vlan entered promiscuous mode [ 21.152631][ T287] request_module fs-gadgetfs succeeded, but still no fs? [ 21.159428][ T293] device veth0_vlan entered promiscuous mode [ 21.177365][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 21.188569][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 21.197464][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 21.206127][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 21.213978][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 21.222147][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 21.229738][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 21.238153][ T291] device veth1_macvtap entered promiscuous mode [ 21.247865][ T293] device veth1_macvtap entered promiscuous mode [ 21.266200][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 21.273988][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 21.282622][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 21.291109][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 21.300151][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 21.308852][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 21.317464][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 21.326614][ T289] device veth1_macvtap entered promiscuous mode [ 21.339421][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 21.348105][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 21.356741][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 21.366823][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 21.386902][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 21.395353][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 21.422472][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 21.439308][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 21.477129][ T336] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 21.640974][ T353] loop4: detected capacity change from 0 to 512 [ 21.661403][ T353] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 21.674759][ T353] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 21.676318][ T355] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.689878][ T353] EXT4-fs (loop4): 1 truncate cleaned up [ 21.698488][ T353] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 21.706907][ T355] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19'. [ 21.717476][ T355] device bridge_slave_1 left promiscuous mode [ 21.723569][ T355] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.730802][ T60] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 21.780321][ T287] EXT4-fs (loop4): unmounting filesystem. [ 21.915406][ T60] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 21.917267][ T375] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 21.926606][ T60] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 21.973994][ T60] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 22.004091][ T60] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 22.013377][ T60] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 22.023660][ T60] usb 3-1: config 0 descriptor?? [ 22.055679][ T379] loop1: detected capacity change from 0 to 2048 [ 22.069238][ T375] kvm [374]: vcpu0, guest rIP: 0x9134 Unhandled WRMSR(0x11e) = 0xbe702111 [ 22.123093][ T379] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 22.176191][ T379] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 22.195527][ T379] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 22.207769][ T379] EXT4-fs (loop1): This should not happen!! Data will be lost [ 22.207769][ T379] [ 22.217468][ T379] EXT4-fs (loop1): Total free blocks count 0 [ 22.223485][ T379] EXT4-fs (loop1): Free/Dirty block details [ 22.229541][ T379] EXT4-fs (loop1): free_blocks=66060288 [ 22.236940][ T379] EXT4-fs (loop1): dirty_blocks=32 [ 22.242120][ T379] EXT4-fs (loop1): Block reservation details [ 22.248151][ T379] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 22.287601][ T10] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 2 with error 28 [ 22.438575][ T60] plantronics 0003:047F:FFFF.0001: unknown main item tag 0xd [ 22.450510][ T60] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 22.463376][ T60] plantronics 0003:047F:FFFF.0001: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 22.529145][ T399] loop1: detected capacity change from 0 to 512 [ 22.599395][ T403] netlink: 8 bytes leftover after parsing attributes in process `syz.0.36'. [ 22.735604][ T60] usb 3-1: USB disconnect, device number 2 [ 22.783888][ T416] loop4: detected capacity change from 0 to 256 [ 22.809801][ T416] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0xda10bcab, utbl_chksum : 0xe619d30d) [ 23.019118][ T430] kvm [429]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x187) = 0x8c0 [ 23.024025][ T417] syz.1.41 (417) used greatest stack depth: 21000 bytes left [ 23.104768][ T436] netlink: 'syz.0.49': attribute type 1 has an invalid length. [ 23.372085][ T438] loop1: detected capacity change from 0 to 40427 [ 23.389979][ T438] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 23.410800][ T438] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 23.432036][ T438] F2FS-fs (loop1): invalid crc value [ 23.463208][ T438] F2FS-fs (loop1): Found nat_bits in checkpoint [ 23.559647][ T438] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 23.574263][ T438] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 23.592114][ T28] kauditd_printk_skb: 93 callbacks suppressed [ 23.592129][ T28] audit: type=1400 audit(1793807953.730:167): avc: denied { mount } for pid=437 comm="syz.1.50" name="/" dev="loop1" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 23.760490][ T28] audit: type=1400 audit(1793807953.900:168): avc: denied { unmount } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 23.918678][ T28] audit: type=1400 audit(1793807954.060:169): avc: denied { read write } for pid=462 comm="syz.0.59" name="fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 23.946144][ T464] loop2: detected capacity change from 0 to 512 [ 23.949468][ T28] audit: type=1400 audit(1793807954.090:170): avc: denied { open } for pid=462 comm="syz.0.59" path="/dev/fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 23.952714][ T464] EXT4-fs: Ignoring removed nobh option [ 23.981221][ T464] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 23.991228][ T464] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (33925!=0) [ 24.000575][ T464] EXT4-fs (loop2): group descriptors corrupted! [ 24.011204][ T28] audit: type=1400 audit(1793807954.150:171): avc: denied { unmount } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 24.055591][ T330] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 24.176387][ T28] audit: type=1400 audit(1793807954.320:172): avc: denied { create } for pid=472 comm="syz.1.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 24.234282][ T28] audit: type=1400 audit(1793807954.340:173): avc: denied { connect } for pid=472 comm="syz.1.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 24.274249][ T28] audit: type=1400 audit(1793807954.340:174): avc: denied { ioctl } for pid=472 comm="syz.1.62" path="socket:[16939]" dev="sockfs" ino=16939 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 24.344445][ T28] audit: type=1400 audit(1793807954.340:175): avc: denied { getopt } for pid=472 comm="syz.1.62" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 24.378830][ T442] loop4: detected capacity change from 0 to 131072 [ 24.402697][ T28] audit: type=1400 audit(1793807954.460:176): avc: denied { name_bind } for pid=477 comm="syz.3.64" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 24.424070][ T442] F2FS-fs (loop4): Invalid segment/section count (24 != 24 * 5) [ 24.440544][ T442] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 24.468923][ T442] F2FS-fs (loop4): Test dummy encryption mode enabled [ 24.487578][ T442] F2FS-fs (loop4): invalid crc value [ 24.519280][ T476] loop1: detected capacity change from 0 to 40427 [ 24.529552][ T442] F2FS-fs (loop4): Found nat_bits in checkpoint [ 24.541622][ T476] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 24.573084][ T476] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 24.591731][ T476] F2FS-fs (loop1): invalid crc value [ 24.609055][ T442] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 24.634377][ T442] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 24.642528][ T476] F2FS-fs (loop1): Found nat_bits in checkpoint [ 24.656276][ T489] ip_tables: iptables: counters copy to user failed while replacing table [ 24.717661][ T476] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 24.734301][ T442] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 24.745519][ T476] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 24.773678][ T442] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 24.814687][ T442] overlayfs: metacopy with no lower data found - abort lookup (/file1) [ 24.933210][ T499] loop2: detected capacity change from 0 to 40427 [ 24.955928][ T499] F2FS-fs (loop2): invalid crc value [ 24.979651][ T499] F2FS-fs (loop2): Found nat_bits in checkpoint [ 25.011469][ T476] syz.1.63: attempt to access beyond end of device [ 25.011469][ T476] loop1: rw=2049, sector=77824, nr_sectors = 4096 limit=40427 [ 25.037979][ T476] syz.1.63: attempt to access beyond end of device [ 25.037979][ T476] loop1: rw=2049, sector=49152, nr_sectors = 4096 limit=40427 [ 25.044307][ T327] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 25.059391][ T499] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 25.060355][ T476] syz.1.63: attempt to access beyond end of device [ 25.060355][ T476] loop1: rw=2049, sector=57344, nr_sectors = 2912 limit=40427 [ 25.228076][ T515] FAULT_INJECTION: forcing a failure. [ 25.228076][ T515] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 25.255397][ T327] usb 4-1: too many endpoints for config 1 interface 0 altsetting 13: 33, using maximum allowed: 30 [ 25.277279][ T327] usb 4-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 25.305871][ T515] CPU: 0 PID: 515 Comm: syz.4.72 Not tainted syzkaller #0 [ 25.313039][ T515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 25.323121][ T515] Call Trace: [ 25.326429][ T515] [ 25.329378][ T515] __dump_stack+0x21/0x24 [ 25.333727][ T515] dump_stack_lvl+0x110/0x170 [ 25.338422][ T515] ? __cfi_dump_stack_lvl+0x8/0x8 [ 25.343469][ T515] dump_stack+0x15/0x24 [ 25.347644][ T515] should_fail_ex+0x3bf/0x510 [ 25.352346][ T515] should_fail_alloc_page+0x61/0x90 [ 25.357570][ T515] prepare_alloc_pages+0x131/0x570 [ 25.362710][ T515] ? __alloc_pages_bulk+0x9d0/0x9d0 [ 25.367937][ T515] ? kasan_save_alloc_info+0x1f/0x30 [ 25.373242][ T515] ? __kasan_kmalloc+0x95/0xb0 [ 25.377439][ T499] syz.2.69: attempt to access beyond end of device [ 25.377439][ T499] loop2: rw=2049, sector=40424, nr_sectors = 8 limit=40427 [ 25.378028][ T515] ? kmalloc_trace+0x40/0xb0 [ 25.396160][ T515] ? io_ring_ctx_alloc+0x54/0xb00 [ 25.397310][ T475] syz.1.63: attempt to access beyond end of device [ 25.397310][ T475] loop1: rw=524288, sector=77824, nr_sectors = 256 limit=40427 [ 25.401209][ T515] ? io_uring_create+0x29a/0xde1 [ 25.420030][ T515] __alloc_pages+0x15b/0x610 [ 25.424525][ T475] syz.1.63: attempt to access beyond end of device [ 25.424525][ T475] loop1: rw=0, sector=77824, nr_sectors = 8 limit=40427 [ 25.424650][ T515] ? __cfi___alloc_pages+0x10/0x10 [ 25.439078][ T475] syz.1.63: attempt to access beyond end of device [ 25.439078][ T475] loop1: rw=0, sector=77824, nr_sectors = 8 limit=40427 [ 25.443020][ T515] __kmalloc_large_node+0xa1/0x1c0 [ 25.461390][ T515] ? io_alloc_hash_table+0x34/0xc0 [ 25.464311][ T475] syz.1.63: attempt to access beyond end of device [ 25.464311][ T475] loop1: rw=0, sector=77824, nr_sectors = 8 limit=40427 [ 25.466514][ T515] __kmalloc+0xe3/0x1e0 [ 25.483925][ T515] ? __kasan_kmalloc+0x95/0xb0 [ 25.484456][ T475] syz.1.63: attempt to access beyond end of device [ 25.484456][ T475] loop1: rw=0, sector=77824, nr_sectors = 8 limit=40427 [ 25.488710][ T515] io_alloc_hash_table+0x34/0xc0 [ 25.506897][ T515] io_ring_ctx_alloc+0xc7/0xb00 [ 25.511765][ T515] io_uring_create+0x29a/0xde1 [ 25.514271][ T475] syz.1.63: attempt to access beyond end of device [ 25.514271][ T475] loop1: rw=0, sector=77824, nr_sectors = 8 limit=40427 [ 25.516543][ T515] __x64_sys_io_uring_setup+0x21b/0x230 [ 25.535338][ T515] ? __kasan_check_write+0x14/0x20 [ 25.540480][ T515] ? __cfi___x64_sys_io_uring_setup+0x10/0x10 [ 25.546579][ T515] ? __kasan_check_write+0x14/0x20 [ 25.551712][ T515] ? fpregs_restore_userregs+0x128/0x260 [ 25.557370][ T515] ? switch_fpu_return+0xe/0x10 [ 25.562245][ T515] x64_sys_call+0x4ab/0x9a0 [ 25.566787][ T515] do_syscall_64+0x4c/0xa0 [ 25.571216][ T515] ? clear_bhb_loop+0x30/0x80 [ 25.575913][ T515] ? clear_bhb_loop+0x30/0x80 [ 25.580617][ T515] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 25.586534][ T515] RIP: 0033:0x7fa1ab79fb19 [ 25.590969][ T515] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 25.610596][ T515] RSP: 002b:00007fa1ac5d0028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 25.619034][ T515] RAX: ffffffffffffffda RBX: 00007fa1aba25fa0 RCX: 00007fa1ab79fb19 [ 25.627029][ T515] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000004ae9 [ 25.635018][ T515] RBP: 00007fa1ab837b70 R08: 0000000000000000 R09: 0000000000000000 [ 25.643003][ T515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 25.650994][ T515] R13: 00007fa1aba26038 R14: 00007fa1aba25fa0 R15: 00007ffd63f8d778 [ 25.658984][ T515] [ 25.667074][ T327] usb 4-1: config 1 interface 0 has no altsetting 0 [ 25.676832][ T327] usb 4-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.40 [ 25.694929][ T327] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 25.704404][ T327] usb 4-1: Product: syz [ 25.708596][ T327] usb 4-1: Manufacturer: syz [ 25.740463][ T327] usb 4-1: SerialNumber: syz [ 26.012644][ T533] loop2: detected capacity change from 0 to 512 [ 26.177068][ T525] page size migration: [525 (syz.4.78)] madvise_vma_pad_pages:303: Invalid attempt to madvise padding on MAP_SHARED vma [ 26.365631][ T327] usbhid 4-1:1.0: can't add hid device: -71 [ 26.384616][ T327] usbhid: probe of 4-1:1.0 failed with error -71 [ 26.393820][ T327] usb 4-1: USB disconnect, device number 2 [ 26.540031][ T560] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 26.547846][ T560] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 26.556686][ T560] F2FS-fs (loop4): invalid crc value [ 26.567821][ T560] F2FS-fs (loop4): Found nat_bits in checkpoint [ 26.590820][ T560] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 26.597949][ T560] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 26.701827][ T570] set_capacity_and_notify: 2 callbacks suppressed [ 26.701840][ T570] loop4: detected capacity change from 0 to 1024 [ 26.715105][ T570] EXT4-fs: Ignoring removed bh option [ 26.730088][ T570] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 26.764439][ T579] capability: warning: `syz.0.95' uses deprecated v2 capabilities in a way that may be insecure [ 26.809036][ T287] EXT4-fs (loop4): unmounting filesystem. [ 26.965602][ T594] loop3: detected capacity change from 0 to 256 [ 26.982314][ T594] ======================================================= [ 26.982314][ T594] WARNING: The mand mount option has been deprecated and [ 26.982314][ T594] and is ignored by this kernel. Remove the mand [ 26.982314][ T594] option from the mount to silence this warning. [ 26.982314][ T594] ======================================================= [ 27.020250][ T594] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 27.068886][ T603] loop3: detected capacity change from 0 to 1024 [ 27.078782][ T603] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 27.123295][ T603] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 27.182206][ T619] netlink: 8 bytes leftover after parsing attributes in process `syz.0.110'. [ 27.227833][ T291] EXT4-fs (loop3): unmounting filesystem. [ 28.094287][ T327] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 28.264297][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 28.285315][ T327] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 54, changing to 9 [ 28.296390][ T327] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 28.307892][ T327] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 28.317271][ T327] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.325393][ T327] usb 5-1: Product: syz [ 28.329590][ T327] usb 5-1: Manufacturer: syz [ 28.330877][ T668] netlink: 16 bytes leftover after parsing attributes in process `syz.2.128'. [ 28.334187][ T327] usb 5-1: SerialNumber: syz [ 28.353896][ T668] netlink: 16 bytes leftover after parsing attributes in process `syz.2.128'. [ 28.546273][ T651] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 28.695309][ T679] loop3: detected capacity change from 0 to 32768 [ 28.755260][ T679] loop3: p1 p2 p3 < p5 p6 p7 > [ 28.761099][ T679] loop3: p2 size 16775168 extends beyond EOD, truncated [ 28.770032][ T679] loop3: p5 start 4294970168 is beyond EOD, truncated [ 28.799773][ T28] kauditd_printk_skb: 81 callbacks suppressed [ 28.799789][ T28] audit: type=1400 audit(1793807958.940:258): avc: denied { read write } for pid=678 comm="syz.3.133" name="loop3p2" dev="devtmpfs" ino=611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 28.848593][ T28] audit: type=1400 audit(1793807958.970:259): avc: denied { open } for pid=678 comm="syz.3.133" path="/dev/loop3p2" dev="devtmpfs" ino=611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 28.914793][ T332] udevd[332]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 28.929342][ T330] udevd[330]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 28.935943][ T685] udevd[685]: inotify_add_watch(7, /dev/loop3p6, 10) failed: No such file or directory [ 28.941719][ T682] udevd[682]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 28.953262][ T686] udevd[686]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 29.032024][ T28] audit: type=1326 audit(1793807959.170:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=662 comm="syz.1.127" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc66079fb19 code=0x7fc00000 [ 29.066639][ T692] loop1: detected capacity change from 0 to 256 [ 29.081976][ T692] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d) [ 29.083246][ T694] Illegal XDP return value 4294967294 on prog (id 17) dev syz_tun, expect packet loss! [ 29.119409][ T28] audit: type=1400 audit(1793807959.260:261): avc: denied { remount } for pid=691 comm="syz.1.137" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 29.139856][ T696] loop2: detected capacity change from 0 to 16 [ 29.149345][ T696] erofs: (device loop2): mounted with root inode @ nid 36. [ 29.163425][ T28] audit: type=1400 audit(1793807959.310:262): avc: denied { remount } for pid=695 comm="syz.2.139" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 29.183283][ T651] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 29.203747][ T700] loop1: detected capacity change from 0 to 16 [ 29.214001][ T700] erofs: (device loop1): mounted with root inode @ nid 36. [ 29.235447][ T28] audit: type=1400 audit(1793807959.380:263): avc: denied { write } for pid=699 comm="syz.1.141" name="file0" dev="overlay" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 29.277791][ T28] audit: type=1400 audit(1793807959.380:264): avc: denied { rename } for pid=699 comm="syz.1.141" name="file1" dev="overlay" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 29.324286][ T28] audit: type=1400 audit(1793807959.380:265): avc: denied { add_name remove_name } for pid=699 comm="syz.1.141" name="file0" dev="overlay" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 29.364380][ T19] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 29.372095][ T28] audit: type=1400 audit(1793807959.380:266): avc: denied { unlink } for pid=699 comm="syz.1.141" name="file0" dev="overlay" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 29.404509][ T327] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 29.411158][ T327] cdc_ncm 5-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 29.418776][ T28] audit: type=1400 audit(1793807959.380:267): avc: denied { create } for pid=699 comm="syz.1.141" name="#10" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 29.444251][ T327] cdc_ncm 5-1:1.0: setting rx_max = 2048 [ 29.449229][ T698] loop3: detected capacity change from 0 to 40427 [ 29.467336][ T698] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 29.484465][ T698] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 29.513640][ T698] F2FS-fs (loop3): invalid crc value [ 29.525902][ T698] F2FS-fs (loop3): Found nat_bits in checkpoint [ 29.541472][ T704] loop1: detected capacity change from 0 to 40427 [ 29.554829][ T704] F2FS-fs (loop1): invalid crc value [ 29.566520][ T698] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 29.569473][ T704] F2FS-fs (loop1): Found nat_bits in checkpoint [ 29.573661][ T698] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 29.589586][ T19] usb 1-1: unable to get BOS descriptor or descriptor too short [ 29.611378][ T327] cdc_ncm 5-1:1.0: setting tx_max = 184 [ 29.617778][ T19] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 29.631192][ T19] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 29.640801][ T704] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 29.652172][ T19] usb 1-1: string descriptor 0 read error: -22 [ 29.670985][ T19] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 29.677911][ T721] netlink: 'syz.2.146': attribute type 13 has an invalid length. [ 29.680321][ T19] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.713676][ T19] usb 1-1: selecting invalid altsetting 1 [ 29.719801][ T721] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 29.726534][ T19] usb 1-1: unit 6 not found! [ 29.814010][ T327] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 29.833452][ T327] usb 5-1: USB disconnect, device number 2 [ 29.844857][ T327] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM (NO ZLP) [ 30.188224][ T765] loop1: detected capacity change from 0 to 256 [ 30.215792][ T765] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d) [ 30.249652][ T765] incfs_lookup_dentry err:-84 [ 30.287924][ T771] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 30.296286][ T771] device bridge_slave_0 left promiscuous mode [ 30.302451][ T771] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.582431][ T789] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.594936][ T789] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.613011][ T789] device bridge_slave_0 entered promiscuous mode [ 30.620714][ T789] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.635260][ T19] usb 1-1: 2:0: failed to get current value for ch 0 (-71) [ 30.650428][ T19] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 30.653940][ T804] EXT4-fs: Ignoring removed orlov option [ 30.660415][ T789] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.674896][ T19] usb 1-1: USB disconnect, device number 2 [ 30.681360][ T789] device bridge_slave_1 entered promiscuous mode [ 30.686906][ T806] erofs: (device loop3): mounted with root inode @ nid 36. [ 30.709256][ T804] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 30.760396][ T287] EXT4-fs (loop4): unmounting filesystem. [ 30.786570][ T813] tipc: Started in network mode [ 30.791538][ T813] tipc: Node identity 927593d646d4, cluster identity 4711 [ 30.799586][ T813] tipc: Enabled bearer , priority 10 [ 30.815703][ T812] tipc: Resetting bearer [ 30.824660][ T812] tipc: Disabling bearer [ 30.837857][ T789] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.844943][ T789] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.852221][ T789] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.859266][ T789] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.867995][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.875428][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.885321][ T686] udevd[686]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 30.907631][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 30.910805][ T825] futex_wake_op: syz.3.179 tries to shift op by 144; fix this program [ 30.915373][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 30.923302][ T825] futex_wake_op: syz.3.179 tries to shift op by 144; fix this program [ 30.937678][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 30.947463][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 30.958671][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.965759][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.973720][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 30.982474][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 30.991895][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.998977][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.011053][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 31.019531][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 31.027767][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 31.036237][ T832] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 31.050830][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 31.074782][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 