last executing test programs: 1m7.281660822s ago: executing program 2 (id=2806): creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) 1m7.255901732s ago: executing program 2 (id=2807): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x693, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x1, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000009040), r4) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, 0x0) 1m5.173341308s ago: executing program 2 (id=2810): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/16, @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r4}, 0x18) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) mknod$loop(0x0, 0x2480, 0x1) 1m3.327359752s ago: executing program 2 (id=2814): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000100)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@errors_remount}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x55a, &(0x7f0000000480)="$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") creat(&(0x7f0000000340)='./bus\x00', 0x1c) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) r0 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x42) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x13, 0x0, "ef359f41a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4eb4b78c66ee677df701905b9aafab4ffffffff00", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "d300e6d6ae9ef30bea2a004000"}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc) 1m0.929633581s ago: executing program 2 (id=2823): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file1\x00', 0x18, &(0x7f0000004180)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@journal_checksum}, {@bh}, {@noquota}, {@data_journal}, {@dax}, {@nomblk_io_submit}, {@barrier_val}, {@orlov}, {}]}, 0x45, 0x7b6, &(0x7f0000001140)="$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") syz_mount_image$exfat(&(0x7f0000006c00), &(0x7f0000000040)='./file0\x00', 0x208008de, &(0x7f0000000200)=ANY=[@ANYBLOB='namecase=1,discard,errors=continue,uid=', @ANYRESDEC=0x0, @ANYBLOB=',=', @ANYRESDEC, @ANYRESDEC, @ANYBLOB="f32be912e474ad5bd8cc0a19c9d7610b52abc6d5058fd8ecb25b45c12a91c16c105e53a45c82", @ANYRES64], 0x80, 0x1511, &(0x7f0000001ac0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r3}, &(0x7f0000000000), &(0x7f00000005c0)=r4}, 0x20) preadv(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000004140)={r2, 0x20, &(0x7f0000004100)={&(0x7f00000030c0)=""/40, 0x28, 0x0, &(0x7f0000003100)=""/4096, 0x1000}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000003000)={0x11, 0xb, 0x0, &(0x7f0000000240)='GPL\x00', 0x8000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xd, @void, @value}, 0x94) syz_emit_ethernet(0x2056, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000040), 0x208e24b) 59.69796976s ago: executing program 2 (id=2833): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000c00)='sys_enter\x00'}, 0x10) r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff024}, {0x20, 0x0, 0x0, 0xffeff024}, {0x6, 0x0, 0x4}]}, 0x10) sendmmsg(r2, &(0x7f0000001c00), 0x400000000000159, 0x40840) 58.244184191s ago: executing program 32 (id=2833): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000c00)='sys_enter\x00'}, 0x10) r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff024}, {0x20, 0x0, 0x0, 0xffeff024}, {0x6, 0x0, 0x4}]}, 0x10) sendmmsg(r2, &(0x7f0000001c00), 0x400000000000159, 0x40840) 22.195117389s ago: executing program 5 (id=2965): socket$packet(0x11, 0x3, 0x300) openat$kvm(0xffffffffffffff9c, 0x0, 0x161642, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000940)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@abort}, {@noload}, {@nodiscard}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") 20.958323039s ago: executing program 5 (id=2972): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00'}, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{}, [@TCA_NETEM_LOSS={0x4, 0xd}]}}}]}, 0x50}}, 0x0) 20.78598072s ago: executing program 5 (id=2974): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00', @ANYBLOB="00db00000040"], 0x40}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19.785668688s ago: executing program 5 (id=2982): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000100)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@errors_remount}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x55a, &(0x7f0000000480)="$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") creat(&(0x7f0000000340)='./bus\x00', 0x1c) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) r0 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x42) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x13, 0x0, "ef359f41a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4eb4b78c66ee677df701905b9aafab4ffffffff00", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "d300e6d6ae9ef30bea2a004000"}) pwrite64(0xffffffffffffffff, &(0x7f0000000140)='2', 0xfdef, 0xfecc) 19.186141742s ago: executing program 5 (id=2988): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000700)={[{@grpid}, {@orlov}]}, 0xff, 0x49b, &(0x7f0000001040)="$eJzs3MtvVNUfAPDvnbY8fjzaHyIKglbQSHy0tKCycKFGExeamOgCl7UtiAzU0JoIabQYg0tD4t64NPEvcOfGqAtj4lYTl4aEaGNCcTXmvugwnSltaTvS+XyS6ZxzH3PO9957Zs69p/cG0LH60z9JxPaI+DUievPsrQv0529zs9OjN2anR5Oo1d74M8mWuz47PVouWq63rcgcrkRUPkni+WRhuZMXLp4ZqVbHzxf5wamz7w1OXrj41OmzI6fGT42fGz5+/NjRoWefGX56VeJM47q+78OJ/XtfeevKa6Mnrrz9w9dptfYcyOfXx3FbN5oE1ER/utX+qmUa5z26jLrfDXbUpZPuNlaEZemKiHR39WTtvze6Yn7n9cbLH7dec/P6VBBYM+lv0yIteaYGbGBJtLsGQHuUP/Tp+W/5Wqeux3/CtRciNhXpudnp0bmb8XdHpZjes4bl90fEiZl/vkhfsdzrEAAAK5D1bZ5s1v+rxJ7sPR/r2FmMofRFxP8jYldE3BMRuyPi3ohs2fsi4v585VrvEsvvb8gv7P9Urjat8ypJ+3/P1fX95uriL976uorcjiz+nuTk6er4kWKbHI6ezWl+aJEyvn3pl89azavv/6WvtPyyL1hU4Gp3wwW6sZGpkdXaCNcuRezrbhZ/cnMkID0C9kbEvuV99M4ycfrxr/a3Wuj28S9iFcaZal9GPJbv/5loiL+ULD4+ObglquNHBsujYqEff778eqvy7yj+VXDt4AN5Yn7/NyzR+3eSj9f2RLU6fn5y+WVc/u3Tluc0Kz3+NyVvZmPWP72TT/tgZGrq/FDEpuTVLF+e02XTh+fXLfPl8unxf/hQ8/a/q1gnjT/dSulBfCAiHoyIh4q6PxwRByPi0CLxf//iI+8uEn8SSbRv/1+KGGv6/Xfz+O9L6sfrV5DoOvPdN61GzOv3fy1ptf+PxUz2XZvLvv9uY6kVvMPNBwAAAHeFSkRsj6QykKf7t0elMjCQ/w//7vhfpToxOfXEyYn3z43l9wj0RU+lvNLVW3c9dCiZKT4xzw8X14rL+UeL68afd23N8gOjE9WxNscOnW7bre0/yvaf+qOr3bUD1pz7taBzNbb/SpvqAay/pfz+OxeAjenW9r8l/bO1XXUB1pfzf+hczdr/Rw15/X/YmBY+AOj3Jo+sAzYi/X/oXNo/dC7tHzpSfif8lVjJff0rT5Q3C6z8c7Ys+Q7/TkmUT7xYy7K2xvyUqLQ95A5KpC1mfQudf4YKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA3ezfAAAA//+5XeWQ") mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) 17.464189236s ago: executing program 5 (id=2995): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r1, 0x400454c9, 0xba98575a95aeb70d) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETSTEERINGEBPF(r3, 0x800454e0, &(0x7f0000000180)=r2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) write$cgroup_devices(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e0306003c5c980128846360864666702c1ffe80"], 0xffdd) 17.401132386s ago: executing program 33 (id=2995): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r1, 0x400454c9, 0xba98575a95aeb70d) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETSTEERINGEBPF(r3, 0x800454e0, &(0x7f0000000180)=r2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) write$cgroup_devices(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e0306003c5c980128846360864666702c1ffe80"], 0xffdd) 15.942823837s ago: executing program 3 (id=3004): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000001280)=0x40000000000005) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000f0000000000000c00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000200b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="10000000040000000800000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_open_procfs(0x0, 0x0) syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000001540)='./bus\x00', 0x8000, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x1, 0x1502, &(0x7f0000002a80)="$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") r5 = open(&(0x7f00000001c0)='.\x00', 0x0, 0x0) getdents(r5, &(0x7f0000000280)=""/4096, 0x9005) 13.923404123s ago: executing program 3 (id=3007): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r3 = fsopen(0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x18100}) 12.838693242s ago: executing program 3 (id=3009): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1], 0x30}}, 0x0) 12.444340594s ago: executing program 3 (id=3010): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_usb_connect$uac1(0x2, 0xdc, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca00"], 0x0) 9.251399189s ago: executing program 3 (id=3015): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000100)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@errors_remount}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x55a, &(0x7f0000000480)="$eJzs3d9rW+UbAPDnpO1+f7/rYAwVkcIunMyla+uPCV7MS9HhQO9naM/KaLKMJh1rHbhduBtvZAgiDsR7vfdy+A/4Vwx0MGQUvfAmctKTLluTNuuypprPB05533NO8p435zxvn5M3IQEMrYnsTyHixYj4Kok4HBFJvm008o0Ta/utPrw+my1JNBof/5E098vqredqPe5gXnkhIn75IuJkYWO7teWVhVK5nC7m9cl65cpkbXnl1KVKaT6dTy9Pz8yceXNm+p233+pbX187/9e3H919/8yXx1e/+en+kdtJnI1D+bb2fjyDG+2ViZjIX5OxOPvEjlN9aGw3SQZ9AGzLSB7nY5GNAYdjJI964L/v84hoAEMqEf8wpFp5QOvefvP74P/vUFaycx68t3YDtLH/o2vvjcS+5r3RgdXksTuj7H53vA/tZ238/Pud29kS/XsfAmBLN25GxOnR0Y3jX5KPf9t3uvPqfe2VJ9sw/sHOuZvlP693yn8K6/lPdMh/DnaI3e3YOv4L9/vQTFdZ/vdux/x3fdJqfCSv/a+Z840lFy+V09N5NnwixvZm9c3mc86s3mt029ae/2VL1n4rF8yP4/7o3scfM1eql56lz+0e3Ix4qWP+m6yf/6TD+c9ej/M9tnEsvfNKt21b9//5avwQ8WrH8/9oRivZfH5ysnk9TLauio3+vHXs127tD7r/2fk/sHn/x5P2+dra07fx/b6/027bHut/9H7970k+aZb35Ouuler1xamIPcmHG9dPP3psq97aP+v/ieObj3+drv/9EfFpj/2/dfTHl3vq/4DO/9xTnf+nL9z74LPvurXf2/j3RrN0Il/Ty/jX6wE+y2sHAAAAAAAAu00hIg5FUiiulwuFYnHt8x1H40ChXK3VT16sLl2ei+Z3ZcdjrNCa6T7c9nmIqfzzsK369BP1mYg4EhFfj+xv1ouz1fLcoDsPAAAAAAAAAAAAAAAAAAAAu8TBLt//z/w2MuijA547P/kNw2vL+O/HLz0Bu5L//zC8xD8ML/EPw0v8w/AS/zC8xD8ML/EPw0v8AwAAAAAAAAAAAAAAAAAAAAAAAAAAQF+dP3cuWxqrD6/PZvW5q8tLC9Wrp+bS2kKxsjRbnK0uXinOV6vz5bQ4W61s9XzlavXK1HQsXZusp7X6ZG155UKlunS5fuFSpTSfXkjHdqRXAAAAAAAAAAAAAAAAAAAA8O9SW15ZKJXL6aKCwrYKo7vjMBT6XBj0yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAj/wTAAD//wQrN8c=") creat(&(0x7f0000000340)='./bus\x00', 0x1c) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) r0 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x42) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x13, 0x0, "ef359f41a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4eb4b78c66ee677df701905b9aafab4ffffffff00", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "d300e6d6ae9ef30bea2a004000"}) pwrite64(0xffffffffffffffff, &(0x7f0000000140)='2', 0xfdef, 0xfecc) 9.079595s ago: executing program 6 (id=3017): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000001280)=0x40000000000005) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000f0000000000000c00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000200b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="10000000040000000800000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x48) syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000001540)='./bus\x00', 0x8000, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x1, 0x1502, &(0x7f0000002a80)="$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") r5 = open(&(0x7f00000001c0)='.\x00', 0x0, 0x0) getdents(r5, &(0x7f0000000280)=""/4096, 0x9005) 9.02804424s ago: executing program 0 (id=3018): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100)={[{@discard}]}, 0x1, 0x787, &(0x7f0000001000)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x1100) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) dup(0xffffffffffffffff) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r3, 0x0, 0x4, 0x0, 0x0) r4 = syz_io_uring_setup(0x94f, &(0x7f00000000c0), &(0x7f0000000080), &(0x7f0000000140)) io_uring_enter(r4, 0x62dd, 0x0, 0x0, 0x0, 0x0) 7.713783311s ago: executing program 6 (id=3022): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f0000"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000740)={'wg2\x00', &(0x7f0000000180)=@ethtool_sset_info={0x37, 0xb, 0x523, [0x1, 0xa0, 0x3]}}) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000040)='./bus\x00', 0x1f, &(0x7f0000000500), 0xfd, 0x551d, &(0x7f00000079c0)="$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") 6.875068948s ago: executing program 0 (id=3023): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001300)) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) getrlimit(0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r3, &(0x7f0000006b80)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f0000000340)={0xa, 0x4e28, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="e8020000000000"], 0x2e8}}], 0x2, 0x40) 6.871002707s ago: executing program 3 (id=3024): bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0xfffffe00}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc90}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000080)='./file1\x00', 0x1010000, &(0x7f0000000780)={[{@utf8}, {@iocharset={'iocharset', 0x3d, 'koi8-r'}}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'utf8'}}, {@utf8no}, {@uni_xlateno}, {@numtail}, {@numtail}, {}, {@utf8}, {@utf8no}, {@shortname_win95}, {@shortname_lower}, {@shortname_lower}, {@shortname_lower}, {@fat=@check_strict}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x1ff}}]}, 0x1, 0x363, &(0x7f0000000280)="$eJzs3U1oY1UbAOA3vWnSGfi+dicKQnQnaJnOTje2SAcGu1EJ/izE4HRUkiq0WGwX09aF4lJwqSt3CrpwIS5FUMSdC7eOIKPiQmc34OCR5OYmt0naaQerFJ8Hmpy+57znnPtDcntJTp9bjPal6bh8/fq1mJmpRHXxkcW4UYm5yKKwG+NqE2IAwOlwI6X4PeWOmFI54SkBACes9/7/QkQ0Yi6PvP7lYe2Td38AOPX6f/+fOazNzEEVr5zIlACAEzZ2///efdW13k+1+LVa+lQAAHBaPfH0M48urUQ83mjMRKy9udncbMZDw/qly/FSdGI1zsVs3IzILxS6D5Xe44WLK8vnGo3GTvw0F82ImOonNvMrhaWsl1+PhZiNuX5+/2ojpZRd+GRleaHRExG7O73xY62y2ZyOs/3xvz8bq8MLj6KT3lPExZXl841+B821In8nYm9436I7//mYjW+fH3STUvEJxpXlKwvFpIf5m816XBrshQPvgAAAAAAAAAAAAAAAAAAAAAAAwG2ZbwzMDdbPSd3nfKWc+fkJ9b31cfL8/vpAe/n6QKmeIqXfXnug+VYW+9YHGl2fZ9NCggAAAAAAAAAAAAAAAAAAADCwsVWLVqezur6xtd0uF3bWN7amIqIbefnrj744E+NtblGo5kPUIwZDNPrDbrdbKSsapyxiPD3rDl5EPvh0MONym/pgKyZOo35wVafzv3t+fHcYuTsrev5z2CaLyRuYlabx8EjPa//Pp3ScHTUonC9H6uOjX00plSJvlNOvPDveYVQiqsc/cNvtqTi4TeoWvrr24p3F3m99nnL33T/75NV33v+l3ep0R47eEaytb9xM7ValaHy83dLd1UWkEnmhUj4Tqoel7+2PtLLvfn3qrre/OdroqRx5tXs+j7TJ8s35eDS9lhe60xypOjNMn+5vRGd1esLJf6vCbRzTO9777MOUfvj5yEMMTY29bFT+nlcfAAAAAAAAAAAAAAAAAACgrPRd8b7+l32nD8t68LGTnxkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/HOG//+/VNjbjZHIUQp/7EzIqq+ub0TU/u3NBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgP+6vAAAA///tLFqQ") ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) socket$key(0xf, 0x3, 0x2) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, 0x0, 0x0) 6.316740262s ago: executing program 1 (id=3025): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000280)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r2, 0x0) open$dir(&(0x7f0000000300)='./file0\x00', 0x513c41, 0x46) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x79, 0x0, 0x3, 0x0, 0x1, 0x0, 0x2, 0x5, 0x0, 0x6, 0x2, 0x0, 0x2, 0x6, 0x0, 0x8], 0x2000, 0x98302}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.173047703s ago: executing program 1 (id=3026): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x64, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@noop, @noop]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x1ed842, 0x77) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 6.120678433s ago: executing program 6 (id=3027): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_usb_connect$uac1(0x2, 0xdc, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca00"], 0x0) 5.091149391s ago: executing program 0 (id=3029): shutdown(0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) unshare(0x64000600) 4.953100932s ago: executing program 1 (id=3030): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB], 0x30}}, 0x0) 4.946053932s ago: executing program 0 (id=3031): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000001280)=0x40000000000005) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000f0000000000000c00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000200b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="10000000040000000800000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) getdents(0xffffffffffffffff, 0x0, 0x48) syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000001540)='./bus\x00', 0x8000, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x1, 0x1502, &(0x7f0000002a80)="$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") r5 = open(&(0x7f00000001c0)='.