last executing test programs: 57.647194166s ago: executing program 0 (id=57): mmap$IORING_OFF_SQ_RING(0x0, 0x3, 0x300000b, 0x401d031, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='mem\x00\xffEev\xf2r\xf1\x18\x1d\xb9\x00y_hug$\b\xb0\x7f0\f\x87\xcaaPr\x9d\xd1\xe5\xc80S\x1dd\x884>\x02\xc7\x94\xa1\x14\xd3BG\xe5a\xac\xfe-!\xdfH\"\xd3\xc3\xd59\x88\xca8\x8d\x0f$\xcd\xe6\xfd\xffD\x1e\xf2\x85\x98\xb5\xaf[s\xdf!\xbdy\x9e\xe2\x17h{\x96\xd8\xb7G&t\xe8\x1f\xf8\x91V\xdc\xees\x9bf\xf9z\xa8z\xb7[\xa3\xb0\xc9\xa7L\xcd\xdf\xef\xa4\x97|\xc6\xedRE\x96\xb6\xf3\xa9b\xc9(\x8d\x88\xcc\xfc\xb7oyx\td\xfel0\x1e\x8e\x03\aK\x96\xe7\x14\x83e\xb2\x19\xd1x\xfb\xf1\xb2<\xd3\x1d\x8dx\xbe\xb1.\xfc9\x94\x8f\xbb\x84Qu:\x9f\rp\x1f\x86hT\x0f\nC\f,\xffe\x00\xdc\xf7\xe2g3>\x94O\xfd\x81\xd8\xe1*\x93n\'\x99\xe9\\\x8f\xa7Zj)\xdd\xb7\xc0\xa8+\xd3\xba\x17L\x93\xaciNG5*\xc9\x11\xde\v', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)) write$P9_RLOPEN(r0, &(0x7f0000000000)={0x18, 0xd, 0x2, {{}, 0x1}}, 0x18) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, 0x0, 0x4000) write$cgroup_type(r0, &(0x7f0000000200), 0x5abbf7f8) 57.628746738s ago: executing program 0 (id=58): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000200)=ANY=[@ANYBLOB="e00000027f"], 0x14) 57.51134959s ago: executing program 0 (id=62): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000000)=0x9, 0x4) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000040)=0xffff8001, 0x4) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000a, 0x12, r0, 0x852ac000) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x86, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x4e20, 0xffffffff, @loopback, 0xbf}, 0x1c) recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)=""/4102, 0x1006}, 0xadd}], 0x1, 0x40002000, 0x0) 57.436942278s ago: executing program 0 (id=65): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x10, &(0x7f0000000100)={[{@dioread_lock}]}, 0x5, 0x7e5, &(0x7f00000018c0)="$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") syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x3e, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000002c0)='./file0/file1\x00', 0x0, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000740)='./bus\x00', 0xa82086, 0x0, 0x31, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000003c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x200) 57.31244191s ago: executing program 0 (id=68): sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000ac0)='V', 0x1}], 0x1, 0x0, 0x0, 0x20000040}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket(0x2, 0x3, 0xff) connect$inet(r1, &(0x7f0000000180)={0x2, 0xfffd, @local}, 0x10) write$binfmt_misc(r0, &(0x7f0000000ac0), 0x18) 57.082989884s ago: executing program 0 (id=75): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x841e, &(0x7f0000000080)={[{@nojournal_checksum}, {@jqfmt_vfsold}, {@lazytime}, {@usrquota}, {@usrquota}]}, 0x3, 0x42f, &(0x7f0000000c40)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000bc0)='rdma.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000c00), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r0, 0x1000) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 57.076275425s ago: executing program 32 (id=75): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x841e, &(0x7f0000000080)={[{@nojournal_checksum}, {@jqfmt_vfsold}, {@lazytime}, {@usrquota}, {@usrquota}]}, 0x3, 0x42f, &(0x7f0000000c40)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000bc0)='rdma.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000c00), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r0, 0x1000) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 49.554700948s ago: executing program 3 (id=238): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e20, 0x440007, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xd7}, 0x1c) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1}]}, 0x10) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x1, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x8}, 0x1c) 49.526888751s ago: executing program 3 (id=240): socket$packet(0x11, 0x2, 0x300) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000580)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f00000005c0)={0x2, 0x4, @multicast2}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) sendmmsg(r0, &(0x7f0000000840), 0x800001d, 0x0) 49.322544332s ago: executing program 3 (id=246): openat$kvm(0xffffffffffffff9c, 0x0, 0x20000, 0x0) rt_sigprocmask(0x0, &(0x7f0000000180)={[0xffffffffffffffff]}, 0x0, 0x8) r0 = getpgrp(0x0) r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x7, &(0x7f00000001c0)={0x3b, 0x800000a, 0x4}) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000380)={[0xfffffffffffffffe]}, 0x8) read(r2, &(0x7f00000003c0)=""/384, 0x200008c0) 49.309314163s ago: executing program 3 (id=247): syz_mount_image$vfat(&(0x7f0000003080), &(0x7f0000000080)='./file0\x00', 0x12148c5, &(0x7f0000000200)={[{@utf8no}, {@fat=@time_offset={'time_offset', 0x3d, 0x30a}}, {@shortname_win95}, {@fat=@dos1xfloppy}, {@utf8no}, {@shortname_mixed}, {@fat=@sys_immutable}, {@shortname_winnt}, {@shortname_lower}, {@shortname_lower}, {@rodir}, {@shortname_win95}, {@rodir}, {@utf8}, {@numtail}, {@rodir}]}, 0x0, 0x2d9, &(0x7f0000003200)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000003500)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000003540)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000003580)='./file0\x00', &(0x7f00000035c0)='./file0\x00', 0x0, 0x1333406, 0x0) mount$bind(&(0x7f0000003600)='./file0\x00', &(0x7f0000003640)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000003680)='.\x00', &(0x7f00000036c0)='./file0\x00', 0x0, 0x1005c48, 0x0) read$FUSE(r0, &(0x7f0000003700)={0x2020}, 0x2020) 49.247014549s ago: executing program 3 (id=249): bpf$MAP_CREATE(0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="0500000004000000050000000c"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000012c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x1, 0xd, &(0x7f00000013c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000001007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000009e00000095"], &(0x7f0000001440)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000014c0)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x4800) 49.183175436s ago: executing program 3 (id=253): r0 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) splice(r3, 0x0, r2, 0x0, 0x6, 0x0) fcntl$setpipe(r1, 0x408, 0x2e3b) 49.152572429s ago: executing program 33 (id=253): r0 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) splice(r3, 0x0, r2, 0x0, 0x6, 0x0) fcntl$setpipe(r1, 0x408, 0x2e3b) 39.127835779s ago: executing program 6 (id=498): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x4, 0x7ffc0001}]}) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') r1 = syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000180)='./file0\x00', 0x1000000, &(0x7f0000000080)=ANY=[@ANYRES8=r0, @ANYRES32, @ANYRES32=r0], 0x1, 0x3a2, &(0x7f0000000340)="$eJzs3U1rY+UXAPDTzPRl+v+36UIEFfFhdm5CW7/AFJkBsaDUiYyzEO/YdAy905QkVDKIzkJw6zdwP7h0J4hfoAvdu3PXjctZDBPJW5t0Yiv2JQ7+fhDuSZ5zkufmksvZhHNw59sH21uN0lbWjMKNFIWIKDyJWOpGPVP9Y6Ebz8SwR/Fm8c5vr3/w0d1319bXb26kdGvt9lurKaXFN376/Ivvr//c/N+HPyz+OBv7Sx8f/LH6+/7L+68cPLv9WbWRqo20U2umLN2r1ZrZvbySNquN7VJK7+eVrFFJ1Z1GpT6yvpXXdndbKdvZXJjfrVcajZTttNJ2pZWatdSst1J2P6vupFKplBbmg9OUH29sZGu9eO6EvBuXtSEuQL2+lnV+w7PPrZQfT2RDAMBEnan/Hyyc2v/fLQz1/3Pxl/3/dOj/z8X030sb7v//8ZvwL9fp/2f6v99R+n8AAAAAAAAAAAAAAHgRPGm3i+12uzg4tgd/Eu4/n/D2uGDPXf9jj0nvj4s19Me9uYj8m73yXrl37K2vbUU18qjEchTjaee2MNCLb72zfnM5dS3FwoOvuvXXf4koXxmtX4liLI2vX+nVp8P66BynY364fjU+iZfG16+OrZ+J5e+G6ktRjF8/jVrksdm9vR3Vf7mS0tvvrR+rn+3mAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDfUEoDr0Vv7v1eOeJa7PXn95eOEpZG5+P36g/n6y9HMZ6On8+/PHY+/9V49epkzx0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABhqth9tZnlfqlxUMZv5neT4VM73gpKqpXvqjY0vXYjR59rT3OWNQODUnCkevXOuf5JjkZ+12uxvc//rctzp3uZfyLMF0RJyQ0+5/gWf/rP9HxPArV0ZzZiPiLB/RPuksOsFiJyic63d45VIu0yTuRgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADBZh0O/O0+mJr0bAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJqXRerid5XmlfoHBpM8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgRfJnAAAA///+Owi8") r2 = openat(r1, &(0x7f0000000040)='./file1\x00', 0x14b446, 0x82) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fchown(r2, 0xee01, 0x0) 39.070882725s ago: executing program 6 (id=500): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000100)={0x1, &(0x7f0000000140)=[{0x6, 0x2}]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 38.169565318s ago: executing program 6 (id=514): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffa}]}) close_range(r0, 0xffffffffffffffff, 0x0) inotify_init1(0x80000) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r1, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="2000000000000000000000000700000001440e05", @ANYRES16=r1], 0x20}}], 0x1, 0x400c4) 38.169106638s ago: executing program 6 (id=515): syz_mount_image$f2fs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x1000800, &(0x7f0000000480)=ANY=[@ANYRES64=0x0], 0x2, 0x5524, &(0x7f00000004c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000005a00)='./file0\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000005cc0)='./file1\x00', 0x21c0, 0x103) syz_mount_image$fuse(0x0, &(0x7f0000005d40)='./bus\x00', 0x3000042, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000005d80)='./file0\x00', &(0x7f0000005dc0), 0x0, &(0x7f0000005e00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) linkat(0xffffffffffffff9c, &(0x7f0000005e40)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f0000005e80)='./file0/file2\x00', 0x1000) mount$9p_xen(0x0, &(0x7f0000005ec0)='./file0/file2\x00', 0x0, 0x40000, 0x0) 38.024403303s ago: executing program 6 (id=516): r0 = socket(0x10, 0x803, 0x0) pipe2(&(0x7f0000000100), 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x20000, {0xa, 0x40, 0x22, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x34}}]}, 0x40}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@ipv6_newaddr={0x48, 0x14, 0x9535393fea6295b5, 0xfffffffe, 0x0, {0xa, 0x0, 0x46, 0xfe, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}, @IFA_RT_PRIORITY={0x8, 0x9, 0x2}]}, 0x48}}, 0x0) 37.790116467s ago: executing program 6 (id=524): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbaf, &(0x7f0000002f00)="$eJzs3M1rXOUaAPDnnEy+c5v0crn3tggGpCqK07QpFbpqXYsKunDZmExKyPTDJIIJXaR1ry5EXBSkf4Lg3m5cCS7qQutfUMQiRTdtFyNnPtKxk5mm6cwcE38/eHPe97wn8zxPTmfOe2BOA/jHms5+pBGHIuJsEjFZ359GxFC1NxKxWTvu/t3L81lLolJ5+7ckkoi4d/fyfOO1kvp2vD4YiYibryXx749a466ubyzPlcullfr46Nr5S0dX1zdeWTo/d650rnThxOyrJ2ZPzs52sdbbl9774pkf3nj+6vWPZ978/MB3SZyOifpccx3dMh3TW3+TZoWImOt2sJwM1OtprjMp5JgQAAAdpU1ruP/GZAzEw8XbZHz7Y67JAQAAAF1RGYioAAAAAPtc4v4fAAAA9rnG9wDu3b0832j5fiOhv+6ciYipWv2N55trM4XYrG5HYjAixn5Povmx1qT2a09tOov09felrEWPnkPuZPNKRPx/u/OfVOufqj7F3Vp/GhEzXYg//ch4L9V/ugvxn6z+4S5EBICIG2dqF7LW61+6tf6Jba5/hW2uXbuR9/W/sf6737L+e1j/QJv131s7jHH4wUs32801r//e/eTnhSx+tn2qop7AnSsRhwvb1Z9s1Z+0qf/sDmOMz9++1m4uqz+rt9H6XX/lesSR6mqutf6GpNP/T3R0calcmqn93Ob11092jt98/rOWxW/cC/RDdv7HYnfn/9IOY0z979dD7eYeX3/6y1DyTrU3VN/z4dza2sqxiKHk9db9xzvn0jim8RpZ/S8+1/n9v1392WfCZv3vkP3ruVLfZuOrj8QcP3L8q93X31tZ/Qu7PP+f7jDGl99ce7/dXN71AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALA3pBExEUla3OqnabEYMR4R/4mxtHxxde3lxYsfXFjI5iKmYjBdXCqXZiJisjZOsvGxav/h+Pgj49mIOBgRn02OVsfF+YvlhbyLBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYMt4RExEkhYjIo2IPybTtFjMOysAAACg66byTgAAAADoOff/AAAAsP+13P8X/jIa6WcuAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7EsHn71xK4mIzVOj1ZYZqs8N5poZ0Gvpzg4b63UeQP8N5J0AkJtCU79SqVRyTAXoM/f4QPKY+ZG2M8NdzwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAv68XDt24lUTE5qnRassM1ecGc80M6LU07wSA3Ax0mkweuwPYwwp5JwDkxj0+UFvZP6jUtM6PtP3N4aeOCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDeMVFtSVqMiLTaT9NiMeJfETEVg8niUrk0ExEHIuKnycHhbHws76QBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoutX1jeW5crm0oqOj08XOaPQt1mj9zdzmmOH2Ux06OX8wAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQi9X1jeW5crm0spp3JgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDeVtc3lufK5dJKDzt51wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQH7+DAAA///6CAm5") r0 = inotify_init1(0x80000) inotify_add_watch(r0, &(0x7f0000000ac0)='.\x00', 0x1000401) syz_mount_image$fuse(0x0, &(0x7f0000000b00)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) chdir(&(0x7f0000000b40)='./bus\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000c00)='.\x00', 0xa880, 0x85) getdents64(r1, 0x0, 0x4f) 37.789996397s ago: executing program 34 (id=524): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbaf, &(0x7f0000002f00)="$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") r0 = inotify_init1(0x80000) inotify_add_watch(r0, &(0x7f0000000ac0)='.\x00', 0x1000401) syz_mount_image$fuse(0x0, &(0x7f0000000b00)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) chdir(&(0x7f0000000b40)='./bus\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000c00)='.\x00', 0xa880, 0x85) getdents64(r1, 0x0, 0x4f) 36.10439121s ago: executing program 7 (id=552): ptrace$getregset(0x4204, 0x0, 0x405, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@mcast2, 0x300, 0x0, 0x2, 0x3, 0x0, 0x4}, 0x20) r1 = socket$inet6(0xa, 0x2, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x10022, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@private2, 0x300, 0x0, 0x2, 0x9, 0x0, 0x4}, 0x20) 35.259562727s ago: executing program 7 (id=569): r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x14000405) syz_read_part_table(0x4078, &(0x7f00000008c0)="$eJzszzFKA1EQBuB/TYJRVLAWxEWwFO2scotcQDyCjY0JpvMYgk3wAN7AI5lGnoQsuhtbBZXva2bm393Z98KvcP/aNFfd/OWmO+829fnyaT/JUZ23UkqGSfprKxclOTvPYHu4kZ0k11//Op5/3w0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC/Zroe9LrjY1MPMrsd5aKsTO56qZon9Wmy9/nBoiRb7Q3L98bzHzg6AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDflVLKsladtJ/+KqySaSt/OM5sdFhlmNQn7S2Tj3YzGbyzP4c2AAAgEAMTdmT/PVAIJPrd3QJNX2Wu0hU4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAZQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cEACAAAAIOj/63YECgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKwUAAP//TWYnqQ==") syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f00000000c0)='2', 0x1, 0x8000c61) pread64(r1, &(0x7f0000000100)=""/73, 0x49, 0x800055) 34.963281227s ago: executing program 7 (id=576): r0 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000a40)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x6, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000c00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c40)={{r2}, &(0x7f0000000c80), &(0x7f0000000cc0)=r3}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000d00)={r3, r1, 0x25, 0x2, @val=@netfilter={0x0, 0x3, 0x2018}}, 0x20) syz_emit_ethernet(0x2a, &(0x7f0000000d40)={@multicast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x4002, 0x5, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x0, 0x8}}}}}, 0x0) 34.689578706s ago: executing program 7 (id=582): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$exfat(&(0x7f0000000040), &(0x7f00000004c0)='./file0\x00', 0x80, &(0x7f0000000500)=ANY=[@ANYRES8=r0, @ANYRES16=r0, @ANYRES32=0x0], 0x1, 0x1548, &(0x7f0000000540)="$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") mkdir(&(0x7f0000001ac0)='./bus\x00', 0x0) mount$incfs(&(0x7f0000001b00)='./bus\x00', &(0x7f0000001b40)='./bus\x00', &(0x7f0000001b80), 0x1804002, 0x0) chdir(&(0x7f0000001c40)='./bus\x00') r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000002500)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 34.501463994s ago: executing program 7 (id=587): r0 = fsopen(&(0x7f0000000180)='binder\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0xf) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f00000001c0)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 34.394107946s ago: executing program 7 (id=589): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file1\x00', 0x802, &(0x7f0000000480)=ANY=[], 0x1, 0x2a4, &(0x7f0000000580)="$eJzs3T9rc2UUAPBzkzSNOqSIiyJ4QQen0rq6NEoFsZMSQR002BYkCYUWAlYwduoncPR7+BFcXPwGgqvg1g6VKzf33ia16R/65k3h7e83nd7nnvOc3KckU06+eXPY3z1I4uTsz2i1kqhtxVacJ7EWtaj8FI0AAF4c51kW/2QPyWzUFt8NALAMxed/4bF7AQCW47Mvvvyks7Oz/WmatuL19umom0TE8HTULdY7+/FdDGIvNqIdFxHZpSL+6OOd7WikubV4ZzgedfPM4de/l/U7f0dM8jejHWvz8zfTwmX+y1V3aXT2V6o/2vHa/Pz3/p8fw3F0m/Hu2zP9r0c7/vg2DmIQu5HnTvN/3EzTD7Ofz374Kt8mz09q0V2d3DeV1Zd0JAAAAAAAAAAAAAAAAAAAAAAAPAHraZoU43sm83vyS5P5OaNu/WKyvp5WZuf7jKv5QElVqJgPlEU5omecxS/VfJ2NNE2z8sZpfiPeaPhhAQAAAAAAAAAAAAAAAAAAAMgdfX/c7w0Ge4cLCappANXX+h9aZ2vmyltx3O/Vby64ev+9ZqcN5L3eenM0GrGgx3JX8FLez8Irr04P9/MogupgFrrXqx8URY/7vbRcqh5yv5fctVerOrhfZ5ea8ayNZZN/iYvs6pm2Llu9mtVc0NNovjJ36d8sy+5X5/2/ijMqrySTERv3232lDOa+wDxoXT+L324ueONbRn0hbzwAAAAAAAAAAAAAAAAAAMA10y/9zlk8uTW19tyaAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAlm/7+fxW0IuLqlWvBuEy+7Z4yaMbh0SO/RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ6A/wIAAP//4ipOSw==") openat(0xffffffffffffff9c, 0x0, 0x10842, 0x20) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./bus\x00', 0x141842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c1002, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000440)=ANY=[], 0x21) sendfile(r1, r0, 0x0, 0x40001) 34.393709156s ago: executing program 35 (id=589): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file1\x00', 0x802, &(0x7f0000000480)=ANY=[], 0x1, 0x2a4, &(0x7f0000000580)="$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") openat(0xffffffffffffff9c, 0x0, 0x10842, 0x20) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./bus\x00', 0x141842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c1002, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000440)=ANY=[], 0x21) sendfile(r1, r0, 0x0, 0x40001) 29.97172776s ago: executing program 1 (id=705): socket$inet6(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="02043c0001000000010e0200c52cf7c20675e005b02f0800eb2b2ff0dadb897c6b112002faffffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3fe", 0x48, 0x14, 0x0, 0x0) 29.924632195s ago: executing program 1 (id=706): mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000006c0)='./proc\x00', &(0x7f0000000700)='proc\x00', 0x208000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000780)='27', 0x2) r1 = memfd_create(&(0x7f00000007c0)='[\v\xdbX\xae[5\xa9\x90\xffc\x1f\x1a\xa9\xfd\xfa\xad\xd1md\xe7\xe2\x7f\x9b\xd5R\x10\xf3\xb6\xffT\xbf\xd1\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\x9fc\xda\xa9\x83r\xd8\x98\x00\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9r\xc3E\xf8\x92\xb7-\x0e\xcf|\x89\xc2tc\xc9d\x9eI\xbaVf\xd1fs\xd1w6\x8a\xe9_', 0x3) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) execveat(r1, &(0x7f0000000880)='\x00', 0x0, 0x0, 0x1000) 29.436909605s ago: executing program 1 (id=709): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x10000014}) epoll_wait(r0, &(0x7f0000000000)=[{}], 0x1, 0xfffffff7) 27.978743845s ago: executing program 1 (id=735): syz_mount_image$ext4(&(0x7f0000000480)='ext4\x00', &(0x7f0000001a80)='./bus\x00', 0x20081e, &(0x7f0000001d80)={[{@nodelalloc}, {@nombcache}, {@auto_da_alloc}]}, 0x1, 0x4ef, &(0x7f0000001dc0)="$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") symlink(&(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000a80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') creat(&(0x7f0000003800)='./bus\x00', 0x0) mount(&(0x7f0000003840)=@loop={'/dev/loop', 0x0}, &(0x7f0000003880)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f00000038c0)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000003900)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) readlinkat(0xffffffffffffff9c, &(0x7f0000000b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0xb4) 27.726895921s ago: executing program 1 (id=741): r0 = epoll_create(0x7) r1 = epoll_create(0x7) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000200)) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000240)={0x60000000}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f00000003c0)={0x1008}) 26.842019162s ago: executing program 1 (id=759): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x19, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r0, r2, 0x16, 0x0, @void}, 0x10) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000300)={0x0, {{0xa, 0x0, 0xfffffffe, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0xfe, @remote}}}, 0x108) 26.806275716s ago: executing program 36 (id=759): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x19, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r0, r2, 0x16, 0x0, @void}, 0x10) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000300)={0x0, {{0xa, 