31.094938][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 31.108679][ T789] device veth0_vlan entered promiscuous mode [ 31.114966][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 31.123079][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 31.139555][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 31.163431][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 31.171247][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 31.186770][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 31.203063][ T789] device veth1_macvtap entered promiscuous mode [ 31.218638][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 31.230131][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 31.247358][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 31.281381][ T850] Disabled LAPIC found during irq injection [ 31.282135][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 31.299650][ T852] Disabled LAPIC found during irq injection [ 31.306221][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 31.871447][ T873] set_capacity_and_notify: 2 callbacks suppressed [ 31.871464][ T873] loop5: detected capacity change from 0 to 40427 [ 31.894293][ T873] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 31.905032][ T873] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 31.913867][ T873] F2FS-fs (loop5): invalid crc value [ 31.937921][ T873] F2FS-fs (loop5): Found nat_bits in checkpoint [ 32.050166][ T873] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 32.057367][ T873] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 32.197350][ T887] bio_check_eod: 67 callbacks suppressed [ 32.197369][ T887] syz.5.197: attempt to access beyond end of device [ 32.197369][ T887] loop5: rw=2049, sector=77824, nr_sectors = 2784 limit=40427 [ 32.221692][ T887] syz.5.197: attempt to access beyond end of device [ 32.221692][ T887] loop5: rw=2049, sector=80608, nr_sectors = 1312 limit=40427 [ 32.256332][ T887] syz.5.197: attempt to access beyond end of device [ 32.256332][ T887] loop5: rw=2049, sector=49152, nr_sectors = 2048 limit=40427 [ 32.300903][ T887] syz.5.197: attempt to access beyond end of device [ 32.300903][ T887] loop5: rw=2049, sector=51200, nr_sectors = 2048 limit=40427 [ 32.337056][ T893] Disabled LAPIC found during irq injection [ 32.374067][ T900] netlink: 24 bytes leftover after parsing attributes in process `syz.0.206'. [ 32.379897][ T887] syz.5.197: attempt to access beyond end of device [ 32.379897][ T887] loop5: rw=2049, sector=57344, nr_sectors = 2048 limit=40427 [ 32.455774][ T887] syz.5.197: attempt to access beyond end of device [ 32.455774][ T887] loop5: rw=2049, sector=59392, nr_sectors = 5896 limit=40427 [ 32.488861][ T910] loop2: detected capacity change from 0 to 1024 [ 32.499577][ T872] syz.5.197: attempt to access beyond end of device [ 32.499577][ T872] loop5: rw=524288, sector=77824, nr_sectors = 256 limit=40427 [ 32.516950][ T872] syz.5.197: attempt to access beyond end of device [ 32.516950][ T872] loop5: rw=0, sector=77824, nr_sectors = 8 limit=40427 [ 32.519174][ T910] EXT4-fs: Ignoring removed mblk_io_submit option [ 32.530823][ T872] syz.5.197: attempt to access beyond end of device [ 32.530823][ T872] loop5: rw=0, sector=77824, nr_sectors = 8 limit=40427 [ 32.555773][ T872] syz.5.197: attempt to access beyond end of device [ 32.555773][ T872] loop5: rw=0, sector=77824, nr_sectors = 8 limit=40427 [ 32.604950][ T910] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 32.668011][ T293] EXT4-fs (loop2): unmounting filesystem. [ 32.722622][ T921] xt_hashlimit: size too large, truncated to 1048576 [ 32.736165][ T923] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 32.821178][ T928] device syzkaller0 entered promiscuous mode [ 33.112161][ T961] netlink: 4 bytes leftover after parsing attributes in process `syz.4.232'. [ 33.132509][ T962] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 33.152631][ T961] netlink: 12 bytes leftover after parsing attributes in process `syz.4.232'. [ 33.175690][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 33.190127][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.202660][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 33.211506][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.220387][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.230631][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.239631][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.247874][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.257015][ T967] netlink: 24 bytes leftover after parsing attributes in process `syz.3.233'. [ 33.270823][ T971] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 33.280703][ T971] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 33.287533][ T975] loop4: detected capacity change from 0 to 256 [ 33.297522][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 33.311893][ T975] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 33.313589][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.350724][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 33.363562][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.375138][ T979] loop5: detected capacity change from 0 to 512 [ 33.385887][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.413367][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.424110][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.433671][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.447068][ T981] loop0: detected capacity change from 0 to 1024 [ 33.454169][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 33.462820][ T979] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 33.490238][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 33.499562][ T979] ext4 filesystem being mounted at /11/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 33.512858][ T981] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 33.570473][ T289] EXT4-fs (loop0): unmounting filesystem. [ 33.584882][ T979] loop5: detected capacity change from 512 to 0 [ 33.610060][ C0] I/O error, dev loop5, sector 84 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 33.646600][ C1] I/O error, dev loop5, sector 12 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 33.661417][ C0] I/O error, dev loop5, sector 136 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 33.671118][ C0] I/O error, dev loop5, sector 144 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 33.680786][ C0] I/O error, dev loop5, sector 140 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 33.690458][ T982] EXT4-fs error (device loop5): __ext4_get_inode_loc_noinmem:4645: inode #18: block 35: comm kworker/u4:5: unable to read itable block [ 33.708684][ T43] loop: Write error at byte offset 9223372036854775807, length 2048. [ 33.716992][ T999] loop3: detected capacity change from 0 to 512 [ 33.723528][ C0] I/O error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 33.733051][ C0] I/O error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 33.742524][ C0] Buffer I/O error on dev loop5, logical block 0, lost sync page write [ 33.750779][ T982] EXT4-fs (loop5): I/O error while writing superblock [ 33.760044][ C1] I/O error, dev loop5, sector 136 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 33.769749][ C1] I/O error, dev loop5, sector 144 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 33.779423][ C1] I/O error, dev loop5, sector 140 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 33.789084][ T982] EXT4-fs error (device loop5): __ext4_get_inode_loc_noinmem:4645: inode #19: block 35: comm kworker/u4:5: unable to read itable block [ 33.808779][ T8] loop: Write error at byte offset 9223372036854775807, length 2048. [ 33.817037][ C1] Buffer I/O error on dev loop5, logical block 0, lost sync page write [ 33.826069][ T982] EXT4-fs (loop5): I/O error while writing superblock [ 33.833206][ T999] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 33.833607][ T789] EXT4-fs (loop5): unmounting filesystem. [ 33.842322][ T999] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.862161][ T1007] loop4: detected capacity change from 0 to 2048 [ 33.875793][ T28] kauditd_printk_skb: 55 callbacks suppressed [ 33.875818][ T28] audit: type=1400 audit(1793807964.020:323): avc: denied { ioctl } for pid=998 comm="syz.3.244" path="/54/file1/file1" dev="loop3" ino=15 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 33.926444][ T291] EXT4-fs (loop3): unmounting filesystem. [ 33.932805][ T43] loop: Write error at byte offset 9223372036854775807, length 2048. [ 33.962900][ T1007] loop4: p1 < > p3 p4 < p5 > [ 33.968324][ C1] Buffer I/O error on dev loop5, logical block 0, lost sync page write [ 33.971160][ T1007] loop4: p3 size 467968 extends beyond EOD, [ 33.976657][ T789] EXT4-fs (loop5): I/O error while writing superblock [ 33.995654][ T1007] truncated [ 33.996846][ T28] audit: type=1400 audit(1793807964.140:324): avc: denied { create } for pid=1010 comm="syz.2.249" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 34.020646][ T1007] loop4: p5 size 467968 extends beyond EOD, truncated [ 34.042556][ T43] loop: Write error at byte offset 9223372036854800383, length 2048. [ 34.051457][ T28] audit: type=1400 audit(1793807964.160:325): avc: denied { mounton } for pid=1010 comm="syz.2.249" path="/29/file0" dev="tmpfs" ino=181 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 34.059891][ C1] Buffer I/O error on dev loop5, logical block 12, lost sync page write [ 34.095810][ T287] __loop_clr_fd: partition scan of loop4 failed (rc=-16) [ 34.104480][ T331] Buffer I/O error on dev loop4p1, logical block 0, async page read [ 34.104685][ T686] Buffer I/O error on dev loop4p3, logical block 1, async page read [ 34.113326][ T331] Buffer I/O error on dev loop4p1, logical block 0, async page read [ 34.120648][ T685] Buffer I/O error on dev loop4p4, logical block 0, async page read [ 34.133278][ T330] Buffer I/O error on dev loop4p5, logical block 1, async page read [ 34.157987][ T685] Buffer I/O error on dev loop4p4, logical block 0, async page read [ 34.281255][ T1023] loop4: detected capacity change from 0 to 512 [ 34.315124][ T28] audit: type=1400 audit(1793807964.460:326): avc: denied { mounton } for pid=1020 comm="syz.4.255" path="/60/file0" dev="tmpfs" ino=354 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 34.315222][ T1023] FAT-fs (loop4): Unrecognized mount option "ÿÿÿÿÿÿÿ" or missing value [ 34.493132][ T1024] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.519304][ T1024] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.532352][ T1024] device bridge_slave_0 entered promiscuous mode [ 34.549086][ T1030] netlink: 4 bytes leftover after parsing attributes in process `syz.4.256'. [ 34.576009][ T1024] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.584102][ T1024] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.592001][ T1024] device bridge_slave_1 entered promiscuous mode [ 34.598563][ T1030] netlink: 12 bytes leftover after parsing attributes in process `syz.4.256'. [ 34.755640][ T43] device bridge_slave_1 left promiscuous mode [ 34.762984][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.778804][ T43] device bridge_slave_0 left promiscuous mode [ 34.799843][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.817271][ T43] device veth1_macvtap left promiscuous mode [ 34.827326][ T43] device veth0_vlan left promiscuous mode [ 34.953095][ T1022] loop3: detected capacity change from 0 to 131072 [ 34.960269][ T1022] F2FS-fs (loop3): Wrong CP boundary, start(512) end(1536) blocks(0) [ 34.969021][ T1022] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 34.984426][ T1022] F2FS-fs (loop3): invalid crc value [ 35.019101][ T1022] F2FS-fs (loop3): Found nat_bits in checkpoint [ 35.043900][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 35.060078][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 35.078023][ T1022] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 35.094239][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 35.096081][ T1022] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 35.122932][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 35.142094][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.149199][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.161480][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 35.170568][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 35.178830][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.179465][ T1054] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 35.185915][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.202499][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 