7371fc3cec3fb6198001c4a40b72db9847eb6ec55705413fa8fc3d4cf323e1f676a794a83dc1fba2b6247129c104c480362c6c408cd7c5c93c4b506b182387a3cf3be82708ff340a5a60230d785372fa11a53b0c3e4a5b4217778b1d39077bad402ffce17cf944d5916c59d5f14595c2d1f4a3cddaa366424fc6ccfa07643037d97ad91fecd3372c6076a220c12bda835f0169876777733ebb28744674ba34258799f267dd3c6c1af2a57539a3ae0071c1ee5a50821bc5226346a954aee936c9fbf55ce9c461ac4849cfd4b8130d36d6de31aace9621b4187b433151e58447a783cb86b0857092ede342887f1794086ce0f62c9815c64dd", 0x1ae}], 0x2}}], 0x1, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000040)="4a54f946f24cd443e2f99881ce2f9df0373e4749400d94fb0f565ded8c8bd1ca11909db378e59da635a858c3f37fbbffe48564603d0676eeda7bc0a11c49dbfd0f223ba5e6399291516c1cf7aac0d412f2b312daafd5f3", 0x57}, {&(0x7f00000000c0)="284f285a991e9d381476c542cf1431255694815585482a0089aad507402bf60ac633e5f59e4cb413e34361af5902f96d463f2cf26079b0bbb3409fcd8340f8c06b37307c2e72d0e93016623e90d8a784457aa1c38d5774b9aea9bb419cb17f5d228e7a249dcd0f1929c892411cf6e4b8449dded9a1be9af96f1ed45dccd1fbc6f562153bd7b1b07562bd27427c611bfc51beeb6a158740d4e9273d760efbd9b61fa2c505cf3dc8fe84bc298924a85d61eb42ea2014783b18b256fbc626aa8f6168ab5cd2c80c44628aa9f462", 0xcc}, {&(0x7f00000001c0)="6a4fd2ab032d5806bb543d15a29a3e546b76d7eb4e6d8deb936523ff6993112901f5ceadd82d0a1776c3ef35ef9565fdd41a6ab614627ddfd990f3a2a43f8615e741e3eda91b8667f97508119aa38447dd6ed506d629887a5d3f8dab9e13ea381e6b7d7680e36429230b2cf0ccd83b7eb3dc5fca9604fee8cb510454f54d0eb0", 0x80}], 0x3) sendto$inet(r0, &(0x7f0000000b80)="e7", 0x1, 0x2000c081, 0x0, 0x0) recvmmsg(r0, &(0x7f000000a400)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000002600)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000680)="e1", 0x1, 0x4040811, 0x0, 0x0) [ 448.450752][ T7981] loop3: detected capacity change from 0 to 24 23:38:23 executing program 2: syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2804c00, &(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x1, 0x750, &(0x7f0000001640)="$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") chdir(&(0x7f0000000080)='./file0\x00') open(&(0x7f00000000c0)='./bus\x00', 0x14da42, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000180)='./bus\x00', 0x0, 0x1000, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x208e24b) 23:38:23 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x488, 0x0, 0x58ab01a0ffffffff}]}) [ 448.492248][ T3683] EXT4-fs (loop5): unmounting filesystem. [ 448.567073][ T3674] EXT4-fs (loop2): unmounting filesystem. 23:38:23 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) sendmmsg$inet(r0, &(0x7f0000000400)=[{{0x0, 0xffffffffffffffba, &(0x7f0000000a00)=[{&(0x7f0000000480)="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", 0x1af}, {&(0x7f0000004200)="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", 0x1ae}], 0x2}}], 0x1, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000040)="4a54f946f24cd443e2f99881ce2f9df0373e4749400d94fb0f565ded8c8bd1ca11909db378e59da635a858c3f37fbbffe48564603d0676eeda7bc0a11c49dbfd0f223ba5e6399291516c1cf7aac0d412f2b312daafd5f3", 0x57}, {&(0x7f00000000c0)="284f285a991e9d381476c542cf1431255694815585482a0089aad507402bf60ac633e5f59e4cb413e34361af5902f96d463f2cf26079b0bbb3409fcd8340f8c06b37307c2e72d0e93016623e90d8a784457aa1c38d5774b9aea9bb419cb17f5d228e7a249dcd0f1929c892411cf6e4b8449dded9a1be9af96f1ed45dccd1fbc6f562153bd7b1b07562bd27427c611bfc51beeb6a158740d4e9273d760efbd9b61fa2c505cf3dc8fe84bc298924a85d61eb42ea2014783b18b256fbc626aa8f6168ab5cd2c80c44628aa9f462", 0xcc}, {&(0x7f00000001c0)="6a4fd2ab032d5806bb543d15a29a3e546b76d7eb4e6d8deb936523ff6993112901f5ceadd82d0a1776c3ef35ef9565fdd41a6ab614627ddfd990f3a2a43f8615e741e3eda91b8667f97508119aa38447dd6ed506d629887a5d3f8dab9e13ea381e6b7d7680e36429230b2cf0ccd83b7eb3dc5fca9604fee8cb510454f54d0eb0", 0x80}], 0x3) sendto$inet(r0, &(0x7f0000000b80)="e7", 0x1, 0x2000c081, 0x0, 0x0) recvmmsg(r0, &(0x7f000000a400)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000002600)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000680)="e1", 0x1, 0x4040811, 0x0, 0x0) [ 448.865092][ T7990] loop2: detected capacity change from 0 to 2048 [ 448.893272][ T3676] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 23:38:24 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x488, 0x0, 0x58ab01a0ffffffff}]}) 23:38:24 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) sendmmsg$inet(r0, &(0x7f0000000400)=[{{0x0, 0xffffffffffffffba, &(0x7f0000000a00)=[{&(0x7f0000000480)="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", 0x1af}, {&(0x7f0000004200)="5db873a6a30690335f87503395aa2fb0cf06b5b0893f8a4db831c502e9e6aa0581c354b5efcd6521f6b466e97e10c8e870086f2d9991dc2a5b0c7871dcc8e3c7b540140551f34f207560fbc761add5550e17fa84890e67a4cca94bebba371e7733393cd795fd4b38201ab9bec1c3ff7ec1ced94bf518782b3368e57d7a2806e6b94396abb7918cd3a18eac29bb3bbb28804d323a7e4b26a448067434795be64fda1b47a2e7e6e024a7e122d54b2aa568f49aedd517c667371fc3cec3fb6198001c4a40b72db9847eb6ec55705413fa8fc3d4cf323e1f676a794a83dc1fba2b6247129c104c480362c6c408cd7c5c93c4b506b182387a3cf3be82708ff340a5a60230d785372fa11a53b0c3e4a5b4217778b1d39077bad402ffce17cf944d5916c59d5f14595c2d1f4a3cddaa366424fc6ccfa07643037d97ad91fecd3372c6076a220c12bda835f0169876777733ebb28744674ba34258799f267dd3c6c1af2a57539a3ae0071c1ee5a50821bc5226346a954aee936c9fbf55ce9c461ac4849cfd4b8130d36d6de31aace9621b4187b433151e58447a783cb86b0857092ede342887f1794086ce0f62c9815c64dd", 0x1ae}], 0x2}}], 0x1, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000040)="4a54f946f24cd443e2f99881ce2f9df0373e4749400d94fb0f565ded8c8bd1ca11909db378e59da635a858c3f37fbbffe48564603d0676eeda7bc0a11c49dbfd0f223ba5e6399291516c1cf7aac0d412f2b312daafd5f3", 0x57}, {&(0x7f00000000c0)="284f285a991e9d381476c542cf1431255694815585482a0089aad507402bf60ac633e5f59e4cb413e34361af5902f96d463f2cf26079b0bbb3409fcd8340f8c06b37307c2e72d0e93016623e90d8a784457aa1c38d5774b9aea9bb419cb17f5d228e7a249dcd0f1929c892411cf6e4b8449dded9a1be9af96f1ed45dccd1fbc6f562153bd7b1b07562bd27427c611bfc51beeb6a158740d4e9273d760efbd9b61fa2c505cf3dc8fe84bc298924a85d61eb42ea2014783b18b256fbc626aa8f6168ab5cd2c80c44628aa9f462", 0xcc}, {&(0x7f00000001c0)="6a4fd2ab032d5806bb543d15a29a3e546b76d7eb4e6d8deb936523ff6993112901f5ceadd82d0a1776c3ef35ef9565fdd41a6ab614627ddfd990f3a2a43f8615e741e3eda91b8667f97508119aa38447dd6ed506d629887a5d3f8dab9e13ea381e6b7d7680e36429230b2cf0ccd83b7eb3dc5fca9604fee8cb510454f54d0eb0", 0x80}], 0x3) sendto$inet(r0, &(0x7f0000000b80)="e7", 0x1, 0x2000c081, 0x0, 0x0) recvmmsg(r0, &(0x7f000000a400)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000002600)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000680)="e1", 0x1, 0x4040811, 0x0, 0x0) [ 448.931171][ T3676] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 448.998225][ T3676] Buffer I/O error on dev loop2, logical block 0, async page read [ 449.067615][ T7990] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 449.078414][ T7990] ext4 filesystem being mounted at /root/syzkaller-testdir3713254227/syzkaller.IcAci9/264/bus supports timestamps until 2038 (0x7fffffff) 23:38:24 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) sendmmsg$inet(r0, &(0x7f0000000400)=[{{0x0, 0xffffffffffffffba, &(0x7f0000000a00)=[{&(0x7f0000000480)="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", 0x1af}, {&(0x7f0000004200)="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", 0x1ae}], 0x2}}], 0x1, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000040)="4a54f946f24cd443e2f99881ce2f9df0373e4749400d94fb0f565ded8c8bd1ca11909db378e59da635a858c3f37fbbffe48564603d0676eeda7bc0a11c49dbfd0f223ba5e6399291516c1cf7aac0d412f2b312daafd5f3", 0x57}, {&(0x7f00000000c0)="284f285a991e9d381476c542cf1431255694815585482a0089aad507402bf60ac633e5f59e4cb413e34361af5902f96d463f2cf26079b0bbb3409fcd8340f8c06b37307c2e72d0e93016623e90d8a784457aa1c38d5774b9aea9bb419cb17f5d228e7a249dcd0f1929c892411cf6e4b8449dded9a1be9af96f1ed45dccd1fbc6f562153bd7b1b07562bd27427c611bfc51beeb6a158740d4e9273d760efbd9b61fa2c505cf3dc8fe84bc298924a85d61eb42ea2014783b18b256fbc626aa8f6168ab5cd2c80c44628aa9f462", 0xcc}, {&(0x7f00000001c0)="6a4fd2ab032d5806bb543d15a29a3e546b76d7eb4e6d8deb936523ff6993112901f5ceadd82d0a1776c3ef35ef9565fdd41a6ab614627ddfd990f3a2a43f8615e741e3eda91b8667f97508119aa38447dd6ed506d629887a5d3f8dab9e13ea381e6b7d7680e36429230b2cf0ccd83b7eb3dc5fca9604fee8cb510454f54d0eb0", 0x80}], 0x3) sendto$inet(r0, &(0x7f0000000b80)="e7", 0x1, 0x2000c081, 0x0, 0x0) recvmmsg(r0, &(0x7f000000a400)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000002600)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000680)="e1", 0x1, 0x4040811, 0x0, 0x0) 23:38:24 executing program 3: syz_mount_image$romfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8303, &(0x7f0000000240)=ANY=[@ANYRES64=0x0], 0x1, 0x160, &(0x7f0000004400)="$eJzs2r9Kw1AUBvAjLQodHV0sVKKgbf5pXXUUN98gtLlp8MaURJB2chMnQeE6+BKKT+AjZHTTRcSXiMRcapuozSCNwvdb+tFzk9ycwJ1OM/A9nYVNoo3+5cHLYuB79ba53WE6syi1R0T1JERxfN2inKdRPYqp9cWCcq28pb+NNUfsnzOX20bZWwIAAAAAAAAAAAAAAAAAAAAAgIKUmgy1nvDOmMttfawaDoaHFud2EGavq8xui6VS6nKGi5jgN0l/zIn6+vI8KTtJcsVukNS1yeuvZFjtCf6c7a967PXVcDBsup7l2I59ZBhmW9vUtC1D/biXmr2jciv3RFF8r+XHyZSxebPHIvNm8vtXl1xxcZJ92uf3R/gmEBVd7DtpU/OluSpRkWfdEVG+9Fp+ExB+JVSnrqnQH9nq1HPlXzgdnX/UXTAbD8n51+r4vCv/nEU7S3x9APjBewAAAP//bM0zUA==") r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000002340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}}) read$FUSE(r0, &(0x7f00000002c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1}, 0x50) chmod(&(0x7f0000002300)='./file0\x00', 0x0) write$FUSE_ATTR(r0, &(0x7f0000006500)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) [ 449.232778][ T27] kauditd_printk_skb: 19 callbacks suppressed [ 449.232794][ T27] audit: type=1800 audit(1679269104.428:54): pid=7990 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 449.410653][ T8009] loop3: detected capacity change from 0 to 24 [ 449.436908][ T3674] EXT4-fs (loop2): unmounting filesystem. [ 449.449034][ T3676] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 449.548184][ T7934] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 449.586277][ T7966] loop4: detected capacity change from 0 to 32768 [ 449.594933][ T7966] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (7966) [ 449.614994][ T7966] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 449.624710][ T7966] BTRFS info (device loop4): turning on sync discard [ 449.637505][ T7966] BTRFS info (device loop4): using free space tree 23:38:24 executing program 4: syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./bus\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="646973636172642c0008fd346f1fe0c7b977cf98b0dfc801ecf9a88e1ae482"], 0x1, 0x559d, &(0x7f0000005680)="$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") open(0x0, 0x14d27e, 0x0) mount(0x0, &(0x7f0000000040)='.\x00', 0x0, 0x1188432, 0x0) [ 449.675102][ T7966] BTRFS info (device loop4): enabling ssd optimizations [ 450.158209][ T7934] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 450.167501][ T7934] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.177179][ T7934] usb 2-1: Product: syz [ 450.182107][ T7934] usb 2-1: Manufacturer: syz [ 450.186984][ T7934] usb 2-1: SerialNumber: syz [ 450.240402][ T7934] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 450.514646][ T8032] loop4: detected capacity change from 0 to 32768 [ 450.527503][ T8032] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (8032) [ 450.565364][ T8032] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 450.585550][ T8032] BTRFS info (device loop4): turning on sync discard [ 450.592797][ T8032] BTRFS info (device loop4): using free space tree [ 450.636556][ T8032] BTRFS info (device loop4): enabling ssd optimizations [ 450.977817][ T7761] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 452.048046][ T7761] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 452.055698][ T7761] ath9k_htc: Failed to initialize the device 23:38:27 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="a8"], 0xa8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 23:38:27 executing program 5: syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x3000480, &(0x7f0000000000)=ANY=[], 0x1, 0x76a, &(0x7f0000000fc0)="$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") r0 = open(&(0x7f0000002000)='./bus\x00', 0x143142, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x147042, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r1, 0x0, 0x1000000201005) 23:38:27 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x488, 0x0, 0x58ab01a0ffffffff}]}) 23:38:27 executing program 3: syz_mount_image$romfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8303, &(0x7f0000000240)=ANY=[@ANYRES64=0x0], 0x1, 0x160, &(0x7f0000004400)="$eJzs2r9Kw1AUBvAjLQodHV0sVKKgbf5pXXUUN98gtLlp8MaURJB2chMnQeE6+BKKT+AjZHTTRcSXiMRcapuozSCNwvdb+tFzk9ycwJ1OM/A9nYVNoo3+5cHLYuB79ba53WE6syi1R0T1JERxfN2inKdRPYqp9cWCcq28pb+NNUfsnzOX20bZWwIAAAAAAAAAAAAAAAAAAAAAgIKUmgy1nvDOmMttfawaDoaHFud2EGavq8xui6VS6nKGi5jgN0l/zIn6+vI8KTtJcsVukNS1yeuvZFjtCf6c7a967PXVcDBsup7l2I59ZBhmW9vUtC1D/biXmr2jciv3RFF8r+XHyZSxebPHIvNm8vtXl1xxcZJ92uf3R/gmEBVd7DtpU/OluSpRkWfdEVG+9Fp+ExB+JVSnrqnQH9nq1HPlXzgdnX/UXTAbD8n51+r4vCv/nEU7S3x9APjBewAAAP//bM0zUA==") r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000002340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}}) read$FUSE(r0, &(0x7f00000002c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1}, 0x50) chmod(&(0x7f0000002300)='./file0\x00', 0x0) write$FUSE_ATTR(r0, &(0x7f0000006500)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) 23:38:27 executing program 2: syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2804c00, &(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x1, 0x750, &(0x7f0000001640)="$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") chdir(&(0x7f0000000080)='./file0\x00') open(&(0x7f00000000c0)='./bus\x00', 0x14da42, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000180)='./bus\x00', 0x0, 0x1000, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x208e24b) 23:38:27 executing program 4: syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./bus\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="646973636172642c0008fd346f1fe0c7b977cf98b0dfc801ecf9a88e1ae482"], 0x1, 0x559d, &(0x7f0000005680)="$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") open(0x0, 0x14d27e, 0x0) mount(0x0, &(0x7f0000000040)='.\x00', 0x0, 0x1188432, 0x0) [ 452.203231][ T7934] usb 2-1: USB disconnect, device number 4 [ 452.223378][ T7934] usb 2-1: ath9k_htc: USB layer deinitialized [ 452.274076][ T8055] loop3: detected capacity change from 0 to 24 [ 452.361807][ T8057] loop5: detected capacity change from 0 to 2048 23:38:27 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x488, 0x0, 0x58ab01a0ffffffff}]}) [ 452.445327][ T8061] loop2: detected capacity change from 0 to 2048 [ 452.476995][ T8057] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. 23:38:27 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="a8"], 0xa8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) [ 452.593061][ T8061] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 452.640233][ T8061] ext4 filesystem being mounted at /root/syzkaller-testdir3713254227/syzkaller.IcAci9/265/bus supports timestamps until 2038 (0x7fffffff) [ 452.676313][ T8057] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1098: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 452.730116][ T8057] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 32 with error 28 [ 452.750102][ T27] audit: type=1800 audit(1679269107.938:55): pid=8061 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 452.763260][ T8057] EXT4-fs (loop5): This should not happen!! Data will be lost [ 452.763260][ T8057] 23:38:28 executing program 0: mkdir(&(0x7f00000010c0)='./file0\x00', 0x1) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x2000, 0x61) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(r2, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x84, 0x30, 0xffff, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x808}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x84}}, 0x0) 23:38:28 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="a8"], 0xa8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 23:38:28 executing program 2: syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2804c00, &(0x7f0000000440)=ANY=[@ANYBLOB="0089f2832730bf994f589885cc769fe9ff0f61f46abebbde12c300000000000000004f9ccb1bb434bfd3000098c94e056c0850980a0083cfe8b422987b7600000000f2935e176297b1084a51bd8f968f05a5d657832ff1431d562136b4da360117f775000000000000000000bba7dc7fca7c1cd1d8d0ef487a658a9ca8d9a97746736798562fb2ab78afa0ce15449e2877793e468974c829bdec6fa55dffee9d4a3d79f24219472a8fb1c383f3b607bd1eb995de5c8740ff8b61a5e6c4e8262c2768c29627aa0589727acdfa3ae7615abd1db448fac33f7a6ba8b3273bf02c2c7bc56ac9ec78f92dfa51dbfd5317d5a0a7dbeb3d71a5680cb3a3a12583309f597e509a6ed8510ed554af64d97e13357959bb7f428cb3", @ANYRESDEC], 0x1, 0x750, &(0x7f0000001640)="$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") chdir(&(0x7f0000000080)='./file0\x00') open(&(0x7f00000000c0)='./bus\x00', 0x14da42, 0x0) r0 = open(&(0x7f0000000400)='./bus\x00', 0x14113e, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r1, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) [ 452.859387][ T8057] EXT4-fs (loop5): Total free blocks count 0 [ 452.885778][ T8057] EXT4-fs (loop5): Free/Dirty block details [ 452.898111][ T8057] EXT4-fs (loop5): free_blocks=2415919104 23:38:28 executing program 0: mkdir(&(0x7f00000010c0)='./file0\x00', 0x1) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x2000, 0x61) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(r2, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x84, 0x30, 0xffff, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x808}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x84}}, 0x0) [ 452.942887][ T8057] EXT4-fs (loop5): dirty_blocks=32 [ 452.959887][ T3674] EXT4-fs (loop2): unmounting filesystem. [ 452.978209][ T8057] EXT4-fs (loop5): Block reservation details [ 452.990158][ T8057] EXT4-fs (loop5): i_reserved_data_blocks=2 23:38:28 executing program 5: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB='$'], 0x24}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f00000000c0)={0x2}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x40000072}]}) 23:38:28 executing program 0: mkdir(&(0x7f00000010c0)='./file0\x00', 0x1) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x2000, 0x61) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(r2, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x84, 0x30, 0xffff, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x808}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x84}}, 0x0) 23:38:28 executing program 3: syz_mount_image$romfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8303, &(0x7f0000000240)=ANY=[@ANYRES64=0x0], 0x1, 0x160, &(0x7f0000004400)="$eJzs2r9Kw1AUBvAjLQodHV0sVKKgbf5pXXUUN98gtLlp8MaURJB2chMnQeE6+BKKT+AjZHTTRcSXiMRcapuozSCNwvdb+tFzk9ycwJ1OM/A9nYVNoo3+5cHLYuB79ba53WE6syi1R0T1JERxfN2inKdRPYqp9cWCcq28pb+NNUfsnzOX20bZWwIAAAAAAAAAAAAAAAAAAAAAgIKUmgy1nvDOmMttfawaDoaHFud2EGavq8xui6VS6nKGi5jgN0l/zIn6+vI8KTtJcsVukNS1yeuvZFjtCf6c7a967PXVcDBsup7l2I59ZBhmW9vUtC1D/biXmr2jciv3RFF8r+XHyZSxebPHIvNm8vtXl1xxcZJ92uf3R/gmEBVd7DtpU/OluSpRkWfdEVG+9Fp+ExB+JVSnrqnQH9nq1HPlXzgdnX/UXTAbD8n51+r4vCv/nEU7S3x9APjBewAAAP//bM0zUA==") r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000002340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}}) read$FUSE(r0, &(0x7f00000002c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1}, 0x50) chmod(&(0x7f0000002300)='./file0\x00', 0x0) write$FUSE_ATTR(r0, &(0x7f0000006500)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) 23:38:28 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="a8"], 0xa8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) [ 453.142502][ T3683] EXT4-fs (loop5): unmounting filesystem. 23:38:28 executing program 0: mkdir(&(0x7f00000010c0)='./file0\x00', 0x1) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x2000, 0x61) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(r2, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x84, 0x30, 0xffff, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x808}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x84}}, 0x0) [ 453.284371][ T8092] loop3: detected capacity change from 0 to 24 [ 453.328233][ T8089] loop2: detected capacity change from 0 to 2048 [ 453.441468][ T8089] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 453.452685][ T8089] ext4 filesystem being mounted at /root/syzkaller-testdir3713254227/syzkaller.IcAci9/266/bus supports timestamps until 2038 (0x7fffffff) [ 453.529298][ T27] audit: type=1800 audit(1679269108.728:56): pid=8089 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 453.596475][ T3674] EXT4-fs (loop2): unmounting filesystem. [ 453.679238][ T8059] loop4: detected capacity change from 0 to 32768 [ 453.702134][ T8059] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (8059) [ 453.739679][ T8059] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 453.749442][ T8059] BTRFS info (device loop4): turning on sync discard [ 453.756166][ T8059] BTRFS info (device loop4): using free space tree [ 453.785806][ T8059] BTRFS info (device loop4): enabling ssd optimizations 23:38:29 executing program 4: syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./bus\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="646973636172642c0008fd346f1fe0c7b977cf98b0dfc801ecf9a88e1ae482"], 0x1, 0x559d, &(0x7f0000005680)="$eJzs3X1sVWcdB/BzeynlJaFlyjLUhfkPThCpmFiEoEVgAoPRgSbDwCgO2BAGhQRhY9OOOZ0jk4Y5xoovDKQCxq6+rJiYIbqIcU4mi8OGEXnJIuICK4yoJNOZ3nufy73n0vYO5zq3z4e05z73d57nPPfk/HG/lz7nRgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABBF0cHlC/627gfLv/nQdSenbLz/zAMnap57fNP4u+fsHnX4gVVXtp1uaip99fmzNyy67+GqoSf2zD8URYlUv0Sm/7xPTZ65aNa86X3CgLU3prcVFZ0dMt31WLrRO+/Jjn75P/OjKCqNDZDMbCf1z2kn4geIVhYO2KXtVWNWDdw4cdrmssmDFibrGgtfOh369PQEekrmunrx4rVUnfpdEtsj28659BJ5l2i6f/yCe1NeBADwulTWpDbZt6OZt7jZdn28HmtXx9oNsXZ4h9CQ27gc6XF7dzbPa+L1HppndToqlHU6z1g9c/6z7Zp4/1g7FjVexzzzd81Emj6dzbMuVu+peQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC8ldx9/JanSzb96H1L149MHh887BdfbdryvUnt5VO+tm9D2+9bn3tPU1Ppq8+fvWHRfQ9XDT2xZ/6hKKpI9Uukuyfm7mjd8LMVU1b/fM6jzefee8euZGbcsO2Vs3PUFh58vDyKPp9TeTEMe2pAFNXkF1LN6NHCwuLUgymhAAAAwNvJ4NTvkmw7HQdL89qJVJpMpP4F6bC4vWrMqoEbJ07bXDZ50MJkXePlj1fTyXjVlxwv2664+JPICcYh/sbHu1gPu64sGKdr8RHjeX7U0AuHj3x9+Ya1jf1P7u87MDnpV1+uHXzFnNGvXDt2zG1/fWRHQf6v6Dr/hzMn/wMAAPDfkP/j43Stu/w/7Mj9Z+469dN1tZ/ZNvf4+G/UDnhX5Zo/NX/4c+uHTZ3Y69iVWwry/zV5hyzI/2HGIf+XRJeX/wEAAOCt7H+d/6sLxulad/l/2ZoRf592YdbEJ8Zd+OGZO4f88uCRaG/9iC+03P6B/bP7DWj4SUH+rywu//fKnXZ48pkw4SXlUVRZ/EkFAAAA8oT/d7/40ULI6+lPDuJ5fc75g5NuLn3w7EdmXzt029Ehu9rP/2PJ8k0XRjfPGF716acrNhTk/+ri8n/pm/NyAQAAgCI8tfgTN+2Mpk/6UPU9h/cv2P5I/bK1K5c2liWm/ntl2/X/au5dkP9risv/ZT3zcgAAAIBLOPSlbbtfm7msdXhz2fmtf3jtz49fPXz1gabKoyt/O7B0RWvt4oL8X1tc/u+X2WZWPqQ77Q9/hfBQeRT16XhQly78Jmr4ZLYAAAAAvEFCTv/nsbaRO68r+/VT339586zvfHvQ3m/NONj43Qn9b5n44IEZB56sLcj/dV3f/z/c6SCs/8+7/1/B+v+cQvquf2PdGAAAAIB3osL1/OH2+OlvLujs+/eLXf9/4xdbXzp++/yvtL97yE3LXr7tils/Nv7UH6ffmdw57q6SqVNfOl2Q/+uLy//J3O0b+f1/AAAAcBn+377/b3bBOF3r7v7/Mx+752j7X14YN2Jm49pFJ8dv/PG8Lc88trvq6nMLbu77wWeX7i3I/w3F5f+w7Z/78vaF83NveRRd1fEgczfBXWG6S2KFltKcQvrEx3rMCj0yhZaynEJKXazHqPIoen/Hg/pYYWAoNMQK7QMyha2xwrOhkLkesoXmWGFfuNI2DchMN17YEwqZBRYtYQVF/+ySiFiPVzrr0VG4ZI8XsgcHAAB4RwnhOZNlS/ObUTzKtiS626FfdzuUdLdDsrsdesV2iO/Y2fNRbX4hPH9+zRO/q/xoyWcP3XrHhOEjF667t2HsgeTcCdc/uaPvuRWnR68uyP9bi8v/4VT0Tm86W/8fhfX/me81zK7/rw2FilihJRRq4ncMqAnHSIfd9eEYFTWZHu1XZQsAAADwthY+F0j28DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgP+zde5xU1Z0g8NNNP2homhbjK2JsdW1Fh6ZBUT/BB2omGmBNo+zMuPhohEaRVhBhIq5RULObxMEoKlFnRmEVRlZx8AVkNQE1ooloNI5mRh1DMGrcjR/FiH6yxrif7lunqLrVZRcCSjvf7x9dp+p3nrceXefeW+cCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/Max/9MYj/umiJ0eP2jBvwPJXDv/vH9YfumzRO//rT89ed9ve8763ftWSJZV/en7jSZO/c8PhjRtWTnghhJbOcmVJ8bLTF6/4waoLvvGtB0+76e5395y9tCpTbyYe+nb8Kc/cuTK2+tt+IawsC6EiHRhcmwQqM/drY30Da0PYKWwOZEu09UlKpBsOj9WEsDBsDmSr+lFNCLU5gXG/fGT1vI7E9TUh7B9CqE638e/VSRs16UBjVRLokw5Mq0gCH3ycyAZWlScB2GrxzZB90S9vyc9Q33W5Iq+/ym3Wsc9Xeni9YqK+eL63jt3OncpRlX6gZauetoLq2C4K3h5rvNt6wLutYDtf42nL/SKV+Yby8eZQdSif1DZ5wqz2mfGR8tDU1KtYTdvpeX5x4yUTtyTdY16HsQP12+R1+Pj5A+9c0Dhm15sf3jD59apnF2xtN4tt3u2tOmRecz3meYxG+jzpAW+/gm9JDb50hRBuP37T2799aez//dWDTw9+75tDzxrywitD627+7rR+f332/6m8ZerGgvl//SfP/+PLOd6W5+WOrX5Yl8zN4yO1MfF2XTI3BwAAgB6jJ+w1fWPEQW/Xrmt4eN+vr5h83qJ5r51+7p+rftp3wkEnnjL0+3fcOPW0gvl/Q2nH/+Mh/9rc0a4JYWRn4or+Ieze+XgSWBq7c1b/EPbpTLXkB45NBdaEsEdnYlC2qlSJ3rFEQyrwRl0mMDIVWBsDLanA4hi4JhW4MgaWpwITY2BNKnBcDIQp+eM4qC4zjpIDNTHQmmzE5fEshD/UxdZS2+qlbFUAAADbSGZ2WJl/N+dch63NEKeXy2u6yxDPwC6aoTpVQ3oGm51WFa2horsayrurITvuOZ88/IKay7qrueA0jLL8DO8deN/c1Q/8249vnHDYUwd92HrGy+tXPTp6U6+/e2fMjy8dN3/Y+IL5f/Mnz/+ru+hIWcHx/xDGdv6NucszkfZsvLUlLwMAAACwFSpeW3ryL+Z+VLbkZ+ds3P8vTxt3de8V++47YO3B9/2/hjcHHL9q/4L5/8jSzv+P+0R65WQO6+JuiKn9Q2jODyTVjigMJEe9+2YCAAAA0BNkj8dnj4VPydwmp2in59OF+Vu2MH888D+yy/yDx129rnn17adMGXHomjWbztj15WUbntpl/3deOPDk00+4f2rDPQXz/5bSzv/vk3+bdGJt7MV1/UPonRN4PPayI9CpIQbWH5MfyIx/bdwAV8WqMicmZKu6KpZojYHmVGBhsRLPZEvsnh/IPFnZxq/IjmNKpkROAAAAAD5zcXdAPC4fz/9/+tx+j/7jslsueXDJutD37OW/uOzo4QPnD+791rRnDnnkb989eWrB/L91y87/75wHF5ze3943hCEVIfRK/zBgXZ9kYcAYqC3LJH7cJ6mrV7qqy/uEMKJjYOmqNmTW/69IrzH4XE1SVQzsvu8dGxs7ErfXhDAkN/DC+EXDOxKzUoFs439VE8LeHaNNN76id9J4ZbrxG3uH8JWcQLaqib1D6GisKl3Vo9WZ6xikq1peHcLOOYFsVYdXhzA7ANBTxf+lk3IfvHD2xVMntLe3zdiOibgTvyZMntLe1jRxWvuk6iJ9mpTqc946RnMLx1TqpW9ezqxRdNeopv6lpLM/FGzObSuzI7/gzMHM/fhlqLJznMMq8+4ekh7ygfsVNhFyvkoVG3L5dh5yn9xKNj+JBfXH/FWhb+g968K2GU0XTZg5c8bQ5G+p2Yclf+NxpmRbDU1vqz5d9a2El0fR5bJSPu22asytZMjM86YPuXD2xYOnnDfh7Laz284/bPhhRxwx7NBDhw/pGFRz8rebkTZ2VXNqpB8vKnFY23CkX67IqeSz+NCQkJDoaYlVv9vj5aN3Wfq9FbcsnvHz9qPafv71nXces6Tqmy9suvSy/Z/+Hx8UzP+nf/L8P37qxA/+zPoMxY7/18fD/Mnjmw/zt8bAwlKP/9cXO5qfPTGgIRWYEwNzHOYHAADgiyHujox7M+NO6Ufm7/Yvd467b8z89Qc/ue65svV9Dv77D39fXnnZuP9yzAMNt333bwrm/3NK+/3/Nlr/P7t0/ahiy/wPiiWai63/n17mP7v+/5xi6/+nl/nPrv+/8HNY/39WNpDaJH+w/j8AAPBF8Nmt/9/t8v7pCwQUZOh2ef/0BQIKMnS7jH+pFwjY4vX/H2k4aORPVn/nN43LLpj2zn8bct/oAXs2/O6Rva6cNHXk6NEjBv9Lwfz/mtLm/xbuBwAAgB3HAROPfWrjpL2Pvfp/3rbTHj9p/fauh+3y/WVHts3ftH7i39z27jl/XTD/X1ja/P+zX/8vFDv/v6FYoKXYwoDW/wMAAKCHKrb+39Abv3X5q4uPu/+ey6eNam0dP/uKq/dbfUD1qeGl0fMb/mLGvR8VzP+Xlzb/j6ddlOfljr35sC5Z0y6k17R7uy77kwEAAADoGcpDU1NliXnzFkY99tO3+WJmKdBPSud68sH9nn/gqyNOnL+46urXynYb9vFT1888+Piv/fDVjXtdcse55+1XMP9fU9r8P+93GY+fP/DOBY1jdv3w5oc3TH696tkFm4//AwAAANtPqfslAAAAAAAAAAAAAACAz98JD//k6rcnLvnanIW/3PWnvcY+u3zDrDlNs2uvf/WH1/7qiDsfHlfw+/8wtrNcsd//x+v+xd8XfCkvd2y1+/X/MvfHjb57dueShevqQtgvNzD18qk7hcy1+Q/IDaw+fdBuHYnL0yUeeuW41zoSZ6YDJw4e8H5H4shUoDUukrhHOhCvqvh+v1QgLq/4XDoQt8fydKAqE/hev2QcZelt9WZtsq3K0tvqxdoQ+ucEsttqZW3SRll6gNenAtkBXpAOxAGelAmUp3t1d9+kVzFQG4ve2jfpFQAAO6z4LbAyTJ7S3tYcv8LH2y9X5N9GeUuWzS2stqzE5l/OLE1216im/qWke6W/i26+1nhlqO4YwtCCr6u5Wco6R7ltaulm032pyJC7W+2tvEi5tC3ddFXFR1STjKhp4rT2SZXdDvyQ7rMMq+g2y9CCyU5ulvLOTVpCLSX0pYQRlbhtSuhyvF8empp6pXJ9NQbrQ57uXhGl/l4/d52/Yq+C3DxPvtn+1BP//PzKfR7/89Nnf/BXk7596byzznj3yHOq/+E/lz39XwfuXDD/ry9t/l+dO673MxcDmBOvrDeifwitJY4IAAAAvvjOOf+V+d999No31rc0vjZtyLWr/3X2jRdX1C298i9ffOhvN42/+sytjb/58zv2eXjyhGe+dO4hy054fZ+DL2s88637/mLeuAev6nvLD+ff8YOC+X9DafP/uAcrcyg42duxJl7//4r+IXReWr8+CSyNwz2rfwj7dKZaYonkgvqjYonmJLA07jAZFEu0tuRX1TsGlqcCb9RlAmtSgbUxkNlLcUfI7Mq5ti6E4Z2psfklpscS9anAN2OgIRVoioHmVKBfDIxMBX7fLxNoSQWejIEwJX9b3dcvs60AAAC2RGaeVZl/N6TnecsrustQ1l2GPt1lKO8uQ3V3GYqNIt6/N2aoTJ28UpaTqTJda02qloIM8WL4W9yvggzhmfyc6YIFTcfzD7LnG5TlZ3jg5K/ec9WCyYPKf/XR2qWt790/ccWts49eec5Df/fEpH0X3XX93gXz/+bS5v998m+T1tfG+f/m6/8lgcdj966Lp443xMD6Y/IDmR0Da+Nk96psVS2ZEplJ+1WxxMgYaEgFpsfAyFSgdWwmsHC3/EBmpp1t/Ips41MyJXICAAAA8JmLOwjibpo4///jsmePeqxi0V3/+ur4u+6d89Y99/70nntuvXf07Zu+/twVF7970UcF8/+Rpc3/Y3t9cxu7Mvbmt/1CWFm2uTfZwODaJBD3Y9TGn8cPrA1hp5wdHNkSbX2SElWphsNjNckv1KvSVf2oJlljIN4f98tHVs/rSFxfE8L+OXtfsm38e3XSRk060FiVBPqkA9MqkkDc85MNrCpPArDVsnsF4wsqc6pLVn3X5Yq8/r4o1wRND69gH2gX+br6zdX2Up1+ILNPNWvLnraC6tguCt4ea7zbeuK7rd67LfeLVOYbysebQ9WhfFLb5Amz2mfGR3J/yVpgOz3Pub9SLSW9DV6Hcz59b7tXne5Ac+rjo7nrcl2/DstidY+fP/DOBY1jdr354Q2TX696dkHJ3Sgi/lD4maoB9bmbd3urDpnXXI/7PGnxedIT/w00eNpCCBsuPeG6kVXTr1g5+pAj93rttFOqZ7437+/vf+mBd/f9xxUTh31tQMH8v6W0+X9F6rbTH+PGvLB/CAfmbNx1cfMf3z/5HMwJJJ+SOxcGkkPur9YV/eQEAACAbS27uyO7v2BK5jY5ITw9Ty7M37KF+eP+ipFd5i+13z8adMpe9+9297hrTz3qpn/+zdh+G8e/uOSYFa1HNS49+mf/6cyaeQXz/9ZPnv/3TnXT8X/H/9lOHP/v0o6+K7p3+oE5W7UruqA6tgvH/7u0o7/bHP/vkuP/jv93xfH/bjj+36Ud/Wkr+JY03ZeuEMKwMWcMrr1r8BPvD1z96yeemvJvc1sn3PONq27Z8+Nv1y9eUL9r34L5//TS5v/W/+t60b7s+n+txdb/m15s/b851v8DAAC2qyILzaXneQWr9xVkSK/eV5Ch2wUCu11i0Pp/W7z+32NHHTl++ejFv16z95gDLus7d+6puzx504stM9+vue2D93f7xYGjCub/c0qb/8eXQ9/c1nvK+n8NY4tUdU0MTLcwIAAAADuiYjsIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+HztfsN1449prj7pN8dfWjP6+w+tO6D6mldOvXTZhFsnfeX28wfNWrFkSeWfnt940uTv3HB444aVE14IYUpnubKkeNnpi1f8YNUF3/jWg6fddPe7e85eWp2ptzJzu2de7tjqh3UhLMx5pDYm3q7ruLM5MG703bMrOhLr6kLYLzcw9fKpO3UkFteFcEBuYPXpg3brSFyeLvHQK8e91pE4Mx04cfCA9zsSR2YCZenu/kO/pLtl6e7O6xdC/5xAtrvn9suvKtvGCZlAebqNf6pN2oiB2lj0xtqkjRhojyWm9A5hSEUIvdJV/aw6qapXuqr/XZ1U1Std1WXVIYwIIVSkq/p1VVJVRXrkz1QlVcXA7vvesbGxI7GoKoQhuYEXxi8a3pGYkQpkGz+lKoS9O14y6cbvq0war0w3fkNlCF8JIVSlS2yqSEpUpUtsqAhh55zA5o1YEcLswBdD/PSZlPvghbMvnjqhvb1txnZMVGXaqgmTp7S3NU2c1j6pOtWnYspy0h/P/fRjf3njJRM7bu8a1dS/lHRFplxlZ5eHVebdPWRH733sV5/cSjY/HwX1x/xVoW/oPevCthlNF02YOXPG0ORvqdmHJX97ZaLJthraU7ZVY24lQ2aeN33IhbMvHjzlvAlnt53ddv5hww874ohhhx46fEjHoJqTv9tipIs++5F+uSKnks/i/S8hIdHTEuV5n27NO/rneMEX/c0drQzVnR/QBdOK3CxlnaPcFoM+9lOO+NN8Tel2REMLJg4FWYZ1n+WQgsnE5iw1SZbOr3UFk8Pcmso7N2m8Xx6amnoV2w71+XdzN+9bW7F5X8xsulLTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD/ZwcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCAAAAAAAOT/2ghVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV2IFjAQAAAABh/tZh9GwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFwKAAD//y85Ijg=") open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='.\x00', 0x0, 0x1188432, 0x0) 23:38:29 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x5) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc) 23:38:29 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000180)={{0x0, r1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf001}) 23:38:29 executing program 2: syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2804c00, &(0x7f0000000440)=ANY=[@ANYBLOB="0089f2832730bf994f589885cc769fe9ff0f61f46abebbde12c300000000000000004f9ccb1bb434bfd3000098c94e056c0850980a0083cfe8b422987b7600000000f2935e176297b1084a51bd8f968f05a5d657832ff1431d562136b4da360117f775000000000000000000bba7dc7fca7c1cd1d8d0ef487a658a9ca8d9a97746736798562fb2ab78afa0ce15449e2877793e468974c829bdec6fa55dffee9d4a3d79f24219472a8fb1c383f3b607bd1eb995de5c8740ff8b61a5e6c4e8262c2768c29627aa0589727acdfa3ae7615abd1db448fac33f7a6ba8b3273bf02c2c7bc56ac9ec78f92dfa51dbfd5317d5a0a7dbeb3d71a5680cb3a3a12583309f597e509a6ed8510ed554af64d97e13357959bb7f428cb3", @ANYRESDEC], 0x1, 0x750, &(0x7f0000001640)="$eJzs3M9rHHUfB/DPTLP9mefZPPAcnseDCC20UDpJmkt7Ml7ES6FQ8FpDMgkhk2zJbmoTC209C7W5KAiid49ehVL/AG9SUPAuiNZ4EC+R2Wy2bbq7btskK/H1gul+v/Nj39/PdvLNDGQ2gH+s18p/kojhiLgcEdXW+jQiDjdbRyNub+238ejmdLkksbl55eekPCw2Nqvt90paryeieUj8LyIeVCLOvv9sbn11bWGqKPLlVn+0sXhttL66dm5+cWoun8uXxicujl2YmLgwNrFrtZ56++Kxe9+8ub7+7ZeNu68OnUtisll3tGrbtaAnbH0mlZjcsX5pL8IGKOljn6F9GAcAAL2V1/mHWtdmlajGIVdpAAAAcOBsHtkEAAAADrwkBj0CAAAAYG9t/x3A9rO9e/UcbDc/vRERI53yh5rPEEccjUpEHN9InnoyIdk6DF7K7TsRcX+yw/mXtM6/Fze2o9/PM9Lsr/vl/DPZaf5J2/NPdJh/hra/O+EldZ//Hucf6jL/Xe4z46tP/1/pmn8n4pWhTvlJOz/pkv9On/l31z+4123b5ucRpzv+/kmeyurx/RCjs/NFzx+tB3+cedir/uPP5CdJMzXpXf+1Put/b+PXhW5zSZl/5mTv//9O+eU58WFrHGlE3Gu9lv31HRknF7/7+tnk5PZ2/kyXz79z/lvt+j/rs/4fvjhyo89dAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoCmNiOFI0qzdTtMsizgREf+N42lRqzfOztZWlmbKbREjUUln54t8LCKqW/2k7I8324/753f0JyLiP98f2wqdL/JsulbMDLp4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2k5ExHAkaRYRaUT8Vk3TLBv0qAAAAIBdNzLoAQAAAAB7zv0/AAAAHHwvev+f7PI4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAPt8qVL5bK58ejmdNmfub66slC7fm4mry9kiyvT2XRt+Vo2V6vNFXk2XVv8q/dLI2L8YqzcGG3k9cZofXXt6mJtZalxdX5xai6/mlf2pSoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACe13BzSdIsItJmO02zLOJfETESlWR2vsjHIuLfEfGwWjlS9scHPWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB2XX11bWGqKPJlDQ2NfWvcioi/wTB6NAY9MwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAj11bWFqaLIl+uDHgkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACDlf6YRES5nK6eGt659XDye7X5GhHvfnLloxtTjcbyeLn+l/b6xset9eefOPDWftYAAAAAB97rz7Pz9n369n08AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAv+qrawtTRZEv72Ej7gy6SgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4EX8GQAA//8tc8Xn") chdir(&(0x7f0000000080)='./file0\x00') open(&(0x7f00000000c0)='./bus\x00', 0x14da42, 0x0) r0 = open(&(0x7f0000000400)='./bus\x00', 0x14113e, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r1, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) 23:38:29 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r0, 0x112, 0x10, &(0x7f0000000240), 0x2) 23:38:29 executing program 1: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000000500)="48b1a004945b2276c2ac827b2fc767b48b3c9349f8c71d7754df031e7c6a124c0257284b9859ca865bd4a53540c215371a78f682d066c052edbda9702a8e8af981d5b5fe8eec3c47873bdcc4f7e3ad401a931582f857dc75021b8c814e989c15ad428569b621782fcdb58cacc81a874cd2dce073a98ce63520a0eb496a2531ee39745fcfbea73cfe104c0688f69374e3d25885e5726cc5f87b5c83c413712673590a5d4ac9d8005794dea877b31dcbdd55cbb45c2533992c6babe3f773adbeaae08f83d2109e93b4b5faec2218e86acbbb2d2095ae73d78d658e821a4b67e82e074249b96691a31aedb3a9feff7458b42c50445406b9cac57e83f2b44eac9ca88d7f130532d051cdfadb83579da6fdf32202970b0973c5c3260dfb045d20a265d8c22c56a762d8d90afb5088763af7c6e27441b79ab60bafe06c67b43019dbdda519a703e44174887206e2d8b3428c7090e3d07a75c8e15b92dd1034e7efbc6ad2dfb9d155575fecca16337dd7e8af40461ef198dce2fa2a1e634e447f4a6f1eb4442aa388c90705232c3e1b9fd7040631c964ef0bfe42a13412891bb1a509921f5011be604166df2212aed4e4fa66072c2212f9b98997f99e9628c69ff7945cab3ddf24b348d17e621ae426d8e6992a447996fc5a4aacf8f9e022f21151eca9b9603fbd3a1f0fe3fdb240da65588b49d98fe767a8d206ba522ca414bc3ba0d5180b01b7a0b188d7e4226a99a58877b5ebd46abbb21db3b3f10f018911673467aa3d498267a86d7ea67e2b3ccd557a46602b45129127f9d2f29e06bce679616502c9607d28bb6c0bd929aa74878c9963fa7f1e0adab0796727b058a1591707d42130e865d6983fa308145840fb4ea447a66629b29872ceb4ccce34b0e8e935b1976e698af2a76955ffc3998e0794818a96aac7fb09481bf5c3cd9c69a92ad086dce7c8f2db4846cadd10d780ff5fe5232634d309153cb669fbae93fc6d8110134ab28cc91a31b865af2b42f1e1274366388cb088b1997df21e4d634e4b09d4d39fa44954a39649bd44ff6819858535bf013f46b22900178a408176534b8bcbe45436d9b040a92a9a98faa357328718f6a1cd6727eb3addf383c719dd47633257446fa77b5946d169addd321a727c32f094cad3f8f53e36d30d299877a3b5838289aae5aba43441e6859c9c06303e2e8db6471d6636f381ea8eccddf921243427e20e8550db2c7d7343ab08f548560a2ad7b93bf2d99b5b66b00418b6609eb37c0ad3bcd014714bd9b01d56abeae0b01826d8260441fd5749c26677c9a8e27227a33eadab3c7ed18efba5a550ab369a616aad623ebbbca4d8a7ed44be70bbc9b803df0528607529817f2e2c6ae51cc156323b4a68ab155cd7c9fd6fc13b5045f8ab62303952b89fa11e5c6803265010069d04935553e6387dd0ce1b1abe8f17540f13fda6f390df3a9cee565b4eb293f807662f9239d8a2c930c0c1434fc6e4c43380f21b6fbcb8400d67eef2c4e08e76d0db6b01c5063ecb49d0d0436c5e26ec50d4880e17052234854d03fed02ffe5d1170118d7eaaee94122ab15842d1144799b8febd18becb660df966828198d920fc4dc9386d8edf6f8344341a5d7cbeb568203ba29b471a02e4dc40e50bdae413a84fe64df70d433e77b7da3d254b46b2e186564ec0ad0930726ddbff5641456ca6c149885bb6e5f93f5447ff67b20abc91521238d6fa60aced002e400d1403701e2d929d9b2f2af650b3de14541acd58c49cc63c10146b5c9a628c7656bddadca2735e39826dae626ebbc6122df7d6ecee65f66f9d99b0158ea74f1a79a4b33e88e31d13e3aaf9dae830ebc3dc5ec6ddaa932f4ac4f23e51f473b1a26a932d1c51e408a4b4ecaed78e71b63afb98b42d1a19300f980ec382cab1e956c9a11e282b9787b10e2f9063b5fca14f899c145293ea205236a845868eb581e3e05ac8b51501dfe9f7f6b24f2e27d7ade6b3f01e90a3c8237e3ff78d4db55fa7968f6c537f3b1931e1d11b272b7c53e49a8f5d6dbd8dfb8a8239f4c9db13be0a7b53d9fdf9ffed8d42419897fc5066fc238a69287b2b1224b4d92a28a4474a8f5672dde275cd44ecd4326010b105b68edec1910d44dbfda70fe708da13a75fc9f50433f331eaa0073a675e2dc2122c3459c8e47d1a4f1e9ab854fcaa08140c7148c758409950a3b22c42725703d266bfd5435cb61d8e0b7e880d2c7809149ad0e09eb4f819f5fcdb5f21c9074f6434edf2b08bd87f811d5b5d538ecd34f675dc8a0b9f5131ae6e83f6d18c9451e5cba8e5e1f52e3b283e7a42ee692d510c57ef011d941bb9c37d5a2bd971754750f9d1a9c41ffb35071c4ea6b036c0b61c199b8e742ac0f9fca58e29bd0a415d1df9cb06bd7cbd28084a30360405a1752e7a241399ec6eddcf1b793571cd06f38c6b00dc8f9b73b5f8bc064c0ea7a69162d3e894fcab657645647fb39448ad6dd962a70c14274503b16fe033ef3444ecf1ebc269c3d5395d2a28f5b552257f91ede484153bb6147a873961b54397d19a9d1182769f358b3f63d77a519d4d3bfe4f1374245284e992ac897aac8cef5f57311374d4d8b37be4b02ca6adb3037c2ce829efebadf77994df320cf0ca7d646adbdb8babcd8c2d4cddbb9fc80bb6fc88fa09a2d460f88db6281d0c1da6e61a3ca0ff454c981f7e11583c22253bc9525d3dcf344dc7fa3eafe90d414d692a66e9f9f26364d6e170e03eacd03b5588c4316d57143442a244da290b3e9ced40d5f24774c36c24e5a855afb9585fc767ba9d167d04c027ec8059fe2252227af85cbc756f4c5ba445b07495e2b4fcfe5dd5cd6810b99b841a3c093f68e2bfab219563cc80f9377967a7801ce251b14e1760c140d58551c63093c758b5ab2fa91b009250f860d7ee38b01368157ca24edb9422019a340de0c8b0b751888c547bc5f28349df69e60135f9b7d7985dad0c9da0640ec0f23566e6f856e2573b8eb58d16238bb11ef31ea1286435e76c734ff8407796103453904aa77d6a7873f3c4b5be10946b516a2ca192de5ada4a4e8ffeeaeda25fd588a94f3d0d1dd7c52f51b4d266f80dafd202bf1334abc56d62167179ca1de7e514f0af61f1fd990924c923bcbba74ae120d493d4f249ac010f298191bbbeef59a4625220d1932afc46c8f4b9c7f5067f215543a643d6584d2b94f03facb54619117aa07ab890e4886533bf14f2e6049e2ec5451438afcd929fcaec7fb35d9886b6b4378fafca4c1955b6ef8c8f3c65e91f3e350e62e2d2eb1cfcaf0f8dfe50d4f07261eea8d06e618a49f46cf6f5e92f31b9463ef51bd03b209d2833cce5f0ec7d0d4638aa26b8cc4de2518a914fd02ab50a9f43227fd70c8eb3341f04080fc65aaa331cb09e969db00b2093dd881987d4881b890a54e5c9104100b40d240890a4ee16343e67d487d63dee551c011734ad3c2534ed39c3847832cee0ba90e8f85dc97b54f366b7b538e07bdb55a6a892b2a01dfb3fac9d6214dac6abb6c5491e4218624afc1056c9a8f643be31bb033cf2c3e064790db54f370f1a51f6962953461c93f28f5117a5b655fada399f19abf0f2eb80b9646120ddedf8f08149fb38e0d00a203d44ed6a80df9fdec6272004ab9b5c8c3f6923abe0bc718ca30d4025110bbe8e0c8535f46614596c84fc4bab793523d6848a856b5fe81fc2d407af85b34cf54f7e5efe90e641338cff4cdf2865e5b5c7548d78691a644212ca67d522f0e69d679cd82b07b6aab4c76ffc68e7b5935b4784c51a38ec8c9f439478bd27679c38d3da93e13944d63483fded8def91d9e8cd0bd7c5829374de5364ddf34c9a94347c164575523a0649f26b6cafdb17fff2df89dbd32b043020f27265dbfc22fc479a66b7209127ca98d7402216b44ae3aa40a4d75aa459a6e0316091908ce64201ed8150d2e4a1ebe2814a0346fb550630c89d54bf7abc28cfc5f720842d9ba054dc7e526d85e900a9b498cb2b1b0d74a4fd6aea45fc9302715a9cb681c466fdbb2d2069656a74d5763882a98c627a54b1026465d2608857540521ca155c261ab0db676813ea9f1efc11a8d9a5dd4bf9602dff4bf09e5ad2c1e6ea98d395dc9d756592a0a7cd1f0af1d14f2f51f46025f4004a6ec3470365b941c6c0d1585917810417f326a582e1f896397da7efe0addb2deeabce01d76d090069eed90bfdd81193f3c3a31264e5fe70a33407a8573ad757fbee5203056f254efa7a3309864a1ba27e2078833625c3fe7b8bedaf843e8652ef4c8130d2277ea6fb49b2bba36017e9a7795e31e247fbfd3278c53ec80b76ee2745d44a176fcb9d1232fca4c5d15a242e550af75b3803246ba0b237ceb89b93891bb58260afac6079e1e96e346fbea10dc0b4eef2d7c0a216a0f274884761353ad5b99d7a8f266ccfabfdd27f0e4741547c0b89b683318da53b75064f119b693fc888f1d7970f7d5ba41286ae55199e71ecb5717df9b1880e0a9c7e30382ab4ceb54c878a919694df8f5562001eb401857f63295b5dd23d3e116c4b8e7ced058e9c5e868da2a3cd9de8025a3bd6fd598cec3bb4420afa094d48163ff1b29f66206b2dbe76a7f8c9d77956f88ef5a1732f27f508adba36954a6261e99ce291a06898596410d668587638b2544cbd1161e5d086c60706ab7c93893944958b2d23c06cfcf2a5c19b60db25c55fd2fd878d349d970f506162370ac10e13a3b7b1e4ff01810e287b2b768a479cd4341653024ba9addc4cf886ed8290963451dfaf637868650d94d3092133a62cd9b78934e2850cba5a895c11717015a753d9afd6e59613f7c8b1854829ad2a6910a6a3ee19bcad4e72f2804ca74886c01ffa53528388b7e84973ef544e3e90cf037cec654a1e3420c05d00c9193e6bf2d0b7b221196758e0eb80af63f308546d92653e58556ea286fea589b34ca643c64d549c03fca57c8a968704f0e4a120def2dc67173206c7394dc8677947f9296eb61e83f6ebe2f26ef96e67fcfd561cbbbb001ee6a9948f3edc46096da1d51d28930228eaff0cb4d15d341007146a6d94361da61e21e7647f60d7a3313e94e2ce1c99aa54837b86a09d7e76af5cb13dca955ebf5a2f047885b833eb79a60177f72113ba69434eccda7f03cb9f8237354b399469c857ddd799485590d13b99f9e5f5e42e785c285a57d2ca55fa23a36cb96c2433d4043ba00a5201b5aab4c95f6137c942367835712fae229fe1c58932f4f48eb9f460443da6db2134916aee3104584bde229f1fd7d29a50846c98c43b3e72dffef3759573e2966eb13c082f7d5abda400a7971df7935e96b5070ff0b9c975a36e3b75e95aee088f388cffee3e9f0f2b061be6e8534fc3de5ffc58d74e8b6ed5d2847b6b451cca5640a43b0ec2674938ee247545f316cc7ee9d60a8ad8786469008176ec486814672e1a545d80ac86e9bd0c3f8d1422f507d06c09b7eada5c123b1e83aa708e4e57b40bfabf13266777ef60c3c85ddd958f9c44f0dfb4cc43de241b4f14d593e186af47330b717ae0c5c28d89c4d9c93f09f1f0ac615e58b8f36cbbacf9bf69a7342c8c04e4b2805d24d517d306bcaf32cd2c2b34fb6634954e1d448221e24d7ca7a98d63551f6646d43e1c6cc8a94a3aae2a55