0x0, 0xfffffffe, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0xfe, @remote}}}, 0x108) 22.743075343s ago: executing program 2 (id=838): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$exfat(&(0x7f0000000500), &(0x7f0000000600)='./file0\x00', 0x80, &(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES16=r0, @ANYRES32=0x0], 0x1, 0x1548, &(0x7f0000000680)="$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") mkdir(&(0x7f0000001c00)='./bus\x00', 0x0) mount$incfs(&(0x7f0000001c40)='./bus\x00', &(0x7f0000001c80)='./bus\x00', &(0x7f0000001cc0), 0x1804002, 0x0) chdir(&(0x7f0000001d00)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000540)='./file0\x00', 0x0, 0x8, 0x0) 22.257679953s ago: executing program 2 (id=840): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8082, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./file2\x00', 0x143042, 0x40) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0xca02}) readv(r0, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/84, 0x54}], 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x30, 0x10, 0x1, 0x70bd28, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x3}, [@IFLA_TXQLEN={0x8, 0xd, 0x1}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) 21.942974035s ago: executing program 2 (id=847): r0 = gettid() r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000200)="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", 0x118) connect$inet6(r1, &(0x7f0000000380)={0xa, 0x4e23, 0x8020000c, @loopback={0x91}, 0xffffffff}, 0x1c) timer_create(0x0, &(0x7f00000003c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000400)) timer_settime(0x0, 0x0, &(0x7f0000000440)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) 21.819051578s ago: executing program 2 (id=850): syz_mount_image$ext4(&(0x7f0000000480)='ext4\x00', &(0x7f0000001a80)='./bus\x00', 0x20081e, &(0x7f0000001d80)={[{@nodelalloc}, {@nombcache}, {@auto_da_alloc}]}, 0x1, 0x4ef, &(0x7f0000001dc0)="$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") symlink(&(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000a80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') creat(&(0x7f0000003800)='./bus\x00', 0x0) mount(&(0x7f0000003840)=@loop={'/dev/loop', 0x0}, &(0x7f0000003880)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f00000038c0)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000003900)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) readlinkat(0xffffffffffffff9c, &(0x7f0000000b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0xb4) 21.668784273s ago: executing program 2 (id=853): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000800)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000840)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x33, &(0x7f0000000040)=0x7, 0x4) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000080)=0xf2b, 0x4) getsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f00000000c0)=""/31, &(0x7f0000000100)=0x1f) 21.373770624s ago: executing program 2 (id=858): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, r2, 0x16, 0x0, @void}, 0x10) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x3a, 0x1, &(0x7f0000000100), 0x4) 21.373597984s ago: executing program 37 (id=858): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, r2, 0x16, 0x0, @void}, 0x10) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x3a, 0x1, &(0x7f0000000100), 0x4) 19.836135052s ago: executing program 8 (id=868): r0 = gettid() clock_gettime(0x0, &(0x7f0000000440)) rt_sigtimedwait(&(0x7f0000000380)={[0xfffffffffffffffd]}, &(0x7f00000003c0), 0x0, 0x8) timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) 19.118873026s ago: executing program 8 (id=872): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x19, 0x3, &(0x7f0000001880)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f00000018c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = fsopen(&(0x7f0000001900)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001940)={r0, r2, 0x16, 0x0, @void}, 0x10) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r3, 0x1, 0x3d, &(0x7f0000001980)={0xb, 0xfffffffc}, 0x8) 18.289765551s ago: executing program 8 (id=877): r0 = timerfd_create(0x0, 0x800) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x40000001}) timerfd_settime(r0, 0x3, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) clock_adjtime(0x0, &(0x7f0000000140)={0x3ff, 0xf6d, 0x0, 0xd, 0x7fffffff, 0x0, 0x4, 0x200000000000000, 0x0, 0x100, 0x0, 0x702b, 0x6, 0x3, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x1000, 0x2000000000008, 0x9, 0x3, 0x8000000000005a, 0x3}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) ppoll(&(0x7f0000000340)=[{r1, 0xa0}], 0x1, &(0x7f0000000380), 0x0, 0x0) 17.342517858s ago: executing program 8 (id=881): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001100), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000001140)={0xcf47, 0x19, 0x8, 0x99ff, 0x7, "ff06000000000001"}) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000011c0)={0x0, 0x0, 0x3, 0x7fff, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) r1 = syz_open_pts(r0, 0x200) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000001200)=0xff) 16.202866285s ago: executing program 8 (id=885): openat$tun(0xffffffffffffff9c, 0x0, 0x189001, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000540)='./mysys\x00', &(0x7f0000000580)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x4000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 15.065425352s ago: executing program 8 (id=890): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknodat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x1, 0x0) mount$9p_unix(&(0x7f0000000540)='./cgroup.cpu/cpuset.cpus\x00', &(0x7f0000000580)='./file0\x00', 0x0, 0x12c9498, 0x0) fspick(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x1) 9.433687551s ago: executing program 5 (id=902): r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x2, 0x0) mmap(&(0x7f00001e8000/0x1000)=nil, 0x1000, 0x1000001, 0x12, r0, 0x0) syz_clone(0x48800000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_clone3(&(0x7f0000000100)={0x100000, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) pause() syz_clone3(&(0x7f0000000280)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) 9.432349401s ago: executing program 4 (id=904): pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x8000002, 0x2004, @rand_addr, 0x6}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x22008041, &(0x7f0000000540)={0xa, 0x2, 0x2, @loopback, 0xfffffffd}, 0x20) sendto$inet6(r1, &(0x7f0000000580)="44f9b108b1cd", 0x6, 0x1, 0x0, 0x0) shutdown(r1, 0x0) splice(r1, 0x0, r0, 0x0, 0x406f413, 0x0) 9.389739345s ago: executing program 9 (id=905): unshare(0x20000400) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00'}, 0x80) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x80) r3 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r0, r2}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000400)={r3, 0x20, 0x0}, 0x10) 7.78326654s ago: executing program 5 (id=906): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000040)={0xc0, 0x0, 0x4000}) 7.78300694s ago: executing program 9 (id=907): keyctl$KEYCTL_PKEY_ENCRYPT(0x19, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) futex(0x0, 0x80, 0x1, 0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0x200, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 7.78275905s ago: executing program 4 (id=908): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x18}}, 0x0) getsockname$packet(r1, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r2, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r0], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r3, 0x0, 0x0, 0x44010, &(0x7f0000000480)={0x11, 0x1, r2, 0x1, 0x12, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}, 0x14) 5.976666266s ago: executing program 5 (id=909): r0 = fsopen(&(0x7f0000000240)='fuseblk\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x40042, 0x1) close(0x3) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x2) close(r1) userfaultfd(0x80001) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 5.962503968s ago: executing program 9 (id=910): madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) 5.923853542s ago: executing program 4 (id=911): syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net/vlan/vlan1\x00') r0 = socket(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000000400)={0x1, 'vlan1\x00', {}, 0x5832}) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x206, 0x8401) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) ioctl$USBDEVFS_BULK(r1, 0x5523, 0x0) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) syz_open_procfs(0x0, &(0x7f0000000440)='fd/3\x00') 4.106958228s ago: executing program 5 (id=912): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x6, 0x4, 0x90000000, 0x103, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) 4.106692748s ago: executing program 9 (id=913): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x14) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x24, 0x24, 0xf1d, 0x400000, 0x0, {0x0, 0x0, 0x0, r3, {0x16}, {0xfff1, 0xffff}, {0x0, 0xfff3}}}, 0x24}}, 0x20000044) sendmsg$nl_route_sched(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=@delchain={0x24, 0x2e, 0x1, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff3, 0xffff}, {0x0, 0x1a}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) 4.105228298s ago: executing program 4 (id=914): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000002000)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) mmap$binder(&(0x7f00000a0000/0x6000)=nil, 0x6000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000002040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000002080)={0x4c, 0x0, &(0x7f00000020c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x8, &(0x7f0000002140)={@raw_ptr={0x70742a85, 0x0, &(0x7f00000021c0)='\x00'/8192, 0x2000}}, &(0x7f00000041c0)}, 0x2000}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004200)={0x4, 0x0, &(0x7f0000004240)=[@enter_looper], 0x100, 0x0, &(0x7f0000004280)=@transaction={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004380)={0xc, 0x0, &(0x7f00000043c0)=[@free_buffer={0x40086303, r2}]}) 2.14284967s ago: executing program 5 (id=915): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000001c0)={0x809, 0x4cc, 0xffff, 0x9dff, 0x1}) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x3, 0x7fff, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) r1 = syz_open_pts(r0, 0x200) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000280)=0xff) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000002c0)=0x12) 2.1424857s ago: executing program 9 (id=916): syz_usb_connect(0x0, 0x54, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010002e0010140120a0100000001020301090236000201008000"], 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0xf642, 0x20, 0x6, 0x9dfe, 0x1a}) write$binfmt_aout(r0, &(0x7f0000000100)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0xfffffff7, 0x6, 0x1a, "00000000000300"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x17) 2.1421659s ago: executing program 4 (id=917): syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x400, &(0x7f0000000280)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c757466383d302c636865636b3d7374726963742c646973636172642c757466383d312c757466383d312c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c757466383d312c00ef5c3556"], 0xfd, 0x2bc, &(0x7f0000000bc0)="$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") read$FUSE(0xffffffffffffffff, &(0x7f0000000ec0)={0x2020}, 0x2020) syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000440)='./bus\x00', 0x2008042, &(0x7f0000000480)={[{@user_xattr}, {@errors_remount}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@delalloc}, {@data_err_ignore}]}, 0x1, 0x57e, &(0x7f0000000500)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000006380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 82.304642ms ago: executing program 5 (id=918): r0 = gettid() capset(&(0x7f0000000540)={0x20080522}, &(0x7f0000000580)) timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5, r0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f00007c8000/0x3000)=nil, 0x3000, 0x9, 0x50, 0xffffffffffffffff, 0x4dc60000) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) 79.725542ms ago: executing program 9 (id=919): mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) statx(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x2000, 0x800, 0x0) read$FUSE(r0, &(0x7f0000000300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000002340)="00e7a0633e8438bafa888b9b02144af32e296a0a01dc194d649b6fa26d6d5e63bac4a04baeeb8aacb22c6eec461b67db6a737737c6d2687acb00572f92e3fdb5d0cb2f11121c557a943020200755bcab77b39c406b733239e2bb1175b9322ba39dc7d67da8f77aed1714dae2e6c24c3ea96be9d151c6ab7b3c54bbe507b8b2461fb4be8dc90042184af6d48f8ace16abb5e3fc943cf61cdb75624a259bdb5f7829b9775820f85f2d1a6ee6c6c2af4fd41ab8a41ecb2612abf13cd2c6f9f3e6db505e4bbe68cc000cf5fa6d5636191a4b366ab59af52132a3f9678d4ed1bd577bacffb3b52850804005eebf3dfa4763168ff30490a11acdbbf4c3312a45f30139f6b72b1e7cdec185006bb30e0e8fa88da2cefc718cae7e9830f7ca101e4e23c6bd16bfacf4a9927fb13af4b79c86ab999beda4ad396abdda354a42fb4ef21d6749175dc21a0cf9191aa4f90d274b50370a580ad8dcd166d2b06c0d8b071973c3fde30f7e2bc371a51ca5866bf8b24eaac75bf482dd4436b214ff62d32e20df223b0b680ede28b3a49e66e330a8a3ecace0db9855d235d5ff23765e742d1a739c2ac8743f4c62664a3b347279da55a1a5b16e1e2828b584a013577d50f890e3894d9e8d6bfccdfb2b70221f12a7fac24b7a8818edce72b65f622c77bf1312771a2c0d805ec9a25c536c91868762032255be78903b77b2c1a773a03996fabba69214e76f5df6df0375b592692a2c3c86c75a3be56fe598ddaea0b9901d20db7e43e128e04e5509283f833c24c625887288459db5727210ba9a301fb8c934dd1d8dca68039fe5b2e1a8d7cdfc6d875e5851098100c3cd42544ed90bb55b58d20a501fabbc485d148c615a3b070fa0520da2ed68ee115a4411d5418b47f3d95616096f67a7a36d68f1e8df82eca8ef96fb4a96b3422fe046a37ea5f5967513a559bd770fecab7228b0692f439765c9e9c6ea4fc608e0b27f9b49064dd2f9ac06f83f6d87ebc61fa3a29bb5ed39641245ce8cf43770df32a84838802b0827ca5a40e2003915e2ed108a005637bb028d29bd2cfd28a1bd55e67ed1b6b7b72163c27c4b0e36d1b134d6dfdb165a66fb46498fc04bb8053b84098af5b18758631d1318d625a6fa4d3ce5a4d3a90e10c6363a26b5ae96c2d56f87ad21a6118af6847d041f88f852ddc3f250c088ef5cb31198f3ac81cff9a5bab26ed56c09f8416188974e08349f7da28fc754b98c1ac4ea0060ac1e1b1c49f7dbadbc59254b265dc418cab9ac14e2bbecc4c3103543e37984efb1f61315e10d2b422732217d3a9b0cfe4561f3765d3bda60be239e02bdc164dd631582e8c87dd8fa60d63dcf9e7f3dadc4ce5e4433a42425b8ee8cb8a2defab0bf9b6109c90b5655b79b18c06884f2670a985d454e08e54de69f645cb0cbb70620bd988ee717c310ae77b4abe81c01c6e7f47268ee20bc30b9062830917705682eba2c5ef966b877f33294aa5f8b29d3dd5ed92302087f34fa18d19a005de05f925e3e93c8c0f24507ff20cd23d9ae5452c32ff58c78ccdb1ab32c98edfaa6d2c3971934ca8f849ac360c286566eb72b0793f12cef84bd282368d533247ee750f18aeda484167f3d680e4aaa3aa0694441d4ff6a71531f1a30f87eeb71afd04c5d686e1f86f27586f4e2c8ff77c09612ba1af9b3fb93efd31af42f8e0498f35d07c662b743a08f2839cad8f95b90cbb4fc0ed2ca45dd093a549cde4c6ff08ce09a2cbc6f9f78b6f96643357f92f8f403202742057731fd3e343a87c0affe803cfdbddb8c2694ab63f2dc35da705624747e30a943000fc82c40f10e1975d2e2ec15aefd531b6dbc053606b054dc976f44d5b5a5f37e9c08532ce16cf8bca55ab6c814ceb855ab50b8b52620f8645a9dc25fcb732080d84bf39c3ebb235b4d96da527b64ec4b72f69e91d16a4efcaf76f2e1f968ca68a06f60b01ec7becc9ffd7877c0992cb0f80fb3daabc039513896bd7697843be06aba53e7761e11e075c61ef2d897d4d9f90041c14283746feeb3f0d456ba4be27843350fe43e7c1110b4439489139f6dae01c43f23ec71f08d3042663c65e059d368e4e2c6e49de45bf078d3182a1bc1208bc59379e705aa3309579947409f2a8b3d79099c8619f916e7a6fa333d2312a274247156b8c25cbcfcc59ef13339c700f56a8691dff39bd4338789001872c0d90929037dc0ad99b380a6ba73f331f73f9274f4c2bf5233d7482edf37bf6ffed4f2c0ee44a1d57cae0d644f25591dc03bf837571a82d0c31b61be7ff85a5b3843e8f96a50eaa43f5c137ecfc4e4530d08a2afa4ba02fcc50117a4ad0d5862302017639344c82749f673dbd650e49b35302d0acbab45c0973198291bb42b4cfcd3b0c252074341ea8eca19e122cd234da6d41bf5eedb706e16c17687ed8b84db67130796d26b94eac83bbcd785b603242bd6252c155711efd7dd22cc54e1eaf6d910d0f22c701f3d4da0314dd2829c6ee13bbcbd126558b47b8066bf0766c792a012315bd29bfeda8f28a2c1f4e638b701758e19a0e5bd5b4f19048b00a877d956292e345f8a3a8367892f955bcb5e50ca145ec5e2c9309e25941bd277e393aaad38f9b72a42514b27da6856223c37a1fc1327fa760551d3fdeb0b222ab180b16c9eea138cf4f327e88fdfee293c5b6b007028eb796a60772148282dcd17ffc1c90ed8b6540ede933545ed5a5301d6ff39734444ff3d85cda4ac3befa5083a4685e9e231eba4a91a35f4f7f48fd5ac2447c64c010e2a9f8e80691c95460e1995444466ec5f3cd71fe509a26ff0b7f3254bc8c3255e903834e841b37c70b267fb33deb0d1ed4ea84a869453ba508fc255b12cf847103d5195046c930ae4a75c956f22fcfe4186d547686b54bd7a534940d5d62216994eac0e8ed3bd2bd59354e6b9c6b5b10511d54a8b928040f1e13c4a423b0cf519fc6e9673df5c48c0778c7edb8fa8d8ace77463a77d2d6313160e1ee72742953e433b670400d59c93464fd91520847db238610ed0c289fc55647881a7d6257cf28090c75a6f19df079cfd35742a74a5ab270314f7c8039c20ff0f3f543d029b75a741b5dc6425241ac2ffabf1f96288e6d4ba34da09fb6049c2c8753fbd41fdb4bc68c57bf374ef4feb0df00c41319debb26afba2ff39e1799a1c2137f4e920ee5b02d93789b6b0c853e8143dae5b08ee85da2ea7c31803610ce797293ea95c16ade6dae2afb008e59d8b9505737f008b5227df5f1e4eb5d707f502698a17ead9b1f5ec09dff34248ff2fb153dc6df4812e39754a4baa42e1d8b77fbddef3ca091701ac28ae5fd422dbd8db5b122d3965383abc37a52d2fca5ce56eba974dba3d059cefe40e3c35c9daa8ae31198214303c1dcb90d58fc983ccfd504fa43925636f94b128d44e8aa5cd3ecfabd50a84062d03f7508a0575ab65ecc749d3ef566fdbc529a8139b7a7fb3a9bd784df52cddc6f2699044ba47615163fbbe19f3d88d38a8b71fe52b2611ca74341429d1cef1a7e350545be29d2caa560e60352cab074c298c44ca2c07f9795ce52f10aa3e2fcdef371f24e309b19e52218881f25a4674527edbe3b3bd0b9b536d810c6f9500c0c81bcfd9a440dd91c1d35c52758d2b2ae1a8497bb394c4f09d3947cf777727b0d1daf5ac4fe4fa3c247a791702cb84b96321b7fec81bf549d4eb5d6dafe019b26187417c68b064e4308908535a3e77b6cd3e28caaf12d726f15590b7958e40134d045a38cbb689131a7e85532f1c63dd4bac9e4d00645cd7b2b71704563f3738b92044a8153f6ba717800ab7cb238175c376d7add2c5ec38e4c856f1ab9c3ee33f6ca6d576ae908dd290e4bae23470182e253765e04e8eb02a791c4396a511ef467879a9e2818b8a4b1b0b39a6c44e816e3ebf6e3be93929dfcb38d5dad7d20b60215447674d0608b8b02331ac20e57083cb9b4449fecbb149441aea0ad82f00a82d87d743fc80d410922bc20923516885440f43c9f32beb81ce148def6140952583a7825c2d2fe012d52d30ef66d32a8a0864ac5c1737e2506228d41ff0515ee80be4cf012927dde0fd2a07cac68eff8c4437f2844d4df07936fd8753e5909f962c5c767f8719cc295bdfa8a16f3f36ff56e34d7b14b6b8c46d5af248b04a9c5396f84990e23d145670950bce5f5638e5e2cea37c371a4483729338f1305cbb32fa1c05dd9d21d2a69e5fa3abe9a2dad2237be20b4088393c04aa66cf13718de4bffac72f641a8c017a1d5568fa15a6a06e4dc833874ec95af6f115bdadf15179bfc8c4e3e64f26f1299e282c4ab397340934efc1e601afc630fe195e8ae7d8da1310568cab4f2fad085d0ec39710d8b7c812b3fd55c6f50925bcfc90fbcb35b8daa0f1e1f69d82fae2034039f7ad6921694ed48a55a68bc541e6d86f1e33c261a92d48b50eb58a03d8e31b2f6564a4ddc3ee988d0dc47b4b610a9a9dcb87571b5c1edb3362df0ec3d58872157e0f7247dfa8100b4478b705702a5620c9201010f40232327550db333e845dbecd6aadbd0a94c064862b1100b6dd45ece811b8c0275e3753e11b4bcd8bc5ed7668e72afa5bc5cc17b4c313273755f532ecfdefdf2d5c47999453a3b7c158d98332f0bd3a820cfb2c8c3bcd43197e7395a032cec6e41662079f2f654965aebc393e22b5c8516d9b8ad01e33ee481a4ac46a2df304dadeaa9e5274d340aaebe14dcea315fe1279f1a41a5c7aa8c94bf4b3d48757503171f53488e01210145e62c0de7c39737848dbdb1b207d4d33b8de180b020e8a76b1b521905e5e3ce97292f8558fb68efdee774681bfffcf1dc3eef35f660dd1659a32950de2d50e762313beee330d9c2a9fe8ce5e4e61ddd86378d3551335f6ef62053d3b248a8c33a11abdf3f3aa1975a15f4a6957a13d5b12a44d0f2b52b9a2d996e98c630c0f2abca80c7ae89efcf81ae284a0d19582cb1319d207077e5657d245533181ed6e07e0f7647123fc46c37bd75b4f4d181112b4a08acdcf445332cb9dde69a0923dd9244dd2ecd818b19588939922e3b2d8dd9d9fed95fa55b0e4564b38aca2c4d24eebc634664400177fbdeaeb278bb1d8eb11baf4be5c87d4f8d9a855bfa75df4c51fb4eec87a27c59df9a47d82523b08022a1c0fb22ff6f93c3d2cc22a4111a6ec5be428cba33617be65739c2240248f3a02d01ddf2d6aca9e537a2296b16d082d2b868504371dd5e41898885b03ebfaca73b40e8924ece83c1c80de6ce14943e1199c6f81bf359f44c3ed5ae3c6eacb730b1039f0b6555347bd566dfff45a7a2176420ab2b40916a73b66a3ad07af6e1ac5597393d203fa1ad34d4564af956a0a3e2997e27a4e5eff67dd89cce8875d995e00c1858234f149f6ad4cac2b8056966f726df57b8c4ee8f22f23097ba1471b1f1036e3a499400fccdb75b56eb13e9eca1407d5bff4b075b06d00fcbfcafc28431eb33156232e73c6577e3eca437330c494ede57b9609e1f40634918dea767338b5542197410cdc000143ace89ca0b7bf645b3267f74767d7c7fce05d2f59c137204e56bfa711f66903c511f681cf7a1b4f9fc0f42b7c438ff8957e1059375321df5b0c5c884f46d94c21686e1300582d34928bc398653118f79bfeea2e7cfbbf31a7718f4aab50fae57db94203d43e060365c9a7455241be03d82dffc3783d0f6aa170c0866eb0dad07485831526922d8348a7a16e2e9903a2ac93c58c6dce83127fab17703ec004a519ae5675baffb31bf4b52f9ca992a84017a44d68dc693abd829947342f277fdcbc87168bcc03c32b8b1e81a1915af2517c464af07d52b79d1b0e53164c82ba049f81e92ed1dc20a88fd72e9ce7aa4b22a7cc57dc5527d14f62bc29cfc9d57ed26fd523cac39ac00ba12d3a49d694709924275fc0793d56acf9558818dc9eb210749fa5307d45886b879257d627cee0542b51c2ce6ce134100efb47c92456ece5b73cdc051f570810a8d534222649eb56cf73a377162b753de6c282bcd4a25dda21dd10901bd8dfe8fd4ba8a70811c39707beded23dd60f23e2933372e3a6bce099899b07f0a4c4956fd98e956a8649622c77717de099463c0c6c9389ab4a1ae10f8ddd086d876af2943ee0b6b402ae5f89e09922e8c510ec0caa0a83e366e916400bfec88a52ab457037a35ddc6a8e2289c33684a5915c37bf5d227cbc65a737b52bdcb4fbbb7b4e7f965db116b46044d0870846c730dce12e120b1fe6dd5798ced24cad72c59a3f44de4978b8bc05a1dbeb766be6e2abf6ef46c67a58a370e54e92d89e5f44525e82b94a388d8d0cb20c3469a258c1633c9dddb6854aee255f93f59435ff317622f6899250aa185c207644275278580c5d32401741fe264a2e03b80f442ed58fd0704ebac923ac6a5abb7f0c695252f82e3fbcf2b99d721589a8fe3fad4d5926aee3d7bfafb6739e525faae3d25b12841fa2cc61dddc44d36acb9a8b72d60ecdd9c8cf04f9bac341b5e0f9bc59042db8126324888b07afe72b18cce36d61eec975b6b4ef5dc4a16ac14440cf770599bd4db630bd110eb63a03a80cd95c16d314a4de60cc5115bf0754cb7ab84a827ecefafa96069c721a5979f227fdc2467b4cd1975dafb5b28e1d6f3c1c3a2816ad831dd98c1378a03798c128f176426eaa0e361571e758d54bf4ec2c988355f016e16d6cd5cf97bb4891ab33f5623b7e796af313cc7a9e2f9510cd2bead1ea5dd080d9de1f595b2629ebccf69a0feaed3963ae8a6c89edd66fbf6e566379898185828925f8669668d6bddff961b08aaedbbe7fc196931a887ec740da6bcdab8f826a34aa2aa1e406a258558f3baf022a64222df4d6ee8726c79ba3dd6e11a19e4b4bb49b4a8cd99c189e6392f08ad731e415b65d0ccb919dca46efe9f79e21437111ab09e926d3038182044ae047bf1cc92e2d2644c528985719667a1a8abaf65d0f211172ea789b2fa016e1a88325d1ed706239da4dbb9e2079e3598b4ae5885667587ba1e0921c9ba55d7a3be4c47bc2f2f3547ce9efe32e5a22855f761bd4cbe1cd9337eda4bd7d82a918084d7e116b656104ca87e64b1b8c62323c3c296c5b5b98051feb607b872edf9f789744aff710c4b7279711182bcac6b76c05f5cd982f52f451e7e29046550e012e01d8cdd3e305427030f4247488c9136303084c12175c5c781cdd08aede5a356ea0ccdd05a460be3c7b4bfd62c3ce9ab68e285a36c1546d0b18edad71f69f5bedb340772e1bbb035514b085067259e39f59dc292a12557350c66904b253efee29a5eb7a6920f583c899dc46a1d3e2af2db3a3d1a0e8d1f98722a16c6cc1e401058d60c8c436d8f1166ba53bdde5810f9d0288528affd486c266546a864c92af3df8abd451cc1e0d6bfea534865cea9d49b3ea5e390fa823118df8a61e31022f5fbb8ceee870bf2e60890263c4d14e24d053d0fddf665ff80a66fa00a5957f8a30fe82a4b82cf2f6b4d49def98f66bfcdaa0aef13314e950ca9f3849b1edf3b82eaf74a0dbcf45c3dba9bd2d853281a78484f1efaf4150da1207ec3cb61fbcbf759f8182b7052b28d7164b73197b0a440759fe9d5ddf827f1897a174e82fb968a9a07c61bee44bc1f7f9ee5c6de04c02d57735c5fab741b36aec7c8642e56cba932a08b8e8a9d3eb066a4ee7cbf22e5abbd4346de59eca1f24ad9f7f9ff7621e5f30dd08f4cddda8e80e496908109f5212a72bab1378d1237def07bdda4178719975346c68405de15153031fb17535894e5e3c1de6fdd507333f0226b78ba7cae509cfb48d6735ede9392650bf85ac1db919b1e9fe0a823119d8253204dbb2f7a8f524be6d419f3a45c5051a7a88ef0bd41586d90c11a894d647f03895f671a6e19f1c70e32668653aba8366a3d372522f49844081a9637db080663ab02f4a8af502955d5411461b62f85308c91852f8fb9f0bdddd500b4a133791d3a2f91a82dc4b09f5ad2196a9172ab0cd3fafe7266e9f6d159110d99ca8da8a34b17be17a04ad4509a9fffab1e45e10f10e0cf9cfbd9c761ad044064c07e473fdc626289cfb88b13a11455c069b70aa02426d9119ac878a14c9483be9c0d5bcbb5fa76c8d06531f59c7cf7c26372e750e2f332418ca769e5e7fbeb3ada7bb58b573a0635e2e3ad9a53ddb809ea01086a3fa993ad57e89da6f9c5e61bd0f8ba69212a386b2aa1ae17520d7fb989dbe14021885eb50fa3048aebd42c861a09a308b660d382c0480ead8a52a1e14927c7c77957f94bb59ccfd557f8c4a7af23360a298a603d20ebc386db041d8c306b3e32b0bff541bdec5ff75c3b40950815cf9f89d48a382f67e44c409d046c01fb1262aca0df6f5238a3c3c09977261494f7361ba326815d6e23f49e4d6d4b54665081067332265fff59cf54af9da0db9d19bc611cbcb6e6f3f1e2e1ffb6cdd6253578d78d06a2ff5f9250f1994c5749e3ce49231fbd63bba28e948f9150933e3ae31299babaa41043b181a100882e613b4b4b8f49ceeb742d22f860853a9b917f5a323a8a1fb1f3363a7be4407fba44b408f259b5db79a055b92ce3d7a0649cc59f4afa2b1f69959d5c6f5eef1fa7987a47bee4491f685c52e9db1ee1a231ab5a4bae1019c97868a409dd0d57b32525394a233023c4a7ac429808bbcb57a34b41883202744c3bdebc0a637773273f19c2be6e806bef7fc1002846db762ee4e16867773808c5477987d5851d5b1641d070feabc203cb3d7943ffb206272fcac1bccb616352d85975f5a22c0f247548535ad9fb83fb2be17689453f10691143c060cd964df63c3c70e7b1cfc7e2b468015f327f9869353477bfeeed330b03ddd9e4e0a2441182244da283d7a59d2b2b20e6de3e3a47c26aeef4944c1190bba674523a6c3c4ed6bac53b9edffcb0e9fb19d8bf36949d03ef6a7e59eb903a00d9614f642d1932c766421906f5b177963c71e881453560e3ffcec792e8dc46b1832a8fcb2ab2268a9c1fb648d1c6fa1c8cbd50d5a2d8264fbc6c063e6daac5519d362da389dcd3d12c8039f991de91e728abf5bab95c3aef66dd8cc36c60e73cb10afb02eff6df20ff12c59b142b07fc48fe94612de80b8b958f78256fd7cf3c6f79a83867f3bb5f70da392957badadecefdf7b6e4ebd39ff945397c7d302ca0a5a3918d8abb893cd9cdd680916a50fe19699ff0476ad82e6ba46523f26ccc5eb65313c1df1077c8876d2b73bf86ba311862d12b0c557a92ef827197121512e87f817167d4b17c7e225a48b3f8fbbf4187438e0e9b78e905cdbeb72e80dfb37ec0104f5186b39b4ff34f0cdf4b74dc915acd3f98874cd6a67308d0ad9697121ac477550b1affe004f433705933f9647522be65cb5a7471120ec942aeb956f195be0c1783102cf7d842f2968222ae1a7fa6513f200d3fa85d71724956ed697f0673ee3b40a4d46ba4850439ec125b708ed52b52b9f72906477d520c90a9f5dd49a7a33a328137a183f439895532b78ae451a8c3db789bc862fbc37241d523027e1a008629c969380f6eb55f9cf3f0675bca6851f00df6aaf90de9f62d5c179945ef81d1073850301f97e379ea415d830e3f3751cf83e2dba541cb6cdd89e6b674f2c53e329e5f3dd418d534ada6469a5b3bca5b7cfbdfdd6df4abaf77d4520d0311e801145c91b52586a56086e663841b702f52cef9fff8cfb7b33dfa125688ba6b4fadd1dca8defaf4259ca85323b23d3bbb45933562c25af3e8d7bc6ad4a50ae974f8d207994b3bd74a6812ab6a40fcaf96bb4e17bd20d742b14c72226caef3e0f5c56c4930071e9f9a894f18650fbb785c6f707605c86b634c9722c8690cf3a954f68d7c2db3a257339ade67a41259f6f878dd0ab7876deffa77f6f00819282a8f4c4da84c6cf4f335cd0410770a2b1a1fbb3f85f4489eeceb78bbfddb2d1866c57b41f6ed179a0bc3750a486403d23473f2feef43ebc5af1018d9c20089e277d77fb9c34f425c8f8af4c49864b57572fa8c232e61ef37194251a1ddc2f73ffecd57e638751cb72bcb2c40d22540166ca1e8588f24b010c9fbd962e3a2c23a7e93f131df61b8703ce326ed80cc87912d3c6aaa27574bbe8d65bcaecd660c31cead132a44b1d0e4a53cacc0b82a263c4e7783944af0af08ea9e68e8e25ed9111cfef841f1b2fd24164f9097f70efe09b1109e5cb91fe68a2760381fd63a7fd422dd578a60661abc9ee3a5db1c2cde2fb21f2040f1ed3fc27b99e254256949d0560e8b98fa028fca50768caa951a87bf8969af498d50a9ee773c9caa7d9f7d8e1955506013f198cda316d79b177e59f233b98f727afd2494fc18642f0015adab756ea6742690c7d00f28655b915ce4eb8b3ba2e8559ba23e1ff1ccc9f79ae2df85f924459c56715dec78ef4592352eb1a850cd65ecd36e1a9121e888586b7b2fa84da920b8cf44480433e61ab076b10171c0537524bb170a4b99b0b0c437418a665b7ef909652b6483b20362e557c1480c2a2a0efa221fc59054a48122b52d38245f9bd026001635be5b155f5c766a59306fbde231fa72b4d74449a2fe8fb969496ee26af5881adaafb4189b439877ab8f78709cfd32c10ea576a010bfc137b7a4aae137ea3d29070ce3bc8dbe6655e967115ca3461ad9d28b9cf8af07441e68a54ec5e889846f3978f07ba51f7d5af5da78c5c675dc5d0c1a4a399ff4247203573a46fb903eaf7bc886e6cbd3126fa4a3fe3bb13bbdfea7da871f6563aa750f6ad7895b34b2809563dcf5ed30f1c60cef4138aa49d4f55e396534ed10cf4d857723a2b442f47d79de162c30ec6c4daf939b4c88649494e3682d1da81b4a5928d8e18a16c46707a685305e592589acb484e28e9d5af89c44b6e563d125ec97c0155410527406d94b90bc9576a662db99da1cb82b04d610d02187ce08f22ea0e8fd31919d53fa6aaf980e31ca7f8610e695a41919c24136a8406c62d5f15fca365892a2b54ece17664b5247583ad60d863f283f3c288946139575dcaedc978762e85f534e56334ef0221c34ffae054ddf79339b8f08701e9699b11041df8f518dd33203363c8098fbefb01555bcc2542422777b38d8dff11b15aadb0c251ce2c5b32f8735b3cb784f2e5731b48feb5a0e791a1106abdea0f7d1f087737cbe7fdf523fa14c9be2a2987511004c5b7ac1814ef6961db16799698242452c469a07c30e4a1f73193c74a41bdd88aef50035e4648bc9dfa276951798420a45e4085932bdb9381af3cc4678bd962af616549e4020d2c9fd25e2117a6d8934fde2218273d7833d60ea492e251417a27e7fb32012a940a6b6487af4b64958bf05f1b1107732149d227eeda5ca5a43cf583dc297d66072a1acd75e93a7caefd36a0d581e21d5cb08654c4ecef46ebac5391546e0b7d2a6418548d8f816446bcf237f676e873e6bae9107234abe5ab24c53ea472ad10653cef068fd9f4e729fc0d526e489f8df13af5575f1e70e0ec22899728b0659d70fc2dd509d9df3ec170638f89e540f4d3f02aa9b1b1819f84da596e0d7b45a5818061728f8eeccd2bea0f460dd7e18cb95f2364c50e351f0690e184eb63ebbb14a0b4b2117e44f3b2b3", 0x2000, &(0x7f0000004340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004400)={0x130, 0x0, 0x2, {0x0, 0xffffffff, 0x0, '\x00', {0x40, 0x7ff, 0xadf, 0x10, 0x0, 0x0, 0x8000, '\x00', 0x6, 0x81, 0x1, 0x3, {0x7756, 0x6}, {0x9, 0xb}, {0x2000001, 0x2}, {0x4, 0xa00}, 0x2, 0x6, 0x10, 0x200}}}}) write$FUSE_INIT(r0, &(0x7f0000004540)={0x50, 0x0, r1, {0x7, 0x29, 0xb0, 0x0, 0xfffc, 0x0, 0x6432, 0x0, 0x0, 0x0, 0x2, 0x5}}, 0x50) mount$fuseblk(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000045c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@allow_other}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x1000}}]}}) 0s ago: executing program 4 (id=920): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x5) fchdir(r1) open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='.\x00', 0x0, 0x88) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r2, 0x100, 0x1) kernel console output (not intermixed with test programs): =77824, nr_sectors = 4096 limit=40427 [ 30.998157][ T290] EXT4-fs (loop2): unmounting filesystem. [ 31.051865][ T534] syz.5.76: attempt to access beyond end of device [ 31.051865][ T534] loop5: rw=2049, sector=49152, nr_sectors = 4096 limit=40427 [ 31.083921][ T534] syz.5.76: attempt to access beyond end of device [ 31.083921][ T534] loop5: rw=2049, sector=57344, nr_sectors = 536 limit=40427 [ 31.099439][ T533] syz.5.76: attempt to access beyond end of device [ 31.099439][ T533] loop5: rw=524288, sector=77824, nr_sectors = 256 limit=40427 [ 31.145328][ T533] syz.5.76: attempt to access beyond end of device [ 31.145328][ T533] loop5: rw=0, sector=77824, nr_sectors = 8 limit=40427 [ 31.168460][ T583] netlink: 4 bytes leftover after parsing attributes in process `syz.3.101'. [ 31.172267][ T533] syz.5.76: attempt to access beyond end of device [ 31.172267][ T533] loop5: rw=0, sector=77824, nr_sectors = 8 limit=40427 [ 31.191530][ T533] syz.5.76: attempt to access beyond end of device [ 31.191530][ T533] loop5: rw=0, sector=77824, nr_sectors = 8 limit=40427 [ 31.205763][ T533] syz.5.76: attempt to access beyond end of device [ 31.205763][ T533] loop5: rw=0, sector=77824, nr_sectors = 8 limit=40427 [ 31.254590][ T587] capability: warning: `syz.4.103' uses deprecated v2 capabilities in a way that may be insecure [ 31.389210][ T600] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 31.556190][ T613] set_capacity_and_notify: 1 callbacks suppressed [ 31.556206][ T613] loop2: detected capacity change from 0 to 512 [ 31.603662][ T613] EXT4-fs error (device loop2): dx_probe:823: inode #2: comm syz.2.117: Directory hole found for htree index block 0 [ 31.653456][ T613] EXT4-fs (loop2): Remounting filesystem read-only [ 31.669987][ T613] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 31.681257][ T613] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 31.704593][ T613] EXT4-fs (loop2): shut down requested (2) [ 31.763840][ T290] EXT4-fs (loop2): unmounting filesystem. [ 31.796129][ T621] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 31.812581][ T621] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 31.852805][ T625] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 31.876481][ T625] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 31.933081][ T625] Zero length message leads to an empty skb [ 31.942938][ T623] device syzkaller0 entered promiscuous mode [ 32.327633][ T640] loop4: detected capacity change from 0 to 512 [ 32.367648][ T640] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 32.460507][ T633] loop1: detected capacity change from 0 to 131072 [ 32.471805][ T633] F2FS-fs (loop1): invalid crc value [ 32.499126][ T633] F2FS-fs (loop1): Found nat_bits in checkpoint [ 32.525614][ T644] loop3: detected capacity change from 0 to 1024 [ 32.551811][ T644] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 32.568685][ T633] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 32.627638][ T644] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 32.672175][ T291] EXT4-fs (loop3): unmounting filesystem. [ 32.742429][ T657] loop3: detected capacity change from 0 to 2048 [ 32.745216][ T661] loop2: detected capacity change from 0 to 512 [ 32.761322][ T661] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 32.807611][ T657] syz.3.132 (657): attempted to duplicate a private mapping with mremap. This is not supported. [ 32.924357][ T678] netlink: 7 bytes leftover after parsing attributes in process `syz.3.141'. [ 33.027499][ T689] loop1: detected capacity change from 0 to 512 [ 33.077344][ T689] EXT4-fs (loop1): 1 orphan inode deleted [ 33.084325][ T689] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 33.094867][ T434] EXT4-fs error (device loop1): ext4_release_dquot:6864: comm kworker/u4:4: Failed to release dquot type 1 [ 33.108616][ T689] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.113418][ T696] loop2: detected capacity change from 0 to 4096 [ 33.152347][ T696] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 33.185653][ T290] EXT4-fs (loop2): unmounting filesystem. [ 33.192247][ T289] EXT4-fs (loop1): unmounting filesystem. [ 33.263110][ T705] netlink: 24 bytes leftover after parsing attributes in process `syz.2.150'. [ 33.503243][ T721] loop1: detected capacity change from 0 to 512 [ 33.536112][ T721] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 33.546385][ T721] ext4 filesystem being mounted at /23/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 33.563338][ T721] EXT4-fs error (device loop1): ext4_do_update_inode:5281: inode #2: comm syz.1.156: corrupted inode contents [ 33.575484][ T721] EXT4-fs (loop1): Remounting filesystem read-only [ 33.582014][ T721] EXT4-fs error (device loop1): ext4_dirty_inode:6158: inode #2: comm syz.1.156: mark_inode_dirty error [ 33.593620][ T721] EXT4-fs (loop1): Remounting filesystem read-only [ 33.600430][ T721] EXT4-fs error (device loop1): ext4_do_update_inode:5281: inode #2: comm syz.1.156: corrupted inode contents [ 33.612420][ T721] EXT4-fs (loop1): Remounting filesystem read-only [ 33.619041][ T721] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #2: comm syz.1.156: mark_inode_dirty error [ 33.630438][ T721] EXT4-fs (loop1): Remounting filesystem read-only [ 33.641494][ T721] EXT4-fs error (device loop1): ext4_get_first_dir_block:3594: inode #18: comm syz.1.156: directory missing '.' [ 33.653559][ T721] EXT4-fs (loop1): Remounting filesystem read-only [ 33.661816][ T28] kauditd_printk_skb: 66 callbacks suppressed [ 33.661824][ T28] audit: type=1400 audit(1793807940.086:542): avc: denied { setattr } for pid=720 comm="syz.1.156" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 33.664514][ T721] EXT4-fs error (device loop1): ext4_do_update_inode:5281: inode #2: comm syz.1.156: corrupted inode contents [ 33.701372][ T721] EXT4-fs (loop1): Remounting filesystem read-only [ 33.708164][ T721] EXT4-fs error (device loop1): ext4_dirty_inode:6158: inode #2: comm syz.1.156: mark_inode_dirty error [ 33.720093][ T721] EXT4-fs (loop1): Remounting filesystem read-only [ 33.731870][ T721] EXT4-fs error (device loop1): ext4_do_update_inode:5281: inode #2: comm syz.1.156: corrupted inode contents [ 33.743650][ T28] audit: type=1400 audit(1793807940.146:543): avc: denied { sqpoll } for pid=725 comm="syz.4.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 33.754500][ T721] EXT4-fs (loop1): Remounting filesystem read-only [ 33.770216][ T724] EXT4-fs error (device loop1): ext4_do_update_inode:5281: inode #2: comm syz.1.156: corrupted inode contents [ 33.791167][ T729] netlink: 8 bytes leftover after parsing attributes in process `syz.5.158'. [ 33.804803][ T724] EXT4-fs (loop1): Remounting filesystem read-only [ 33.821435][ T28] audit: type=1400 audit(1793807940.236:544): avc: denied { remount } for pid=730 comm="syz.4.159" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 33.828588][ T724] EXT4-fs error (device loop1): add_dirent_to_buf:2216: inode #2: comm syz.1.156: mark_inode_dirty error [ 33.888439][ T28] audit: type=1400 audit(1793807940.306:545): avc: denied { create } for pid=738 comm="syz.4.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 33.922370][ T28] audit: type=1400 audit(1793807940.336:546): avc: denied { bind } for pid=738 comm="syz.4.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 33.956175][ T743] loop5: detected capacity change from 0 to 256 [ 33.982374][ T743] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xd400a224, utbl_chksum : 0xe619d30d) [ 34.016333][ T28] audit: type=1400 audit(1793807940.436:547): avc: denied { map } for pid=742 comm="syz.5.166" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=17175 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 34.050523][ T749] netlink: 24 bytes leftover after parsing attributes in process `syz.3.167'. [ 34.068296][ T28] audit: type=1400 audit(1793807940.436:548): avc: denied { read write } for pid=742 comm="syz.5.166" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=17175 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 34.093295][ T28] audit: type=1400 audit(1793807940.436:549): avc: denied { map } for pid=742 comm="syz.5.166" path="socket:[17174]" dev="sockfs" ino=17174 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 34.131914][ T745] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 34.203235][ T28] audit: type=1400 audit(1793807940.616:550): avc: denied { write } for pid=753 comm="syz.5.170" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 34.251971][ T28] audit: type=1400 audit(1793807940.656:551): avc: denied { ioctl } for pid=777 comm="syz.2.174" path="socket:[17869]" dev="sockfs" ino=17869 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.279527][ T780] Disabled LAPIC found during irq injection [ 34.920852][ T815] netlink: 4 bytes leftover after parsing attributes in process `syz.4.190'. [ 35.014635][ T774] F2FS-fs (loop3): Invalid segment/section count (458783, 24 x 150994945) [ 35.023368][ T774] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 35.060082][ T774] F2FS-fs (loop3): invalid crc value [ 35.098441][ T827] netlink: 168 bytes leftover after parsing attributes in process `syz.4.195'. [ 35.115267][ T774] F2FS-fs (loop3): Found nat_bits in checkpoint [ 35.199287][ T832] device syzkaller0 entered promiscuous mode [ 35.214945][ T774] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 35.222882][ T837] netlink: 'syz.1.199': attribute type 4 has an invalid length. [ 35.231968][ T774] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 35.525721][ T850] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 35.549565][ T850] ext4 filesystem being mounted at /33/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 35.647668][ T289] EXT4-fs (loop1): unmounting filesystem. [ 35.780275][ T865] tap0: tun_chr_ioctl cmd 2147767506 [ 35.786138][ T865] tap0: tun_chr_ioctl cmd 21731 [ 35.997381][ T888] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 36.375043][ T915] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 36.383067][ T915] System zones: 1-12 [ 36.387882][ T915] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #12: comm syz.2.230: missing EA_INODE flag [ 36.399862][ T915] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.230: error while reading EA inode 12 err=-117 [ 36.412520][ T915] EXT4-fs (loop2): 1 orphan inode deleted [ 36.418343][ T915] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 36.434209][ T915] EXT4-fs (loop2): unmounting filesystem. [ 36.454933][ T919] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 36.485421][ T919] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 36.508289][ T290] EXT4-fs (loop2): unmounting filesystem. [ 36.525094][ T925] FAULT_INJECTION: forcing a failure. [ 36.525094][ T925] name failslab, interval 1, probability 0, space 0, times 0 [ 36.537848][ T925] CPU: 1 PID: 925 Comm: syz.2.233 Not tainted syzkaller #0 [ 36.545170][ T925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 36.555229][ T925] Call Trace: [ 36.558501][ T925] [ 36.561424][ T925] __dump_stack+0x21/0x24 [ 36.565768][ T925] dump_stack_lvl+0x110/0x170 [ 36.570424][ T925] ? __cfi_dump_stack_lvl+0x8/0x8 [ 36.575442][ T925] ? is_bpf_text_address+0x177/0x190 [ 36.580726][ T925] ? kernel_text_address+0xa0/0xd0 [ 36.585841][ T925] dump_stack+0x15/0x24 [ 36.589977][ T925] should_fail_ex+0x3bf/0x510 [ 36.594645][ T925] __should_failslab+0xac/0xf0 [ 36.599400][ T925] should_failslab+0x9/0x20 [ 36.603906][ T925] __kmem_cache_alloc_node+0x3d/0x2d0 [ 36.609256][ T925] ? ip_options_get+0x4f/0x4f0 [ 36.614007][ T925] ? ip_options_get+0x4f/0x4f0 [ 36.618756][ T925] __kmalloc+0xa4/0x1e0 [ 36.622914][ T925] ip_options_get+0x4f/0x4f0 [ 36.627507][ T925] ? kasan_set_track+0x60/0x70 [ 36.632269][ T925] ? kasan_set_track+0x4b/0x70 [ 36.637042][ T925] ip_cmsg_send+0x52e/0xaa0 [ 36.641571][ T925] udp_sendmsg+0xb1b/0x2170 [ 36.646085][ T925] ? inet_sk_get_local_port_range+0x24e/0x330 [ 36.652162][ T925] ? udp_lib_get_port+0x15bf/0x1c10 [ 36.657370][ T925] ? __cfi_ip_generic_getfrag+0x10/0x10 [ 36.662947][ T925] ? __cfi_udp_sendmsg+0x10/0x10 [ 36.667904][ T925] ? ip4_datagram_release_cb+0x5e5/0x7c0 [ 36.673544][ T925] ? __local_bh_enable_ip+0x58/0x80 [ 36.678748][ T925] ? __local_bh_enable_ip+0x58/0x80 [ 36.683942][ T925] ? _raw_spin_unlock_bh+0x50/0x60 [ 36.689137][ T925] ? release_sock+0x169/0x1c0 [ 36.693818][ T925] ? inet_send_prepare+0x1e0/0x4d0 [ 36.698928][ T925] inet_sendmsg+0xb6/0xd0 [ 36.703261][ T925] ? __cfi_inet_sendmsg+0x10/0x10 [ 36.708295][ T925] ____sys_sendmsg+0x5fb/0x9c0 [ 36.713086][ T925] ? __sys_sendmsg_sock+0x40/0x40 [ 36.718129][ T925] ? import_iovec+0x7c/0xb0 [ 36.722642][ T925] ___sys_sendmsg+0x2a2/0x360 [ 36.727323][ T925] ? __sys_sendmsg+0x290/0x290 [ 36.732089][ T925] ? __cfi_futex_wait+0x10/0x10 [ 36.736944][ T925] ? __fdget+0x19c/0x220 [ 36.741188][ T925] __sys_sendmmsg+0x2cc/0x4e0 [ 36.745866][ T925] ? __cfi___sys_sendmmsg+0x10/0x10 [ 36.751067][ T925] ? fpregs_restore_userregs+0x128/0x260 [ 36.756696][ T925] __x64_sys_sendmmsg+0xa0/0xb0 [ 36.761546][ T925] x64_sys_call+0x3f5/0x9a0 [ 36.766049][ T925] do_syscall_64+0x4c/0xa0 [ 36.770462][ T925] ? clear_bhb_loop+0x30/0x80 [ 36.775142][ T925] ? clear_bhb_loop+0x30/0x80 [ 36.779821][ T925] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 36.785711][ T925] RIP: 0033:0x7f06bf19fb19 [ 36.790122][ T925] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 36.809819][ T925] RSP: 002b:00007f06bffd8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 36.818247][ T925] RAX: ffffffffffffffda RBX: 00007f06bf425fa0 RCX: 00007f06bf19fb19 [ 36.826227][ T925] RDX: 0000000000000001 RSI: 0000200000000640 RDI: 0000000000000004 [ 36.834204][ T925] RBP: 00007f06bf237b70 R08: 0000000000000000 R09: 0000000000000000 [ 36.842173][ T925] R10: 0000000000008890 R11: 0000000000000246 R12: 0000000000000000 [ 36.850140][ T925] R13: 00007f06bf426038 R14: 00007f06bf425fa0 R15: 00007ffc58be54f8 [ 36.858126][ T925] [ 36.885558][ T928] set_capacity_and_notify: 6 callbacks suppressed [ 36.885570][ T928] loop2: detected capacity change from 0 to 512 [ 36.902480][ T928] EXT4-fs (loop2): Test dummy encryption mode enabled [ 36.913771][ T928] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 36.936164][ T928] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2802: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 36.949665][ T928] EXT4-fs (loop2): 1 truncate cleaned up [ 36.955577][ T928] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 36.969965][ T928] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 36.978546][ T937] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 36.992138][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 37.001879][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 37.056074][ T944] ip_tables: iptables: counters copy to user failed while replacing table [ 37.073886][ T290] EXT4-fs (loop2): unmounting filesystem. [ 37.273836][ T968] loop3: detected capacity change from 0 to 128 [ 37.289256][ T968] FAT-fs (loop3): Invalid FSINFO signature: 0x41000006, 0x61417272 (sector = 1) [ 37.569176][ T982] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.576849][ T982] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.584537][ T982] device bridge_slave_0 entered promiscuous mode [ 37.591988][ T982] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.599547][ T982] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.607534][ T982] device bridge_slave_1 entered promiscuous mode [ 37.611528][ T979] loop1: detected capacity change from 0 to 40427 [ 37.623342][ T979] F2FS-fs (loop1): invalid crc value [ 37.630972][ T979] F2FS-fs (loop1): Found nat_bits in checkpoint [ 37.683736][ T979] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 37.699354][ T982] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.706455][ T982] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.713792][ T982] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.720873][ T982] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.749922][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 37.758584][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.766093][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.792483][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 37.801253][ T440] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.808335][ T440] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.817925][ T998] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 37.830495][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 37.840345][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 37.850742][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 37.860494][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 37.869233][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 37.878742][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 37.891191][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 37.900202][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 37.922076][ T979] bio_check_eod: 28 callbacks suppressed [ 37.922095][ T979] syz.1.255: attempt to access beyond end of device [ 37.922095][ T979] loop1: rw=2049, sector=40424, nr_sectors = 8 limit=40427 [ 37.929860][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 37.951590][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.958672][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.979954][ T1004] ip_tables: iptables: counters copy to user failed while replacing table [ 37.989827][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 38.005416][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 38.015235][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 38.031569][ T982] device veth0_vlan entered promiscuous mode [ 38.054286][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 38.071815][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 38.091268][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 38.113848][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 38.128812][ T982] device veth1_macvtap entered promiscuous mode [ 38.147278][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 38.168233][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 38.278989][ T1023] loop1: detected capacity change from 0 to 1024 [ 38.286531][ T1023] EXT4-fs: Ignoring removed nobh option [ 38.292550][ T1023] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 38.307096][ T1023] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 38.346280][ T289] EXT4-fs (loop1): unmounting filesystem. [ 38.382113][ T1041] loop6: detected capacity change from 0 to 128 [ 38.391028][ T1041] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 38.399759][ T1041] ext4 filesystem being mounted at /6/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 38.421821][ T1041] overlayfs: upper fs does not support tmpfile. [ 38.433805][ T982] EXT4-fs (loop6): unmounting filesystem. [ 38.464741][ T1046] loop4: detected capacity change from 0 to 512 [ 38.489239][ T1044] netlink: 'syz.6.276': attribute type 11 has an invalid length. [ 38.497234][ T1044] netlink: 36 bytes leftover after parsing attributes in process `syz.6.276'. [ 38.498858][ T1046] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 38.515722][ T1046] ext4 filesystem being mounted at /51/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.606083][ T288] EXT4-fs (loop4): unmounting filesystem. [ 38.632312][ T1055] ip_tables: iptables: counters copy to user failed while replacing table [ 38.655409][ T1057] FAULT_INJECTION: forcing a failure. [ 38.655409][ T1057] name failslab, interval 1, probability 0, space 0, times 0 [ 38.668116][ T1057] CPU: 1 PID: 1057 Comm: syz.6.281 Not tainted syzkaller #0 [ 38.675429][ T1057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 38.685507][ T1057] Call Trace: [ 38.688806][ T1057] [ 38.691754][ T1057] __dump_stack+0x21/0x24 [ 38.696108][ T1057] dump_stack_lvl+0x110/0x170 [ 38.700801][ T1057] ? __cfi_dump_stack_lvl+0x8/0x8 [ 38.705842][ T1057] ? __kasan_check_write+0x14/0x20 [ 38.710972][ T1057] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 38.716455][ T1057] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 38.722368][ T1057] dump_stack+0x15/0x24 [ 38.726539][ T1057] should_fail_ex+0x3bf/0x510 [ 38.731411][ T1057] __should_failslab+0xac/0xf0 [ 38.736202][ T1057] should_failslab+0x9/0x20 [ 38.740726][ T1057] slab_pre_alloc_hook+0x30/0x1d0 [ 38.745775][ T1057] ? __sock_create+0x39e/0x7c0 [ 38.750566][ T1057] ? __sys_socket+0xcd/0x1a0 [ 38.755193][ T1057] ? __x64_sys_socket+0x7a/0x90 [ 38.760068][ T1057] kmem_cache_alloc_lru+0x49/0x280 [ 38.765198][ T1057] ? __d_alloc+0x34/0x6d0 [ 38.769516][ T1057] __d_alloc+0x34/0x6d0 [ 38.773685][ T1057] d_alloc_pseudo+0x1d/0x70 [ 38.778187][ T1057] alloc_file_pseudo+0xe0/0x200 [ 38.783016][ T1057] ? __cfi_alloc_file_pseudo+0x10/0x10 [ 38.788455][ T1057] ? _raw_spin_unlock+0x4c/0x70 [ 38.793297][ T1057] ? alloc_fd+0x4c1/0x570 [ 38.797624][ T1057] sock_alloc_file+0xba/0x270 [ 38.802281][ T1057] __sys_socket+0x138/0x1a0 [ 38.806766][ T1057] __x64_sys_socket+0x7a/0x90 [ 38.811431][ T1057] x64_sys_call+0x449/0x9a0 [ 38.815909][ T1057] do_syscall_64+0x4c/0xa0 [ 38.820302][ T1057] ? clear_bhb_loop+0x30/0x80 [ 38.824969][ T1057] ? clear_bhb_loop+0x30/0x80 [ 38.829624][ T1057] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 38.835525][ T1057] RIP: 0033:0x7f047e19fb19 [ 38.839916][ T1057] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 38.859510][ T1057] RSP: 002b:00007f047efb5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 38.867952][ T1057] RAX: ffffffffffffffda RBX: 00007f047e425fa0 RCX: 00007f047e19fb19 [ 38.875935][ T1057] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 38.883909][ T1057] RBP: 00007f047e237b70 R08: 0000000000000000 R09: 0000000000000000 [ 38.891867][ T1057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 38.899823][ T1057] R13: 00007f047e426038 R14: 00007f047e425fa0 R15: 00007ffca2834a28 [ 38.907866][ T1057] [ 38.988512][ T28] kauditd_printk_skb: 69 callbacks suppressed [ 38.988528][ T28] audit: type=1400 audit(1793807945.406:621): avc: denied { nlmsg_read } for pid=1067 comm="syz.6.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 39.088516][ T1089] netlink: 8 bytes leftover after parsing attributes in process `syz.2.295'. [ 39.150086][ T28] audit: type=1326 audit(1793807945.566:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1090 comm="syz.2.296" exe="/root/ci2-android-6-1/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f06bf19fb19 code=0x0 [ 39.503180][ T1119] loop5: detected capacity change from 0 to 1024 [ 39.511166][ T1119] EXT4-fs: Ignoring removed nobh option [ 39.517785][ T1119] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 39.535445][ T1119] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 39.563899][ T509] EXT4-fs (loop5): unmounting filesystem. [ 39.861601][ T1140] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 39.870948][ T1140] overlayfs: missing 'lowerdir' [ 39.883301][ T28] audit: type=1400 audit(1793807946.296:623): avc: denied { write } for pid=1141 comm="syz.4.315" name="001" dev="devtmpfs" ino=164 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 39.940878][ T1149] loop4: detected capacity change from 0 to 128 [ 39.967239][ T28] audit: type=1400 audit(1793807946.386:624): avc: denied { watch watch_reads } for pid=1148 comm="syz.4.318" path="/61/file0" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 40.121233][ T1158] loop2: detected capacity change from 0 to 2048 [ 40.139000][ T1158] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 40.150058][ T1158] ext4 filesystem being mounted at /77/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.404018][ T1168] loop4: detected capacity change from 0 to 40427 [ 40.411338][ T386] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 40.411958][ T1168] F2FS-fs (loop4): invalid crc value [ 40.434064][ T1176] ip_tables: iptables: counters copy to user failed while replacing table [ 40.444641][ T309] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 40.453848][ T1168] F2FS-fs (loop4): Found nat_bits in checkpoint [ 40.511202][ T1168] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 40.644583][ T24] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 40.653254][ T309] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 40.664803][ T309] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 40.677967][ T309] usb 3-1: config 0 interface 0 has no altsetting 0 [ 40.685039][ T309] usb 3-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 40.702688][ T309] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.717832][ T309] usb 3-1: config 0 descriptor?? [ 40.745008][ T1182] syz.4.327: attempt to access beyond end of device [ 40.745008][ T1182] loop4: rw=2049, sector=40424, nr_sectors = 8 limit=40427 [ 40.835556][ T24] usb 7-1: too many endpoints for config 1 interface 0 altsetting 13: 33, using maximum allowed: 30 [ 40.851987][ T24] usb 7-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 40.881922][ T24] usb 7-1: config 1 interface 0 has no altsetting 0 [ 40.895692][ T24] usb 7-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.40 [ 40.926339][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.944890][ T24] usb 7-1: Product: syz [ 40.949115][ T24] usb 7-1: Manufacturer: syz [ 40.953730][ T24] usb 7-1: SerialNumber: syz [ 41.093486][ T28] audit: type=1400 audit(1793807947.506:625): avc: denied { mount } for pid=1194 comm="syz.4.334" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 41.128534][ T28] audit: type=1400 audit(1793807947.536:626): avc: denied { unmount } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 41.242981][ T28] audit: type=1400 audit(1793807947.656:627): avc: denied { setopt } for pid=1210 comm="syz.5.341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 41.265606][ T28] audit: type=1400 audit(1793807947.656:628): avc: denied { bind } for pid=1210 comm="syz.5.341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 41.334637][ T1214] kvm [1213]: vcpu0, guest rIP: 0x9134 Unhandled WRMSR(0x11e) = 0xbe702111 [ 41.445136][ T309] usbhid 3-1:0.0: can't add hid device: -71 [ 41.451183][ T309] usbhid: probe of 3-1:0.0 failed with error -71 [ 41.460874][ T290] EXT4-fs (loop2): unmounting filesystem. [ 41.471783][ T309] usb 3-1: USB disconnect, device number 2 [ 41.577770][ T28] audit: type=1400 audit(1793807947.996:629): avc: denied { mounton } for pid=1237 comm="syz.2.353" path="/79/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 41.608248][ T24] usbhid 7-1:1.0: can't add hid device: -71 [ 41.620679][ T24] usbhid: probe of 7-1:1.0 failed with error -71 [ 41.652830][ T24] usb 7-1: USB disconnect, device number 2 [ 41.668889][ T1233] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 41.680641][ T1233] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 41.691141][ T1233] F2FS-fs (loop4): invalid crc value [ 41.721947][ T28] audit: type=1400 audit(1793807948.136:630): avc: denied { map } for pid=1249 comm="syz.2.357" path="socket:[19997]" dev="sockfs" ino=19997 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 41.751581][ T1233] F2FS-fs (loop4): Found nat_bits in checkpoint [ 41.802377][ T1233] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 41.809815][ T1233] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 42.381731][ T1281] kvm [1280]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x187) = 0x8c0 [ 42.635089][ T1298] set_capacity_and_notify: 1 callbacks suppressed [ 42.635110][ T1298] loop2: detected capacity change from 0 to 40427 [ 42.653354][ T1298] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 42.668843][ T1298] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 42.685412][ T1298] F2FS-fs (loop2): invalid crc value [ 42.700593][ T1298] F2FS-fs (loop2): Found nat_bits in checkpoint [ 42.741143][ T1298] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 42.742742][ T1331] netlink: 8 bytes leftover after parsing attributes in process `syz.5.378'. [ 42.748381][ T1298] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 42.786269][ T1327] kvm [1326]: vcpu0, guest rIP: 0x9134 Unhandled WRMSR(0x11e) = 0xbe702111 [ 43.075155][ T1347] loop2: detected capacity change from 0 to 512 [ 43.081812][ T1347] EXT4-fs: Ignoring removed nobh option [ 43.092314][ T1347] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 43.102317][ T1347] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (33925!=0) [ 43.112175][ T1347] EXT4-fs (loop2): group descriptors corrupted! [ 43.242905][ T1360] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.251793][ T1360] netlink: 4 bytes leftover after parsing attributes in process `syz.6.389'. [ 43.262531][ T1360] device bridge_slave_1 left promiscuous mode [ 43.269008][ T1360] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.351698][ T1367] FAULT_INJECTION: forcing a failure. [ 43.351698][ T1367] name failslab, interval 1, probability 0, space 0, times 0 [ 43.365277][ T1367] CPU: 0 PID: 1367 Comm: syz.6.393 Not tainted syzkaller #0 [ 43.372597][ T1367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 43.382672][ T1367] Call Trace: [ 43.385961][ T1367] [ 43.388902][ T1367] __dump_stack+0x21/0x24 [ 43.393260][ T1367] dump_stack_lvl+0x110/0x170 [ 43.397953][ T1367] ? __cfi_dump_stack_lvl+0x8/0x8 [ 43.402995][ T1367] dump_stack+0x15/0x24 [ 43.407171][ T1367] should_fail_ex+0x3bf/0x510 [ 43.411874][ T1367] __should_failslab+0xac/0xf0 [ 43.416663][ T1367] should_failslab+0x9/0x20 [ 43.421183][ T1367] __kmem_cache_alloc_node+0x3d/0x2d0 [ 43.426589][ T1367] ? io_alloc_page_table+0x36/0xe4 [ 43.431737][ T1367] ? io_alloc_page_table+0x36/0xe4 [ 43.436866][ T1367] __kmalloc+0xa4/0x1e0 [ 43.441038][ T1367] ? __cfi_io_rsrc_file_put+0x10/0x10 [ 43.446431][ T1367] io_alloc_page_table+0x36/0xe4 [ 43.451390][ T1367] ? kmalloc_trace+0x40/0xb0 [ 43.455999][ T1367] ? __cfi_io_rsrc_file_put+0x10/0x10 [ 43.461395][ T1367] io_rsrc_data_alloc+0x92/0x303 [ 43.466354][ T1367] io_sqe_files_register+0x402/0x8a0 [ 43.471671][ T1367] ? __cfi_io_sqe_files_register+0x10/0x10 [ 43.477501][ T1367] ? __kasan_check_read+0x11/0x20 [ 43.482541][ T1367] __se_sys_io_uring_register+0x55d/0xcf0 [ 43.488284][ T1367] ? __this_cpu_preempt_check+0x13/0x20 [ 43.493857][ T1367] ? __x64_sys_io_uring_register+0xb0/0xb0 [ 43.499690][ T1367] ? fpregs_restore_userregs+0x128/0x260 [ 43.505520][ T1367] __x64_sys_io_uring_register+0x9b/0xb0 [ 43.511181][ T1367] x64_sys_call+0x5f4/0x9a0 [ 43.515708][ T1367] do_syscall_64+0x4c/0xa0 [ 43.520138][ T1367] ? clear_bhb_loop+0x30/0x80 [ 43.524836][ T1367] ? clear_bhb_loop+0x30/0x80 [ 43.529535][ T1367] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 43.535448][ T1367] RIP: 0033:0x7f047e19fb19 [ 43.539875][ T1367] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 43.559585][ T1367] RSP: 002b:00007f047efb5028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 43.568021][ T1367] RAX: ffffffffffffffda RBX: 00007f047e425fa0 RCX: 00007f047e19fb19 [ 43.576011][ T1367] RDX: 00002000000003c0 RSI: 0000000000000002 RDI: 0000000000000003 [ 43.583999][ T1367] RBP: 00007f047e237b70 R08: 0000000000000000 R09: 0000000000000000 [ 43.591983][ T1367] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000000 [ 43.599970][ T1367] R13: 00007f047e426038 R14: 00007f047e425fa0 R15: 00007ffca2834a28 [ 43.607962][ T1367] [ 43.895033][ T1391] ip_tables: iptables: counters copy to user failed while replacing table [ 43.951930][ T1394] loop6: detected capacity change from 0 to 2048 [ 43.992373][ T1394] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 44.034759][ T1394] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 44.050008][ T1394] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 44.062306][ T1394] EXT4-fs (loop6): This should not happen!! Data will be lost [ 44.062306][ T1394] [ 44.072138][ T1394] EXT4-fs (loop6): Total free blocks count 0 [ 44.078369][ T1394] EXT4-fs (loop6): Free/Dirty