35.220304][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 35.248685][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 35.268607][ T1054] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.283007][ T28] audit: type=1400 audit(1793807965.420:327): avc: denied { append } for pid=1019 comm="syz.3.254" name="file1" dev="loop3" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 35.300964][ T1024] device veth0_vlan entered promiscuous mode [ 35.322632][ T1054] capability: warning: `syz.2.264' uses 32-bit capabilities (legacy support in use) [ 35.334834][ T1061] erofs: (device loop4): mounted with root inode @ nid 36. [ 35.343927][ T293] EXT4-fs (loop2): unmounting filesystem. [ 35.351254][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.359652][ T28] audit: type=1400 audit(1793807965.480:328): avc: denied { create } for pid=1053 comm="syz.2.264" name=E91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 35.362534][ T1061] erofs: (device loop4): z_erofs_readahead: readahead error at page 31 @ nid 89 [ 35.391490][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.404524][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 35.414379][ T28] audit: type=1400 audit(1793807965.500:329): avc: denied { execute } for pid=1060 comm="syz.4.266" path="/65/file0/file2" dev="loop4" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 35.415067][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 35.451101][ T1061] erofs: (device loop4): z_erofs_readahead: readahead error at page 30 @ nid 89 [ 35.457609][ T28] audit: type=1400 audit(1793807965.500:330): avc: denied { ioctl } for pid=1060 comm="syz.4.266" path="socket:[20688]" dev="sockfs" ino=20688 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 35.460584][ T1061] erofs: (device loop4): z_erofs_readahead: readahead error at page 29 @ nid 89 [ 35.500941][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.522671][ T1061] erofs: (device loop4): z_erofs_readahead: readahead error at page 28 @ nid 89 [ 35.525028][ T1024] device veth1_macvtap entered promiscuous mode [ 35.549370][ T1061] erofs: (device loop4): z_erofs_readahead: readahead error at page 27 @ nid 89 [ 35.556584][ T28] audit: type=1400 audit(1793807965.660:331): avc: denied { read } for pid=1064 comm="syz.2.268" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 35.568829][ T1061] erofs: (device loop4): z_erofs_readahead: readahead error at page 26 @ nid 89 [ 35.588209][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.595995][ T1061] erofs: (device loop4): z_erofs_readahead: readahead error at page 25 @ nid 89 [ 35.605530][ T1061] erofs: (device loop4): z_erofs_readahead: readahead error at page 24 @ nid 89 [ 35.606786][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.615113][ T1061] erofs: (device loop4): z_erofs_readahead: readahead error at page 23 @ nid 89 [ 35.632569][ T1061] erofs: (device loop4): z_erofs_readahead: readahead error at page 22 @ nid 89 [ 35.642552][ T1061] erofs: (device loop4): z_erofs_readahead: readahead error at page 21 @ nid 89 [ 35.652004][ T1061] erofs: (device loop4): z_erofs_readahead: readahead error at page 20 @ nid 89 [ 35.672229][ T1061] erofs: (device loop4): z_erofs_readahead: readahead error at page 19 @ nid 89 [ 35.688442][ T1061] erofs: (device loop4): z_erofs_readahead: readahead error at page 18 @ nid 89 [ 35.720883][ T1061] erofs: (device loop4): z_erofs_readahead: readahead error at page 17 @ nid 89 [ 35.744282][ T1061] erofs: (device loop4): z_erofs_readahead: readahead error at page 16 @ nid 89 [ 35.765103][ T1061] erofs: (device loop4): z_erofs_readahead: readahead error at page 15 @ nid 89 [ 35.765303][ T1069] ip_tables: iptables: counters copy to user failed while replacing table [ 35.774179][ T1061] erofs: (device loop4): z_erofs_readahead: readahead error at page 14 @ nid 89 [ 35.802052][ T1061] erofs: (device loop4): z_erofs_readahead: readahead error at page 13 @ nid 89 [ 35.822255][ T1061] erofs: (device loop4): z_erofs_readahead: readahead error at page 12 @ nid 89 [ 35.860097][ T1061] erofs: (device loop4): z_erofs_readahead: readahead error at page 11 @ nid 89 [ 35.879338][ T1061] erofs: (device loop4): z_erofs_readahead: readahead error at page 10 @ nid 89 [ 35.909594][ T1061] erofs: (device loop4): z_erofs_readahead: readahead error at page 9 @ nid 89 [ 35.929266][ T1061] erofs: (device loop4): z_erofs_readahead: readahead error at page 8 @ nid 89 [ 35.942954][ T1078] FAT-fs (loop6): Directory bread(block 1285) failed [ 35.945562][ T1061] erofs: (device loop4): z_erofs_readahead: readahead error at page 7 @ nid 89 [ 35.955347][ T1078] FAT-fs (loop6): Directory bread(block 1286) failed [ 35.966131][ T1078] FAT-fs (loop6): Directory bread(block 1287) failed [ 35.968056][ T1061] erofs: (device loop4): z_erofs_readahead: readahead error at page 6 @ nid 89 [ 35.973031][ T1078] FAT-fs (loop6): Directory bread(block 1288) failed [ 35.981985][ T1061] erofs: (device loop4): z_erofs_readahead: readahead error at page 5 @ nid 89 [ 35.990273][ T28] audit: type=1400 audit(1793807966.140:332): avc: denied { mount } for pid=1077 comm="syz.6.273" name="/" dev="loop6" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 35.998207][ T1061] erofs: (device loop4): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 36.028807][ T1061] erofs: (device loop4): z_erofs_readahead: readahead error at page 3 @ nid 89 [ 36.038387][ T1061] erofs: (device loop4): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 36.047607][ T1061] erofs: (device loop4): z_erofs_readahead: readahead error at page 1 @ nid 89 [ 36.054179][ T1078] FAT-fs (loop6): Directory bread(block 1285) failed [ 36.056877][ T1061] erofs: (device loop4): z_erofs_readahead: readahead error at page 0 @ nid 89 [ 36.072596][ T1078] FAT-fs (loop6): Directory bread(block 1286) failed [ 36.080703][ T1078] FAT-fs (loop6): Directory bread(block 1287) failed [ 36.084604][ T1061] erofs: (device loop4): z_erofs_read_folio: failed to read, err [-22] [ 36.087466][ T1078] FAT-fs (loop6): Directory bread(block 1288) failed [ 36.103348][ T1061] erofs: (device loop4): z_erofs_read_folio: failed to read, err [-22] [ 36.114143][ T1078] FAT-fs (loop6): Directory bread(block 1285) failed [ 36.116650][ T1061] erofs: (device loop4): z_erofs_read_folio: failed to read, err [-22] [ 36.123112][ T1078] FAT-fs (loop6): Directory bread(block 1286) failed [ 36.129466][ T1061] erofs: (device loop4): z_erofs_read_folio: failed to read, err [-22] [ 36.745841][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 36.896321][ T1117] netlink: 24 bytes leftover after parsing attributes in process `syz.0.289'. [ 37.028093][ T1123] device veth0 entered promiscuous mode [ 37.038772][ T1123] device veth0 left promiscuous mode [ 37.233949][ T1121] set_capacity_and_notify: 3 callbacks suppressed [ 37.233969][ T1121] loop0: detected capacity change from 0 to 32768 [ 37.288944][ T1121] loop0: p1 p3 < > [ 37.463745][ T686] udevd[686]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 37.466290][ T331] udevd[331]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 37.696996][ T1167] loop3: detected capacity change from 0 to 256 [ 37.737274][ T1167] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d) [ 37.876546][ T10] tipc: Left network mode [ 38.355833][ T1210] loop0: detected capacity change from 0 to 4096 [ 38.394650][ T1210] EXT4-fs (loop0): Test dummy encryption mode enabled [ 38.417997][ T1221] loop4: detected capacity change from 0 to 256 [ 38.448392][ T1210] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 38.600826][ T1206] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.608079][ T1206] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.634731][ T1206] device bridge_slave_0 entered promiscuous mode [ 38.648206][ T1206] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.674310][ T1206] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.681912][ T1206] device bridge_slave_1 entered promiscuous mode [ 38.711245][ T289] EXT4-fs (loop0): unmounting filesystem. [ 38.779054][ T1240] loop0: detected capacity change from 0 to 2048 [ 38.831587][ T1236] loop2: detected capacity change from 0 to 40427 [ 38.833713][ T1206] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.845127][ T1206] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.849179][ T1236] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 38.852432][ T1206] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.865761][ T1206] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.868445][ T1236] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 38.873483][ T1240] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 38.903929][ T1240] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 38.918491][ T1240] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 38.918748][ T1236] F2FS-fs (loop2): invalid crc value [ 38.930776][ T1240] EXT4-fs (loop0): This should not happen!! Data will be lost [ 38.930776][ T1240] [ 38.930794][ T1240] EXT4-fs (loop0): Total free blocks count 0 [ 38.930806][ T1240] EXT4-fs (loop0): Free/Dirty block details [ 38.930817][ T1240] EXT4-fs (loop0): free_blocks=4096 [ 38.930829][ T1240] EXT4-fs (loop0): dirty_blocks=48 [ 38.930840][ T1240] EXT4-fs (loop0): Block reservation details [ 38.930850][ T1240] EXT4-fs (loop0): i_reserved_data_blocks=3 [ 38.970177][ T1206] device veth0_vlan entered promiscuous mode [ 38.992375][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 39.006865][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 39.015896][ T1236] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 39.027597][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 39.044654][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 39.052855][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 39.067166][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 39.076208][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 39.080355][ T1236] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 39.084483][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 39.099048][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 39.104228][ T1236] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 39.113071][ T1206] device veth1_macvtap entered promiscuous mode [ 39.124741][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 39.138482][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 39.155868][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 39.181051][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 39.204564][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 39.212984][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 39.227813][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 39.252624][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 39.252637][ T28] audit: type=1400 audit(1793807969.390:344): avc: denied { mount } for pid=1206 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 39.335584][ T28] audit: type=1400 audit(1793807969.480:345): avc: denied { mounton } for pid=1253 comm="syz.7.328" path=2F322FE91F7189591E9233614B dev="tmpfs" ino=28 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 39.389308][ T293] bio_check_eod: 29 callbacks suppressed [ 39.389327][ T293] syz-executor: attempt to access beyond end of device [ 39.389327][ T293] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 39.486891][ T1259] overlayfs: refusing to follow metacopy origin for (/file1) [ 39.575587][ T1267] ip_tables: iptables: counters copy to user failed while replacing table [ 39.610075][ T1267] raw_sendmsg: syz.4.334 forgot to set AF_INET. Fix it! [ 39.626098][ T10] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 2 with max blocks 32 with error 28 [ 39.648060][ T28] audit: type=1400 audit(1793807969.790:346): avc: denied { append } for pid=1268 comm="syz.6.336" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 39.739327][ T28] audit: type=1400 audit(1793807969.880:347): avc: denied { mount } for pid=1277 comm="syz.0.339" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 39.836573][ T1282] netlink: 64 bytes leftover after parsing attributes in process `syz.2.341'. [ 39.891072][ T28] audit: type=1400 audit(1793807970.030:348): avc: denied { unmount } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 39.973198][ T1294] loop6: detected capacity change from 0 to 128 [ 39.983713][ T1294] FAT-fs (loop6): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 40.007467][ T1294] syz.6.345: attempt to access beyond end of device [ 40.007467][ T1294] loop6: rw=34817, sector=61, nr_sectors = 94 limit=128 [ 40.018673][ T1298] loop4: detected capacity change from 0 to 512 [ 40.034328][ T1298] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 40.045539][ T1298] EXT4-fs (loop4): 1 truncate cleaned up [ 40.051200][ T1298] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 40.131731][ T10] FAT-fs (loop6): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 40.204004][ T28] audit: type=1400 audit(1793807970.340:349): avc: denied { setopt } for pid=1306 comm="syz.7.349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 40.238207][ T28] audit: type=1400 audit(1793807970.370:350): avc: denied { write } for pid=1306 comm="syz.7.349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 40.284076][ T1311] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 40.304249][ T287] EXT4-fs (loop4): unmounting filesystem. [ 40.309723][ T1311] xt_hashlimit: size too large, truncated to 1048576 [ 40.375466][ T28] audit: type=1400 audit(1793807970.520:351): avc: denied { execute } for pid=1308 comm="syz.7.350" name="file0" dev="fuse" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 40.438487][ T1321] loop4: detected capacity change from 0 to 128 [ 40.514393][ T43] kworker/u4:2: attempt to access beyond end of device [ 40.514393][ T43] loop4: rw=1, sector=145, nr_sectors = 896 limit=128 [ 40.590237][ T28] audit: type=1400 audit(1793807970.730:352): avc: denied { create } for pid=1323 comm="syz.4.356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 40.648590][ T28] audit: type=1400 audit(1793807970.730:353): avc: denied { setopt } for pid=1323 comm="syz.4.356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 40.698968][ T1328] ip_tables: iptables: counters copy to user failed while replacing table [ 40.741374][ T1328] netlink: 48 bytes leftover after parsing attributes in process `syz.4.358'. [ 41.239769][ T1373] bridge0: port 3(syz_tun) entered blocking state [ 41.261140][ T1373] bridge0: port 3(syz_tun) entered disabled state [ 41.279717][ T1373] device syz_tun entered promiscuous mode [ 41.298004][ T1373] bridge0: port 3(syz_tun) entered blocking state [ 41.304483][ T1373] bridge0: port 3(syz_tun) entered listening state [ 41.400652][ T1364] loop6: detected capacity change from 0 to 40427 [ 41.415043][ T1364] F2FS-fs (loop6): Invalid SB checksum offset: 0 [ 41.429896][ T1364] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock [ 41.454668][ T1364] F2FS-fs (loop6): invalid crc value [ 41.461588][ T1398] ip_tables: iptables: counters copy to user failed while replacing table [ 41.498444][ T1399] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 41.523039][ T1364] F2FS-fs (loop6): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 41.563182][ T1399] ext4 filesystem being mounted at /98/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.637310][ T1364] F2FS-fs (loop6): Try to recover 2th superblock, ret: 0 [ 41.650020][ T1364] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 41.686567][ T1400] f2fs_ckpt-7:6: attempt to access beyond end of device [ 41.686567][ T1400] loop6: rw=2049, sector=45096, nr_sectors = 24 limit=40427 [ 41.712105][ T287] EXT4-fs (loop4): unmounting filesystem. [ 41.720968][ T1024] syz-executor: attempt to access beyond end of device [ 41.720968][ T1024] loop6: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 41.751076][ T1024] syz-executor: attempt to access beyond end of device [ 41.751076][ T1024] loop6: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 41.865236][ T1418] FAT-fs (loop4): Unrecognized mount option "ÿÿÿÿÿÿÿÿÿÿÿÿÿ" or missing value [ 42.089733][ T1435] bridge0: port 3(syz_tun) entered disabled state [ 42.103603][ T1435] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.110879][ T1435] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.283375][ T1445] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.290678][ T1445] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.298372][ T1445] device bridge_slave_0 entered promiscuous mode [ 42.313554][ T1445] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.321563][ T1445] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.329200][ T1445] device bridge_slave_1 entered promiscuous mode [ 42.422733][ T1465] netlink: 4 bytes leftover after parsing attributes in process `syz.7.410'. [ 42.458672][ T1465] device syz_tun left promiscuous mode [ 42.476327][ T1465] bridge0: port 3(syz_tun) entered disabled state [ 42.503414][ T1445] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.510511][ T1445] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.517829][ T1445] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.524885][ T1445] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.566950][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 42.575779][ T371] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.594488][ T371] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.667958][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 42.679017][ T371] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.686101][ T371] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.702633][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 42.718476][ T371] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.725572][ T371] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.753985][ T982] device bridge_slave_1 left promiscuous mode [ 42.760691][ T982] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.781745][ T982] device bridge_slave_0 left promiscuous mode [ 42.796417][ T982] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.823834][ T982] device veth1_macvtap left promiscuous mode [ 42.831065][ T982] device veth0_vlan left promiscuous mode [ 42.989774][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 42.998838][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 43.024621][ T1472] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 43.039080][ T1501] set_capacity_and_notify: 2 callbacks suppressed [ 43.039097][ T1501] loop2: detected capacity change from 0 to 16 [ 43.047256][ T1445] device veth0_vlan entered promiscuous mode [ 43.066087][ T1501] erofs: (device loop2): mounted with root inode @ nid 36. [ 43.073966][ T1472] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 43.082172][ T1472] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 43.089977][ T1472] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 43.100040][ T1501] syz.2.423: attempt to access beyond end of device [ 43.100040][ T1501] loop2: rw=0, sector=8, nr_sectors = 16 limit=16 [ 43.119909][ T1472] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 43.129443][ T1501] syz.2.423: attempt to access beyond end of device [ 43.129443][ T1501] loop2: rw=0, sector=8, nr_sectors = 16 limit=16 [ 43.130670][ T1445] device veth1_macvtap entered promiscuous mode [ 43.154996][ T1501] syz.2.423: attempt to access beyond end of device [ 43.154996][ T1501] loop2: rw=0, sector=8, nr_sectors = 16 limit=16 [ 43.171802][ T1472] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 43.173814][ T1504] erofs: (device loop2): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 43.189378][ T1472] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 43.189626][ T1501] syz.2.423: attempt to access beyond end of device [ 43.189626][ T1501] loop2: rw=0, sector=8, nr_sectors = 16 limit=16 [ 43.211932][ T1504] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-117] [ 43.221864][ T1472] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 43.231373][ T1472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 43.234366][ T1504] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-117] [ 43.728980][ T1533] x86/PAT: syz.8.436:1533 freeing invalid memtype [mem 0xfe004000-0xfe004fff] [ 43.816212][ T1526] loop4: detected capacity change from 0 to 40427 [ 43.833389][ T1526] F2FS-fs (loop4): invalid crc value [ 43.861305][ T1526] F2FS-fs (loop4): Found nat_bits in checkpoint [ 43.931305][ T1526] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 44.525307][ T1557] loop2: detected capacity change from 0 to 16 [ 44.542630][ T1557] erofs: (device loop2): mounted with root inode @ nid 36. [ 44.607101][ T1560] netlink: 4 bytes leftover after parsing attributes in process `syz.2.446'. [ 44.677415][ T1430] blk_print_req_error: 21 callbacks suppressed [ 44.677433][ T1430] device offline error, dev sda, sector 1114454 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 44.695641][ T1430] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2022 starting block 139306) [ 44.707338][ T1430] device offline error, dev sda, sector 1114494 op 0x1:(WRITE) flags 0x0 phys_seg 15 prio class 2 [ 44.718062][ T1430] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2022 starting block 139311) [ 44.730124][ T1472] Buffer I/O error on device sda1, logical block 139268 [ 44.740044][ T1472] Buffer I/O error on device sda1, logical block 139273 [ 44.754236][ T1472] Buffer I/O error on device sda1, logical block 139274 [ 44.763011][ T1472] Buffer I/O error on device sda1, logical block 139275 [ 44.772359][ T1472] Buffer I/O error on device sda1, logical block 139276 [ 44.781603][ T1472] Buffer I/O error on device sda1, logical block 139277 [ 44.785016][ T1430] device offline error, dev sda, sector 1114830 op 0x1:(WRITE) flags 0x0 phys_seg 2 prio class 2 [ 44.791774][ T1472] Buffer I/O error on device sda1, logical block 139278 [ 44.806406][ T1472] Buffer I/O error on device sda1, logical block 139279 [ 44.813397][ T1472] Buffer I/O error on device sda1, logical block 139280 [ 44.824980][ T1430] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2022 starting block 139353) [ 44.830049][ T1472] Buffer I/O error on device sda1, logical block 139281 [ 44.845276][ T1430] device offline error, dev sda, sector 1114854 op 0x1:(WRITE) flags 0x0 phys_seg 12 prio class 2 [ 44.856094][ T1430] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2022 starting block 139356) [ 44.865201][ T1570] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 44.867771][ T1430] device offline error, dev sda, sector 1115094 op 0x1:(WRITE) flags 0x0 phys_seg 9 prio class 2 [ 44.889243][ T1430] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2022 starting block 139386) [ 44.900941][ T1430] device offline error, dev sda, sector 1115174 op 0x1:(WRITE) flags 0x0 phys_seg 28 prio class 2 [ 44.911636][ T1430] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2022 starting block 139396) [ 44.923251][ T1430] device offline error, dev sda, sector 1115430 op 0x1:(WRITE) flags 0x0 phys_seg 21 prio class 2 [ 44.933852][ T1430] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2022 starting block 139428) [ 44.945413][ T1430] device offline error, dev sda, sector 1115646 op 0x1:(WRITE) flags 0x0 phys_seg 20 prio class 2 [ 44.956007][ T1430] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2022 starting block 139455) [ 44.967555][ T1430] device offline error, dev sda, sector 1115830 op 0x1:(WRITE) flags 0x0 phys_seg 6 prio class 2 [ 44.978063][ T1430] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2022 starting block 139478) [ 44.989631][ T1430] device offline error, dev sda, sector 1115886 op 0x1:(WRITE) flags 0x0 phys_seg 35 prio class 2 [ 45.000232][ T1430] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2022 starting block 139485) [ 45.021973][ T66] Aborting journal on device sda1-8. [ 45.022034][ T1565] buffer_io_error: 6 callbacks suppressed [ 45.022047][ T1565] Buffer I/O error on dev sda1, logical block 129, lost async page write [ 45.027627][ T66] Buffer I/O error on dev sda1, logical block 131072, lost sync page write [ 45.041696][ T1565] Buffer I/O error on dev sda1, logical block 137, lost async page write [ 45.058726][ T1565] Buffer I/O error on dev sda1, logical block 224, lost async page write [ 45.067485][ T1565] Buffer I/O error on dev sda1, logical block 273, lost async page write [ 45.076167][ T1565] Buffer I/O error on dev sda1, logical block 8192, lost async page write [ 45.084910][ T1565] Buffer I/O error on dev sda1, logical block 8193, lost async page write [ 45.093551][ T1565] Buffer I/O error on dev sda1, logical block 8214, lost async page write [ 45.102332][ T1565] Buffer I/O error on dev sda1, logical block 8215, lost async page write [ 45.109336][ T66] JBD2: I/O error when updating journal superblock for sda1-8. [ 45.111135][ T1565] Buffer I/O error on dev sda1, logical block 23725, lost async page write [ 45.150164][ T279] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 45.170075][ T279] EXT4-fs (sda1): I/O error while writing superblock [ 45.179651][ T279] EXT4-fs (sda1): Remounting filesystem read-only [ 45.186326][ T279] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 45.201595][ T279] EXT4-fs (sda1): Remounting filesystem read-only [ 45.208694][ T279] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 45.222418][ T279] EXT4-fs (sda1): Remounting filesystem read-only [ 45.233733][ T1575] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.452: Detected aborted journal [ 45.245949][ T1575] EXT4-fs (sda1): Remounting filesystem read-only [ 45.257280][ T1565] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 45.266896][ T1575] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.452: Detected aborted journal [ 45.289227][ T1575] EXT4-fs (sda1): Remounting filesystem read-only [ 45.304043][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 45.304059][ T28] audit: type=1400 audit(1793807975.440:365): avc: denied { create } for pid=1575 comm="syz.2.452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 45.329682][ T279] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 45.348537][ T279] EXT4-fs (sda1): Remounting filesystem read-only [ 45.360803][ T279] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 45.372939][ T1577] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.453: Detected aborted journal [ 45.383667][ T28] audit: type=1400 audit(1793807975.440:366): avc: denied { getopt } for pid=1575 comm="syz.2.452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 45.394229][ T1577] EXT4-fs (sda1): Remounting filesystem read-only [ 45.409862][ T279] EXT4-fs (sda1): Remounting filesystem read-only [ 45.424272][ T279] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 45.445175][ T1577] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.453: Detected aborted journal [ 45.475662][ T279] EXT4-fs (sda1): Remounting filesystem read-only [ 45.934887][ T1594] loop7: detected capacity change from 0 to 256 [ 45.941684][ T28] audit: type=1400 audit(1793807976.080:367): avc: denied { map } for pid=1592 comm="syz.4.459" path="socket:[22939]" dev="sockfs" ino=22939 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 45.965543][ T1593] af_packet: packet size is too long (65369 > 2016) [ 45.982865][ T1594] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 45.994238][ T28] audit: type=1400 audit(1793807976.110:368): avc: denied { read } for pid=1592 comm="syz.4.459" path="socket:[22939]" dev="sockfs" ino=22939 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 46.039501][ T28] audit: type=1400 audit(1793807976.180:369): avc: denied { read append open } for pid=1591 comm="syz.7.458" path="/29/file2/memory.events.local" dev="loop7" ino=1048733 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 46.066378][ T1596] FAULT_INJECTION: forcing a failure. [ 46.066378][ T1596] name failslab, interval 1, probability 0, space 0, times 1 [ 46.097561][ T1596] CPU: 1 PID: 1596 Comm: syz.4.460 Not tainted syzkaller #0 [ 46.104906][ T1596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 46.106529][ T28] audit: type=1400 audit(1793807976.230:370): avc: denied { write } for pid=1591 comm="syz.7.458" name="memory.events.local" dev="loop7" ino=1048733 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 46.115014][ T1596] Call Trace: [ 46.115024][ T1596] [ 46.115030][ T1596] __dump_stack+0x21/0x24 [ 46.115056][ T1596] dump_stack_lvl+0x110/0x170 [ 46.115074][ T1596] ? __cfi_dump_stack_lvl+0x8/0x8 [ 46.158933][ T1596] dump_stack+0x15/0x24 [ 46.163113][ T1596] should_fail_ex+0x3bf/0x510 [ 46.167815][ T1596] __should_failslab+0xac/0xf0 [ 46.172605][ T1596] should_failslab+0x9/0x20 [ 46.177138][ T1596] __kmem_cache_alloc_node+0x3d/0x2d0 [ 46.182540][ T1596] ? netdev_init+0x107/0x1f0 [ 46.187277][ T1596] ? kasan_save_alloc_info+0x1f/0x30 [ 46.192581][ T1596] ? netdev_init+0x107/0x1f0 [ 46.197197][ T1596] kmalloc_trace+0x29/0xb0 [ 46.201642][ T1596] netdev_init+0x107/0x1f0 [ 46.206081][ T1596] ops_init+0x2ce/0x470 [ 46.210346][ T1596] setup_net+0x4b4/0xcd0 [ 46.214667][ T1596] ? copy_net_ns+0x5c0/0x5c0 [ 46.219278][ T1596] ? __kasan_kmalloc+0x95/0xb0 [ 46.224068][ T1596] ? copy_net_ns+0x185/0x5c0 [ 46.228674][ T1596] copy_net_ns+0x355/0x5c0 [ 46.233111][ T1596] create_new_namespaces+0x3a8/0x660 [ 46.238427][ T1596] unshare_nsproxy_namespaces+0x120/0x170 [ 46.244189][ T1596] ksys_unshare+0x4d5/0x850 [ 46.248769][ T1596] ? __cfi_ksys_unshare+0x10/0x10 [ 46.253823][ T1596] ? fpregs_restore_userregs+0x128/0x260 [ 46.259483][ T1596] __x64_sys_unshare+0x38/0x40 [ 46.264273][ T1596] x64_sys_call+0x767/0x9a0 [ 46.268787][ T1596] do_syscall_64+0x4c/0xa0 [ 46.273201][ T1596] ? clear_bhb_loop+0x30/0x80 [ 46.277878][ T1596] ? clear_bhb_loop+0x30/0x80 [ 46.282558][ T1596] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 46.288460][ T1596] RIP: 0033:0x7fa1ab79fb19 [ 46.292969][ T1596] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 46.312577][ T1596] RSP: 002b:00007fa1ac5d0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 46.320996][ T1596] RAX: ffffffffffffffda RBX: 00007fa1aba25fa0 RCX: 00007fa1ab79fb19 [ 46.328969][ T1596] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000062020680 [ 46.337114][ T1596] RBP: 00007fa1ab837b70 R08: 0000000000000000 R09: 0000000000000000 [ 46.345086][ T1596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 46.353055][ T1596] R13: 00007fa1aba26038 R14: 00007fa1aba25fa0 R15: 00007ffd63f8d778 [ 46.361027][ T1596] [ 46.401771][ T1598] loop7: detected capacity change from 0 to 128 [ 46.704726][ T28] audit: type=1400 audit(1793808232.852:371): avc: denied { bind } for pid=1623 comm="syz.0.472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 46.744563][ T28] audit: type=1400 audit(1793808232.872:372): avc: denied { ioctl } for pid=1623 comm="syz.0.472" path="socket:[23000]" dev="sockfs" ino=23000 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 46.892410][ T1635] netlink: 12 bytes leftover after parsing attributes in process `syz.4.476'. [ 46.947295][ T1637] xt_hashlimit: size too large, truncated to 1048576 [ 47.325385][ T1642] ip_tables: iptables: counters copy to user failed while replacing table [ 47.356163][ T1642] ip_tables: iptables: counters copy to user failed while replacing table [ 47.455205][ T1651] netlink: 'syz.2.483': attribute type 4 has an invalid length. [ 47.531902][ T1652] netlink: 'syz.2.483': attribute type 4 has an invalid length. [ 47.563703][ T1651] syz.2.483 (1651) used greatest stack depth: 20896 bytes left [ 47.764380][ T1672] loop0: detected capacity change from 0 to 256 [ 48.084350][ T1685] kvm [1684]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x3 [ 48.120951][ T1683] device syzkaller0 entered promiscuous mode [ 48.514287][ T290] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 48.704954][ T28] audit: type=1400 audit(1793808234.852:373): avc: denied { write } for pid=1704 comm="syz.7.502" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 48.727154][ T290] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 48.750760][ T290] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 48.772553][ T290] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 48.794790][ T28] audit: type=1400 audit(1793808234.892:374): avc: denied { read } for pid=1706 comm="syz.7.503" path="socket:[23947]" dev="sockfs" ino=23947 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 48.807553][ T290] usb 1-1: config 0 interface 0 has no altsetting 0 [ 48.840569][ T290] usb 1-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 48.854317][ T290] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.876007][ T290] usb 1-1: config 0 descriptor?? [ 48.967432][ T1714] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 48.977749][ T1718] Write-error on swap-device (8:0:791878) [ 48.989418][ T1718] Write-error on swap-device (8:0:789806) Nov 4 16:03:55 syzkaller kern.a[ 48.998037][ T1718] Write-error on swap-device (8:0:789814) lert kernel: [ 48.977749][ T1718] Write-error on swap-device (8:0:791878) Nov 4 16:03:55 syzkaller kern.alert kernel: [ 48[ 49.014372][ T1718] Write-error on swap-device (8:0:789822) .989418][ T1718] Write-error on swap-device (8:0:789806) Nov 4 16:03:55 syzkaller kern.alert kernel: [ 48.998037][ T1718] Write-error on swap-device (8:0:789814) Nov 4 16:03:55 syzkaller kern.alert kernel: [ 49.014372][ T1718] Write[ 49.041804][ T1718] Write-error on swap-device (8:0:789830) -error on swap-device (8:0:789822) Nov 4 16:03:55 syzkaller kern.alert kernel: [ 49.041804][ T1718] Write-error on swap-device (8:0:789830) [ 49.061810][ T1718] Write-error on swap-device (8:0:789838) Nov 4 16:03:55 syzkaller kern.alert kernel: [ 49.061810][ T1718] Write-error on swap-device (8:0:789838) [ 49.082023][ T1718] Write-error on swap-device (8:0:789846) Nov 4 16:03:55 syzkaller kern.alert kernel: [ 49.082023][ T1718] Write-error on swap-device (8:0:789846) [ 49.102295][ T1718] Write-error on swap-device (8:0:795958) Nov 4 16:03:55 [ 49.108697][ T1718] Write-error on swap-device (8:0:795966) syzkaller kern.alert kernel: [ 49.102295][ T1718] Write-error on swap-device (8:0:795958) Nov 4 16:03:55 syz[ 49.124305][ T1718] Write-error on swap-device (8:0:795974) kaller kern.alert kernel: [ 49.108697][ T1718] Write-error on swap-device (8:0:795966) Nov 4 16:03:55 syzkaller kern.alert kernel: [ 49.124305][ T1718] Write-error on swap-device (8:0:795974) [ 49.291692][ T290] input: HID 17ef:6047 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:17EF:6047.0002/input/input5 [ 49.396433][ T290] lenovo 0003:17EF:6047.0002: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.0-1/input0 [ 49.432157][ T103] udevd[103]: worker [331] terminated by signal 7 (Bus error) [ 49.442449][ T103] udevd[103]: worker [331] failed while handling '/devices/platform/dummy_hcd.0/usb1/1-1' [ 49.817871][ T1750] Zero length message leads to an empty skb [ 50.137212][ T103] udevd[103]: worker [686] terminated by signal 7 (Bus error) [ 50.144914][ T103] udevd[103]: worker [686] failed while handling '/devices/platform/dummy_hcd.0/usb1/1-1' [ 50.207158][ T279] EXT4-fs error: 263 callbacks suppressed [ 50.207177][ T279] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 50.227519][ T279] EXT4-fs: 242 callbacks suppressed [ 50.227536][ T279] EXT4-fs (sda1): Remounting filesystem read-only [ 50.243243][ T1756] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.521: Detected aborted journal [ 50.256006][ T1756] EXT4-fs (sda1): Remounting filesystem read-only [ 50.263714][ T1756] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.521: Detected aborted journal [ 50.274863][ T1756] EXT4-fs (sda1): Remounting filesystem read-only [ 50.281738][ T1756] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.521: Detected aborted journal [ 50.293551][ T1756] EXT4-fs (sda1): Remounting filesystem read-only [ 50.303231][ T1756] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.521: Detected aborted journal [ 50.314342][ T1756] EXT4-fs (sda1): Remounting filesystem read-only [ 50.320865][ T1756] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.521: Detected aborted journal [ 50.331954][ T1756] EXT4-fs (sda1): Remounting filesystem read-only [ 50.338572][ T1756] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.521: Detected aborted journal [ 50.349744][ T279] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 50.349757][ T1756] EXT4-fs (sda1): Remounting filesystem read-only [ 50.351245][ T1756] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.521: Detected aborted journal [ 50.367514][ T279] EXT4-fs (sda1): Remounting filesystem read-only [ 50.378519][ T1756] EXT4-fs (sda1): Remounting filesystem read-only [ 50.391218][ T1756] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.521: Detected aborted journal [ 50.402283][ T1756] EXT4-fs (sda1): Remounting filesystem read-only [ 50.430418][ T103] udevd[103]: worker [685] terminated by signal 7 (Bus error) [ 50.438015][ T103] udevd[103]: worker [685] failed while handling '/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0' [ 50.474397][ T1758] udevd[1758]: failed to execute '/lib/udev/fido_id' 'fido_id': Input/output error [ 50.806381][ T1775] loop7: detected capacity change from 0 to 512 [ 50.833135][ T1775] EXT4-fs: dax option not supported [ 50.863497][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 50.863514][ T28] audit: type=1400 audit(1793808237.002:388): avc: denied { unmount } for pid=1776 comm="syz.7.529" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 50.993830][ T1784] loop0: detected capacity change from 0 to 8192 [ 51.249090][ T290] usb 1-1: USB disconnect, device number 3 [ 51.305367][ T103] udevd[103]: worker [1778] terminated by signal 7 (Bus error) [ 51.315613][ T103] udevd[103]: worker [1778] failed while handling '/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0' [ 52.014377][ T28] audit: type=1400 audit(1793808238.162:389): avc: denied { getopt } for pid=1804 