\x00', 0x0, 0x0) getdents(r5, &(0x7f0000000280)=""/4096, 0x9005) 4.936610242s ago: executing program 1 (id=3032): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000700)={[{@grpid}, {@orlov}]}, 0xff, 0x49b, &(0x7f0000001040)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@index_on}]}) 4.631942975s ago: executing program 4 (id=3033): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100)={[{@discard}]}, 0x1, 0x787, &(0x7f0000001000)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x1100) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) dup(0xffffffffffffffff) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r3, 0x0, 0x4, 0x0, 0x0) r4 = syz_io_uring_setup(0x94f, &(0x7f00000000c0), &(0x7f0000000080), &(0x7f0000000140)) io_uring_enter(r4, 0x62dd, 0x0, 0x0, 0x0, 0x0) 4.446290496s ago: executing program 1 (id=3034): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00', @ANYBLOB="00db00000040"], 0x40}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4.219036318s ago: executing program 6 (id=3035): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'syztnl2\x00', 0x0}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1b, 0x0, 0x0, 0x8000, 0x148c, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70200001f4a46d4850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r4 = io_uring_setup(0x3eaf, &(0x7f0000000100)) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) 3.450552024s ago: executing program 4 (id=3036): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000c5000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000fbb703000000e31f008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000c00)='sys_enter\x00', r1}, 0x10) chroot(&(0x7f0000000000)='./file0/../file0\x00') 3.449926453s ago: executing program 0 (id=3037): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f0000"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000740)={'wg2\x00', &(0x7f0000000180)=@ethtool_sset_info={0x37, 0xb, 0x523, [0x1, 0xa0, 0x3]}}) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000040)='./bus\x00', 0x1f, &(0x7f0000000500), 0xfd, 0x551d, &(0x7f00000079c0)="$eJzs3M1rI2UcB/Bn+rLvrkU8eNuBRWhhEzZ9WfRWdRdfsEtZ9eBJ02QasptkSpOmtScPHsWD/4koePLo3+DBszfxoHgTlMwzwa2uKDRt7Pbzgcl35pnJb54JpfCbCQnAubWQ/vpzEq6HyyGE2RDCtRCK9aRcCusxXggh3AghzDy2JOX4eGBulFdCCNdHxWPNpNz9+a3hzbWf3vrlm+8uzl394uvvp3fVwLS9GELo7sT1/W7MvBXzYTleH7aL7K4Oy4w7Opfi/m4ex/ezraLCfn18XL3IlVY8Pt/Z649yu1NvjLLV3i7Gd3rxhP1ha1yneMPD+m6x3cy2imz38yJbh/G8B4fxf9thfxDrNMt6HxXlw2AwzjieHWTxenYeFdnoDcrxWDdvZgejHJZZni408k6zmMfWMT7o/7m32729g3SY7fbbeS9dq9ZeqtbuVGq7eTMbZKuVerd5ZzVdbHVGh1UGWb273srzVierNvLuUrrYajQqtVq6eDfbatd7aa1WXanerqwtlWu30tfvv5d2muniKF9t9/YG7U4/3c530/iOpXS5uvLyUnqzlr6zsZluPrh3b2Pz3Q/uvn//lY03XysP+tu00sXl28vLldrtynJt6Rxd/yflpCd4/XAsybQnAHD2TLr/Dxf0/8C/O07/331Ubj+x/999EMLJ9/9B/z8RZ6r/Pe/9/wlcPxyL/h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Nz6Yf7LN4qVhbh9tRx/phx6rtxOQggzIYTfn2A2XDhSc7asM/8Px8//ZQ7fJqGoMDrHxXK5EkJYL5ffnj3pTwEAAACeXl99fOOz2K3Hl4VpT4jTFG/azFz7cEL1khDC/MKPE6o2M3p5fkLFir/vuXAwoWrFDaxLEyoWb7nNTarafzJ7JC49FkmMmVOdDgAAcCqOdgKn24UAAABwmj6d9gSYjiSMH2WOnwUX37z/84Hg5SNbAAAAwBmUTHsCAAAAwIkr+n+//wcAAABPt/j7fwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf7BzP7eJA1EcgJ8NXth/WrTa+7ayNyhjS8gxx4gC0gQF5EANaYAayC0lRBDhcQhEHCJ5bCvR90nOZCzz4w2Cw8xIAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAECXHqp1FTd/b9vm7Pbt5BkNAAAAcMm2Wi/qf2ap/725/7O59bvpFxFRRsSlufsovpxljpqc6vX5u9Pnqzc13EfUCYf3mDTXt4j411xPv7r+FAAAAODz2ixX8zRbT39mQxdEn9KiTfnjf6a8IiKq2WOmtPKQ9ydTWP39Hsd1prR6AWuaKSwtuY1zpb1L/XM/rtpNT5oiNeXFlx2LzDZ2AACgR6Ozpt9ZCAAAAH26GroAhlHEy1bmcStwkppme+/rWQ8AAAD4gIqhCwAAAAA6V8//ezr/b+/8PwAAABhGOv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACALm2r9WKzXM3b5uz27eQZDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAM/vzjgIhEAZhsHd9ZzL3P6w0aGpqUgXCx98YDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCb3/3l/8TUOJPMvTaWnkeStVNj69TYOzeO/jC+fg0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABc7M9LCoRAEETBnPG/k77/YSVBzyBCBDQ8qqhFAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8EW/++X/xNQ4k8ydNpaOR5K1q8bWVWPvQePowXj7NwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABc7NzPi9xUHADwl2QytVVxXGUOK6LgQS92Oq2tvYkHZfHgnyAs22ldO/VHuwdbirgXb7LnXkSPIoKy3vo/9NxCL/XWwxwqiMeRZJKZtF10VjBJdz8feHnfhJD3fQks+83LLgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQmry7iJNs05vFcXHs9oPrG1l/55E+c3Pn7mrWsjiqM+knw8vVnajfXCIAAAAcHklZ34cQ7qW7a1kf9/L6Py3PyWr+75+dxWU9/2jdX/Zl7Z+13369/+J8oN5snOyi5zfHoxOPp9L5/2bZbs/96xmd/M7n716S/IHEH2y/MEnz+xl9e+vWe908PFJHtgDAf3G87Iug/H0o64dNJgbAodGpFN5l/Z/0ms0JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoA6T7fB0GUchhNXOIs7ceXB9Y6/+5s7d1bKduXFjJ3y9uGZ2iTSEcH5zPDpR62za7crVaxfXx+PR5fqDV0IITY3+TjH9ix8tcXIIjdyf/Qd/tSONtgVx8bDbks+TETT4QwkAgAMpLVpW199Ld9eyY9FKCNMfHq7/X6/EYcn6//7HZ25Xx6rW/8PaZth+g61Lnw+uXL325ual9QujC6NP3zo5fHt46uzp02cH+buSgTcmAAAA7Nt0Op3Od7pFq9b/8crj6//HKnFYsv7/4rvhV9WBE/X/nhaLfk1nAgAAcLg9/+qff0R7HI+63fDl+tbW5eFsO98/Ods2kOq+HSlatf5PVprOCgAAAKjDZDt6aP3/XCUOS67/P/PjSz9Xr5mEEI4W6//HNz4bn6tvOq1Wx58TNz1HAAAAmnW0aNX1/zT//j+ef/IQhxDeeG0WF/8G8B/r/7So/5P3v/mpOlb1+/9T9U2xleL+7H7kfT+ETr/pjAAAADjInipaVuz/nu6uffLLsQ+7vv8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAqNvfAQAA//8udECE") 3.415787174s ago: executing program 4 (id=3038): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000003380)) r1 = eventfd2(0x2, 0x800) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000140)={@my=0x1}) socket$vsock_stream(0x28, 0x1, 0x0) 3.394025674s ago: executing program 4 (id=3039): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r5, &(0x7f0000001140), 0x700, 0x2, 0x0) 3.350673954s ago: executing program 1 (id=3040): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file0\x00', 0x1000801, &(0x7f0000000080)=ANY=[@ANYRES16=0x0], 0x0, 0x1ca, &(0x7f00000008c0)="$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") mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000240)='./file0\x00') r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r4, &(0x7f0000001fc0)=""/182, 0xb6) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\t\x00\x00\x00\b\x00\x00\x00\a\x00\x00\x00\b\x00\x00\x00@\x00\x00\x00', @ANYRES32, @ANYBLOB="0000f4ffffffffffffff0000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000200"/28], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{r5}, &(0x7f0000000780), &(0x7f00000007c0)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) 232.413068ms ago: executing program 6 (id=3041): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB], 0x30}}, 0x0) 212.725008ms ago: executing program 0 (id=3042): shutdown(0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) unshare(0x64000600) 149.324879ms ago: executing program 4 (id=3043): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{}, [@TCA_NETEM_LOSS={0x4, 0xd}]}}}]}, 0x50}}, 0x0) 121.656169ms ago: executing program 6 (id=3044): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000700)={[{@grpid}, {@orlov}]}, 0xff, 0x49b, &(0x7f0000001040)="$eJzs3MtvVNUfAPDvnbY8fjzaHyIKglbQSHy0tKCycKFGExeamOgCl7UtiAzU0JoIabQYg0tD4t64NPEvcOfGqAtj4lYTl4aEaGNCcTXmvugwnSltaTvS+XyS6ZxzH3PO9957Zs69p/cG0LH60z9JxPaI+DUievPsrQv0529zs9OjN2anR5Oo1d74M8mWuz47PVouWq63rcgcrkRUPkni+WRhuZMXLp4ZqVbHzxf5wamz7w1OXrj41OmzI6fGT42fGz5+/NjRoWefGX56VeJM47q+78OJ/XtfeevKa6Mnrrz9w9dptfYcyOfXx3FbN5oE1ER/utX+qmUa5z26jLrfDXbUpZPuNlaEZemKiHR39WTtvze6Yn7n9cbLH7dec/P6VBBYM+lv0yIteaYGbGBJtLsGQHuUP/Tp+W/5Wqeux3/CtRciNhXpudnp0bmb8XdHpZjes4bl90fEiZl/vkhfsdzrEAAAK5D1bZ5s1v+rxJ7sPR/r2FmMofRFxP8jYldE3BMRuyPi3ohs2fsi4v585VrvEsvvb8gv7P9Urjat8ypJ+3/P1fX95uriL976uorcjiz+nuTk6er4kWKbHI6ezWl+aJEyvn3pl89azavv/6WvtPyyL1hU4Gp3wwW6sZGpkdXaCNcuRezrbhZ/cnMkID0C9kbEvuV99M4ycfrxr/a3Wuj28S9iFcaZal9GPJbv/5loiL+ULD4+ObglquNHBsujYqEff778eqvy7yj+VXDt4AN5Yn7/NyzR+3eSj9f2RLU6fn5y+WVc/u3Tluc0Kz3+NyVvZmPWP72TT/tgZGrq/FDEpuTVLF+e02XTh+fXLfPl8unxf/hQ8/a/q1gnjT/dSulBfCAiHoyIh4q6PxwRByPi0CLxf//iI+8uEn8SSbRv/1+KGGv6/Xfz+O9L6sfrV5DoOvPdN61GzOv3fy1ptf+PxUz2XZvLvv9uY6kVvMPNBwAAAHeFSkRsj6QykKf7t0elMjCQ/w//7vhfpToxOfXEyYn3z43l9wj0RU+lvNLVW3c9dCiZKT4xzw8X14rL+UeL68afd23N8gOjE9WxNscOnW7bre0/yvaf+qOr3bUD1pz7taBzNbb/SpvqAay/pfz+OxeAjenW9r8l/bO1XXUB1pfzf+hczdr/Rw15/X/YmBY+AOj3Jo+sAzYi/X/oXNo/dC7tHzpSfif8lVjJff0rT5Q3C6z8c7Ys+Q7/TkmUT7xYy7K2xvyUqLQ95A5KpC1mfQudf4YKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA3ezfAAAA//+5XeWQ") mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@index_on}]}) 0s ago: executing program 4 (id=3045): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100)={[{@discard}]}, 0x1, 0x787, &(0x7f0000001000)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x1100) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) dup(0xffffffffffffffff) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r3, 0x0, 0x4, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(0xffffffffffffffff, 0x62dd, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): capacity change from 0 to 8192 [ 912.168621][T11382] loop0: detected capacity change from 0 to 16 [ 912.211943][T11382] erofs: (device loop0): mounted with root inode @ nid 36. [ 912.220543][T11382] syz.0.2509: attempt to access beyond end of device [ 912.220543][T11382] loop0: rw=0, sector=8, nr_sectors = 16 limit=16 [ 912.255699][T11384] loop3: detected capacity change from 0 to 1024 [ 912.310356][T11384] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 912.399634][T11387] loop2: detected capacity change from 0 to 16 [ 912.406341][T11387] erofs: (device loop2): mounted with root inode @ nid 36. [ 912.581764][ T291] EXT4-fs (loop3): unmounting filesystem. [ 912.644435][T11393] loop0: detected capacity change from 0 to 16 [ 912.680779][T11397] loop3: detected capacity change from 0 to 1024 [ 912.709920][T11397] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 912.711857][T11393] erofs: (device loop0): mounted with root inode @ nid 36. [ 912.875203][T11403] loop2: detected capacity change from 0 to 16 [ 912.941274][T11405] loop0: detected capacity change from 0 to 16 [ 913.019374][T11405] erofs: (device loop0): mounted with root inode @ nid 36. [ 913.034376][T11405] syz.0.2515: attempt to access beyond end of device [ 913.034376][T11405] loop0: rw=0, sector=8, nr_sectors = 16 limit=16 [ 913.198675][T11403] erofs: (device loop2): mounted with root inode @ nid 36. [ 913.338175][T11412] loop1: detected capacity change from 0 to 16 [ 913.410010][T11412] erofs: (device loop1): mounted with root inode @ nid 36. [ 913.876617][ T291] EXT4-fs (loop3): unmounting filesystem. [ 913.907659][T11422] loop2: detected capacity change from 0 to 1024 [ 913.930193][T11422] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 914.468786][T11432] loop3: detected capacity change from 0 to 16 [ 914.478009][T11432] erofs: (device loop3): mounted with root inode @ nid 36. [ 917.454972][T11441] loop4: detected capacity change from 0 to 8192 [ 917.554731][T11439] loop0: detected capacity change from 0 to 16 [ 917.581511][T11439] erofs: (device loop0): mounted with root inode @ nid 36. [ 917.623821][ T293] EXT4-fs (loop2): unmounting filesystem. [ 918.545999][T11445] loop3: detected capacity change from 0 to 16 [ 918.556420][T11455] loop0: detected capacity change from 0 to 16 [ 918.640739][T11445] erofs: (device loop3): mounted with root inode @ nid 36. [ 918.640739][T11455] erofs: (device loop0): mounted with root inode @ nid 36. [ 918.734161][T11454] loop1: detected capacity change from 0 to 4096 [ 918.803158][T11454] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 918.837397][T11454] EXT4-fs (loop1): unmounting filesystem. [ 918.909196][T11467] loop3: detected capacity change from 0 to 16 [ 918.929316][T11467] erofs: (device loop3): mounted with root inode @ nid 36. [ 918.954323][T11467] syz.3.2529: attempt to access beyond end of device [ 918.954323][T11467] loop3: rw=0, sector=8, nr_sectors = 16 limit=16 [ 919.426407][T11476] loop1: detected capacity change from 0 to 16 [ 919.469092][T11476] erofs: (device loop1): mounted with root inode @ nid 36. [ 920.230107][T11488] loop2: detected capacity change from 0 to 8192 [ 920.776671][T11492] loop3: detected capacity change from 0 to 256 [ 920.920103][T11496] loop0: detected capacity change from 0 to 256 [ 920.949256][T11492] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 921.267710][T11496] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 921.279641][ T28] audit: type=1400 audit(1741923475.248:967): avc: denied { associate } for pid=11489 comm="syz.3.2536" name="pids.current" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 921.305384][ T28] audit: type=1400 audit(1741923475.268:968): avc: denied { read append open } for pid=11489 comm="syz.3.2536" path="/514/file0/pids.current" dev="loop3" ino=1048686 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 923.506082][T11509] loop2: detected capacity change from 0 to 8192 [ 923.536069][T11507] loop1: detected capacity change from 0 to 16 [ 923.544393][T11507] erofs: (device loop1): mounted with root inode @ nid 36. [ 923.884296][T11513] loop3: detected capacity change from 0 to 1024 [ 923.903515][T11514] loop4: detected capacity change from 0 to 1024 [ 923.941257][T11514] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 923.950888][T11513] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 924.554182][T11535] loop0: detected capacity change from 0 to 16 [ 924.687133][T11535] erofs: (device loop0): mounted with root inode @ nid 36. [ 925.088900][T11534] syz.0.2543: attempt to access beyond end of device [ 925.088900][T11534] loop0: rw=0, sector=8, nr_sectors = 16 limit=16 [ 925.171298][T11539] loop1: detected capacity change from 0 to 16 [ 925.199568][T11538] loop2: detected capacity change from 0 to 16 [ 925.457122][T11539] erofs: (device loop1): mounted with root inode @ nid 36. [ 925.473000][T11538] erofs: (device loop2): mounted with root inode @ nid 36. [ 925.779892][ T291] EXT4-fs (loop3): unmounting filesystem. [ 925.788950][ T294] EXT4-fs (loop4): unmounting filesystem. [ 926.331073][T11557] loop1: detected capacity change from 0 to 16 [ 926.352472][T11557] erofs: (device loop1): mounted with root inode @ nid 36. [ 926.372634][T11557] syz.1.2549: attempt to access beyond end of device [ 926.372634][T11557] loop1: rw=0, sector=8, nr_sectors = 16 limit=16 [ 927.586579][T11571] loop1: detected capacity change from 0 to 8192 [ 929.521055][T11585] loop0: detected capacity change from 0 to 16 [ 929.602381][T11585] erofs: (device loop0): mounted with root inode @ nid 36. [ 929.622446][T11589] loop1: detected capacity change from 0 to 16 [ 929.629117][T11589] erofs: (device loop1): mounted with root inode @ nid 36. [ 929.652647][T11590] loop4: detected capacity change from 0 to 1024 [ 929.724530][T11592] loop2: detected capacity change from 0 to 1024 [ 929.734809][T11590] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 929.905030][T11592] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 930.341738][T11610] loop3: detected capacity change from 0 to 16 [ 930.352534][T11610] erofs: (device loop3): mounted with root inode @ nid 36. [ 930.559856][ T294] EXT4-fs (loop4): unmounting filesystem. [ 930.750779][ T293] EXT4-fs (loop2): unmounting filesystem. [ 931.098090][T11627] loop0: detected capacity change from 0 to 256 [ 931.107415][T11627] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 932.537615][T11646] loop0: detected capacity change from 0 to 16 [ 932.571913][T11646] erofs: (device loop0): mounted with root inode @ nid 36. [ 932.588513][T11648] loop4: detected capacity change from 0 to 16 [ 932.595346][T11648] erofs: (device loop4): mounted with root inode @ nid 36. [ 932.996451][T11654] loop2: detected capacity change from 0 to 16 [ 933.004150][T11654] erofs: (device loop2): mounted with root inode @ nid 36. [ 933.160710][T11656] loop4: detected capacity change from 0 to 1024 [ 933.209483][T11656] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 933.222787][T11659] loop0: detected capacity change from 0 to 1024 [ 933.329430][T11659] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 933.357035][T11665] loop1: detected capacity change from 0 to 1024 [ 933.464757][T11665] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 934.650448][ T292] EXT4-fs (loop0): unmounting filesystem. [ 934.659144][ T294] EXT4-fs (loop4): unmounting filesystem. [ 934.817805][T11681] loop4: detected capacity change from 0 to 1024 [ 935.589043][ T290] EXT4-fs (loop1): unmounting filesystem. [ 935.627812][T11681] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 935.803710][T11678] loop0: detected capacity change from 0 to 4096 [ 935.825267][T11678] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 938.734731][ T294] EXT4-fs (loop4): unmounting filesystem. [ 938.741490][T11678] EXT4-fs (loop0): unmounting filesystem. [ 938.758659][T11703] loop1: detected capacity change from 0 to 256 [ 938.778149][T11703] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 938.794432][T11707] 9pnet_fd: Insufficient options for proto=fd [ 938.937093][T11710] loop0: detected capacity change from 0 to 1024 [ 939.242484][T11710] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 939.899705][T11726] loop4: detected capacity change from 0 to 16 [ 939.906429][T11728] loop1: detected capacity change from 0 to 16 [ 939.908543][T11726] erofs: (device loop4): mounted with root inode @ nid 36. [ 939.920151][T11728] erofs: (device loop1): mounted with root inode @ nid 36. [ 940.010915][T11730] loop3: detected capacity change from 0 to 1024 [ 940.024249][T11732] loop2: detected capacity change from 0 to 256 [ 940.036639][T11732] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 940.049697][T11730] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 940.060041][ T292] EXT4-fs (loop0): unmounting filesystem. [ 941.441637][ T291] EXT4-fs (loop3): unmounting filesystem. [ 941.701145][T11756] loop3: detected capacity change from 0 to 16 [ 941.711718][T11756] erofs: (device loop3): mounted with root inode @ nid 36. [ 941.779652][T11753] loop2: detected capacity change from 0 to 4096 [ 942.765103][T11765] loop4: detected capacity change from 0 to 16 [ 942.773138][T11765] erofs: (device loop4): mounted with root inode @ nid 36. [ 942.879959][T11765] syz.4.2596: attempt to access beyond end of device [ 942.879959][T11765] loop4: rw=0, sector=8, nr_sectors = 16 limit=16 [ 943.179701][T11753] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 943.461703][T11753] EXT4-fs (loop2): unmounting filesystem. [ 943.657948][T11783] loop1: detected capacity change from 0 to 16 [ 943.670782][T11783] erofs: (device loop1): mounted with root inode @ nid 36. [ 944.233737][ T28] audit: type=1400 audit(1741923498.218:969): avc: denied { relabelfrom } for pid=11791 comm="syz.1.2605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 944.234224][T11792] syzkaller0: tun_chr_ioctl cmd 2147767520 [ 944.278940][ T28] audit: type=1400 audit(1741923498.218:970): avc: denied { relabelto } for pid=11791 comm="syz.1.2605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 944.306673][T11790] device syzkaller0 entered promiscuous mode [ 944.317506][ T28] audit: type=1400 audit(1741923498.298:971): avc: denied { write } for pid=11799 comm="syz.3.2608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 944.320978][T11800] IPv4: Oversized IP packet from 127.202.26.0 [ 944.416015][T11802] loop2: detected capacity change from 0 to 512 [ 944.425800][T11802] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 944.567650][T11802] EXT4-fs (loop2): orphan