block details [ 44.084469][ T1394] EXT4-fs (loop6): free_blocks=66060288 [ 44.091572][ T1394] EXT4-fs (loop6): dirty_blocks=32 [ 44.096777][ T1394] EXT4-fs (loop6): Block reservation details [ 44.104779][ T1394] EXT4-fs (loop6): i_reserved_data_blocks=2 [ 44.175663][ T10] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 2 with error 28 [ 44.408605][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 44.408621][ T28] audit: type=1400 audit(1793807950.826:648): avc: denied { setopt } for pid=1426 comm="syz.6.417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 44.438679][ T28] audit: type=1400 audit(1793807950.836:649): avc: denied { mount } for pid=1422 comm="syz.1.416" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 44.453118][ T1430] tap0: tun_chr_ioctl cmd 2148553947 [ 44.462474][ T28] audit: type=1400 audit(1793807950.856:650): avc: denied { read } for pid=1426 comm="syz.6.417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 44.487876][ T28] audit: type=1400 audit(1793807950.906:651): avc: denied { write } for pid=1428 comm="syz.1.419" name="mcfilter6" dev="proc" ino=4026532660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 44.807866][ T1469] loop1: detected capacity change from 0 to 512 [ 44.818016][ T1467] netlink: 'syz.4.435': attribute type 1 has an invalid length. [ 44.836454][ T1469] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 44.875897][ T1469] EXT4-fs (loop1): 1 truncate cleaned up [ 44.881673][ T1469] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 45.025187][ T289] EXT4-fs (loop1): unmounting filesystem. [ 45.060178][ T1490] netlink: 4 bytes leftover after parsing attributes in process `syz.1.445'. [ 45.183808][ T1498] loop6: detected capacity change from 0 to 512 [ 45.463716][ T1514] netlink: 8 bytes leftover after parsing attributes in process `syz.4.454'. [ 45.503403][ T1514] netlink: 8 bytes leftover after parsing attributes in process `syz.4.454'. [ 45.527930][ T1511] netlink: 8 bytes leftover after parsing attributes in process `syz.2.452'. [ 45.821806][ T1553] FAULT_INJECTION: forcing a failure. [ 45.821806][ T1553] name failslab, interval 1, probability 0, space 0, times 0 [ 45.854640][ T1553] CPU: 1 PID: 1553 Comm: syz.1.472 Not tainted syzkaller #0 [ 45.861977][ T1553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 45.872075][ T1553] Call Trace: [ 45.875375][ T1553] [ 45.878323][ T1553] __dump_stack+0x21/0x24 [ 45.882685][ T1553] dump_stack_lvl+0x110/0x170 [ 45.886523][ T1488] loop5: detected capacity change from 0 to 131072 [ 45.887376][ T1553] ? __cfi_dump_stack_lvl+0x8/0x8 [ 45.898899][ T1553] ? __cfi_futex_wait+0x10/0x10 [ 45.903779][ T1553] dump_stack+0x15/0x24 [ 45.907952][ T1553] should_fail_ex+0x3bf/0x510 [ 45.912652][ T1553] __should_failslab+0xac/0xf0 [ 45.917439][ T1553] should_failslab+0x9/0x20 [ 45.921965][ T1553] __kmem_cache_alloc_node+0x3d/0x2d0 [ 45.927366][ T1553] ? io_ring_ctx_alloc+0x54/0xb00 [ 45.932413][ T1553] ? __cfi_kvmalloc_node+0x10/0x10 [ 45.937551][ T1553] ? io_ring_ctx_alloc+0x54/0xb00 [ 45.942596][ T1553] kmalloc_trace+0x29/0xb0 [ 45.947038][ T1553] io_ring_ctx_alloc+0x54/0xb00 [ 45.951916][ T1553] io_uring_create+0x29a/0xde1 [ 45.956707][ T1553] __x64_sys_io_uring_setup+0x21b/0x230 [ 45.962287][ T1553] ? __kasan_check_write+0x14/0x20 [ 45.967421][ T1553] ? __cfi___x64_sys_io_uring_setup+0x10/0x10 [ 45.973519][ T1553] ? __kasan_check_write+0x14/0x20 [ 45.978658][ T1553] ? fpregs_restore_userregs+0x128/0x260 [ 45.984320][ T1553] ? switch_fpu_return+0xe/0x10 [ 45.989196][ T1553] x64_sys_call+0x4ab/0x9a0 [ 45.993722][ T1553] do_syscall_64+0x4c/0xa0 [ 45.998159][ T1553] ? clear_bhb_loop+0x30/0x80 [ 46.002858][ T1553] ? clear_bhb_loop+0x30/0x80 [ 46.007562][ T1553] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 46.013482][ T1553] RIP: 0033:0x7f2705f9fb19 [ 46.017479][ T1488] F2FS-fs (loop5): Invalid segment/section count (24 != 24 * 5) [ 46.017915][ T1553] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 46.032533][ T1488] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 46.045153][ T1553] RSP: 002b:00007f2706f51028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 46.045183][ T1553] RAX: ffffffffffffffda RBX: 00007f2706225fa0 RCX: 00007f2705f9fb19 [ 46.045197][ T1553] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000004ae9 [ 46.045209][ T1553] RBP: 00007f2706037b70 R08: 0000000000000000 R09: 0000000000000000 [ 46.045221][ T1553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 46.064706][ T1488] F2FS-fs (loop5): Test dummy encryption mode enabled [ 46.070097][ T1553] R13: 00007f2706226038 R14: 00007f2706225fa0 R15: 00007ffe5a7c0738 [ 46.070121][ T1553] [ 46.112440][ T1556] page size migration: [1556 (syz.4.473)] madvise_vma_pad_pages:303: Invalid attempt to madvise padding on MAP_SHARED vma [ 46.124356][ T1488] F2FS-fs (loop5): invalid crc value [ 46.142914][ T309] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 46.152907][ T28] audit: type=1400 audit(1793807952.576:652): avc: denied { listen } for pid=1559 comm="syz.1.474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 46.173953][ T28] audit: type=1400 audit(1793807952.576:653): avc: denied { write } for pid=1559 comm="syz.1.474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 46.193642][ T28] audit: type=1400 audit(1793807952.576:654): avc: denied { accept } for pid=1559 comm="syz.1.474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 46.213347][ T1488] F2FS-fs (loop5): Found nat_bits in checkpoint [ 46.261550][ T1488] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 46.268735][ T1488] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 46.314685][ T309] usb 3-1: device descriptor read/64, error -71 [ 46.315688][ T1488] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 46.355421][ T1488] overlayfs: metacopy with no lower data found - abort lookup (/file1) [ 46.419513][ T1586] ip_tables: iptables: counters copy to user failed while replacing table [ 46.534560][ T310] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 46.574799][ T1600] netlink: 8 bytes leftover after parsing attributes in process `syz.5.490'. [ 46.594466][ T309] usb 3-1: device descriptor read/64, error -71 [ 46.712903][ T28] audit: type=1400 audit(1793807953.126:655): avc: denied { bind } for pid=1610 comm="syz.5.494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 46.732500][ T28] audit: type=1400 audit(1793807953.126:656): avc: denied { connect } for pid=1610 comm="syz.5.494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 46.735832][ T310] usb 2-1: unable to get BOS descriptor or descriptor too short [ 46.752317][ T28] audit: type=1400 audit(1793807953.126:657): avc: denied { write } for pid=1610 comm="syz.5.494" name="ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 46.794572][ T310] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 46.810242][ T310] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 46.826304][ T310] usb 2-1: string descriptor 0 read error: -22 [ 46.832630][ T310] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 46.841957][ T310] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.856185][ T310] usb 2-1: selecting invalid altsetting 1 [ 46.862218][ T310] usb 2-1: unit 6 not found! [ 46.874454][ T309] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 47.024454][ T309] usb 3-1: device descriptor read/64, error -71 [ 47.294462][ T309] usb 3-1: device descriptor read/64, error -71 [ 47.340416][ T1617] loop4: detected capacity change from 0 to 40427 [ 47.354731][ T1617] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 47.362591][ T1617] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 47.371483][ T1617] F2FS-fs (loop4): invalid crc value [ 47.378621][ T1617] F2FS-fs (loop4): Found nat_bits in checkpoint [ 47.404489][ T1617] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 47.411714][ T1617] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 47.414519][ T309] usb usb3-port1: attempt power cycle [ 47.432276][ T1617] syz.4.496: attempt to access beyond end of device [ 47.432276][ T1617] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 47.447639][ T1617] syz.4.496: attempt to access beyond end of device [ 47.447639][ T1617] loop4: rw=34817, sector=77824, nr_sectors = 128 limit=40427 [ 47.451769][ T1625] loop6: detected capacity change from 0 to 512 [ 47.462526][ T1617] syz.4.496: attempt to access beyond end of device [ 47.462526][ T1617] loop4: rw=0, sector=77888, nr_sectors = 8 limit=40427 [ 47.583056][ T1632] loop4: detected capacity change from 0 to 2048 [ 47.596715][ T1632] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 47.621821][ T1632] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 47.636760][ T1632] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 47.649081][ T1632] EXT4-fs (loop4): This should not happen!! Data will be lost [ 47.649081][ T1632] [ 47.658991][ T1632] EXT4-fs (loop4): Total free blocks count 0 [ 47.665174][ T1632] EXT4-fs (loop4): Free/Dirty block details [ 47.671321][ T1632] EXT4-fs (loop4): free_blocks=66060288 [ 47.677567][ T1632] EXT4-fs (loop4): dirty_blocks=32 [ 47.682770][ T1632] EXT4-fs (loop4): Block reservation details [ 47.688848][ T1632] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 47.704013][ T754] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 2 with error 28 [ 47.786368][ T310] usb 2-1: 2:0: failed to get current value for ch 0 (-71) [ 47.799695][ T310] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 47.808322][ T310] usb 2-1: USB disconnect, device number 3 [ 47.829300][ T1653] loop5: detected capacity change from 0 to 128 [ 47.844574][ T309] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 47.858733][ T1653] syz.5.507: attempt to access beyond end of device [ 47.858733][ T1653] loop5: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 47.875497][ T309] usb 3-1: device descriptor read/8, error -71 [ 47.883329][ T1653] syz.5.507: attempt to access beyond end of device [ 47.883329][ T1653] loop5: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 47.951517][ T1659] loop5: detected capacity change from 0 to 512 [ 47.966278][ T1659] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 47.975511][ T1659] ext4 filesystem being mounted at /91/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.989396][ T1659] EXT4-fs error (device loop5): ext4_do_update_inode:5281: inode #2: comm syz.5.510: corrupted inode contents [ 48.001345][ T1659] EXT4-fs error (device loop5): ext4_dirty_inode:6158: inode #2: comm syz.5.510: mark_inode_dirty error [ 48.012956][ T1659] EXT4-fs error (device loop5): ext4_do_update_inode:5281: inode #2: comm syz.5.510: corrupted inode contents [ 48.025246][ T450] udevd[450]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 48.025311][ T1659] EXT4-fs error (device loop5): __ext4_ext_dirty:202: inode #2: comm syz.5.510: mark_inode_dirty error [ 48.052285][ T309] usb 3-1: device descriptor read/8, error -71 [ 48.077049][ T509] EXT4-fs (loop5): unmounting filesystem. [ 48.144797][ T1665] process 'syz.5.511' launched './file0' with NULL argv: empty string added [ 48.324462][ T309] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 48.358489][ T309] usb 3-1: device descriptor read/8, error -71 [ 48.472118][ T1673] loop6: detected capacity change from 0 to 40427 [ 48.482137][ T1673] F2FS-fs (loop6): invalid crc value [ 48.489142][ T1673] F2FS-fs (loop6): Found nat_bits in checkpoint [ 48.513449][ T1673] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 48.515502][ T309] usb 3-1: device descriptor read/8, error -71 [ 48.549219][ T982] syz-executor: attempt to access beyond end of device [ 48.549219][ T982] loop6: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 48.565411][ T982] syz-executor: attempt to access beyond end of device [ 48.565411][ T982] loop6: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 48.578954][ T1679] loop4: detected capacity change from 0 to 1024 [ 48.586041][ T1679] EXT4-fs: Ignoring removed bh option [ 48.606253][ T440] kworker/u4:5: attempt to access beyond end of device [ 48.606253][ T440] loop6: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 48.620312][ T292] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 48.621829][ T1679] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 48.644518][ T309] usb usb3-port1: unable to enumerate USB device [ 48.651559][ T288] EXT4-fs (loop4): unmounting filesystem. [ 48.815624][ T292] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 54, changing to 9 [ 48.827126][ T292] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 48.846265][ T292] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 48.861962][ T292] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.870122][ T292] usb 2-1: Product: syz [ 48.874345][ T292] usb 2-1: Manufacturer: syz [ 48.879050][ T292] usb 2-1: SerialNumber: syz [ 48.905957][ T1698] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.913142][ T1698] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.920861][ T1698] device bridge_slave_0 entered promiscuous mode [ 48.943700][ T1698] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.948032][ T1703] loop5: detected capacity change from 0 to 1024 [ 48.957706][ T1703] EXT4-fs: Ignoring removed bh option [ 48.963403][ T1698] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.973723][ T1698] device bridge_slave_1 entered promiscuous mode [ 49.004502][ T1703] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 49.049355][ T1698] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.056407][ T1698] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.063619][ T1698] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.070898][ T1698] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.089921][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.097718][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.098714][ T1669] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 49.112092][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.120970][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.130263][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.137346][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.146137][ T509] EXT4-fs (loop5): unmounting filesystem. [ 49.155029][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.167697][ T440] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.174800][ T440] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.191258][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.208772][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.226970][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 49.244814][ T1698] device veth0_vlan entered promiscuous mode [ 49.252215][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.260962][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 49.268640][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 49.277139][ T754] device bridge_slave_0 left promiscuous mode [ 49.283372][ T754] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.291250][ T754] device veth1_macvtap left promiscuous mode [ 49.297338][ T754] device veth0_vlan left promiscuous mode [ 49.381847][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 49.392065][ T1698] device veth1_macvtap entered promiscuous mode [ 49.403669][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.416275][ T1725] loop5: detected capacity change from 0 to 256 [ 49.426780][ T1725] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d) [ 49.441330][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.449002][ T28] kauditd_printk_skb: 46 callbacks suppressed [ 49.449017][ T28] audit: type=1400 audit(1793807955.866:704): avc: denied { remount } for pid=1724 comm="syz.5.534" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 49.482182][ T28] audit: type=1400 audit(1793807955.896:705): avc: denied { mount } for pid=1698 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 49.496391][ T1727] ip_tables: iptables: counters copy to user failed while replacing table [ 49.721850][ T1669] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 49.930120][ T292] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 49.936751][ T292] cdc_ncm 2-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 49.944197][ T292] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 49.954451][ T6] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 50.135482][ T1767] kvm [1766]: vcpu0, guest rIP: 0x9134 Unhandled WRMSR(0x11e) = 0xbe702111 [ 50.137072][ T292] cdc_ncm 2-1:1.0: setting tx_max = 184 [ 50.151291][ T6] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 50.161814][ T6] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 50.177163][ T6] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 50.186633][ T6] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.194938][ T6] usb 3-1: Product: syz [ 50.199261][ T6] usb 3-1: Manufacturer: syz [ 50.203970][ T6] usb 3-1: SerialNumber: syz [ 50.217876][ T6] cdc_ncm 3-1:1.0: skipping garbage [ 50.352906][ T292] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 50.380781][ T292] usb 2-1: USB disconnect, device number 4 [ 50.387396][ T292] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [ 50.520133][ T1790] netlink: 8 bytes leftover after parsing attributes in process `syz.5.554'. [ 50.546516][ T1794] loop5: detected capacity change from 0 to 512 [ 50.568650][ T1794] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 50.595894][ T509] EXT4-fs (loop5): unmounting filesystem. [ 50.617864][ T28] audit: type=1400 audit(1793807957.036:706): avc: denied { read } for pid=1804 comm="syz.5.556" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 50.644681][ T310] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 50.652875][ T28] audit: type=1400 audit(1793807957.036:707): avc: denied { open } for pid=1804 comm="syz.5.556" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 50.689977][ T28] audit: type=1400 audit(1793807957.036:708): avc: denied { ioctl } for pid=1804 comm="syz.5.556" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 50.715967][ T28] audit: type=1400 audit(1793807957.106:709): avc: denied { execute_no_trans } for pid=1814 comm="syz.5.558" path="/113/file0" dev="tmpfs" ino=634 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 50.755005][ T28] audit: type=1400 audit(1793807957.176:710): avc: denied { bind } for pid=1818 comm="syz.5.560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 50.775817][ T28] audit: type=1400 audit(1793807957.176:711): avc: denied { setopt } for pid=1818 comm="syz.5.560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 50.855426][ T310] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 50.866344][ T310] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 50.876107][ T310] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 50.889024][ T310] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 50.898148][ T310] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.910535][ T310] usb 5-1: config 0 descriptor?? [ 50.924655][ T1828] loop1: detected capacity change from 0 to 1024 [ 50.931354][ T1828] EXT4-fs: Ignoring removed bh option [ 50.957668][ T1828] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 51.058323][ T289] EXT4-fs (loop1): unmounting filesystem. [ 51.085500][ T1834] ip_tables: iptables: counters copy to user failed while replacing table [ 51.219051][ T28] audit: type=1400 audit(1793807957.636:712): avc: denied { create } for pid=1747 comm="syz.2.543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 51.220034][ T6] cdc_ncm 3-1:1.0: bind() failure [ 51.245717][ T6] usb 3-1: USB disconnect, device number 7 [ 51.325883][ T310] plantronics 0003:047F:FFFF.0001: unknown main item tag 0xd [ 51.343599][ T310] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 51.360096][ T310] plantronics 0003:047F:FFFF.0001: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 51.381369][ T1848] loop1: detected capacity change from 0 to 256 [ 51.391776][ T1848] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 51.410320][ T28] audit: type=1400 audit(1793807957.826:713): avc: denied { setattr } for pid=1847 comm="syz.1.571" name="file0" dev="loop1" ino=1048699 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 51.490271][ T1853] netlink: 4 bytes leftover after parsing attributes in process `syz.1.573'. [ 51.498252][ T1844] loop7: detected capacity change from 0 to 32768 [ 51.534294][ T1844] loop7: p1 p2 p3 < p5 p6 p7 > [ 51.542232][ T1844] loop7: p2 size 16775168 extends beyond EOD, truncated [ 51.555710][ T1844] loop7: p5 start 4294970168 is beyond EOD, truncated [ 51.566131][ T1857] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 