c5111b0abbe180c1a7acda325bf761f5dcae6b8e1722b5e38a888c3b941cb7dae932988e0060931a63446c6986dfe25d5096b1d8c4c8f6f2c42dd1a461f7e486ca8fbe421bfc90503a1a0814acc4a8783ac3c91f4320f6ebecd44b319d7ab933ac8f7c55cd8790439317ccf1bb5532357d4d5026cc006dfd26f377def0195813bc743b7388ed01ef1307c761eb5d8017653226a1f8e0082600761969fcb654b261177ace27865d98f4520639239efc3d190d0748cf6bc9242803e632c7f28dc4b2a0a0a89787e4e474ed4339a1e23a2f848e2f7bf26247ef36339a5ce71ee4893e42af47df1c7e051b4c8b75e31e47d32dacf3884750b760934ffc625147472bc599a159fbb09c95f94362f1a0cb7f65efbef611eeea5adce90204acfcb1f285994968d8b34af6ba1f2a93df3c49c66ca44994d05842970b4fd4731b8b25c0a8e6828aa6667dbc573601d4adc595894f75fc94168dfa1e307011eca3643030413c76023cfe41146b815fb6e19f4fb6c1632aea39facd2f28618aab2a87715d41263617c6ca3b3ce3e681e2806e28a55701fb144b9e8f09e7d766578b404a5ad9eeb4be9476cb6584914693e3bf3c5a8fc0247ec40715aad2dee768d2b70d7506c7f2856bb1cfed4010716cfa9af60de121334c26915494237289103941714f43e76f698c8d2d81cb9aa6c1e9b49c2ade48516817bece7d41cd792921047f6238b3e27936666b6c077468e2dde8008f7a373613811ebd3d255ad30da1fa91bb2bc74d17ae045ba506d6a86babe1293df6694bcac5fd8962c9c1dbdac6ad6975fb670b7d291f7587192d3222f0c335b324fe06e9d17aa59a291fdf4c0e5bf0eb4f6091064ff80dbbc6dd4a43489ac6260defa804195eb3259ef30d9b4afe572aa0f4fbb9ea998de8936ccdf331096aceadd7d80fdb8ec02d0011b826437853af70e7c03d2f472fdf4302df7a044fe8c2949cb8d301b56db65158dc77305d7870071f3c794c4c98583eeaabd92428e942f3541819526c1ecc1434884f5c14f209c9565da7d4139243a72b39ebfb97c288b5760d11626c96548142b310be9f084e8cf5c3208f9d1c677194d4b34cbf00bc7c45ba2a48a2308f950a5a9aaad076c4421ad7deab0902a2b2139d0cae8435c140baf6c909114c4adb3a700453cac5b37c381993a9e27c8e7e154c50bde4f53ca2a85a93c57ad7d61b68299573370a6078bd9f60e481163a946d82d1ecdadb56da0d56a2f53952eaa4c8e1f740f98c4bbf575781b864546e44c986edd894c4c3ceea88cc112d31983867e0e97f57ca12b530627e76584b176302e565ecd901a2256c7bd6ca2965605055ef82df358029ff0b9ef4d143c9d837b10fbe167f143ad4310976731a7cc0bac895d56095862b692a6bdee48da902b3951608be85b94a0bc46aa946631c7a1b0e82c42c46f19b766934a2882ed11ae5c7d596cffbf9980fb0748828a548ef4659fda66b593507836fcb26db188f71a006765535a0dd58e67566fd70ff9d26143b24d74e20d378a9b0248257379217e582fc59b8f0f4a3fbcea13052785fbe5cf73f6d553c472def842191fa30e6de4a834b077d74c78497afd1217ea2be3c94677b23cb7e96071d282505a650df59c04d348dd86a3783b40b221d7e41c61d2f20a34c9a4109c02bda67b2eb86b54bc56a89d0acb40aee10bc1a33f81bf37437434ef4c0dcc55102b672cbced8e52b3d9b99381da55b8d19a810b852856968cc454c59bc6ea9b52fd0eaf41001020f2d87bcc7dfca6433024139476ca5bba9136bbc5a8011342932cb019af07543607dfa888613140886382f3d3557f5e42372c23f06f4486c01b74c2ac1d5c0fe86d9f13221cf549c285b9c891e93fae4a3a52856d36927aaa6ae441c3b11034345514d27206e10a888eeb6c287efed8b145a9893baf9c13f8099bfee31ce6ee0d05230aa8b2d55f9c472aaaf6a332bc07be8a51ef5d7f439099e6f8d7c2a81447050327429a7003fd7c214f12e17f39bbb93305188579d1db3bcce9ecbfffbd045337c7160318f7eac68866e2c2dc25cd0b4ef00fd08b61583acb01cfeb50e5687e2ba143bce9c339f5e5958680521c289f41f92d931aaf01be5712ac81ca6f4ae31533324ed8131789fb89cfc2241993a770e713c1eaadd196464bfaf9fb7bd1eacf8d0a83482b35995ada2ccc456d693b56d7d68bc933e0891d7230f7921ce1cd48180568508834132c0c29edb5180b84f6ec793b755800653c77a6dac3cfc9839bb3014582372b56b19ed639f2e7e5e53d412536660ac1ff223594ab5c10770dc2f2f63b6f3594e310e4817d7175d262a4fd716e5625c7c343ed18b82c39c61815ffa5396b44c1f7f056dfd7cc8a858ac740ac24a7b79e887e6964966a90a803d8f8a0a784b4119825dfef0435eb92c3c72eac69d79bc6d308a17685d13a0a754fff67e71cf3aad327ed19ba0744bebee5ddde0ba64a350c8845fffb8e47a82d728ac6b44692da526078ea809e3c424cfd4a0cd66f7415c53076a8882d78c5fa501df1df02998edd57e98b8cb922cf462faec9185f9d3b610087971a5a981132e4ea59a0d172157b0a18f7694e2899a6220db3dc42fbeb2111db4d29fdd60ae400b36a75e1b8982488c0ee71267e61003f516b1268d4ca4816db3ded8e38efb59dc5b26676fe7e44e3059b13f9ae47a331b3524ab23f4109a5bcf1dd7d59e36185c71a76a828bb819be5d648667664189d832647b405bfa649c417e01c00df9a6d39479d2f204689f496e8636f1be6419d14a84cbb7ccdbd8708fcd5f242f0b5de7fe181b963e2f18e0f44b931e8f894c72f5ce72aad9d91cbffbfc1ce5e59b1d628785e1f93b6564bab276f254a00db328b00309611de973c5d28ea4da28f8a04035d25ce4a3aae2c134984bdfa8414fa5fee7d306ac459df27d4dc7211a0faf7736ba2db899320f68707e9267337632c128d744fe3306c8da6aac1c8991baed9545c9bef5a85d6aae19d6143918d7bcb14755513b35eee6083cae9fd0869208d49e4a33dae7e252233a7834ae774368d64417b9a67779bb723fd2d20db7b8fcb471bb2c2f6427d05cf9ab6e578deda5e0ef28fcea89de80932b09a183ff9ffdbaec8a87edf6c61452ffe0ad7f1e60ceb927fbda7e12f78bf99323473e629a94493400772505fdea208766e4bc4b595b34fde47b7813736ee96b770e2f7f11e847c68c83beca58de89bd77c4c53e91102825d1015be2c34cfb031920fdd5de9c3e33294f4b7a9f4772b616ec5d07656a8b07d24c1952d435fa2a91abec87fc41452370b70eb3dec36f8d1ec1120c086d8d57f01fd10961b66f6829630dea0a9edf2d6c4072a35a0e57837490e1ad608f8e63abc00052fb64d5369caea199bed89bce387fea290b6c7fc00741ccc5e88df46523430690f7ebcb95df22b6c2a6920d71512fdbfd271b4be8d4b55ca819d9d7f136ebeae27544852f9989cf05cdf8dc874d44866dd26b8e7a3e7087930295136b1218d4917733c830d8c43b7a773d29df8f6ac1636127e4aad3bd2bb995b6ca6ddf246b35a058ba3e5f3b82f363b6ccdb686706302c31cb4ef1de747108e91aab41cddeb92ff52008be37d2bee465a5a1f7c405c3820dba823a0ade62eeafe6c2ffe01c265310d640153b1c69644d69a323698a486ab42a45bdaf3b75d46e3614961b91e8d09ebf6baa03a6ae2a6bf41239ea5a366d1c69e55b7d031a9d334fe336ce5e5b171fe1e5274eb9d94da0c460bf8f63ab34bd996d827c56e2e864d783a23f2b2fc6fdeacc87285bdb745fc3af93dcdd39a0605b4a2747552cf567bae5b65062e2c60285f8045d461695af1ea1b02b94484d245d5c43d2a1a7c27e4031d8897a7454daa73d190ff61a9bd6335d9fecffb7e39a6e4064873b7fe34e81419935e13a1fd366b77ce074e3b54a27869a0f889206fc5265acb7c9709943a6f5d853f1e5b1bf5dd4ef74dd146ec3d6a5332ec3a5cd81f400b53e56338d9e8ca07b76d7fd4e7ba0dec9796c78f738e3e73924e6191174983d25d28676c4994b4d1e9b7cfdb6541fa153ed2f4d5d1b34c39755e5eac75a5c36306f4238be5290c61494cc1d83691f82055853e1b7db6778338149fda38ad6f8d285551f44d8a897acd9e138e02fe72a196e0352232d88473ab0f30af3368b088e9a34644801b7b4ce64e53eef0fc885ad343160cad495272528f3bcf01d86f989e60aa6a62412c961b17d8fad225bf90ae46b60805d4d79b0c2b285e1d39baf7fe5d4dea8903c57a1a67df6a2ae304d621a49e111f1bfd370743309556abb3a6cd9898ebd8d3b5d7185f1fed78c2cebee7cbd976975cbf43a5ec1c350403a9c447707e0aa812fe9bd07c03ad996b1ccc4f0b8cd70b67d1b0a3dda38243325749bf432022ec2a5c30ba5598672cbb2f779a8c5ea2d9175b4b525cca82f81a2117fc85e383678c77690750e14dfe7621a6e032e269d63f3888b1a574f2a3deb598ce3bb41909e9d66594fa89d0d79caeb33eeeeba6dad7ccb0037214cec0a74a4da55e3d7c15a411e62cc98c3a8b2a2360c34485ecf3d14f19e289b535a58f42403b14fcf941ab8cbf584840bdcd103ad4842bf57476b84d259c55cb24d4690dd7661c653c557e0efb8dcf27983cb9f22d7dac1483e6b3fd0347edf1d56fdf95794b8463f49cbd67523d256f90bdb63c097b3f01e3edb2fec8905cd3e2334e86fbe90237f16a9a7a37db4d3159df87d54ab3a91a3b7dedfced6bcbea3d547d6165300709b1cf1f81651ec77f90b8beaa25510d8e84c56483fd294386083c5305fae42185e2ed3874e08a60a7d688c5691855dddcdfb0d1dfba4531bdc96d3e71759c536bcc42a046fff6217a6cbcb1bb4d2f95cb2797485d78b3f69ba11a6b7efbdb965b253b9fb9a667d35d8a00cabc89209a241f3f61dd97348b65f1d04e9d3a54e6d06b1600328856b461fbd7adafa7c569306aafc92eb4d3e812795b2cad5339e620330ef0331ab3bfd3ce23471aa4b79b4e9814d9e1ba0abe6e5af0ed42ebd0c3f0949f61f0d351abdce2c1f83a78cc6191114def2fc9e178f471792d4eca6a259964351a5919d07957b617e2ef3532af0a3dd632357662f3ab4e838a7fc397f193a33f436807453b36152059439309de1818ddbc5688a84f5cd64c7c6577bde9f957688b4bac4c3930fecafb11edb6cd981d4f9c7c2acca695bbda2299a088d3d874e2bf6da02648ef47247a0ac081193a67342460facd99b3cdaf140b7a905fc8b741f37917ce4c6dc85c49d309783a49244c96db0bf3326645a421d2b91f041d9babb6cad4e825d9546801f58d6d4750b6aa5e88f43ddba715da8d467de389824a44862ec3af6db8fa1609efdc42158cfb1adbb0469cd87ea4756d94b002f517644c36c01e7386f8f985144e162056b0e475de7be36d16e182721438658db95ae2bcca9e88022226c191a401c2f66f9a101c823fe56f9bae2c1f25ba4551a7eb5fabd53db3458a9bd80885b7fd7fbc758a672c46aff5471095f4b5d29f177dc2a4d6351e83be17d01a8c7885e0a6bfddd71a5753ec09202b644d41f70aeffebef2b7b9c457780df06533bf6d4d59a30f5652ef9cc96c108633b495ef3ac78adaf986b5897fb24d2a7c7c59395c882ed48e2bd5e0926b5454aa1b6234c72afe2d265cb177656cab18ef1b0d3a2886ebd3de6d7b61101695ff3682e97781d0c903a356e14e7f25a84853d785da7613bea11982a20ee2ca4b0ed3658505cb729d3ac88ac4721819ea628f6f31f6b55a271456c619ce0499d988c948125ea30d00c1c6e4a866c297df02b92021cc0dcece240aabeb7f727024ab81fe3ef73ba916a2a9105f9cf3a54369c17329ca71e0904ff0399d9f3871b3e58cb55b6188c1604114ec580f984bc229e29e2f2eaef0b89f109405f", 0x2000, &(0x7f0000004c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 23:38:29 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000012c0), 0x802, 0x0) write$UHID_CREATE(r0, &(0x7f00000013c0)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000001300)=""/191, 0xbf}}, 0x120) [ 454.028253][ T8129] loop2: detected capacity change from 0 to 2048 23:38:29 executing program 3: syz_mount_image$romfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8303, &(0x7f0000000240)=ANY=[@ANYRES64=0x0], 0x1, 0x160, &(0x7f0000004400)="$eJzs2r9Kw1AUBvAjLQodHV0sVKKgbf5pXXUUN98gtLlp8MaURJB2chMnQeE6+BKKT+AjZHTTRcSXiMRcapuozSCNwvdb+tFzk9ycwJ1OM/A9nYVNoo3+5cHLYuB79ba53WE6syi1R0T1JERxfN2inKdRPYqp9cWCcq28pb+NNUfsnzOX20bZWwIAAAAAAAAAAAAAAAAAAAAAgIKUmgy1nvDOmMttfawaDoaHFud2EGavq8xui6VS6nKGi5jgN0l/zIn6+vI8KTtJcsVukNS1yeuvZFjtCf6c7a967PXVcDBsup7l2I59ZBhmW9vUtC1D/biXmr2jciv3RFF8r+XHyZSxebPHIvNm8vtXl1xxcZJ92uf3R/gmEBVd7DtpU/OluSpRkWfdEVG+9Fp+ExB+JVSnrqnQH9nq1HPlXzgdnX/UXTAbD8n51+r4vCv/nEU7S3x9APjBewAAAP//bM0zUA==") r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000002340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}}) read$FUSE(r0, &(0x7f00000002c0)={0x2020}, 0x2020) chmod(&(0x7f0000002300)='./file0\x00', 0x0) read$FUSE(r0, &(0x7f0000006580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r0, &(0x7f0000006500)={0x78, 0x0, r1, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) 23:38:29 executing program 0: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_clone(0x0, &(0x7f0000000b00), 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001640), 0xffffffffffffffff) 23:38:29 executing program 1: syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x40000) [ 454.176915][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 454.186787][ T8129] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 454.202324][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 454.235466][ T8129] ext4 filesystem being mounted at /root/syzkaller-testdir3713254227/syzkaller.IcAci9/267/bus supports timestamps until 2038 (0x7fffffff) [ 454.242265][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 454.278458][ T8145] loop3: detected capacity change from 0 to 24 [ 454.288296][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 23:38:29 executing program 1: syz_clone(0x902100, 0x0, 0x0, 0x0, 0x0, 0x0) [ 454.322475][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 23:38:29 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = getpgid(0x0) sendmsg$netlink(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000007c0)={0x10, 0x42, 0x1}, 0x10}], 0x1, &(0x7f0000000240)=[@cred={{0x1c, 0x1, 0x2, {r1}}}], 0x20}, 0x0) [ 454.379452][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 454.386966][ T27] audit: type=1800 audit(1679269109.578:57): pid=8129 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 454.435482][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 454.457274][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 454.522021][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 454.555456][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 454.587201][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 454.618221][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 454.632822][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 454.650035][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 454.664045][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 454.674803][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 454.693238][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 454.705417][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 454.717694][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 454.730645][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 454.744505][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 454.757206][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 454.765350][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 454.773427][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 454.781593][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 454.789601][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 454.797240][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 454.805358][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 454.817810][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 454.835438][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 454.845114][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 454.863637][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 454.876341][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 454.891706][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 454.905407][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 454.916387][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 454.930769][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 454.931145][ T8143] loop4: detected capacity change from 0 to 32768 [ 454.946716][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 454.949356][ T8143] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (8143) [ 454.957481][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 454.976110][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 454.984385][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 454.993232][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 455.000994][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 455.008853][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 455.016405][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 455.024266][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 455.032018][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 455.039650][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 455.047247][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 455.054999][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 455.063686][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 455.071453][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 455.079299][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 455.090759][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 455.098482][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 455.106026][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 455.113603][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 455.121349][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 455.129443][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 455.136922][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 455.144503][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 455.152607][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 455.160198][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 455.168747][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 455.176297][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 455.192474][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 455.200091][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 455.208059][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 455.215590][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 455.223169][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 455.231790][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 455.239403][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 455.247143][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 455.254999][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 455.262538][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 455.270911][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 455.278504][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 455.286075][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 455.293667][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 455.301251][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 455.309177][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 455.316736][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 455.324551][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 455.332847][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 455.340640][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 455.348329][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 455.355783][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 455.363442][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 455.371899][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 455.379596][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 455.387014][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 455.394961][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 455.402653][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 455.410638][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 455.418552][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 455.426107][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 455.433743][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 455.441542][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 455.449404][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 455.456995][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 455.464779][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 455.473318][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 455.481953][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 455.489844][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 455.497436][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 455.505301][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 455.512997][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 455.520693][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 455.528596][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 455.536025][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 455.544004][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 455.551810][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 455.559607][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 455.567025][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 455.576599][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 455.584350][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 455.592013][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 455.600210][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 455.607655][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 455.615363][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 455.622977][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 455.630774][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 455.638622][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 455.646060][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 455.654119][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 455.661807][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 455.669504][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 455.678116][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 455.685659][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 455.699372][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 455.706817][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 455.720779][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 455.733417][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 455.741312][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 455.749258][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 455.756706][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 455.764597][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 455.772418][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 455.780931][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 455.788616][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 455.796140][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 455.803907][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 455.811718][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 455.819462][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 455.826905][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 455.835032][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 455.842947][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 455.850679][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 455.858345][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 455.865776][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 455.873509][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 455.881176][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 455.889918][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 455.897368][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 455.905021][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 455.912712][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 455.920487][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 455.928269][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 455.935791][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 455.943459][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 455.951234][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 455.958886][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 455.966914][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 455.974720][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 455.982404][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 455.990884][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 455.998666][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 456.006110][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 456.013754][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 456.021419][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 456.029219][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 456.036736][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 456.044807][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 456.052489][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 456.060666][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 456.068362][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 456.075919][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 456.083572][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 456.092239][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 456.100224][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 456.107666][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 456.115494][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 456.123160][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 456.130985][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 456.138712][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 456.146353][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 456.155144][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 456.162935][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 456.170636][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 456.178339][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 456.185759][ T3731] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 456.197775][ T3731] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz0] on syz1 [ 456.253515][ T8143] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 456.278088][ T8143] BTRFS info (device loop4): turning on sync discard [ 456.296430][ T8143] BTRFS info (device loop4): using free space tree [ 456.309830][ T3674] EXT4-fs (loop2): unmounting filesystem. 23:38:31 executing program 4: syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./bus\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="646973636172642c0008fd346f1fe0c7b977cf98b0dfc801ecf9a88e1ae482"], 0x1, 0x559d, &(0x7f0000005680)="$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") open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='.\x00', 0x0, 0x1188432, 0x0) 23:38:31 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)={0x54, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x38, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}, {0x4}]}]}, 0x54}}, 0x0) 23:38:31 executing program 0: syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 23:38:31 executing program 2: syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2804c00, &(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x1, 0x750, &(0x7f0000001640)="$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") chdir(&(0x7f0000000080)='./file0\x00') open(&(0x7f00000000c0)='./bus\x00', 0x14da42, 0x0) r0 = open(&(0x7f0000000400)='./bus\x00', 0x14113e, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r1, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) [ 456.383683][ T8143] BTRFS info (device loop4): enabling ssd optimizations 23:38:31 executing program 3: syz_mount_image$romfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8303, &(0x7f0000000240)=ANY=[@ANYRES64=0x0], 0x1, 0x160, &(0x7f0000004400)="$eJzs2r9Kw1AUBvAjLQodHV0sVKKgbf5pXXUUN98gtLlp8MaURJB2chMnQeE6+BKKT+AjZHTTRcSXiMRcapuozSCNwvdb+tFzk9ycwJ1OM/A9nYVNoo3+5cHLYuB79ba53WE6syi1R0T1JERxfN2inKdRPYqp9cWCcq28pb+NNUfsnzOX20bZWwIAAAAAAAAAAAAAAAAAAAAAgIKUmgy1nvDOmMttfawaDoaHFud2EGavq8xui6VS6nKGi5jgN0l/zIn6+vI8KTtJcsVukNS1yeuvZFjtCf6c7a967PXVcDBsup7l2I59ZBhmW9vUtC1D/biXmr2jciv3RFF8r+XHyZSxebPHIvNm8vtXl1xxcZJ92uf3R/gmEBVd7DtpU/OluSpRkWfdEVG+9Fp+ExB+JVSnrqnQH9nq1HPlXzgdnX/UXTAbD8n51+r4vCv/nEU7S3x9APjBewAAAP//bM0zUA==") r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000002340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}}) read$FUSE(r0, &(0x7f00000002c0)={0x2020}, 0x2020) chmod(&(0x7f0000002300)='./file0\x00', 0x0) read$FUSE(r0, &(0x7f0000006580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r0, &(0x7f0000006500)={0x78, 0x0, r1, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) 23:38:31 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$FUSE_GETXATTR(r0, &(0x7f0000000040)={0x18}, 0x18) creat(&(0x7f0000000100)='./file0\x00', 0x0) 23:38:31 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl(r0, 0x0, 0x0) 23:38:31 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) [ 456.488570][ T8181] loop3: detected capacity change from 0 to 24 [ 456.526320][ T8185] loop2: detected capacity change from 0 to 2048 23:38:31 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000740)={0x6c, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x3e, 0x33, @data_frame={@qos_no_ht={{@type11={{}, {}, @device_a, @device_b}}, {@type00={{}, {}, @broadcast}}}}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}]}, 0x6c}}, 0x0) 23:38:31 executing program 0: r0 = inotify_init() inotify_add_watch(r0, 0x0, 0x8) [ 456.633712][ T8185] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 456.642740][ T8185] ext4 filesystem being mounted at /root/syzkaller-testdir3713254227/syzkaller.IcAci9/268/bus supports timestamps until 2038 (0x7fffffff) 23:38:31 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_int(r0, 0x11, 0xb, &(0x7f0000000240)=0x7, 0x4) 23:38:32 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x17, 0x0, 0x0, 0x1}, 0x15) [ 456.785811][ T27] audit: type=1800 audit(1679269111.978:58): pid=8185 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 456.955789][ T3674] EXT4-fs (loop2): unmounting filesystem. [ 457.313524][ T8203] loop4: detected capacity change from 0 to 32768 [ 457.325991][ T8203] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (8203) [ 457.360823][ T8203] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 457.386173][ T8203] BTRFS info (device loop4): turning on sync discard [ 457.397631][ T8203] BTRFS info (device loop4): using free space tree 23:38:32 executing program 4: syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./bus\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="646973636172642c0008fd346f1fe0c7b977cf98b0dfc801ecf9a88e1ae482"], 0x1, 0x559d, &(0x7f0000005680)="$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") open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='.\x00', 0x0, 0x1188432, 0x0) 23:38:32 executing program 1: getgroups(0x1, &(0x7f0000001e00)=[0x0]) 23:38:32 executing program 5: socket$inet6(0xf, 0x3, 0x0) 23:38:32 executing program 0: sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) pipe2(0x0, 0x0) syz_open_dev$evdev(&(0x7f0000001cc0), 0x0, 0x0) 23:38:32 executing program 2: syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2804c00, &(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x1, 0x750, &(0x7f0000001640)="$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") chdir(&(0x7f0000000080)='./file0\x00') mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000180)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000400)='./bus\x00', 0x14113e, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r1, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) 23:38:32 executing program 3: syz_mount_image$romfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8303, &(0x7f0000000240)=ANY=[@ANYRES64=0x0], 0x1, 0x160, &(0x7f0000004400)="$eJzs2r9Kw1AUBvAjLQodHV0sVKKgbf5pXXUUN98gtLlp8MaURJB2chMnQeE6+BKKT+AjZHTTRcSXiMRcapuozSCNwvdb+tFzk9ycwJ1OM/A9nYVNoo3+5cHLYuB79ba53WE6syi1R0T1JERxfN2inKdRPYqp9cWCcq28pb+NNUfsnzOX20bZWwIAAAAAAAAAAAAAAAAAAAAAgIKUmgy1nvDOmMttfawaDoaHFud2EGavq8xui6VS6nKGi5jgN0l/zIn6+vI8KTtJcsVukNS1yeuvZFjtCf6c7a967PXVcDBsup7l2I59ZBhmW9vUtC1D/biXmr2jciv3RFF8r+XHyZSxebPHIvNm8vtXl1xxcZJ92uf3R/gmEBVd7DtpU/OluSpRkWfdEVG+9Fp+ExB+JVSnrqnQH9nq1HPlXzgdnX/UXTAbD8n51+r4vCv/nEU7S3x9APjBewAAAP//bM0zUA==") r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000002340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}}) read$FUSE(r0, &(0x7f00000002c0)={0x2020}, 0x2020) chmod(&(0x7f0000002300)='./file0\x00', 0x0) read$FUSE(r0, &(0x7f0000006580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r0, &(0x7f0000006500)={0x78, 0x0, r1, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) [ 457.453912][ T8203] BTRFS info (device loop4): enabling ssd optimizations [ 457.536583][ T8229] loop2: detected capacity change from 0 to 2048 [ 457.545261][ T8231] loop3: detected capacity change from 0 to 24 23:38:32 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x3109c7cdb8509e5a}, [@RTA_MARK={0x8}]}, 0x24}}, 0x0) [ 457.593531][ T8229] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 457.602778][ T8229] ext4 filesystem being mounted at /root/syzkaller-testdir3713254227/syzkaller.IcAci9/269/bus supports timestamps until 2038 (0x7fffffff) 23:38:32 executing program 1: r0 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000000)=0x3, 0x4) 23:38:32 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000002240)='ns/uts\x00') 23:38:32 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0x80108906, 0x0) 23:38:33 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000300)) 23:38:33 executing program 2: syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2804c00, &(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x1, 0x750, &(0x7f0000001640)="$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") chdir(&(0x7f0000000080)='./file0\x00') mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000180)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000400)='./bus\x00', 0x14113e, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r1, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) [ 457.855618][ T3674] EXT4-fs (loop2): unmounting filesystem. [ 458.058753][ T8252] loop2: detected capacity change from 0 to 2048 [ 458.139320][ T8252] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 458.181616][ T8252] ext4 filesystem being mounted at /root/syzkaller-testdir3713254227/syzkaller.IcAci9/270/bus supports timestamps until 2038 (0x7fffffff) [ 458.366364][ T3674] EXT4-fs (loop2): unmounting filesystem. [ 458.445019][ T8248] loop4: detected capacity change from 0 to 32768 [ 458.453924][ T8248] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (8248) [ 458.473661][ T8248] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 458.483481][ T8248] BTRFS info (device loop4): turning on sync discard [ 458.491338][ T8248] BTRFS info (device loop4): using free space tree 23:38:33 executing program 4: syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./bus\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="646973636172642c0008fd346f1fe0c7b977cf98b0dfc801ecf9a88e1ae482"], 0x1, 0x559d, &(0x7f0000005680)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) mount(0x0, 0x0, 0x0, 0x1188432, 0x0) 23:38:33 executing program 3: syz_mount_image$romfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8303, &(0x7f0000000240)=ANY=[@ANYRES64=0x0], 0x1, 0x160, &(0x7f0000004400)="$eJzs2r9Kw1AUBvAjLQodHV0sVKKgbf5pXXUUN98gtLlp8MaURJB2chMnQeE6+BKKT+AjZHTTRcSXiMRcapuozSCNwvdb+tFzk9ycwJ1OM/A9nYVNoo3+5cHLYuB79ba53WE6syi1R0T1JERxfN2inKdRPYqp9cWCcq28pb+NNUfsnzOX20bZWwIAAAAAAAAAAAAAAAAAAAAAgIKUmgy1nvDOmMttfawaDoaHFud2EGavq8xui6VS6nKGi5jgN0l/zIn6+vI8KTtJcsVukNS1yeuvZFjtCf6c7a967PXVcDBsup7l2I59ZBhmW9vUtC1D/biXmr2jciv3RFF8r+XHyZSxebPHIvNm8vtXl1xxcZJ92uf3R/gmEBVd7DtpU/OluSpRkWfdEVG+9Fp+ExB+JVSnrqnQH9nq1HPlXzgdnX/UXTAbD8n51+r4vCv/nEU7S3x9APjBewAAAP//bM0zUA==") r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000002340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}}) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50}, 0x50) chmod(&(0x7f0000002300)='./file0\x00', 0x0) read$FUSE(r0, &(0x7f0000006580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r0, &(0x7f0000006500)={0x78, 0x0, r1, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) 23:38:33 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}, 0x300}, 0x0) 23:38:33 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r2, &(0x7f0000000100), 0x10) r3 = socket$can_bcm(0x1d, 0x2, 0x2) dup3(r3, r2, 0x0) 23:38:33 executing program 5: getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)={'mangle\x00', 0x0, [0x4, 0x9544, 0x4, 0x101, 0x8]}, &(0x7f0000000080)=0x54) r0 = socket$inet6(0xa, 0x6, 0x4) accept4$inet6(r0, &(0x7f00000000c0), &(0x7f0000000100)=0x1c, 0x80000) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x74, r1, 0xc, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "8e42d81425862b8528bf140f1a"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "786afd01a9560cd34a86c2ac2f"}, @NL80211_ATTR_KEY_SEQ={0xf, 0xa, "163e8437345f5adb55b40f"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x20, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]}, 0x74}, 0x1, 0x0, 0x0, 0x20040000}, 0x805) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000740)={0x73622a85, 0x1, 0x3}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000780)={{{@in6=@loopback, @in6=@initdev}}, {{@in=@local}, 0x0, @in=@local}}, &(0x7f0000000880)=0xe8) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000009c0)={0x24, 0x0, &(0x7f0000000900)=[@free_buffer, @increfs={0x40046304, 0x2}, @decrefs, @register_looper, @register_looper], 0x7f, 0x0, &(0x7f0000000940)="62fd53715d39d22e4e1b6a5bd5e9f0a37dc358c9c3383d1d0c7a70b71bca917776d9cbae2ce51df6d8ada8e3c5ff2cc0cd10b2a8faf11ae2ff1ce90a2afa7228b0241d4c3c17c41620e5df7e6570e2eecacd0d689285de965770f0eca657187c8dc1dcbc8a6045f981745d9c685042040b63819d6b7e4a0c5d9fcb297c058b"}) socket$l2tp(0x2, 0x2, 0x73) 23:38:33 executing program 2: syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2804c00, &(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x1, 0x750, &(0x7f0000001640)="$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") chdir(&(0x7f0000000080)='./file0\x00') mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000180)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000400)='./bus\x00', 0x14113e, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r1, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) [ 458.520188][ T8248] BTRFS info (device loop4): enabling ssd optimizations [ 458.601688][ T8275] loop3: detected capacity change from 0 to 24 23:38:33 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x34}}, 0x0) 23:38:33 executing program 0: r0 = socket$inet6(0xa, 0x5, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, 0x0) 23:38:33 executing program 3: syz_mount_image$romfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8303, &(0x7f0000000240)=ANY=[@ANYRES64=0x0], 0x1, 0x160, &(0x7f0000004400)="$eJzs2r9Kw1AUBvAjLQodHV0sVKKgbf5pXXUUN98gtLlp8MaURJB2chMnQeE6+BKKT+AjZHTTRcSXiMRcapuozSCNwvdb+tFzk9ycwJ1OM/A9nYVNoo3+5cHLYuB79ba53WE6syi1R0T1JERxfN2inKdRPYqp9cWCcq28pb+NNUfsnzOX20bZWwIAAAAAAAAAAAAAAAAAAAAAgIKUmgy1nvDOmMttfawaDoaHFud2EGavq8xui6VS6nKGi5jgN0l/zIn6+vI8KTtJcsVukNS1yeuvZFjtCf6c7a967PXVcDBsup7l2I59ZBhmW9vUtC1D/biXmr2jciv3RFF8r+XHyZSxebPHIvNm8vtXl1xxcZJ92uf3R/gmEBVd7DtpU/OluSpRkWfdEVG+9Fp+ExB+JVSnrqnQH9nq1HPlXzgdnX/UXTAbD8n51+r4vCv/nEU7S3x9APjBewAAAP//bM0zUA==") r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000002340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}}) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50}, 0x50) chmod(&(0x7f0000002300)='./file0\x00', 0x0) read$FUSE(r0, &(0x7f0000006580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r0, &(0x7f0000006500)={0x78, 0x0, r1, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) [ 458.792447][ T8279] loop2: detected capacity change from 0 to 2048 23:38:34 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_opts(r0, 0x29, 0x4b, 0x0, 0x0) 23:38:34 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_opts(r0, 0x29, 0x1c, 0x0, 0x0) [ 458.900517][ T8279] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 458.984224][ T8298] loop3: detected capacity change from 0 to 24 [ 458.995371][ T8279] ext4 filesystem being mounted at /root/syzkaller-testdir3713254227/syzkaller.IcAci9/271/bus supports timestamps until 2038 (0x7fffffff) 23:38:34 executing program 0: timer_create(0x0, &(0x7f0000000100)={0x0, 0x0, 0xc04de3e741a1add, @thr={0x0, 0x0}}, 0x0) [ 459.328926][ T3674] EXT4-fs (loop2): unmounting filesystem. [ 459.680469][ T8297] loop4: detected capacity change from 0 to 32768 [ 459.689665][ T8297] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (8297) [ 459.709793][ T8297] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 459.719495][ T8297] BTRFS info (device loop4): turning on sync discard [ 459.726242][ T8297] BTRFS info (device loop4): using free space tree 23:38:35 executing program 4: syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./bus\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="646973636172642c0008fd346f1fe0c7b977cf98b0dfc801ecf9a88e1ae482"], 0x1, 