comm="syz.7.541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 52.077085][ T1792] loop2: detected capacity change from 0 to 40427 [ 52.102746][ T1792] F2FS-fs (loop2): invalid crc value [ 52.129538][ T1792] F2FS-fs (loop2): Found nat_bits in checkpoint [ 52.220854][ T1792] F2FS-fs (loop2): Start checkpoint disabled! [ 52.232368][ T1792] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0 [ 52.260872][ T1792] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 52.555919][ T982] Bluetooth: hci0: Frame reassembly failed (-84) [ 52.956088][ T1821] netlink: 24 bytes leftover after parsing attributes in process `syz.7.546'. [ 53.115930][ T1831] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 53.138972][ T1831] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 53.183311][ T982] IPv6: ADDRCONF(NETDEV_CHANGE): veth5: link becomes ready [ 53.193210][ T982] IPv6: ADDRCONF(NETDEV_CHANGE): veth4: link becomes ready [ 53.501022][ T982] bio_check_eod: 3 callbacks suppressed [ 53.501081][ T982] kworker/u4:5: attempt to access beyond end of device [ 53.501081][ T982] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 53.525675][ T1835] overlayfs: failed to get inode (-116) [ 53.531442][ T1835] overlayfs: failed to get inode (-116) [ 54.584238][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 54.584250][ T1036] Bluetooth: hci0: command 0x1003 tx timeout [ 55.010630][ T28] audit: type=1326 audit(1793808241.152:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1879 comm="syz.2.569" exe="/root/ci2-android-6-1/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f59e9199897 code=0x0 [ 55.217017][ T1886] EXT4-fs error: 178 callbacks suppressed [ 55.217035][ T1886] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.572: Detected aborted journal [ 55.235896][ T1886] EXT4-fs: 157 callbacks suppressed [ 55.235910][ T1886] EXT4-fs (sda1): Remounting filesystem read-only [ 55.248941][ T1886] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.572: Detected aborted journal [ 55.260185][ T1886] EXT4-fs (sda1): Remounting filesystem read-only [ 55.266298][ T1888] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.7.573: Detected aborted journal [ 55.266874][ T1886] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.572: Detected aborted journal [ 55.288542][ T1886] EXT4-fs (sda1): Remounting filesystem read-only [ 55.295404][ T1886] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.572: Detected aborted journal [ 55.300199][ T1888] EXT4-fs (sda1): Remounting filesystem read-only [ 55.306501][ T1886] EXT4-fs (sda1): Remounting filesystem read-only [ 55.319507][ T1886] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.572: Detected aborted journal [ 55.330588][ T1886] EXT4-fs (sda1): Remounting filesystem read-only [ 55.333151][ T1888] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.7.573: Detected aborted journal [ 55.348019][ T1888] EXT4-fs (sda1): Remounting filesystem read-only [ 55.355082][ T1888] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.7.573: Detected aborted journal [ 55.355359][ T279] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 55.366222][ T1888] EXT4-fs (sda1): Remounting filesystem read-only [ 55.385442][ T1888] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.7.573: Detected aborted journal [ 55.396560][ T1888] EXT4-fs (sda1): Remounting filesystem read-only [ 55.403327][ T1888] EXT4-fs (sda1): Remounting filesystem read-only [ 55.625603][ T1896] loop2: detected capacity change from 0 to 1024 [ 55.647172][ T1896] ext4: Bad value for 'journal_dev' [ 55.772966][ T1907] loop0: detected capacity change from 0 to 128 [ 55.788511][ T1907] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 55.849999][ T982] Bluetooth: hci0: Frame reassembly failed (-84) [ 55.859995][ T545] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 56.046770][ T28] audit: type=1326 audit(1793808242.192:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1916 comm="syz.7.584" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ba9b9fb19 code=0x7fc00000 [ 56.076058][ T28] audit: type=1326 audit(1793808242.192:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1916 comm="syz.7.584" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f2ba9b9fb19 code=0x7fc00000 [ 56.101705][ T28] audit: type=1326 audit(1793808242.192:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1916 comm="syz.7.584" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ba9b9fb19 code=0x7fc00000 [ 56.127084][ T28] audit: type=1326 audit(1793808242.192:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1916 comm="syz.7.584" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ba9b9fb19 code=0x7fc00000 [ 56.156480][ T28] audit: type=1326 audit(1793808242.192:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1916 comm="syz.7.584" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ba9b9fb19 code=0x7fc00000 [ 56.203513][ T28] audit: type=1326 audit(1793808242.192:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1916 comm="syz.7.584" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ba9b9fb19 code=0x7fc00000 [ 56.244241][ T28] audit: type=1326 audit(1793808242.192:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1916 comm="syz.7.584" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ba9b9fb19 code=0x7fc00000 [ 56.270404][ T1937] loop0: detected capacity change from 0 to 16 [ 56.278766][ T28] audit: type=1326 audit(1793808242.192:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1916 comm="syz.7.584" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ba9b9fb19 code=0x7fc00000 [ 56.303626][ T28] audit: type=1326 audit(1793808242.192:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1916 comm="syz.7.584" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ba9b9fb19 code=0x7fc00000 [ 56.328491][ T1937] erofs: (device loop0): mounted with root inode @ nid 36. [ 56.335861][ T28] audit: type=1326 audit(1793808242.192:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1916 comm="syz.7.584" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ba9b9fb19 code=0x7fc00000 [ 56.368502][ T1937] erofs: (device loop0): EXPERIMENTAL EROFS subpage compressed block support in use. Use at your own risk! [ 56.557075][ T1953] netlink: 12 bytes leftover after parsing attributes in process `syz.0.598'. [ 56.609124][ T1959] loop0: detected capacity change from 0 to 512 [ 56.640467][ T1959] EXT4-fs (loop0): orphan cleanup on readonly fs [ 56.649145][ T1959] EXT4-fs warning (device loop0): ext4_enable_quotas:7080: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 56.665644][ T1959] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 56.672492][ T1959] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #13: comm syz.0.601: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 2048(2048) [ 56.691297][ T1959] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.601: couldn't read orphan inode 13 (err -117) [ 56.703443][ T1959] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 56.714699][ T1959] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 56.734683][ T1959] EXT4-fs warning (device loop0): ext4_enable_quotas:7080: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 56.757330][ T289] EXT4-fs (loop0): unmounting filesystem. [ 57.026069][ T1978] netlink: 'syz.4.609': attribute type 1 has an invalid length. [ 57.033927][ T1978] netlink: 'syz.4.609': attribute type 2 has an invalid length. [ 57.047267][ T1978] netlink: 'syz.4.609': attribute type 1 has an invalid length. [ 57.056568][ T1978] netlink: 'syz.4.609': attribute type 2 has an invalid length. [ 57.065158][ T1978] netlink: 184 bytes leftover after parsing attributes in process `syz.4.609'. [ 57.694924][ T1990] loop0: detected capacity change from 0 to 512 [ 57.711275][ T1990] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 57.727607][ T1990] EXT4-fs (loop0): warning: maximal mount count reached, running e2fsck is recommended [ 57.738409][ T1990] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.614: inode #15: comm syz.0.614: iget: illegal inode # [ 57.751274][ T1990] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.614: couldn't read orphan inode 15 (err -117) [ 57.763226][ T1990] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 57.780586][ T1990] EXT4-fs error (device loop0): ext4_lookup:1858: comm syz.0.614: inode #15: comm syz.0.614: iget: illegal inode # [ 57.800639][ T289] EXT4-fs (loop0): unmounting filesystem. [ 57.864263][ T545] Bluetooth: hci0: command 0x1003 tx timeout [ 57.864325][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 57.909853][ T2001] ./dev/sda1: Can't open blockdev [ 58.010711][ T2009] loop4: detected capacity change from 0 to 128 [ 58.026548][ T2011] loop0: detected capacity change from 0 to 512 [ 58.220438][ T2021] overlayfs: failed to clone upperpath [ 58.909876][ T2044] netlink: 24 bytes leftover after parsing attributes in process `syz.2.635'. [ 58.931573][ T2044] netlink: 'syz.2.635': attribute type 9 has an invalid length. [ 58.940039][ T2044] netlink: 23 bytes leftover after parsing attributes in process `syz.2.635'. [ 59.474893][ T982] device bridge_slave_1 left promiscuous mode [ 59.481043][ T982] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.488464][ T982] device bridge_slave_0 left promiscuous mode [ 59.494617][ T982] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.502397][ T982] device veth1_macvtap left promiscuous mode [ 59.508485][ T982] device veth0_vlan left promiscuous mode [ 59.907304][ T2063] Disabled LAPIC found during irq injection [ 60.478278][ T279] EXT4-fs error: 174 callbacks suppressed [ 60.478298][ T279] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 60.483589][ T2067] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 60.484067][ T279] EXT4-fs: 157 callbacks suppressed [ 60.484078][ T279] EXT4-fs (sda1): Remounting filesystem read-only [ 60.495241][ T2067] EXT4-fs (sda1): Remounting filesystem read-only [ 60.509727][ T2068] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.645: Detected aborted journal [ 60.514247][ T2067] EXT4-fs error (device sda1) in __ext4_new_inode:1094: Journal has aborted [ 60.521239][ T2070] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.7.646: Detected aborted journal [ 60.524948][ T2069] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.644: Detected aborted journal [ 60.537499][ T2068] EXT4-fs (sda1): Remounting filesystem read-only [ 60.544844][ T2071] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.647: Detected aborted journal [ 60.555047][ T2070] EXT4-fs (sda1): Remounting filesystem read-only [ 60.568115][ T2069] EXT4-fs (sda1): Remounting filesystem read-only [ 60.573601][ T2068] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.645: Detected aborted journal [ 60.583241][ T2071] EXT4-fs (sda1): Remounting filesystem read-only [ 60.590227][ T2070] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.7.646: Detected aborted journal [ 60.597159][ T2069] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.644: Detected aborted journal [ 60.607181][ T2068] EXT4-fs (sda1): Remounting filesystem read-only [ 60.614359][ T2071] EXT4-fs (sda1): Remounting filesystem read-only [ 60.624691][ T2068] EXT4-fs (sda1): Remounting filesystem read-only [ 60.635060][ T2069] EXT4-fs (sda1): Remounting filesystem read-only [ 60.644123][ T2073] loop2: detected capacity change from 0 to 512 [ 60.654799][ T2075] netlink: 12 bytes leftover after parsing attributes in process `syz.4.647'. [ 60.705936][ T2075] device xfrm1 entered promiscuous mode [ 60.711660][ T2075] netlink: 12 bytes leftover after parsing attributes in process `syz.4.647'. [ 61.288540][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 61.288559][ T28] audit: type=1400 audit(1793808247.432:411): avc: denied { read } for pid=2083 comm="syz.4.651" name="trace_pipe_raw" dev="tracefs" ino=13699 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 61.289532][ T2084] netlink: 4 bytes leftover after parsing attributes in process `syz.2.649'. [ 61.308266][ T28] audit: type=1400 audit(1793808247.452:412): avc: denied { associate } for pid=2088 comm="syz.7.650" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 62.110913][ T2093] af_packet: tpacket_rcv: packet too big, clamped from 42 to 4294967286. macoff=82 [ 65.156268][ T2135] loop4: detected capacity change from 0 to 128 [ 65.163219][ T2136] loop2: detected capacity change from 0 to 256 [ 65.171863][ T2133] netlink: 24 bytes leftover after parsing attributes in process `syz.0.663'. [ 65.181676][ T2136] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 65.199127][ T2135] FAT-fs (loop4): Directory bread(block 162) failed [ 