51.595237][ T1857] EXT4-fs (loop1): 1 truncate cleaned up [ 51.600929][ T1857] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 51.619288][ T19] usb 5-1: USB disconnect, device number 2 [ 51.629572][ T561] I/O error, dev loop7, sector 3072 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 51.629579][ T313] I/O error, dev loop7, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 51.629640][ T313] I/O error, dev loop7, sector 32640 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 51.639450][ T1227] I/O error, dev loop7, sector 14720 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 51.649403][ T1859] I/O error, dev loop7, sector 3072 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 51.658844][ T1227] I/O error, dev loop7, sector 14720 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 51.668533][ T450] I/O error, dev loop7, sector 2056 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 51.679638][ T1227] Buffer I/O error on dev loop7p6, logical block 11648, async page read [ 51.697439][ T1698] __loop_clr_fd: partition scan of loop7 failed (rc=-16) [ 51.713063][ T313] Buffer I/O error on dev loop7p2, logical block 4080, async page read [ 51.720891][ T561] I/O error, dev loop7, sector 3072 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 51.731301][ T561] Buffer I/O error on dev loop7p3, logical block 0, async page read [ 51.740871][ T450] I/O error, dev loop7, sector 2056 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 51.750838][ T1859] I/O error, dev loop7, sector 3072 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 51.754618][ T561] Buffer I/O error on dev loop7p3, logical block 0, async page read [ 51.763818][ T1227] Buffer I/O error on dev loop7p6, logical block 11649, async page read [ 51.774782][ T289] EXT4-fs (loop1): unmounting filesystem. [ 51.779935][ T1864] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 51.793849][ T1859] Buffer I/O error on dev loop7p7, logical block 0, async page read [ 51.793992][ T561] Buffer I/O error on dev loop7p3, logical block 0, async page read [ 51.802526][ T450] Buffer I/O error on dev loop7p1, logical block 1, async page read [ 51.828279][ T1859] Buffer I/O error on dev loop7p7, logical block 0, async page read [ 51.844735][ T1859] Buffer I/O error on dev loop7p7, logical block 0, async page read [ 51.845193][ T1864] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 51.893999][ T1879] netlink: 'syz.1.578': attribute type 13 has an invalid length. [ 51.897853][ T1859] udevd[1859]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory [ 51.903522][ T313] udevd[313]: inotify_add_watch(7, /dev/loop7p6, 10) failed: No such file or directory [ 51.913083][ T1862] udevd[1862]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 51.933035][ T561] udevd[561]: inotify_add_watch(7, /dev/loop7p7, 10) failed: No such file or directory [ 51.946933][ T1879] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 51.947950][ T450] udevd[450]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 51.967041][ T1882] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d) [ 51.980741][ T509] EXT4-fs (loop5): unmounting filesystem. [ 52.004788][ T1879] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 52.011700][ T1888] erofs: (device loop5): mounted with root inode @ nid 36. [ 52.041316][ T1882] incfs_lookup_dentry err:-84 [ 52.381976][ T1908] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.389178][ T1908] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.397744][ T1908] device bridge_slave_0 entered promiscuous mode [ 52.406069][ T1908] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.413147][ T1908] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.421115][ T1908] device bridge_slave_1 entered promiscuous mode [ 52.486762][ T1915] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 52.535630][ T1915] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 52.641546][ T1908] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.648659][ T1908] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.656044][ T1908] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.663103][ T1908] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.674318][ T288] EXT4-fs (loop4): unmounting filesystem. [ 52.790484][ T308] device bridge_slave_1 left promiscuous mode [ 52.800907][ T308] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.824691][ T308] device bridge_slave_0 left promiscuous mode [ 52.839937][ T308] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.874664][ T308] device veth1_macvtap left promiscuous mode [ 52.882172][ T308] device veth0_vlan left promiscuous mode [ 53.057015][ T1948] netlink: 16 bytes leftover after parsing attributes in process `syz.1.609'. [ 53.080277][ T1948] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.100881][ T1951] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 53.111751][ T1951] device bridge_slave_0 left promiscuous mode [ 53.124982][ T1951] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.133397][ T1951] device bridge_slave_1 left promiscuous mode [ 53.142462][ T1951] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.158264][ T1951] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 53.177027][ T754] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.186479][ T754] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.205187][ T754] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.241555][ T754] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.253963][ T754] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.272217][ T754] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.280606][ T754] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.299237][ T754] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 53.328270][ T754] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.356973][ T754] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 53.373217][ T754] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.394939][ T754] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.412674][ T754] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.421963][ T1908] device veth0_vlan entered promiscuous mode [ 53.449814][ T754] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 53.467154][ T754] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 53.491032][ T1908] device veth1_macvtap entered promiscuous mode [ 53.521744][ T754] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 53.533715][ T754] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 53.550049][ T754] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 53.568467][ T1978] netlink: 16 bytes leftover after parsing attributes in process `syz.5.619'. [ 53.586341][ T1979] netlink: 16 bytes leftover after parsing attributes in process `syz.5.619'. [ 53.604231][ T754] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 53.616192][ T754] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 53.629112][ T1980] Disabled LAPIC found during irq injection [ 54.238808][ T2033] futex_wake_op: syz.1.642 tries to shift op by 144; fix this program [ 54.251495][ T2033] futex_wake_op: syz.1.642 tries to shift op by 144; fix this program [ 54.268295][ T2037] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 54.391053][ T2060] netlink: 24 bytes leftover after parsing attributes in process `syz.4.654'. [ 54.421713][ T2062] Disabled LAPIC found during irq injection [ 54.513560][ T28] kauditd_printk_skb: 38 callbacks suppressed [ 54.513576][ T28] audit: type=1400 audit(1793807960.926:752): avc: denied { create } for pid=2072 comm="syz.1.660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 54.569186][ T2076] set_capacity_and_notify: 5 callbacks suppressed [ 54.569208][ T2076] loop1: detected capacity change from 0 to 16 [ 54.588418][ T6] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 54.600035][ T2076] erofs: (device loop1): mounted with root inode @ nid 36. [ 54.618206][ T28] audit: type=1400 audit(1793807961.036:753): avc: denied { execute } for pid=2075 comm="syz.1.661" path="/109/file0/file2" dev="loop1" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 54.646551][ T2076] erofs: (device loop1): z_erofs_readahead: readahead error at page 31 @ nid 89 [ 54.655913][ T28] audit: type=1400 audit(1793807961.066:754): avc: denied { ioctl } for pid=2075 comm="syz.1.661" path="socket:[25004]" dev="sockfs" ino=25004 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 54.683356][ T2085] loop4: detected capacity change from 0 to 512 [ 54.690988][ T2076] erofs: (device loop1): z_erofs_readahead: readahead error at page 30 @ nid 89 [ 54.704703][ T2076] erofs: (device loop1): z_erofs_readahead: readahead error at page 29 @ nid 89 [ 54.715319][ T2085] EXT4-fs (loop4): orphan cleanup on readonly fs [ 54.723583][ T2085] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 54.731574][ T2076] erofs: (device loop1): z_erofs_readahead: readahead error at page 28 @ nid 89 [ 54.741168][ T2085] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 54.768039][ T2085] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.665: attempt to clear invalid blocks 2 len 1 [ 54.797639][ T6] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 54, changing to 9 [ 54.802951][ T2076] erofs: (device loop1): z_erofs_readahead: readahead error at page 27 @ nid 89 [ 54.809888][ T2089] xt_hashlimit: size too large, truncated to 1048576 [ 54.824528][ T6] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 54.824692][ T2085] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.665: invalid indirect mapped block 1819239214 (level 0) [ 54.846778][ T6] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 54.865717][ T6] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.880255][ T6] usb 6-1: Product: syz [ 54.894461][ T6] usb 6-1: Manufacturer: syz [ 54.897757][ T2085] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.665: invalid indirect mapped block 1819239214 (level 1) [ 54.899135][ T6] usb 6-1: SerialNumber: syz [ 54.917800][ T2076] erofs: (device loop1): z_erofs_readahead: readahead error at page 26 @ nid 89 [ 54.927261][ T2076] erofs: (device loop1): z_erofs_readahead: readahead error at page 25 @ nid 89 [ 54.946404][ T2085] EXT4-fs (loop4): 1 truncate cleaned up [ 54.955033][ T2076] erofs: (device loop1): z_erofs_readahead: readahead error at page 24 @ nid 89 [ 54.963954][ T2085] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 54.974212][ T2076] erofs: (device loop1): z_erofs_readahead: readahead error at page 23 @ nid 89 [ 55.014501][ T288] EXT4-fs (loop4): unmounting filesystem. [ 55.020449][ T2076] erofs: (device loop1): z_erofs_readahead: readahead error at page 22 @ nid 89 [ 55.039230][ T2076] erofs: (device loop1): z_erofs_readahead: readahead error at page 21 @ nid 89 [ 55.064760][ T28] audit: type=1400 audit(1793807961.486:755): avc: denied { create } for pid=2091 comm="syz.4.667" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 55.067911][ T2076] erofs: (device loop1): z_erofs_readahead: readahead error at page 20 @ nid 89 [ 55.095158][ T28] audit: type=1400 audit(1793807961.516:756): avc: denied { mounton } for pid=2091 comm="syz.4.667" path="/145/file0" dev="tmpfs" ino=811 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 55.138699][ T2049] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 55.166403][ T2076] erofs: (device loop1): z_erofs_readahead: readahead error at page 19 @ nid 89 [ 55.195612][ T2076] erofs: (device loop1): z_erofs_readahead: readahead error at page 18 @ nid 89 [ 55.216128][ T2076] erofs: (device loop1): z_erofs_readahead: readahead error at page 17 @ nid 89 [ 55.225869][ T2076] erofs: (device loop1): z_erofs_readahead: readahead error at page 16 @ nid 89 [ 55.237319][ T2076] erofs: (device loop1): z_erofs_readahead: readahead error at page 15 @ nid 89 [ 55.246623][ T2076] erofs: (device loop1): z_erofs_readahead: readahead error at page 14 @ nid 89 [ 55.255979][ T2076] erofs: (device loop1): z_erofs_readahead: readahead error at page 13 @ nid 89 [ 55.265176][ T2076] erofs: (device loop1): z_erofs_readahead: readahead error at page 12 @ nid 89 [ 55.274298][ T2076] erofs: (device loop1): z_erofs_readahead: readahead error at page 11 @ nid 89 [ 55.284684][ T2076] erofs: (device loop1): z_erofs_readahead: readahead error at page 10 @ nid 89 [ 55.293843][ T2076] erofs: (device loop1): z_erofs_readahead: readahead error at page 9 @ nid 89 [ 55.302892][ T2076] erofs: (device loop1): z_erofs_readahead: readahead error at page 8 @ nid 89 [ 55.312000][ T2076] erofs: (device loop1): z_erofs_readahead: readahead error at page 7 @ nid 89 [ 55.321056][ T2076] erofs: (device loop1): z_erofs_readahead: readahead error at page 6 @ nid 89 [ 55.330197][ T2076] erofs: (device loop1): z_erofs_readahead: readahead error at page 5 @ nid 89 [ 55.339412][ T2076] erofs: (device loop1): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 55.348467][ T2076] erofs: (device loop1): z_erofs_readahead: readahead error at page 3 @ nid 89 [ 55.358717][ T2076] erofs: (device loop1): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 55.367784][ T2076] erofs: (device loop1): z_erofs_readahead: readahead error at page 1 @ nid 89 [ 55.376855][ T2076] erofs: (device loop1): z_erofs_readahead: readahead error at page 0 @ nid 89 [ 55.385984][ T2076] erofs: (device loop1): z_erofs_read_folio: failed to read, err [-22] [ 55.394339][ T2076] erofs: (device loop1): z_erofs_read_folio: failed to read, err [-22] [ 55.403862][ T2076] erofs: (device loop1): z_erofs_read_folio: failed to read, err [-22] [ 55.431759][ T2103] loop1: detected capacity change from 0 to 256 [ 55.445374][ T2103] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 55.550082][ T2120] tipc: Started in network mode [ 55.555296][ T2120] tipc: Node identity ee230f24e561, cluster identity 4711 [ 55.562702][ T2120] tipc: Enabled bearer , priority 10 [ 55.571210][ T2119] tipc: Resetting bearer [ 55.581554][ T2119] tipc: Disabling bearer [ 55.613051][ T2128] loop1: detected capacity change from 0 to 1024 [ 55.619862][ T2128] EXT4-fs: Ignoring removed mblk_io_submit option [ 55.658486][ T2128] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 55.671987][ T28] audit: type=1400 audit(1793807962.086:757): avc: denied { setattr } for pid=2127 comm="syz.1.683" name="file0" dev="loop1" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 55.709284][ T289] EXT4-fs (loop1): unmounting filesystem. [ 55.763253][ T2049] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 55.804205][ T2146] raw_sendmsg: syz.2.690 forgot to set AF_INET. Fix it! [ 55.819752][ T28] audit: type=1400 audit(1793807962.236:758): avc: denied { ioctl } for pid=2147 comm="syz.2.691" path="socket:[24247]" dev="sockfs" ino=24247 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 55.849040][ T28] audit: type=1400 audit(1793807962.236:759): avc: denied { bind } for pid=2147 comm="syz.2.691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 55.907689][ T2154] netlink: 4 bytes leftover after parsing attributes in process `syz.4.694'. [ 55.917746][ T2154] netlink: 12 bytes leftover after parsing attributes in process `syz.4.694'. [ 55.971645][ T6] cdc_ncm 6-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 55.979831][ T6] cdc_ncm 6-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 56.007210][ T6] cdc_ncm 6-1:1.0: setting rx_max = 2048 [ 56.133123][ T2165] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 56.165534][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 56.178860][ T6] cdc_ncm 6-1:1.0: setting tx_max = 184 [ 56.184808][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.203427][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 56.223571][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.226529][ T2172] loop2: detected capacity change from 0 to 512 [ 56.238460][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.265307][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.277042][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.280987][ T2172] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 56.294890][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.301791][ T2172] ext4 filesystem being mounted at /133/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.313493][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 56.333666][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 56.340668][ T2172] capability: warning: `syz.2.702' uses 32-bit capabilities (legacy support in use) [ 56.351821][ T28] audit: type=1400 audit(1793807962.776:760): avc: denied { create } for pid=2171 comm="syz.2.702" name=E91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 56.382992][ T6] cdc_ncm 6-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.5-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 56.407634][ T290] EXT4-fs (loop2): unmounting filesystem. [ 56.426142][ T6] usb 6-1: USB disconnect, device number 2 [ 56.443102][ T6] cdc_ncm 6-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.5-1, CDC NCM (NO ZLP) [ 56.622110][ T2192] netlink: 'syz.2.704': attribute type 13 has an invalid length. [ 56.651919][ T2192] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 56.680209][ T2196] FAULT_INJECTION: forcing a failure. [ 56.680209][ T2196] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 56.691163][ T2150] loop8: detected capacity change from 0 to 131072 [ 56.700474][ T2196] CPU: 0 PID: 2196 Comm: syz.1.706 Not tainted syzkaller #0 [ 56.708057][ T2196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 56.718132][ T2196] Call Trace: [ 56.721429][ T2196] [ 56.724374][ T2196] __dump_stack+0x21/0x24 [ 56.728729][ T2196] dump_stack_lvl+0x110/0x170 [ 56.733436][ T2196] ? __cfi_dump_stack_lvl+0x8/0x8 [ 56.738489][ T2196] dump_stack+0x15/0x24 [ 56.742665][ T2196] should_fail_ex+0x3bf/0x510 [ 56.747367][ T2196] should_fail_alloc_page+0x61/0x90 [ 56.752598][ T2196] prepare_alloc_pages+0x131/0x570 [ 56.757734][ T2196] ? __alloc_pages_bulk+0x9d0/0x9d0 [ 56.762960][ T2196] ? slab_post_alloc_hook+0x4f/0x2d0 [ 56.768278][ T2196] ? kmem_cache_alloc+0x166/0x320 [ 56.773332][ T2196] ? mas_alloc_nodes+0x2d8/0x850 [ 56.778312][ T2196] ? mas_preallocate+0xe3d/0x1430 [ 56.783386][ T2196] ? vma_link+0x114/0x420 [ 56.787745][ T2196] __alloc_pages+0x15b/0x610 [ 56.792363][ T2196] ? __cfi___alloc_pages+0x10/0x10 [ 56.797499][ T2196] ? __cfi_mas_destroy+0x10/0x10 [ 56.802461][ T2196] get_zeroed_page+0x19/0x40 [ 56.807075][ T2196] __pud_alloc+0x37/0x1a0 [ 56.811429][ T2196] handle_mm_fault+0x1afb/0x26b0 [ 56.816384][ T2196] ? __kasan_slab_alloc+0x72/0x80 [ 56.821453][ T2196] ? __cfi_handle_mm_fault+0x10/0x10 [ 56.826841][ T2196] ? mtree_load+0x539/0x740 [ 56.831374][ T2196] __get_user_pages+0x34b/0xdb0 [ 56.836342][ T2196] ? populate_vma_page_range+0x120/0x120 [ 56.838742][ T2150] F2FS-fs (loop8): Wrong CP boundary, start(512) end(1536) blocks(0) [ 56.842014][ T2196] ? rwsem_read_trylock+0x2af/0x640 [ 56.855281][ T2196] ? downgrade_write+0x370/0x370 [ 56.857652][ T2150] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 56.860245][ T2196] ? vma_link+0x2f9/0x420 [ 56.860270][ T2196] __get_user_pages_remote+0x1b4/0x770 [ 56.878202][ T2196] ? __cfi_down_read+0x10/0x10 [ 56.881513][ T2150] F2FS-fs (loop8): invalid crc value [ 56.882989][ T2196] get_user_pages_remote+0x7a/0xb0 [ 56.893391][ T2196] get_arg_page+0x1ec/0x450 [ 56.897924][ T2196] ? copy_string_kernel+0x2b0/0x2b0 [ 56.903143][ T2196] ? up_write+0x7b/0x290 [ 56.907407][ T2196] ? copy_string_kernel+0x1c/0x2b0 [ 56.912537][ T2196] copy_string_kernel+0x17d/0x2b0 [ 56.917585][ T2196] do_execveat_common+0x6f2/0xaa0 [ 56.922633][ T2196] __x64_sys_execveat+0xce/0xf0 [ 56.927508][ T2196] x64_sys_call+0x5d8/0x9a0 [ 56.932043][ T2196] do_syscall_64+0x4c/0xa0 [ 56.936474][ T2196] ? clear_bhb_loop+0x30/0x80 [ 56.941188][ T2196] ? clear_bhb_loop+0x30/0x80 [ 56.945885][ T2196] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 56.951800][ T2196] RIP: 0033:0x7f2705f9fb19 [ 56.956234][ T2196] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 56.975865][ T2196] RSP: 002b:00007f2706f51028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 56.984313][ T2196] RAX: ffffffffffffffda RBX: 00007f2706225fa0 RCX: 00007f2705f9fb19 [ 56.992310][ T2196] RDX: 0000000000000000 RSI: 0000200000000880 RDI: 0000000000000004 [ 57.000308][ T2196] RBP: 00007f2706037b70 R08: 0000000000001000 R09: 0000000000000000 [ 57.008296][ T2196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 57.016293][ T2196] R13: 00007f2706226038 R14: 00007f2706225fa0 R15: 00007ffe5a7c0738 [ 57.024299][ T2196] [ 57.065793][ T2150] F2FS-fs (loop8): Found nat_bits in checkpoint [ 57.139362][ T2150] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 57.146984][ T2150] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e4 [ 57.814952][ T2226] loop4: detected capacity change from 0 to 40427 [ 57.840342][ T2226] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 57.855462][ T2226] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 57.866256][ T2226] F2FS-fs (loop4): invalid crc value [ 57.893382][ T2226] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 57.955875][ T2226] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 57.962951][ T2226] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 58.246919][ T2260] device syzkaller0 entered promiscuous mode [ 58.396602][ T288] syz-executor: attempt to access beyond end of device [ 58.396602][ T288] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 58.419897][ T28] audit: type=1400 audit(1793807964.836:761): avc: denied { watch } for pid=2271 comm="syz.8.729" path="/25/file0" dev="tmpfs" ino=146 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 58.479919][ T2277] netlink: 4 bytes leftover after parsing attributes in process `syz.8.731'. [ 58.530939][ T2277] netlink: 12 bytes leftover after parsing attributes in process `syz.8.731'. [ 58.545801][ T2282] ip_tables: iptables: counters copy to user failed while replacing table [ 58.601503][ T2287] loop1: detected capacity change from 0 to 512 [ 58.673793][ T2287] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 58.681869][ T2300] loop2: detected capacity change from 0 to 512 [ 58.689536][ T2287] ext4 filesystem being mounted at /119/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 58.714988][ T2300] FAT-fs (loop2): Unrecognized mount option "ÿÿÿÿÿÿÿ" or missing value [ 58.720690][ T2303] loop8: detected capacity change from 0 to 1024 [ 58.817412][ C0] blk_print_req_error: 15 callbacks suppressed [ 58.817432][ C0] I/O error, dev loop1, sector 84 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 58.836305][ T2310] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 58.843778][ C0] I/O error, dev loop1, sector 12 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 58.860962][ C0] I/O error, dev loop1, sector 136 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 58.870717][ C0] I/O error, dev loop1, sector 144 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 58.880412][ C0] I/O error, dev loop1, sector 140 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 58.895072][ T8] EXT4-fs error (device loop1): __ext4_get_inode_loc_noinmem:4645: inode #18: block 35: comm kworker/u4:0: unable to read itable block [ 58.897677][ T2303] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 58.917565][ T754] loop: Write error at byte offset 9223372036854775807, length 2048. [ 58.927862][ T2310] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 58.946652][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 58.946742][ C1] I/O error, dev loop1, sector 0 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 58.963420][ C1] I/O error, dev loop1, sector 0 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 58.964027][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 58.972890][ C1] buffer_io_error: 10 callbacks suppressed [ 58.972902][ C1] Buffer I/O error on dev loop1, logical block 0, lost sync page write [ 58.973031][ T8] EXT4-fs (loop1): I/O error while writing superblock [ 58.973599][ C1] I/O error, dev loop1, sector 136 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 59.011030][ C1] I/O error, dev loop1, sector 144 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 59.020749][ C1] I/O error, dev loop1, sector 140 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 59.037742][ T8] EXT4-fs error (device loop1): __ext4_get_inode_loc_noinmem:4645: inode #19: block 35: comm kworker/u4:0: unable to read itable block [ 59.072574][ T1908] EXT4-fs (loop8): unmounting filesystem. [ 59.081090][ T308] loop: Write error at byte offset 9223372036854775807, length 2048. [ 59.103825][ C0] Buffer I/O error on dev loop1, logical block 0, lost sync page write [ 59.112364][ T8] EXT4-fs (loop1): I/O error while writing superblock [ 59.135715][ T289] EXT4-fs (loop1): unmounting filesystem. [ 59.172945][ T8] loop: Write error at byte offset 9223372036854775807, length 2048. [ 59.184972][ C0] Buffer I/O error on dev loop1, logical block 0, lost sync page write [ 59.193287][ T289] EXT4-fs (loop1): I/O error while writing superblock [ 59.201610][ T8] loop: Write error at byte offset 9223372036854800383, length 2048. [ 59.214574][ C0] Buffer I/O error on dev loop1, logical block 12, lost sync page write [ 59.240755][ T2318] loop2: p1 < > p3 p4 < p5 > [ 59.265425][ T2318] loop2: p3 size 467968 extends beyond EOD, truncated [ 59.279499][ T2321] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 59.293067][ T2321] ext4 filesystem being mounted at /159/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.315597][ T2318] loop2: p5 size 467968 extends beyond EOD, truncated [ 59.383333][ T288] EXT4-fs (loop4): unmounting filesystem. [ 59.793718][ T2346] set_capacity_and_notify: 3 callbacks suppressed [ 59.793737][ T2346] loop8: detected capacity change from 0 to 32768 [ 59.850814][ T2346] loop8: p1 p3 < > [ 59.881799][ T103] loop8: p1 p3 < > [ 59.966411][ T1908] __loop_clr_fd: partition scan of loop8 failed (rc=-16) [ 59.967441][ T1859] Buffer I/O error on dev loop8p3, logical block 0, async page read [ 59.973543][ T450] Buffer I/O error on dev loop8p1, logical block 1, async page read [ 59.989657][ T1859] Buffer I/O error on dev loop8p3, logical block 0, async page read [ 60.001785][ T2370] lo: Caught tx_queue_len zero misconfig [ 60.008605][ T1859] Buffer I/O error on dev loop8p3, logical block 0, async page read [ 60.026746][ T2362] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.034019][ T1859] Buffer I/O error on dev loop8p3, logical block 0, async page read [ 60.042672][ T2362] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.050020][ T1859] Buffer I/O error on dev loop8p3, logical block 0, async page read [ 60.058845][ T2362] device bridge_slave_0 entered promiscuous mode [ 60.067262][ T450] udevd[450]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 60.077846][ T2362] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.084973][ T2362] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.088443][ T1859] udevd[1859]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 60.092502][ T2362] device bridge_slave_1 entered promiscuous mode [ 60.182307][ T2362] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.189413][ T2362] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.196752][ T2362] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.203796][ T2362] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.228095][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 60.228112][ T28] audit: type=1400 audit(1793807966.646:765): avc: denied { connect } for pid=2397 comm="syz.8.775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 60.249243][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.271124][ T440] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.289410][ T440] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.313552][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.333299][ T440] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.340430][ T440] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.356477][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.364755][ T440] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.371776][ T440] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.384520][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.436739][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.482413][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.497038][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.512167][ T2362] device veth0_vlan entered promiscuous mode [ 60.532821][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.545095][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.589392][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.597054][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.620490][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.629073][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.649123][ T2362] device veth1_macvtap entered promiscuous mode [ 60.663791][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.675021][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.686058][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.720079][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.738735][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.854881][ T2457] ip_tables: iptables: counters copy to user failed while replacing table [ 60.871424][ T2463] ip_tables: iptables: counters copy to user failed while replacing table [ 60.972511][ T2470] loop4: detected capacity change from 0 to 2048 [ 61.020142][ T2470] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 61.031022][ T2477] ip_tables: iptables: counters copy to user failed while replacing table [ 61.063132][ T2470] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 61.134518][ T2470] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 61.146897][ T2470] EXT4-fs (loop4): This should not happen!! Data will be lost [ 61.146897][ T2470] [ 61.159232][ T2470] EXT4-fs (loop4): Total free blocks count 0 [ 61.165287][ T2470] EXT4-fs (loop4): Free/Dirty block details [ 61.176224][ T2470] EXT4-fs (loop4): free_blocks=4096 [ 61.184591][ T2470] EXT4-fs (loop4): dirty_blocks=48 [ 61.243973][ T2470] EXT4-fs (loop4): Block reservation details [ 61.254518][ T2470] EXT4-fs (loop4): i_reserved_data_blocks=3 [ 61.365162][ T28] audit: type=1400 audit(1793807967.776:766): avc: denied { read } for pid=2499 comm="syz.9.795" name="ptp0" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 61.396348][ T28] audit: type=1400 audit(1793807967.816:767): avc: denied { open } for pid=2499 comm="syz.9.795" path="/dev/ptp0" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 61.593292][ T2509] netlink: 24 bytes leftover after parsing attributes in process `syz.5.798'. [ 61.640056][ T28] audit: type=1400 audit(1793807968.056:768): avc: denied { bind } for pid=2510 comm="syz.5.799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 61.660645][ T28] audit: type=1400 audit(1793807968.086:769): avc: denied { name_bind } for pid=2510 comm="syz.5.799" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 61.683141][ T28] audit: type=1400 audit(1793807968.086:770): avc: denied { node_bind } for pid=2510 comm="syz.5.799" saddr=::ffff:0.0.0.0 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 61.748594][ T2517] netlink: 64 bytes leftover after parsing attributes in process `syz.8.802'. [ 61.776639][ T28] audit: type=1400 audit(1793807968.196:771): avc: denied { associate } for pid=2518 comm="syz.8.803" name="3" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 61.812445][ T308] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 2 with max blocks 32 with error 28 [ 62.043629][ T2542] overlayfs: refusing to follow metacopy origin for (/file1) [ 62.091819][ T2550] device syzkaller1 entered promiscuous mode [ 62.209850][ T2559] loop2: detected capacity change from 0 to 128 [ 62.362462][ T28] audit: type=1400 audit(1793807968.776:772): avc: denied { setopt } for pid=2565 comm="syz.9.823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 62.398060][ T28] audit: type=1400 audit(1793807968.806:773): avc: denied { write } for pid=2565 comm="syz.9.823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 62.431786][ T28] audit: type=1400 audit(1793807968.846:774): avc: denied { wake_alarm } for pid=2567 comm="syz.9.824" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 62.545467][ T2573] loop5: detected capacity change from 0 to 16 [ 62.608743][ T2573] erofs: (device loop5): mounted with root inode @ nid 36. [ 62.651514][ T2573] syz.5.826: attempt to access beyond end of device [ 62.651514][ T2573] loop5: rw=0, sector=8, nr_sectors = 16 limit=16 [ 62.712250][ T2574] erofs: (device loop5): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 62.714858][ T2573] syz.5.826: attempt to access beyond end of device [ 62.714858][ T2573] loop5: rw=0, sector=8, nr_sectors = 16 limit=16 [ 62.734785][ T2574] syz.5.826: attempt to access beyond end of device [ 62.734785][ T2574] loop5: rw=524288, sector=1048568, nr_sectors = 16 limit=16 [ 62.744292][ T2573] syz.5.826: attempt to access beyond end of device [ 62.744292][ T2573] loop5: rw=0, sector=8, nr_sectors = 16 limit=16 [ 62.751078][ T2576] loop9: detected capacity change from 0 to 512 [ 62.775514][ T2573] syz.5.826: attempt to access beyond end of device [ 62.775514][ T2573] loop5: rw=0, sector=8, nr_sectors = 16 limit=16 [ 62.808807][ T2574] erofs: (device loop5): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 89 [ 62.831430][ T2574] erofs: (device loop5): z_erofs_readahead: readahead error at page 17 @ nid 89 [ 62.857290][ T2576] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 62.871162][ T2574] erofs: (device loop5): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 89 [ 62.899408][ T2576] EXT4-fs (loop9): 1 truncate cleaned up [ 62.909127][ T2574] erofs: (device loop5): z_erofs_readahead: readahead error at page 16 @ nid 89 [ 62.915066][ T2576] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 62.931451][ T2574] syz.5.826: attempt to access beyond end of device [ 62.931451][ T2574] loop5: rw=524288, sector=96, nr_sectors = 40 limit=16 [ 63.014644][ T2574] syz.5.826: attempt to access beyond end of device [ 63.014644][ T2574] loop5: rw=524288, sector=8, nr_sectors = 80 limit=16 [ 63.028576][ T2574] erofs: (device loop5): z_erofs_read_folio: failed to read, err [-117] [ 63.054448][ T2574] erofs: (device loop5): z_erofs_read_folio: failed to read, err [-117] [ 63.244892][ T8] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2035 starting block 149542) [ 63.277782][ T8] Buffer I/O error on device sda1, logical block 149504 [ 63.284857][ T8] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2035 starting block 150562) [ 63.296469][ T8] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2035 starting block 151036) [ 63.308076][ T8] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2035 starting block 151068) [ 63.319809][ T308] Buffer I/O error on device sda1, logical block 150524 [ 63.325326][ T8] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2035 starting block 159269) [ 63.328527][ T308] Buffer I/O error on device sda1, logical block 150525 [ 63.345358][ T8] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2034 starting block 142886) [ 63.357014][ T8] Buffer I/O error on device sda1, logical block 142848 [ 63.363999][ T8] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2034 starting block 142887) [ 63.364042][ T308] Buffer I/O error on device sda1, logical block 150526 [ 63.375620][ T8] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2028 starting block 143398) [ 63.394068][ T8] Buffer I/O error on device sda1, logical block 143360 [ 63.401057][ T8] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2028 starting block 144421) [ 63.412612][ T8] Buffer I/O error on device sda1, logical block 144383 [ 63.419601][ T8] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2028 starting block 144922) [ 63.431160][ T8] Buffer I/O error on device sda1, logical block 144884 [ 63.438211][ T8] Buffer I/O error on device sda1, logical block 144885 [ 63.445198][ T8] Buffer I/O error on device sda1, logical block 144886 [ 63.460240][ T2362] EXT4-fs (loop9): unmounting filesystem. [ 63.480300][ T66] Aborting journal on device sda1-8. [ 63.486831][ T66] JBD2: I/O error when updating journal superblock for sda1-8. [ 63.496152][ T2585] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.5.831: Detected aborted journal [ 63.508966][ T2591] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.9.832: Detected aborted journal [ 63.530351][ T2591] EXT4-fs (sda1): I/O error while writing superblock [ 63.537418][ T279] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 63.554486][ T2585] EXT4-fs (sda1): previous I/O error to superblock detected [ 63.559700][ T2558] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.821: Detected aborted journal [ 63.562672][ T2591] EXT4-fs (sda1): Remounting filesystem read-only [ 63.588183][ T2585] EXT4-fs (sda1): I/O error while writing superblock [ 63.588722][ T279] EXT4-fs (sda1): previous I/O error to superblock detected [ 63.609098][ T2585] EXT4-fs (sda1): Remounting filesystem read-only [ 63.610153][ T279] EXT4-fs (sda1): I/O error while writing superblock [ 63.615612][ T2558] EXT4-fs (sda1): previous I/O error to superblock detected [ 63.630474][ T2585] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.5.831: Detected aborted journal [ 63.633787][ T279] EXT4-fs (sda1): Remounting filesystem read-only [ 63.648971][ T2591] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.9.832: Detected aborted journal [ 63.655599][ T279] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 63.661727][ T2558] EXT4-fs (sda1): I/O error while writing superblock [ 63.680191][ T2558] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.821: Detected aborted journal [ 63.680844][ T2586] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 63.691429][ T2558] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.821: Detected aborted journal [ 63.704908][ T279] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 63.811029][ T2596] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.814192][ T2600] ------------[ cut here ]------------ [ 63.818294][ T2596] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.823623][ T2600] WARNING: CPU: 0 PID: 2600 at arch/x86/kvm/x86.c:11263 kvm_arch_vcpu_ioctl_run+0x1a32/0x1f60 [ 63.841098][ T2600] Modules linked in: [ 63.845036][ T2600] CPU: 0 PID: 2600 Comm: syz.9.836 Not tainted syzkaller #0 [ 63.852341][ T2600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 63.862441][ T2600] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x1a32/0x1f60 [ 63.868934][ T2600] Code: e8 43 d0 a6 00 e9 c8 f2 ff ff 44 89 f9 80 e1 07 38 c1 0f 8c 2e e9 ff ff 4c 89 ff e8 c8 cf a6 00 e9 21 e9 ff ff e8 0e 34 61 00 <0f> 0b e9 99 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 3c ef [ 63.888610][ T2600] RSP: 0018:ffffc90002ef7c30 EFLAGS: 00010283 [ 63.894729][ T2600] RAX: ffffffff81103e12 RBX: ffff888114218000 RCX: 0000000000080000 [ 63.902725][ T2600] RDX: ffffc900059fb000 RSI: 000000000000003f RDI: 0000000000000040 [ 63.910745][ T2600] RBP: ffffc90002ef7cb0 R08: ffff888115335107 R09: 1ffff11022a66a20 [ 63.918934][ T2600] R10: dffffc0000000000 R11: ffffed1022a66a21 R12: ffff88811d33b000 [ 63.926989][ T2600] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff888114218078 [ 63.935043][ T2600] FS: 00007f2badff76c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 63.944012][ T2600] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 63.950660][ T2600] CR2: 0000001b3051bff8 CR3: 0000000118c0a000 CR4: 00000000003526b0 [ 63.958690][ T2600] DR0: 0000000000000000 DR1: 0000000000008000 DR2: 0000000000000000 [ 63.966694][ T2600] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 63.974708][ T2600] Call Trace: [ 63.978004][ T2600] [ 63.980948][ T2600] kvm_vcpu_ioctl+0x8ed/0xc00 [ 63.985681][ T2600] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 63.990905][ T2600] ? selinux_file_ioctl+0x3ad/0x4c0 [ 63.996197][ T2600] ? __cfi_do_futex+0x10/0x10 [ 64.000901][ T2600] ? kvm_uevent_notify_change+0x30b/0x3b0 [ 64.013756][ T2600] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 64.019402][ T2600] ? __fget_files+0x2d1/0x330 [ 64.024120][ T2600] ? security_file_ioctl+0x95/0xc0 [ 64.035453][ T2600] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 64.040671][ T2600] __se_sys_ioctl+0x12f/0x1b0 [ 64.045418][ T2600] __x64_sys_ioctl+0x7b/0x90 [ 64.050034][ T2600] x64_sys_call+0x58b/0x9a0 [ 64.050545][ T2608] loop2: detected capacity change from 0 to 256 [ 64.054600][ T2600] do_syscall_64+0x4c/0xa0 [ 64.065267][ T2600] ? clear_bhb_loop+0x30/0x80 [ 64.069978][ T2600] ? clear_bhb_loop+0x30/0x80 [ 64.074868][ T2600] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 64.080796][ T2600] RIP: 0033:0x7f2baf59fb19 [ 64.091435][ T2600] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 64.111136][ T2600] RSP: 002b:00007f2badff7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 64.119610][ T2600] RAX: ffffffffffffffda RBX: 00007f2baf825fa0 RCX: 00007f2baf59fb19 [ 64.121154][ T2608] exfat: Unknown parameter 'ÿÿÿ' [ 64.127725][ T2600] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 