0x559d, &(0x7f0000005680)="$eJzs3X1sVWcdB/BzeynlJaFlyjLUhfkPThCpmFiEoEVgAoPRgSbDwCgO2BAGhQRhY9OOOZ0jk4Y5xoovDKQCxq6+rJiYIbqIcU4mi8OGEXnJIuICK4yoJNOZ3nufy73n0vYO5zq3z4e05z73d57nPPfk/HG/lz7nRgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABBF0cHlC/627gfLv/nQdSenbLz/zAMnap57fNP4u+fsHnX4gVVXtp1uaip99fmzNyy67+GqoSf2zD8URYlUv0Sm/7xPTZ65aNa86X3CgLU3prcVFZ0dMt31WLrRO+/Jjn75P/OjKCqNDZDMbCf1z2kn4geIVhYO2KXtVWNWDdw4cdrmssmDFibrGgtfOh369PQEekrmunrx4rVUnfpdEtsj28659BJ5l2i6f/yCe1NeBADwulTWpDbZt6OZt7jZdn28HmtXx9oNsXZ4h9CQ27gc6XF7dzbPa+L1HppndToqlHU6z1g9c/6z7Zp4/1g7FjVexzzzd81Emj6dzbMuVu+peQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC8ldx9/JanSzb96H1L149MHh887BdfbdryvUnt5VO+tm9D2+9bn3tPU1Ppq8+fvWHRfQ9XDT2xZ/6hKKpI9Uukuyfm7mjd8LMVU1b/fM6jzefee8euZGbcsO2Vs3PUFh58vDyKPp9TeTEMe2pAFNXkF1LN6NHCwuLUgymhAAAAwNvJ4NTvkmw7HQdL89qJVJpMpP4F6bC4vWrMqoEbJ07bXDZ50MJkXePlj1fTyXjVlxwv2664+JPICcYh/sbHu1gPu64sGKdr8RHjeX7U0AuHj3x9+Ya1jf1P7u87MDnpV1+uHXzFnNGvXDt2zG1/fWRHQf6v6Dr/hzMn/wMAAPDfkP/j43Stu/w/7Mj9Z+469dN1tZ/ZNvf4+G/UDnhX5Zo/NX/4c+uHTZ3Y69iVWwry/zV5hyzI/2HGIf+XRJeX/wEAAOCt7H+d/6sLxulad/l/2ZoRf592YdbEJ8Zd+OGZO4f88uCRaG/9iC+03P6B/bP7DWj4SUH+rywu//fKnXZ48pkw4SXlUVRZ/EkFAAAA8oT/d7/40ULI6+lPDuJ5fc75g5NuLn3w7EdmXzt029Ehu9rP/2PJ8k0XRjfPGF716acrNhTk/+ri8n/pm/NyAQAAgCI8tfgTN+2Mpk/6UPU9h/cv2P5I/bK1K5c2liWm/ntl2/X/au5dkP9risv/ZT3zcgAAAIBLOPSlbbtfm7msdXhz2fmtf3jtz49fPXz1gabKoyt/O7B0RWvt4oL8X1tc/u+X2WZWPqQ77Q9/hfBQeRT16XhQly78Jmr4ZLYAAAAAvEFCTv/nsbaRO68r+/VT339586zvfHvQ3m/NONj43Qn9b5n44IEZB56sLcj/dV3f/z/c6SCs/8+7/1/B+v+cQvquf2PdGAAAAIB3osL1/OH2+OlvLujs+/eLXf9/4xdbXzp++/yvtL97yE3LXr7tils/Nv7UH6ffmdw57q6SqVNfOl2Q/+uLy//J3O0b+f1/AAAAcBn+377/b3bBOF3r7v7/Mx+752j7X14YN2Jm49pFJ8dv/PG8Lc88trvq6nMLbu77wWeX7i3I/w3F5f+w7Z/78vaF83NveRRd1fEgczfBXWG6S2KFltKcQvrEx3rMCj0yhZaynEJKXazHqPIoen/Hg/pYYWAoNMQK7QMyha2xwrOhkLkesoXmWGFfuNI2DchMN17YEwqZBRYtYQVF/+ySiFiPVzrr0VG4ZI8XsgcHAAB4RwnhOZNlS/ObUTzKtiS626FfdzuUdLdDsrsdesV2iO/Y2fNRbX4hPH9+zRO/q/xoyWcP3XrHhOEjF667t2HsgeTcCdc/uaPvuRWnR68uyP9bi8v/4VT0Tm86W/8fhfX/me81zK7/rw2FilihJRRq4ncMqAnHSIfd9eEYFTWZHu1XZQsAAADwthY+F0j28DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgP+zde5xU1Z0g8NNNP2homhbjK2JsdW1Fh6ZBUT/BB2omGmBNo+zMuPhohEaRVhBhIq5RULObxMEoKlFnRmEVRlZx8AVkNQE1ooloNI5mRh1DMGrcjR/FiH6yxrif7lunqLrVZRcCSjvf7x9dp+p3nrceXefeW+cCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/Max/9MYj/umiJ0eP2jBvwPJXDv/vH9YfumzRO//rT89ed9ve8763ftWSJZV/en7jSZO/c8PhjRtWTnghhJbOcmVJ8bLTF6/4waoLvvGtB0+76e5395y9tCpTbyYe+nb8Kc/cuTK2+tt+IawsC6EiHRhcmwQqM/drY30Da0PYKWwOZEu09UlKpBsOj9WEsDBsDmSr+lFNCLU5gXG/fGT1vI7E9TUh7B9CqE638e/VSRs16UBjVRLokw5Mq0gCH3ycyAZWlScB2GrxzZB90S9vyc9Q33W5Iq+/ym3Wsc9Xeni9YqK+eL63jt3OncpRlX6gZauetoLq2C4K3h5rvNt6wLutYDtf42nL/SKV+Yby8eZQdSif1DZ5wqz2mfGR8tDU1KtYTdvpeX5x4yUTtyTdY16HsQP12+R1+Pj5A+9c0Dhm15sf3jD59apnF2xtN4tt3u2tOmRecz3meYxG+jzpAW+/gm9JDb50hRBuP37T2799aez//dWDTw9+75tDzxrywitD627+7rR+f332/6m8ZerGgvl//SfP/+PLOd6W5+WOrX5Yl8zN4yO1MfF2XTI3BwAAgB6jJ+w1fWPEQW/Xrmt4eN+vr5h83qJ5r51+7p+rftp3wkEnnjL0+3fcOPW0gvl/Q2nH/+Mh/9rc0a4JYWRn4or+Ieze+XgSWBq7c1b/EPbpTLXkB45NBdaEsEdnYlC2qlSJ3rFEQyrwRl0mMDIVWBsDLanA4hi4JhW4MgaWpwITY2BNKnBcDIQp+eM4qC4zjpIDNTHQmmzE5fEshD/UxdZS2+qlbFUAAADbSGZ2WJl/N+dch63NEKeXy2u6yxDPwC6aoTpVQ3oGm51WFa2horsayrurITvuOZ88/IKay7qrueA0jLL8DO8deN/c1Q/8249vnHDYUwd92HrGy+tXPTp6U6+/e2fMjy8dN3/Y+IL5f/Mnz/+ru+hIWcHx/xDGdv6NucszkfZsvLUlLwMAAACwFSpeW3ryL+Z+VLbkZ+ds3P8vTxt3de8V++47YO3B9/2/hjcHHL9q/4L5/8jSzv+P+0R65WQO6+JuiKn9Q2jODyTVjigMJEe9+2YCAAAA0BNkj8dnj4VPydwmp2in59OF+Vu2MH888D+yy/yDx129rnn17adMGXHomjWbztj15WUbntpl/3deOPDk00+4f2rDPQXz/5bSzv/vk3+bdGJt7MV1/UPonRN4PPayI9CpIQbWH5MfyIx/bdwAV8WqMicmZKu6KpZojYHmVGBhsRLPZEvsnh/IPFnZxq/IjmNKpkROAAAAAD5zcXdAPC4fz/9/+tx+j/7jslsueXDJutD37OW/uOzo4QPnD+791rRnDnnkb989eWrB/L91y87/75wHF5ze3943hCEVIfRK/zBgXZ9kYcAYqC3LJH7cJ6mrV7qqy/uEMKJjYOmqNmTW/69IrzH4XE1SVQzsvu8dGxs7ErfXhDAkN/DC+EXDOxKzUoFs439VE8LeHaNNN76id9J4ZbrxG3uH8JWcQLaqib1D6GisKl3Vo9WZ6xikq1peHcLOOYFsVYdXhzA7ANBTxf+lk3IfvHD2xVMntLe3zdiOibgTvyZMntLe1jRxWvuk6iJ9mpTqc946RnMLx1TqpW9ezqxRdNeopv6lpLM/FGzObSuzI7/gzMHM/fhlqLJznMMq8+4ekh7ygfsVNhFyvkoVG3L5dh5yn9xKNj+JBfXH/FWhb+g968K2GU0XTZg5c8bQ5G+p2Yclf+NxpmRbDU1vqz5d9a2El0fR5bJSPu22asytZMjM86YPuXD2xYOnnDfh7Laz284/bPhhRxwx7NBDhw/pGFRz8rebkTZ2VXNqpB8vKnFY23CkX67IqeSz+NCQkJDoaYlVv9vj5aN3Wfq9FbcsnvHz9qPafv71nXces6Tqmy9suvSy/Z/+Hx8UzP+nf/L8P37qxA/+zPoMxY7/18fD/Mnjmw/zt8bAwlKP/9cXO5qfPTGgIRWYEwNzHOYHAADgiyHujox7M+NO6Ufm7/Yvd467b8z89Qc/ue65svV9Dv77D39fXnnZuP9yzAMNt333bwrm/3NK+/3/Nlr/P7t0/ahiy/wPiiWai63/n17mP7v+/5xi6/+nl/nPrv+/8HNY/39WNpDaJH+w/j8AAPBF8Nmt/9/t8v7pCwQUZOh2ef/0BQIKMnS7jH+pFwjY4vX/H2k4aORPVn/nN43LLpj2zn8bct/oAXs2/O6Rva6cNHXk6NEjBv9Lwfz/mtLm/xbuBwAAgB3HAROPfWrjpL2Pvfp/3rbTHj9p/fauh+3y/WVHts3ftH7i39z27jl/XTD/X1ja/P+zX/8vFDv/v6FYoKXYwoDW/wMAAKCHKrb+39Abv3X5q4uPu/+ey6eNam0dP/uKq/dbfUD1qeGl0fMb/mLGvR8VzP+Xlzb/j6ddlOfljr35sC5Z0y6k17R7uy77kwEAAADoGcpDU1NliXnzFkY99tO3+WJmKdBPSud68sH9nn/gqyNOnL+46urXynYb9vFT1888+Piv/fDVjXtdcse55+1XMP9fU9r8P+93GY+fP/DOBY1jdv3w5oc3TH696tkFm4//AwAAANtPqfslAAAAAAAAAAAAAACAz98JD//k6rcnLvnanIW/3PWnvcY+u3zDrDlNs2uvf/WH1/7qiDsfHlfw+/8wtrNcsd//x+v+xd8XfCkvd2y1+/X/MvfHjb57dueShevqQtgvNzD18qk7hcy1+Q/IDaw+fdBuHYnL0yUeeuW41zoSZ6YDJw4e8H5H4shUoDUukrhHOhCvqvh+v1QgLq/4XDoQt8fydKAqE/hev2QcZelt9WZtsq3K0tvqxdoQ+ucEsttqZW3SRll6gNenAtkBXpAOxAGelAmUp3t1d9+kVzFQG4ve2jfpFQAAO6z4LbAyTJ7S3tYcv8LH2y9X5N9GeUuWzS2stqzE5l/OLE1216im/qWke6W/i26+1nhlqO4YwtCCr6u5Wco6R7ltaulm032pyJC7W+2tvEi5tC3ddFXFR1STjKhp4rT2SZXdDvyQ7rMMq+g2y9CCyU5ulvLOTVpCLSX0pYQRlbhtSuhyvF8empp6pXJ9NQbrQ57uXhGl/l4/d52/Yq+C3DxPvtn+1BP//PzKfR7/89Nnf/BXk7596byzznj3yHOq/+E/lz39XwfuXDD/ry9t/l+dO673MxcDmBOvrDeifwitJY4IAAAAvvjOOf+V+d999No31rc0vjZtyLWr/3X2jRdX1C298i9ffOhvN42/+sytjb/58zv2eXjyhGe+dO4hy054fZ+DL2s88637/mLeuAev6nvLD+ff8YOC+X9DafP/uAcrcyg42duxJl7//4r+IXReWr8+CSyNwz2rfwj7dKZaYonkgvqjYonmJLA07jAZFEu0tuRX1TsGlqcCb9RlAmtSgbUxkNlLcUfI7Mq5ti6E4Z2psfklpscS9anAN2OgIRVoioHmVKBfDIxMBX7fLxNoSQWejIEwJX9b3dcvs60AAAC2RGaeVZl/N6TnecsrustQ1l2GPt1lKO8uQ3V3GYqNIt6/N2aoTJ28UpaTqTJda02qloIM8WL4W9yvggzhmfyc6YIFTcfzD7LnG5TlZ3jg5K/ec9WCyYPKf/XR2qWt790/ccWts49eec5Df/fEpH0X3XX93gXz/+bS5v998m+T1tfG+f/m6/8lgcdj966Lp443xMD6Y/IDmR0Da+Nk96psVS2ZEplJ+1WxxMgYaEgFpsfAyFSgdWwmsHC3/EBmpp1t/Ips41MyJXICAAAA8JmLOwjibpo4///jsmePeqxi0V3/+ur4u+6d89Y99/70nntuvXf07Zu+/twVF7970UcF8/+Rpc3/Y3t9cxu7Mvbmt/1CWFm2uTfZwODaJBD3Y9TGn8cPrA1hp5wdHNkSbX2SElWphsNjNckv1KvSVf2oJlljIN4f98tHVs/rSFxfE8L+OXtfsm38e3XSRk060FiVBPqkA9MqkkDc85MNrCpPArDVsnsF4wsqc6pLVn3X5Yq8/r4o1wRND69gH2gX+br6zdX2Up1+ILNPNWvLnraC6tguCt4ea7zbeuK7rd67LfeLVOYbysebQ9WhfFLb5Amz2mfGR3J/yVpgOz3Pub9SLSW9DV6Hcz59b7tXne5Ac+rjo7nrcl2/DstidY+fP/DOBY1jdr354Q2TX696dkHJ3Sgi/lD4maoB9bmbd3urDpnXXI/7PGnxedIT/w00eNpCCBsuPeG6kVXTr1g5+pAj93rttFOqZ7437+/vf+mBd/f9xxUTh31tQMH8v6W0+X9F6rbTH+PGvLB/CAfmbNx1cfMf3z/5HMwJJJ+SOxcGkkPur9YV/eQEAACAbS27uyO7v2BK5jY5ITw9Ty7M37KF+eP+ipFd5i+13z8adMpe9+9297hrTz3qpn/+zdh+G8e/uOSYFa1HNS49+mf/6cyaeQXz/9ZPnv/3TnXT8X/H/9lOHP/v0o6+K7p3+oE5W7UruqA6tgvH/7u0o7/bHP/vkuP/jv93xfH/bjj+36Ud/Wkr+JY03ZeuEMKwMWcMrr1r8BPvD1z96yeemvJvc1sn3PONq27Z8+Nv1y9eUL9r34L5//TS5v/W/+t60b7s+n+txdb/m15s/b851v8DAAC2qyILzaXneQWr9xVkSK/eV5Ch2wUCu11i0Pp/W7z+32NHHTl++ejFv16z95gDLus7d+6puzx504stM9+vue2D93f7xYGjCub/c0qb/8eXQ9/c1nvK+n8NY4tUdU0MTLcwIAAAADuiYjsIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+HztfsN1449prj7pN8dfWjP6+w+tO6D6mldOvXTZhFsnfeX28wfNWrFkSeWfnt940uTv3HB444aVE14IYUpnubKkeNnpi1f8YNUF3/jWg6fddPe7e85eWp2ptzJzu2de7tjqh3UhLMx5pDYm3q7ruLM5MG703bMrOhLr6kLYLzcw9fKpO3UkFteFcEBuYPXpg3brSFyeLvHQK8e91pE4Mx04cfCA9zsSR2YCZenu/kO/pLtl6e7O6xdC/5xAtrvn9suvKtvGCZlAebqNf6pN2oiB2lj0xtqkjRhojyWm9A5hSEUIvdJV/aw6qapXuqr/XZ1U1Std1WXVIYwIIVSkq/p1VVJVRXrkz1QlVcXA7vvesbGxI7GoKoQhuYEXxi8a3pGYkQpkGz+lKoS9O14y6cbvq0war0w3fkNlCF8JIVSlS2yqSEpUpUtsqAhh55zA5o1YEcLswBdD/PSZlPvghbMvnjqhvb1txnZMVGXaqgmTp7S3NU2c1j6pOtWnYspy0h/P/fRjf3njJRM7bu8a1dS/lHRFplxlZ5eHVebdPWRH733sV5/cSjY/HwX1x/xVoW/oPevCthlNF02YOXPG0ORvqdmHJX97ZaLJthraU7ZVY24lQ2aeN33IhbMvHjzlvAlnt53ddv5hww874ohhhx46fEjHoJqTv9tipIs++5F+uSKnks/i/S8hIdHTEuV5n27NO/rneMEX/c0drQzVnR/QBdOK3CxlnaPcFoM+9lOO+NN8Tel2REMLJg4FWYZ1n+WQgsnE5iw1SZbOr3UFk8Pcmso7N2m8Xx6amnoV2w71+XdzN+9bW7F5X8xsulLTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD/ZwcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCAAAAAAAOT/2ghVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV2IFjAQAAAABh/tZh9GwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFwKAAD//y85Ijg=") open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) mount(0x0, 0x0, 0x0, 0x1188432, 0x0) 23:38:35 executing program 3: syz_mount_image$romfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8303, &(0x7f0000000240)=ANY=[@ANYRES64=0x0], 0x1, 0x160, &(0x7f0000004400)="$eJzs2r9Kw1AUBvAjLQodHV0sVKKgbf5pXXUUN98gtLlp8MaURJB2chMnQeE6+BKKT+AjZHTTRcSXiMRcapuozSCNwvdb+tFzk9ycwJ1OM/A9nYVNoo3+5cHLYuB79ba53WE6syi1R0T1JERxfN2inKdRPYqp9cWCcq28pb+NNUfsnzOX20bZWwIAAAAAAAAAAAAAAAAAAAAAgIKUmgy1nvDOmMttfawaDoaHFud2EGavq8xui6VS6nKGi5jgN0l/zIn6+vI8KTtJcsVukNS1yeuvZFjtCf6c7a967PXVcDBsup7l2I59ZBhmW9vUtC1D/biXmr2jciv3RFF8r+XHyZSxebPHIvNm8vtXl1xxcZJ92uf3R/gmEBVd7DtpU/OluSpRkWfdEVG+9Fp+ExB+JVSnrqnQH9nq1HPlXzgdnX/UXTAbD8n51+r4vCv/nEU7S3x9APjBewAAAP//bM0zUA==") r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000002340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}}) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50}, 0x50) chmod(&(0x7f0000002300)='./file0\x00', 0x0) read$FUSE(r0, &(0x7f0000006580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r0, &(0x7f0000006500)={0x78, 0x0, r1, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) 23:38:35 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000001280), 0x0, 0x0) inotify_add_watch(r0, 0x0, 0x40000800) 23:38:35 executing program 5: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={0x80}, 0x20) 23:38:35 executing program 2: syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2804c00, &(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x1, 0x750, &(0x7f0000001640)="$eJzs3M9rHHUfB/DPTLP9mefZPPAcnseDCC20UDpJmkt7Ml7ES6FQ8FpDMgkhk2zJbmoTC209C7W5KAiid49ehVL/AG9SUPAuiNZ4EC+R2Wy2bbq7btskK/H1gul+v/Nj39/PdvLNDGQ2gH+s18p/kojhiLgcEdXW+jQiDjdbRyNub+238ejmdLkksbl55eekPCw2Nqvt90paryeieUj8LyIeVCLOvv9sbn11bWGqKPLlVn+0sXhttL66dm5+cWoun8uXxicujl2YmLgwNrFrtZ56++Kxe9+8ub7+7ZeNu68OnUtisll3tGrbtaAnbH0mlZjcsX5pL8IGKOljn6F9GAcAAL2V1/mHWtdmlajGIVdpAAAAcOBsHtkEAAAADrwkBj0CAAAAYG9t/x3A9rO9e/UcbDc/vRERI53yh5rPEEccjUpEHN9InnoyIdk6DF7K7TsRcX+yw/mXtM6/Fze2o9/PM9Lsr/vl/DPZaf5J2/NPdJh/hra/O+EldZ//Hucf6jL/Xe4z46tP/1/pmn8n4pWhTvlJOz/pkv9On/l31z+4123b5ucRpzv+/kmeyurx/RCjs/NFzx+tB3+cedir/uPP5CdJMzXpXf+1Put/b+PXhW5zSZl/5mTv//9O+eU58WFrHGlE3Gu9lv31HRknF7/7+tnk5PZ2/kyXz79z/lvt+j/rs/4fvjhyo89dAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoCmNiOFI0qzdTtMsizgREf+N42lRqzfOztZWlmbKbREjUUln54t8LCKqW/2k7I8324/753f0JyLiP98f2wqdL/JsulbMDLp4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2k5ExHAkaRYRaUT8Vk3TLBv0qAAAAIBdNzLoAQAAAAB7zv0/AAAAHHwvev+f7PI4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAPt8qVL5bK58ejmdNmfub66slC7fm4mry9kiyvT2XRt+Vo2V6vNFXk2XVv8q/dLI2L8YqzcGG3k9cZofXXt6mJtZalxdX5xai6/mlf2pSoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACe13BzSdIsItJmO02zLOJfETESlWR2vsjHIuLfEfGwWjlS9scHPWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB2XX11bWGqKPJlDQ2NfWvcioi/wTB6NAY9MwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAj11bWFqaLIl+uDHgkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACDlf6YRES5nK6eGt659XDye7X5GhHvfnLloxtTjcbyeLn+l/b6xset9eefOPDWftYAAAAAB97rz7Pz9n369n08AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAv+qrawtTRZEv72Ej7gy6SgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4EX8GQAA//8tc8Xn") open(&(0x7f00000000c0)='./bus\x00', 0x14da42, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000180)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000400)='./bus\x00', 0x14113e, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r1, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) 23:38:35 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bind$isdn(r0, 0x0, 0x0) [ 459.755406][ T8297] BTRFS info (device loop4): enabling ssd optimizations [ 459.780938][ T27] audit: type=1800 audit(1679269114.978:59): pid=8297 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=263 res=0 errno=0 23:38:35 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000b80)={0x18, 0x39, 0x603, 0x0, 0x0, "", [@nested={0x5, 0x0, 0x0, 0x1, [@generic='`']}]}, 0x18}], 0x1}, 0x0) 23:38:35 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local}, 0x20) 23:38:35 executing program 0: timer_create(0x0, 0x0, &(0x7f0000000240)) timer_create(0x0, &(0x7f0000000480)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) 23:38:35 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vcan0\x00'}) [ 459.884158][ T8333] loop3: detected capacity change from 0 to 24 23:38:35 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000f0000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b000000e8ff0500110000"], 0x44}}, 0x4104) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001080)={0xb0, r3, 0x800, 0x70bd25, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x10}, 0x40090) inotify_init() r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r5, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000001000), r5) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r4, 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0x5451, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000000)={0x0, 0x2}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r6, 0x0, 0x0) 23:38:35 executing program 3: syz_mount_image$romfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8303, &(0x7f0000000240)=ANY=[@ANYRES64=0x0], 0x1, 0x160, &(0x7f0000004400)="$eJzs2r9Kw1AUBvAjLQodHV0sVKKgbf5pXXUUN98gtLlp8MaURJB2chMnQeE6+BKKT+AjZHTTRcSXiMRcapuozSCNwvdb+tFzk9ycwJ1OM/A9nYVNoo3+5cHLYuB79ba53WE6syi1R0T1JERxfN2inKdRPYqp9cWCcq28pb+NNUfsnzOX20bZWwIAAAAAAAAAAAAAAAAAAAAAgIKUmgy1nvDOmMttfawaDoaHFud2EGavq8xui6VS6nKGi5jgN0l/zIn6+vI8KTtJcsVukNS1yeuvZFjtCf6c7a967PXVcDBsup7l2I59ZBhmW9vUtC1D/biXmr2jciv3RFF8r+XHyZSxebPHIvNm8vtXl1xxcZJ92uf3R/gmEBVd7DtpU/OluSpRkWfdEVG+9Fp+ExB+JVSnrqnQH9nq1HPlXzgdnX/UXTAbD8n51+r4vCv/nEU7S3x9APjBewAAAP//bM0zUA==") r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) read$FUSE(r0, &(0x7f00000002c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1}, 0x50) chmod(&(0x7f0000002300)='./file0\x00', 0x0) read$FUSE(r0, &(0x7f0000006580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r0, &(0x7f0000006500)={0x78, 0x0, r2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) [ 460.007148][ T8332] loop2: detected capacity change from 0 to 2048 [ 460.092594][ T8344] netlink: 'syz-executor.1': attribute type 17 has an invalid length. [ 460.172020][ T8347] loop3: detected capacity change from 0 to 24 [ 460.178122][ T8332] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 460.225378][ T8332] ext4 filesystem being mounted at /root/syzkaller-testdir3713254227/syzkaller.IcAci9/272/bus supports timestamps until 2038 (0x7fffffff) [ 460.316824][ T8332] EXT4-fs error (device loop2): ext4_find_dest_de:2092: inode #2: block 16: comm syz-executor.2: bad entry in directory: rec_len is smaller than minimal - offset=108, inode=646161, rec_len=0, size=4096 fake=0 [ 460.382156][ T8353] EXT4-fs error (device loop2): ext4_find_dest_de:2092: inode #2: block 16: comm syz-executor.2: bad entry in directory: rec_len is smaller than minimal - offset=108, inode=646161, rec_len=0, size=4096 fake=0 [ 460.536923][ T3674] EXT4-fs (loop2): unmounting filesystem. [ 460.818399][ T8352] loop4: detected capacity change from 0 to 32768 [ 460.827261][ T8352] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (8352) [ 460.843270][ T8352] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 460.852949][ T8352] BTRFS info (device loop4): turning on sync discard [ 460.859830][ T8352] BTRFS info (device loop4): using free space tree 23:38:36 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000040), 0x8) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000080), 0x8) 23:38:36 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x13}]}, 0x1c}}, 0x0) 23:38:36 executing program 1: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x140000}, 0x20) 23:38:36 executing program 3: syz_mount_image$romfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8303, &(0x7f0000000240)=ANY=[@ANYRES64=0x0], 0x1, 0x160, &(0x7f0000004400)="$eJzs2r9Kw1AUBvAjLQodHV0sVKKgbf5pXXUUN98gtLlp8MaURJB2chMnQeE6+BKKT+AjZHTTRcSXiMRcapuozSCNwvdb+tFzk9ycwJ1OM/A9nYVNoo3+5cHLYuB79ba53WE6syi1R0T1JERxfN2inKdRPYqp9cWCcq28pb+NNUfsnzOX20bZWwIAAAAAAAAAAAAAAAAAAAAAgIKUmgy1nvDOmMttfawaDoaHFud2EGavq8xui6VS6nKGi5jgN0l/zIn6+vI8KTtJcsVukNS1yeuvZFjtCf6c7a967PXVcDBsup7l2I59ZBhmW9vUtC1D/biXmr2jciv3RFF8r+XHyZSxebPHIvNm8vtXl1xxcZJ92uf3R/gmEBVd7DtpU/OluSpRkWfdEVG+9Fp+ExB+JVSnrqnQH9nq1HPlXzgdnX/UXTAbD8n51+r4vCv/nEU7S3x9APjBewAAAP//bM0zUA==") r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) read$FUSE(r0, &(0x7f00000002c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1}, 0x50) chmod(&(0x7f0000002300)='./file0\x00', 0x0) read$FUSE(r0, &(0x7f0000006580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r0, &(0x7f0000006500)={0x78, 0x0, r2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) 23:38:36 executing program 4: syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./bus\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="646973636172642c0008fd346f1fe0c7b977cf98b0dfc801ecf9a88e1ae482"], 0x1, 0x559d, &(0x7f0000005680)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) mount(0x0, 0x0, 0x0, 0x1188432, 0x0) 23:38:36 executing program 2: syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2804c00, &(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x1, 0x750, &(0x7f0000001640)="$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") open(&(0x7f00000000c0)='./bus\x00', 0x14da42, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000180)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000400)='./bus\x00', 0x14113e, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r1, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) [ 460.883529][ T8352] BTRFS info (device loop4): enabling ssd optimizations [ 460.912680][ T27] audit: type=1800 audit(1679269116.108:60): pid=8352 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=263 res=0 errno=0 23:38:36 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x40, r1, 0x1, 0x0, 0x0, {}, [{@pci={{0x8}, {0x11}}, {0x8}, {0x6}}]}, 0x40}}, 0x0) [ 460.993659][ T8374] loop2: detected capacity change from 0 to 2048 [ 461.010184][ T8378] netlink: 'syz-executor.5': attribute type 19 has an invalid length. 23:38:36 executing program 5: r0 = socket(0x2, 0xa, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) [ 461.039593][ T8374] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 461.051760][ T8374] ext4 filesystem being mounted at /root/syzkaller-testdir3713254227/syzkaller.IcAci9/273/bus supports timestamps until 2038 (0x7fffffff) 23:38:36 executing program 0: r0 = add_key$fscrypt_v1(&(0x7f0000000bc0), &(0x7f0000000c00)={'fscrypt:', @desc3}, &(0x7f0000000c40)={0x0, "59caeebbe7373eaf6773a5dbc4bf4dfb96820fd43c79544d23b05baf6874897b0688c856d823465154c77b453cdffe29a504f7b89e9cdc45cc4c21022cb5469c"}, 0x48, 0xfffffffffffffffc) r1 = add_key$fscrypt_v1(&(0x7f0000000bc0), &(0x7f0000000c00)={'fscrypt:', @desc3}, &(0x7f0000000c40)={0x0, "59caeebbe7373eaf6773a5dbc4bf4dfb96820fd43c79544d23b05baf6874897b0688c856d823465154c77b453cdffe29a504f7b89e9cdc45cc4c21022cb5469c"}, 0x48, 0xfffffffffffffffc) keyctl$KEYCTL_MOVE(0x1e, r1, 0xfffffffffffffffb, r0, 0x0) 23:38:36 executing program 2: syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2804c00, &(0x7f0000000440)=ANY=[@ANYBLOB="0089f2832730bf994f589885cc769fe9ff0f61f46abebbde12c300000000000000004f9ccb1bb434bfd3000098c94e056c0850980a0083cfe8b422987b7600000000f2935e176297b1084a51bd8f968f05a5d657832ff1431d562136b4da360117f775000000000000000000bba7dc7fca7c1cd1d8d0ef487a658a9ca8d9a97746736798562fb2ab78afa0ce15449e2877793e468974c829bdec6fa55dffee9d4a3d79f24219472a8fb1c383f3b607bd1eb995de5c8740ff8b61a5e6c4e8262c2768c29627aa0589727acdfa3ae7615abd1db448fac33f7a6ba8b3273bf02c2c7bc56ac9ec78f92dfa51dbfd5317d5a0a7dbeb3d71a5680cb3a3a12583309f597e509a6ed8510ed554af64d97e13357959bb7f428cb3", @ANYRESDEC], 0x1, 0x750, &(0x7f0000001640)="$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") open(&(0x7f00000000c0)='./bus\x00', 0x14da42, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000180)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000400)='./bus\x00', 0x14113e, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r1, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) [ 461.076158][ T8374] EXT4-fs error (device loop2): ext4_find_dest_de:2092: inode #2: block 16: comm syz-executor.2: bad entry in directory: rec_len is smaller than minimal - offset=108, inode=646161, rec_len=0, size=4096 fake=0 [ 461.088127][ T8380] loop3: detected capacity change from 0 to 24 [ 461.101231][ T8374] EXT4-fs error (device loop2): ext4_find_dest_de:2092: inode #2: block 16: comm syz-executor.2: bad entry in directory: rec_len is smaller than minimal - offset=108, inode=646161, rec_len=0, size=4096 fake=0 23:38:36 executing program 3: syz_mount_image$romfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8303, &(0x7f0000000240)=ANY=[@ANYRES64=0x0], 0x1, 0x160, &(0x7f0000004400)="$eJzs2r9Kw1AUBvAjLQodHV0sVKKgbf5pXXUUN98gtLlp8MaURJB2chMnQeE6+BKKT+AjZHTTRcSXiMRcapuozSCNwvdb+tFzk9ycwJ1OM/A9nYVNoo3+5cHLYuB79ba53WE6syi1R0T1JERxfN2inKdRPYqp9cWCcq28pb+NNUfsnzOX20bZWwIAAAAAAAAAAAAAAAAAAAAAgIKUmgy1nvDOmMttfawaDoaHFud2EGavq8xui6VS6nKGi5jgN0l/zIn6+vI8KTtJcsVukNS1yeuvZFjtCf6c7a967PXVcDBsup7l2I59ZBhmW9vUtC1D/biXmr2jciv3RFF8r+XHyZSxebPHIvNm8vtXl1xxcZJ92uf3R/gmEBVd7DtpU/OluSpRkWfdEVG+9Fp+ExB+JVSnrqnQH9nq1HPlXzgdnX/UXTAbD8n51+r4vCv/nEU7S3x9APjBewAAAP//bM0zUA==") r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) read$FUSE(r0, &(0x7f00000002c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1}, 0x50) chmod(&(0x7f0000002300)='./file0\x00', 0x0) read$FUSE(r0, &(0x7f0000006580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r0, &(0x7f0000006500)={0x78, 0x0, r2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) 23:38:36 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0x80086601, 0x0) 23:38:36 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x1}, 0x20) [ 461.261337][ T3674] EXT4-fs (loop2): unmounting filesystem. 23:38:36 executing program 0: mount_setattr(0xffffffffffffffff, 0x0, 0x4800, 0x0, 0x0) 23:38:36 executing program 1: openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x358c41, 0x0) [ 461.343745][ T8395] loop3: detected capacity change from 0 to 24 [ 461.358914][ T3676] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 23:38:36 executing program 3: syz_mount_image$romfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8303, &(0x7f0000000240)=ANY=[@ANYRES64=0x0], 0x1, 0x160, &(0x7f0000004400)="$eJzs2r9Kw1AUBvAjLQodHV0sVKKgbf5pXXUUN98gtLlp8MaURJB2chMnQeE6+BKKT+AjZHTTRcSXiMRcapuozSCNwvdb+tFzk9ycwJ1OM/A9nYVNoo3+5cHLYuB79ba53WE6syi1R0T1JERxfN2inKdRPYqp9cWCcq28pb+NNUfsnzOX20bZWwIAAAAAAAAAAAAAAAAAAAAAgIKUmgy1nvDOmMttfawaDoaHFud2EGavq8xui6VS6nKGi5jgN0l/zIn6+vI8KTtJcsVukNS1yeuvZFjtCf6c7a967PXVcDBsup7l2I59ZBhmW9vUtC1D/biXmr2jciv3RFF8r+XHyZSxebPHIvNm8vtXl1xxcZJ92uf3R/gmEBVd7DtpU/OluSpRkWfdEVG+9Fp+ExB+JVSnrqnQH9nq1HPlXzgdnX/UXTAbD8n51+r4vCv/nEU7S3x9APjBewAAAP//bM0zUA==") mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000002340)={{}, 0x2c, {'rootmode', 0x3d, 0x1000}}) read$FUSE(0xffffffffffffffff, &(0x7f00000002c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000080)={0x50, 0x0, r0}, 0x50) chmod(&(0x7f0000002300)='./file0\x00', 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000006580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000006500)={0x78, 0x0, r1, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) [ 461.532038][ T8405] loop3: detected capacity change from 0 to 24 [ 461.544702][ T8405] fuse: Bad value for 'fd' [ 461.563008][ T8398] loop2: detected capacity change from 0 to 2048 [ 461.649050][ T8398] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 461.675024][ T8398] ext4 filesystem being mounted at /root/syzkaller-testdir3713254227/syzkaller.IcAci9/274/bus supports timestamps until 2038 (0x7fffffff) [ 461.740750][ T8398] EXT4-fs error (device loop2): ext4_find_dest_de:2092: inode #2: block 16: comm syz-executor.2: bad entry in directory: rec_len is smaller than minimal - offset=108, inode=646161, rec_len=0, size=4096 fake=0 [ 461.845977][ T8398] EXT4-fs error (device loop2): ext4_find_dest_de:2092: inode #2: block 16: comm syz-executor.2: bad entry in directory: rec_len is smaller than minimal - offset=108, inode=646161, rec_len=0, size=4096 fake=0 [ 461.940970][ T3674] EXT4-fs (loop2): unmounting filesystem. [ 462.074678][ T8390] loop4: detected capacity change from 0 to 32768 [ 462.083319][ T8390] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (8390) [ 462.102925][ T8390] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 462.112763][ T8390] BTRFS info (device loop4): turning on sync discard [ 462.120557][ T8390] BTRFS info (device loop4): using free space tree 23:38:37 executing program 4: syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./bus\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="646973636172642c0008fd346f1fe0c7b977cf98b0dfc801ecf9a88e1ae482"], 0x1, 0x559d, &(0x7f0000005680)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) mount(0x0, &(0x7f0000000040)='.\x00', 0x0, 0x0, 0x0) 23:38:37 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01a12bbd01eef9689fe41d5e0000080003"], 0x24}}, 0x0) 23:38:37 executing program 0: add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "7c20861fc6902eefb6efe0a4c6fdb8e4d681793346a3cc0bb3430f5281833168c20acc1f0852094a2936cbab547e95095128212d8ac6d900"}, 0xfffffffb, 0xfffffffffffffff8) 23:38:37 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_opts(r0, 0x29, 0x3a, 0x0, 0x0) 23:38:37 executing program 3: syz_mount_image$romfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8303, &(0x7f0000000240)=ANY=[@ANYRES64=0x0], 0x1, 0x160, &(0x7f0000004400)="$eJzs2r9Kw1AUBvAjLQodHV0sVKKgbf5pXXUUN98gtLlp8MaURJB2chMnQeE6+BKKT+AjZHTTRcSXiMRcapuozSCNwvdb+tFzk9ycwJ1OM/A9nYVNoo3+5cHLYuB79ba53WE6syi1R0T1JERxfN2inKdRPYqp9cWCcq28pb+NNUfsnzOX20bZWwIAAAAAAAAAAAAAAAAAAAAAgIKUmgy1nvDOmMttfawaDoaHFud2EGavq8xui6VS6nKGi5jgN0l/zIn6+vI8KTtJcsVukNS1yeuvZFjtCf6c7a967PXVcDBsup7l2I59ZBhmW9vUtC1D/biXmr2jciv3RFF8r+XHyZSxebPHIvNm8vtXl1xxcZJ92uf3R/gmEBVd7DtpU/OluSpRkWfdEVG+9Fp+ExB+JVSnrqnQH9nq1HPlXzgdnX/UXTAbD8n51+r4vCv/nEU7S3x9APjBewAAAP//bM0zUA==") mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000002340)={{}, 0x2c, {'rootmode', 0x3d, 0x1000}}) read$FUSE(0xffffffffffffffff, &(0x7f00000002c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000080)={0x50, 0x0, r0}, 0x50) chmod(&(0x7f0000002300)='./file0\x00', 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000006580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000006500)={0x78, 0x0, r1, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) 23:38:37 executing program 2: chdir(&(0x7f0000000080)='./file0\x00') open(&(0x7f00000000c0)='./bus\x00', 0x14da42, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000180)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000400)='./bus\x00', 0x14113e, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r1, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) [ 462.148563][ T8390] BTRFS info (device loop4): enabling ssd optimizations [ 462.174294][ T27] audit: type=1800 audit(1679269117.368:61): pid=8390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=263 res=0 errno=0 23:38:37 executing program 1: sync() inotify_init() [ 462.210851][ T8428] loop3: detected capacity change from 0 to 24 [ 462.236178][ T8428] fuse: Bad value for 'fd' 23:38:37 executing program 3: syz_mount_image$romfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8303, &(0x7f0000000240)=ANY=[@ANYRES64=0x0], 0x1, 0x160, &(0x7f0000004400)="$eJzs2r9Kw1AUBvAjLQodHV0sVKKgbf5pXXUUN98gtLlp8MaURJB2chMnQeE6+BKKT+AjZHTTRcSXiMRcapuozSCNwvdb+tFzk9ycwJ1OM/A9nYVNoo3+5cHLYuB79ba53WE6syi1R0T1JERxfN2inKdRPYqp9cWCcq28pb+NNUfsnzOX20bZWwIAAAAAAAAAAAAAAAAAAAAAgIKUmgy1nvDOmMttfawaDoaHFud2EGavq8xui6VS6nKGi5jgN0l/zIn6+vI8KTtJcsVukNS1yeuvZFjtCf6c7a967PXVcDBsup7l2I59ZBhmW9vUtC1D/biXmr2jciv3RFF8r+XHyZSxebPHIvNm8vtXl1xxcZJ92uf3R/gmEBVd7DtpU/OluSpRkWfdEVG+9Fp+ExB+JVSnrqnQH9nq1HPlXzgdnX/UXTAbD8n51+r4vCv/nEU7S3x9APjBewAAAP//bM0zUA==") mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000002340)={{}, 0x2c, {'rootmode', 0x3d, 0x1000}}) read$FUSE(0xffffffffffffffff, &(0x7f00000002c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000080)={0x50, 0x0, r0}, 0x50) chmod(&(0x7f0000002300)='./file0\x00', 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000006580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000006500)={0x78, 0x0, r1, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) 23:38:37 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_opts(r0, 0x29, 0x38, &(0x7f0000000140)=@dstopts, 0x8) [ 462.271317][ T8434] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 462.272776][ T27] audit: type=1800 audit(1679269117.458:62): pid=8435 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1163 res=0 errno=0 23:38:37 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, 0x0, &(0x7f0000000080)) 23:38:37 executing program 2: chdir(&(0x7f0000000080)='./file0\x00') open(&(0x7f00000000c0)='./bus\x00', 0x14da42, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000180)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000400)='./bus\x00', 0x14113e, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r1, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) 23:38:37 executing program 0: openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x26d00, 0x0) [ 462.433266][ T8443] loop3: detected capacity change from 0 to 24 [ 462.440776][ T3676] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 462.574540][ T8443] fuse: Bad value for 'fd' [ 462.658806][ T27] audit: type=1800 audit(1679269117.858:63): pid=8452 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1158 res=0 errno=0 [ 463.099668][ T8451] loop4: detected capacity change from 0 to 32768 [ 463.107439][ T8451] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (8451) [ 463.131174][ T8451] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 463.140945][ T8451] BTRFS info (device loop4): turning on sync discard [ 463.147713][ T8451] BTRFS info (device loop4): using free space tree [ 463.177834][ T8451] BTRFS info (device loop4): enabling ssd optimizations [ 463.193428][ T27] audit: type=1800 audit(1679269118.388:64): pid=8451 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=263 res=0 errno=0 23:38:38 executing program 4: syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./bus\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="646973636172642c0008fd346f1fe0c7b977cf98b0dfc801ecf9a88e1ae482"], 0x1, 0x559d, &(0x7f0000005680)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) mount(0x0, &(0x7f0000000040)='.\x00', 0x0, 0x0, 0x0) 23:38:38 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000000)={0x0, 0x4, 0x2, 0x0, 0x0, [@local, @mcast2]}, 0x28) 23:38:38 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0x40049409, 0x0) 23:38:38 executing program 3: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000002340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}}) read$FUSE(r0, &(0x7f00000002c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1}, 0x50) chmod(&(0x7f0000002300)='./file0\x00', 0x0) read$FUSE(r0, &(0x7f0000006580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r0, &(0x7f0000006500)={0x78, 0x0, r2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) 23:38:38 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000180)={'tunl0\x00', &(0x7f0000000100)={'erspan0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x29, 0x0, @multicast2, @remote}}}}) 23:38:38 executing program 2: chdir(&(0x7f0000000080)='./file0\x00') open(&(0x7f00000000c0)='./bus\x00', 0x14da42, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000180)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000400)='./bus\x00', 0x14113e, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r1, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) 23:38:38 executing program 5: add_key$keyring(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) 23:38:38 executing program 3: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000002340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}}) read$FUSE(r0, &(0x7f00000002c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1}, 0x50) chmod(&(0x7f0000002300)='./file0\x00', 0x0) read$FUSE(r0, &(0x7f0000006580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r0, &(0x7f0000006500)={0x78, 0x0, r2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) 23:38:38 executing program 1: timer_create(0x3, &(0x7f0000000200)={0x0, 0x16, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) [ 463.382611][ T27] audit: type=1800 audit(1679269118.578:65): pid=8480 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1173 res=0 errno=0 23:38:38 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2}, 0x20) 23:38:38 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x2, 0x8, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 23:38:38 executing program 2: syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2804c00, &(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x1, 0x750, &(0x7f0000001640)="$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") chdir(0x0) open(&(0x7f00000000c0)='./bus\x00', 0x14da42, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000180)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000400)='./bus\x00', 0x14113e, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r1, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) [ 463.865427][ T8496] loop2: detected capacity change from 0 to 2048 [ 463.942743][ T8496] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 463.993668][ T8496] ext4 filesystem being mounted at /root/syzkaller-testdir3713254227/syzkaller.IcAci9/278/bus supports timestamps until 2038 (0x7fffffff) [ 464.044019][ T8496] EXT4-fs error (device loop2): ext4_find_dest_de:2092: inode #2: block 16: comm syz-executor.2: bad entry in directory: rec_len is smaller than minimal - offset=108, inode=646161, rec_len=0, size=4096 fake=0 [ 464.081222][ T8496] EXT4-fs error (device loop2): ext4_find_dest_de:2092: inode #2: block 16: comm syz-executor.2: bad entry in directory: rec_len is smaller than minimal - offset=108, inode=646161, rec_len=0, size=4096 fake=0 [ 464.126329][ T3674] EXT4-fs (loop2): unmounting filesystem. [ 464.298037][ T8497] loop4: detected capacity change from 0 to 32768 [ 464.306835][ T8497] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (8497) [ 464.327102][ T8497] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 464.336924][ T8497] BTRFS info (device loop4): turning on sync discard [ 464.344830][ T8497] BTRFS info (device loop4): using free space tree [ 464.367304][ T8497] BTRFS info (device loop4): enabling ssd optimizations [ 464.384998][ T27] audit: type=1800 audit(1679269119.578:66): pid=8497 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=263 res=0 errno=0 23:38:39 executing program 4: syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./bus\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="646973636172642c0008fd346f1fe0c7b977cf98b0dfc801ecf9a88e1ae482"], 0x1, 0x559d, &(0x7f0000005680)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) mount(0x0, &(0x7f0000000040)='.\x00', 0x0, 0x0, 0x0) 23:38:39 executing program 1: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000240), 0x8, 0x0) dup3(r1, r0, 0x0) 23:38:39 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0x8903, 0x0) 23:38:39 executing program 3: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000002340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}}) read$FUSE(r0, &(0x7f00000002c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1}, 0x50) chmod(&(0x7f0000002300)='./file0\x00', 0x0) read$FUSE(r0, &(0x7f0000006580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r0, &(0x7f0000006500)={0x78, 0x0, r2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) 23:38:39 executing program 0: inotify_add_watch(0xffffffffffffffff, 0x0, 0x80) 23:38:39 executing program 2: syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2804c00, &(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x1, 0x750, &(0x7f0000001640)="$eJzs3M9rHHUfB/DPTLP9mefZPPAcnseDCC20UDpJmkt7Ml7ES6FQ8FpDMgkhk2zJbmoTC209C7W5KAiid49ehVL/AG9SUPAuiNZ4EC+R2Wy2bbq7btskK/H1gul+v/Nj39/PdvLNDGQ2gH+s18p/kojhiLgcEdXW+jQiDjdbRyNub+238ejmdLkksbl55eekPCw2Nqvt90paryeieUj8LyIeVCLOvv9sbn11bWGqKPLlVn+0sXhttL66dm5+cWoun8uXxicujl2YmLgwNrFrtZ56++Kxe9+8ub7+7ZeNu68OnUtisll3tGrbtaAnbH0mlZjcsX5pL8IGKOljn6F9GAcAAL2V1/mHWtdmlajGIVdpAAAAcOBsHtkEAAAADrwkBj0CAAAAYG9t/x3A9rO9e/UcbDc/vRERI53yh5rPEEccjUpEHN9InnoyIdk6DF7K7TsRcX+yw/mXtM6/Fze2o9/PM9Lsr/vl/DPZaf5J2/NPdJh/hra/O+EldZ//Hucf6jL/Xe4z46tP/1/pmn8n4pWhTvlJOz/pkv9On/l31z+4123b5ucRpzv+/kmeyurx/RCjs/NFzx+tB3+cedir/uPP5CdJMzXpXf+1Put/b+PXhW5zSZl/5mTv//9O+eU58WFrHGlE3Gu9lv31HRknF7/7+tnk5PZ2/kyXz79z/lvt+j/rs/4fvjhyo89dAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoCmNiOFI0qzdTtMsizgREf+N42lRqzfOztZWlmbKbREjUUln54t8LCKqW/2k7I8324/753f0JyLiP98f2wqdL/JsulbMDLp4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2k5ExHAkaRYRaUT8Vk3TLBv0qAAAAIBdNzLoAQAAAAB7zv0/AAAAHHwvev+f7PI4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAPt8qVL5bK58ejmdNmfub66slC7fm4mry9kiyvT2XRt+Vo2V6vNFXk2XVv8q/dLI2L8YqzcGG3k9cZofXXt6mJtZalxdX5xai6/mlf2pSoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACe13BzSdIsItJmO02zLOJfETESlWR2vsjHIuLfEfGwWjlS9scHPWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB2XX11bWGqKPJlDQ2NfWvcioi/wTB6NAY9MwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAj11bWFqaLIl+uDHgkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACDlf6YRES5nK6eGt659XDye7X5GhHvfnLloxtTjcbyeLn+l/b6xset9eefOPDWftYAAAAAB97rz7Pz9n369n08AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAv+qrawtTRZEv72Ej7gy6SgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4EX8GQAA//8tc8Xn") chdir(0x0) open(&(0x7f00000000c0)='./bus\x00', 0x14da42, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000180)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000400)='./bus\x00', 0x14113e, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r1, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) 23:38:39 executing program 0: socket(0x2, 0xa, 0xffffffc0) 23:38:39 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, 0x0, &(0x7f0000000a80)) 23:38:39 executing program 5: pselect6(0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={&(0x7f0000000100)={[0xfe98]}, 0x8}) 23:38:39 executing program 3: syz_mount_image$romfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8303, &(0x7f0000000240)=ANY=[@ANYRES64=0x0], 0x1, 0x160, &(0x7f0000004400)="$eJzs2r9Kw1AUBvAjLQodHV0sVKKgbf5pXXUUN98gtLlp8MaURJB2chMnQeE6+BKKT+AjZHTTRcSXiMRcapuozSCNwvdb+tFzk9ycwJ1OM/A9nYVNoo3+5cHLYuB79ba53WE6syi1R0T1JERxfN2inKdRPYqp9cWCcq28pb+NNUfsnzOX20bZWwIAAAAAAAAAAAAAAAAAAAAAgIKUmgy1nvDOmMttfawaDoaHFud2EGavq8xui6VS6nKGi5jgN0l/zIn6+vI8KTtJcsVukNS1yeuvZFjtCf6c7a967PXVcDBsup7l2I59ZBhmW9vUtC1D/biXmr2jciv3RFF8r+XHyZSxebPHIvNm8vtXl1xxcZJ92uf3R/gmEBVd7DtpU/OluSpRkWfdEVG+9Fp+ExB+JVSnrqnQH9nq1HPlXzgdnX/UXTAbD8n51+r4vCv/nEU7S3x9APjBewAAAP//bM0zUA==") r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000002340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}}) read$FUSE(r0, &(0x7f00000002c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1}, 0x50) chmod(&(0x7f0000002300)='./file0\x00', 0x0) read$FUSE(r0, &(0x7f0000006580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r0, &(0x7f0000006500)={0x78, 0x0, r2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) [ 464.575162][ T8525] loop2: detected capacity change from 0 to 2048 23:38:39 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x9) sendto$l2tp6(r0, &(0x7f0000000080)='G', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x20) [ 464.753568][ T8525] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 464.768108][ T8525] ext4 filesystem being mounted at /root/syzkaller-testdir3713254227/syzkaller.IcAci9/279/bus supports timestamps until 2038 (0x7fffffff) 23:38:40 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_opts(r0, 0x29, 0x16, 0x0, 0x0) [ 464.808896][ T8525] EXT4-fs error (device loop2): ext4_find_dest_de:2092: inode #2: block 16: comm syz-executor.2: bad entry in directory: rec_len is smaller than minimal - offset=108, inode=646161, rec_len=0, size=4096 fake=0 [ 464.833825][ T8538] loop3: detected capacity change from 0 to 24 [ 464.846912][ T8525] EXT4-fs error (device loop2): ext4_find_dest_de:2092: inode #2: block 16: comm syz-executor.2: bad entry in directory: rec_len is smaller than minimal - offset=108, inode=646161, rec_len=0, size=4096 fake=0 [ 464.915588][ T8538] fuse: Bad value for 'fd' [ 464.965323][ T3674] EXT4-fs (loop2): unmounting filesystem. [ 465.386835][ T8541] loop4: detected capacity change from 0 to 32768 [ 465.396493][ T8541] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (8541) [ 465.420137][ T8541] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 465.430122][ T8541] BTRFS info (device loop4): turning on sync discard [ 465.437009][ T8541] BTRFS info (device loop4): using free space tree [ 465.467811][ T8541] BTRFS info (device loop4): enabling ssd optimizations [ 465.483142][ T27] audit: type=1800 audit(1679269120.678:67): pid=8541 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=263 res=0 errno=0 23:38:40 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}, 0x300}, 0x0) 23:38:40 executing program 2: syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2804c00, &(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x1, 0x750, &(0x7f0000001640)="$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") chdir(0x0) open(&(0x7f00000000c0)='./bus\x00', 0x14da42, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000180)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000400)='./bus\x00', 0x14113e, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r1, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) 23:38:40 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x11, r1, 0x1}, 0x14}}, 0x0) 23:38:40 executing program 3: syz_mount_image$romfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8303, &(0x7f0000000240)=ANY=[@ANYRES64=0x0], 0x1, 0x160, &(0x7f0000004400)="$eJzs2r9Kw1AUBvAjLQodHV0sVKKgbf5pXXUUN98gtLlp8MaURJB2chMnQeE6+BKKT+AjZHTTRcSXiMRcapuozSCNwvdb+tFzk9ycwJ1OM/A9nYVNoo3+5cHLYuB79ba53WE6syi1R0T1JERxfN2inKdRPYqp9cWCcq28pb+NNUfsnzOX20bZWwIAAAAAAAAAAAAAAAAAAAAAgIKUmgy1nvDOmMttfawaDoaHFud2EGavq8xui6VS6nKGi5jgN0l/zIn6+vI8KTtJcsVukNS1yeuvZFjtCf6c7a967PXVcDBsup7l2I59ZBhmW9vUtC1D/biXmr2jciv3RFF8r+XHyZSxebPHIvNm8vtXl1xxcZJ92uf3R/gmEBVd7DtpU/OluSpRkWfdEVG+9Fp+ExB+JVSnrqnQH9nq1HPlXzgdnX/UXTAbD8n51+r4vCv/nEU7S3x9APjBewAAAP//bM0zUA==") r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000002340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}}) read$FUSE(r0, &(0x7f00000002c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1}, 