cleanup on readonly fs [ 944.576889][T11802] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.2607: bg 0: block 248: padding at end of block bitmap is not set [ 944.592509][T11802] Quota error (device loop2): write_blk: dquota write failed [ 944.599872][T11802] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 944.609691][T11802] EXT4-fs error (device loop2): ext4_acquire_dquot:6782: comm syz.2.2607: Failed to acquire dquot type 1 [ 944.624402][T11802] EXT4-fs (loop2): 1 truncate cleaned up [ 944.631185][T11802] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 944.905460][ T28] audit: type=1400 audit(1741923498.888:972): avc: denied { getopt } for pid=11811 comm="syz.4.2612" lport=141 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 946.648695][T11802] syz.2.2607 (11802) used greatest stack depth: 20104 bytes left [ 946.699745][T11823] loop1: detected capacity change from 0 to 1024 [ 946.706218][T11823] EXT4-fs: Ignoring removed orlov option [ 946.711768][T11823] EXT4-fs: Ignoring removed nomblk_io_submit option [ 946.723032][ T28] audit: type=1400 audit(1741923500.708:973): avc: denied { map } for pid=11818 comm="syz.0.2613" path="socket:[52249]" dev="sockfs" ino=52249 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 947.725512][ T293] EXT4-fs (loop2): unmounting filesystem. [ 947.790393][T11823] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 947.814062][ T28] audit: type=1400 audit(1741923500.708:974): avc: denied { read } for pid=11818 comm="syz.0.2613" path="socket:[52249]" dev="sockfs" ino=52249 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 947.956279][ T28] audit: type=1400 audit(1741923501.088:975): avc: denied { getopt } for pid=11820 comm="syz.3.2615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 948.485346][ T28] audit: type=1400 audit(1741923501.098:976): avc: denied { create } for pid=11820 comm="syz.3.2615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 948.722995][T11842] loop2: detected capacity change from 0 to 512 [ 948.782503][ T290] EXT4-fs (loop1): unmounting filesystem. [ 948.864886][T11842] fscrypt (loop2, inode 2): Error -61 getting encryption context [ 948.872726][T11842] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -61 [ 948.882178][T11842] EXT4-fs warning (device loop2): ext4_block_to_path:107: block 3279945729 > max in inode 13 [ 948.892332][T11842] EXT4-fs warning (device loop2): ext4_block_to_path:107: block 3279945730 > max in inode 13 [ 948.903239][T11842] EXT4-fs (loop2): 1 truncate cleaned up [ 948.908759][T11842] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 949.275382][T11846] loop1: detected capacity change from 0 to 2048 [ 949.370347][T11846] EXT4-fs: Ignoring removed bh option [ 949.389060][T11846] EXT4-fs: dax option not supported [ 949.449425][ T725] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 949.642466][ T293] EXT4-fs (loop2): unmounting filesystem. [ 949.664461][T11846] loop1: detected capacity change from 0 to 256 [ 949.675360][T11846] exfat: Deprecated parameter 'namecase' [ 949.706391][T11846] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe3f33698, utbl_chksum : 0xe619d30d) [ 951.536410][T11859] loop3: detected capacity change from 0 to 40427 [ 951.772244][T11859] F2FS-fs (loop3): Wrong CP boundary, start(512) end(516) blocks(1024) [ 951.780404][T11859] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 951.822233][T11859] F2FS-fs (loop3): invalid crc value [ 951.945428][T11859] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 952.049292][T11859] F2FS-fs (loop3): Try to recover 1th superblock, ret: -30 [ 952.056427][T11859] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 952.906935][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 952.906953][ T28] audit: type=1400 audit(1741923506.888:986): avc: denied { bind } for pid=11878 comm="syz.2.2627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 952.933539][T11879] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2627'. [ 952.943670][T11879] bridge0: port 2(bridge_slave_1) entered disabled state [ 952.960860][T11879] device bridge_slave_1 left promiscuous mode [ 952.970027][T11879] bridge0: port 2(bridge_slave_1) entered disabled state [ 953.339188][ T28] audit: type=1400 audit(1741923507.238:987): avc: denied { write } for pid=11873 comm="syz.1.2625" name="protocols" dev="proc" ino=4026532304 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 956.003353][T11895] loop0: detected capacity change from 0 to 512 [ 956.013680][T11895] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 956.223230][T11895] EXT4-fs (loop0): 1 orphan inode deleted [ 956.228954][T11895] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 956.239895][T11895] ext4 filesystem being mounted at /525/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 956.542386][T11910] loop3: detected capacity change from 0 to 512 [ 956.557848][T11910] EXT4-fs: Ignoring removed orlov option [ 956.565424][T11910] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.2633: casefold flag without casefold feature [ 956.579220][T11910] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.2633: couldn't read orphan inode 15 (err -117) [ 956.591635][T11910] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 956.609146][ T28] audit: type=1400 audit(1741923510.598:988): avc: denied { create } for pid=11909 comm="syz.3.2633" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 956.759753][ T28] audit: type=1400 audit(1741923510.748:989): avc: denied { mounton } for pid=11909 comm="syz.3.2633" path="/535/file0/bus" dev="loop3" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 956.785542][ T28] audit: type=1400 audit(1741923510.768:990): avc: denied { write } for pid=11909 comm="syz.3.2633" name="bus" dev="loop3" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 956.807406][ T28] audit: type=1400 audit(1741923510.768:991): avc: denied { add_name } for pid=11909 comm="syz.3.2633" name="work" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 956.828211][ T28] audit: type=1400 audit(1741923510.768:992): avc: denied { setattr } for pid=11909 comm="syz.3.2633" name="work" dev="loop3" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 956.849940][ T28] audit: type=1400 audit(1741923510.768:993): avc: denied { remove_name } for pid=11909 comm="syz.3.2633" name="#7f" dev="loop3" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 956.872020][ T28] audit: type=1400 audit(1741923510.768:994): avc: denied { rename } for pid=11909 comm="syz.3.2633" name="#7f" dev="loop3" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 956.873313][ T292] EXT4-fs (loop0): unmounting filesystem. [ 956.893821][ T28] audit: type=1400 audit(1741923510.768:995): avc: denied { unlink } for pid=11909 comm="syz.3.2633" name="#7f" dev="loop3" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 957.228341][ T7893] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 957.309543][T11923] loop2: detected capacity change from 0 to 128 [ 957.349359][T11923] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 957.394118][T11923] syz.2.2638: attempt to access beyond end of device [ 957.394118][T11923] loop2: rw=3, sector=6950, nr_sectors = 2 limit=128 [ 957.419527][ T7893] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 957.438354][ T7893] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 957.455937][T11923] syz.2.2638: attempt to access beyond end of device [ 957.455937][T11923] loop2: rw=2051, sector=6952, nr_sectors = 942 limit=128 [ 957.487052][ T7893] usb 5-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 957.505505][ T291] EXT4-fs (loop3): unmounting filesystem. [ 957.507579][ T7893] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 957.545323][ T7893] usb 5-1: config 0 descriptor?? [ 958.048722][ T7893] hid-led 0003:0FC5:B080.002F: item fetching failed at offset 1/3 [ 958.056760][ T7893] hid-led: probe of 0003:0FC5:B080.002F failed with error -22 [ 958.180026][T11936] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 958.263919][ T7893] usb 5-1: USB disconnect, device number 21 [ 958.516239][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 958.516259][ T28] audit: type=1400 audit(1741923512.498:998): avc: denied { create } for pid=11937 comm="syz.0.2642" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 959.869813][T11947] loop3: detected capacity change from 0 to 512 [ 960.065199][T11947] EXT4-fs (loop3): 1 orphan inode deleted [ 960.070977][T11947] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 960.082159][T11947] ext4 filesystem being mounted at /538/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 960.148482][T11947] EXT4-fs error (device loop3): ext4_lookup:1862: inode #2: comm syz.3.2644: deleted inode referenced: 16 [ 960.816032][T11953] device syzkaller0 entered promiscuous mode [ 960.839258][T11958] Illegal XDP return value 3043297320 on prog (id 807) dev syz_tun, expect packet loss! [ 960.849161][ T39] syzkaller0: tun_net_xmit 48 [ 960.853888][T11962] syzkaller0: tun_chr_ioctl cmd 2147767520 [ 960.915086][T11961] device syzkaller0 entered promiscuous mode [ 960.916840][ T291] EXT4-fs (loop3): unmounting filesystem. [ 960.927699][ T7893] syzkaller0: tun_net_xmit 48 [ 960.934560][T11951] syzkaller0: tun_net_xmit 1280 [ 960.975473][T11961] syzkaller0: tun_net_xmit 1280 [ 960.980419][T11961] syzkaller0: create flow: hash 3896664858 index 1 [ 960.996385][T11960] syzkaller0: delete flow: hash 3896664858 index 1 [ 961.105553][T11969] loop3: detected capacity change from 0 to 512 [ 961.117853][ T28] audit: type=1400 audit(1741923515.048:999): avc: denied { bind } for pid=11966 comm="syz.3.2650" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 961.159764][T11969] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 961.214220][T11971] syz.0.2642[11971] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 961.216106][T11971] syz.0.2642[11971] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 961.358054][T11969] EXT4-fs (loop3): orphan cleanup on readonly fs [ 961.377712][T11969] Quota error (device loop3): do_check_range: Getting block 196613 out of range 1-5 [ 961.387052][T11969] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 961.396392][T11969] EXT4-fs error (device loop3): ext4_acquire_dquot:6782: comm syz.3.2650: Failed to acquire dquot type 1 [ 961.641631][T11975] loop2: detected capacity change from 0 to 256 [ 961.652990][T11975] exfat: Deprecated parameter 'utf8' [ 961.658603][T11975] exfat: Deprecated parameter 'namecase' [ 961.664328][T11975] exfat: Deprecated parameter 'utf8' [ 961.670386][T11975] exfat: Bad value for 'uid' [ 961.807395][ T28] audit: type=1400 audit(1741923515.048:1000): avc: denied { name_bind } for pid=11966 comm="syz.3.2650" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 962.095198][T11969] EXT4-fs (loop3): 1 truncate cleaned up [ 962.181751][ T326] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 962.450876][ T28] audit: type=1400 audit(1741923515.048:1001): avc: denied { node_bind } for pid=11966 comm="syz.3.2650" saddr=100.1.1.0 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 962.615776][T11981] loop2: detected capacity change from 0 to 512 [ 962.749171][T11981] EXT4-fs (loop2): Test dummy encryption mode enabled [ 962.763448][T11983] loop1: detected capacity change from 0 to 128 [ 962.790021][T11981] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 962.882320][T11983] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 962.920786][T11981] EXT4-fs error (device loop2): ext4_orphan_get:1426: comm syz.2.2652: bad orphan inode 131083 [ 962.934706][T11983] ext4 filesystem being mounted at /518/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 962.988932][T11981] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 963.215563][T11969] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 964.400842][ T290] EXT4-fs (loop1): unmounting filesystem. [ 964.438604][ T291] EXT4-fs (loop3): unmounting filesystem. [ 964.444352][ T28] audit: type=1400 audit(1741923518.428:1002): avc: denied { bind } for pid=11994 comm="syz.1.2654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 964.512364][T11997] loop1: detected capacity change from 0 to 1024 [ 964.522024][ T28] audit: type=1400 audit(1741923518.428:1003): avc: denied { setopt } for pid=11994 comm="syz.1.2654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 964.547467][ T293] EXT4-fs (loop2): unmounting filesystem. [ 964.576033][T11997] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 964.683761][T12010] loop4: detected capacity change from 0 to 512 [ 964.738353][T12010] EXT4-fs error (device loop4): ext4_get_branch:178: inode #13: block 2: comm syz.4.2658: invalid block [ 964.750512][T12010] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.2658: invalid indirect mapped block 10 (level 1) [ 965.213397][ T28] audit: type=1400 audit(1741923519.148:1004): avc: denied { append } for pid=11996 comm="syz.1.2656" path="/520/file1/blkio.bfq.avg_queue_size" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 965.284593][T12010] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.2658: invalid indirect mapped block 8 (level 1) [ 965.602090][T12010] EXT4-fs (loop4): 1 truncate cleaned up [ 965.607644][T12010] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 965.721352][ T290] EXT4-fs (loop1): unmounting filesystem. [ 966.188055][ T7893] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 966.379400][ T7893] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 966.398314][ T7893] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 966.411578][ T7893] usb 4-1: config 0 descriptor?? [ 966.527112][ T294] EXT4-fs (loop4): unmounting filesystem. [ 966.534374][ T28] audit: type=1400 audit(1741923520.528:1005): avc: denied { write } for pid=12004 comm="syz.2.2657" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 966.636050][T12001] loop3: detected capacity change from 0 to 512 [ 966.664509][T12005] kvm: emulating exchange as write [ 966.673526][T12001] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.2655: casefold flag without casefold feature [ 967.008328][T12001] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.2655: couldn't read orphan inode 15 (err -117) [ 967.028478][T12001] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 967.116843][ T28] audit: type=1400 audit(1741923521.098:1006): avc: denied { unlink } for pid=292 comm="syz-executor" name="file0" dev="tmpfs" ino=3065 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 968.270607][T12038] loop4: detected capacity change from 0 to 256 [ 968.276969][T12038] exfat: Deprecated parameter 'utf8' [ 968.282143][T12038] exfat: Deprecated parameter 'namecase' [ 968.287561][T12038] exfat: Deprecated parameter 'utf8' [ 968.292740][T12038] exfat: Bad value for 'uid' [ 968.527545][ T323] usb 4-1: USB disconnect, device number 20 [ 968.539977][ T291] EXT4-fs (loop3): unmounting filesystem. [ 968.620276][ T28] audit: type=1400 audit(1741923522.608:1007): avc: denied { unmount } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 968.989224][T12053] loop1: detected capacity change from 0 to 512 [ 971.759555][T12054] loop0: detected capacity change from 0 to 16 [ 971.932636][T12054] erofs: (device loop0): mounted with root inode @ nid 36. [ 971.989364][T12054] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 972.596234][T12053] fscrypt (loop1, inode 2): Error -61 getting encryption context [ 972.603953][T12053] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -61 [ 972.612022][T12053] EXT4-fs warning (device loop1): ext4_block_to_path:107: block 3279945729 > max in inode 13 [ 972.622020][T12053] EXT4-fs warning (device loop1): ext4_block_to_path:107: block 3279945730 > max in inode 13 [ 972.633672][T12053] EXT4-fs (loop1): 1 truncate cleaned up [ 972.639442][T12053] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 973.894100][ T290] EXT4-fs (loop1): unmounting filesystem. [ 974.104999][T12071] loop4: detected capacity change from 0 to 512 [ 974.116700][T12071] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 975.072209][T12071] EXT4-fs (loop4): orphan cleanup on readonly fs [ 975.081802][T12071] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.2671: bg 0: block 248: padding at end of block bitmap is not set [ 975.097253][T12071] Quota error (device loop4): write_blk: dquota write failed [ 975.104669][T12071] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 975.114530][T12071] EXT4-fs error (device loop4): ext4_acquire_dquot:6782: comm syz.4.2671: Failed to acquire dquot type 1 [ 975.130651][T12071] EXT4-fs (loop4): 1 truncate cleaned up [ 975.140752][T12071] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 975.312933][T12078] loop3: detected capacity change from 0 to 128 [ 976.988477][T12078] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 977.009709][ T294] EXT4-fs (loop4): unmounting filesystem. [ 977.097297][T12078] syz.3.2674: attempt to access beyond end of device [ 977.097297][T12078] loop3: rw=3, sector=6950, nr_sectors = 2 limit=128 [ 977.110592][T12078] syz.3.2674: attempt to access beyond end of device [ 977.110592][T12078] loop3: rw=2051, sector=6952, nr_sectors = 942 limit=128 [ 977.187851][T12098] loop2: detected capacity change from 0 to 512 [ 978.388210][T12098] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 978.397454][T12098] ext4 filesystem being mounted at /531/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 978.667714][T12107] loop4: detected capacity change from 0 to 1024 [ 978.707286][T12107] EXT4-fs: Ignoring removed orlov option [ 978.712817][T12107] EXT4-fs: Ignoring removed nomblk_io_submit option [ 979.789128][ T293] EXT4-fs (loop2): unmounting filesystem. [ 979.796253][T12107] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 980.787199][T12138] loop3: detected capacity change from 0 to 128 [ 980.819345][T12138] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 980.827845][T12138] ext4 filesystem being mounted at /546/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 981.168881][ T28] audit: type=1400 audit(2000000001.360:1008): avc: denied { write } for pid=12132 comm="syz.2.2686" path="socket:[53796]" dev="sockfs" ino=53796 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 981.268414][ T39] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 981.306147][T12150] sit: non-ECT from 0.0.0.0 with TOS=0x3 [ 981.313586][T12145] tipc: Started in network mode [ 981.324557][T12145] tipc: Node identity -, cluster identity 4711 [ 981.438049][T12152] loop0: detected capacity change from 0 to 512 [ 981.469389][ T39] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 981.478855][ T39] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 981.496557][ T39] usb 2-1: config 0 descriptor?? [ 981.505355][T12152] EXT4-fs (loop0): 1 orphan inode deleted [ 981.511059][T12152] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 981.520046][ T9559] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 981.529787][ T9559] EXT4-fs error (device loop0): ext4_release_dquot:6805: comm kworker/u4:20: Failed to release dquot type 1 [ 981.588534][T12152] ext4 filesystem being mounted at /537/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 981.677526][ T292] EXT4-fs (loop0): unmounting filesystem. [ 981.739720][T12127] loop1: detected capacity change from 0 to 512 [ 982.309239][T12159] loop2: detected capacity change from 0 to 256 [ 982.330276][T12159] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001034b, chksum : 0x6322ccb6, utbl_chksum : 0xe619d30d) [ 982.404412][T12162] loop0: detected capacity change from 0 to 128 [ 982.436859][T12127] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.2685: casefold flag without casefold feature [ 982.450393][T12127] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.2685: couldn't read orphan inode 15 (err -117) [ 982.463741][T12127] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 982.922525][ T294] EXT4-fs (loop4): unmounting filesystem. [ 982.941273][T12162] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 983.147243][ T291] EXT4-fs (loop3): unmounting filesystem. [ 983.535323][T12172] process 'syz.4.2693' launched './file0' with NULL argv: empty string added [ 983.546287][ T28] audit: type=1400 audit(2000000000.530:1009): avc: denied { create } for pid=12167 comm="syz.4.2693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 983.833718][T12174] loop3: detected capacity change from 0 to 2048 [ 983.980296][T12045] usb 2-1: USB disconnect, device number 18 [ 983.986740][ T290] EXT4-fs (loop1): unmounting filesystem. [ 984.030397][T12180] loop3: detected capacity change from 0 to 2048 [ 984.082936][T12180] EXT4-fs: Ignoring removed bh option [ 984.093741][T12180] EXT4-fs: dax option not supported [ 984.381800][T12180] loop3: detected capacity change from 0 to 256 [ 984.434907][T12180] exfat: Deprecated parameter 'namecase' [ 984.452758][T12180] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe3f33698, utbl_chksum : 0xe619d30d) [ 984.645537][T12187] loop1: detected capacity change from 0 to 40427 [ 984.652388][T12187] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 984.660252][T12187] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 984.669655][T12187] F2FS-fs (loop1): invalid crc value [ 984.676186][T12187] F2FS-fs (loop1): Found nat_bits in checkpoint [ 984.713246][T12187] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 984.720223][T12187] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 984.744386][T12187] syz.1.2700: attempt to access beyond end of device [ 984.744386][T12187] loop1: rw=2049, sector=77824, nr_sectors = 952 limit=40427 [ 984.880972][ T290] syz-executor: attempt to access beyond end of device [ 984.880972][ T290] loop1: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 984.898502][ T9232] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 984.920116][T12196] loop2: detected capacity change from 0 to 2048 [ 984.942799][T12196] EXT4-fs: Ignoring removed bh option [ 984.983128][ T9232] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 984.998166][T12196] EXT4-fs: dax option not supported [ 985.037154][T12196] loop2: detected capacity change from 0 to 256 [ 985.043722][T12196] exfat: Deprecated parameter 'namecase' [ 985.053256][T12196] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe3f33698, utbl_chksum : 0xe619d30d) [ 988.697282][T12211] loop0: detected capacity change from 0 to 40427 [ 988.709412][T12211] F2FS-fs (loop0): Wrong CP boundary, start(512) end(516) blocks(1024) [ 988.717539][T12211] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 988.960986][T12218] loop3: detected capacity change from 0 to 1024 [ 989.043903][T12218] EXT4-fs: Ignoring removed orlov option [ 989.067704][T12218] EXT4-fs: Ignoring removed nomblk_io_submit option [ 989.143995][T12218] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 989.288603][T12211] F2FS-fs (loop0): invalid crc value [ 989.316229][T12211] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 989.348853][T12211] F2FS-fs (loop0): Try to recover 1th superblock, ret: -30 [ 989.355912][T12211] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 989.429665][T12228] loop2: detected capacity change from 0 to 128 [ 989.449709][T12228] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 989.808767][ T28] audit: type=1326 audit(2000000006.720:1010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12226 comm="syz.1.2703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c3018d169 code=0x7ffc0000 [ 989.809097][ T28] audit: type=1326 audit(2000000006.720:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12226 comm="syz.1.2703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c3018d169 code=0x7ffc0000 [ 989.809403][ T28] audit: type=1326 audit(2000000006.730:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12226 comm="syz.1.2703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f4c3018d169 code=0x7ffc0000 [ 989.809647][ T28] audit: type=1326 audit(2000000006.730:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12226 comm="syz.1.2703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c3018d169 code=0x7ffc0000 [ 989.810158][ T28] audit: type=1326 audit(2000000006.730:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12226 comm="syz.1.2703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c3018d169 code=0x7ffc0000 [ 989.810371][ T28] audit: type=1326 audit(2000000006.730:1015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12226 comm="syz.1.2703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7f4c3018d169 code=0x7ffc0000 [ 989.810527][ T28] audit: type=1326 audit(2000000006.730:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12226 comm="syz.1.2703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c3018d169 code=0x7ffc0000 [ 989.810674][ T28] audit: type=1326 audit(2000000006.730:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12226 comm="syz.1.2703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c3018d169 code=0x7ffc0000 [ 990.055420][T12238] tipc: Started in network mode [ 990.060668][T12238] tipc: Node identity -, cluster identity 4711 [ 990.115015][T12240] loop2: detected capacity change from 0 to 512 [ 990.124849][T12240] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 990.198570][T12240] EXT4-fs (loop2): orphan cleanup on readonly fs [ 990.207999][T12240] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.2709: bg 0: block 248: padding at end of block bitmap is not set [ 990.227509][T12240] Quota error (device loop2): write_blk: dquota write failed [ 990.235049][T12240] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 990.244927][T12240] EXT4-fs error (device loop2): ext4_acquire_dquot:6782: comm syz.2.2709: Failed to acquire dquot type 1 [ 990.384574][T12240] EXT4-fs (loop2): 1 truncate cleaned up [ 990.390819][T12240] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 990.899086][T12246] loop4: detected capacity change from 0 to 512 [ 991.056503][T12246] fscrypt (loop4, inode 2): Error -61 getting encryption context [ 991.064818][T12246] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -61 [ 991.073685][T12246] EXT4-fs warning (device loop4): ext4_block_to_path:107: block 3279945729 > max in inode 13 [ 991.084385][T12246] EXT4-fs warning (device loop4): ext4_block_to_path:107: block 3279945730 > max in inode 13 [ 991.094630][T12246] EXT4-fs (loop4): 1 truncate cleaned up [ 991.100101][T12246] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 991.291483][ T293] EXT4-fs (loop2): unmounting filesystem. [ 991.335573][T12249] loop0: detected capacity change from 0 to 40427 [ 991.349038][T12249] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 992.291474][T12259] loop2: detected capacity change from 0 to 512 [ 992.302900][T12249] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 992.321247][T12262] loop1: detected capacity change from 0 to 128 [ 992.323864][T12249] F2FS-fs (loop0): invalid crc value [ 992.341031][ T294] EXT4-fs (loop4): unmounting filesystem. [ 992.350718][T12259] EXT4-fs (loop2): 1 orphan inode deleted [ 992.356305][T12259] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 992.357942][T12262] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 992.373520][ T315] EXT4-fs error (device loop2): ext4_release_dquot:6805: comm kworker/u4:3: Failed to release dquot type 1 [ 992.385596][T12259] ext4 filesystem being mounted at /539/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 992.397067][T12258] EXT4-fs error (device loop2): ext4_lookup:1862: inode #2: comm syz.2.2714: deleted inode referenced: 16 [ 992.409617][T12262] ext4 filesystem being mounted at /532/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 992.410369][T12249] F2FS-fs (loop0): Found nat_bits in checkpoint [ 992.426830][ T291] EXT4-fs (loop3): unmounting filesystem. [ 992.484533][T12249] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 992.493232][ T290] EXT4-fs (loop1): unmounting filesystem. [ 992.499700][T12249] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 992.569231][ T293] EXT4-fs (loop2): unmounting filesystem. [ 993.311861][T12279] loop1: detected capacity change from 0 to 4096 [ 993.324926][T12279] EXT4-fs (loop1): Test dummy encryption mode enabled [ 993.721585][T12279] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 993.923451][T12295] loop2: detected capacity change from 0 to 256 [ 993.930559][T12295] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 994.776349][T12295] FAT-fs (loop2): Directory bread(block 64) failed [ 994.782826][T12295] FAT-fs (loop2): Directory bread(block 65) failed [ 994.789405][T12295] FAT-fs (loop2): Directory bread(block 66) failed [ 994.795786][T12295] FAT-fs (loop2): Directory bread(block 67) failed [ 994.802378][T12295] FAT-fs (loop2): Directory bread(block 68) failed [ 994.808784][T12295] FAT-fs (loop2): Directory bread(block 69) failed [ 994.815278][T12295] FAT-fs (loop2): Directory bread(block 70) failed [ 994.821685][T12295] FAT-fs (loop2): Directory bread(block 71) failed [ 994.828320][T12295] FAT-fs (loop2): Directory bread(block 72) failed [ 994.834707][T12295] FAT-fs (loop2): Directory bread(block 73) failed [ 995.031083][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 995.031133][ T28] audit: type=1400 audit(2000000012.010:1021): avc: denied { write } for pid=12284 comm="syz.2.2720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 995.308350][ T28] audit: type=1400 audit(2000000012.010:1022): avc: denied { nlmsg_write } for pid=12284 comm="syz.2.2720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 995.475610][ T290] EXT4-fs (loop1): unmounting filesystem. [ 995.675052][T12313] loop3: detected capacity change from 0 to 512 [ 995.887424][T12313] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 995.896596][T12313] ext4 filesystem being mounted at /553/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 996.125644][T12321] loop2: detected capacity change from 0 to 1024 [ 996.217794][T12321] EXT4-fs: Ignoring removed orlov option [ 996.257672][T12321] EXT4-fs: Ignoring removed nomblk_io_submit option [ 996.898934][ T291] EXT4-fs (loop3): unmounting filesystem. [ 996.909596][T12321] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 996.932231][T12332] loop3: detected capacity change from 0 to 512 [ 997.328335][T12327] loop0: detected capacity change from 0 to 16 [ 997.440950][T12327] erofs: (device loop0): mounted with root inode @ nid 36. [ 997.461689][ T28] audit: type=1400 audit(2000000014.350:1023): avc: denied { write } for pid=12323 comm="syz.1.2731" name="usbmon1" dev="devtmpfs" ino=156 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 997.492135][T12335] loop4: detected capacity change from 0 to 512 [ 997.498374][ T28] audit: type=1400 audit(2000000014.350:1024): avc: denied { open } for pid=12323 comm="syz.1.2731" path="/dev/usbmon1" dev="devtmpfs" ino=156 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 997.526462][T12335] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 997.536384][T12332] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 997.558621][T12332] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 997.567979][T12332] EXT4-fs error (device loop3): ext4_acquire_dquot:6782: comm syz.3.2733: Failed to acquire dquot type 0 [ 997.587845][T12332] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 997.592768][T12335] EXT4-fs (loop4): orphan cleanup on readonly fs [ 997.598148][T12332] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 997.613796][T12332] EXT4-fs error (device loop3): ext4_acquire_dquot:6782: comm syz.3.2733: Failed to acquire dquot type 0 [ 997.626955][T12335] Quota error (device loop4): do_check_range: Getting block 196613 out of range 1-5 [ 997.633953][T12332] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 997.648312][T12332] EXT4-fs error (device loop3): ext4_acquire_dquot:6782: comm syz.3.2733: Failed to acquire dquot type 0 [ 997.665146][T12332] EXT4-fs (loop3): 1 orphan inode deleted [ 997.675290][T12335] EXT4-fs error (device loop4): ext4_acquire_dquot:6782: comm syz.4.2732: Failed to acquire dquot type 1 [ 997.717663][T12333] syz.1.2731 (12333) used greatest stack depth: 20064 bytes left [ 997.725643][T12332] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 997.734499][T12332] ext4 filesystem being mounted at /554/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 997.821466][T12335] EXT4-fs (loop4): 1 truncate cleaned up [ 997.848871][T12332] EXT4-fs error (device loop3): ext4_acquire_dquot:6782: comm syz.3.2733: Failed to acquire dquot type 0 [ 997.853946][T12335] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 998.192377][T12351] overlayfs: failed to clone upperpath [ 998.821706][T12350] loop1: detected capacity change from 0 to 512 [ 999.028317][T12350] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.2734: invalid indirect mapped block 256 (level 2) [ 999.043703][T12350] EXT4-fs (loop1): 2 truncates cleaned up [ 999.049422][T12350] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 999.726861][T12350] EXT4-fs (loop1): unmounting filesystem. [ 1000.781608][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 1000.848041][ T28] audit: type=1400 audit(2000000017.530:1044): avc: denied { map } for pid=12359 comm="syz.1.2738" path="socket:[54079]" dev="sockfs" ino=54079 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1000.894087][ T28] audit: type=1400 audit(2000000017.530:1045): avc: denied { read accept } for pid=12359 comm="syz.1.2738" path="socket:[54079]" dev="sockfs" ino=54079 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1001.040454][ T293] EXT4-fs (loop2): unmounting filesystem. [ 1001.291268][T12376] loop2: detected capacity change from 0 to 512 [ 1001.306952][T12376] ext4: Unknown parameter 'fsname' [ 1001.500396][ T291] EXT4-fs (loop3): unmounting filesystem. [ 1001.635936][T12376] syz.2.2743[12376] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1001.636025][T12376] syz.2.2743[12376] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1001.650040][T12376] xt_TCPMSS: Only works on TCP SYN packets [ 1001.757705][T12382] loop3: detected capacity change from 0 to 16 [ 1001.766354][T12382] erofs: (device loop3): mounted with root inode @ nid 36. [ 1001.799953][T12382] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1002.076186][ T294] EXT4-fs (loop4): unmounting filesystem. [ 1005.429910][T12398] loop1: detected capacity change from 0 to 1024 [ 1005.455251][T12398] EXT4-fs: Ignoring removed orlov option [ 1005.462412][T12398] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1005.528839][T12403] loop2: detected capacity change from 0 to 256 [ 1006.980368][T12403] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001034b, chksum : 0x6322ccb6, utbl_chksum : 0xe619d30d) [ 1009.929754][T12410] loop3: detected capacity change from 0 to 512 [ 1011.798606][T12410] EXT4-fs warning (device loop3): ext4_multi_mount_protect:404: Unable to create kmmpd thread for loop3. [ 1011.818392][T12398] EXT4-fs: failed to create workqueue [ 1011.858303][T12398] EXT4-fs (loop1): mount failed [ 1011.924827][T12420] tipc: Started in network mode [ 1011.929640][T12420] tipc: Node identity -, cluster identity 4711 [ 1011.949540][T12424] xt_hashlimit: size too large, truncated to 1048576 [ 1013.070513][ T28] audit: type=1400 audit(2000000484.055:1046): avc: denied { create } for pid=12437 comm="syz.2.2760" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1013.108321][ T28] audit: type=1400 audit(2000000484.055:1047): avc: denied { connect } for pid=12437 comm="syz.2.2760" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1013.235481][T12447] loop4: detected capacity change from 0 to 256 [ 1013.242680][T12447] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1019.362946][T12451] bridge0: port 3(syz_tun) entered blocking state [ 1019.373412][T12451] bridge0: port 3(syz_tun) entered disabled state [ 1019.507160][T12451] device syz_tun entered promiscuous mode [ 1019.549363][T12451] bridge0: port 3(syz_tun) entered blocking state [ 1019.555637][T12451] bridge0: port 3(syz_tun) entered forwarding state [ 1021.641780][T12447] FAT-fs (loop4): Directory bread(block 64) failed [ 1021.648175][T12447] FAT-fs (loop4): Directory bread(block 65) failed [ 1021.648932][ T28] audit: type=1400 audit(2000000492.635:1048): avc: denied { name_bind } for pid=12454 comm="syz.1.2762" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 1021.654583][T12447] FAT-fs (loop4): Directory bread(block 66) failed [ 1021.682686][T12447] FAT-fs (loop4): Directory bread(block 67) failed [ 1021.689104][T12447] FAT-fs (loop4): Directory bread(block 68) failed [ 1021.695364][T12447] FAT-fs (loop4): Directory bread(block 69) failed [ 1021.701755][T12447] FAT-fs (loop4): Directory bread(block 70) failed [ 1021.708063][T12447] FAT-fs (loop4): Directory bread(block 71) failed [ 1021.714425][T12447] FAT-fs (loop4): Directory bread(block 72) failed [ 1021.720728][T12447] FAT-fs (loop4): Directory bread(block 73) failed [ 1021.741859][ T28] audit: type=1326 audit(2000000492.695:1049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12458 comm="syz.2.2764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe25af8d169 code=0x7ffc0000 [ 1021.837691][ T28] audit: type=1326 audit(2000000492.695:1050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12458 comm="syz.2.2764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe25af8d169 code=0x7ffc0000 [ 1021.861585][ T28] audit: type=1326 audit(2000000492.695:1051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12458 comm="syz.2.2764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe25af8d169 code=0x7ffc0000 [ 1021.885366][ T28] audit: type=1326 audit(2000000492.695:1052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12458 comm="syz.2.2764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe25af8d169 code=0x7ffc0000 [ 1021.908895][ T28] audit: type=1326 audit(2000000492.695:1053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12458 comm="syz.2.2764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe25af8d169 code=0x7ffc0000 [ 1022.101422][T12470] loop1: detected capacity change from 0 to 512 [ 1022.169584][T12470] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1023.298329][ T28] audit: type=1326 audit(2000000492.695:1054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12458 comm="syz.2.2764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe25af8d169 code=0x7ffc0000 [ 1023.321937][ T28] audit: type=1326 audit(2000000492.695:1055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12458 comm="syz.2.2764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe25af8d169 code=0x7ffc0000 [ 1023.401873][T12470] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1023.411246][T12470] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.2766: bg 0: block 248: padding at end of block bitmap is not set [ 1023.426703][T12470] Quota error (device loop1): write_blk: dquota write failed [ 1023.434146][T12470] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 1023.443990][T12470] EXT4-fs error (device loop1): ext4_acquire_dquot:6782: comm syz.1.2766: Failed to acquire dquot type 1 [ 1023.457959][T12470] EXT4-fs (loop1): 1 truncate cleaned up [ 1023.465594][T12470] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1023.808338][T12470] syz.1.2766 (12470) used greatest stack depth: 19768 bytes left [ 1024.130938][ T290] EXT4-fs (loop1): unmounting filesystem. [ 1024.305110][T12475] netem: change failed [ 1024.758840][T12477] loop2: detected capacity change from 0 to 40427 [ 1024.778542][T12477] F2FS-fs (loop2): Wrong CP boundary, start(512) end(516) blocks(1024) [ 1024.786690][T12477] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1024.798408][T12477] F2FS-fs (loop2): invalid crc value [ 1024.881593][T12477] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 1024.990505][T12477] F2FS-fs (loop2): Try to recover 1th superblock, ret: -30 [ 1024.997614][T12477] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1025.138251][T12482] loop1: detected capacity change from 0 to 2048 [ 1025.297047][T12487] loop4: detected capacity change from 0 to 512 [ 1025.404532][T12487] EXT4-fs error (device loop4): ext4_acquire_dquot:6782: comm syz.4.2773: Failed to acquire dquot type 0 [ 1025.418991][T12487] EXT4-fs error (device loop4): ext4_acquire_dquot:6782: comm syz.4.2773: Failed to acquire dquot type 0 [ 1025.421643][T12494] loop3: detected capacity change from 0 to 512 [ 1025.447170][T12487] EXT4-fs error (device loop4): ext4_acquire_dquot:6782: comm syz.4.2773: Failed to acquire dquot type 0 [ 1025.467300][T12487] EXT4-fs (loop4): 1 orphan inode deleted [ 1025.473337][T12487] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1025.482707][T12487] ext4 filesystem being mounted at /558/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1025.519076][T12482] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1025.692998][T12494] EXT4-fs error (device loop3): ext4_acquire_dquot:6782: comm syz.3.2774: Failed to acquire dquot type 0 [ 1025.783157][T12494] EXT4-fs error (device loop3): ext4_acquire_dquot:6782: comm syz.3.2774: Failed to acquire dquot type 0 [ 1025.794883][T12494] EXT4-fs error (device loop3): ext4_acquire_dquot:6782: comm syz.3.2774: Failed to acquire dquot type 0 [ 1025.805707][T12487] EXT4-fs error (device loop4): ext4_acquire_dquot:6782: comm syz.4.2773: Failed to acquire dquot type 0 [ 1025.819399][T12494] EXT4-fs (loop3): 1 orphan inode deleted [ 1025.825082][T12494] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1025.838077][T12494] ext4 filesystem being mounted at /558/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1027.319102][ T290] EXT4-fs (loop1): unmounting filesystem. [ 1027.325070][T12494] __quota_error: 23 callbacks suppressed [ 1027.325092][T12494] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 1027.342379][T12494] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 1027.351931][T12494] EXT4-fs error (device loop3): ext4_acquire_dquot:6782: comm syz.3.2774: Failed to acquire dquot type 0 [ 1027.484241][T12510] loop1: detected capacity change from 0 to 256 [ 1027.542534][T12510] exfat: Deprecated parameter 'utf8' [ 1027.564275][T12510] exfat: Deprecated parameter 'utf8' [ 1027.587417][T12510] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x23a77120, utbl_chksum : 0xe619d30d) [ 1027.742382][ T294] EXT4-fs (loop4): unmounting filesystem. [ 1027.792002][ T28] audit: type=1400 audit(2000000951.771:1065): avc: denied { setopt } for pid=12523 comm="syz.2.2781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1027.919643][ T28] audit: type=1400 audit(2000000951.851:1066): avc: denied { setattr } for pid=12509 comm="syz.1.2777" name="file0" dev="loop1" ino=1048697 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1027.942498][ T28] audit: type=1400 audit(2000000951.851:1067): avc: denied { write } for pid=12509 comm="syz.1.2777" name="file0" dev="loop1" ino=1048698 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1027.966160][ T291] EXT4-fs (loop3): unmounting filesystem. [ 1028.525616][T12530] overlayfs: failed to resolve './file2': -2 [ 1030.985525][T12547] loop4: detected capacity change from 0 to 512 [ 1030.993244][ T28] audit: type=1400 audit(2000000954.951:1068): avc: denied { read } for pid=12540 comm="syz.4.2786" name="binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1031.019587][T12547] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1031.161287][T12547] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1031.170378][T12547] Quota error (device loop4): do_check_range: Getting block 196613 out of range 1-5 [ 1031.179885][T12547] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 1031.189163][T12547] EXT4-fs error (device loop4): ext4_acquire_dquot:6782: comm syz.4.2786: Failed to acquire dquot type 1 [ 1031.202758][T12547] EXT4-fs (loop4): 1 truncate cleaned up [ 1031.208768][T12547] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1031.805172][ T28] audit: type=1400 audit(2000000954.951:1069): avc: denied { open } for pid=12540 comm="syz.4.2786" path="/dev/binderfs/binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1031.900257][T12561] loop3: detected capacity change from 0 to 128 [ 1031.985831][ T28] audit: type=1400 audit(2000000955.961:1070): avc: denied { execute } for pid=12542 comm="syz.0.2787" dev="tmpfs" ino=672 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1032.068316][T12045] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 1032.083443][ T294] EXT4-fs (loop4): unmounting filesystem. [ 1032.268052][T12045] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1032.288424][T12045] usb 2-1: config 0 has no interfaces? [ 1032.331566][T12045] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1032.347178][T12045] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1032.359779][T12045] usb 2-1: Product: syz [ 1032.363779][T12045] usb 2-1: Manufacturer: syz [ 1032.373514][T12045] usb 2-1: SerialNumber: syz [ 1032.398422][T12045] usb 2-1: config 0 descriptor?? [ 1032.513177][T12564] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2790'. [ 1032.528346][T12564] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2790'. [ 1032.537123][T12564] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2790'. [ 1032.568250][T12564] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2790'. [ 1032.611741][T12045] usb 2-1: USB disconnect, device number 19 [ 1032.635642][T12572] loop2: detected capacity change from 0 to 128 [ 1032.654638][T12572] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 1032.927273][T12583] loop2: detected capacity change from 0 to 128 [ 1033.315244][T12589] loop1: detected capacity change from 0 to 128 [ 1034.217743][T12595] loop2: detected capacity change from 0 to 2048 [ 1034.242405][T12595] EXT4-fs: Ignoring removed orlov option [ 1034.347738][T12595] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1034.458263][T12605] overlayfs: failed to resolve './file2': -2 [ 1034.745932][T12609] loop3: detected capacity change from 0 to 128 [ 1034.747414][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 1034.747433][ T28] audit: type=1400 audit(2000000958.711:1072): avc: denied { mount } for pid=12594 comm="syz.2.2800" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1034.752305][ T39] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1034.760175][T12609] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 1034.857417][ T293] EXT4-fs (loop2): unmounting filesystem. [ 1036.877575][T12622] loop3: detected capacity change from 0 to 512 [ 1036.894884][T12622] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1037.007566][T12622] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1037.015847][T12622] Quota error (device loop3): do_check_range: Getting block 196613 out of range 1-5 [ 1037.025255][T12622] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 1037.034521][T12622] EXT4-fs error (device loop3): ext4_acquire_dquot:6782: comm syz.3.2805: Failed to acquire dquot type 1 [ 1037.049265][T12622] EXT4-fs (loop3): 1 truncate cleaned up [ 1037.055208][T12622] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1037.418022][T12629] loop1: detected capacity change from 0 to 1024 [ 1037.459744][T12629] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1038.736176][ T290] EXT4-fs (loop1): unmounting filesystem. [ 1038.743659][ T28] audit: type=1400 audit(2000000962.721:1073): avc: denied { connect } for pid=12639 comm="syz.0.2812" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1038.803447][ T291] EXT4-fs (loop3): unmounting filesystem. [ 1038.821903][T12645] loop2: detected capacity change from 0 to 1024 [ 1038.878120][T12645] EXT4-fs: Ignoring removed nobh option [ 1038.883643][T12645] EXT4-fs: Ignoring removed bh option [ 1038.889586][T12645] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1038.908304][ T39] usb 5-1: device not accepting address 22, error -71 [ 1038.945053][T12652] loop3: detected capacity change from 0 to 128 [ 1040.528135][T12652] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 1040.565388][T12645] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1040.583906][ T28] audit: type=1400 audit(2000000964.561:1074): avc: denied { mounton } for pid=12644 comm="syz.2.2814" path="/562/file1/bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 1040.638404][T12645] loop2: detected capacity change from 1024 to 64 [ 1040.661038][T12645] syz.2.2814: attempt to access beyond end of device [ 1040.661038][T12645] loop2: rw=2049, sector=352, nr_sectors = 4 limit=64 [ 1040.694546][T12645] EXT4-fs warning (device loop2): ext4_end_bio:347: I/O error 10 writing to inode 15 starting block 176) [ 1040.716125][T12645] syz.2.2814: attempt to access beyond end of device [ 1040.716125][T12645] loop2: rw=2049, sector=354, nr_sectors = 6 limit=64 [ 1040.756098][T12645] EXT4-fs warning (device loop2): ext4_end_bio:347: I/O error 10 writing to inode 15 starting block 177) [ 1040.778305][T12645] Buffer I/O error on device loop2, logical block 177 [ 1040.784915][T12645] Buffer I/O error on device loop2, logical block 178 [ 1040.791498][T12645] Buffer I/O error on device loop2, logical block 179 [ 1040.812961][T12645] Buffer I/O error on device loop2, logical block 176 [ 1040.877702][T12645] Buffer I/O error on device loop2, logical block 177 [ 1040.973200][T12645] syz.2.2814: attempt to access beyond end of device [ 1040.973200][T12645] loop2: rw=2049, sector=360, nr_sectors = 24 limit=64 [ 1041.101583][T12645] EXT4-fs warning (device loop2): ext4_end_bio:347: I/O error 10 writing to inode 15 starting block 180) [ 1041.113065][ T28] audit: type=1400 audit(2000000964.981:1075): avc: denied { ioctl } for pid=12672 comm="syz.1.2821" path="socket:[54474]" dev="sockfs" ino=54474 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1041.146799][T12645] Buffer I/O error on device loop2, logical block 180 [ 1041.153412][T12645] Buffer I/O error on device loop2, logical block 181 [ 1041.160013][T12645] Buffer I/O error on device loop2, logical block 182 [ 1041.166601][T12645] Buffer I/O error on device loop2, logical block 183 [ 1041.179432][T12645] Buffer I/O error on device loop2, logical block 184 [ 1041.192656][ T293] EXT4-fs warning (device loop2): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 1041.192926][T12677] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1041.207710][ T293] EXT4-fs warning (device loop2): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 1041.217286][ T28] audit: type=1400 audit(2000000965.171:1076): avc: denied { rmdir } for pid=293 comm="syz-executor" name="lost+found" dev="loop2" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1041.231314][ T293] EXT4-fs warning (device loop2): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 1041.268773][ T293] EXT4-fs warning (device loop2): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 1041.282308][ T293] EXT4-fs warning (device loop2): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 1041.295822][ T293] EXT4-fs warning (device loop2): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 1041.309533][ T293] EXT4-fs warning (device loop2): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 1041.764568][ T316] usb 4-1: new low-speed USB device number 21 using dummy_hcd [ 1042.067568][T12698] loop3: detected capacity change from 0 to 256 [ 1042.079321][T12698] exfat: Deprecated parameter 'utf8' [ 1042.087160][T12698] exfat: Deprecated parameter 'utf8' [ 1042.095370][T12698] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x23a77120, utbl_chksum : 0xe619d30d) [ 1042.159550][ T1944] kworker/u4:11: attempt to access beyond end of device [ 1042.159550][ T1944] loop2: rw=1, sector=226, nr_sectors = 2 limit=64 [ 1042.175192][ T293] EXT4-fs (loop2): unmounting filesystem. [ 1042.242674][T12647] kmmpd-loop2: attempt to access beyond end of device [ 1042.242674][T12647] loop2: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 1042.269187][T12647] Buffer I/O error on dev loop2, logical block 64, lost sync page write [ 1042.336811][T12702] loop1: detected capacity change from 0 to 512 [ 1042.537316][T12702] EXT4-fs (loop1): 1 orphan inode deleted [ 1042.542975][T12702] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1042.553799][T12702] ext4 filesystem being mounted at /556/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1042.578564][T12702] EXT4-fs error (device loop1): ext4_lookup:1862: inode #2: comm syz.1.2828: deleted inode referenced: 16 [ 1042.699266][ T1944] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1042.721744][ T1944] EXT4-fs error (device loop1): ext4_release_dquot:6805: comm kworker/u4:11: Failed to release dquot type 1 [ 1043.792278][ T290] EXT4-fs (loop1): unmounting filesystem. [ 1043.917804][T12718] loop3: detected capacity change from 0 to 512 [ 1043.928059][T12720] loop4: detected capacity change from 0 to 2048 [ 1043.963773][T12718] EXT4-fs (loop3): 1 truncate cleaned up [ 1043.978708][T12718] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1043.988084][T12720] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1044.108292][ T6361] device bridge_slave_0 left promiscuous mode [ 1044.114274][ T6361] bridge0: port 1(bridge_slave_0) entered disabled state [ 1044.137771][T12729] loop1: detected capacity change from 0 to 512 [ 1044.146310][ T6361] device veth1_macvtap left promiscuous mode [ 1044.164657][T12729] EXT4-fs: Ignoring removed orlov option [ 1044.176741][T12729] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.2834: casefold flag without casefold feature [ 1044.189607][T12729] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.2834: couldn't read orphan inode 15 (err -117) [ 1044.203673][T12729] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1044.573751][T12725] bridge0: port 1(bridge_slave_0) entered blocking state [ 1044.609279][T12725] bridge0: port 1(bridge_slave_0) entered disabled state [ 1044.617102][T12725] device bridge_slave_0 entered