65.202674][ T2136] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 65.214237][ T2135] FAT-fs (loop4): Directory bread(block 163) failed [ 65.214267][ T2135] FAT-fs (loop4): Directory bread(block 164) failed [ 65.214286][ T2135] FAT-fs (loop4): Directory bread(block 165) failed [ 65.245769][ T2136] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xba97ad02, utbl_chksum : 0xe619d30d) [ 65.266656][ T2135] FAT-fs (loop4): Directory bread(block 166) failed [ 65.273343][ T2135] FAT-fs (loop4): Directory bread(block 167) failed [ 65.294273][ T2135] FAT-fs (loop4): Directory bread(block 168) failed [ 65.300925][ T2135] FAT-fs (loop4): Directory bread(block 169) failed [ 65.308963][ T2135] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 65.450082][ T2135] FAT-fs (loop4): Directory bread(block 162) failed [ 65.456768][ T2135] FAT-fs (loop4): Directory bread(block 163) failed [ 65.463527][ T2135] syz.4.666: attempt to access beyond end of device [ 65.463527][ T2135] loop4: rw=3, sector=226, nr_sectors = 6 limit=128 [ 65.476590][ T2135] syz.4.666: attempt to access beyond end of device [ 65.476590][ T2135] loop4: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 65.490024][ T2134] EXT4-fs error: 90 callbacks suppressed [ 65.490035][ T2134] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.666: Detected aborted journal [ 65.506595][ T2134] EXT4-fs: 79 callbacks suppressed [ 65.506606][ T2134] EXT4-fs (sda1): Remounting filesystem read-only [ 65.518471][ T2134] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.666: Detected aborted journal [ 65.529326][ T2134] EXT4-fs (sda1): Remounting filesystem read-only [ 65.537696][ T2134] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.666: Detected aborted journal [ 65.549035][ T2134] EXT4-fs (sda1): Remounting filesystem read-only [ 65.555535][ T2134] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.666: Detected aborted journal [ 65.566401][ T2134] EXT4-fs (sda1): Remounting filesystem read-only [ 65.572831][ T2134] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.666: Detected aborted journal [ 65.583681][ T2134] EXT4-fs (sda1): Remounting filesystem read-only [ 66.361840][ T279] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 66.367195][ T2144] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 66.373055][ T279] EXT4-fs (sda1): Remounting filesystem read-only [ 66.384370][ T2144] EXT4-fs (sda1): Remounting filesystem read-only [ 66.393823][ T2145] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.667: Detected aborted journal [ 66.397194][ T2144] EXT4-fs error (device sda1) in __ext4_new_inode:1094: Journal has aborted [ 66.410391][ T279] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 66.417510][ T2146] EXT4-fs (sda1): Remounting filesystem read-only [ 66.430810][ T2147] EXT4-fs (sda1): Remounting filesystem read-only [ 66.437616][ T28] audit: type=1400 audit(1793808252.582:413): avc: denied { wake_alarm } for pid=2146 comm="syz.7.669" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 66.441097][ T2145] EXT4-fs (sda1): Remounting filesystem read-only [ 66.476548][ T2151] loop4: detected capacity change from 0 to 1024 [ 66.528714][ T2151] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 66.734257][ T24] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 66.915595][ T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 66.925856][ T24] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 66.937333][ T24] usb 3-1: New USB device found, idVendor=0a12, idProduct=0001, bcdDevice= 0.00 [ 66.946578][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.955064][ T24] usb 3-1: Product: syz [ 66.959412][ T24] usb 3-1: Manufacturer: syz [ 66.964166][ T24] usb 3-1: SerialNumber: syz [ 66.988825][ T103] udevd[103]: worker [2140] terminated by signal 7 (Bus error) [ 66.996907][ T103] udevd[103]: worker [2140] failed while handling '/devices/platform/dummy_hcd.2/usb3/3-1' [ 67.424368][ T6] usb 3-1: USB disconnect, device number 3 [ 67.433791][ T103] udevd[103]: worker [2139] terminated by signal 7 (Bus error) [ 67.444339][ T103] udevd[103]: worker [2139] failed while handling '/devices/platform/dummy_hcd.2/usb3/3-1' [ 67.505908][ T287] EXT4-fs (loop4): unmounting filesystem. [ 70.500244][ T187] EXT4-fs error: 53 callbacks suppressed [ 70.500260][ T187] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #121: comm crond: reading directory lblock 0 [ 70.517555][ T187] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #116: comm crond: reading directory lblock 0 [ 70.529000][ T187] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #116: comm crond: reading directory lblock 0 [ 70.540422][ T187] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #116: comm crond: reading directory lblock 0 [ 70.551996][ T187] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #116: comm crond: reading directory lblock 0 [ 70.563383][ T187] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #116: comm crond: reading directory lblock 0 [ 70.730348][ T279] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 70.735778][ T2182] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 70.741545][ T279] EXT4-fs: 44 callbacks suppressed [ 70.741555][ T279] EXT4-fs (sda1): Remounting filesystem read-only [ 70.752804][ T2182] EXT4-fs (sda1): Remounting filesystem read-only [ 70.759078][ T279] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 70.764267][ T2182] EXT4-fs error (device sda1) in __ext4_new_inode:1094: Journal has aborted [ 70.770745][ T279] EXT4-fs (sda1): Remounting filesystem read-only [ 70.797093][ T279] EXT4-fs (sda1): Remounting filesystem read-only [ 70.800015][ T2183] EXT4-fs (sda1): Remounting filesystem read-only [ 70.810749][ T2186] EXT4-fs (sda1): Remounting filesystem read-only [ 70.811733][ T2183] EXT4-fs (sda1): Remounting filesystem read-only [ 70.817906][ T2184] EXT4-fs (sda1): Remounting filesystem read-only [ 70.824338][ T2183] EXT4-fs (sda1): Remounting filesystem read-only [ 70.833977][ T2186] EXT4-fs (sda1): Remounting filesystem read-only [ 72.448433][ T2202] loop0: detected capacity change from 0 to 512 [ 72.476268][ T2202] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 72.486019][ T2202] ext4 filesystem being mounted at /161/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.499879][ T28] audit: type=1400 audit(1793808258.642:414): avc: denied { append } for pid=2197 comm="syz.0.682" name="loop0" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 72.523461][ T28] audit: type=1400 audit(1793808258.642:415): avc: denied { map } for pid=2197 comm="syz.0.682" path="/dev/loop0" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 72.554882][ T289] EXT4-fs (loop0): unmounting filesystem. [ 74.171807][ T28] audit: type=1400 audit(1793808260.312:416): avc: denied { set_context_mgr } for pid=2213 comm="syz.4.689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 74.202379][ T2212] netlink: 12 bytes leftover after parsing attributes in process `syz.7.688'. [ 74.219063][ T28] audit: type=1400 audit(1793808260.342:417): avc: denied { write } for pid=2213 comm="syz.4.689" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 75.991321][ T279] EXT4-fs error: 57 callbacks suppressed [ 75.991339][ T279] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 75.996873][ T2221] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 75.999942][ T2222] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.691: Detected aborted journal [ 76.008165][ T2221] EXT4-fs: 42 callbacks suppressed [ 76.008197][ T2221] EXT4-fs (sda1): Remounting filesystem read-only [ 76.021383][ T279] EXT4-fs (sda1): Remounting filesystem read-only [ 76.031572][ T2223] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.690: Detected aborted journal [ 76.035917][ T2222] EXT4-fs (sda1): Remounting filesystem read-only [ 76.047727][ T2225] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.693: Detected aborted journal [ 76.048982][ T2224] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.7.692: Detected aborted journal [ 76.059170][ T2225] EXT4-fs (sda1): Remounting filesystem read-only [ 76.067193][ T2222] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.691: Detected aborted journal [ 76.076477][ T2223] EXT4-fs (sda1): Remounting filesystem read-only [ 76.087510][ T2224] EXT4-fs (sda1): Remounting filesystem read-only [ 76.093746][ T2221] EXT4-fs error (device sda1) in __ext4_new_inode:1094: Journal has aborted [ 76.105429][ T2222] EXT4-fs (sda1): Remounting filesystem read-only [ 76.114893][ T2225] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.693: Detected aborted journal [ 76.119014][ T2224] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.7.692: Detected aborted journal [ 76.126933][ T2223] EXT4-fs (sda1): Remounting filesystem read-only [ 76.132848][ T2222] EXT4-fs (sda1): Remounting filesystem read-only [ 76.143669][ T2225] EXT4-fs (sda1): Remounting filesystem read-only [ 76.160150][ T2226] loop2: detected capacity change from 0 to 16 [ 76.166101][ T2227] netlink: 24 bytes leftover after parsing attributes in process `syz.0.690'. [ 76.170970][ T2226] erofs: (device loop2): mounted with root inode @ nid 36. [ 76.202456][ T47] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[9000] [ 76.213439][ T2226] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[8192] [ 76.224539][ T2226] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[8192] [ 76.235633][ T2226] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[8192] [ 76.246585][ T2226] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[8192] [ 76.260209][ T2226] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[9000] [ 76.271186][ T2226] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[9000] [ 76.282171][ T2226] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[9000] [ 76.293095][ T2226] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[9000] [ 78.031125][ T2239] overlayfs: invalid redirect ((null)) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: repeatedly failed to execute the program proc=9 req=633 state=1 status=67 (errno 9: Bad file descriptor) [ 80.048954][ T28] audit: type=1400 audit(1793808266.192:418): avc: denied { write } for pid=279 comm="syz-executor" path="pipe:[15188]" dev="pipefs" ino=15188 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 80.855186][ T1430] device bridge_slave_1 left promiscuous mode [ 80.861334][ T1430] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.868797][ T1430] device bridge_slave_0 left promiscuous mode [ 80.874980][ T1430] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.882687][ T1430] device veth1_macvtap left promiscuous mode [ 80.888747][ T1430] device veth0_vlan left promiscuous mode [ 81.080219][ T1] EXT4-fs error: 88 callbacks suppressed [ 81.080235][ T1] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #2: comm init: reading directory lblock 0 [ 81.097083][ T1] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #2: comm init: reading directory lblock 0 [ 81.108462][ T1] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #2: comm init: reading directory lblock 0 [ 81.119672][ T1] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #2: comm init: reading directory lblock 0 [ 81.131001][ T1] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #2: comm init: reading directory lblock 0 [ 81.142190][ T1] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #2: comm init: reading directory lblock 0 [ 81.153411][ T1] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #2: comm init: reading directory lblock 0 [ 81.164670][ T1] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #2: comm init: reading directory lblock 0 [ 81.175804][ T1] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #2: comm init: reading directory lblock 0 [ 81.186945][ T1] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #2: comm init: reading directory lblock 0 [ 81.844868][ T1430] device bridge_slave_1 left promiscuous mode [ 81.851067][ T1430] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.858571][ T1430] device bridge_slave_0 left promiscuous mode [ 81.864890][ T1430] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.872676][ T1430] device bridge_slave_1 left promiscuous mode [ 81.878880][ T1430] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.886250][ T1430] device bridge_slave_0 left promiscuous mode [ 81.892333][ T1430] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.900313][ T1430] device veth1_macvtap left promiscuous mode [ 81.906340][ T1430] device veth0_vlan left promiscuous mode [ 81.912259][ T1430] device veth1_macvtap left promiscuous mode [ 81.918319][ T1430] device veth0_vlan left promiscuous mode