0x50) chmod(&(0x7f0000002300)='./file0\x00', 0x0) read$FUSE(r0, &(0x7f0000006580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r0, &(0x7f0000006500)={0x78, 0x0, r2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) 23:38:40 executing program 5: keyctl$link(0x1b, 0x0, 0xffffffffffffffff) 23:38:40 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x1c, r1, 0x21a289236b6da101, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}]}, 0x1c}}, 0x0) [ 465.643227][ T8570] loop3: detected capacity change from 0 to 24 23:38:40 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0x541b, 0x0) 23:38:40 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000100)={{0xd1}}) 23:38:40 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x2, 0x8, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [@sadb_x_nat_t_port={0x1}]}, 0x18}}, 0x0) [ 465.733184][ T8570] fuse: Bad value for 'fd' [ 465.779510][ T8574] loop2: detected capacity change from 0 to 2048 23:38:41 executing program 3: syz_mount_image$romfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8303, &(0x7f0000000240)=ANY=[@ANYRES64=0x0], 0x1, 0x160, &(0x7f0000004400)="$eJzs2r9Kw1AUBvAjLQodHV0sVKKgbf5pXXUUN98gtLlp8MaURJB2chMnQeE6+BKKT+AjZHTTRcSXiMRcapuozSCNwvdb+tFzk9ycwJ1OM/A9nYVNoo3+5cHLYuB79ba53WE6syi1R0T1JERxfN2inKdRPYqp9cWCcq28pb+NNUfsnzOX20bZWwIAAAAAAAAAAAAAAAAAAAAAgIKUmgy1nvDOmMttfawaDoaHFud2EGavq8xui6VS6nKGi5jgN0l/zIn6+vI8KTtJcsVukNS1yeuvZFjtCf6c7a967PXVcDBsup7l2I59ZBhmW9vUtC1D/biXmr2jciv3RFF8r+XHyZSxebPHIvNm8vtXl1xxcZJ92uf3R/gmEBVd7DtpU/OluSpRkWfdEVG+9Fp+ExB+JVSnrqnQH9nq1HPlXzgdnX/UXTAbD8n51+r4vCv/nEU7S3x9APjBewAAAP//bM0zUA==") r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000002340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}}) read$FUSE(r0, &(0x7f00000002c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1}, 0x50) chmod(&(0x7f0000002300)='./file0\x00', 0x0) read$FUSE(r0, &(0x7f0000006580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r0, &(0x7f0000006500)={0x78, 0x0, r2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) 23:38:41 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@dellinkprop={0x20, 0x6d, 0x1}, 0x20}}, 0x0) 23:38:41 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) 23:38:41 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000001280), 0x0, 0x0) timerfd_gettime(r0, 0x0) [ 465.918391][ T8574] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 465.952307][ T8574] ext4 filesystem being mounted at /root/syzkaller-testdir3713254227/syzkaller.IcAci9/280/bus supports timestamps until 2038 (0x7fffffff) [ 465.980809][ T8574] EXT4-fs error (device loop2): ext4_find_dest_de:2092: inode #2: block 16: comm syz-executor.2: bad entry in directory: rec_len is smaller than minimal - offset=108, inode=646161, rec_len=0, size=4096 fake=0 23:38:41 executing program 2: syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2804c00, &(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x1, 0x750, &(0x7f0000001640)="$eJzs3M9rHHUfB/DPTLP9mefZPPAcnseDCC20UDpJmkt7Ml7ES6FQ8FpDMgkhk2zJbmoTC209C7W5KAiid49ehVL/AG9SUPAuiNZ4EC+R2Wy2bbq7btskK/H1gul+v/Nj39/PdvLNDGQ2gH+s18p/kojhiLgcEdXW+jQiDjdbRyNub+238ejmdLkksbl55eekPCw2Nqvt90paryeieUj8LyIeVCLOvv9sbn11bWGqKPLlVn+0sXhttL66dm5+cWoun8uXxicujl2YmLgwNrFrtZ56++Kxe9+8ub7+7ZeNu68OnUtisll3tGrbtaAnbH0mlZjcsX5pL8IGKOljn6F9GAcAAL2V1/mHWtdmlajGIVdpAAAAcOBsHtkEAAAADrwkBj0CAAAAYG9t/x3A9rO9e/UcbDc/vRERI53yh5rPEEccjUpEHN9InnoyIdk6DF7K7TsRcX+yw/mXtM6/Fze2o9/PM9Lsr/vl/DPZaf5J2/NPdJh/hra/O+EldZ//Hucf6jL/Xe4z46tP/1/pmn8n4pWhTvlJOz/pkv9On/l31z+4123b5ucRpzv+/kmeyurx/RCjs/NFzx+tB3+cedir/uPP5CdJMzXpXf+1Put/b+PXhW5zSZl/5mTv//9O+eU58WFrHGlE3Gu9lv31HRknF7/7+tnk5PZ2/kyXz79z/lvt+j/rs/4fvjhyo89dAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoCmNiOFI0qzdTtMsizgREf+N42lRqzfOztZWlmbKbREjUUln54t8LCKqW/2k7I8324/753f0JyLiP98f2wqdL/JsulbMDLp4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2k5ExHAkaRYRaUT8Vk3TLBv0qAAAAIBdNzLoAQAAAAB7zv0/AAAAHHwvev+f7PI4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAPt8qVL5bK58ejmdNmfub66slC7fm4mry9kiyvT2XRt+Vo2V6vNFXk2XVv8q/dLI2L8YqzcGG3k9cZofXXt6mJtZalxdX5xai6/mlf2pSoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACe13BzSdIsItJmO02zLOJfETESlWR2vsjHIuLfEfGwWjlS9scHPWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB2XX11bWGqKPJlDQ2NfWvcioi/wTB6NAY9MwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAj11bWFqaLIl+uDHgkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACDlf6YRES5nK6eGt659XDye7X5GhHvfnLloxtTjcbyeLn+l/b6xset9eefOPDWftYAAAAAB97rz7Pz9n369n08AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAv+qrawtTRZEv72Ej7gy6SgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4EX8GQAA//8tc8Xn") chdir(&(0x7f0000000080)='./file0\x00') open(0x0, 0x14da42, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000180)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000400)='./bus\x00', 0x14113e, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r1, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) 23:38:41 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_opts(r0, 0x29, 0x22, 0x0, 0xb) 23:38:41 executing program 4: getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)={'mangle\x00', 0x0, [0x4, 0x0, 0x0, 0x101]}, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) socket$inet6(0xa, 0x0, 0x2) sendto$l2tp6(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x8000, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000240)=@raw={'raw\x00', 0x9, 0x3, 0x300, 0x0, 0xffffffff, 0xffffffff, 0x118, 0xffffffff, 0x230, 0xffffffff, 0xffffffff, 0x230, 0xffffffff, 0x3, &(0x7f0000000200), {[{{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@hl={{0x28}, {0x0, 0xd4}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x0, 0x0, {0x3}}}}, {{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@dst={{0x48}, {0xffff, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3ff]}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x0, 0x33}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x360) 23:38:41 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, 0x0, 0x0, 0x4000000, &(0x7f00000004c0)={0xa, 0x0, 0x0, @empty}, 0x20) [ 466.060658][ T8593] loop3: detected capacity change from 0 to 24 [ 466.071534][ T8574] EXT4-fs error (device loop2): ext4_find_dest_de:2092: inode #2: block 16: comm syz-executor.2: bad entry in directory: rec_len is smaller than minimal - offset=108, inode=646161, rec_len=0, size=4096 fake=0 [ 466.119927][ T8593] fuse: Bad value for 'fd' 23:38:41 executing program 3: syz_mount_image$romfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8303, &(0x7f0000000240)=ANY=[@ANYRES64=0x0], 0x1, 0x160, &(0x7f0000004400)="$eJzs2r9Kw1AUBvAjLQodHV0sVKKgbf5pXXUUN98gtLlp8MaURJB2chMnQeE6+BKKT+AjZHTTRcSXiMRcapuozSCNwvdb+tFzk9ycwJ1OM/A9nYVNoo3+5cHLYuB79ba53WE6syi1R0T1JERxfN2inKdRPYqp9cWCcq28pb+NNUfsnzOX20bZWwIAAAAAAAAAAAAAAAAAAAAAgIKUmgy1nvDOmMttfawaDoaHFud2EGavq8xui6VS6nKGi5jgN0l/zIn6+vI8KTtJcsVukNS1yeuvZFjtCf6c7a967PXVcDBsup7l2I59ZBhmW9vUtC1D/biXmr2jciv3RFF8r+XHyZSxebPHIvNm8vtXl1xxcZJ92uf3R/gmEBVd7DtpU/OluSpRkWfdEVG+9Fp+ExB+JVSnrqnQH9nq1HPlXzgdnX/UXTAbD8n51+r4vCv/nEU7S3x9APjBewAAAP//bM0zUA==") r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000002340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}}) read$FUSE(r0, &(0x7f00000002c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1}, 0x50) chmod(&(0x7f0000002300)='./file0\x00', 0x0) read$FUSE(r0, &(0x7f0000006580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r0, &(0x7f0000006500)={0x78, 0x0, r2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) 23:38:41 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001180)={0x14, 0x0, 0x1}, 0x14}}, 0x0) 23:38:41 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f00000001c0)={0x401}, 0x4) [ 466.151196][ T3674] EXT4-fs (loop2): unmounting filesystem. [ 466.194947][ T8602] x_tables: duplicate underflow at hook 3 23:38:41 executing program 1: socket(0x2, 0x0, 0xb76) 23:38:41 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0x5452, 0x0) [ 466.267616][ T8606] loop3: detected capacity change from 0 to 24 23:38:41 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, 0x0, 0x0, 0x20008004, &(0x7f0000000000)={0xa, 0x0, 0x6, @remote, 0x2, 0x4}, 0x20) 23:38:41 executing program 3: syz_mount_image$romfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8303, &(0x7f0000000240)=ANY=[@ANYRES64=0x0], 0x1, 0x160, &(0x7f0000004400)="$eJzs2r9Kw1AUBvAjLQodHV0sVKKgbf5pXXUUN98gtLlp8MaURJB2chMnQeE6+BKKT+AjZHTTRcSXiMRcapuozSCNwvdb+tFzk9ycwJ1OM/A9nYVNoo3+5cHLYuB79ba53WE6syi1R0T1JERxfN2inKdRPYqp9cWCcq28pb+NNUfsnzOX20bZWwIAAAAAAAAAAAAAAAAAAAAAgIKUmgy1nvDOmMttfawaDoaHFud2EGavq8xui6VS6nKGi5jgN0l/zIn6+vI8KTtJcsVukNS1yeuvZFjtCf6c7a967PXVcDBsup7l2I59ZBhmW9vUtC1D/biXmr2jciv3RFF8r+XHyZSxebPHIvNm8vtXl1xxcZJ92uf3R/gmEBVd7DtpU/OluSpRkWfdEVG+9Fp+ExB+JVSnrqnQH9nq1HPlXzgdnX/UXTAbD8n51+r4vCv/nEU7S3x9APjBewAAAP//bM0zUA==") r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000002340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}}) read$FUSE(r0, &(0x7f00000002c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1}, 0x50) chmod(&(0x7f0000002300)='./file0\x00', 0x0) read$FUSE(r0, &(0x7f0000006580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r0, &(0x7f0000006500)={0x78, 0x0, r2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) 23:38:41 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_opts(r0, 0x29, 0x2e, 0x0, 0x0) [ 466.437390][ T8609] loop2: detected capacity change from 0 to 2048 [ 466.500621][ T8620] loop3: detected capacity change from 0 to 24 [ 466.518719][ T8609] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 466.547776][ T8609] ext4 filesystem being mounted at /root/syzkaller-testdir3713254227/syzkaller.IcAci9/281/bus supports timestamps until 2038 (0x7fffffff) 23:38:41 executing program 2: syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2804c00, &(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x1, 0x750, &(0x7f0000001640)="$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") chdir(&(0x7f0000000080)='./file0\x00') open(0x0, 0x14da42, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000180)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000400)='./bus\x00', 0x14113e, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r1, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) 23:38:41 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x101}, 0x20) 23:38:41 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_opts(r0, 0x29, 0x13, 0x0, 0xb) 23:38:41 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback, 0x7}, 0x20) 23:38:41 executing program 3: syz_mount_image$romfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8303, &(0x7f0000000240)=ANY=[@ANYRES64=0x0], 0x1, 0x160, &(0x7f0000004400)="$eJzs2r9Kw1AUBvAjLQodHV0sVKKgbf5pXXUUN98gtLlp8MaURJB2chMnQeE6+BKKT+AjZHTTRcSXiMRcapuozSCNwvdb+tFzk9ycwJ1OM/A9nYVNoo3+5cHLYuB79ba53WE6syi1R0T1JERxfN2inKdRPYqp9cWCcq28pb+NNUfsnzOX20bZWwIAAAAAAAAAAAAAAAAAAAAAgIKUmgy1nvDOmMttfawaDoaHFud2EGavq8xui6VS6nKGi5jgN0l/zIn6+vI8KTtJcsVukNS1yeuvZFjtCf6c7a967PXVcDBsup7l2I59ZBhmW9vUtC1D/biXmr2jciv3RFF8r+XHyZSxebPHIvNm8vtXl1xxcZJ92uf3R/gmEBVd7DtpU/OluSpRkWfdEVG+9Fp+ExB+JVSnrqnQH9nq1HPlXzgdnX/UXTAbD8n51+r4vCv/nEU7S3x9APjBewAAAP//bM0zUA==") r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000002340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}}) read$FUSE(r0, &(0x7f00000002c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1}, 0x50) chmod(&(0x7f0000002300)='./file0\x00', 0x0) read$FUSE(r0, &(0x7f0000006580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r0, &(0x7f0000006500)={0x78, 0x0, r2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) 23:38:41 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_opts(r0, 0x29, 0x2c, 0x0, 0x0) 23:38:42 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0x8918, 0x0) 23:38:42 executing program 0: r0 = add_key$fscrypt_v1(&(0x7f0000000bc0), &(0x7f0000000c00)={'fscrypt:', @desc3}, &(0x7f0000000c40)={0x0, "59caeebbe7373eaf6773a5dbc4bf4dfb96820fd43c79544d23b05baf6874897b0688c856d823465154c77b453cdffe29a504f7b89e9cdc45cc4c21022cb5469c"}, 0x48, 0xfffffffffffffffc) keyctl$link(0x8, 0x0, 0xffffffffffffffff) r1 = add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000100)={'fscrypt:', @desc3}, &(0x7f00000001c0)={0x0, "11a8ce18305e5ea9e4dcab327ae801bb58a87c61b7d3cc9b64c77578c7a5d3ea87dbb0ce20a0f38da2b09262dd5bdfd93706c1035d1d24cc81436f80cc9db885"}, 0x48, 0xfffffffffffffffe) keyctl$search(0xa, r1, &(0x7f0000000140)='rxrpc_s\x00', &(0x7f0000000240)={'syz', 0x2}, r0) 23:38:42 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000140)) [ 466.789663][ T8633] loop3: detected capacity change from 0 to 24 [ 466.810899][ T3674] EXT4-fs (loop2): unmounting filesystem. [ 466.823972][ T3676] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 23:38:42 executing program 3: syz_mount_image$romfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8303, &(0x7f0000000240)=ANY=[@ANYRES64=0x0], 0x1, 0x160, &(0x7f0000004400)="$eJzs2r9Kw1AUBvAjLQodHV0sVKKgbf5pXXUUN98gtLlp8MaURJB2chMnQeE6+BKKT+AjZHTTRcSXiMRcapuozSCNwvdb+tFzk9ycwJ1OM/A9nYVNoo3+5cHLYuB79ba53WE6syi1R0T1JERxfN2inKdRPYqp9cWCcq28pb+NNUfsnzOX20bZWwIAAAAAAAAAAAAAAAAAAAAAgIKUmgy1nvDOmMttfawaDoaHFud2EGavq8xui6VS6nKGi5jgN0l/zIn6+vI8KTtJcsVukNS1yeuvZFjtCf6c7a967PXVcDBsup7l2I59ZBhmW9vUtC1D/biXmr2jciv3RFF8r+XHyZSxebPHIvNm8vtXl1xxcZJ92uf3R/gmEBVd7DtpU/OluSpRkWfdEVG+9Fp+ExB+JVSnrqnQH9nq1HPlXzgdnX/UXTAbD8n51+r4vCv/nEU7S3x9APjBewAAAP//bM0zUA==") r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000002340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}}) read$FUSE(r0, &(0x7f00000002c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1}, 0x50) chmod(&(0x7f0000002300)='./file0\x00', 0x0) read$FUSE(r0, &(0x7f0000006580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r0, &(0x7f0000006500)={0x78, 0x0, r2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) 23:38:42 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0x40086602, 0x0) 23:38:42 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000f0000000e0001006e657464657673696d0000000f"], 0x44}}, 0x0) [ 467.100175][ T8648] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 467.113467][ T8649] loop3: detected capacity change from 0 to 24 [ 467.164111][ T8643] loop2: detected capacity change from 0 to 2048 [ 467.177829][ T3693] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 467.203782][ T3693] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 467.225642][ T3693] Buffer I/O error on dev loop2, logical block 0, async page read [ 467.289890][ T8643] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 467.365817][ T8643] ext4 filesystem being mounted at /root/syzkaller-testdir3713254227/syzkaller.IcAci9/282/bus supports timestamps until 2038 (0x7fffffff) 23:38:42 executing program 2: syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2804c00, &(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x1, 0x750, &(0x7f0000001640)="$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") chdir(&(0x7f0000000080)='./file0\x00') open(0x0, 0x14da42, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000180)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000400)='./bus\x00', 0x14113e, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r1, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) 23:38:42 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./bus\x00', 0x50, &(0x7f00000003c0)=ANY=[], 0x2, 0x60d, &(0x7f0000000d00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0, 0x0) 23:38:42 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000000000)={0xe, {"a2e3ad08ed6b529b9cfbf4c0871b3e6ed04fe7ff7fc6e5539b5b68093b546a9b374794370890e0878fdb1ac6e7049b71b4956c0a9a472a0847f3988f7ef31952a981ffe8d178708c523c921b1b9b3d0a169b6cd336cd3b78130daa61d8e809ea882f6e02b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f309f4cff7738596ecae8707ce065cd5b91cd0ae193973735b36d5b1b63e91c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecd03aded6f9081b4da0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71bfc31870262f5e801119242ca5b6bfc821e7e20002451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713cf39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987b67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27afc953854a642c57519544ae15a7e454dea05918b4124351601611c8f11baa500a3621c56cea8d20ff911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0eee26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6000200000000000065d5e880576286522449df466c632b356f243f989cce3803f465e41e610c20d80421d653a5120000008213b704c7fb082ff27590678ef9f190bae979babc7041d860420c5664ba7921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0004000000008000bea37de0d0d4aa202fef5952a5391fd5615d429a04a689b83c7068ae949ed06e288e810bac9c76600025907f8ea2e2f05dd3318271a1f5f8528f227e79c13800000000492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eefc9a9a0270e4c10d64cd5a62427264f2360fe763c43470833ac96d3f3357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5307000000d92dad99dac44c3f0008047096a44060bebc2420aed92fa9b6c6224779415d97b9a6d6d5495c1180459043f41c2fc4f4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a7288afe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f48fe4eae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e67d1d7232f17696294378ce716dacfc5e3e03cfffffffffffff001034ef655b253ca509383815b1b6fc6522d4e2d48604665fde2b94cf02b98a269b891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efedfd71af9444e197f47e866101496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f7927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615f7084a607a7eceb6243378e0610060f02cca4051c2f001edb3d78fb4b5f668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c4e15a7b6eb65ca8104e1b4da1fbb77ab2fc043aead87c32ab875ee7c2e7b7019c902cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad948741b2044642c37b4a6cc6c04effc1672db7e4b68d767d9a7a508ae54a3cd73643de50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11dbe200000000000000bf70cc77737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebd2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bc09ff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f71c497579773767075428067e7f16f4dde374f8211fef42cb468e623daf60b3569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d3414442e863a154704b0e51bc664a137b26be7fc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c5d3b2d78378cfb85ed82e7da0f6eb6d279f2ae44369ddb4581c55925d0f6f1ba471eba281f259152f85a654fb39ddff3b484439ff158e7c5419e037f3563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cdcffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a39973132f02768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebfeffffff82bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864d0270d81eaee5ee6cf1d0ab3785e00785ec27e923911fab964c271556527697b52160687461602f88df165d884b36ec2b6c25a2f362815687e9ddbfb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e7027132f2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5336651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bf0129165895ac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463181f4b87c10772d2b13f7809959bc0488506dbd17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76d57234ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f84fad6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b3110b937fe43c06d21e35810d8fe98b0000ea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc238a081ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a6045951f9a93ab5d99c066f7aef0948a68cb0b3e35cb80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c60edddab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d068edc746b0827cbf652f406c6b95f2722e58c050400ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36de00bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f16c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0463ec014508e5247d33ae6c962d35603ff8454c16f8342856935125102bb784ed714887071ffdd9923c954ab6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee658e4cb5e930ed624806c43a006dc9336d07c2b8081c128ad7084c29743bc613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da3932ba5c04c24a560ad80a3ce654575576e599aff3565b1d531f30912b99e6619ebe93cc0b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274018c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90195c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e6491953264d2700c838fa2c7b34252600c9654e502dcea39cb6bc3eb8d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c34c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce85dbd02ee46c5cd5892587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec660080934b33ad61b4f65d77e86abd6859cddf4bbae1f0930462df090000008562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b010a3ad0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ff1aa70826ad01a9b03c37b0969be0daf60af93109eb1dee72e4a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000200", 0x1000}}, 0x1006) 23:38:42 executing program 1: syz_open_dev$vcsa(0x0, 0x0, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) sendmsg$TEAM_CMD_NOOP(r2, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000006c0)={0x70, 0x0, 0x800, 0x0, 0x0, {}, [{{0x8}, {0x4}}, {{0x8}, {0x4}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}]}}]}, 0x70}}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000010c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000001400), 0xffffffffffffffff) 23:38:42 executing program 5: r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000140)={0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 23:38:42 executing program 3: syz_mount_image$romfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8303, &(0x7f0000000240)=ANY=[@ANYRES64=0x0], 0x1, 0x160, &(0x7f0000004400)="$eJzs2r9Kw1AUBvAjLQodHV0sVKKgbf5pXXUUN98gtLlp8MaURJB2chMnQeE6+BKKT+AjZHTTRcSXiMRcapuozSCNwvdb+tFzk9ycwJ1OM/A9nYVNoo3+5cHLYuB79ba53WE6syi1R0T1JERxfN2inKdRPYqp9cWCcq28pb+NNUfsnzOX20bZWwIAAAAAAAAAAAAAAAAAAAAAgIKUmgy1nvDOmMttfawaDoaHFud2EGavq8xui6VS6nKGi5jgN0l/zIn6+vI8KTtJcsVukNS1yeuvZFjtCf6c7a967PXVcDBsup7l2I59ZBhmW9vUtC1D/biXmr2jciv3RFF8r+XHyZSxebPHIvNm8vtXl1xxcZJ92uf3R/gmEBVd7DtpU/OluSpRkWfdEVG+9Fp+ExB+JVSnrqnQH9nq1HPlXzgdnX/UXTAbD8n51+r4vCv/nEU7S3x9APjBewAAAP//bM0zUA==") r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000002340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}}) read$FUSE(r0, &(0x7f00000002c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1}, 0x50) chmod(&(0x7f0000002300)='./file0\x00', 0x0) read$FUSE(r0, &(0x7f0000006580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r0, &(0x7f0000006500)={0x78, 0x0, r2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) 23:38:42 executing program 5: mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x100078}, 0x20) [ 467.564376][ T8658] loop3: detected capacity change from 0 to 24 [ 467.584212][ T3693] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 23:38:42 executing program 1: keyctl$link(0xe, 0x0, 0xffffffffffffffff) [ 467.621308][ T3674] EXT4-fs (loop2): unmounting filesystem. [ 467.666473][ T8663] loop0: detected capacity change from 0 to 1024 23:38:43 executing program 5: r0 = socket(0x2, 0xa, 0x0) recvfrom$l2tp6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 23:38:43 executing program 1: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, r0) keyctl$KEYCTL_MOVE(0x1e, r0, r1, r0, 0x0) [ 467.846479][ T8663] syz-executor.0: attempt to access beyond end of device [ 467.846479][ T8663] loop0: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 467.898023][ T8663] Buffer I/O error on dev loop0, logical block 2889, async page read [ 467.926010][ T8663] syz-executor.0: attempt to access beyond end of device [ 467.926010][ T8663] loop0: rw=0, sector=5778, nr_sectors = 2 limit=1024 23:38:43 executing program 4: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}, 0xfffffffffffffded) [ 467.949076][ T8672] loop2: detected capacity change from 0 to 2048 [ 467.987342][ T8663] Buffer I/O error on dev loop0, logical block 2889, async page read 23:38:43 executing program 3: syz_mount_image$romfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8303, &(0x7f0000000240)=ANY=[@ANYRES64=0x0], 0x1, 0x160, &(0x7f0000004400)="$eJzs2r9Kw1AUBvAjLQodHV0sVKKgbf5pXXUUN98gtLlp8MaURJB2chMnQeE6+BKKT+AjZHTTRcSXiMRcapuozSCNwvdb+tFzk9ycwJ1OM/A9nYVNoo3+5cHLYuB79ba53WE6syi1R0T1JERxfN2inKdRPYqp9cWCcq28pb+NNUfsnzOX20bZWwIAAAAAAAAAAAAAAAAAAAAAgIKUmgy1nvDOmMttfawaDoaHFud2EGavq8xui6VS6nKGi5jgN0l/zIn6+vI8KTtJcsVukNS1yeuvZFjtCf6c7a967PXVcDBsup7l2I59ZBhmW9vUtC1D/biXmr2jciv3RFF8r+XHyZSxebPHIvNm8vtXl1xxcZJ92uf3R/gmEBVd7DtpU/OluSpRkWfdEVG+9Fp+ExB+JVSnrqnQH9nq1HPlXzgdnX/UXTAbD8n51+r4vCv/nEU7S3x9APjBewAAAP//bM0zUA==") r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000002340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}}) read$FUSE(r0, &(0x7f00000002c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1}, 0x50) chmod(&(0x7f0000002300)='./file0\x00', 0x0) read$FUSE(r0, &(0x7f0000006580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r0, &(0x7f0000006500)={0x78, 0x0, r2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) [ 468.010758][ T27] audit: type=1800 audit(1679269123.208:68): pid=8663 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.0" name="file1" dev="loop0" ino=20 res=0 errno=0 [ 468.076722][ T8672] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 468.122138][ T8672] ext4 filesystem being mounted at /root/syzkaller-testdir3713254227/syzkaller.IcAci9/283/bus supports timestamps until 2038 (0x7fffffff) [ 468.149833][ T8683] loop3: detected capacity change from 0 to 24 [ 468.166831][ T3693] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 23:38:43 executing program 2: syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2804c00, &(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x1, 0x750, &(0x7f0000001640)="$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") chdir(&(0x7f0000000080)='./file0\x00') open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000180)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000400)='./bus\x00', 0x14113e, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r1, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) 23:38:43 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300180e05c6a78d1227"], 0x1c}}, 0x0) 23:38:43 executing program 0: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$fscrypt_v1(&(0x7f0000000bc0), &(0x7f0000000c00)={'fscrypt:', @desc3}, &(0x7f0000000c40)={0x0, "59caeebbe7373eaf6773a5dbc4bf4dfb96820fd43c79544d23b05baf6874897b0688c856d823465154c77b453cdffe29a504f7b89e9cdc45cc4c21022cb5469c"}, 0x48, 0xfffffffffffffffc) keyctl$unlink(0x9, r1, r0) 23:38:43 executing program 4: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0)={0x88, 0x0, 0x140000}, 0x20) 23:38:43 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_opts(r0, 0x29, 0x49, 0x0, 0x0) 23:38:43 executing program 0: keyctl$link(0x10, 0x0, 0xffffffffffffffff) 23:38:43 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'tunl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @broadcast, @multicast2}}}}) [ 468.310777][ T3674] EXT4-fs (loop2): unmounting filesystem. 23:38:43 executing program 1: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100), &(0x7f0000000180)={&(0x7f0000000140)={[0x8001]}, 0x8}) [ 468.578520][ T8699] loop2: detected capacity change from 0 to 2048 [ 468.600120][ T3669] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 468.627234][ T3669] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 468.649765][ T3669] Buffer I/O error on dev loop2, logical block 0, async page read 23:38:43 executing program 5: munmap(&(0x7f0000ff6000/0x2000)=nil, 0x2000) mlock(&(0x7f0000ff4000/0x3000)=nil, 0x3000) shmat(0x0, &(0x7f0000fe9000/0x14000)=nil, 0xfa22cffe51934c35) 23:38:43 executing program 3: syz_mount_image$romfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8303, &(0x7f0000000240)=ANY=[@ANYRES64=0x0], 0x1, 0x160, &(0x7f0000004400)="$eJzs2r9Kw1AUBvAjLQodHV0sVKKgbf5pXXUUN98gtLlp8MaURJB2chMnQeE6+BKKT+AjZHTTRcSXiMRcapuozSCNwvdb+tFzk9ycwJ1OM/A9nYVNoo3+5cHLYuB79ba53WE6syi1R0T1JERxfN2inKdRPYqp9cWCcq28pb+NNUfsnzOX20bZWwIAAAAAAAAAAAAAAAAAAAAAgIKUmgy1nvDOmMttfawaDoaHFud2EGavq8xui6VS6nKGi5jgN0l/zIn6+vI8KTtJcsVukNS1yeuvZFjtCf6c7a967PXVcDBsup7l2I59ZBhmW9vUtC1D/biXmr2jciv3RFF8r+XHyZSxebPHIvNm8vtXl1xxcZJ92uf3R/gmEBVd7DtpU/OluSpRkWfdEVG+9Fp+ExB+JVSnrqnQH9nq1HPlXzgdnX/UXTAbD8n51+r4vCv/nEU7S3x9APjBewAAAP//bM0zUA==") r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000240), 0x0, 0x0) read$FUSE(r0, &(0x7f00000002c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1}, 0x50) chmod(&(0x7f0000002300)='./file0\x00', 0x0) read$FUSE(r0, &(0x7f0000006580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r0, &(0x7f0000006500)={0x78, 0x0, r2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) 23:38:43 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0x4020940d, 0x0) 23:38:43 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x4, 0x3d0, 0xffffffff, 0xf0, 0x230, 0xf0, 0xffffffff, 0xffffffff, 0x350, 0x350, 0x350, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast1, @mcast2, [], [], 'nr0\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'vlan0\x00'}}}, {{@ipv6={@dev, @local, [], [], 'veth0_vlan\x00', 'veth0_to_team\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@eui64={{0x28}}, @common=@hbh={{0x48}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) [ 468.684098][ T8699] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 468.697300][ T8699] ext4 filesystem being mounted at /root/syzkaller-testdir3713254227/syzkaller.IcAci9/284/bus supports timestamps until 2038 (0x7fffffff) [ 468.772520][ T8709] loop3: detected capacity change from 0 to 24 23:38:44 executing program 2: syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2804c00, &(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x1, 0x750, &(0x7f0000001640)="$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") chdir(&(0x7f0000000080)='./file0\x00') open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000180)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000400)='./bus\x00', 0x14113e, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r1, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) 23:38:44 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000020c0)={0x1, &(0x7f0000002080)=[{0x6}]}) 23:38:44 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000020c0)={0x1, &(0x7f0000002080)=[{0x6, 0x0, 0x0, 0xff}]}) 23:38:44 executing program 4: shmat(0x0, &(0x7f0000ff2000/0x4000)=nil, 0x5000) semctl$IPC_SET(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)={{0x0}}) mlock(&(0x7f0000fef000/0x4000)=nil, 0x4000) mlock(&(0x7f0000fee000/0xf000)=nil, 0xf000) 23:38:44 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x1, &(0x7f0000000000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 23:38:44 executing program 3: syz_mount_image$romfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8303, &(0x7f0000000240)=ANY=[@ANYRES64=0x0], 0x1, 0x160, &(0x7f0000004400)="$eJzs2r9Kw1AUBvAjLQodHV0sVKKgbf5pXXUUN98gtLlp8MaURJB2chMnQeE6+BKKT+AjZHTTRcSXiMRcapuozSCNwvdb+tFzk9ycwJ1OM/A9nYVNoo3+5cHLYuB79ba53WE6syi1R0T1JERxfN2inKdRPYqp9cWCcq28pb+NNUfsnzOX20bZWwIAAAAAAAAAAAAAAAAAAAAAgIKUmgy1nvDOmMttfawaDoaHFud2EGavq8xui6VS6nKGi5jgN0l/zIn6+vI8KTtJcsVukNS1yeuvZFjtCf6c7a967PXVcDBsup7l2I59ZBhmW9vUtC1D/biXmr2jciv3RFF8r+XHyZSxebPHIvNm8vtXl1xxcZJ92uf3R/gmEBVd7DtpU/OluSpRkWfdEVG+9Fp+ExB+JVSnrqnQH9nq1HPlXzgdnX/UXTAbD8n51+r4vCv/nEU7S3x9APjBewAAAP//bM0zUA==") r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000240), 0x0, 0x0) read$FUSE(r0, &(0x7f00000002c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1}, 0x50) chmod(&(0x7f0000002300)='./file0\x00', 0x0) read$FUSE(r0, &(0x7f0000006580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r0, &(0x7f0000006500)={0x78, 0x0, r2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) [ 468.893655][ T27] audit: type=1326 audit(1679269124.088:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8714 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc5a928c0f9 code=0x0 23:38:44 executing program 5: ioprio_set$pid(0x1, 0xffffffffffffffff, 0x4000) 23:38:44 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x97) 23:38:44 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$link(0x3, r0, 0xffffffffffffffff) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000580)={'wlan0\x00'}) add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, r0) [ 468.934215][ T3674] EXT4-fs (loop2): unmounting filesystem. 23:38:44 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_CACHEINFO={0x14, 0x8, {0x2}}]}, 0x40}}, 0x0) 23:38:44 executing program 5: landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 23:38:44 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0xf4240, &(0x7f0000000400)=@raw=[@call], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 469.031202][ T27] audit: type=1326 audit(1679269124.148:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8720 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6dc5c8c0f9 code=0x0 [ 469.063414][ T8728] loop3: detected capacity change from 0 to 24 [ 469.130101][ T8732] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 469.146689][ T8733] loop2: detected capacity change from 0 to 2048 [ 469.242161][ T8733] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 469.268183][ T8733] ext4 filesystem being mounted at /root/syzkaller-testdir3713254227/syzkaller.IcAci9/285/bus supports timestamps until 2038 (0x7fffffff) 23:38:44 executing program 2: syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2804c00, &(0x7f0000000440)=ANY=[@ANYBLOB="0089f2832730bf994f589885cc769fe9ff0f61f46abebbde12c300000000000000004f9ccb1bb434bfd3000098c94e056c0850980a0083cfe8b422987b7600000000f2935e176297b1084a51bd8f968f05a5d657832ff1431d562136b4da360117f775000000000000000000bba7dc7fca7c1cd1d8d0ef487a658a9ca8d9a97746736798562fb2ab78afa0ce15449e2877793e468974c829bdec6fa55dffee9d4a3d79f24219472a8fb1c383f3b607bd1eb995de5c8740ff8b61a5e6c4e8262c2768c29627aa0589727acdfa3ae7615abd1db448fac33f7a6ba8b3273bf02c2c7bc56ac9ec78f92dfa51dbfd5317d5a0a7dbeb3d71a5680cb3a3a12583309f597e509a6ed8510ed554af64d97e13357959bb7f428cb3", @ANYRESDEC], 0x1, 0x750, &(0x7f0000001640)="$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") chdir(&(0x7f0000000080)='./file0\x00') open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000180)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000400)='./bus\x00', 0x14113e, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r1, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) 23:38:44 executing program 3: syz_mount_image$romfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8303, &(0x7f0000000240)=ANY=[@ANYRES64=0x0], 0x1, 0x160, &(0x7f0000004400)="$eJzs2r9Kw1AUBvAjLQodHV0sVKKgbf5pXXUUN98gtLlp8MaURJB2chMnQeE6+BKKT+AjZHTTRcSXiMRcapuozSCNwvdb+tFzk9ycwJ1OM/A9nYVNoo3+5cHLYuB79ba53WE6syi1R0T1JERxfN2inKdRPYqp9cWCcq28pb+NNUfsnzOX20bZWwIAAAAAAAAAAAAAAAAAAAAAgIKUmgy1nvDOmMttfawaDoaHFud2EGavq8xui6VS6nKGi5jgN0l/zIn6+vI8KTtJcsVukNS1yeuvZFjtCf6c7a967PXVcDBsup7l2I59ZBhmW9vUtC1D/biXmr2jciv3RFF8r+XHyZSxebPHIvNm8vtXl1xxcZJ92uf3R/gmEBVd7DtpU/OluSpRkWfdEVG+9Fp+ExB+JVSnrqnQH9nq1HPlXzgdnX/UXTAbD8n51+r4vCv/nEU7S3x9APjBewAAAP//bM0zUA==") r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000240), 0x0, 0x0) read$FUSE(r0, &(0x7f00000002c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1}, 0x50) chmod(&(0x7f0000002300)='./file0\x00', 0x0) read$FUSE(r0, &(0x7f0000006580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r0, &(0x7f0000006500)={0x78, 0x0, r2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) 23:38:44 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000002a00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r0}, 0x10) landlock_restrict_self(0xffffffffffffffff, 0x0) 23:38:44 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045567, 0x800000041a) 23:38:44 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x21, 0x0, 0x0) 23:38:44 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0xc00c55ca, 0x0) 23:38:44 executing program 0: getpid() r0 = creat(&(0x7f0000000200)='./file0\x00', 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {0x0}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) r2 = socket$inet6(0xa, 0x2, 0xffffff81) accept(r2, 0x0, &(0x7f0000000440)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wlan0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="04002cbd7000fbdbdf2586000000080003002f68d451b29bb9746fb9441b077da11c6eecba44d38d535be9cacb179bad5e10d99bcb17ef1aeb1b169d639acd0175ab4a91f80b21818a46e4a4266ca34ed95879e47c568e800cc7fe623a40b4df563713decb75f69c1b0c8e491f840677c682c16855cf938ed91d8b", @ANYRES32=r3, @ANYBLOB="08002600b41400000500180133000000050018011a000000"], 0x34}, 0x1, 0x0, 0x0, 0x4c000}, 0x20000000) socket$unix(0x1, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000400)='net/ip_vs\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r4, &(0x7f0000000040)=ANY=[], 0x10132) setsockopt$sock_int(r5, 0x1, 0x10, &(0x7f0000000100)=0xffff, 0x4) recvmmsg(r5, &(0x7f0000001140)=[{{0x0, 0x0, 0x0}}], 0x700, 0x2, 0x0) 23:38:44 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0xa, &(0x7f0000000240)=@raw=[@cb_func, @exit, @map_idx_val, @map_fd, @initr0, @generic], &(0x7f00000002c0)='GPL\x00', 0x5, 0x9e, &(0x7f0000000300)=""/158, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 23:38:44 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000002a00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r0}, 0x10) landlock_restrict_self(0xffffffffffffffff, 0x0) [ 469.476920][ T8748] loop3: detected capacity change from 0 to 24 [ 469.500099][ T3674] EXT4-fs (loop2): unmounting filesystem. 23:38:44 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/meminfo\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x1207) 23:38:44 executing program 3: syz_mount_image$romfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8303, &(0x7f0000000240)=ANY=[@ANYRES64=0x0], 0x1, 0x160, &(0x7f0000004400)="$eJzs2r9Kw1AUBvAjLQodHV0sVKKgbf5pXXUUN98gtLlp8MaURJB2chMnQeE6+BKKT+AjZHTTRcSXiMRcapuozSCNwvdb+tFzk9ycwJ1OM/A9nYVNoo3+5cHLYuB79ba53WE6syi1R0T1JERxfN2inKdRPYqp9cWCcq28pb+NNUfsnzOX20bZWwIAAAAAAAAAAAAAAAAAAAAAgIKUmgy1nvDOmMttfawaDoaHFud2EGavq8xui6VS6nKGi5jgN0l/zIn6+vI8KTtJcsVukNS1yeuvZFjtCf6c7a967PXVcDBsup7l2I59ZBhmW9vUtC1D/biXmr2jciv3RFF8r+XHyZSxebPHIvNm8vtXl1xxcZJ92uf3R/gmEBVd7DtpU/OluSpRkWfdEVG+9Fp+ExB+JVSnrqnQH9nq1HPlXzgdnX/UXTAbD8n51+r4vCv/nEU7S3x9APjBewAAAP//bM0zUA==") r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000002340)={{}, 0x2c, {'rootmode', 0x3d, 0x1000}}) read$FUSE(r0, &(0x7f00000002c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1}, 0x50) chmod(&(0x7f0000002300)='./file0\x00', 0x0) read$FUSE(r0, &(0x7f0000006580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r0, &(0x7f0000006500)={0x78, 0x0, r2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) 23:38:44 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000440)=""/157, 0x9d}], 0x1, 0x3, 0x0) [ 469.795697][ T8758] loop2: detected capacity change from 0 to 2048 [ 469.826671][ T8764] loop3: detected capacity change from 0 to 24 [ 469.867116][ T8758] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 469.871049][ T8764] fuse: Bad value for 'fd' [ 469.876730][ T8758] ext4 filesystem being mounted at /root/syzkaller-testdir3713254227/syzkaller.IcAci9/286/bus supports timestamps until 2038 (0x7fffffff) 23:38:45 executing program 2: syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2804c00, &(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x1, 0x750, &(0x7f0000001640)="$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") chdir(&(0x7f0000000080)='./file0\x00') open(&(0x7f00000000c0)='./bus\x00', 0x14da42, 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000400)='./bus\x00', 0x14113e, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r1, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) 23:38:45 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000002a00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r0}, 0x10) landlock_restrict_self(0xffffffffffffffff, 0x0) 23:38:45 executing program 1: add_key$fscrypt_provisioning(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffff9) 23:38:45 executing program 5: mlock(&(0x7f0000fef000/0x4000)=nil, 0x4000) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) 23:38:45 executing program 0: mlock(&(0x7f0000fef000/0x4000)=nil, 0x4000) munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) mlock(&(0x7f0000800000/0x800000)=nil, 0x800000) 23:38:45 executing program 3: syz_mount_image$romfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8303, &(0x7f0000000240)=ANY=[@ANYRES64=0x0], 0x1, 0x160, &(0x7f0000004400)="$eJzs2r9Kw1AUBvAjLQodHV0sVKKgbf5pXXUUN98gtLlp8MaURJB2chMnQeE6+BKKT+AjZHTTRcSXiMRcapuozSCNwvdb+tFzk9ycwJ1OM/A9nYVNoo3+5cHLYuB79ba53WE6syi1R0T1JERxfN2inKdRPYqp9cWCcq28pb+NNUfsnzOX20bZWwIAAAAAAAAAAAAAAAAAAAAAgIKUmgy1nvDOmMttfawaDoaHFud2EGavq8xui6VS6nKGi5jgN0l/zIn6+vI8KTtJcsVukNS1yeuvZFjtCf6c7a967PXVcDBsup7l2I59ZBhmW9vUtC1D/biXmr2jciv3RFF8r+XHyZSxebPHIvNm8vtXl1xxcZJ92uf3R/gmEBVd7DtpU/OluSpRkWfdEVG+9Fp+ExB+JVSnrqnQH9nq1HPlXzgdnX/UXTAbD8n51+r4vCv/nEU7S3x9APjBewAAAP//bM0zUA==") r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000002340)={{}, 0x2c, {'rootmode', 0x3d, 0x1000}}) read$FUSE(r0, &(0x7f00000002c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1}, 0x50) chmod(&(0x7f0000002300)='./file0\x00', 0x0) read$FUSE(r0, &(0x7f0000006580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r0, &(0x7f0000006500)={0x78, 0x0, r2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) 23:38:45 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000002a00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r0}, 0x10) landlock_restrict_self(0xffffffffffffffff, 0x0) 23:38:45 executing program 1: setpriority(0x0, 0x0, 0x0) setresgid(0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) socket$unix(0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000400)='net/ip_vs\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x10132) recvmmsg(r1, &(0x7f0000001140)=[{{0x0, 0x0, 0x0}}], 0x700, 0x0, 0x0) [ 470.066919][ T8775] loop3: detected capacity change from 0 to 24 [ 470.100823][ T3674] EXT4-fs (loop2): unmounting filesystem. 