promiscuous mode [ 1044.624477][T12725] bridge0: port 2(bridge_slave_1) entered blocking state [ 1044.631975][T12725] bridge0: port 2(bridge_slave_1) entered disabled state [ 1044.639411][T12725] device bridge_slave_1 entered promiscuous mode [ 1044.676110][T12744] futex_wake_op: syz.0.2842 tries to shift op by -1; fix this program [ 1044.726774][T12725] bridge0: port 2(bridge_slave_1) entered blocking state [ 1044.733805][T12725] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1044.740891][T12725] bridge0: port 1(bridge_slave_0) entered blocking state [ 1044.747736][T12725] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1044.778960][ T291] EXT4-fs (loop3): unmounting filesystem. [ 1044.811121][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1044.824417][ T356] bridge0: port 1(bridge_slave_0) entered disabled state [ 1044.848603][ T356] bridge0: port 2(bridge_slave_1) entered disabled state [ 1044.922577][T12408] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1044.933836][T12408] bridge0: port 1(bridge_slave_0) entered blocking state [ 1044.940749][T12408] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1044.950334][ T294] EXT4-fs (loop4): unmounting filesystem. [ 1045.055342][T12757] loop3: detected capacity change from 0 to 512 [ 1045.152634][ T290] EXT4-fs (loop1): unmounting filesystem. [ 1045.225511][T12757] EXT4-fs (loop3): 1 orphan inode deleted [ 1045.231206][T12757] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1045.242500][T12757] ext4 filesystem being mounted at /569/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1045.264888][T12757] EXT4-fs error (device loop3): ext4_lookup:1862: inode #2: comm syz.3.2847: deleted inode referenced: 16 [ 1045.678374][ T316] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 1045.959363][ T316] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1045.978305][ T316] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1045.996616][ T316] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1046.015729][ T316] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1046.030493][ T316] usb 5-1: Product: syz [ 1046.034505][ T316] usb 5-1: Manufacturer: syz [ 1046.046702][ T316] usb 5-1: SerialNumber: syz [ 1046.067224][ T10] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1046.077401][ T1806] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1046.085663][ T10] EXT4-fs error (device loop3): ext4_release_dquot:6805: comm kworker/u4:1: Failed to release dquot type 1 [ 1046.097797][ T1806] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1046.099250][ T291] EXT4-fs (loop3): unmounting filesystem. [ 1046.106193][ T1806] bridge0: port 2(bridge_slave_1) entered blocking state [ 1046.118012][ T1806] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1046.125916][ T1806] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1046.133980][ T1806] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1046.141927][ T1806] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1046.149876][ T1806] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1046.192702][ T1806] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1046.201169][ T1806] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1046.589083][T12788] loop1: detected capacity change from 0 to 1024 [ 1047.020130][ T316] usb 5-1: cannot find UAC_HEADER [ 1050.293460][T12788] EXT4-fs: failed to create workqueue [ 1050.298716][T12788] EXT4-fs (loop1): mount failed [ 1050.309619][ T316] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 1050.319204][ T316] usb 5-1: USB disconnect, device number 24 [ 1050.375937][T12725] device veth0_vlan entered promiscuous mode [ 1050.430165][T12725] device veth1_macvtap entered promiscuous mode [ 1050.462063][ T28] audit: type=1400 audit(2000000974.441:1077): avc: denied { mounton } for pid=12725 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=528 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 1050.529178][ T326] udevd[326]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 1050.697817][ T28] audit: type=1400 audit(2000000974.671:1078): avc: denied { write } for pid=12800 comm="syz.0.2860" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 1050.716863][ T1806] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1050.725329][T12683] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1050.733821][ T1806] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1050.742004][ T1806] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1050.750584][ T1806] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1050.759215][ T1806] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1050.766771][ T1806] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1050.775109][ T1806] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1050.783591][ T1806] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1050.792091][ T1806] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1050.806342][T12796] sch_fq: defrate 0 ignored. [ 1050.869945][T12806] device syzkaller0 entered promiscuous mode [ 1050.882436][T12806] syzkaller0: create flow: hash 3896664858 index 1 [ 1050.990117][T12683] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1051.067146][T12683] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1051.155280][T12683] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1051.170300][T12810] loop1: detected capacity change from 0 to 1024 [ 1051.195459][T12810] EXT4-fs: quotafile must be on filesystem root [ 1051.226589][ T1806] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1051.233918][ T1806] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1051.241227][T12683] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1051.250319][T12683] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1051.252200][ T326] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1051.259386][T12683] usb 4-1: config 0 descriptor?? [ 1051.273929][T12805] syzkaller0: delete flow: hash 3896664858 index 1 [ 1051.334428][ T28] audit: type=1400 audit(2000000975.311:1079): avc: denied { accept } for pid=12803 comm="syz.4.2862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 1051.357447][T12815] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2862'. [ 1051.721794][T12683] plantronics 0003:047F:FFFF.0030: unknown main item tag 0x0 [ 1051.755746][T12683] plantronics 0003:047F:FFFF.0030: unknown main item tag 0x0 [ 1051.815107][T12683] plantronics 0003:047F:FFFF.0030: unknown main item tag 0x0 [ 1051.901358][T12683] plantronics 0003:047F:FFFF.0030: unknown main item tag 0x0 [ 1052.011366][T12683] plantronics 0003:047F:FFFF.0030: unknown main item tag 0x0 [ 1052.086893][T12683] plantronics 0003:047F:FFFF.0030: unknown main item tag 0x0 [ 1052.159649][T12683] plantronics 0003:047F:FFFF.0030: unknown main item tag 0x0 [ 1052.232719][T12683] plantronics 0003:047F:FFFF.0030: unknown main item tag 0x0 [ 1052.439666][T12683] plantronics 0003:047F:FFFF.0030: unknown main item tag 0x0 [ 1052.479675][T12683] plantronics 0003:047F:FFFF.0030: unknown main item tag 0x0 [ 1052.517392][T12683] plantronics 0003:047F:FFFF.0030: unknown main item tag 0x0 [ 1052.563244][T12683] plantronics 0003:047F:FFFF.0030: unknown main item tag 0x0 [ 1053.211712][ T28] audit: type=1400 audit(2000000977.191:1080): avc: denied { ioctl } for pid=12828 comm="syz.3.2868" path="socket:[54986]" dev="sockfs" ino=54986 ioctlcmd=0x48d4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1053.222516][T12683] plantronics 0003:047F:FFFF.0030: unknown main item tag 0x0 [ 1053.244109][T12683] plantronics 0003:047F:FFFF.0030: unknown main item tag 0x0 [ 1053.253734][T12683] plantronics 0003:047F:FFFF.0030: unknown main item tag 0x0 [ 1053.261455][T12683] plantronics 0003:047F:FFFF.0030: No inputs registered, leaving [ 1053.272902][T12683] plantronics 0003:047F:FFFF.0030: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1053.322902][T12683] usb 4-1: USB disconnect, device number 22 [ 1053.638580][ T28] audit: type=1400 audit(2000000977.231:1081): avc: denied { create } for pid=12832 comm="syz.5.2869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1053.791748][T12844] loop3: detected capacity change from 0 to 2048 [ 1053.823050][T12844] EXT4-fs (loop3): unsupported descriptor size 0 [ 1054.404657][ T28] audit: type=1400 audit(2000000978.381:1082): avc: denied { accept } for pid=12843 comm="syz.3.2873" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 1054.471479][ T28] audit: type=1400 audit(2000000978.401:1083): avc: denied { bind } for pid=12849 comm="syz.0.2875" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1054.504610][T12854] device syzkaller0 entered promiscuous mode [ 1054.517717][T12683] syzkaller0: tun_net_xmit 48 [ 1056.315960][T12880] loop3: detected capacity change from 0 to 2048 [ 1056.331644][T12880] EXT4-fs: Ignoring removed orlov option [ 1056.919015][T12880] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1056.927611][ T28] audit: type=1400 audit(2000000980.901:1084): avc: denied { mount } for pid=12874 comm="syz.3.2881" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1057.030512][ T28] audit: type=1400 audit(2000000981.011:1085): avc: denied { map } for pid=12874 comm="syz.3.2881" path="/575/file0/blkio.bfq.avg_queue_size" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 1057.091598][T12880] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1057.106604][T12880] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 1057.118984][T12880] EXT4-fs (loop3): This should not happen!! Data will be lost [ 1057.118984][T12880] [ 1057.128707][T12880] EXT4-fs (loop3): Total free blocks count 0 [ 1057.134602][T12880] EXT4-fs (loop3): Free/Dirty block details [ 1057.140330][T12880] EXT4-fs (loop3): free_blocks=2415919104 [ 1057.145837][T12880] EXT4-fs (loop3): dirty_blocks=3696 [ 1057.150961][T12880] EXT4-fs (loop3): Block reservation details [ 1057.157084][T12880] EXT4-fs (loop3): i_reserved_data_blocks=231 [ 1057.497779][ T28] audit: type=1400 audit(2000000981.471:1086): avc: denied { unmount } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1057.547427][ T6361] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 1646 with error 28 [ 1057.566682][T12897] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2885'. [ 1058.127153][T12913] loop4: detected capacity change from 0 to 40427 [ 1058.239619][T12913] F2FS-fs (loop4): Mismatch start address, segment0(0) cp_blkaddr(512) [ 1058.247716][T12913] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 1058.258022][T12913] F2FS-fs (loop4): Ignore s_resuid=0, s_resgid=60929 w/o reserve_root [ 1058.337621][T12922] overlayfs: failed to clone upperpath [ 1058.544485][T12923] loop1: detected capacity change from 0 to 512 [ 1058.669076][T12923] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1059.021539][T12923] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1059.030739][T12923] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.2892: bg 0: block 248: padding at end of block bitmap is not set [ 1059.046244][T12923] Quota error (device loop1): write_blk: dquota write failed [ 1059.053664][T12923] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 1059.063499][T12923] EXT4-fs error (device loop1): ext4_acquire_dquot:6782: comm syz.1.2892: Failed to acquire dquot type 1 [ 1059.077747][T12923] EXT4-fs (loop1): 1 truncate cleaned up [ 1059.085263][T12923] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1059.151049][T12913] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1059.674674][T12913] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 1059.681611][T12913] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1060.318837][T12941] syz.4.2889: attempt to access beyond end of device [ 1060.318837][T12941] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1060.912802][ T290] EXT4-fs (loop1): unmounting filesystem. [ 1060.979766][T12953] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2900'. [ 1061.049256][T12953] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2900'. [ 1061.075108][T12953] device wireguard0 entered promiscuous mode [ 1063.499309][T12990] device syzkaller0 entered promiscuous mode [ 1063.505902][T12683] syzkaller0: tun_net_xmit 48 [ 1063.513490][T12990] syzkaller0: tun_net_xmit 1280 [ 1063.518197][T12990] syzkaller0: create flow: hash 3896664858 index 1 [ 1063.525922][T12989] syzkaller0: delete flow: hash 3896664858 index 1 [ 1063.751487][ T39] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1064.024817][T13000] loop3: detected capacity change from 0 to 512 [ 1064.036534][ T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1064.047738][ T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1064.058964][ T39] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1064.572219][ T39] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1064.581224][ T39] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1064.592750][ T39] usb 5-1: config 0 descriptor?? [ 1064.851230][T13000] EXT4-fs (loop3): 1 orphan inode deleted [ 1064.856897][T13000] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1064.867696][T13000] ext4 filesystem being mounted at /579/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1064.949542][ T356] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1065.086491][T13010] loop5: detected capacity change from 0 to 512 [ 1065.154392][T13010] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1065.586397][T13009] EXT4-fs error (device loop3): ext4_lookup:1862: inode #2: comm syz.3.2912: deleted inode referenced: 16 [ 1065.621105][ T356] EXT4-fs error (device loop3): ext4_release_dquot:6805: comm kworker/u4:5: Failed to release dquot type 1 [ 1065.680978][T13010] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1065.690008][T13010] Quota error (device loop5): do_check_range: Getting block 196613 out of range 1-5 [ 1065.699427][T13010] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 1065.708661][T13010] EXT4-fs error (device loop5): ext4_acquire_dquot:6782: comm syz.5.2914: Failed to acquire dquot type 1 [ 1065.722265][T13010] EXT4-fs (loop5): 1 truncate cleaned up [ 1067.279241][ T39] plantronics 0003:047F:FFFF.0031: unknown main item tag 0x0 [ 1067.286765][ T39] plantronics 0003:047F:FFFF.0031: unknown main item tag 0x0 [ 1067.294205][ T39] plantronics 0003:047F:FFFF.0031: unknown main item tag 0x0 [ 1067.301449][ T39] plantronics 0003:047F:FFFF.0031: unknown main item tag 0x0 [ 1067.309781][ T39] plantronics 0003:047F:FFFF.0031: unknown main item tag 0x0 [ 1067.317028][ T39] plantronics 0003:047F:FFFF.0031: unknown main item tag 0x0 [ 1067.324468][ T39] plantronics 0003:047F:FFFF.0031: unknown main item tag 0x0 [ 1067.368315][T13010] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1067.473173][T13018] loop1: detected capacity change from 0 to 40427 [ 1067.490153][ T291] EXT4-fs (loop3): unmounting filesystem. [ 1067.500878][ T1280] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1068.041287][ T39] plantronics 0003:047F:FFFF.0031: unknown main item tag 0x0 [ 1068.048676][ T39] plantronics 0003:047F:FFFF.0031: unknown main item tag 0x0 [ 1068.055938][ T39] plantronics 0003:047F:FFFF.0031: unknown main item tag 0x0 [ 1068.063210][ T39] plantronics 0003:047F:FFFF.0031: unknown main item tag 0x0 [ 1068.070391][ T39] plantronics 0003:047F:FFFF.0031: unknown main item tag 0x0 [ 1068.077542][ T39] plantronics 0003:047F:FFFF.0031: unknown main item tag 0x0 [ 1068.084811][ T39] plantronics 0003:047F:FFFF.0031: unknown main item tag 0x0 [ 1068.091973][ T39] plantronics 0003:047F:FFFF.0031: unknown main item tag 0x0 [ 1068.109129][T13017] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2915'. [ 1068.118007][T13017] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2915'. [ 1068.118938][T12725] EXT4-fs (loop5): unmounting filesystem. [ 1068.133388][ T39] plantronics 0003:047F:FFFF.0031: No inputs registered, leaving [ 1068.133528][ T1280] EXT4-fs error (device loop3): ext4_release_dquot:6805: comm kworker/u4:8: Failed to release dquot type 1 [ 1068.153734][ T39] plantronics 0003:047F:FFFF.0031: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1068.178430][ T39] usb 5-1: USB disconnect, device number 25 [ 1068.266137][T13034] loop5: detected capacity change from 0 to 2048 [ 1068.272706][T13034] EXT4-fs: Ignoring removed orlov option [ 1070.228760][T13034] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1070.759624][ T1280] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1070.863358][ T292] bridge0: port 3(syz_tun) entered disabled state [ 1070.879051][ T292] device syz_tun left promiscuous mode [ 1070.885102][ T292] bridge0: port 3(syz_tun) entered disabled state [ 1070.892417][ T1280] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1688 with error 28 [ 1070.900974][T13058] loop4: detected capacity change from 0 to 2048 [ 1070.904820][ T1280] EXT4-fs (loop5): This should not happen!! Data will be lost [ 1070.904820][ T1280] [ 1070.916233][T13058] EXT4-fs: Ignoring removed bh option [ 1070.920812][ T1280] EXT4-fs (loop5): Total free blocks count 0 [ 1070.926780][T13058] EXT4-fs: dax option not supported [ 1070.931746][ T1280] EXT4-fs (loop5): Free/Dirty block details [ 1071.172774][ T1280] EXT4-fs (loop5): free_blocks=2415919104 [ 1071.295910][T13058] loop4: detected capacity change from 0 to 256 [ 1071.302278][T13058] exfat: Deprecated parameter 'namecase' [ 1071.315668][T13058] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe3f33698, utbl_chksum : 0xe619d30d) [ 1071.323188][ T1280] EXT4-fs (loop5): dirty_blocks=1696 [ 1071.333244][ T1280] EXT4-fs (loop5): Block reservation details [ 1071.342773][ T1280] EXT4-fs (loop5): i_reserved_data_blocks=106 [ 1071.348495][T13063] loop1: detected capacity change from 0 to 512 [ 1071.356048][T13063] EXT4-fs: Ignoring removed orlov option [ 1071.375551][T13034] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 1071.394320][T13063] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.2928: casefold flag without casefold feature [ 