64.127742][ T2600] RBP: 00007f2baf637b70 R08: 0000000000000000 R09: 0000000000000000 [ 64.155508][ T2600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 64.170694][ T2600] R13: 00007f2baf826038 R14: 00007f2baf825fa0 R15: 00007fff30dfcc88 [ 64.178729][ T2600] [ 64.181768][ T2600] ---[ end trace 0000000000000000 ]--- [ 64.427839][ T2619] netlink: 4 bytes leftover after parsing attributes in process `syz.5.841'. [ 64.452237][ T2621] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 64.591537][ T10] Bluetooth: hci0: Frame reassembly failed (-84) [ 64.694127][ T2642] loop4: detected capacity change from 0 to 128 [ 64.703684][ T2642] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 64.722447][ T2642] syz.4.849: attempt to access beyond end of device [ 64.722447][ T2642] loop4: rw=34817, sector=61, nr_sectors = 94 limit=128 [ 64.760258][ T2645] loop2: detected capacity change from 0 to 512 [ 64.787862][ T2645] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 64.797379][ T2645] ext4 filesystem being mounted at /160/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 64.813463][ T10] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 64.845092][ T2651] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 64.854571][ T2645] loop2: detected capacity change from 512 to 0 [ 64.862211][ T2651] xt_hashlimit: size too large, truncated to 1048576 [ 64.871631][ C0] blk_print_req_error: 89 callbacks suppressed [ 64.871648][ C0] I/O error, dev loop2, sector 84 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 64.893620][ C1] I/O error, dev loop2, sector 12 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 64.914621][ C1] I/O error, dev loop2, sector 136 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 64.924511][ C1] I/O error, dev loop2, sector 144 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 64.934167][ C1] I/O error, dev loop2, sector 140 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 64.943816][ T8] EXT4-fs error (device loop2): __ext4_get_inode_loc_noinmem:4645: inode #18: block 35: comm kworker/u4:0: unable to read itable block [ 64.958236][ T10] loop: Write error at byte offset 9223372036854775807, length 2048. [ 64.966475][ C1] I/O error, dev loop2, sector 0 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 64.975984][ C1] I/O error, dev loop2, sector 0 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 64.985454][ C1] buffer_io_error: 28 callbacks suppressed [ 64.985465][ C1] Buffer I/O error on dev loop2, logical block 0, lost sync page write [ 64.999608][ T8] EXT4-fs (loop2): I/O error while writing superblock [ 65.006729][ C1] I/O error, dev loop2, sector 136 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 65.016427][ C1] I/O error, dev loop2, sector 144 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 65.026099][ C1] I/O error, dev loop2, sector 140 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 65.035747][ T8] EXT4-fs error (device loop2): __ext4_get_inode_loc_noinmem:4645: inode #19: block 35: comm kworker/u4:0: unable to read itable block [ 65.050939][ T10] loop: Write error at byte offset 9223372036854775807, length 2048. [ 65.059110][ C1] Buffer I/O error on dev loop2, logical block 0, lost sync page write [ 65.067420][ T8] EXT4-fs (loop2): I/O error while writing superblock [ 65.075213][ T1092] EXT4-fs (loop2): unmounting filesystem. [ 65.081507][ T10] loop: Write error at byte offset 9223372036854775807, length 2048. [ 65.089881][ C0] Buffer I/O error on dev loop2, logical block 0, lost sync page write [ 65.098186][ T1092] EXT4-fs (loop2): I/O error while writing superblock [ 65.110782][ T10] loop: Write error at byte offset 9223372036854800383, length 2048. [ 65.122577][ C1] Buffer I/O error on dev loop2, logical block 12, lost sync page write [ 65.616992][ T2672] ip_tables: iptables: counters copy to user failed while replacing table [ 65.626961][ T2672] netlink: 48 bytes leftover after parsing attributes in process `syz.8.862'. [ 65.635035][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 65.635050][ T28] audit: type=1400 audit(1793807972.046:778): avc: denied { ioctl } for pid=2670 comm="syz.5.861" path="socket:[27275]" dev="sockfs" ino=27275 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 65.666834][ T10] device veth0 left promiscuous mode [ 65.672301][ T10] bridge0: port 3(veth0) entered disabled state [ 65.679438][ T10] device bridge_slave_1 left promiscuous mode [ 65.685916][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.693303][ T10] device bridge_slave_0 left promiscuous mode [ 65.699489][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.707259][ T10] device veth1_macvtap left promiscuous mode [ 65.713436][ T10] device veth0_vlan left promiscuous mode [ 66.128592][ T2677] loop4: detected capacity change from 0 to 128 [ 66.136394][ T2679] loop8: detected capacity change from 0 to 256 [ 66.170535][ T10] kworker/u4:1: attempt to access beyond end of device [ 66.170535][ T10] loop4: rw=1, sector=145, nr_sectors = 896 limit=128 [ 66.229771][ T28] audit: type=1400 audit(1793807972.646:779): avc: denied { execute } for pid=2675 comm="syz.5.863" name="file0" dev="fuse" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 66.634734][ T1039] Bluetooth: hci0: command 0x1003 tx timeout [ 66.634917][ T386] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 66.743155][ T2685] ip_tables: iptables: counters copy to user failed while replacing table [ 66.757798][ T28] audit: type=1400 audit(1793807973.176:780): avc: denied { map } for pid=2687 comm="syz.5.866" path="socket:[27304]" dev="sockfs" ino=27304 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 68.304279][ T2712] loop9: detected capacity change from 0 to 512 [ 68.317372][ T2712] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 68.327287][ T2712] EXT4-fs (loop9): warning: maximal mount count reached, running e2fsck is recommended [ 68.338017][ T2712] EXT4-fs error (device loop9): ext4_orphan_get:1405: comm syz.9.876: inode #15: comm syz.9.876: iget: illegal inode # [ 68.350784][ T2712] EXT4-fs error (device loop9): ext4_orphan_get:1410: comm syz.9.876: couldn't read orphan inode 15 (err -117) [ 68.362672][ T2712] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 68.376154][ T2712] EXT4-fs error (device loop9): ext4_lookup:1858: comm syz.9.876: inode #15: comm syz.9.876: iget: illegal inode # [ 68.392022][ T2362] EXT4-fs (loop9): unmounting filesystem. [ 69.198232][ T2716] EXT4-fs error: 180 callbacks suppressed [ 69.198251][ T2716] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.5.879: Detected aborted journal [ 69.199926][ T2715] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 69.204028][ T2716] EXT4-fs: 172 callbacks suppressed [ 69.204037][ T2716] EXT4-fs (sda1): Remounting filesystem read-only [ 69.215225][ T2715] EXT4-fs (sda1): Remounting filesystem read-only [ 69.226495][ T279] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 69.236300][ T2717] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.9.880: Detected aborted journal [ 69.238649][ T2718] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.882: Detected aborted journal [ 69.244584][ T2715] EXT4-fs error (device sda1) in __ext4_new_inode:1094: Journal has aborted [ 69.255633][ T2718] EXT4-fs (sda1): Remounting filesystem read-only [ 69.268446][ T2717] EXT4-fs (sda1): Remounting filesystem read-only [ 69.278530][ T2719] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.8.881: Detected aborted journal [ 69.286040][ T279] EXT4-fs (sda1): Remounting filesystem read-only [ 69.294165][ T2718] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.882: Detected aborted journal [ 69.301645][ T279] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 69.310368][ T2716] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.5.879: Detected aborted journal [ 69.316952][ T2717] EXT4-fs (sda1): Remounting filesystem read-only [ 69.327132][ T2719] EXT4-fs (sda1): Remounting filesystem read-only [ 69.338205][ T279] EXT4-fs (sda1): Remounting filesystem read-only [ 69.349117][ T2718] EXT4-fs (sda1): Remounting filesystem read-only [ 69.360538][ T279] EXT4-fs (sda1): Remounting filesystem read-only [ 69.364667][ T2721] bridge0: port 3(syz_tun) entered blocking state [ 69.389855][ T2721] bridge0: port 3(syz_tun) entered disabled state [ 69.397002][ T2721] device syz_tun entered promiscuous mode [ 70.414450][ T28] audit: type=1400 audit(1793808232.826:781): avc: denied { mounton } for pid=2735 comm="syz.9.887" path="/17/file0/file0" dev="ramfs" ino=27652 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 70.464830][ T28] audit: type=1400 audit(1793808232.886:782): avc: denied { unmount } for pid=2362 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 70.542784][ T2734] x86/PAT: syz.8.885:2734 freeing invalid memtype [mem 0xfe004000-0xfe004fff] [ 74.085116][ T2758] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 74.102290][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 74.114907][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.135921][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 74.145069][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.153337][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.161801][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.171063][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.179668][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.331458][ T2757] EXT4-fs error: 79 callbacks suppressed [ 74.331479][ T2757] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.9.897: Detected aborted journal [ 74.348330][ T2757] EXT4-fs: 68 callbacks suppressed [ 74.348345][ T2757] EXT4-fs (sda1): Remounting filesystem read-only [ 74.360363][ T2757] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.9.897: Detected aborted journal [ 74.371458][ T2757] EXT4-fs (sda1): Remounting filesystem read-only [ 75.442405][ T103] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #259: comm udevd: reading directory lblock 0 [ 75.459213][ T103] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0 [ 75.470936][ T103] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0 [ 75.482546][ T103] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0 [ 75.494191][ T103] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #1642: comm udevd: reading directory lblock 0 [ 75.506043][ T103] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #1480: comm udevd: reading directory lblock 0 [ 75.537549][ T279] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 75.549743][ T2764] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.5.899: Detected aborted journal [ 75.568921][ T2763] EXT4-fs (sda1): Remounting filesystem read-only [ 75.575419][ T2764] EXT4-fs (sda1): Remounting filesystem read-only [ 75.579904][ T279] EXT4-fs (sda1): Remounting filesystem read-only [ 75.588699][ T2764] EXT4-fs (sda1): Remounting filesystem read-only [ 75.595937][ T2764] EXT4-fs (sda1): Remounting filesystem read-only [ 75.602971][ T279] EXT4-fs (sda1): Remounting filesystem read-only [ 75.609849][ T2764] EXT4-fs (sda1): Remounting filesystem read-only [ 75.616807][ T279] EXT4-fs (sda1): Remounting filesystem read-only [ 75.808930][ T2767] loop9: detected capacity change from 0 to 40427 [ 75.816317][ T2767] F2FS-fs (loop9): invalid crc value [ 75.842335][ T2767] F2FS-fs (loop9): Found nat_bits in checkpoint [ 75.885904][ T2767] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e4 [ 76.051212][ T2767] syz.9.900: attempt to access beyond end of device [ 76.051212][ T2767] loop9: rw=2049, sector=53248, nr_sectors = 2192 limit=40427 [ 76.071452][ T2767] syz.9.900: attempt to access beyond end of device [ 76.071452][ T2767] loop9: rw=2049, sector=55440, nr_sectors = 1904 limit=40427 [ 76.093393][ T2767] syz.9.900: attempt to access beyond end of device [ 76.093393][ T2767] loop9: rw=2049, sector=49152, nr_sectors = 2064 limit=40427 [ 76.112767][ T2767] syz.9.900: attempt to access beyond end of device [ 76.112767][ T2767] loop9: rw=2049, sector=51216, nr_sectors = 8 limit=40427 [ 76.227333][ T2362] syz-executor: attempt to access beyond end of device [ 76.227333][ T2362] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 77.147225][ T28] audit: type=1400 audit(1793808239.566:783): avc: denied { read } for pid=2778 comm="syz.5.902" name="usbmon2" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 77.187075][ T28] audit: type=1400 audit(1793808239.566:784): avc: denied { open } for pid=2778 comm="syz.5.902" path="/dev/usbmon2" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 77.220211][ T28] audit: type=1400 audit(1793808239.566:785): avc: denied { map } for pid=2778 comm="syz.5.902" path="/dev/usbmon2" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 77.243956][ T28] audit: type=1400 audit(1793808239.586:786): avc: denied { name_bind } for pid=2780 comm="syz.4.904" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 80.513303][ T279] EXT4-fs error: 61 callbacks suppressed [ 80.513324][ T279] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 80.536558][ T2798] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 80.547794][ T279] EXT4-fs: 46 callbacks suppressed [ 80.547809][ T279] EXT4-fs (sda1): Remounting filesystem read-only [ 80.559521][ T2798] EXT4-fs (sda1): Remounting filesystem read-only [ 80.566315][ T279] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 80.577607][ T2798] EXT4-fs error (device sda1) in __ext4_new_inode:1094: Journal has aborted [ 80.589292][ T279] EXT4-fs (sda1): Remounting filesystem read-only [ 80.599495][ T2799] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.5.909: Detected aborted journal [ 80.613383][ T279] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 80.614121][ T2800] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.9.910: Detected aborted journal [ 80.624934][ T2799] EXT4-fs (sda1): Remounting filesystem read-only [ 80.642597][ T279] EXT4-fs (sda1): Remounting filesystem read-only [ 80.652878][ T2801] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.911: Detected aborted journal [ 80.655865][ T2800] EXT4-fs (sda1): Remounting filesystem read-only [ 80.664936][ T2801] EXT4-fs (sda1): Remounting filesystem read-only [ 80.677441][ T2799] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.5.909: Detected aborted journal [ 80.690016][ T2801] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.911: Detected aborted journal [ 80.701167][ T2799] EXT4-fs (sda1): Remounting filesystem read-only [ 80.707699][ T2801] EXT4-fs (sda1): Remounting filesystem read-only [ 80.714332][ T2801] EXT4-fs (sda1): Remounting filesystem read-only [ 80.746952][ T28] audit: type=1400 audit(1793808243.166:787): avc: denied { append } for pid=2801 comm="syz.4.911" name="001" dev="devtmpfs" ino=185 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 82.474921][ T2809] netlink: 24 bytes leftover after parsing attributes in process `syz.9.913'. [ 82.489513][ T28] audit: type=1400 audit(1793808244.906:788): avc: denied { map } for pid=2810 comm="syz.4.914" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 84.445554][ T2820] loop4: detected capacity change from 0 to 128 [ 84.453070][ T2820] FAT-fs (loop4): Directory bread(block 162) failed [ 84.477332][ T2820] FAT-fs (loop4): Directory bread(block 163) failed [ 84.484672][ T2820] FAT-fs (loop4): Directory bread(block 164) failed [ 84.491746][ T2820] FAT-fs (loop4): Directory bread(block 165) failed [ 84.508723][ T2820] FAT-fs (loop4): Directory bread(block 166) failed [ 84.515850][ T2820] FAT-fs (loop4): Directory bread(block 167) failed [ 84.522557][ T2820] FAT-fs (loop4): Directory bread(block 168) failed [ 84.529531][ T2820] FAT-fs (loop4): Directory bread(block 169) failed [ 84.536380][ T2820] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 84.714507][ T309] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 84.722877][ T2820] FAT-fs (loop4): Directory bread(block 162) failed [ 84.732016][ T2820] FAT-fs (loop4): Directory bread(block 163) failed [ 84.738997][ T2820] syz.4.917: attempt to access beyond end of device [ 84.738997][ T2820] loop4: rw=3, sector=226, nr_sectors = 6 limit=128 [ 84.752281][ T2820] syz.4.917: attempt to access beyond end of device [ 84.752281][ T2820] loop4: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 84.917177][ T309] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 84.928313][ T309] usb 10-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 84.941251][ T309] usb 10-1: New USB device found, idVendor=0a12, idProduct=0001, bcdDevice= 0.00 [ 84.950627][ T309] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.958939][ T309] usb 10-1: Product: syz [ 84.963210][ T309] usb 10-1: Manufacturer: syz [ 84.968140][ T309] usb 10-1: SerialNumber: syz [ 84.980477][ T103] udevd[103]: worker [2821] terminated by signal 7 (Bus error) [ 84.988192][ T103] udevd[103]: worker [2821] failed while handling '/devices/platform/dummy_hcd.9/usb10/10-1' [ 85.004672][ T103] udevd[103]: worker [2824] terminated by signal 7 (Bus error) [ 85.012542][ T103] udevd[103]: worker [2824] failed while handling '/devices/platform/dummy_hcd.9/usb10/10-1' [ 85.354076][ T24] usb 10-1: USB disconnect, device number 2 [ 85.652177][ T2817] EXT4-fs error: 51 callbacks suppressed [ 85.652203][ T2817] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.9.916: Detected aborted journal [ 85.670254][ T2817] EXT4-fs: 36 callbacks suppressed [ 85.670267][ T2817] EXT4-fs (sda1): Remounting filesystem read-only [ 85.682116][ T2817] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.9.916: Detected aborted journal [ 85.693425][ T2817] EXT4-fs (sda1): Remounting filesystem read-only [ 86.453977][ T279] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 86.471501][ T2829] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 86.483811][ T279] EXT4-fs (sda1): Remounting filesystem read-only [ 86.494294][ T2830] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.5.918: Detected aborted journal [ 86.496690][ T2831] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.9.919: Detected aborted journal [ 86.515202][ T2830] EXT4-fs (sda1): Remounting filesystem read-only [ 86.516304][ T279] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 86.523301][ T2830] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.5.918: Detected aborted journal [ 86.533594][ T2829] EXT4-fs (sda1): Remounting filesystem read-only [ 86.533609][ T2829] EXT4-fs error (device sda1) in __ext4_new_inode:1094: Journal has aborted [ 86.536003][ T2831] EXT4-fs (sda1): Remounting filesystem read-only [ 86.566226][ T279] EXT4-fs (sda1): Remounting filesystem read-only [ 86.574591][ T2830] EXT4-fs (sda1): Remounting filesystem read-only [ 86.576065][ T2833] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.920: Detected aborted journal [ 86.592029][ T279] EXT4-fs (sda1): Remounting filesystem read-only SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: repeatedly failed to execute the program proc=0 req=859 state=1 status=67 (errno 9: Bad file descriptor) [ 86.598932][ T28] audit: type=1400 audit(1793808249.016:789): avc: denied { write } for pid=279 comm="syz-executor" path="pipe:[14130]" dev="pipefs" ino=14130 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 86.604602][ T279] EXT4-fs (sda1): Remounting filesystem read-only [ 86.727129][ T288] device syz_tun left promiscuous mode [ 86.732641][ T288] bridge0: port 3(syz_tun) entered disabled state [ 86.922286][ T10] tipc: Left network mode [ 87.395105][ T10] device bridge_slave_1 left promiscuous mode [ 87.401223][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.408779][ T10] device bridge_slave_0 left promiscuous mode [ 87.414968][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.422765][ T10] device veth1_macvtap left promiscuous mode [ 87.428830][ T10] device veth0_vlan left promiscuous mode [ 94.357064][ T187] EXT4-fs error: 81 callbacks suppressed [ 94.357078][ T187] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #121: comm crond: reading directory lblock 0 [ 94.374238][ T187] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #116: comm crond: reading directory lblock 0 [ 94.385705][ T187] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #116: comm crond: reading directory lblock 0 [ 94.397115][ T187] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #116: comm crond: reading directory lblock 0 [ 94.408554][ T187] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #116: comm crond: reading directory lblock 0 [ 94.420015][ T187] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #116: comm crond: reading directory lblock 0