23:38:45 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r1, &(0x7f0000002f40)=ANY=[@ANYRES32], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) [ 470.113079][ T3676] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 470.164613][ T8775] fuse: Bad value for 'fd' 23:38:45 executing program 3: syz_mount_image$romfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8303, &(0x7f0000000240)=ANY=[@ANYRES64=0x0], 0x1, 0x160, &(0x7f0000004400)="$eJzs2r9Kw1AUBvAjLQodHV0sVKKgbf5pXXUUN98gtLlp8MaURJB2chMnQeE6+BKKT+AjZHTTRcSXiMRcapuozSCNwvdb+tFzk9ycwJ1OM/A9nYVNoo3+5cHLYuB79ba53WE6syi1R0T1JERxfN2inKdRPYqp9cWCcq28pb+NNUfsnzOX20bZWwIAAAAAAAAAAAAAAAAAAAAAgIKUmgy1nvDOmMttfawaDoaHFud2EGavq8xui6VS6nKGi5jgN0l/zIn6+vI8KTtJcsVukNS1yeuvZFjtCf6c7a967PXVcDBsup7l2I59ZBhmW9vUtC1D/biXmr2jciv3RFF8r+XHyZSxebPHIvNm8vtXl1xxcZJ92uf3R/gmEBVd7DtpU/OluSpRkWfdEVG+9Fp+ExB+JVSnrqnQH9nq1HPlXzgdnX/UXTAbD8n51+r4vCv/nEU7S3x9APjBewAAAP//bM0zUA==") r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000002340)={{}, 0x2c, {'rootmode', 0x3d, 0x1000}}) read$FUSE(r0, &(0x7f00000002c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1}, 0x50) chmod(&(0x7f0000002300)='./file0\x00', 0x0) read$FUSE(r0, &(0x7f0000006580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r0, &(0x7f0000006500)={0x78, 0x0, r2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) 23:38:45 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x11, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 23:38:45 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="840000003100ffff000000000000000000000000700001006c0001000b000100706f6c696365"], 0x84}}, 0x0) [ 470.359139][ T8787] loop3: detected capacity change from 0 to 24 [ 470.400600][ T8787] fuse: Bad value for 'fd' [ 470.465611][ T8786] loop2: detected capacity change from 0 to 2048 [ 470.539958][ T8786] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 470.550228][ T8786] ext4 filesystem being mounted at /root/syzkaller-testdir3713254227/syzkaller.IcAci9/287/bus supports timestamps until 2038 (0x7fffffff) [ 470.583309][ T27] audit: type=1800 audit(1679269125.778:71): pid=8786 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=18 res=0 errno=0 23:38:45 executing program 3: syz_mount_image$romfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8303, &(0x7f0000000240)=ANY=[@ANYRES64=0x0], 0x1, 0x160, &(0x7f0000004400)="$eJzs2r9Kw1AUBvAjLQodHV0sVKKgbf5pXXUUN98gtLlp8MaURJB2chMnQeE6+BKKT+AjZHTTRcSXiMRcapuozSCNwvdb+tFzk9ycwJ1OM/A9nYVNoo3+5cHLYuB79ba53WE6syi1R0T1JERxfN2inKdRPYqp9cWCcq28pb+NNUfsnzOX20bZWwIAAAAAAAAAAAAAAAAAAAAAgIKUmgy1nvDOmMttfawaDoaHFud2EGavq8xui6VS6nKGi5jgN0l/zIn6+vI8KTtJcsVukNS1yeuvZFjtCf6c7a967PXVcDBsup7l2I59ZBhmW9vUtC1D/biXmr2jciv3RFF8r+XHyZSxebPHIvNm8vtXl1xxcZJ92uf3R/gmEBVd7DtpU/OluSpRkWfdEVG+9Fp+ExB+JVSnrqnQH9nq1HPlXzgdnX/UXTAbD8n51+r4vCv/nEU7S3x9APjBewAAAP//bM0zUA==") r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000002340)={{'fd', 0x3d, r0}}) read$FUSE(r0, &(0x7f00000002c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1}, 0x50) chmod(&(0x7f0000002300)='./file0\x00', 0x0) read$FUSE(r0, &(0x7f0000006580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r0, &(0x7f0000006500)={0x78, 0x0, r2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) 23:38:45 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000004300)={0x2020}, 0x2020) 23:38:45 executing program 1: mlock(&(0x7f0000fef000/0x4000)=nil, 0x4000) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000040)={0x0, {0x2, 0x3f, 0x7ef6}}) mlock(&(0x7f0000800000/0x800000)=nil, 0x800000) 23:38:45 executing program 2: syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2804c00, &(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x1, 0x750, &(0x7f0000001640)="$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") chdir(&(0x7f0000000080)='./file0\x00') open(&(0x7f00000000c0)='./bus\x00', 0x14da42, 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000400)='./bus\x00', 0x14113e, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r1, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) 23:38:45 executing program 5: mlock(&(0x7f0000fef000/0x4000)=nil, 0x4000) mlock(&(0x7f0000fee000/0xf000)=nil, 0xf000) [ 470.674700][ T8800] loop3: detected capacity change from 0 to 24 [ 470.689264][ T8800] fuse: Invalid rootmode 23:38:45 executing program 3: syz_mount_image$romfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8303, &(0x7f0000000240)=ANY=[@ANYRES64=0x0], 0x1, 0x160, &(0x7f0000004400)="$eJzs2r9Kw1AUBvAjLQodHV0sVKKgbf5pXXUUN98gtLlp8MaURJB2chMnQeE6+BKKT+AjZHTTRcSXiMRcapuozSCNwvdb+tFzk9ycwJ1OM/A9nYVNoo3+5cHLYuB79ba53WE6syi1R0T1JERxfN2inKdRPYqp9cWCcq28pb+NNUfsnzOX20bZWwIAAAAAAAAAAAAAAAAAAAAAgIKUmgy1nvDOmMttfawaDoaHFud2EGavq8xui6VS6nKGi5jgN0l/zIn6+vI8KTtJcsVukNS1yeuvZFjtCf6c7a967PXVcDBsup7l2I59ZBhmW9vUtC1D/biXmr2jciv3RFF8r+XHyZSxebPHIvNm8vtXl1xxcZJ92uf3R/gmEBVd7DtpU/OluSpRkWfdEVG+9Fp+ExB+JVSnrqnQH9nq1HPlXzgdnX/UXTAbD8n51+r4vCv/nEU7S3x9APjBewAAAP//bM0zUA==") r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000002340)={{'fd', 0x3d, r0}}) read$FUSE(r0, &(0x7f00000002c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1}, 0x50) chmod(&(0x7f0000002300)='./file0\x00', 0x0) read$FUSE(r0, &(0x7f0000006580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r0, &(0x7f0000006500)={0x78, 0x0, r2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) 23:38:45 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000020c0)={0x1, &(0x7f0000002080)=[{0x6, 0x0, 0x0, 0xff}]}) 23:38:45 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x6, 0x0, 0x83) [ 470.725343][ T3674] EXT4-fs (loop2): unmounting filesystem. [ 470.813124][ T27] audit: type=1326 audit(1679269126.008:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8802 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4e2ba8c0f9 code=0x0 [ 470.865632][ T8807] loop3: detected capacity change from 0 to 24 [ 470.922658][ T8807] fuse: Invalid rootmode 23:38:46 executing program 0: shmat(0x0, &(0x7f0000ff9000/0x3000)=nil, 0xd000) 23:38:46 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x8, 0x1, &(0x7f0000000400)=@raw=[@call={0x85, 0x0, 0x0, 0xc}], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 23:38:46 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x9, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 23:38:46 executing program 3: syz_mount_image$romfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8303, &(0x7f0000000240)=ANY=[@ANYRES64=0x0], 0x1, 0x160, &(0x7f0000004400)="$eJzs2r9Kw1AUBvAjLQodHV0sVKKgbf5pXXUUN98gtLlp8MaURJB2chMnQeE6+BKKT+AjZHTTRcSXiMRcapuozSCNwvdb+tFzk9ycwJ1OM/A9nYVNoo3+5cHLYuB79ba53WE6syi1R0T1JERxfN2inKdRPYqp9cWCcq28pb+NNUfsnzOX20bZWwIAAAAAAAAAAAAAAAAAAAAAgIKUmgy1nvDOmMttfawaDoaHFud2EGavq8xui6VS6nKGi5jgN0l/zIn6+vI8KTtJcsVukNS1yeuvZFjtCf6c7a967PXVcDBsup7l2I59ZBhmW9vUtC1D/biXmr2jciv3RFF8r+XHyZSxebPHIvNm8vtXl1xxcZJ92uf3R/gmEBVd7DtpU/OluSpRkWfdEVG+9Fp+ExB+JVSnrqnQH9nq1HPlXzgdnX/UXTAbD8n51+r4vCv/nEU7S3x9APjBewAAAP//bM0zUA==") r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000002340)={{'fd', 0x3d, r0}}) read$FUSE(r0, &(0x7f00000002c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1}, 0x50) chmod(&(0x7f0000002300)='./file0\x00', 0x0) read$FUSE(r0, &(0x7f0000006580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r0, &(0x7f0000006500)={0x78, 0x0, r2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) [ 471.011006][ T8809] loop2: detected capacity change from 0 to 2048 23:38:46 executing program 5: shmat(0x0, &(0x7f0000fef000/0x3000)=nil, 0x5000) shmat(0x0, &(0x7f0000ff2000/0x4000)=nil, 0x5000) mlock(&(0x7f0000fef000/0x4000)=nil, 0x4000) [ 471.100249][ T8815] loop3: detected capacity change from 0 to 24 [ 471.109443][ T8809] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. 23:38:46 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x0, 0x0, @private1}}, 0x0, 0x0, 0x42, 0x0, "86fef08558b0a9a748d2dec744344ddcd125778a4733e6ce2e66acf3b9b4b2de8645620d1b80370c35b6b479f808026de0f987880567639894cf37b8eaf77c45535322ce55d8b791e4df279a8b84c9fe"}, 0xd8) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) 23:38:46 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x0, 0x0, 0x1}]}, &(0x7f0000000040)='syzkaller\x00', 0x3, 0xb9, &(0x7f0000000080)=""/185, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 471.159533][ T8809] ext4 filesystem being mounted at /root/syzkaller-testdir3713254227/syzkaller.IcAci9/288/bus supports timestamps until 2038 (0x7fffffff) [ 471.196643][ T8815] fuse: Invalid rootmode [ 471.217418][ T27] audit: type=1800 audit(1679269126.408:73): pid=8809 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=18 res=0 errno=0 23:38:46 executing program 2: syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2804c00, &(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x1, 0x750, &(0x7f0000001640)="$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") chdir(&(0x7f0000000080)='./file0\x00') open(&(0x7f00000000c0)='./bus\x00', 0x14da42, 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000400)='./bus\x00', 0x14113e, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r1, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) 23:38:46 executing program 3: syz_mount_image$romfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8303, &(0x7f0000000240)=ANY=[@ANYRES64=0x0], 0x1, 0x160, &(0x7f0000004400)="$eJzs2r9Kw1AUBvAjLQodHV0sVKKgbf5pXXUUN98gtLlp8MaURJB2chMnQeE6+BKKT+AjZHTTRcSXiMRcapuozSCNwvdb+tFzk9ycwJ1OM/A9nYVNoo3+5cHLYuB79ba53WE6syi1R0T1JERxfN2inKdRPYqp9cWCcq28pb+NNUfsnzOX20bZWwIAAAAAAAAAAAAAAAAAAAAAgIKUmgy1nvDOmMttfawaDoaHFud2EGavq8xui6VS6nKGi5jgN0l/zIn6+vI8KTtJcsVukNS1yeuvZFjtCf6c7a967PXVcDBsup7l2I59ZBhmW9vUtC1D/biXmr2jciv3RFF8r+XHyZSxebPHIvNm8vtXl1xxcZJ92uf3R/gmEBVd7DtpU/OluSpRkWfdEVG+9Fp+ExB+JVSnrqnQH9nq1HPlXzgdnX/UXTAbD8n51+r4vCv/nEU7S3x9APjBewAAAP//bM0zUA==") r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000002340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}}) read$FUSE(0xffffffffffffffff, &(0x7f00000002c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1}, 0x50) chmod(&(0x7f0000002300)='./file0\x00', 0x0) read$FUSE(r0, &(0x7f0000006580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r0, &(0x7f0000006500)={0x78, 0x0, r2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) 23:38:46 executing program 5: shmat(0x0, &(0x7f0000fef000/0x3000)=nil, 0x5000) shmat(0x0, &(0x7f0000ff2000/0x4000)=nil, 0x5000) mlock(&(0x7f0000fef000/0x4000)=nil, 0x4000) 23:38:46 executing program 0: shmat(0x0, &(0x7f0000ff9000/0x3000)=nil, 0xd000) shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x4000) 23:38:46 executing program 4: r0 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x0) read$hidraw(r0, 0x0, 0x0) 23:38:46 executing program 5: shmat(0x0, &(0x7f0000fef000/0x3000)=nil, 0x5000) shmat(0x0, &(0x7f0000ff2000/0x4000)=nil, 0x5000) mlock(&(0x7f0000fef000/0x4000)=nil, 0x4000) 23:38:46 executing program 1: mlock(&(0x7f0000fef000/0x4000)=nil, 0x4000) munmap(&(0x7f0000ff1000/0x1000)=nil, 0x1000) shmat(0x0, &(0x7f0000fe9000/0x14000)=nil, 0xfa22cffe51934c35) [ 471.332473][ T3674] EXT4-fs (loop2): unmounting filesystem. 23:38:46 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x14}, 0x48) [ 471.410186][ T8831] loop3: detected capacity change from 0 to 24 23:38:46 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x405c5503, 0x0) 23:38:46 executing program 1: bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0xfffffffffffffd85) 23:38:46 executing program 5: shmat(0x0, &(0x7f0000fef000/0x3000)=nil, 0x5000) shmat(0x0, &(0x7f0000ff2000/0x4000)=nil, 0x5000) mlock(&(0x7f0000fef000/0x4000)=nil, 0x4000) 23:38:46 executing program 3: syz_mount_image$romfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8303, &(0x7f0000000240)=ANY=[@ANYRES64=0x0], 0x1, 0x160, &(0x7f0000004400)="$eJzs2r9Kw1AUBvAjLQodHV0sVKKgbf5pXXUUN98gtLlp8MaURJB2chMnQeE6+BKKT+AjZHTTRcSXiMRcapuozSCNwvdb+tFzk9ycwJ1OM/A9nYVNoo3+5cHLYuB79ba53WE6syi1R0T1JERxfN2inKdRPYqp9cWCcq28pb+NNUfsnzOX20bZWwIAAAAAAAAAAAAAAAAAAAAAgIKUmgy1nvDOmMttfawaDoaHFud2EGavq8xui6VS6nKGi5jgN0l/zIn6+vI8KTtJcsVukNS1yeuvZFjtCf6c7a967PXVcDBsup7l2I59ZBhmW9vUtC1D/biXmr2jciv3RFF8r+XHyZSxebPHIvNm8vtXl1xxcZJ92uf3R/gmEBVd7DtpU/OluSpRkWfdEVG+9Fp+ExB+JVSnrqnQH9nq1HPlXzgdnX/UXTAbD8n51+r4vCv/nEU7S3x9APjBewAAAP//bM0zUA==") r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000002340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}}) read$FUSE(0xffffffffffffffff, &(0x7f00000002c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1}, 0x50) chmod(&(0x7f0000002300)='./file0\x00', 0x0) read$FUSE(r0, &(0x7f0000006580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r0, &(0x7f0000006500)={0x78, 0x0, r2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) [ 471.586197][ T8839] loop2: detected capacity change from 0 to 2048 [ 471.669634][ T8851] loop3: detected capacity change from 0 to 24 [ 471.693153][ T8839] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 471.708441][ T8839] ext4 filesystem being mounted at /root/syzkaller-testdir3713254227/syzkaller.IcAci9/289/bus supports timestamps until 2038 (0x7fffffff) [ 471.744935][ T27] audit: type=1800 audit(1679269126.938:74): pid=8839 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=18 res=0 errno=0 23:38:47 executing program 2: syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2804c00, &(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x1, 0x750, &(0x7f0000001640)="$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") chdir(&(0x7f0000000080)='./file0\x00') open(&(0x7f00000000c0)='./bus\x00', 0x14da42, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, 0x0, 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000400)='./bus\x00', 0x14113e, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r1, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) 23:38:47 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000000)={0x0, 0x4}) 23:38:47 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8947, &(0x7f0000000140)={'syztnl2\x00', 0x0}) 23:38:47 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000180)={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, 0x0, 0x9a, 0x7}) 23:38:47 executing program 1: openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f000000ce80)='./binderfs2/binder-control\x00', 0x0, 0x0) 23:38:47 executing program 3: syz_mount_image$romfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8303, &(0x7f0000000240)=ANY=[@ANYRES64=0x0], 0x1, 0x160, &(0x7f0000004400)="$eJzs2r9Kw1AUBvAjLQodHV0sVKKgbf5pXXUUN98gtLlp8MaURJB2chMnQeE6+BKKT+AjZHTTRcSXiMRcapuozSCNwvdb+tFzk9ycwJ1OM/A9nYVNoo3+5cHLYuB79ba53WE6syi1R0T1JERxfN2inKdRPYqp9cWCcq28pb+NNUfsnzOX20bZWwIAAAAAAAAAAAAAAAAAAAAAgIKUmgy1nvDOmMttfawaDoaHFud2EGavq8xui6VS6nKGi5jgN0l/zIn6+vI8KTtJcsVukNS1yeuvZFjtCf6c7a967PXVcDBsup7l2I59ZBhmW9vUtC1D/biXmr2jciv3RFF8r+XHyZSxebPHIvNm8vtXl1xxcZJ92uf3R/gmEBVd7DtpU/OluSpRkWfdEVG+9Fp+ExB+JVSnrqnQH9nq1HPlXzgdnX/UXTAbD8n51+r4vCv/nEU7S3x9APjBewAAAP//bM0zUA==") r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000002340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}}) read$FUSE(0xffffffffffffffff, &(0x7f00000002c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1}, 0x50) chmod(&(0x7f0000002300)='./file0\x00', 0x0) read$FUSE(r0, &(0x7f0000006580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r0, &(0x7f0000006500)={0x78, 0x0, r2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) 23:38:47 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x80045432, 0x0) [ 471.907415][ T3674] EXT4-fs (loop2): unmounting filesystem. 23:38:47 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x28, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x28}}, 0x0) 23:38:47 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000000)={{{@in6=@loopback, @in, 0x0, 0x0, 0x0, 0x0, 0x2, 0xa0, 0x0, 0x0, 0x0, 0xee01}}, {{@in=@multicast2}, 0x0, @in6=@remote}}, 0xe8) [ 471.962466][ T8867] loop3: detected capacity change from 0 to 24 [ 472.011417][ T3676] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 472.088470][ T3676] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 23:38:47 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$TCSBRKP(r0, 0x5425, 0x0) 23:38:47 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x5, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) [ 472.173237][ T3676] Buffer I/O error on dev loop3, logical block 0, async page read 23:38:47 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000001500)={&(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c, 0x0}, 0x0) [ 472.293467][ T8875] loop2: detected capacity change from 0 to 2048 [ 472.318481][ T3676] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 472.395531][ T8875] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 472.428274][ T8875] ext4 filesystem being mounted at /root/syzkaller-testdir3713254227/syzkaller.IcAci9/290/bus supports timestamps until 2038 (0x7fffffff) [ 472.475458][ T27] audit: type=1800 audit(1679269127.668:75): pid=8875 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=18 res=0 errno=0 23:38:47 executing program 2: syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2804c00, &(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x1, 0x750, &(0x7f0000001640)="$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") chdir(&(0x7f0000000080)='./file0\x00') open(&(0x7f00000000c0)='./bus\x00', 0x14da42, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, 0x0, 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000400)='./bus\x00', 0x14113e, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r1, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) 23:38:47 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000002800), 0x0, 0x0) ioctl$BLKALIGNOFF(r0, 0x1274, 0x0) 23:38:47 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSPGRP(r0, 0x540b, 0x0) 23:38:47 executing program 3: syz_mount_image$romfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8303, &(0x7f0000000240)=ANY=[@ANYRES64=0x0], 0x1, 0x160, &(0x7f0000004400)="$eJzs2r9Kw1AUBvAjLQodHV0sVKKgbf5pXXUUN98gtLlp8MaURJB2chMnQeE6+BKKT+AjZHTTRcSXiMRcapuozSCNwvdb+tFzk9ycwJ1OM/A9nYVNoo3+5cHLYuB79ba53WE6syi1R0T1JERxfN2inKdRPYqp9cWCcq28pb+NNUfsnzOX20bZWwIAAAAAAAAAAAAAAAAAAAAAgIKUmgy1nvDOmMttfawaDoaHFud2EGavq8xui6VS6nKGi5jgN0l/zIn6+vI8KTtJcsVukNS1yeuvZFjtCf6c7a967PXVcDBsup7l2I59ZBhmW9vUtC1D/biXmr2jciv3RFF8r+XHyZSxebPHIvNm8vtXl1xxcZJ92uf3R/gmEBVd7DtpU/OluSpRkWfdEVG+9Fp+ExB+JVSnrqnQH9nq1HPlXzgdnX/UXTAbD8n51+r4vCv/nEU7S3x9APjBewAAAP//bM0zUA==") r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000002340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}}) read$FUSE(r0, 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50}, 0x50) chmod(&(0x7f0000002300)='./file0\x00', 0x0) read$FUSE(r0, &(0x7f0000006580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r0, &(0x7f0000006500)={0x78, 0x0, r1, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) 23:38:47 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f00000002c0), 0x0, 0x0) read$snddsp(r0, 0x0, 0x0) 23:38:47 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSPGRP(r0, 0x80045440, 0x0) 23:38:47 executing program 1: fanotify_mark(0xffffffffffffffff, 0x1, 0x1000, 0xffffffffffffffff, 0x0) [ 472.582093][ T8888] loop3: detected capacity change from 0 to 24 [ 472.610896][ T3674] EXT4-fs (loop2): unmounting filesystem. 23:38:47 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0xa, 0x4e22, 0x0, @remote, 0x6}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000200)="82", 0x1}, {&(0x7f0000000280)="49af7e06a3d3", 0x6}], 0x2}, 0x0) 23:38:47 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x3, 0x2, 0x201}, 0x14}}, 0x0) 23:38:47 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000140), 0x0, 0x0) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000180)=""/86) 23:38:47 executing program 3: syz_mount_image$romfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8303, &(0x7f0000000240)=ANY=[@ANYRES64=0x0], 0x1, 0x160, &(0x7f0000004400)="$eJzs2r9Kw1AUBvAjLQodHV0sVKKgbf5pXXUUN98gtLlp8MaURJB2chMnQeE6+BKKT+AjZHTTRcSXiMRcapuozSCNwvdb+tFzk9ycwJ1OM/A9nYVNoo3+5cHLYuB79ba53WE6syi1R0T1JERxfN2inKdRPYqp9cWCcq28pb+NNUfsnzOX20bZWwIAAAAAAAAAAAAAAAAAAAAAgIKUmgy1nvDOmMttfawaDoaHFud2EGavq8xui6VS6nKGi5jgN0l/zIn6+vI8KTtJcsVukNS1yeuvZFjtCf6c7a967PXVcDBsup7l2I59ZBhmW9vUtC1D/biXmr2jciv3RFF8r+XHyZSxebPHIvNm8vtXl1xxcZJ92uf3R/gmEBVd7DtpU/OluSpRkWfdEVG+9Fp+ExB+JVSnrqnQH9nq1HPlXzgdnX/UXTAbD8n51+r4vCv/nEU7S3x9APjBewAAAP//bM0zUA==") r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000002340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}}) read$FUSE(r0, 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50}, 0x50) chmod(&(0x7f0000002300)='./file0\x00', 0x0) read$FUSE(r0, &(0x7f0000006580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r0, &(0x7f0000006500)={0x78, 0x0, r1, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) 23:38:47 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x2f, &(0x7f0000000380), 0x0) [ 472.850440][ T8905] loop2: detected capacity change from 0 to 2048 [ 472.884147][ T8910] loop3: detected capacity change from 0 to 24 [ 472.908438][ T8905] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 472.927558][ T8905] ext4 filesystem being mounted at /root/syzkaller-testdir3713254227/syzkaller.IcAci9/291/bus supports timestamps until 2038 (0x7fffffff) [ 472.957165][ T27] audit: type=1800 audit(1679269128.148:76): pid=8905 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=18 res=0 errno=0 23:38:48 executing program 2: syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2804c00, &(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x1, 0x750, &(0x7f0000001640)="$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") chdir(&(0x7f0000000080)='./file0\x00') open(&(0x7f00000000c0)='./bus\x00', 0x14da42, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, 0x0, 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000400)='./bus\x00', 0x14113e, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r1, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) 23:38:48 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) 23:38:48 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000180)={@private1, @ipv4={'\x00', '\xff\xff', @empty}, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41180000}) 23:38:48 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x9, 0x6, 0x903}, 0x14}}, 0x0) 23:38:48 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x20, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) 23:38:48 executing program 3: syz_mount_image$romfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8303, &(0x7f0000000240)=ANY=[@ANYRES64=0x0], 0x1, 0x160, &(0x7f0000004400)="$eJzs2r9Kw1AUBvAjLQodHV0sVKKgbf5pXXUUN98gtLlp8MaURJB2chMnQeE6+BKKT+AjZHTTRcSXiMRcapuozSCNwvdb+tFzk9ycwJ1OM/A9nYVNoo3+5cHLYuB79ba53WE6syi1R0T1JERxfN2inKdRPYqp9cWCcq28pb+NNUfsnzOX20bZWwIAAAAAAAAAAAAAAAAAAAAAgIKUmgy1nvDOmMttfawaDoaHFud2EGavq8xui6VS6nKGi5jgN0l/zIn6+vI8KTtJcsVukNS1yeuvZFjtCf6c7a967PXVcDBsup7l2I59ZBhmW9vUtC1D/biXmr2jciv3RFF8r+XHyZSxebPHIvNm8vtXl1xxcZJ92uf3R/gmEBVd7DtpU/OluSpRkWfdEVG+9Fp+ExB+JVSnrqnQH9nq1HPlXzgdnX/UXTAbD8n51+r4vCv/nEU7S3x9APjBewAAAP//bM0zUA==") r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000002340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}}) read$FUSE(r0, 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50}, 0x50) chmod(&(0x7f0000002300)='./file0\x00', 0x0) read$FUSE(r0, &(0x7f0000006580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r0, &(0x7f0000006500)={0x78, 0x0, r1, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) 23:38:48 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x4b3a, 0x0) 23:38:48 executing program 0: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0x3, 0x0, 0x0) 23:38:48 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00', @empty}}) 23:38:48 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, 0x0, &(0x7f00000000c0)) [ 473.157299][ T8923] loop3: detected capacity change from 0 to 24 [ 473.171569][ T3674] EXT4-fs (loop2): unmounting filesystem. 23:38:48 executing program 3: syz_mount_image$romfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8303, &(0x7f0000000240)=ANY=[@ANYRES64=0x0], 0x1, 0x160, &(0x7f0000004400)="$eJzs2r9Kw1AUBvAjLQodHV0sVKKgbf5pXXUUN98gtLlp8MaURJB2chMnQeE6+BKKT+AjZHTTRcSXiMRcapuozSCNwvdb+tFzk9ycwJ1OM/A9nYVNoo3+5cHLYuB79ba53WE6syi1R0T1JERxfN2inKdRPYqp9cWCcq28pb+NNUfsnzOX20bZWwIAAAAAAAAAAAAAAAAAAAAAgIKUmgy1nvDOmMttfawaDoaHFud2EGavq8xui6VS6nKGi5jgN0l/zIn6+vI8KTtJcsVukNS1yeuvZFjtCf6c7a967PXVcDBsup7l2I59ZBhmW9vUtC1D/biXmr2jciv3RFF8r+XHyZSxebPHIvNm8vtXl1xxcZJ92uf3R/gmEBVd7DtpU/OluSpRkWfdEVG+9Fp+ExB+JVSnrqnQH9nq1HPlXzgdnX/UXTAbD8n51+r4vCv/nEU7S3x9APjBewAAAP//bM0zUA==") r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000002340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}}) read$FUSE(r0, &(0x7f00000002c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000080)={0x50, 0x0, r1}, 0x50) chmod(&(0x7f0000002300)='./file0\x00', 0x0) read$FUSE(r0, &(0x7f0000006580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r0, &(0x7f0000006500)={0x78, 0x0, r2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) 23:38:48 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14, 0x1, 0x1, 0x5}, 0x14}}, 0x0) [ 473.401032][ T8934] loop2: detected capacity change from 0 to 2048 [ 473.428267][ T8938] loop3: detected capacity change from 0 to 24 [ 473.459576][ T8934] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 473.483013][ T8934] ext4 filesystem being mounted at /root/syzkaller-testdir3713254227/syzkaller.IcAci9/292/bus supports timestamps until 2038 (0x7fffffff) [ 473.581416][ T27] audit: type=1800 audit(1679269128.778:77): pid=8934 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=18 res=0 errno=0 23:38:48 executing program 2: syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2804c00, &(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x1, 0x750, &(0x7f0000001640)="$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") chdir(&(0x7f0000000080)='./file0\x00') open(&(0x7f00000000c0)='./bus\x00', 0x14da42, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000180)='./bus\x00', 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000400)='./bus\x00', 0x14113e, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r1, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) 23:38:48 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r0, 0x80184132, &(0x7f0000000080)) 23:38:48 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000001c0)={@mcast2}) 23:38:48 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6}]}, 0x10) syz_emit_ethernet(0xfed6, &(0x7f00000000c0)={@link_local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @broadcast=0xe0000001}, {0x0, 0x4e22, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) 23:38:48 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffa000/0x3000)=nil, 0x930, 0x0, 0x13, r0, 0x0) 23:38:48 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000040)={{{@in=@private, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x1a0, 0x0, 0x0, 0xee00}}, {{@in6=@mcast2}, 0x0, @in=@multicast2}}, 0xe8) 23:38:48 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000000)={{{@in6=@loopback, @in, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}}, {{@in=@multicast2, 0x0, 0x2b}, 0x2, @in6=@remote}}, 0xe8) 23:38:48 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6}]}, 0x10) syz_emit_ethernet(0xfed6, &(0x7f00000000c0)={@link_local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @broadcast=0xe0000001}, {0x0, 0x4e22, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) 23:38:48 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000880)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=[@dontfrag={{0x14}}], 0x18}}], 0x1, 0x0) [ 473.704322][ T3674] EXT4-fs (loop2): unmounting filesystem. 23:38:49 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x20, 0x13, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) [ 473.919109][ T8961] loop2: detected capacity change from 0 to 2048 [ 473.959043][ T8961] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 473.968317][ T8961] ext4 filesystem being mounted at /root/syzkaller-testdir3713254227/syzkaller.IcAci9/293/bus supports timestamps until 2038 (0x7fffffff) [ 474.000589][ T27] audit: type=1800 audit(1679269129.198:78): pid=8961 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 474.148345][ T3674] EXT4-fs (loop2): unmounting filesystem. 23:38:49 executing program 3: syz_mount_image$romfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8303, &(0x7f0000000240)=ANY=[@ANYRES64=0x0], 0x1, 0x160, &(0x7f0000004400)="$eJzs2r9Kw1AUBvAjLQodHV0sVKKgbf5pXXUUN98gtLlp8MaURJB2chMnQeE6+BKKT+AjZHTTRcSXiMRcapuozSCNwvdb+tFzk9ycwJ1OM/A9nYVNoo3+5cHLYuB79ba53WE6syi1R0T1JERxfN2inKdRPYqp9cWCcq28pb+NNUfsnzOX20bZWwIAAAAAAAAAAAAAAAAAAAAAgIKUmgy1nvDOmMttfawaDoaHFud2EGavq8xui6VS6nKGi5jgN0l/zIn6+vI8KTtJcsVukNS1yeuvZFjtCf6c7a967PXVcDBsup7l2I59ZBhmW9vUtC1D/biXmr2jciv3RFF8r+XHyZSxebPHIvNm8vtXl1xxcZJ92uf3R/gmEBVd7DtpU/OluSpRkWfdEVG+9Fp+ExB+JVSnrqnQH9nq1HPlXzgdnX/UXTAbD8n51+r4vCv/nEU7S3x9APjBewAAAP//bM0zUA==") r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000002340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}}) read$FUSE(r0, &(0x7f00000002c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000080)={0x50, 0x0, r1}, 0x50) chmod(&(0x7f0000002300)='./file0\x00', 0x0) read$FUSE(r0, &(0x7f0000006580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r0, &(0x7f0000006500)={0x78, 0x0, r2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) 23:38:49 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast1, @remote, 0x0, 0x1}}) 23:38:49 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001880)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @private2}, 0x1c, 0x0, 0x0, &(0x7f0000001440)=[@rthdrdstopts={{0x18}}], 0x18}}], 0x1, 0x0) 23:38:49 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6}]}, 0x10) syz_emit_ethernet(0xfed6, &(0x7f00000000c0)={@link_local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @broadcast=0xe0000001}, {0x0, 0x4e22, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) 23:38:49 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000000)={@local}, 0x14) 23:38:49 executing program 2: syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2804c00, &(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x1, 0x750, &(0x7f0000001640)="$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") chdir(&(0x7f0000000080)='./file0\x00') open(&(0x7f00000000c0)='./bus\x00', 0x14da42, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000180)='./bus\x00', 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000400)='./bus\x00', 0x14113e, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r1, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) 23:38:49 executing program 0: socket(0x2, 0x0, 0xfffffe01) 23:38:49 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @multicast1}, 0x10) syz_emit_ethernet(0xfed6, &(0x7f00000000c0)={@link_local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x4524, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @broadcast=0xe0000001}, {0x0, 0x4e22, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) 23:38:49 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6}]}, 0x10) syz_emit_ethernet(0xfed6, &(0x7f00000000c0)={@link_local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @broadcast=0xe0000001}, {0x0, 0x4e22, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) 23:38:49 executing program 1: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000280)}], 0x1) unshare(0x6c060000) socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x0, 0x117) r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581", @ANYRES64], 0x0) syz_usb_ep_write(r0, 0x7f, 0x0, 0x0) mount_setattr(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x8900, &(0x7f0000000040)={0x100070}, 0x20) mbind(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) 23:38:49 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f00000001c0)={@private1, @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0xaee, 0x7fff}) [ 474.386621][ T8977] loop2: detected capacity change from 0 to 2048 [ 474.390811][ T8979] loop3: detected capacity change from 0 to 24 23:38:49 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89a2, &(0x7f0000000140)={'syztnl2\x00', 0x0}) [ 474.429163][ T8977] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 474.437757][ T8977] ext4 filesystem being mounted at /root/syzkaller-testdir3713254227/syzkaller.IcAci9/294/bus supports timestamps until 2038 (0x7fffffff) [ 474.563001][ T27] audit: type=1800 audit(1679269129.758:79): pid=8977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 474.808155][ T7762] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 474.812656][ T3674] EXT4-fs (loop2): unmounting filesystem. [ 475.078061][ T7762] usb 2-1: Using ep0 maxpacket: 8 23:38:50 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @multicast1}, 0x10) syz_emit_ethernet(0xfed6, &(0x7f00000000c0)={@link_local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @broadcast=0xe0000001}, {0x0, 0x4e22, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) 23:38:50 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000001500)={&(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c, 0x0, 0x0, &(0x7f00000012c0)=[@rthdrdstopts={{0x18}}, @pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0x40}, 0x0) 23:38:50 executing program 3: syz_mount_image$romfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8303, &(0x7f0000000240)=ANY=[@ANYRES64=0x0], 0x1, 0x160, &(0x7f0000004400)="$eJzs2r9Kw1AUBvAjLQodHV0sVKKgbf5pXXUUN98gtLlp8MaURJB2chMnQeE6+BKKT+AjZHTTRcSXiMRcapuozSCNwvdb+tFzk9ycwJ1OM/A9nYVNoo3+5cHLYuB79ba53WE6syi1R0T1JERxfN2inKdRPYqp9cWCcq28pb+NNUfsnzOX20bZWwIAAAAAAAAAAAAAAAAAAAAAgIKUmgy1nvDOmMttfawaDoaHFud2EGavq8xui6VS6nKGi5jgN0l/zIn6+vI8KTtJcsVukNS1yeuvZFjtCf6c7a967PXVcDBsup7l2I59ZBhmW9vUtC1D/biXmr2jciv3RFF8r+XHyZSxebPHIvNm8vtXl1xxcZJ92uf3R/gmEBVd7DtpU/OluSpRkWfdEVG+9Fp+ExB+JVSnrqnQH9nq1HPlXzgdnX/UXTAbD8n51+r4vCv/nEU7S3x9APjBewAAAP//bM0zUA==") r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000002340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}}) read$FUSE(r0, &(0x7f00000002c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000080)={0x50, 0x0, r1}, 0x50) chmod(&(0x7f0000002300)='./file0\x00', 0x0) read$FUSE(r0, &(0x7f0000006580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r0, &(0x7f0000006500)={0x78, 0x0, r2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) 23:38:50 executing program 4: openat$mixer(0xffffffffffffff9c, &(0x7f00000018c0), 0x1, 0x0) 23:38:50 executing program 2: syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2804c00, &(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x1, 0x750, &(0x7f0000001640)="$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") chdir(&(0x7f0000000080)='./file0\x00') open(&(0x7f00000000c0)='./bus\x00', 0x14da42, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000180)='./bus\x00', 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000400)='./bus\x00', 0x14113e, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r1, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) 23:38:50 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000180)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) 23:38:50 executing program 0: memfd_create(&(0x7f0000000040)='+#{\\[$\xcc\\-\x00', 0x0) 23:38:50 executing program 5: socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0xfed6, &(0x7f00000000c0)={@link_local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @broadcast=0xe0000001}, {0x0, 0x4e22, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) [ 475.219100][ T7762] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 475.254179][ T7762] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 475.304322][ T7762] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 475.324401][ T9011] loop3: detected capacity change from 0 to 24 [ 475.345225][ T9008] loop2: detected capacity change from 0 to 2048 23:38:50 executing program 0: add_key(&(0x7f0000000000)='cifs.idmap\x00', 0x0, &(0x7f00000020c0)="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", 0x1001, 0xfffffffffffffff9) [ 475.357128][ T7762] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 475.393858][ T7762] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 475.416773][ T7762] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.427826][ T9008] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 475.436709][ T9008] ext4 filesystem being mounted at /root/syzkaller-testdir3713254227/syzkaller.IcAci9/295/bus supports timestamps until 2038 (0x7fffffff) [ 475.456596][ T27] audit: type=1800 audit(1679269130.658:80): pid=9008 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 475.498405][ T8992] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 475.529643][ T7762] hub 2-1:1.0: bad descriptor, ignoring hub [ 475.535644][ T7762] hub: probe of 2-1:1.0 failed with error -5 [ 475.616479][ T7762] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 475.634843][ T7762] cdc_wdm 2-1:1.0: Unknown control protocol [ 475.722132][ T3674] EXT4-fs (loop2): unmounting filesystem. [ 476.214980][ T8991] usb 2-1: reset high-speed USB device number 5 using dummy_hcd [ 476.457999][ T8991] usb 2-1: Using ep0 maxpacket: 8 [ 476.569413][ T8992] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 476.921817][ T933] usb 2-1: USB disconnect, device number 5 23:38:52 executing program 1: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000280)}], 0x1) unshare(0x6c060000) socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x0, 0x117) r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581", @ANYRES64], 0x0) syz_usb_ep_write(r0, 0x7f, 0x0, 0x0) mount_setattr(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x8900, &(0x7f0000000040)={0x100070}, 0x20) mbind(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) 23:38:52 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000040)) 23:38:52 executing program 5: syz_emit_ethernet(0xfed6, &(0x7f00000000c0)={@link_local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @broadcast=0xe0000001}, {0x0, 0x4e22, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) 23:38:52 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0xa, 0x4e22, 0x0, @remote, 0x6}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000200)="82", 0x1}, {&(0x7f0000000280)="49af7e06a3d36044", 0x8}], 0x2}, 0x0) 23:38:52 executing program 2: syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2804c00, &(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x1, 0x750, &(0x7f0000001640)="$eJzs3M9rHHUfB/DPTLP9mefZPPAcnseDCC20UDpJmkt7Ml7ES6FQ8FpDMgkhk2zJbmoTC209C7W5KAiid49ehVL/AG9SUPAuiNZ4EC+R2Wy2bbq7btskK/H1gul+v/Nj39/PdvLNDGQ2gH+s18p/kojhiLgcEdXW+jQiDjdbRyNub+238ejmdLkksbl55eekPCw2Nqvt90paryeieUj8LyIeVCLOvv9sbn11bWGqKPLlVn+0sXhttL66dm5+cWoun8uXxicujl2YmLgwNrFrtZ56++Kxe9+8ub7+7ZeNu68OnUtisll3tGrbtaAnbH0mlZjcsX5pL8IGKOljn6F9GAcAAL2V1/mHWtdmlajGIVdpAAAAcOBsHtkEAAAADrwkBj0CAAAAYG9t/x3A9rO9e/UcbDc/vRERI53yh5rPEEccjUpEHN9InnoyIdk6DF7K7TsRcX+yw/mXtM6/Fze2o9/PM9Lsr/vl/DPZaf5J2/NPdJh/hra/O+EldZ//Hucf6jL/Xe4z46tP/1/pmn8n4pWhTvlJOz/pkv9On/l31z+4123b5ucRpzv+/kmeyurx/RCjs/NFzx+tB3+cedir/uPP5CdJMzXpXf+1Put/b+PXhW5zSZl/5mTv//9O+eU58WFrHGlE3Gu9lv31HRknF7/7+tnk5PZ2/kyXz79z/lvt+j/rs/4fvjhyo89dAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoCmNiOFI0qzdTtMsizgREf+N42lRqzfOztZWlmbKbREjUUln54t8LCKqW/2k7I8324/753f0JyLiP98f2wqdL/JsulbMDLp4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2k5ExHAkaRYRaUT8Vk3TLBv0qAAAAIBdNzLoAQAAAAB7zv0/AAAAHHwvev+f7PI4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAPt8qVL5bK58ejmdNmfub66slC7fm4mry9kiyvT2XRt+Vo2V6vNFXk2XVv8q/dLI2L8YqzcGG3k9cZofXXt6mJtZalxdX5xai6/mlf2pSoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACe13BzSdIsItJmO02zLOJfETESlWR2vsjHIuLfEfGwWjlS9scHPWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB2XX11bWGqKPJlDQ2NfWvcioi/wTB6NAY9MwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAj11bWFqaLIl+uDHgkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACDlf6YRES5nK6eGt659XDye7X5GhHvfnLloxtTjcbyeLn+l/b6xset9eefOPDWftYAAAAAB97rz7Pz9n369n08AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAv+qrawtTRZEv72Ej7gy6SgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4EX8GQAA//8tc8Xn") chdir(&(0x7f0000000080)='./file0\x00') open(&(0x7f00000000c0)='./bus\x00', 0x14da42, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000180)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(0x0, 0x14113e, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r1, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) 23:38:52 executing program 3: syz_mount_image$romfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8303, &(0x7f0000000240)=ANY=[@ANYRES64=0x0], 0x1, 0x160, &(0x7f0000004400)="$eJzs2r9Kw1AUBvAjLQodHV0sVKKgbf5pXXUUN98gtLlp8MaURJB2chMnQeE6+BKKT+AjZHTTRcSXiMRcapuozSCNwvdb+tFzk9ycwJ1OM/A9nYVNoo3+5cHLYuB79ba53WE6syi1R0T1JERxfN2inKdRPYqp9cWCcq28pb+NNUfsnzOX20bZWwIAAAAAAAAAAAAAAAAAAAAAgIKUmgy1nvDOmMttfawaDoaHFud2EGavq8xui6VS6nKGi5jgN0l/zIn6+vI8KTtJcsVukNS1yeuvZFjtCf6c7a967PXVcDBsup7l2I59ZBhmW9vUtC1D/biXmr2jciv3RFF8r+XHyZSxebPHIvNm8vtXl1xxcZJ92uf3R/gmEBVd7DtpU/OluSpRkWfdEVG+9Fp+ExB+JVSnrqnQH9nq1HPlXzgdnX/UXTAbD8n51+r4vCv/nEU7S3x9APjBewAAAP//bM0zUA==") r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000002340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}}) read$FUSE(r0, &(0x7f00000002c0)={0x2020}, 0x2020) write$FUSE_INIT(r0, 0x0, 0x0) chmod(&(0x7f0000002300)='./file0\x00', 0x0) read$FUSE(r0, &(0x7f0000006580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r0, &(0x7f0000006500)={0x78, 0x0, r1, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) 23:38:52 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab8"], 0x2c8}}, 0x0) 23:38:52 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x144, 0x13, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_OBJ_HANDLE={0xc}, @NFTA_OBJ_HANDLE={0xc}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_USERDATA={0x39, 0x8, "efac33dcf78e4d1dfff6dac1f583d72439dfa6f6980c7d22d084dc00f20202beb6e70fd435822c3e12fce5632eb3d71b34bd626858"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_USERDATA={0x91, 0x8, "38ef396950029d8a75522e4512b678c92668f1f2738bde4745bc199cefb2873f91cdc7b73994e705009365b8b906d9101920ea82cb6ed1c6470beef1a6641360f7cfd3989a15519fe8a962184133d1fb6be3abe5b5b53ef9f35a32b59eee1eb1bdb2216680fc46b1344c9e69d4779ad094dc529602cc5eaec8ee8f027a9b283c275ebb795c1da136bd84eda198"}, @NFTA_OBJ_USERDATA={0x2d, 0x8, "c4c65f2363cb45d1b430ef4b82415d4733a9a38d9ef3abf4a15304ee15b6871fb3495cad6c772cd55c"}]}, 0x144}}, 0x0) [ 477.490347][ T9032] loop3: detected capacity change from 0 to 24 23:38:52 executing program 5: syz_emit_ethernet(0x0, 0x0, 0x0) [ 477.602624][ T9035] loop2: detected capacity change from 0 to 2048 23:38:52 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x144, 0x13, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_OBJ_HANDLE={0xc}, @NFTA_OBJ_HANDLE={0xc}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_USERDATA={0x39, 0x8, "efac33dcf78e4d1dfff6dac1f583d72439dfa6f6980c7d22d084dc00f20202beb6e70fd435822c3e12fce5632eb3d71b34bd626858"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_USERDATA={0x91, 0x8, "38ef396950029d8a75522e4512b678c92668f1f2738bde4745bc199cefb2873f91cdc7b73994e705009365b8b906d9101920ea82cb6ed1c6470beef1a6641360f7cfd3989a15519fe8a962184133d1fb6be3abe5b5b53ef9f35a32b59eee1eb1bdb2216680fc46b1344c9e69d4779ad094dc529602cc5eaec8ee8f027a9b283c275ebb795c1da136bd84eda198"}, @NFTA_OBJ_USERDATA={0x2d, 0x8, "c4c65f2363cb45d1b430ef4b82415d4733a9a38d9ef3abf4a15304ee15b6871fb3495cad6c772cd55c"}]}, 0x144}}, 0x0) 23:38:52 executing program 5: syz_emit_ethernet(0x0, 0x0, 0x0) 23:38:52 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000200)={0x1}, 0x4) [ 477.707436][ T9035] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 477.737128][ T9035] ext4 filesystem being mounted at /root/syzkaller-testdir3713254227/syzkaller.IcAci9/296/bus supports timestamps until 2038 (0x7fffffff) [ 477.784463][ T27] audit: type=1800 audit(1679269132.978:81): pid=9035 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 477.939149][ T3674] EXT4-fs (loop2): unmounting filesystem. [ 477.941192][ T7653] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 478.208432][ T7653] usb 2-1: Using ep0 maxpacket: 8 [ 478.328197][ T7653] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 478.340148][ T7653] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 478.368867][ T7653] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 478.397994][ T7653] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 478.428284][ T7653] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 478.437405][ T7653] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.488408][ T9045] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 478.509397][ T7653] hub 2-1:1.0: bad descriptor, ignoring hub [ 478.516263][ T7653] hub: probe of 2-1:1.0 failed with error -5 [ 478.566581][ T7653] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 478.573029][ T7653] cdc_wdm 2-1:1.0: Unknown control protocol [ 479.289212][ T9039] usb 2-1: reset high-speed USB device number 6 using dummy_hcd [ 479.548124][ T9039] usb 2-1: Using ep0 maxpacket: 8 [ 479.658402][ T9045] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 480.027516][ T933] usb 2-1: USB disconnect, device number 6 23:38:59 executing program 1: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000280)}], 0x1) unshare(0x6c060000) socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x0, 0x117) r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581", @ANYRES64], 0x0) syz_usb_ep_write(r0, 0x7f, 0x0, 0x0) mount_setattr(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x8900, &(0x7f0000000040)={0x100070}, 0x20) mbind(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) 23:38:59 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0x6, 0x0, 0x0) 23:38:59 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x0, 0x0, 0x0, 0x0, 0x1d4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x48) 23:38:59 executing program 2: syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2804c00, &(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x1, 0x750, &(0x7f0000001640)="$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") chdir(&(0x7f0000000080)='./file0\x00') open(&(0x7f00000000c0)='./bus\x00', 0x14da42, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000180)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(0x0, 0x14113e, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r1, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) 23:38:59 executing program 5: syz_emit_ethernet(0x0, 0x0, 0x0) 23:38:59 executing program 3: syz_mount_image$romfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8303, &(0x7f0000000240)=ANY=[@ANYRES64=0x0], 0x1, 0x160, &(0x7f0000004400)="$eJzs2r9Kw1AUBvAjLQodHV0sVKKgbf5pXXUUN98gtLlp8MaURJB2chMnQeE6+BKKT+AjZHTTRcSXiMRcapuozSCNwvdb+tFzk9ycwJ1OM/A9nYVNoo3+5cHLYuB79ba53WE6syi1R0T1JERxfN2inKdRPYqp9cWCcq28pb+NNUfsnzOX20bZWwIAAAAAAAAAAAAAAAAAAAAAgIKUmgy1nvDOmMttfawaDoaHFud2EGavq8xui6VS6nKGi5jgN0l/zIn6+vI8KTtJcsVukNS1yeuvZFjtCf6c7a967PXVcDBsup7l2I59ZBhmW9vUtC1D/biXmr2jciv3RFF8r+XHyZSxebPHIvNm8vtXl1xxcZJ92uf3R/gmEBVd7DtpU/OluSpRkWfdEVG+9Fp+ExB+JVSnrqnQH9nq1HPlXzgdnX/UXTAbD8n51+r4vCv/nEU7S3x9APjBewAAAP//bM0zUA==") r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000002340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}}) read$FUSE(r0, &(0x7f00000002c0)={0x2020}, 0x2020) write$FUSE_INIT(r0, 0x0, 0x0) chmod(&(0x7f0000002300)='./file0\x00', 0x0) read$FUSE(r0, &(0x7f0000006580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r0, &(0x7f0000006500)={0x78, 0x0, r1, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) 23:38:59 executing program 5: syz_emit_ethernet(0xfed6, &(0x7f00000000c0)={@link_local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @broadcast=0xe0000001}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) 23:38:59 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x1, 0xcec, 0xa78, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) [ 484.274186][ T9062] loop3: detected capacity change from 0 to 24 23:38:59 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x4bfa, 0x0) 23:38:59 executing program 5: syz_emit_ethernet(0xfed6, &(0x7f00000000c0)={@link_local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @broadcast=0xe0000001}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) [ 484.387359][ T9063] loop2: detected capacity change from 0 to 2048 23:38:59 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000280)={{{@in6=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, {{@in=@remote}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @empty}}}, 0xe8) 23:38:59 executing program 4: syz_genetlink_get_family_id$netlbl_cipso(0xffffffffffffffff, 0xffffffffffffffff) [ 484.491335][ T9063] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 484.510723][ T9063] ext4 filesystem being mounted at /root/syzkaller-testdir3713254227/syzkaller.IcAci9/297/bus supports timestamps until 2038 (0x7fffffff) [ 484.592225][ T27] audit: type=1800 audit(1679269139.788:82): pid=9063 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 484.698018][ T4961] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 484.758057][ T3674] EXT4-fs (loop2): unmounting filesystem. [ 484.958139][ T4961] usb 2-1: Using ep0 maxpacket: 8 [ 485.078156][ T4961] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 485.094578][ T4961] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 485.110786][ T4961] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 485.122096][ T4961] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 485.133778][ T4961] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 485.152654][ T4961] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.199924][ T9076] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 485.225001][ T4961] hub 2-1:1.0: bad descriptor, ignoring hub [ 485.234323][ T4961] hub: probe of 2-1:1.0 failed with error -5 [ 485.251929][ T4961] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 485.258002][ T4961] cdc_wdm 2-1:1.0: Unknown control protocol [ 485.918758][ T9069] usb 2-1: reset high-speed USB device number 7 using dummy_hcd [ 486.168015][ T9069] usb 2-1: Using ep0 maxpacket: 8 [ 486.278420][ T9076] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 486.633518][ T4961] usb 2-1: USB disconnect, device number 7 23:39:06 executing program 1: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000280)}], 0x1) unshare(0x6c060000) socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x0, 0x117) r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581", @ANYRES64], 0x0) syz_usb_ep_write(r0, 0x7f, 0x0, 0x0) mount_setattr(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x8900, &(0x7f0000000040)={0x100070}, 0x20) mbind(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) 23:39:06 executing program 5: syz_emit_ethernet(0xfed6, &(0x7f00000000c0)={@link_local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @broadcast=0xe0000001}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) 23:39:06 executing program 4: r0 = socket(0x2, 0x3, 0x3) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000440)={'ip_vti0\x00', 0x0}) 23:39:06 executing program 2: syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2804c00, &(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x1, 0x750, &(0x7f0000001640)="$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") chdir(&(0x7f0000000080)='./file0\x00') open(&(0x7f00000000c0)='./bus\x00', 0x14da42, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000180)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(0x0, 0x14113e, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r1, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) 23:39:06 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) 23:39:06 executing program 3: syz_mount_image$romfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8303, &(0x7f0000000240)=ANY=[@ANYRES64=0x0], 0x1, 0x160, &(0x7f0000004400)="$eJzs2r9Kw1AUBvAjLQodHV0sVKKgbf5pXXUUN98gtLlp8MaURJB2chMnQeE6+BKKT+AjZHTTRcSXiMRcapuozSCNwvdb+tFzk9ycwJ1OM/A9nYVNoo3+5cHLYuB79ba53WE6syi1R0T1JERxfN2inKdRPYqp9cWCcq28pb+NNUfsnzOX20bZWwIAAAAAAAAAAAAAAAAAAAAAgIKUmgy1nvDOmMttfawaDoaHFud2EGavq8xui6VS6nKGi5jgN0l/zIn6+vI8KTtJcsVukNS1yeuvZFjtCf6c7a967PXVcDBsup7l2I59ZBhmW9vUtC1D/biXmr2jciv3RFF8r+XHyZSxebPHIvNm8vtXl1xxcZJ92uf3R/gmEBVd7DtpU/OluSpRkWfdEVG+9Fp+ExB+JVSnrqnQH9nq1HPlXzgdnX/UXTAbD8n51+r4vCv/nEU7S3x9APjBewAAAP//bM0zUA==") r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000002340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}}) read$FUSE(r0, &(0x7f00000002c0)={0x2020}, 0x2020) write$FUSE_INIT(r0, 0x0, 0x0) chmod(&(0x7f0000002300)='./file0\x00', 0x0) read$FUSE(r0, &(0x7f0000006580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r0, &(0x7f0000006500)={0x78, 0x0, r1, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) 23:39:06 executing program 0: r0 = socket(0x2, 0x3, 0x3) ioctl$SIOCPNADDRESOURCE(r0, 0x89e0, &(0x7f00000000c0)) 23:39:06 executing program 5: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) 23:39:06 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$tun(r0, 0x0, 0x273) [ 490.955057][ T9098] loop3: detected capacity change from 0 to 24 23:39:06 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x100bc3, 0x0) 23:39:06 executing program 5: socket(0x1, 0x0, 0x400) 23:39:06 executing program 0: ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0xee00) [ 491.056823][ T9100] loop2: detected capacity change from 0 to 2048 [ 491.150722][ T9100] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 491.160256][ T9100] ext4 filesystem being mounted at /root/syzkaller-testdir3713254227/syzkaller.IcAci9/298/bus supports timestamps until 2038 (0x7fffffff) [ 491.197262][ T27] audit: type=1800 audit(1679269146.388:83): pid=9100 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 491.369341][ T3674] EXT4-fs (loop2): unmounting filesystem. [ 491.398235][ T3729] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 491.637969][ T3729] usb 2-1: Using ep0 maxpacket: 8 [ 491.758368][ T3729] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 491.768890][ T3729] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 491.780589][ T3729] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 491.791950][ T3729] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 491.803317][ T3729] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 491.812608][ T3729] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.838291][ T9111] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 491.859767][ T3729] hub 2-1:1.0: bad descriptor, ignoring hub [ 491.866411][ T3729] hub: probe of 2-1:1.0 failed with error -5 [ 491.879887][ T3729] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 491.885894][ T3729] cdc_wdm 2-1:1.0: Unknown control protocol [ 492.569167][ T9103] usb 2-1: reset high-speed USB device number 8 using dummy_hcd [ 492.809226][ T9103] usb 2-1: Using ep0 maxpacket: 8 [ 492.908282][ T9111] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 493.249846][ T3729] usb 2-1: USB disconnect, device number 8 23:39:12 executing program 1: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000280)}], 0x1) unshare(0x6c060000) socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x0, 0x117) r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581", @ANYRES64], 0x0) syz_usb_ep_write(r0, 0x7f, 0x0, 0x0) mount_setattr(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x8900, &(0x7f0000000040)={0x100070}, 0x20) mbind(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) 23:39:12 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x12, &(0x7f0000000200), 0x4) 23:39:12 executing program 4: prlimit64(0x0, 0x1, &(0x7f0000000000), 0x0) 23:39:12 executing program 2: syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2804c00, &(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x1, 0x750, &(0x7f0000001640)="$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") chdir(&(0x7f0000000080)='./file0\x00') open(&(0x7f00000000c0)='./bus\x00', 0x14da42, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000180)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r1, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) 23:39:12 executing program 5: r0 = eventfd(0x0) accept$inet(r0, 0x0, 0x0) 23:39:12 executing program 3: syz_mount_image$romfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8303, &(0x7f0000000240)=ANY=[@ANYRES64=0x0], 0x1, 0x160, &(0x7f0000004400)="$eJzs2r9Kw1AUBvAjLQodHV0sVKKgbf5pXXUUN98gtLlp8MaURJB2chMnQeE6+BKKT+AjZHTTRcSXiMRcapuozSCNwvdb+tFzk9ycwJ1OM/A9nYVNoo3+5cHLYuB79ba53WE6syi1R0T1JERxfN2inKdRPYqp9cWCcq28pb+NNUfsnzOX20bZWwIAAAAAAAAAAAAAAAAAAAAAgIKUmgy1nvDOmMttfawaDoaHFud2EGavq8xui6VS6nKGi5jgN0l/zIn6+vI8KTtJcsVukNS1yeuvZFjtCf6c7a967PXVcDBsup7l2I59ZBhmW9vUtC1D/biXmr2jciv3RFF8r+XHyZSxebPHIvNm8vtXl1xxcZJ92uf3R/gmEBVd7DtpU/OluSpRkWfdEVG+9Fp+ExB+JVSnrqnQH9nq1HPlXzgdnX/UXTAbD8n51+r4vCv/nEU7S3x9APjBewAAAP//bM0zUA==") r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000002340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}}) read$FUSE(r0, &(0x7f00000002c0)={0x2020}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50}, 0x50) chmod(&(0x7f0000002300)='./file0\x00', 0x0) read$FUSE(r0, &(0x7f0000006580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r0, &(0x7f0000006500)={0x78, 0x0, r1, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) 23:39:12 executing program 5: select(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000080), &(0x7f0000000100)) 23:39:12 executing program 0: pipe2$9p(&(0x7f0000000f00)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLOCK(r0, 0x0, 0x0) 23:39:12 executing program 4: pipe2$9p(&(0x7f0000000f00)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RREADLINK(r0, 0x0, 0x0) [ 497.506118][ T9140] loop3: detected capacity change from 0 to 24 [ 497.585618][ T9138] loop2: detected capacity change from 0 to 2048 23:39:12 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001e40), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'veth1_virt_wifi\x00', 0x1}) 23:39:12 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc) 23:39:12 executing program 4: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid\x00') ioctl$NS_GET_OWNER_UID(r0, 0xb704, 0x0) [ 497.673481][ T9138] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 497.718178][ T9138] ext4 filesystem being mounted at /root/syzkaller-testdir3713254227/syzkaller.IcAci9/299/bus supports timestamps until 2038 (0x7fffffff) [ 497.760449][ T27] audit: type=1800 audit(1679269152.958:84): pid=9138 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 497.920847][ T3674] EXT4-fs (loop2): unmounting filesystem. [ 497.988087][ T22] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 498.228046][ T22] usb 2-1: Using ep0 maxpacket: 8 [ 498.348167][ T22] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 498.367962][ T22] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 498.376894][ T22] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 498.390272][ T22] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 498.401928][ T22] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 498.416531][ T22] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.438205][ T9154] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 498.459162][ T22] hub 2-1:1.0: bad descriptor, ignoring hub [ 498.465143][ T22] hub: probe of 2-1:1.0 failed with error -5 [ 498.473295][ T22] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 498.486145][ T22] cdc_wdm 2-1:1.0: Unknown control protocol [ 501.259526][ T1254] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.265875][ T1254] ieee802154 phy1 wpan1: encryption failed: -22 23:39:18 executing program 1: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000280)}], 0x1) unshare(0x6c060000) socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x0, 0x117) r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581", @ANYRES64], 0x0) syz_usb_ep_write(r0, 0x7f, 0x0, 0x0) mount_setattr(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x8900, &(0x7f0000000040)={0x100070}, 0x20) mbind(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) [ 502.921663][ T9145] cdc_wdm 2-1:1.0: Error autopm - -16 [ 502.922057][ T4961] usb 2-1: USB disconnect, device number 9 23:39:18 executing program 5: syz_emit_ethernet(0x9f, &(0x7f0000000000)={@empty, @random="5eab2a9b2237", @val, {@ipv6}}, 0x0) 23:39:18 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) fstat(r0, &(0x7f00000002c0)) 23:39:18 executing program 4: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x2e, &(0x7f0000000180)={@mcast1}, 0x14) 23:39:18 executing program 2: syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2804c00, &(0x7f0000000440)=ANY=[@ANYBLOB="0089f2832730bf994f589885cc769fe9ff0f61f46abebbde12c300000000000000004f9ccb1bb434bfd3000098c94e056c0850980a0083cfe8b422987b7600000000f2935e176297b1084a51bd8f968f05a5d657832ff1431d562136b4da360117f775000000000000000000bba7dc7fca7c1cd1d8d0ef487a658a9ca8d9a97746736798562fb2ab78afa0ce15449e2877793e468974c829bdec6fa55dffee9d4a3d79f24219472a8fb1c383f3b607bd1eb995de5c8740ff8b61a5e6c4e8262c2768c29627aa0589727acdfa3ae7615abd1db448fac33f7a6ba8b3273bf02c2c7bc56ac9ec78f92dfa51dbfd5317d5a0a7dbeb3d71a5680cb3a3a12583309f597e509a6ed8510ed554af64d97e13357959bb7f428cb3", @ANYRESDEC], 0x1, 0x750, &(0x7f0000001640)="$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") chdir(&(0x7f0000000080)='./file0\x00') open(&(0x7f00000000c0)='./bus\x00', 0x14da42, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000180)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r1, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) 23:39:18 executing program 3: syz_mount_image$romfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8303, &(0x7f0000000240)=ANY=[@ANYRES64=0x0], 0x1, 0x160, &(0x7f0000004400)="$eJzs2r9Kw1AUBvAjLQodHV0sVKKgbf5pXXUUN98gtLlp8MaURJB2chMnQeE6+BKKT+AjZHTTRcSXiMRcapuozSCNwvdb+tFzk9ycwJ1OM/A9nYVNoo3+5cHLYuB79ba53WE6syi1R0T1JERxfN2inKdRPYqp9cWCcq28pb+NNUfsnzOX20bZWwIAAAAAAAAAAAAAAAAAAAAAgIKUmgy1nvDOmMttfawaDoaHFud2EGavq8xui6VS6nKGi5jgN0l/zIn6+vI8KTtJcsVukNS1yeuvZFjtCf6c7a967PXVcDBsup7l2I59ZBhmW9vUtC1D/biXmr2jciv3RFF8r+XHyZSxebPHIvNm8vtXl1xxcZJ92uf3R/gmEBVd7DtpU/OluSpRkWfdEVG+9Fp+ExB+JVSnrqnQH9nq1HPlXzgdnX/UXTAbD8n51+r4vCv/nEU7S3x9APjBewAAAP//bM0zUA==") r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000002340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}}) read$FUSE(r0, &(0x7f00000002c0)={0x2020}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50}, 0x50) chmod(&(0x7f0000002300)='./file0\x00', 0x0) read$FUSE(r0, &(0x7f0000006580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r0, &(0x7f0000006500)={0x78, 0x0, r1, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) 23:39:18 executing program 5: setitimer(0x0, &(0x7f0000000000)={{}, {0x8}}, 0x0) setitimer(0x0, 0x0, 0x0) [ 503.030550][ T9175] loop3: detected capacity change from 0 to 24 23:39:18 executing program 5: setpriority(0x2, 0x62f, 0x0) [ 503.166818][ T9178] loop2: detected capacity change from 0 to 2048 23:39:18 executing program 5: r0 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) sendto$inet6(r0, &(0x7f0000000000)="cd1d0ae223f16875221a2f613378061250345a04c91a878a3fa76d8deee55a8c6e6ed5ea471354dd136758c4f270647b9eabc0507d83f3c57e47146d908bd1e9cb8a", 0x42, 0x0, &(0x7f00000000c0)={0x1c, 0x1c, 0x2}, 0x1c) 23:39:18 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001f00)='/proc/stat\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000100)={0x2020}, 0x57a13b32c622c610) [ 503.268628][ T9178] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 503.300586][ T9178] ext4 filesystem being mounted at /root/syzkaller-testdir3713254227/syzkaller.IcAci9/300/bus supports timestamps until 2038 (0x7fffffff) 23:39:18 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000200)={0x10, 0x2}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x10, 0x2}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000940)="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", 0x5ad}], 0x1}, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000003800)={0x0, 0x0, &(0x7f00000036c0)=[{&(0x7f0000000300)="9c0a9190f809", 0x6}, {&(0x7f0000000340)="ae52b682e8a9863b89aaac41c129fc3e4257f0fb6165139a521cd9851397a48ade09199c25790fe6e7e37473b6289ec610fe3718dc857f149568073661218276a28ef1af74b507cb5d5da0fc6fc44dadc69203291ce9a0ada26a9c662b7795ee4c792ee8867e84c30da1995d3d1a03ac4c812a6f85e98e4c6010862c8df23b98f0f5ee91f414afb802913940eb652835", 0x90}, {&(0x7f0000000400)="aa5c4e26a08ad9721f034d98f83e35b76c7540e127d0d010b3afde0518b7c69899a9755781ab50a7042c358f49f3d03c6adf907b66ece4f255e1b06578aab7750effe3278bb9688e218b5dda2d75f6c3f2c0d001", 0x54}, {&(0x7f0000000480)="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", 0x4be}], 0x4}, 0x0) 23:39:18 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x23, &(0x7f0000000440), 0x90) [ 503.407296][ T27] audit: type=1800 audit(1679269158.598:85): pid=9178 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 503.508141][ T4961] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 503.582218][ T3674] EXT4-fs (loop2): unmounting filesystem. [ 503.768249][ T4961] usb 2-1: Using ep0 maxpacket: 8 [ 503.898172][ T4961] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 503.912137][ T4961] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 503.932990][ T4961] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 503.950497][ T4961] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 503.968189][ T4961] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 503.977471][ T4961] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.019065][ T9188] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 504.049419][ T4961] hub 2-1:1.0: bad descriptor, ignoring hub [ 504.055575][ T4961] hub: probe of 2-1:1.0 failed with error -5 [ 504.082636][ T4961] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 504.088729][ T4961] cdc_wdm 2-1:1.0: Unknown control protocol 23:39:23 executing program 1: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000280)}], 0x1) unshare(0x6c060000) socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x0, 0x117) r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581", @ANYRES64], 0x0) syz_usb_ep_write(r0, 0x7f, 0x0, 0x0) mount_setattr(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x8900, &(0x7f0000000040)={0x100070}, 0x20) mbind(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) 23:39:23 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x5, &(0x7f0000000000), &(0x7f0000000040)=0x4) 23:39:23 executing program 2: syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2804c00, &(0x7f0000000440)=ANY=[@ANYBLOB="0089f2832730bf994f589885cc769fe9ff0f61f46abebbde12c300000000000000004f9ccb1bb434bfd3000098c94e056c0850980a0083cfe8b422987b7600000000f2935e176297b1084a51bd8f968f05a5d657832ff1431d562136b4da360117f775000000000000000000bba7dc7fca7c1cd1d8d0ef487a658a9ca8d9a97746736798562fb2ab78afa0ce15449e2877793e468974c829bdec6fa55dffee9d4a3d79f24219472a8fb1c383f3b607bd1eb995de5c8740ff8b61a5e6c4e8262c2768c29627aa0589727acdfa3ae7615abd1db448fac33f7a6ba8b3273bf02c2c7bc56ac9ec78f92dfa51dbfd5317d5a0a7dbeb3d71a5680cb3a3a12583309f597e509a6ed8510ed554af64d97e13357959bb7f428cb3", @ANYRESDEC], 0x1, 0x750, &(0x7f0000001640)="$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") chdir(&(0x7f0000000080)='./file0\x00') open(&(0x7f00000000c0)='./bus\x00', 0x14da42, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000180)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r1, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) 23:39:23 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) recvmsg(r0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0) 23:39:23 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xc, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0xb) 23:39:23 executing program 3: syz_mount_image$romfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8303, &(0x7f0000000240)=ANY=[@ANYRES64=0x0], 0x1, 0x160, &(0x7f0000004400)="$eJzs2r9Kw1AUBvAjLQodHV0sVKKgbf5pXXUUN98gtLlp8MaURJB2chMnQeE6+BKKT+AjZHTTRcSXiMRcapuozSCNwvdb+tFzk9ycwJ1OM/A9nYVNoo3+5cHLYuB79ba53WE6syi1R0T1JERxfN2inKdRPYqp9cWCcq28pb+NNUfsnzOX20bZWwIAAAAAAAAAAAAAAAAAAAAAgIKUmgy1nvDOmMttfawaDoaHFud2EGavq8xui6VS6nKGi5jgN0l/zIn6+vI8KTtJcsVukNS1yeuvZFjtCf6c7a967PXVcDBsup7l2I59ZBhmW9vUtC1D/biXmr2jciv3RFF8r+XHyZSxebPHIvNm8vtXl1xxcZJ92uf3R/gmEBVd7DtpU/OluSpRkWfdEVG+9Fp+ExB+JVSnrqnQH9nq1HPlXzgdnX/UXTAbD8n51+r4vCv/nEU7S3x9APjBewAAAP//bM0zUA==") r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000002340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}}) read$FUSE(r0, &(0x7f00000002c0)={0x2020}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50}, 0x50) chmod(&(0x7f0000002300)='./file0\x00', 0x0) read$FUSE(r0, &(0x7f0000006580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r0, &(0x7f0000006500)={0x78, 0x0, r1, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) [ 508.471577][ T9184] cdc_wdm 2-1:1.0: Error autopm - -16 [ 508.471896][ T22] usb 2-1: USB disconnect, device number 10 23:39:23 executing program 5: pipe2(0x0, 0xc00004) 23:39:23 executing program 4: semget(0x3, 0x4, 0x201) 23:39:23 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x3, &(0x7f00000000c0)={0x0, 0x0, 0x3}, 0x8) [ 508.566413][ T9214] loop3: detected capacity change from 0 to 24 23:39:23 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x25, &(0x7f0000000380)=ANY=[@ANYBLOB="01"], &(0x7f0000000040)=0x8) [ 508.628162][ T9216] loop2: detected capacity change from 0 to 2048 23:39:23 executing program 0: mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) 23:39:24 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000080)={0x0, @in, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x98) [ 508.714784][ T9216] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 508.745968][ T9216] ext4 filesystem being mounted at /root/syzkaller-testdir3713254227/syzkaller.IcAci9/301/bus supports timestamps until 2038 (0x7fffffff) [ 508.817946][ T27] audit: type=1800 audit(1679269164.008:86): pid=9216 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 508.973343][ T3674] EXT4-fs (loop2): unmounting filesystem. [ 509.118172][ T22] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 509.378060][ T22] usb 2-1: Using ep0 maxpacket: 8 [ 509.518142][ T22] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 509.533031][ T22] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 509.544511][ T22] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 509.556215][ T22] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 509.567928][ T22] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 509.577208][ T22] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.608266][ T9223] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 509.629324][ T22] hub 2-1:1.0: bad descriptor, ignoring hub [ 509.635315][ T22] hub: probe of 2-1:1.0 failed with error -5 [ 509.654116][ T22] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 509.669612][ T22] cdc_wdm 2-1:1.0: Unknown control protocol 23:39:29 executing program 2: syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2804c00, &(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x1, 0x750, &(0x7f0000001640)="$eJzs3M9rHHUfB/DPTLP9mefZPPAcnseDCC20UDpJmkt7Ml7ES6FQ8FpDMgkhk2zJbmoTC209C7W5KAiid49ehVL/AG9SUPAuiNZ4EC+R2Wy2bbq7btskK/H1gul+v/Nj39/PdvLNDGQ2gH+s18p/kojhiLgcEdXW+jQiDjdbRyNub+238ejmdLkksbl55eekPCw2Nqvt90paryeieUj8LyIeVCLOvv9sbn11bWGqKPLlVn+0sXhttL66dm5+cWoun8uXxicujl2YmLgwNrFrtZ56++Kxe9+8ub7+7ZeNu68OnUtisll3tGrbtaAnbH0mlZjcsX5pL8IGKOljn6F9GAcAAL2V1/mHWtdmlajGIVdpAAAAcOBsHtkEAAAADrwkBj0CAAAAYG9t/x3A9rO9e/UcbDc/vRERI53yh5rPEEccjUpEHN9InnoyIdk6DF7K7TsRcX+yw/mXtM6/Fze2o9/PM9Lsr/vl/DPZaf5J2/NPdJh/hra/O+EldZ//Hucf6jL/Xe4z46tP/1/pmn8n4pWhTvlJOz/pkv9On/l31z+4123b5ucRpzv+/kmeyurx/RCjs/NFzx+tB3+cedir/uPP5CdJMzXpXf+1Put/b+PXhW5zSZl/5mTv//9O+eU58WFrHGlE3Gu9lv31HRknF7/7+tnk5PZ2/kyXz79z/lvt+j/rs/4fvjhyo89dAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoCmNiOFI0qzdTtMsizgREf+N42lRqzfOztZWlmbKbREjUUln54t8LCKqW/2k7I8324/753f0JyLiP98f2wqdL/JsulbMDLp4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2k5ExHAkaRYRaUT8Vk3TLBv0qAAAAIBdNzLoAQAAAAB7zv0/AAAAHHwvev+f7PI4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAPt8qVL5bK58ejmdNmfub66slC7fm4mry9kiyvT2XRt+Vo2V6vNFXk2XVv8q/dLI2L8YqzcGG3k9cZofXXt6mJtZalxdX5xai6/mlf2pSoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACe13BzSdIsItJmO02zLOJfETESlWR2vsjHIuLfEfGwWjlS9scHPWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB2XX11bWGqKPJlDQ2NfWvcioi/wTB6NAY9MwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAj11bWFqaLIl+uDHgkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACDlf6YRES5nK6eGt659XDye7X5GhHvfnLloxtTjcbyeLn+l/b6xset9eefOPDWftYAAAAAB97rz7Pz9n369n08AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAv+qrawtTRZEv72Ej7gy6SgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4EX8GQAA//8tc8Xn") chdir(&(0x7f0000000080)='./file0\x00') open(&(0x7f00000000c0)='./bus\x00', 0x14da42, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000180)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000400)='./bus\x00', 0x14113e, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r1, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) 23:39:29 executing program 4: r0 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r0, 0xffff, 0x10, &(0x7f0000000040), 0x0) 23:39:29 executing program 0: r0 = socket(0x18, 0x1, 0x0) setsockopt$sock_int(r0, 0xffff, 0x200, &(0x7f0000000000), 0x4) 23:39:29 executing program 3: syz_mount_image$romfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8303, &(0x7f0000000240)=ANY=[@ANYRES64=0x0], 0x1, 0x160, &(0x7f0000004400)="$eJzs2r9Kw1AUBvAjLQodHV0sVKKgbf5pXXUUN98gtLlp8MaURJB2chMnQeE6+BKKT+AjZHTTRcSXiMRcapuozSCNwvdb+tFzk9ycwJ1OM/A9nYVNoo3+5cHLYuB79ba53WE6syi1R0T1JERxfN2inKdRPYqp9cWCcq28pb+NNUfsnzOX20bZWwIAAAAAAAAAAAAAAAAAAAAAgIKUmgy1nvDOmMttfawaDoaHFud2EGavq8xui6VS6nKGi5jgN0l/zIn6+vI8KTtJcsVukNS1yeuvZFjtCf6c7a967PXVcDBsup7l2I59ZBhmW9vUtC1D/biXmr2jciv3RFF8r+XHyZSxebPHIvNm8vtXl1xxcZJ92uf3R/gmEBVd7DtpU/OluSpRkWfdEVG+9Fp+ExB+JVSnrqnQH9nq1HPlXzgdnX/UXTAbD8n51+r4vCv/nEU7S3x9APjBewAAAP//bM0zUA==") r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000002340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}}) read$FUSE(r0, &(0x7f00000002c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1}, 0x50) chmod(0x0, 0x0) read$FUSE(r0, &(0x7f0000006580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r0, &(0x7f0000006500)={0x78, 0x0, r2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) [ 514.289816][ T9219] cdc_wdm 2-1:1.0: Error autopm - -16 [ 514.298319][ T22] usb 2-1: USB disconnect, device number 11 23:39:29 executing program 5: r0 = msgget(0x0, 0x0) msgctl$IPC_STAT(r0, 0x2, &(0x7f00000000c0)=""/92) 23:39:29 executing program 1: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000280)}], 0x1) unshare(0x6c060000) socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x0, 0x117) r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581", @ANYRES64], 0x0) syz_usb_ep_write(r0, 0x7f, 0x0, 0x0) mount_setattr(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x8900, &(0x7f0000000040)={0x100070}, 0x20) mbind(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) 23:39:29 executing program 0: getsockname$unix(0xffffffffffffff9c, 0x0, 0x0) 23:39:29 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000021c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r0, r1) poll(&(0x7f0000000280)=[{r0}], 0x1, 0x0) 23:39:29 executing program 5: r0 = socket(0x18, 0x1, 0x0) getsockopt$sock_int(r0, 0xffff, 0x100, &(0x7f0000000040), &(0x7f00000003c0)=0xfffffffffffffe25) [ 514.395481][ T9251] loop3: detected capacity change from 0 to 24 23:39:29 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f00000007c0)={0x2, 0x0, 0x98, &(0x7f0000000700)={0x0, 0x0, 0x1}}) 23:39:29 executing program 4: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$loop(&(0x7f00000001c0), 0xaf, 0x0) 23:39:29 executing program 5: openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x101100, 0x0) [ 514.532004][ T9252] loop2: detected capacity change from 0 to 2048 [ 514.649955][ T9252] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 514.686157][ T9252] ext4 filesystem being mounted at /root/syzkaller-testdir3713254227/syzkaller.IcAci9/302/bus supports timestamps until 2038 (0x7fffffff) [ 514.718596][ T27] audit: type=1800 audit(1679269169.918:87): pid=9252 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 514.808744][ T933] usb 2-1: new high-speed USB device number 12 using dummy_hcd 23:39:30 executing program 0: tkill(0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x7, 0x208000) 23:39:30 executing program 4: syz_usb_connect$printer(0x0, 0x36, &(0x7f0000002280)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0x0, 0x40}}, [{}]}}}]}}]}}, 0x0) 23:39:30 executing program 2: syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2804c00, &(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x1, 0x750, &(0x7f0000001640)="$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") chdir(&(0x7f0000000080)='./file0\x00') open(&(0x7f00000000c0)='./bus\x00', 0x14da42, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000180)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000400)='./bus\x00', 0x14113e, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r1, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) [ 514.969704][ T3674] EXT4-fs (loop2): unmounting filesystem. [ 515.058229][ T933] usb 2-1: Using ep0 maxpacket: 8 [ 515.123860][ T9281] loop2: detected capacity change from 0 to 2048 [ 515.163195][ T9281] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 515.172513][ T9281] ext4 filesystem being mounted at /root/syzkaller-testdir3713254227/syzkaller.IcAci9/303/bus supports timestamps until 2038 (0x7fffffff) [ 515.178129][ T933] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config 23:39:30 executing program 3: syz_mount_image$romfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8303, &(0x7f0000000240)=ANY=[@ANYRES64=0x0], 0x1, 0x160, &(0x7f0000004400)="$eJzs2r9Kw1AUBvAjLQodHV0sVKKgbf5pXXUUN98gtLlp8MaURJB2chMnQeE6+BKKT+AjZHTTRcSXiMRcapuozSCNwvdb+tFzk9ycwJ1OM/A9nYVNoo3+5cHLYuB79ba53WE6syi1R0T1JERxfN2inKdRPYqp9cWCcq28pb+NNUfsnzOX20bZWwIAAAAAAAAAAAAAAAAAAAAAgIKUmgy1nvDOmMttfawaDoaHFud2EGavq8xui6VS6nKGi5jgN0l/zIn6+vI8KTtJcsVukNS1yeuvZFjtCf6c7a967PXVcDBsup7l2I59ZBhmW9vUtC1D/biXmr2jciv3RFF8r+XHyZSxebPHIvNm8vtXl1xxcZJ92uf3R/gmEBVd7DtpU/OluSpRkWfdEVG+9Fp+ExB+JVSnrqnQH9nq1HPlXzgdnX/UXTAbD8n51+r4vCv/nEU7S3x9APjBewAAAP//bM0zUA==") r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000002340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}}) read$FUSE(r0, &(0x7f00000002c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1}, 0x50) chmod(0x0, 0x0) read$FUSE(r0, &(0x7f0000006580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r0, &(0x7f0000006500)={0x78, 0x0, r2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) 23:39:30 executing program 5: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f00000007c0)={0x0, 0x0, 0x98, &(0x7f0000000700)={0x0, 0x0, 0x1}}) [ 515.217936][ T7762] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 515.227485][ T27] audit: type=1800 audit(1679269170.418:88): pid=9281 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 515.319917][ T933] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 515.353317][ T9287] loop3: detected capacity change from 0 to 24 [ 515.362653][ T933] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 515.410080][ T933] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 515.438948][ T933] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 515.468154][ T7762] usb 5-1: Using ep0 maxpacket: 32 [ 515.491461][ T933] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.517276][ T3674] EXT4-fs (loop2): unmounting filesystem. [ 515.538379][ T9260] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 515.559409][ T933] hub 2-1:1.0: bad descriptor, ignoring hub [ 515.565396][ T933] hub: probe of 2-1:1.0 failed with error -5 [ 515.588120][ T7762] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 515.610630][ T7762] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 515.630133][ T933] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 515.643114][ T933] cdc_wdm 2-1:1.0: Unknown control protocol [ 515.650298][ T7762] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 515.662918][ T7762] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 515.828304][ T7762] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 515.842168][ T7762] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.861886][ T7762] usb 5-1: Product: syz [ 515.866974][ T7762] usb 5-1: Manufacturer: syz [ 515.876736][ T7762] usb 5-1: SerialNumber: syz [ 515.889257][ T9260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 515.913655][ T9260] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 515.971385][ T933] usb 2-1: USB disconnect, device number 12 [ 516.157821][ T7762] usb 5-1: USB disconnect, device number 2 23:39:31 executing program 1: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000280)}], 0x1) unshare(0x6c060000) socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x0, 0x117) r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581", @ANYRES64], 0x0) syz_usb_ep_write(r0, 0x7f, 0x0, 0x0) mount_setattr(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x8900, &(0x7f0000000040)={0x100070}, 0x20) mbind(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) 23:39:31 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='cmdline\x00') setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) 23:39:31 executing program 5: syz_open_dev$mouse(&(0x7f0000002700), 0x0, 0x400) 23:39:31 executing program 2: syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2804c00, &(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x1, 0x750, &(0x7f0000001640)="$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") chdir(&(0x7f0000000080)='./file0\x00') open(&(0x7f00000000c0)='./bus\x00', 0x14da42, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000180)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000400)='./bus\x00', 0x14113e, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r1, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) 23:39:31 executing program 3: syz_mount_image$romfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8303, &(0x7f0000000240)=ANY=[@ANYRES64=0x0], 0x1, 0x160, &(0x7f0000004400)="$eJzs2r9Kw1AUBvAjLQodHV0sVKKgbf5pXXUUN98gtLlp8MaURJB2chMnQeE6+BKKT+AjZHTTRcSXiMRcapuozSCNwvdb+tFzk9ycwJ1OM/A9nYVNoo3+5cHLYuB79ba53WE6syi1R0T1JERxfN2inKdRPYqp9cWCcq28pb+NNUfsnzOX20bZWwIAAAAAAAAAAAAAAAAAAAAAgIKUmgy1nvDOmMttfawaDoaHFud2EGavq8xui6VS6nKGi5jgN0l/zIn6+vI8KTtJcsVukNS1yeuvZFjtCf6c7a967PXVcDBsup7l2I59ZBhmW9vUtC1D/biXmr2jciv3RFF8r+XHyZSxebPHIvNm8vtXl1xxcZJ92uf3R/gmEBVd7DtpU/OluSpRkWfdEVG+9Fp+ExB+JVSnrqnQH9nq1HPlXzgdnX/UXTAbD8n51+r4vCv/nEU7S3x9APjBewAAAP//bM0zUA==") r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000002340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}}) read$FUSE(r0, &(0x7f00000002c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1}, 0x50) chmod(0x0, 0x0) read$FUSE(r0, &(0x7f0000006580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r0, &(0x7f0000006500)={0x78, 0x0, r2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) 23:39:31 executing program 0: ioctl$MON_IOCH_MFLUSH(0xffffffffffffffff, 0x9208, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x12000) mmap$usbmon(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x2) r1 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0xc002) ioctl$MON_IOCQ_RING_SIZE(r1, 0x9205) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=@raw=[@initr0, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], &(0x7f00000000c0)='GPL\x00', 0x4, 0xd4, &(0x7f0000000100)=""/212, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x0, 0xe, 0xe2d, 0x4}, 0x10}, 0x80) bind$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000400)={0x1f, @fixed}, 0xa) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000640)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a80)=@bpf_ext={0x1c, 0x3, &(0x7f0000000980)=@raw=[@map_fd={0x18, 0x0, 0x1, 0x0, 0x1}, @exit], &(0x7f00000009c0)='syzkaller\x00', 0x6ab8, 0x0, 0x0, 0x41000, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000a00), 0x8, 0x10, &(0x7f0000000a40)={0x0, 0x0, 0xe7bd}, 0x10, 0x7fbc}, 0x80) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000b00)='status\x00') ioctl$MON_IOCT_RING_SIZE(r2, 0x9204, 0x12a294) syz_genetlink_get_family_id$nl802154(&(0x7f0000000bc0), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 23:39:31 executing program 5: ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) sendmmsg$unix(r0, &(0x7f0000006e40)=[{{&(0x7f0000002980)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000002b00)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @cred={{0x1c}}], 0x40}}], 0x1, 0x0) [ 516.584478][ T9297] loop3: detected capacity change from 0 to 24 23:39:31 executing program 4: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000800), 0x0) [ 516.677131][ T9295] loop2: detected capacity change from 0 to 2048 23:39:31 executing program 5: openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) 23:39:32 executing program 0: mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x99475188f384a6f5, 0xffffffffffffffff, 0x10000000) 23:39:32 executing program 4: timer_create(0x2, &(0x7f0000000300)={0x0, 0x28, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000340)) [ 516.761508][ T9295] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 516.783743][ T9295] ext4 filesystem being mounted at /root/syzkaller-testdir3713254227/syzkaller.IcAci9/304/bus supports timestamps until 2038 (0x7fffffff) [ 516.861443][ T27] audit: type=1800 audit(1679269172.058:89): pid=9295 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=18 res=0 errno=0 23:39:32 executing program 0: timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000280)) [ 516.927926][ T4961] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 517.132167][ T3674] EXT4-fs (loop2): unmounting filesystem. [ 517.197980][ T4961] usb 2-1: Using ep0 maxpacket: 8 [ 517.338269][ T4961] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 517.348773][ T4961] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 517.358090][ T4961] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 517.370111][ T4961] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 517.381625][ T4961] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 517.390885][ T4961] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.433950][ T9299] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 517.464975][ T4961] hub 2-1:1.0: bad descriptor, ignoring hub [ 517.481711][ T4961] hub: probe of 2-1:1.0 failed with error -5 [ 517.491774][ T4961] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 517.503404][ T4961] cdc_wdm 2-1:1.0: Unknown control protocol [ 517.753622][ T9299] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 517.769149][ T9299] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 517.818027][ T933] usb 2-1: USB disconnect, device number 13 23:39:33 executing program 1: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000280)}], 0x1) unshare(0x6c060000) socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x0, 0x117) r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581", @ANYRES64], 0x0) syz_usb_ep_write(r0, 0x7f, 0x0, 0x0) mount_setattr(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x8900, &(0x7f0000000040)={0x100070}, 0x20) mbind(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) 23:39:33 executing program 5: r0 = syz_io_uring_setup(0x5eaf, &(0x7f0000000000)={0x0, 0x9604}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, 0x0, 0x1) 23:39:33 executing program 4: r0 = socket$can_j1939(0x1d, 0x2, 0x7) connect$can_j1939(r0, &(0x7f0000000440), 0x18) 23:39:33 executing program 0: syz_mount_image$udf(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, &(0x7f00000005c0), 0x1, 0x519, &(0x7f0000000600)="$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") 23:39:33 executing program 2: syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2804c00, &(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x1, 0x750, &(0x7f0000001640)="$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") chdir(&(0x7f0000000080)='./file0\x00') open(&(0x7f00000000c0)='./bus\x00', 0x14da42, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000180)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000400)='./bus\x00', 0x14113e, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r1, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) 23:39:33 executing program 3: syz_mount_image$romfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8303, &(0x7f0000000240)=ANY=[@ANYRES64=0x0], 0x1, 0x160, &(0x7f0000004400)="$eJzs2r9Kw1AUBvAjLQodHV0sVKKgbf5pXXUUN98gtLlp8MaURJB2chMnQeE6+BKKT+AjZHTTRcSXiMRcapuozSCNwvdb+tFzk9ycwJ1OM/A9nYVNoo3+5cHLYuB79ba53WE6syi1R0T1JERxfN2inKdRPYqp9cWCcq28pb+NNUfsnzOX20bZWwIAAAAAAAAAAAAAAAAAAAAAgIKUmgy1nvDOmMttfawaDoaHFud2EGavq8xui6VS6nKGi5jgN0l/zIn6+vI8KTtJcsVukNS1yeuvZFjtCf6c7a967PXVcDBsup7l2I59ZBhmW9vUtC1D/biXmr2jciv3RFF8r+XHyZSxebPHIvNm8vtXl1xxcZJ92uf3R/gmEBVd7DtpU/OluSpRkWfdEVG+9Fp+ExB+JVSnrqnQH9nq1HPlXzgdnX/UXTAbD8n51+r4vCv/nEU7S3x9APjBewAAAP//bM0zUA==") r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000002340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}}) read$FUSE(r0, &(0x7f00000002c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1}, 0x50) chmod(&(0x7f0000002300)='./file0\x00', 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000006580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r0, &(0x7f0000006500)={0x78, 0x0, r2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) 23:39:33 executing program 4: r0 = socket(0x18, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f0000000140)=ANY=[]}) [ 518.394664][ T9325] loop0: detected capacity change from 0 to 256 [ 518.418554][ T9326] loop3: detected capacity change from 0 to 24 23:39:33 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x20}}, 0x0) [ 518.454160][ T9325] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 518.500619][ T9323] loop2: detected capacity change from 0 to 2048 [ 518.523257][ T9325] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 23:39:33 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x1}, 0x33fe0}}, 0x0) [ 518.584321][ T9325] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 518.594782][ T9323] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. 23:39:33 executing program 5: r0 = syz_io_uring_setup(0x5eaf, &(0x7f0000000000), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x10, 0x0, 0x1) [ 518.627816][ T9323] ext4 filesystem being mounted at /root/syzkaller-testdir3713254227/syzkaller.IcAci9/305/bus supports timestamps until 2038 (0x7fffffff) [ 518.673034][ T9325] UDF-fs: Scanning with blocksize 512 failed [ 518.703109][ T9325] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 518.736010][ T27] audit: type=1800 audit(1679269173.928:90): pid=9323 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 518.764265][ T9325] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) 23:39:34 executing program 4: r0 = socket(0x18, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0xc0189436, &(0x7f0000000640)={'sit0\x00', &(0x7f00000005c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @multicast1}}}}) 23:39:34 executing program 2: syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2804c00, &(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x1, 0x750, &(0x7f0000001640)="$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") chdir(&(0x7f0000000080)='./file0\x00') open(&(0x7f00000000c0)='./bus\x00', 0x14da42, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000180)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000400)='./bus\x00', 0x14113e, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r1, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) [ 518.788120][ T7762] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 518.849377][ T3674] EXT4-fs (loop2): unmounting filesystem. [ 518.990245][ T9346] loop2: detected capacity change from 0 to 2048 [ 519.039350][ T7762] usb 2-1: Using ep0 maxpacket: 8 [ 519.044804][ T9346] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 519.068105][ T9346] ext4 filesystem being mounted at /root/syzkaller-testdir3713254227/syzkaller.IcAci9/306/bus supports timestamps until 2038 (0x7fffffff) [ 519.125983][ T27] audit: type=1800 audit(1679269174.318:91): pid=9346 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 519.188201][ T7762] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 519.220418][ T7762] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 519.242378][ T7762] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 519.254497][ T7762] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 519.266541][ T7762] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 519.277770][ T7762] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.305683][ T3674] EXT4-fs (loop2): unmounting filesystem. [ 519.318293][ T9330] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 519.339430][ T7762] hub 2-1:1.0: bad descriptor, ignoring hub [ 519.377218][ T7762] hub: probe of 2-1:1.0 failed with error -5 [ 519.428655][ T7762] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 519.434643][ T7762] cdc_wdm 2-1:1.0: Unknown control protocol [ 519.674222][ T9330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 519.690905][ T9330] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 519.743585][ T933] usb 2-1: USB disconnect, device number 14 23:39:35 executing program 0: socket(0x1e, 0x0, 0x74) 23:39:35 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, @fixed}, 0xe) 23:39:35 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r1, 0x1}, 0x14}}, 0x0) 23:39:35 executing program 3: syz_mount_image$romfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8303, &(0x7f0000000240)=ANY=[@ANYRES64=0x0], 0x1, 0x160, &(0x7f0000004400)="$eJzs2r9Kw1AUBvAjLQodHV0sVKKgbf5pXXUUN98gtLlp8MaURJB2chMnQeE6+BKKT+AjZHTTRcSXiMRcapuozSCNwvdb+tFzk9ycwJ1OM/A9nYVNoo3+5cHLYuB79ba53WE6syi1R0T1JERxfN2inKdRPYqp9cWCcq28pb+NNUfsnzOX20bZWwIAAAAAAAAAAAAAAAAAAAAAgIKUmgy1nvDOmMttfawaDoaHFud2EGavq8xui6VS6nKGi5jgN0l/zIn6+vI8KTtJcsVukNS1yeuvZFjtCf6c7a967PXVcDBsup7l2I59ZBhmW9vUtC1D/biXmr2jciv3RFF8r+XHyZSxebPHIvNm8vtXl1xxcZJ92uf3R/gmEBVd7DtpU/OluSpRkWfdEVG+9Fp+ExB+JVSnrqnQH9nq1HPlXzgdnX/UXTAbD8n51+r4vCv/nEU7S3x9APjBewAAAP//bM0zUA==") r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000002340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}}) read$FUSE(r0, &(0x7f00000002c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1}, 0x50) chmod(&(0x7f0000002300)='./file0\x00', 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000006580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r0, &(0x7f0000006500)={0x78, 0x0, r2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) 23:39:35 executing program 2: syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2804c00, &(0x7f0000000440)=ANY=[@ANYBLOB="0089f2832730bf994f589885cc769fe9ff0f61f46abebbde12c300000000000000004f9ccb1bb434bfd3000098c94e056c0850980a0083cfe8b422987b7600000000f2935e176297b1084a51bd8f968f05a5d657832ff1431d562136b4da360117f775000000000000000000bba7dc7fca7c1cd1d8d0ef487a658a9ca8d9a97746736798562fb2ab78afa0ce15449e2877793e468974c829bdec6fa55dffee9d4a3d79f24219472a8fb1c383f3b607bd1eb995de5c8740ff8b61a5e6c4e8262c2768c29627aa0589727acdfa3ae7615abd1db448fac33f7a6ba8b3273bf02c2c7bc56ac9ec78f92dfa51dbfd5317d5a0a7dbeb3d71a5680cb3a3a12583309f597e509a6ed8510ed554af64d97e13357959bb7f428cb3", @ANYRESDEC], 0x1, 0x750, &(0x7f0000001640)="$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") chdir(&(0x7f0000000080)='./file0\x00') open(&(0x7f00000000c0)='./bus\x00', 0x14da42, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000180)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000400)='./bus\x00', 0x14113e, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r1, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) 23:39:35 executing program 1: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000280)}], 0x1) unshare(0x6c060000) socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x0, 0x117) r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581", @ANYRES64], 0x0) syz_usb_ep_write(r0, 0x7f, 0x0, 0x0) mount_setattr(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x8900, &(0x7f0000000040)={0x100070}, 0x20) mbind(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) 23:39:35 executing program 0: r0 = syz_io_uring_setup(0x7605, &(0x7f0000000140), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r1) 23:39:35 executing program 4: r0 = socket(0x18, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89fa, &(0x7f0000000640)={'sit0\x00', &(0x7f00000005c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @multicast1}}}}) [ 520.336034][ T9356] loop3: detected capacity change from 0 to 24 23:39:35 executing program 5: eventfd2(0x0, 0x0) socket(0x18, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x101, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 23:39:35 executing program 0: syz_io_uring_setup(0x4406, &(0x7f0000000140), &(0x7f00002c1000/0x4000)=nil, &(0x7f0000000000/0xc00000)=nil, &(0x7f00000001c0), 0x0) 23:39:35 executing program 4: r0 = syz_io_uring_setup(0x5eaf, &(0x7f0000000000), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x8, 0x0, 0x1) 23:39:35 executing program 5: syz_open_dev$vcsa(&(0x7f0000000140), 0x0, 0x127000) [ 520.532526][ T9358] loop2: detected capacity change from 0 to 2048 23:39:35 executing program 0: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) getresuid(&(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)) [ 520.665444][ T9358] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. 23:39:35 executing program 4: syz_genetlink_get_family_id$l2tp(&(0x7f00000004c0), 0xffffffffffffffff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$vcsa(&(0x7f00000000c0), 0x100, 0x0) 23:39:35 executing program 5: r0 = socket(0xf, 0x3, 0x2) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) [ 520.737987][ T7653] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 520.758059][ T9358] ext4 filesystem being mounted at /root/syzkaller-testdir3713254227/syzkaller.IcAci9/307/bus supports timestamps until 2038 (0x7fffffff) [ 520.897931][ T27] audit: type=1800 audit(1679269176.078:92): pid=9358 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 520.978180][ T7653] usb 2-1: Using ep0 maxpacket: 8 [ 521.005600][ T3674] EXT4-fs (loop2): unmounting filesystem. [ 521.114331][ T7653] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 521.137998][ T7653] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 23:39:36 executing program 3: syz_mount_image$romfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8303, &(0x7f0000000240)=ANY=[@ANYRES64=0x0], 0x1, 0x160, &(0x7f0000004400)="$eJzs2r9Kw1AUBvAjLQodHV0sVKKgbf5pXXUUN98gtLlp8MaURJB2chMnQeE6+BKKT+AjZHTTRcSXiMRcapuozSCNwvdb+tFzk9ycwJ1OM/A9nYVNoo3+5cHLYuB79ba53WE6syi1R0T1JERxfN2inKdRPYqp9cWCcq28pb+NNUfsnzOX20bZWwIAAAAAAAAAAAAAAAAAAAAAgIKUmgy1nvDOmMttfawaDoaHFud2EGavq8xui6VS6nKGi5jgN0l/zIn6+vI8KTtJcsVukNS1yeuvZFjtCf6c7a967PXVcDBsup7l2I59ZBhmW9vUtC1D/biXmr2jciv3RFF8r+XHyZSxebPHIvNm8vtXl1xxcZJ92uf3R/gmEBVd7DtpU/OluSpRkWfdEVG+9Fp+ExB+JVSnrqnQH9nq1HPlXzgdnX/UXTAbD8n51+r4vCv/nEU7S3x9APjBewAAAP//bM0zUA==") r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000002340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}}) read$FUSE(r0, &(0x7f00000002c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1}, 0x50) chmod(&(0x7f0000002300)='./file0\x00', 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000006580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r0, &(0x7f0000006500)={0x78, 0x0, r2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) 23:39:36 executing program 5: r0 = socket(0x18, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000640)={'sit0\x00', &(0x7f00000005c0)={'tunl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x3, 0x29, 0x0, @broadcast, @multicast1}}}}) [ 521.167198][ T7653] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 521.203249][ T7653] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 521.226294][ T7653] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 521.244920][ T7653] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.268473][ T9363] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 521.311029][ T7653] hub 2-1:1.0: bad descriptor, ignoring hub [ 521.322235][ T9391] loop3: detected capacity change from 0 to 24 [ 521.338129][ T7653] hub: probe of 2-1:1.0 failed with error -5 [ 521.357734][ T7653] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 521.375424][ T7653] cdc_wdm 2-1:1.0: Unknown control protocol [ 521.979737][ T9360] usb 2-1: reset high-speed USB device number 15 using dummy_hcd [ 522.228079][ T9360] usb 2-1: Using ep0 maxpacket: 8 [ 522.328416][ T9363] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 23:39:42 executing program 1: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000280)}], 0x1) unshare(0x6c060000) socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x0, 0x117) r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581", @ANYRES64], 0x0) syz_usb_ep_write(r0, 0x7f, 0x0, 0x0) mount_setattr(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x8900, &(0x7f0000000040)={0x100070}, 0x20) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) 23:39:42 executing program 2: syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2804c00, &(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x1, 0x750, &(0x7f0000001640)="$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") chdir(&(0x7f0000000080)='./file0\x00') open(&(0x7f00000000c0)='./bus\x00', 0x14da42, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000180)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000400)='./bus\x00', 0x14113e, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, 0x0, 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r1, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) 23:39:42 executing program 0: r0 = socket(0x18, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x4020940d, &(0x7f0000000640)={'sit0\x00', 0x0}) 23:39:42 executing program 4: r0 = socket(0x18, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x2, &(0x7f0000000640)={'sit0\x00', 0x0}) 23:39:42 executing program 5: r0 = socket(0x18, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000640)={'syztnl2\x00', 0x0}) 23:39:42 executing program 3: syz_mount_image$romfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8303, &(0x7f0000000240)=ANY=[@ANYRES64=0x0], 0x1, 0x160, &(0x7f0000004400)="$eJzs2r9Kw1AUBvAjLQodHV0sVKKgbf5pXXUUN98gtLlp8MaURJB2chMnQeE6+BKKT+AjZHTTRcSXiMRcapuozSCNwvdb+tFzk9ycwJ1OM/A9nYVNoo3+5cHLYuB79ba53WE6syi1R0T1JERxfN2inKdRPYqp9cWCcq28pb+NNUfsnzOX20bZWwIAAAAAAAAAAAAAAAAAAAAAgIKUmgy1nvDOmMttfawaDoaHFud2EGavq8xui6VS6nKGi5jgN0l/zIn6+vI8KTtJcsVukNS1yeuvZFjtCf6c7a967PXVcDBsup7l2I59ZBhmW9vUtC1D/biXmr2jciv3RFF8r+XHyZSxebPHIvNm8vtXl1xxcZJ92uf3R/gmEBVd7DtpU/OluSpRkWfdEVG+9Fp+ExB+JVSnrqnQH9nq1HPlXzgdnX/UXTAbD8n51+r4vCv/nEU7S3x9APjBewAAAP//bM0zUA==") r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000002340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}}) read$FUSE(r0, &(0x7f00000002c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1}, 0x50) chmod(&(0x7f0000002300)='./file0\x00', 0x0) read$FUSE(r0, 0x0, 0x0) write$FUSE_ATTR(r0, &(0x7f0000006500)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) [ 526.820042][ T7653] usb 2-1: USB disconnect, device number 15 23:39:42 executing program 4: r0 = socket(0x18, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f4, &(0x7f0000000640)={'sit0\x00', 0x0}) [ 526.864999][ T9400] loop3: detected capacity change from 0 to 24 23:39:42 executing program 0: r0 = gettid() process_vm_readv(r0, &(0x7f0000000100)=[{&(0x7f0000000340)=""/177, 0xb1}, {&(0x7f0000000240)=""/98, 0x62}], 0x2, &(0x7f00000005c0)=[{&(0x7f00000004c0)=""/239, 0xef}], 0x1, 0x0) [ 526.953881][ T9396] loop2: detected capacity change from 0 to 2048 23:39:42 executing program 4: r0 = socket(0x18, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x401c5820, 0x0) 23:39:42 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv6_getanyicast={0x14}, 0x14}}, 0x0) [ 527.077306][ T9396] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 527.119905][ T9396] ext4 filesystem being mounted at /root/syzkaller-testdir3713254227/syzkaller.IcAci9/308/bus supports timestamps until 2038 (0x7fffffff) 23:39:42 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000000), 0x98) 23:39:42 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) [ 527.202942][ T27] audit: type=1800 audit(1679269182.398:93): pid=9396 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 527.268424][ T7653] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 527.310671][ T3674] EXT4-fs (loop2): unmounting filesystem. [ 527.537978][ T7653] usb 2-1: Using ep0 maxpacket: 8 [ 527.658281][ T7653] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 527.669670][ T7653] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 527.679243][ T7653] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 527.691375][ T7653] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 527.703747][ T7653] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 527.715630][ T7653] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.768419][ T9409] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 527.790065][ T7653] hub 2-1:1.0: bad descriptor, ignoring hub [ 527.796058][ T7653] hub: probe of 2-1:1.0 failed with error -5 [ 527.810998][ T7653] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 527.816966][ T7653] cdc_wdm 2-1:1.0: Unknown control protocol [ 528.448720][ T9406] usb 2-1: reset high-speed USB device number 16 using dummy_hcd [ 528.688084][ T9406] usb 2-1: Using ep0 maxpacket: 8 [ 528.788388][ T9409] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 23:39:48 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000f"], 0x44}}, 0x0) 23:39:48 executing program 2: syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2804c00, &(0x7f0000000440)=ANY=[@ANYBLOB="0089f2832730bf994f589885cc769fe9ff0f61f46abebbde12c300000000000000004f9ccb1bb434bfd3000098c94e056c0850980a0083cfe8b422987b7600000000f2935e176297b1084a51bd8f968f05a5d657832ff1431d562136b4da360117f775000000000000000000bba7dc7fca7c1cd1d8d0ef487a658a9ca8d9a97746736798562fb2ab78afa0ce15449e2877793e468974c829bdec6fa55dffee9d4a3d79f24219472a8fb1c383f3b607bd1eb995de5c8740ff8b61a5e6c4e8262c2768c29627aa0589727acdfa3ae7615abd1db448fac33f7a6ba8b3273bf02c2c7bc56ac9ec78f92dfa51dbfd5317d5a0a7dbeb3d71a5680cb3a3a12583309f597e509a6ed8510ed554af64d97e13357959bb7f428cb3", @ANYRESDEC], 0x1, 0x750, &(0x7f0000001640)="$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") chdir(&(0x7f0000000080)='./file0\x00') open(&(0x7f00000000c0)='./bus\x00', 0x14da42, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000180)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000400)='./bus\x00', 0x14113e, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, 0x0, 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r1, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) 23:39:48 executing program 0: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$link(0x8, r0, 0xffffffffffffffff) 23:39:48 executing program 4: syz_mount_image$xfs(&(0x7f000000bb00), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="008b9a1f"], 0x1, 0xbaed, &(0x7f000000bbc0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) 23:39:48 executing program 1: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000280)}], 0x1) unshare(0x6c060000) socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x0, 0x117) r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581", @ANYRES64], 0x0) syz_usb_ep_write(r0, 0x7f, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) 23:39:48 executing program 3: syz_mount_image$romfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8303, &(0x7f0000000240)=ANY=[@ANYRES64=0x0], 0x1, 0x160, &(0x7f0000004400)="$eJzs2r9Kw1AUBvAjLQodHV0sVKKgbf5pXXUUN98gtLlp8MaURJB2chMnQeE6+BKKT+AjZHTTRcSXiMRcapuozSCNwvdb+tFzk9ycwJ1OM/A9nYVNoo3+5cHLYuB79ba53WE6syi1R0T1JERxfN2inKdRPYqp9cWCcq28pb+NNUfsnzOX20bZWwIAAAAAAAAAAAAAAAAAAAAAgIKUmgy1nvDOmMttfawaDoaHFud2EGavq8xui6VS6nKGi5jgN0l/zIn6+vI8KTtJcsVukNS1yeuvZFjtCf6c7a967PXVcDBsup7l2I59ZBhmW9vUtC1D/biXmr2jciv3RFF8r+XHyZSxebPHIvNm8vtXl1xxcZJ92uf3R/gmEBVd7DtpU/OluSpRkWfdEVG+9Fp+ExB+JVSnrqnQH9nq1HPlXzgdnX/UXTAbD8n51+r4vCv/nEU7S3x9APjBewAAAP//bM0zUA==") r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000002340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}}) read$FUSE(r0, &(0x7f00000002c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1}, 0x50) chmod(&(0x7f0000002300)='./file0\x00', 0x0) read$FUSE(r0, 0x0, 0x0) write$FUSE_ATTR(r0, &(0x7f0000006500)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) [ 533.280133][ T7653] usb 2-1: USB disconnect, device number 16 [ 533.344315][ T9436] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.5'. [ 533.355572][ T9439] loop3: detected capacity change from 0 to 24 23:39:48 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f0000000100)={&(0x7f0000000000), 0x20000001, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x0, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE]}, 0x24}}, 0x0) 23:39:48 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0xd, 0xc, 0xc, 0x2, [@func]}}, &(0x7f00000000c0)=""/249, 0x26, 0xf9, 0x1}, 0x20) [ 533.412315][ T9432] loop2: detected capacity change from 0 to 2048 23:39:48 executing program 0: bpf$BPF_BTF_LOAD(0x14, &(0x7f00000001c0)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x20) 23:39:48 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x1}]}]}}, &(0x7f00000002c0)=""/210, 0x2e, 0xd2, 0x1}, 0x20) [ 533.508417][ T9432] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 533.528116][ T9432] ext4 filesystem being mounted at /root/syzkaller-testdir3713254227/syzkaller.IcAci9/309/bus supports timestamps until 2038 (0x7fffffff) 23:39:48 executing program 2: syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2804c00, &(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x1, 0x750, &(0x7f0000001640)="$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") chdir(&(0x7f0000000080)='./file0\x00') open(&(0x7f00000000c0)='./bus\x00', 0x14da42, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000180)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000400)='./bus\x00', 0x14113e, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, 0x0, 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r1, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) [ 533.586269][ T27] audit: type=1800 audit(1679269188.778:94): pid=9432 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=18 res=0 errno=0 23:39:48 executing program 0: syz_emit_ethernet(0x6a, &(0x7f0000000040)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @local}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x6, "b4f1c6c75dfa600800ff003eafc7a7dc011edd4e56fcbbe5", "5622e915cb0c271ad867c1027490c62f538f896fdd645bc9ff71ddfa3f8ff7e3"}}}}}}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000003a40), 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r1 = creat(0x0, 0x0) openat(r1, &(0x7f0000001100)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000180)='.\x00', 0x28) r2 = openat$incfs(0xffffffffffffffff, &(0x7f0000000280)='.pending_reads\x00', 0x0, 0xa) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r2, &(0x7f0000000340)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000085}, 0x80) socket$inet_udp(0x2, 0x2, 0x0) [ 533.662465][ T3674] EXT4-fs (loop2): unmounting filesystem. 23:39:48 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007180)={0x6, 0x4, &(0x7f0000006f80)=@framed={{}, [@func]}, &(0x7f0000006fc0)='GPL\x00', 0x89, 0xe8, &(0x7f0000007000)=""/232, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 23:39:49 executing program 0: mknodat$null(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x103) fspick(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) [ 533.768002][ T7759] usb 2-1: new high-speed USB device number 17 using dummy_hcd 23:39:49 executing program 5: openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0x416041, 0x0) [ 533.861406][ T9459] loop2: detected capacity change from 0 to 2048 [ 533.904553][ T9459] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 533.924422][ T9459] ext4 filesystem being mounted at /root/syzkaller-testdir3713254227/syzkaller.IcAci9/310/bus supports timestamps until 2038 (0x7fffffff) [ 533.961961][ T27] audit: type=1800 audit(1679269189.158:95): pid=9459 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 534.028073][ T7759] usb 2-1: Using ep0 maxpacket: 8 [ 534.094735][ T3674] EXT4-fs (loop2): unmounting filesystem. [ 534.148336][ T7759] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 534.201960][ T7759] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 534.228307][ T7759] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 534.277945][ T7759] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 534.308362][ T7759] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 534.348033][ T7759] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.388403][ T9447] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 534.426062][ T7759] hub 2-1:1.0: bad descriptor, ignoring hub [ 534.434572][ T7759] hub: probe of 2-1:1.0 failed with error -5 [ 534.458511][ T7759] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 534.464487][ T7759] cdc_wdm 2-1:1.0: Unknown control protocol [ 534.622595][ T9435] loop4: detected capacity change from 0 to 65536 [ 534.656840][ T9435] XFS (loop4): Deprecated V4 format (crc=0) will not be supported after September 2030. [ 534.680553][ T9435] XFS (loop4): Mounting V4 Filesystem [ 534.735949][ T9435] XFS (loop4): Ending clean mount [ 534.750115][ T9435] xfs filesystem being mounted at /root/syzkaller-testdir560401/syzkaller.HJPNcj/278/file0 supports timestamps until 2038 (0x7fffffff) 23:39:50 executing program 4: syz_mount_image$xfs(&(0x7f000000bb00), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="008b9a1f"], 0x1, 0xbaed, &(0x7f000000bbc0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) [ 534.855603][ T3687] XFS (loop4): Unmounting Filesystem [ 535.098342][ T9441] usb 2-1: reset high-speed USB device number 17 using dummy_hcd [ 535.338073][ T9441] usb 2-1: Using ep0 maxpacket: 8 [ 535.459015][ T9447] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 535.639412][ T9480] loop4: detected capacity change from 0 to 65536 [ 535.657395][ T9480] XFS (loop4): Mounting V4 Filesystem [ 535.693616][ T9480] XFS (loop4): Ending clean mount [ 535.704264][ T9480] xfs filesystem being mounted at /root/syzkaller-testdir560401/syzkaller.HJPNcj/279/file0 supports timestamps until 2038 (0x7fffffff) [ 535.792573][ T3687] XFS (loop4): Unmounting Filesystem [ 535.818417][ T7653] usb 2-1: USB disconnect, device number 17 23:39:55 executing program 1: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000280)}], 0x1) unshare(0x6c060000) socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x0, 0x117) r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581", @ANYRES64], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) 23:39:55 executing program 3: syz_mount_image$romfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8303, &(0x7f0000000240)=ANY=[@ANYRES64=0x0], 0x1, 0x160, &(0x7f0000004400)="$eJzs2r9Kw1AUBvAjLQodHV0sVKKgbf5pXXUUN98gtLlp8MaURJB2chMnQeE6+BKKT+AjZHTTRcSXiMRcapuozSCNwvdb+tFzk9ycwJ1OM/A9nYVNoo3+5cHLYuB79ba53WE6syi1R0T1JERxfN2inKdRPYqp9cWCcq28pb+NNUfsnzOX20bZWwIAAAAAAAAAAAAAAAAAAAAAgIKUmgy1nvDOmMttfawaDoaHFud2EGavq8xui6VS6nKGi5jgN0l/zIn6+vI8KTtJcsVukNS1yeuvZFjtCf6c7a967PXVcDBsup7l2I59ZBhmW9vUtC1D/biXmr2jciv3RFF8r+XHyZSxebPHIvNm8vtXl1xxcZJ92uf3R/gmEBVd7DtpU/OluSpRkWfdEVG+9Fp+ExB+JVSnrqnQH9nq1HPlXzgdnX/UXTAbD8n51+r4vCv/nEU7S3x9APjBewAAAP//bM0zUA==") r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000002340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}}) read$FUSE(r0, &(0x7f00000002c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1}, 0x50) chmod(&(0x7f0000002300)='./file0\x00', 0x0) read$FUSE(r0, 0x0, 0x0) write$FUSE_ATTR(r0, &(0x7f0000006500)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) 23:39:55 executing program 5: syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chown(&(0x7f0000000400)='./file0/../file0/../file0\x00', 0x0, 0x0) 23:39:55 executing program 2: syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2804c00, &(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x1, 0x750, &(0x7f0000001640)="$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") chdir(&(0x7f0000000080)='./file0\x00') open(&(0x7f00000000c0)='./bus\x00', 0x14da42, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000180)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000400)='./bus\x00', 0x14113e, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x11, r1, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) 23:39:55 executing program 4: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) write$FUSE_ATTR(r0, 0x0, 0x0) 23:39:55 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f00000018c0), 0x0, &(0x7f00000019c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]}) 23:39:55 executing program 5: r0 = io_uring_setup(0x43cc, &(0x7f0000000a80)) io_uring_register$IORING_REGISTER_FILES(r0, 0x12, 0x0, 0x0) 23:39:55 executing program 4: fchownat(0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xee01, 0x0) [ 539.993308][ T9496] overlayfs: bad mount option "redirect_dir=./file0" [ 540.019705][ T9498] loop3: detected capacity change from 0 to 24 23:39:55 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001300), 0x0, 0x0) epoll_wait(r0, &(0x7f0000000080)=[{}], 0x1, 0x4) 23:39:55 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_virtio(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, 0x19000, 0x0) [ 540.122219][ T9499] loop2: detected capacity change from 0 to 2048 23:39:55 executing program 5: r0 = io_uring_setup(0x43cc, &(0x7f0000000a80)) io_uring_register$IORING_REGISTER_FILES(r0, 0x4, 0x0, 0x0) 23:39:55 executing program 0: openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) [ 540.216485][ T9499] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 540.225626][ T9499] ext4 filesystem being mounted at /root/syzkaller-testdir3713254227/syzkaller.IcAci9/311/bus supports timestamps until 2038 (0x7fffffff) [ 540.250792][ T27] audit: type=1800 audit(1679269195.448:96): pid=9499 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 540.418129][ T7653] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 540.438507][ T3674] EXT4-fs (loop2): unmounting filesystem. [ 540.658057][ T7653] usb 2-1: Using ep0 maxpacket: 8 [ 540.778068][ T7653] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 540.794660][ T7653] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 540.804008][ T7653] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 540.815730][ T7653] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 540.827214][ T7653] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 540.843477][ T7653] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.879798][ T9507] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 540.899397][ T7653] hub 2-1:1.0: bad descriptor, ignoring hub [ 540.905385][ T7653] hub: probe of 2-1:1.0 failed with error -5 [ 540.916292][ T7653] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 540.938063][ T7653] cdc_wdm 2-1:1.0: Unknown control protocol [ 541.563869][ T9502] usb 2-1: reset high-speed USB device number 18 using dummy_hcd [ 541.807967][ T9502] usb 2-1: Using ep0 maxpacket: 8 [ 541.919806][ T9507] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 542.268773][ T7762] usb 2-1: USB disconnect, device number 18 23:40:01 executing program 1: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000280)}], 0x1) unshare(0x6c060000) socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x0, 0x117) r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581", @ANYRES64], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) 23:40:01 executing program 2: syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2804c00, &(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x1, 0x750, &(0x7f0000001640)="$eJzs3M9rHHUfB/DPTLP9mefZPPAcnseDCC20UDpJmkt7Ml7ES6FQ8FpDMgkhk2zJbmoTC209C7W5KAiid49ehVL/AG9SUPAuiNZ4EC+R2Wy2bbq7btskK/H1gul+v/Nj39/PdvLNDGQ2gH+s18p/kojhiLgcEdXW+jQiDjdbRyNub+238ejmdLkksbl55eekPCw2Nqvt90paryeieUj8LyIeVCLOvv9sbn11bWGqKPLlVn+0sXhttL66dm5+cWoun8uXxicujl2YmLgwNrFrtZ56++Kxe9+8ub7+7ZeNu68OnUtisll3tGrbtaAnbH0mlZjcsX5pL8IGKOljn6F9GAcAAL2V1/mHWtdmlajGIVdpAAAAcOBsHtkEAAAADrwkBj0CAAAAYG9t/x3A9rO9e/UcbDc/vRERI53yh5rPEEccjUpEHN9InnoyIdk6DF7K7TsRcX+yw/mXtM6/Fze2o9/PM9Lsr/vl/DPZaf5J2/NPdJh/hra/O+EldZ//Hucf6jL/Xe4z46tP/1/pmn8n4pWhTvlJOz/pkv9On/l31z+4123b5ucRpzv+/kmeyurx/RCjs/NFzx+tB3+cedir/uPP5CdJMzXpXf+1Put/b+PXhW5zSZl/5mTv//9O+eU58WFrHGlE3Gu9lv31HRknF7/7+tnk5PZ2/kyXz79z/lvt+j/rs/4fvjhyo89dAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoCmNiOFI0qzdTtMsizgREf+N42lRqzfOztZWlmbKbREjUUln54t8LCKqW/2k7I8324/753f0JyLiP98f2wqdL/JsulbMDLp4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2k5ExHAkaRYRaUT8Vk3TLBv0qAAAAIBdNzLoAQAAAAB7zv0/AAAAHHwvev+f7PI4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAPt8qVL5bK58ejmdNmfub66slC7fm4mry9kiyvT2XRt+Vo2V6vNFXk2XVv8q/dLI2L8YqzcGG3k9cZofXXt6mJtZalxdX5xai6/mlf2pSoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACe13BzSdIsItJmO02zLOJfETESlWR2vsjHIuLfEfGwWjlS9scHPWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB2XX11bWGqKPJlDQ2NfWvcioi/wTB6NAY9MwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAj11bWFqaLIl+uDHgkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACDlf6YRES5nK6eGt659XDye7X5GhHvfnLloxtTjcbyeLn+l/b6xset9eefOPDWftYAAAAAB97rz7Pz9n369n08AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAv+qrawtTRZEv72Ej7gy6SgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4EX8GQAA//8tc8Xn") chdir(&(0x7f0000000080)='./file0\x00') open(&(0x7f00000000c0)='./bus\x00', 0x14da42, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000180)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000400)='./bus\x00', 0x14113e, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x11, r1, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) 23:40:01 executing program 5: openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000780), 0x40000, 0x0) 23:40:01 executing program 4: syz_mount_image$fuse(&(0x7f000000c600), &(0x7f000000c640)='./file1\x00', 0x0, &(0x7f000000c740), 0x0, 0x0, 0x0) 23:40:01 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x0) syz_clone(0xa100000, &(0x7f0000000200)="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", 0x3c0, 0x0, &(0x7f0000001240), 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000001440), r0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) 23:40:01 executing program 3: syz_mount_image$romfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8303, &(0x7f0000000240)=ANY=[@ANYRES64=0x0], 0x1, 0x160, &(0x7f0000004400)="$eJzs2r9Kw1AUBvAjLQodHV0sVKKgbf5pXXUUN98gtLlp8MaURJB2chMnQeE6+BKKT+AjZHTTRcSXiMRcapuozSCNwvdb+tFzk9ycwJ1OM/A9nYVNoo3+5cHLYuB79ba53WE6syi1R0T1JERxfN2inKdRPYqp9cWCcq28pb+NNUfsnzOX20bZWwIAAAAAAAAAAAAAAAAAAAAAgIKUmgy1nvDOmMttfawaDoaHFud2EGavq8xui6VS6nKGi5jgN0l/zIn6+vI8KTtJcsVukNS1yeuvZFjtCf6c7a967PXVcDBsup7l2I59ZBhmW9vUtC1D/biXmr2jciv3RFF8r+XHyZSxebPHIvNm8vtXl1xxcZJ92uf3R/gmEBVd7DtpU/OluSpRkWfdEVG+9Fp+ExB+JVSnrqnQH9nq1HPlXzgdnX/UXTAbD8n51+r4vCv/nEU7S3x9APjBewAAAP//bM0zUA==") r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000002340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}}) read$FUSE(r0, &(0x7f00000002c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1}, 0x50) chmod(&(0x7f0000002300)='./file0\x00', 0x0) read$FUSE(r0, &(0x7f0000006580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000006500)={0x78, 0x0, r2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) [ 546.463803][ T9527] fuse: Bad value for 'fd' 23:40:01 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, 0x0) [ 546.484220][ T9530] loop3: detected capacity change from 0 to 24 23:40:01 executing program 4: getresuid(&(0x7f00000004c0), &(0x7f0000000500), &(0x7f000000a740)) 23:40:01 executing program 0: fspick(0xffffffffffffffff, 0x0, 0x0) creat(&(0x7f0000001500)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000003bc0)='net/protocols\x00') syz_fuse_handle_req(r0, &(0x7f0000003c00)="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", 0x2000, &(0x7f000000a640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 23:40:01 executing program 4: syz_mount_image$fuse(0x0, &(0x7f000000c640)='./file1\x00', 0x0, &(0x7f000000c740), 0x0, 0x0, 0x0) 23:40:01 executing program 5: openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x2801, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x129302, 0x0) [ 546.615771][ T9534] loop2: detected capacity change from 0 to 2048 [ 546.683799][ T9534] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 546.724163][ T9534] ext4 filesystem being mounted at /root/syzkaller-testdir3713254227/syzkaller.IcAci9/312/bus supports timestamps until 2038 (0x7fffffff) 23:40:02 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEV(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}}, 0x0) [ 546.815332][ T27] audit: type=1800 audit(1679269202.008:97): pid=9534 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 546.883248][ T4960] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 546.989839][ T3674] EXT4-fs (loop2): unmounting filesystem. [ 547.127964][ T4960] usb 2-1: Using ep0 maxpacket: 8 [ 547.248291][ T4960] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 547.258695][ T4960] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 547.267749][ T4960] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 547.279678][ T4960] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 547.291999][ T4960] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 547.302014][ T4960] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 547.339999][ T9541] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 547.359743][ T4960] hub 2-1:1.0: bad descriptor, ignoring hub [ 547.365855][ T4960] hub: probe of 2-1:1.0 failed with error -5 [ 547.398346][ T4960] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 547.409825][ T4960] cdc_wdm 2-1:1.0: Unknown control protocol [ 548.005499][ T9537] usb 2-1: reset high-speed USB device number 19 using dummy_hcd [ 548.268058][ T9537] usb 2-1: Using ep0 maxpacket: 8 [ 548.378466][ T9541] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 23:40:08 executing program 1: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000280)}], 0x1) unshare(0x6c060000) socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x0, 0x117) r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581", @ANYRES64], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) 23:40:08 executing program 2: syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2804c00, &(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x1, 0x750, &(0x7f0000001640)="$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") chdir(&(0x7f0000000080)='./file0\x00') open(&(0x7f00000000c0)='./bus\x00', 0x14da42, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000180)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000400)='./bus\x00', 0x14113e, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x11, r1, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) 23:40:08 executing program 4: openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) 23:40:08 executing program 5: r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000040)=':*}\x00', &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff) 23:40:08 executing program 0: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) [ 552.922321][ T7762] usb 2-1: USB disconnect, device number 19 23:40:08 executing program 3: syz_mount_image$romfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8303, &(0x7f0000000240)=ANY=[@ANYRES64=0x0], 0x1, 0x160, &(0x7f0000004400)="$eJzs2r9Kw1AUBvAjLQodHV0sVKKgbf5pXXUUN98gtLlp8MaURJB2chMnQeE6+BKKT+AjZHTTRcSXiMRcapuozSCNwvdb+tFzk9ycwJ1OM/A9nYVNoo3+5cHLYuB79ba53WE6syi1R0T1JERxfN2inKdRPYqp9cWCcq28pb+NNUfsnzOX20bZWwIAAAAAAAAAAAAAAAAAAAAAgIKUmgy1nvDOmMttfawaDoaHFud2EGavq8xui6VS6nKGi5jgN0l/zIn6+vI8KTtJcsVukNS1yeuvZFjtCf6c7a967PXVcDBsup7l2I59ZBhmW9vUtC1D/biXmr2jciv3RFF8r+XHyZSxebPHIvNm8vtXl1xxcZJ92uf3R/gmEBVd7DtpU/OluSpRkWfdEVG+9Fp+ExB+JVSnrqnQH9nq1HPlXzgdnX/UXTAbD8n51+r4vCv/nEU7S3x9APjBewAAAP//bM0zUA==") r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000002340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}}) read$FUSE(r0, &(0x7f00000002c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1}, 0x50) chmod(&(0x7f0000002300)='./file0\x00', 0x0) read$FUSE(r0, &(0x7f0000006580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000006500)={0x78, 0x0, r2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) 23:40:08 executing program 5: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) read$msr(r0, &(0x7f0000000300)=""/4096, 0x1000) 23:40:08 executing program 4: openat$nvram(0xffffffffffffff9c, &(0x7f0000002080), 0xc0000, 0x0) [ 553.058393][ T9560] loop2: detected capacity change from 0 to 2048 [ 553.074593][ T9571] loop3: detected capacity change from 0 to 24 [ 553.175424][ T9560] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. 23:40:08 executing program 0: pipe2(&(0x7f0000006180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$FUSE_STATFS(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) write$FUSE_INIT(r0, 0x0, 0x0) [ 553.227028][ T9560] ext4 filesystem being mounted at /root/syzkaller-testdir3713254227/syzkaller.IcAci9/313/bus supports timestamps until 2038 (0x7fffffff) 23:40:08 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sysvipc/msg\x00', 0x0, 0x0) [ 553.332033][ T27] audit: type=1800 audit(1679269208.528:98): pid=9560 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=18 res=0 errno=0 23:40:08 executing program 0: syz_open_dev$usbfs(0x0, 0x0, 0x0) syz_clone(0x0, &(0x7f0000000200)="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", 0x3c0, 0x0, 0x0, &(0x7f0000001280)) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) 23:40:08 executing program 4: sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0xb0, 0x0, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}]}, 0xb0}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x4001}, 0x40) syz_clone(0x40005080, 0x0, 0x0, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) syz_open_procfs$namespace(0x0, &(0x7f00000005c0)='ns/time\x00') r1 = socket(0x2b, 0x0, 0x9) sendmsg$NL80211_CMD_SET_POWER_SAVE(r1, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1128}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x20, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x400, 0xf}}}}}, 0x20}, 0x1, 0x0, 0x0, 0xd1}, 0x4080) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f00000007c0)={&(0x7f0000000700), 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x28, 0x0, 0x200, 0x70bd25, 0x0, {{}, {@void, @val={0x8}, @val={0xc}}}, ["", ""]}, 0x28}}, 0x20040080) setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f0000000800), 0x4) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), r2) sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x28, r3, 0x8, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3, 0x33}}}}, [@NL80211_ATTR_ACL_POLICY={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4045}, 0x800) socket(0x1f, 0x0, 0x100) pipe2(&(0x7f0000001080), 0x0) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f00000013c0)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x3c, r3, 0x0, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x1a}}}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x240}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004010}, 0x4) [ 553.471717][ T4960] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 553.528229][ T3674] EXT4-fs (loop2): unmounting filesystem. [ 553.766271][ T4960] usb 2-1: Using ep0 maxpacket: 8 [ 553.908112][ T4960] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 553.954927][ T4960] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 553.995193][ T4960] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 554.016936][ T4960] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 554.037098][ T4960] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 554.047273][ T4960] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.092570][ T9578] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 554.139686][ T4960] hub 2-1:1.0: bad descriptor, ignoring hub [ 554.145986][ T4960] hub: probe of 2-1:1.0 failed with error -5 [ 554.171363][ T4960] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 554.187405][ T4960] cdc_wdm 2-1:1.0: Unknown control protocol [ 554.778533][ T9573] usb 2-1: reset high-speed USB device number 20 using dummy_hcd [ 555.017986][ T9573] usb 2-1: Using ep0 maxpacket: 8 [ 555.118413][ T9578] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 555.459071][ T7759] usb 2-1: USB disconnect, device number 20 23:40:14 executing program 1: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000280)}], 0x1) unshare(0x6c060000) socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x0, 0x117) syz_usb_ep_write(0xffffffffffffffff, 0x7f, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) 23:40:14 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)=[{0x0, 0x136c}], 0x1, &(0x7f00000002c0)=[@rights={{0x10}}], 0x10}, 0x0) 23:40:14 executing program 2: syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2804c00, &(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x1, 0x750, &(0x7f0000001640)="$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") chdir(&(0x7f0000000080)='./file0\x00') open(&(0x7f00000000c0)='./bus\x00', 0x14da42, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000180)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000400)='./bus\x00', 0x14113e, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, r1, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) 23:40:14 executing program 3: syz_mount_image$romfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8303, &(0x7f0000000240)=ANY=[@ANYRES64=0x0], 0x1, 0x160, &(0x7f0000004400)="$eJzs2r9Kw1AUBvAjLQodHV0sVKKgbf5pXXUUN98gtLlp8MaURJB2chMnQeE6+BKKT+AjZHTTRcSXiMRcapuozSCNwvdb+tFzk9ycwJ1OM/A9nYVNoo3+5cHLYuB79ba53WE6syi1R0T1JERxfN2inKdRPYqp9cWCcq28pb+NNUfsnzOX20bZWwIAAAAAAAAAAAAAAAAAAAAAgIKUmgy1nvDOmMttfawaDoaHFud2EGavq8xui6VS6nKGi5jgN0l/zIn6+vI8KTtJcsVukNS1yeuvZFjtCf6c7a967PXVcDBsup7l2I59ZBhmW9vUtC1D/biXmr2jciv3RFF8r+XHyZSxebPHIvNm8vtXl1xxcZJ92uf3R/gmEBVd7DtpU/OluSpRkWfdEVG+9Fp+ExB+JVSnrqnQH9nq1HPlXzgdnX/UXTAbD8n51+r4vCv/nEU7S3x9APjBewAAAP//bM0zUA==") r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000002340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}}) read$FUSE(r0, &(0x7f00000002c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1}, 0x50) chmod(&(0x7f0000002300)='./file0\x00', 0x0) read$FUSE(r0, &(0x7f0000006580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000006500)={0x78, 0x0, r2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) 23:40:14 executing program 4: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001400)={0x0, 0x0, 0x8}, 0xc) 23:40:14 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440), 0x121401, 0x0) write$UHID_CREATE(r0, 0x0, 0x0) 23:40:14 executing program 5: syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000003c00)="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", 0x2000, &(0x7f000000a640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 23:40:14 executing program 4: r0 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc3}, &(0x7f0000000200)={0x0, "69bcfbd8bf5920e4bd0d936b77165a1b0a328897e0421f32d80e82a7722e0b542203f87e94e453c158db2226d9467f5d1befce74f6d79aa79029a6dbaf549360"}, 0x48, 0xfffffffffffffffe) keyctl$link(0x8, r0, 0xfffffffffffffffc) 23:40:14 executing program 0: creat(&(0x7f0000000100)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x1000, 0x0) [ 559.698782][ T9607] loop3: detected capacity change from 0 to 24 [ 559.728386][ T9606] loop2: detected capacity change from 0 to 2048 23:40:15 executing program 5: r0 = socket(0x11, 0xa, 0x0) sendmsg$SMC_PNETID_ADD(r0, &(0x7f00000019c0)={&(0x7f0000001900), 0xc, &(0x7f0000001980)={0x0, 0x40}}, 0x0) [ 559.798670][ T9606] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 559.807299][ T9606] ext4 filesystem being mounted at /root/syzkaller-testdir3713254227/syzkaller.IcAci9/314/bus supports timestamps until 2038 (0x7fffffff) 23:40:15 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x44000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x0, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc}}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc}}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc}}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc}}]}, 0xfff8}}, 0x0) 23:40:15 executing program 0: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) fspick(r0, &(0x7f0000000040)='./file0\x00', 0x0) [ 559.853220][ T27] audit: type=1800 audit(1679269215.048:99): pid=9606 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 559.954558][ T9606] EXT4-fs error (device loop2): ext4_map_blocks:731: inode #19: block 251: comm syz-executor.2: lblock 75 mapped to illegal pblock 251 (length 1) [ 560.045615][ T9606] EXT4-fs error (device loop2): __ext4_get_inode_loc:4490: comm syz-executor.2: Invalid inode table block 0 in block_group 0 [ 560.085106][ T9606] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5841: Corrupt filesystem [ 560.130650][ T9606] EXT4-fs error (device loop2): ext4_ext_truncate:4401: inode #19: comm syz-executor.2: mark_inode_dirty error [ 560.161927][ T9606] EXT4-fs error (device loop2): __ext4_get_inode_loc:4490: comm syz-executor.2: Invalid inode table block 0 in block_group 0 [ 560.193036][ T9606] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5841: Corrupt filesystem [ 560.212419][ T9606] EXT4-fs error (device loop2): ext4_truncate:4295: inode #19: comm syz-executor.2: mark_inode_dirty error [ 560.282941][ T7331] EXT4-fs error (device loop2): __ext4_get_inode_loc:4490: comm kworker/u4:11: Invalid inode table block 0 in block_group 0 [ 560.307499][ T7331] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5841: Corrupt filesystem [ 560.321198][ T7331] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #19: comm kworker/u4:11: mark_inode_dirty error [ 560.334064][ T7653] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 560.342690][ T7331] EXT4-fs (loop2): Delayed block allocation failed for inode 19 at logical offset 0 with max blocks 75 with error 117 [ 560.355246][ T7331] EXT4-fs (loop2): This should not happen!! Data will be lost [ 560.355246][ T7331] [ 560.372323][ T3674] EXT4-fs (loop2): unmounting filesystem. [ 560.548428][ T7653] usb 2-1: device descriptor read/64, error 18 [ 560.818054][ T7653] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 561.017960][ T7653] usb 2-1: device descriptor read/64, error 18 [ 561.139125][ T7653] usb usb2-port1: attempt power cycle [ 561.548297][ T7653] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 561.718103][ T7653] usb 2-1: device descriptor read/8, error -61 [ 561.998281][ T7653] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 562.168309][ T7653] usb 2-1: device descriptor read/8, error -61 [ 562.289237][ T7653] usb usb2-port1: unable to enumerate USB device 23:40:17 executing program 1: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000280)}], 0x1) unshare(0x6c060000) socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x0, 0x117) syz_usb_ep_write(0xffffffffffffffff, 0x7f, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) 23:40:17 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x9) 23:40:17 executing program 0: ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 23:40:17 executing program 4: write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000060c0)={0x90}, 0x90) pipe2(&(0x7f0000006180), 0x0) 23:40:17 executing program 2: syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2804c00, &(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x1, 0x750, &(0x7f0000001640)="$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") chdir(&(0x7f0000000080)='./file0\x00') open(&(0x7f00000000c0)='./bus\x00', 0x14da42, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000180)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000400)='./bus\x00', 0x14113e, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, r1, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) 23:40:17 executing program 3: syz_mount_image$romfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8303, &(0x7f0000000240)=ANY=[@ANYRES64=0x0], 0x1, 0x160, &(0x7f0000004400)="$eJzs2r9Kw1AUBvAjLQodHV0sVKKgbf5pXXUUN98gtLlp8MaURJB2chMnQeE6+BKKT+AjZHTTRcSXiMRcapuozSCNwvdb+tFzk9ycwJ1OM/A9nYVNoo3+5cHLYuB79ba53WE6syi1R0T1JERxfN2inKdRPYqp9cWCcq28pb+NNUfsnzOX20bZWwIAAAAAAAAAAAAAAAAAAAAAgIKUmgy1nvDOmMttfawaDoaHFud2EGavq8xui6VS6nKGi5jgN0l/zIn6+vI8KTtJcsVukNS1yeuvZFjtCf6c7a967PXVcDBsup7l2I59ZBhmW9vUtC1D/biXmr2jciv3RFF8r+XHyZSxebPHIvNm8vtXl1xxcZJ92uf3R/gmEBVd7DtpU/OluSpRkWfdEVG+9Fp+ExB+JVSnrqnQH9nq1HPlXzgdnX/UXTAbD8n51+r4vCv/nEU7S3x9APjBewAAAP//bM0zUA==") r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000002340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}}) read$FUSE(r0, &(0x7f00000002c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1}, 0x50) chmod(&(0x7f0000002300)='./file0\x00', 0x0) read$FUSE(r0, &(0x7f0000006580)={0x2020}, 0x2020) write$FUSE_ATTR(r0, 0x0, 0x0) [ 562.691163][ T1254] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.697510][ T1254] ieee802154 phy1 wpan1: encryption failed: -22 23:40:18 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/meminfo\x00', 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x8, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee01}, 0x2c, {[{@default_permissions}, {@blksize}, {}], [{@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}]}}, 0x0, 0x0, 0x0) 23:40:18 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan4\x00'}) [ 562.766325][ T9639] loop3: detected capacity change from 0 to 24 [ 562.846809][ T9638] loop2: detected capacity change from 0 to 2048 23:40:18 executing program 5: syz_genetlink_get_family_id$nl802154(&(0x7f0000000ac0), 0xffffffffffffffff) [ 562.895059][ T9646] fuse: Bad value for 'group_id' 23:40:18 executing program 0: openat$nvram(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) [ 562.932402][ T9638] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 562.966843][ T9638] ext4 filesystem being mounted at /root/syzkaller-testdir3713254227/syzkaller.IcAci9/315/bus supports timestamps until 2038 (0x7fffffff) [ 563.063029][ T27] audit: type=1800 audit(1679269218.258:100): pid=9638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=18 res=0 errno=0 23:40:18 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/bus/input/devices\x00', 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000000280)="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", 0x2000, &(0x7f0000002900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 563.159995][ T9638] EXT4-fs error (device loop2): __ext4_get_inode_loc:4490: comm syz-executor.2: Invalid inode table block 0 in block_group 0 [ 563.191316][ T9638] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5841: Corrupt filesystem 23:40:18 executing program 5: bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x7000) [ 563.267752][ T9638] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #19: comm syz-executor.2: mark_inode_dirty error [ 563.317401][ T9638] EXT4-fs error (device loop2): __ext4_get_inode_loc:4490: comm syz-executor.2: Invalid inode table block 0 in block_group 0 [ 563.367183][ T9638] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5841: Corrupt filesystem [ 563.388048][ T22] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 563.426238][ T9638] EXT4-fs error (device loop2): ext4_ext_truncate:4401: inode #19: comm syz-executor.2: mark_inode_dirty error [ 563.455027][ T9638] EXT4-fs error (device loop2): __ext4_get_inode_loc:4490: comm syz-executor.2: Invalid inode table block 0 in block_group 0 [ 563.473021][ T9638] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5841: Corrupt filesystem [ 563.494499][ T9638] EXT4-fs error (device loop2): ext4_truncate:4295: inode #19: comm syz-executor.2: mark_inode_dirty error [ 563.536302][ T3712] EXT4-fs error (device loop2): __ext4_get_inode_loc:4490: comm kworker/u4:6: Invalid inode table block 0 in block_group 0 [ 563.556805][ T3712] EXT4-fs (loop2): Delayed block allocation failed for inode 19 at logical offset 0 with max blocks 13 with error 117 [ 563.570004][ T3712] EXT4-fs (loop2): This should not happen!! Data will be lost [ 563.570004][ T3712] [ 563.585828][ T3674] EXT4-fs (loop2): unmounting filesystem. [ 563.591964][ T22] usb 2-1: device descriptor read/64, error 18 [ 563.867965][ T22] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 564.058020][ T22] usb 2-1: device descriptor read/64, error 18 [ 564.179009][ T22] usb usb2-port1: attempt power cycle [ 564.587960][ T22] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 564.758172][ T22] usb 2-1: device descriptor read/8, error -61 [ 565.038071][ T22] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 565.266701][ T22] usb 2-1: device descriptor read/8, error -61 [ 565.400423][ T22] usb usb2-port1: unable to enumerate USB device 23:40:21 executing program 1: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000280)}], 0x1) unshare(0x6c060000) socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x0, 0x117) syz_usb_ep_write(0xffffffffffffffff, 0x7f, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) 23:40:21 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14}, 0x14}}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[], 0x60}}, 0x0) 23:40:21 executing program 4: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) 23:40:21 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0) mmap$snddsp_status(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x82000000) 23:40:21 executing program 2: syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2804c00, &(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x1, 0x750, &(0x7f0000001640)="$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") chdir(&(0x7f0000000080)='./file0\x00') open(&(0x7f00000000c0)='./bus\x00', 0x14da42, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000180)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000400)='./bus\x00', 0x14113e, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, r1, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) 23:40:21 executing program 3: syz_mount_image$romfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8303, &(0x7f0000000240)=ANY=[@ANYRES64=0x0], 0x1, 0x160, &(0x7f0000004400)="$eJzs2r9Kw1AUBvAjLQodHV0sVKKgbf5pXXUUN98gtLlp8MaURJB2chMnQeE6+BKKT+AjZHTTRcSXiMRcapuozSCNwvdb+tFzk9ycwJ1OM/A9nYVNoo3+5cHLYuB79ba53WE6syi1R0T1JERxfN2inKdRPYqp9cWCcq28pb+NNUfsnzOX20bZWwIAAAAAAAAAAAAAAAAAAAAAgIKUmgy1nvDOmMttfawaDoaHFud2EGavq8xui6VS6nKGi5jgN0l/zIn6+vI8KTtJcsVukNS1yeuvZFjtCf6c7a967PXVcDBsup7l2I59ZBhmW9vUtC1D/biXmr2jciv3RFF8r+XHyZSxebPHIvNm8vtXl1xxcZJ92uf3R/gmEBVd7DtpU/OluSpRkWfdEVG+9Fp+ExB+JVSnrqnQH9nq1HPlXzgdnX/UXTAbD8n51+r4vCv/nEU7S3x9APjBewAAAP//bM0zUA==") r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000002340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}}) read$FUSE(r0, &(0x7f00000002c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1}, 0x50) chmod(&(0x7f0000002300)='./file0\x00', 0x0) read$FUSE(r0, &(0x7f0000006580)={0x2020}, 0x2020) write$FUSE_ATTR(r0, 0x0, 0x0) 23:40:21 executing program 0: creat(&(0x7f0000000100)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x1000, 0x0) 23:40:21 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f000000cf00)={0x0, 0x0, &(0x7f000000cec0)={0x0}}, 0x0) 23:40:21 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x9}, 0x48) [ 565.912375][ T9676] loop3: detected capacity change from 0 to 24 23:40:21 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/meminfo\x00', 0x0, 0x0) creat(0x0, 0x0) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000240)={0x2020}, 0x2020) 23:40:21 executing program 4: syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) syz_clone(0x40060000, 0x0, 0x0, 0x0, 0x0, 0x0) [ 566.002584][ T9675] loop2: detected capacity change from 0 to 2048 23:40:21 executing program 5: r0 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000040)=0x80, 0x4) [ 566.079682][ T9675] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 566.104196][ T9675] ext4 filesystem being mounted at /root/syzkaller-testdir3713254227/syzkaller.IcAci9/316/bus supports timestamps until 2038 (0x7fffffff) [ 566.217621][ T27] audit: type=1800 audit(1679269221.408:101): pid=9675 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 566.411573][ T3712] EXT4-fs error (device loop2): __ext4_get_inode_loc:4490: comm kworker/u4:6: Invalid inode table block 0 in block_group 0 [ 566.446789][ T3712] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5841: Corrupt filesystem [ 566.464821][ T3712] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #19: comm kworker/u4:6: mark_inode_dirty error [ 566.488087][ T3712] EXT4-fs (loop2): Delayed block allocation failed for inode 19 at logical offset 0 with max blocks 80 with error 117 [ 566.508159][ T7759] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 566.514096][ T3712] EXT4-fs (loop2): This should not happen!! Data will be lost [ 566.514096][ T3712] [ 566.529006][ T3712] EXT4-fs error (device loop2): __ext4_get_inode_loc:4490: comm kworker/u4:6: Invalid inode table block 0 in block_group 0 [ 566.551491][ T3674] EXT4-fs (loop2): unmounting filesystem. [ 566.698026][ T7759] usb 2-1: device descriptor read/64, error 18 [ 566.967928][ T7759] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 567.158063][ T7759] usb 2-1: device descriptor read/64, error 18 [ 567.279710][ T7759] usb usb2-port1: attempt power cycle [ 567.687989][ T7759] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 567.868440][ T7759] usb 2-1: device descriptor read/8, error -61 [ 568.138015][ T7759] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 568.308292][ T7759] usb 2-1: device descriptor read/8, error -61 [ 568.429657][ T7759] usb usb2-port1: unable to enumerate USB device 23:40:24 executing program 1: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000280)}], 0x1) unshare(0x6c060000) socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581", @ANYRES64], 0x0) syz_usb_ep_write(r0, 0x7f, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) 23:40:24 executing program 5: msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000180)=""/40) 23:40:24 executing program 0: bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/meminfo\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) fspick(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) 23:40:24 executing program 2: syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2804c00, &(0x7f0000000440)=ANY=[@ANYBLOB="0089f2832730bf994f589885cc769fe9ff0f61f46abebbde12c300000000000000004f9ccb1bb434bfd3000098c94e056c0850980a0083cfe8b422987b7600000000f2935e176297b1084a51bd8f968f05a5d657832ff1431d562136b4da360117f775000000000000000000bba7dc7fca7c1cd1d8d0ef487a658a9ca8d9a97746736798562fb2ab78afa0ce15449e2877793e468974c829bdec6fa55dffee9d4a3d79f24219472a8fb1c383f3b607bd1eb995de5c8740ff8b61a5e6c4e8262c2768c29627aa0589727acdfa3ae7615abd1db448fac33f7a6ba8b3273bf02c2c7bc56ac9ec78f92dfa51dbfd5317d5a0a7dbeb3d71a5680cb3a3a12583309f597e509a6ed8510ed554af64d97e13357959bb7f428cb3", @ANYRESDEC], 0x1, 0x750, &(0x7f0000001640)="$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") chdir(&(0x7f0000000080)='./file0\x00') open(&(0x7f00000000c0)='./bus\x00', 0x14da42, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000180)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000400)='./bus\x00', 0x14113e, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, 0xffffffffffffffff, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) 23:40:24 executing program 4: creat(&(0x7f0000000100)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000002e80)='./file0\x00', 0x0, 0x0, 0x0) 23:40:24 executing program 3: syz_mount_image$romfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8303, &(0x7f0000000240)=ANY=[@ANYRES64=0x0], 0x1, 0x160, &(0x7f0000004400)="$eJzs2r9Kw1AUBvAjLQodHV0sVKKgbf5pXXUUN98gtLlp8MaURJB2chMnQeE6+BKKT+AjZHTTRcSXiMRcapuozSCNwvdb+tFzk9ycwJ1OM/A9nYVNoo3+5cHLYuB79ba53WE6syi1R0T1JERxfN2inKdRPYqp9cWCcq28pb+NNUfsnzOX20bZWwIAAAAAAAAAAAAAAAAAAAAAgIKUmgy1nvDOmMttfawaDoaHFud2EGavq8xui6VS6nKGi5jgN0l/zIn6+vI8KTtJcsVukNS1yeuvZFjtCf6c7a967PXVcDBsup7l2I59ZBhmW9vUtC1D/biXmr2jciv3RFF8r+XHyZSxebPHIvNm8vtXl1xxcZJ92uf3R/gmEBVd7DtpU/OluSpRkWfdEVG+9Fp+ExB+JVSnrqnQH9nq1HPlXzgdnX/UXTAbD8n51+r4vCv/nEU7S3x9APjBewAAAP//bM0zUA==") r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000002340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}}) read$FUSE(r0, &(0x7f00000002c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1}, 0x50) chmod(&(0x7f0000002300)='./file0\x00', 0x0) read$FUSE(r0, &(0x7f0000006580)={0x2020}, 0x2020) write$FUSE_ATTR(r0, 0x0, 0x0) 23:40:24 executing program 5: syz_open_dev$vcsn(&(0x7f000000a480), 0x0, 0x20ab00) 23:40:24 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/meminfo\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) fspick(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0) fsmount(r0, 0x0, 0x0) pipe2$watch_queue(0x0, 0x80) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = creat(&(0x7f0000001740)='./file0\x00', 0x0) syz_open_dev$vcsn(&(0x7f0000001a40), 0x0, 0x1) fsopen(&(0x7f0000001b00)='qnx4\x00', 0x0) syz_genetlink_get_family_id$team(&(0x7f0000001bc0), r1) [ 568.992596][ T9708] loop3: detected capacity change from 0 to 24 23:40:24 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x16480, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000ac0), r0) syz_genetlink_get_family_id$nl802154(&(0x7f0000001040), r0) sendmsg$IEEE802154_SCAN_REQ(r0, 0x0, 0x1cf6ce20063a1f36) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000200)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}}) syz_clone(0x40060000, &(0x7f0000000000)="804c764139a32c9ec2fa21806ae7051817c9acc3d442298b534d978da59da220dddcf56d97a43357f166258bed513d7d27c31a717474fd684411946345f58b2a68c6af17ccce3420b21cfd0eb5d456857e021e7529865e9510ee26ff9660974d51f06f6deeef77dc4575d3e3929d7e85c2609854726bcd6cb2d5fff77dd513f6c34cbd145b8b7d78cbca6cf6daeef482baaca62921f4b1852b2e72", 0x9b, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) 23:40:24 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, 0x0, 0x0) [ 569.161684][ T9707] loop2: detected capacity change from 0 to 2048 23:40:24 executing program 4: r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$UHID_GET_REPORT_REPLY(r0, 0x0, 0x0) [ 569.278889][ T9707] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 569.287533][ T9707] ext4 filesystem being mounted at /root/syzkaller-testdir3713254227/syzkaller.IcAci9/317/bus supports timestamps until 2038 (0x7fffffff) 23:40:24 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x242, 0x0) write$cgroup_pressure(r0, &(0x7f0000000040)={'full'}, 0x2f) [ 569.317034][ T27] audit: type=1800 audit(1679269224.508:102): pid=9707 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 569.368183][ T7759] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 569.393876][ T9707] EXT4-fs error (device loop2): __ext4_get_inode_loc:4490: comm syz-executor.2: Invalid inode table block 0 in block_group 0 [ 569.484609][ T9707] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5841: Corrupt filesystem [ 569.516071][ T9707] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #19: comm syz-executor.2: mark_inode_dirty error [ 569.573976][ T9707] ------------[ cut here ]------------ [ 569.579880][ T9707] kernel BUG at fs/ext4/ext4.h:3331! [ 569.617993][ T7759] usb 2-1: Using ep0 maxpacket: 8 [ 569.636048][ T9707] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 569.642190][ T9707] CPU: 1 PID: 9707 Comm: syz-executor.2 Not tainted 6.1.20-syzkaller #0 [ 569.650631][ T9707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 569.660810][ T9707] RIP: 0010:ext4_get_group_info+0x399/0x3a0 [ 569.666877][ T9707] Code: 4e ff 8b 74 24 04 48 c7 c7 00 dd 0b 8d 4c 89 f2 e8 0c a9 2a 02 43 80 3c 2c 00 0f 85 23 fd ff ff e9 26 fd ff ff e8 47 ed 4e ff <0f> 0b 0f 1f 44 00 00 55 41 57 41 56 41 54 53 48 89 fb 49 bf 00 00 [ 569.686532][ T9707] RSP: 0018:ffffc9000cf173b0 EFLAGS: 00010283 [ 569.692743][ T9707] RAX: ffffffff823b73d9 RBX: 00000000fffffac6 RCX: 0000000000040000 [ 569.700846][ T9707] RDX: ffffc900066d9000 RSI: 0000000000017c31 RDI: 0000000000017c32 [ 569.708853][ T9707] RBP: 0000000000000001 R08: ffffffff823b70a9 R09: ffffed101178f73c [ 569.716862][ T9707] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff1100e4718cf [ 569.724889][ T9707] R13: dffffc0000000000 R14: ffff88802539a000 R15: ffff88807238c678 [ 569.732906][ T9707] FS: 00007f0e6b3fe700(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 569.741877][ T9707] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 569.748600][ T9707] CR2: 0000000020100000 CR3: 000000001e2bc000 CR4: 00000000003506e0 [ 569.756617][ T9707] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 569.764718][ T9707] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 569.772725][ T9707] Call Trace: [ 569.776034][ T9707] [ 569.778990][ T9707] ext4_mb_load_buddy_gfp+0xc3/0x820 [ 569.784320][ T9707] ? ext4_get_group_number+0x162/0x240 [ 569.789899][ T9707] ext4_discard_preallocations+0x8d5/0x1230 [ 569.795847][ T9707] ? mb_clear_bits+0x110/0x110 [ 569.800648][ T9707] ? rwsem_write_trylock+0x166/0x210 [ 569.806076][ T9707] ext4_truncate+0xa91/0x1470 [ 569.810828][ T9707] ? __ext4_mark_inode_dirty+0x9d0/0x9d0 [ 569.816589][ T9707] ext4_write_begin+0xb36/0x1060 [ 569.821660][ T9707] ? ext4_readahead+0x110/0x110 [ 569.826543][ T9707] ? fault_in_iov_iter_readable+0x45/0x270 [ 569.832417][ T9707] ? fault_in_readable+0x156/0x340 [ 569.837671][ T9707] ext4_da_write_begin+0x4a3/0xac0 [ 569.842961][ T9707] ? fault_in_safe_writeable+0x250/0x250 [ 569.848647][ T9707] ? ext4_dirty_folio+0x310/0x310 [ 569.853734][ T9707] ? fault_in_iov_iter_readable+0xdb/0x270 [ 569.859590][ T9707] generic_perform_write+0x2fc/0x5e0 [ 569.864989][ T9707] ? generic_file_direct_write+0x460/0x460 [ 569.870847][ T9707] ? clear_nonspinnable+0x60/0x60 [ 569.875929][ T9707] ? __lock_acquire+0x125b/0x1f80 [ 569.881013][ T9707] ? ext4_write_checks+0x255/0x2c0 [ 569.886168][ T9707] ext4_buffered_write_iter+0x122/0x3a0 [ 569.891779][ T9707] ext4_file_write_iter+0x1d2/0x18f0 [ 569.897119][ T9707] ? read_lock_is_recursive+0x10/0x10 [ 569.902557][ T9707] ? ext4_file_read_iter+0x660/0x660 [ 569.907974][ T9707] ? end_current_label_crit_section+0x147/0x170 [ 569.914431][ T9707] vfs_write+0x7ae/0xba0 [ 569.918805][ T9707] ? file_end_write+0x250/0x250 [ 569.923742][ T9707] ? mutex_lock_nested+0x17/0x20 [ 569.928801][ T9707] ? __fdget_pos+0x250/0x2f0 [ 569.933459][ T9707] ? ksys_write+0x77/0x2c0 [ 569.937931][ T9707] ksys_write+0x19c/0x2c0 [ 569.942308][ T9707] ? print_irqtrace_events+0x210/0x210 [ 569.947820][ T9707] ? __ia32_sys_read+0x80/0x80 [ 569.952633][ T9707] ? syscall_enter_from_user_mode+0x2e/0x2b0 [ 569.958663][ T9707] ? lockdep_hardirqs_on+0x94/0x130 [ 569.963920][ T9707] ? syscall_enter_from_user_mode+0x2e/0x2b0 [ 569.969956][ T9707] do_syscall_64+0x3d/0xb0 [ 569.974416][ T9707] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 569.980627][ T9707] RIP: 0033:0x7f0e6c88c0f9 [ 569.985350][ T9707] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 570.005085][ T9707] RSP: 002b:00007f0e6b3fe168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 570.013545][ T9707] RAX: ffffffffffffffda RBX: 00007f0e6c9abf80 RCX: 00007f0e6c88c0f9 [ 570.021554][ T9707] RDX: 000000000208e24b RSI: 0000000020000000 RDI: 0000000000000006 [ 570.029568][ T9707] RBP: 00007f0e6c8e7b39 R08: 0000000000000000 R09: 0000000000000000 [ 570.037590][ T9707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 570.045690][ T9707] R13: 00007ffc7afa0a7f R14: 00007f0e6b3fe300 R15: 0000000000022000 [ 570.053718][ T9707] [ 570.056775][ T9707] Modules linked in: [ 570.069960][ T9707] ---[ end trace 0000000000000000 ]--- [ 570.075702][ T9707] RIP: 0010:ext4_get_group_info+0x399/0x3a0 [ 570.082332][ T9707] Code: 4e ff 8b 74 24 04 48 c7 c7 00 dd 0b 8d 4c 89 f2 e8 0c a9 2a 02 43 80 3c 2c 00 0f 85 23 fd ff ff e9 26 fd ff ff e8 47 ed 4e ff <0f> 0b 0f 1f 44 00 00 55 41 57 41 56 41 54 53 48 89 fb 49 bf 00 00 [ 570.102525][ T9707] RSP: 0018:ffffc9000cf173b0 EFLAGS: 00010283 [ 570.108967][ T9707] RAX: ffffffff823b73d9 RBX: 00000000fffffac6 RCX: 0000000000040000 [ 570.117240][ T9707] RDX: ffffc900066d9000 RSI: 0000000000017c31 RDI: 0000000000017c32 [ 570.132179][ T9707] RBP: 0000000000000001 R08: ffffffff823b70a9 R09: ffffed101178f73c [ 570.155854][ T9707] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff1100e4718cf [ 570.165076][ T7759] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 570.177239][ T7759] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 570.187302][ T9707] R13: dffffc0000000000 R14: ffff88802539a000 R15: ffff88807238c678 [ 570.196630][ T7759] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 570.208968][ T9707] FS: 00007f0e6b3fe700(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 570.218175][ T7759] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 570.229715][ T9707] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 570.236476][ T7759] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 570.246736][ T9707] CR2: 0000000020100000 CR3: 000000001e2bc000 CR4: 00000000003506e0 [ 570.255032][ T7759] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.263918][ T9707] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 570.281417][ T9707] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 570.290107][ T9707] Kernel panic - not syncing: Fatal exception [ 570.296450][ T9707] Kernel Offset: disabled [ 570.300873][ T9707] Rebooting in 86400 seconds..