1071.407106][T13063] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.2928: couldn't read orphan inode 15 (err -117) [ 1071.421087][T13063] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1071.445086][T13051] bridge0: port 1(bridge_slave_0) entered blocking state [ 1071.454598][T13051] bridge0: port 1(bridge_slave_0) entered disabled state [ 1071.462220][T13051] device bridge_slave_0 entered promiscuous mode [ 1071.488480][T13051] bridge0: port 2(bridge_slave_1) entered blocking state [ 1071.497614][T13051] bridge0: port 2(bridge_slave_1) entered disabled state [ 1071.752120][T13070] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1071.761114][T13070] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1072.473181][ T290] EXT4-fs (loop1): unmounting filesystem. [ 1072.624777][T13051] device bridge_slave_1 entered promiscuous mode [ 1072.741918][ T28] audit: type=1400 audit(2000000996.721:1087): avc: denied { write } for pid=13079 comm="syz.5.2933" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1072.770705][ T10] tipc: Left network mode [ 1072.861790][T13088] loop3: detected capacity change from 0 to 512 [ 1072.871233][T13082] netem: change failed [ 1072.878417][T13088] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1072.922179][T13088] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1072.930470][T13088] Quota error (device loop3): do_check_range: Getting block 196613 out of range 1-5 [ 1072.939988][T13088] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 1072.949382][T13088] EXT4-fs error (device loop3): ext4_acquire_dquot:6782: comm syz.3.2930: Failed to acquire dquot type 1 [ 1073.067338][T13088] EXT4-fs (loop3): 1 truncate cleaned up [ 1073.073876][T13088] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1074.624814][ T291] EXT4-fs (loop3): unmounting filesystem. [ 1074.698855][ T6361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1074.706350][ T6361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1074.723808][ T6361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1074.732690][ T6361] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1074.742339][ T6361] bridge0: port 1(bridge_slave_0) entered blocking state [ 1074.749233][ T6361] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1074.757363][ T6361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1074.766209][ T6361] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1074.774999][ T6361] bridge0: port 2(bridge_slave_1) entered blocking state [ 1074.781899][ T6361] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1074.798102][ T6361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1074.817867][ T6361] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1074.832341][ T6361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1074.840613][ T6361] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1074.858663][ T6361] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1074.866356][ T6361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1074.874844][ T6361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1074.883687][ T6361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1074.892295][ T6361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1074.906979][T13051] device veth0_vlan entered promiscuous mode [ 1075.004591][ T6361] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1075.014777][ T6361] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1075.026515][ T6361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1075.037170][ T6361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1075.101524][T13051] device veth1_macvtap entered promiscuous mode [ 1075.179753][ T1806] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1075.192472][ T1806] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1075.208882][ T1806] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1075.248301][ T1806] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1075.277305][ T1806] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1075.289058][T13120] loop0: detected capacity change from 0 to 512 [ 1075.295610][T13120] EXT4-fs: Ignoring removed orlov option [ 1075.305009][T13120] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.2923: casefold flag without casefold feature [ 1075.327377][T13120] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.2923: couldn't read orphan inode 15 (err -117) [ 1075.337046][T13107] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2940'. [ 1075.339798][T13120] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1075.356041][T13107] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2940'. [ 1075.396514][T13107] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2940'. [ 1075.405469][T13107] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2940'. [ 1075.414261][T13113] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2941'. [ 1075.511067][T13131] netem: change failed [ 1075.905982][ T10] device bridge_slave_1 left promiscuous mode [ 1075.940203][T13137] loop3: detected capacity change from 0 to 1024 [ 1075.940727][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 1075.959063][T13137] EXT4-fs: Ignoring removed nobh option [ 1075.959912][ T10] device bridge_slave_0 left promiscuous mode [ 1075.970821][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 1075.978347][T13137] EXT4-fs: Ignoring removed bh option [ 1075.983986][T13137] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1075.995390][ T10] device veth1_macvtap left promiscuous mode [ 1076.071409][T13143] loop5: detected capacity change from 0 to 512 [ 1076.104558][T13143] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1077.141144][T13051] EXT4-fs (loop0): unmounting filesystem. [ 1077.273112][T13143] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1077.282474][T13143] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.2948: bg 0: block 248: padding at end of block bitmap is not set [ 1077.297963][T13143] Quota error (device loop5): write_blk: dquota write failed [ 1077.305412][T13143] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 1077.315261][T13143] EXT4-fs error (device loop5): ext4_acquire_dquot:6782: comm syz.5.2948: Failed to acquire dquot type 1 [ 1077.329280][T13143] EXT4-fs (loop5): 1 truncate cleaned up [ 1077.336149][T13143] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1077.396073][T13137] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1078.139555][ T291] EXT4-fs (loop3): unmounting filesystem. [ 1078.263419][T12725] EXT4-fs (loop5): unmounting filesystem. [ 1078.434704][T13165] kvm [13164]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0x187 data 0x4000 [ 1078.466393][T13165] kvm [13164]: vcpu0, guest rIP: 0x1be ignored wrmsr: 0x11e data 0xbe706111 [ 1078.489518][T13165] kvm [13164]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0x187 data 0x4000 [ 1078.571547][T13184] netem: change failed [ 1079.210871][T13196] loop0: detected capacity change from 0 to 512 [ 1079.221197][T13196] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1079.941833][T13202] loop4: detected capacity change from 0 to 1024 [ 1079.958426][T13202] EXT4-fs: Ignoring removed nobh option [ 1079.964886][T13196] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1079.964900][T13202] EXT4-fs: Ignoring removed bh option [ 1079.965168][T13202] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1079.973737][T13196] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1080.036909][ T28] audit: type=1400 audit(2000001004.011:1088): avc: denied { setattr } for pid=13187 comm="syz.0.2961" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1080.070588][T13208] loop5: detected capacity change from 0 to 512 [ 1080.080502][T13208] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1080.105323][T13202] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1080.164762][T13208] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1080.243569][T13208] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.2965: bg 0: block 248: padding at end of block bitmap is not set [ 1080.259991][T13208] Quota error (device loop5): write_blk: dquota write failed [ 1080.267339][T13208] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 1080.277200][T13208] EXT4-fs error (device loop5): ext4_acquire_dquot:6782: comm syz.5.2965: Failed to acquire dquot type 1 [ 1080.293013][T13208] EXT4-fs (loop5): 1 truncate cleaned up [ 1080.299718][T13208] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1080.328410][T13051] EXT4-fs (loop0): unmounting filesystem. [ 1080.911357][ T294] EXT4-fs (loop4): unmounting filesystem. [ 1081.187495][T12725] EXT4-fs (loop5): unmounting filesystem. [ 1081.288783][T13231] netem: change failed [ 1081.793098][T13236] kvm [13235]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x3eb [ 1081.804932][T13236] kvm [13235]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x1757 [ 1081.819546][T13236] kvm [13235]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x5b0a [ 1081.837070][T13236] kvm [13235]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x8dbf [ 1082.181781][T13247] loop0: detected capacity change from 0 to 2048 [ 1082.191162][T13247] EXT4-fs: Ignoring removed bh option [ 1082.196448][T13247] EXT4-fs: dax option not supported [ 1082.201805][T13236] kvm [13235]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x9a7e [ 1082.220695][T13236] kvm [13235]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0xa270 [ 1082.293466][T13255] syzkaller0: tun_chr_ioctl cmd 2147767520 [ 1082.305618][ T326] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1082.317309][T13247] loop0: detected capacity change from 0 to 256 [ 1082.323765][T13247] exfat: Deprecated parameter 'namecase' [ 1082.332550][T13247] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe3f33698, utbl_chksum : 0xe619d30d) [ 1082.750076][T13262] loop5: detected capacity change from 0 to 1024 [ 1082.756673][T13262] EXT4-fs: Ignoring removed nobh option [ 1082.762175][T13262] EXT4-fs: Ignoring removed bh option [ 1082.767788][T13262] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1082.797693][T13262] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1082.819291][T13271] loop4: detected capacity change from 0 to 512 [ 1082.840169][T13271] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 1082.850521][T13271] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 1082.860092][T13262] loop5: detected capacity change from 1024 to 64 [ 1082.867322][T13271] EXT4-fs error (device loop4): ext4_acquire_dquot:6782: comm syz.4.2986: Failed to acquire dquot type 0 [ 1082.883119][T13277] loop3: detected capacity change from 0 to 256 [ 1082.889837][T13277] exfat: Deprecated parameter 'utf8' [ 1082.889918][T13271] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 1082.895053][T13277] exfat: Deprecated parameter 'utf8' [ 1082.913624][T13277] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x23a77120, utbl_chksum : 0xe619d30d) [ 1082.916880][T13271] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 1082.926460][T12725] EXT4-fs warning (device loop5): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 1082.935864][T13271] EXT4-fs error (device loop4): ext4_acquire_dquot:6782: comm syz.4.2986: Failed to acquire dquot type 0 [ 1082.961040][T12725] EXT4-fs warning (device loop5): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 1082.974967][T12725] EXT4-fs warning (device loop5): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 1082.988665][T12725] EXT4-fs warning (device loop5): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 1082.998825][T13271] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 1083.009430][T12725] EXT4-fs warning (device loop5): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 1083.025929][T12725] EXT4-fs warning (device loop5): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 1083.039710][T12725] EXT4-fs warning (device loop5): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 1083.054117][T13271] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 1083.102815][T12725] EXT4-fs warning (device loop5): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 1083.120306][T13271] EXT4-fs error (device loop4): ext4_acquire_dquot:6782: comm syz.4.2986: Failed to acquire dquot type 0 [ 1083.121020][T12725] EXT4-fs warning (device loop5): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 1083.133532][T13271] EXT4-fs (loop4): 1 orphan inode deleted [ 1083.145016][T12725] EXT4-fs warning (device loop5): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 1083.151033][T13271] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1083.246787][T13283] loop0: detected capacity change from 0 to 512 [ 1083.259712][T13283] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1083.342072][T13283] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1083.350198][T13283] Quota error (device loop0): do_check_range: Getting block 196613 out of range 1-5 [ 1083.359713][T13283] EXT4-fs error (device loop0): ext4_acquire_dquot:6782: comm syz.0.2989: Failed to acquire dquot type 1 [ 1083.373862][T13283] EXT4-fs (loop0): 1 truncate cleaned up [ 1083.379966][T13283] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1083.462958][T13271] ext4 filesystem being mounted at /599/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1083.638869][T12725] EXT4-fs (loop5): unmounting filesystem. [ 1084.122095][T13271] EXT4-fs error (device loop4): ext4_acquire_dquot:6782: comm syz.4.2986: Failed to acquire dquot type 0 [ 1084.261978][T13267] kmmpd-loop5: attempt to access beyond end of device [ 1084.261978][T13267] loop5: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 1084.275450][T13267] Buffer I/O error on dev loop5, logical block 64, lost sync page write [ 1084.674452][T13051] EXT4-fs (loop0): unmounting filesystem. [ 1084.691728][ T294] EXT4-fs (loop4): unmounting filesystem. [ 1084.865910][T13307] loop0: detected capacity change from 0 to 2048 [ 1085.095082][T13307] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1085.117404][T13313] loop4: detected capacity change from 0 to 1024 [ 1085.139074][T13313] EXT4-fs: Ignoring removed nobh option [ 1085.144476][T13313] EXT4-fs: Ignoring removed bh option [ 1085.157269][T13313] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1085.204650][T13313] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1085.245897][T13312] bridge0: port 1(bridge_slave_0) entered blocking state [ 1085.252889][T13312] bridge0: port 1(bridge_slave_0) entered disabled state [ 1085.261081][T13312] device bridge_slave_0 entered promiscuous mode [ 1085.270642][T13312] bridge0: port 2(bridge_slave_1) entered blocking state [ 1085.277533][T13312] bridge0: port 2(bridge_slave_1) entered disabled state [ 1085.285299][T13312] device bridge_slave_1 entered promiscuous mode [ 1085.338321][T13313] loop4: detected capacity change from 1024 to 64 [ 1085.354293][ T294] EXT4-fs warning (device loop4): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 1085.440159][ T294] EXT4-fs warning (device loop4): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 1085.471276][T13312] bridge0: port 2(bridge_slave_1) entered blocking state [ 1085.478187][T13312] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1085.485277][T13312] bridge0: port 1(bridge_slave_0) entered blocking state [ 1085.492065][T13312] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1085.502325][ T294] EXT4-fs warning (device loop4): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 1085.517293][ T294] EXT4-fs warning (device loop4): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 1085.670201][ T294] EXT4-fs warning (device loop4): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 1085.670507][T13051] EXT4-fs (loop0): unmounting filesystem. [ 1085.683692][ T294] EXT4-fs warning (device loop4): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 1085.702132][ T356] bridge0: port 1(bridge_slave_0) entered disabled state [ 1085.708491][ T294] EXT4-fs warning (device loop4): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 1085.723541][ T356] bridge0: port 2(bridge_slave_1) entered disabled state [ 1085.750867][ T1280] device bridge_slave_1 left promiscuous mode [ 1085.766485][ T1280] bridge0: port 2(bridge_slave_1) entered disabled state [ 1085.779339][T13330] loop0: detected capacity change from 0 to 256 [ 1085.785953][ T1280] device bridge_slave_0 left promiscuous mode [ 1085.790583][ T294] EXT4-fs warning (device loop4): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 1085.803974][T13330] exfat: Deprecated parameter 'utf8' [ 1085.807347][ T294] EXT4-fs warning (device loop4): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 1085.811428][ T1280] bridge0: port 1(bridge_slave_0) entered disabled state [ 1085.830970][T13330] exfat: Deprecated parameter 'utf8' [ 1085.832318][ T294] EXT4-fs warning (device loop4): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 1085.859683][ T1280] device veth1_macvtap left promiscuous mode [ 1085.865560][T13330] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x23a77120, utbl_chksum : 0xe619d30d) [ 1085.870982][ T1280] device veth0_vlan left promiscuous mode [ 1086.319131][T13337] loop3: detected capacity change from 0 to 256 [ 1086.336291][T13337] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001034b, chksum : 0x6322ccb6, utbl_chksum : 0xe619d30d) [ 1086.842277][T13312] device veth0_vlan entered promiscuous mode [ 1086.923435][T13312] device veth1_macvtap entered promiscuous mode [ 1088.210555][ T6361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1088.218011][ T6361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1088.227396][ T6361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1088.235962][ T6361] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1088.246544][ T6361] bridge0: port 1(bridge_slave_0) entered blocking state [ 1088.253428][ T6361] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1088.261944][ T6361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1088.270519][ T6361] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1088.278758][ T6361] bridge0: port 2(bridge_slave_1) entered blocking state [ 1088.285610][ T6361] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1088.293037][ T6361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1088.301754][ T6361] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1088.318886][ T6361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1088.348545][ T6361] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1088.368782][ T6361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1088.397531][ T6361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1088.405875][ T6361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1088.414422][ T6361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1088.427281][ T6361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1088.435692][ T6361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1088.444126][ T6361] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1088.451719][ T6361] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1088.460114][ T6361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1088.470885][ T6361] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1088.480352][ T6361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1088.641481][T13357] loop1: detected capacity change from 0 to 512 [ 1088.683733][T13357] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1089.285563][ T6361] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1089.396742][T13357] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1089.404877][T13357] __quota_error: 3 callbacks suppressed [ 1089.404906][T13357] Quota error (device loop1): do_check_range: Getting block 196613 out of range 1-5 [ 1089.419669][T13357] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 1089.428921][T13357] EXT4-fs error (device loop1): ext4_acquire_dquot:6782: comm syz.1.3008: Failed to acquire dquot type 1 [ 1089.442233][T13357] EXT4-fs (loop1): 1 truncate cleaned up [ 1089.448702][T13357] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1089.544332][ T6361] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1089.969637][ T294] EXT4-fs (loop4): unmounting filesystem. [ 1090.160814][T13370] loop0: detected capacity change from 0 to 512 [ 1091.037613][T13319] kmmpd-loop4: attempt to access beyond end of device [ 1091.037613][T13319] loop4: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 1091.309044][T13319] Buffer I/O error on dev loop4, logical block 64, lost sync page write [ 1091.318949][T13319] EXT4-fs error (device loop4): kmmpd:186: comm kmmpd-loop4: Error writing to MMP block [ 1091.341425][ T290] EXT4-fs (loop1): unmounting filesystem. [ 1091.434834][T13319] EXT4-fs (loop4): Remounting filesystem read-only [ 1091.468729][T13370] fscrypt (loop0, inode 2): Error -61 getting encryption context [ 1091.476474][T13370] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -61 [ 1091.487389][T13370] EXT4-fs warning (device loop0): ext4_block_to_path:107: block 3279945729 > max in inode 13 [ 1091.497603][T13370] EXT4-fs warning (device loop0): ext4_block_to_path:107: block 3279945730 > max in inode 13 [ 1091.508672][T13370] EXT4-fs (loop0): 1 truncate cleaned up [ 1091.514184][T13370] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1091.559841][T12045] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 1091.619583][T13319] kmmpd-loop4: attempt to access beyond end of device [ 1091.619583][T13319] loop4: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 1091.634662][T13319] Buffer I/O error on dev loop4, logical block 64, lost sync page write [ 1091.990512][ T1280] tipc: Left network mode [ 1092.060176][T13051] EXT4-fs (loop0): unmounting filesystem. [ 1092.223355][T13383] loop1: detected capacity change from 0 to 16 [ 1092.589399][T13383] erofs: (device loop1): mounted with root inode @ nid 36. [ 1092.621225][T13383] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 1092.712914][T12045] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1092.761216][T12045] usb 4-1: config 0 has no interfaces? [ 1092.875365][T12045] usb 4-1: string descriptor 0 read error: -71 [ 1092.887794][T12045] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1092.981749][T12045] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1092.990517][T12045] usb 4-1: config 0 descriptor?? [ 1092.995658][T12045] usb 4-1: can't set config #0, error -71 [ 1093.002592][T12045] usb 4-1: USB disconnect, device number 23 [ 1093.061353][T13388] loop3: detected capacity change from 0 to 1024 [ 1093.119204][T13388] EXT4-fs: Ignoring removed nobh option [ 1093.132904][T13392] loop0: detected capacity change from 0 to 2048 [ 1093.333933][T13394] loop6: detected capacity change from 0 to 256 [ 1093.362468][T13394] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001034b, chksum : 0x6322ccb6, utbl_chksum : 0xe619d30d) [ 1093.467624][T13388] EXT4-fs: Ignoring removed bh option [ 1093.563807][T13388] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1093.713661][T13392] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1093.831104][T13388] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1093.999967][ T1280] device bridge_slave_1 left promiscuous mode [ 1094.007086][ T1280] bridge0: port 2(bridge_slave_1) entered disabled state [ 1094.015333][ T1280] device bridge_slave_0 left promiscuous mode [ 1094.021454][ T1280] bridge0: port 1(bridge_slave_0) entered disabled state [ 1094.030075][ T1280] device veth1_macvtap left promiscuous mode [ 1094.165974][T13396] bridge0: port 1(bridge_slave_0) entered blocking state [ 1094.176771][T13396] bridge0: port 1(bridge_slave_0) entered disabled state [ 1094.184518][T13396] device bridge_slave_0 entered promiscuous mode [ 1094.191947][T13396] bridge0: port 2(bridge_slave_1) entered blocking state [ 1094.199236][T13396] bridge0: port 2(bridge_slave_1) entered disabled state [ 1094.206587][T13396] device bridge_slave_1 entered promiscuous mode [ 1094.280448][T13396] bridge0: port 2(bridge_slave_1) entered blocking state [ 1094.287347][T13396] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1094.294480][T13396] bridge0: port 1(bridge_slave_0) entered blocking state [ 1094.301349][T13396] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1094.366129][ T9559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1094.376527][ T9559] bridge0: port 1(bridge_slave_0) entered disabled state [ 1094.384015][ T9559] bridge0: port 2(bridge_slave_1) entered disabled state [ 1094.398514][T13388] loop3: detected capacity change from 1024 to 64 [ 1094.428759][ T9559] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1094.445894][ T291] EXT4-fs warning (device loop3): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 1094.446084][ T9559] bridge0: port 1(bridge_slave_0) entered blocking state [ 1094.460403][ T291] EXT4-fs warning (device loop3): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 1094.466155][ T9559] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1094.480228][ T291] EXT4-fs warning (device loop3): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 1094.502138][ T291] EXT4-fs warning (device loop3): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 1094.516980][ T291] EXT4-fs warning (device loop3): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 1094.531229][ T9559] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1094.540397][ T291] EXT4-fs warning (device loop3): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 1095.161418][T13419] loop6: detected capacity change from 0 to 40427 [ 1095.190390][T13419] F2FS-fs (loop6): Wrong CP boundary, start(512) end(516) blocks(1024) [ 1095.198646][T13419] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 1095.212018][T13419] F2FS-fs (loop6): invalid crc value [ 1095.218771][ T9559] bridge0: port 2(bridge_slave_1) entered blocking state [ 1095.225639][ T9559] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1095.238273][ T291] EXT4-fs warning (device loop3): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 1095.266713][T13051] EXT4-fs (loop0): unmounting filesystem. [ 1095.326143][T13419] F2FS-fs (loop6): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 1095.436456][T13419] F2FS-fs (loop6): Try to recover 1th superblock, ret: -30 [ 1095.443578][T13419] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 1095.537160][ T291] EXT4-fs warning (device loop3): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 1095.572194][ T9559] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1095.695957][ T9559] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1095.703741][ T291] EXT4-fs warning (device loop3): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 1095.728815][ T291] EXT4-fs warning (device loop3): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 1095.851388][T13424] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1095.983014][T13396] device veth0_vlan entered promiscuous mode [ 1095.996816][T13396] device veth1_macvtap entered promiscuous mode [ 1096.024907][ T9559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1096.038638][ T9559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1096.058455][ T9559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1096.088634][ T9559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1096.140545][ T9559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1096.159523][ T9559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1096.167712][ T9559] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1096.182495][ T9559] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1096.193319][ T9559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1096.204726][ T9559] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1096.215084][ T9559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1096.227444][ T9559] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1096.299524][ T9559] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1096.438290][T11893] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 1096.483032][ T1280] tipc: Left network mode [ 1096.617571][ T291] EXT4-fs (loop3): unmounting filesystem. [ 1096.624974][T13399] kmmpd-loop3: attempt to access beyond end of device [ 1096.624974][T13399] loop3: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 1096.638788][T13399] Buffer I/O error on dev loop3, logical block 64, lost sync page write [ 1096.700833][T11893] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1096.806290][T11893] usb 7-1: config 0 has no interfaces? [ 1096.950757][T11893] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1096.978283][T11893] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1097.008012][T11893] usb 7-1: Product: syz [ 1097.019628][T11893] usb 7-1: Manufacturer: syz [ 1097.024105][T11893] usb 7-1: SerialNumber: syz [ 1097.036264][T11893] usb 7-1: config 0 descriptor?? [ 1097.206007][T13451] loop1: detected capacity change from 0 to 512 [ 1097.216563][T13451] EXT4-fs: Ignoring removed orlov option [ 1097.224687][T13451] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.3032: casefold flag without casefold feature [ 1097.238345][T13451] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.3032: couldn't read orphan inode 15 (err -117) [ 1097.250833][T11893] usb 7-1: USB disconnect, device number 2 [ 1097.252687][T13451] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1097.333132][T13454] loop0: detected capacity change from 0 to 256 [ 1097.473329][T13454] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001034b, chksum : 0x6322ccb6, utbl_chksum : 0xe619d30d) [ 1097.557393][ T1280] device bridge_slave_1 left promiscuous mode [ 1097.569296][ T1280] bridge0: port 2(bridge_slave_1) entered disabled state [ 1097.654841][ T1280] device bridge_slave_0 left promiscuous mode [ 1097.705469][ T1280] bridge0: port 1(bridge_slave_0) entered disabled state [ 1097.735579][ T290] EXT4-fs (loop1): unmounting filesystem. [ 1097.749630][T13457] loop4: detected capacity change from 0 to 2048 [ 1097.760587][ T1280] device veth1_macvtap left promiscuous mode [ 1097.892855][T13457] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1098.588405][T13396] EXT4-fs (loop4): unmounting filesystem. [ 1098.747035][T13445] bridge0: port 1(bridge_slave_0) entered blocking state [ 1098.754583][T13445] bridge0: port 1(bridge_slave_0) entered disabled state [ 1098.762264][T13445] device bridge_slave_0 entered promiscuous mode [ 1100.505950][T13487] loop0: detected capacity change from 0 to 40427 [ 1100.785637][T13486] loop4: detected capacity change from 0 to 512 [ 1100.824593][T13487] F2FS-fs (loop0): Wrong CP boundary, start(512) end(516) blocks(1024) [ 1100.832848][T13487] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1100.847671][T13487] F2FS-fs (loop0): invalid crc value [ 1100.910499][T13487] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 1101.029004][T13487] F2FS-fs (loop0): Try to recover 1th superblock, ret: -30 [ 1101.036105][T13487] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1101.169353][T13445] bridge0: port 2(bridge_slave_1) entered blocking state [ 1101.203481][T13486] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1101.212572][T13486] ext4 filesystem being mounted at /4/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1101.948875][T13445] bridge0: port 2(bridge_slave_1) entered disabled state [ 1101.982737][T13396] EXT4-fs (loop4): unmounting filesystem. [ 1102.003550][T13445] device bridge_slave_1 entered promiscuous mode [ 1102.045028][T13499] loop6: detected capacity change from 0 to 512 [ 1102.057086][T13499] EXT4-fs: Ignoring removed orlov option [ 1102.115556][T13503] netem: change failed [ 1102.115638][T13499] EXT4-fs error (device loop6): ext4_orphan_get:1400: inode #15: comm syz.6.3044: casefold flag without casefold feature [ 1102.204010][T13504] loop1: detected capacity change from 0 to 16 [ 1102.219102][T13504] erofs: (device loop1): mounted with root inode @ nid 36. [ 1102.246523][T13504] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 1102.472693][T13499] ================================================================== [ 1102.480601][T13499] BUG: KASAN: use-after-free in enqueue_timer+0xa6/0x480 [ 1102.487454][T13499] Write of size 8 at addr ffff8881098b24c0 by task syz.6.3044/13499 [ 1102.495269][T13499] [ 1102.497453][T13499] CPU: 1 PID: 13499 Comm: syz.6.3044 Not tainted 6.1.128-syzkaller-00009-g70d032fba5f4 #0 [ 1102.507157][T13499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1102.517062][T13499] Call Trace: [ 1102.520177][T13499] [ 1102.522951][T13499] dump_stack_lvl+0x151/0x1b7 [ 1102.527465][T13499] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 1102.532757][T13499] ? _printk+0xd1/0x111 [ 1102.536752][T13499] ? __virt_addr_valid+0x242/0x2f0 [ 1102.541705][T13499] print_report+0x158/0x4e0 [ 1102.546038][T13499] ? __virt_addr_valid+0x242/0x2f0 [ 1102.550988][T13499] ? kasan_complete_mode_report_info+0x90/0x1b0 [ 1102.557061][T13499] ? enqueue_timer+0xa6/0x480 [ 1102.561573][T13499] kasan_report+0x13c/0x170 [ 1102.565914][T13499] ? enqueue_timer+0xa6/0x480 [ 1102.570427][T13499] ? __kasan_check_write+0x14/0x20 [ 1102.575374][T13499] __asan_report_store8_noabort+0x17/0x20 [ 1102.580930][T13499] enqueue_timer+0xa6/0x480 [ 1102.585270][T13499] __mod_timer+0x8d3/0xcf0 [ 1102.589525][T13499] ? mod_timer_pending+0x30/0x30 [ 1102.594293][T13499] ? irqentry_exit+0x30/0x40 [ 1102.598722][T13499] ? sysvec_reschedule_ipi+0x8f/0x170 [ 1102.603927][T13499] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 1102.609399][T13499] ? ext4_update_super+0x5d0/0xe50 [ 1102.614344][T13499] mod_timer+0x1f/0x30 [ 1102.618249][T13499] ext4_update_super+0xa41/0xe50 [ 1102.623028][T13499] ext4_commit_super+0xe3/0x4b0 [ 1102.627708][T13499] ext4_handle_error+0x5d8/0x870 [ 1102.632488][T13499] __ext4_error_inode+0x327/0x5e0 [ 1102.637346][T13499] ? get_max_inline_xattr_value_size+0x640/0x640 [ 1102.643506][T13499] ? ext4_handle_error+0x870/0x870 [ 1102.648456][T13499] ? from_kgid_munged+0x7a0/0x7a0 [ 1102.653315][T13499] ? init_special_inode+0x7b/0x210 [ 1102.658259][T13499] __ext4_iget+0x2c5e/0x3ee0 [ 1102.662685][T13499] ? xas_nomem+0x1c6/0x200 [ 1102.666944][T13499] ? ext4_get_projid+0x140/0x140 [ 1102.671715][T13499] ? _raw_spin_unlock+0x4c/0x70 [ 1102.676402][T13499] ext4_orphan_get+0x1c2/0x5f0 [ 1102.681002][T13499] ext4_orphan_cleanup+0x901/0x11b0 [ 1102.686035][T13499] ? ext4_orphan_file_block_trigger+0x580/0x580 [ 1102.692108][T13499] ? ext4_orphan_del+0xc50/0xc50 [ 1102.696885][T13499] ? errseq_check_and_advance+0x64/0x130 [ 1102.702353][T13499] ext4_fill_super+0x7d55/0x8450 [ 1102.707132][T13499] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 1102.713196][T13499] ? snprintf+0xd6/0x120 [ 1102.717282][T13499] ? set_blocksize+0x1cb/0x360 [ 1102.721877][T13499] ? sb_set_blocksize+0xa8/0xf0 [ 1102.726564][T13499] get_tree_bdev+0x440/0x680 [ 1102.730990][T13499] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 1102.737065][T13499] ext4_get_tree+0x1c/0x20 [ 1102.741317][T13499] vfs_get_tree+0x88/0x290 [ 1102.745570][T13499] do_new_mount+0x2ba/0xb30 [ 1102.749910][T13499] ? do_move_mount_old+0x160/0x160 [ 1102.754857][T13499] ? security_capable+0x87/0xb0 [ 1102.759549][T13499] ? ns_capable+0x89/0xe0 [ 1102.763709][T13499] path_mount+0x671/0x1070 [ 1102.767964][T13499] ? user_path_at_empty+0x14e/0x1a0 [ 1102.772999][T13499] __se_sys_mount+0x2c4/0x3b0 [ 1102.777511][T13499] ? __x64_sys_mount+0xd0/0xd0 [ 1102.782111][T13499] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1102.788013][T13499] __x64_sys_mount+0xbf/0xd0 [ 1102.792442][T13499] x64_sys_call+0x49d/0x9a0 [ 1102.796778][T13499] do_syscall_64+0x3b/0xb0 [ 1102.801032][T13499] ? clear_bhb_loop+0x55/0xb0 [ 1102.805545][T13499] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1102.811280][T13499] RIP: 0033:0x7fb1f538e90a [ 1102.815524][T13499] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1102.834966][T13499] RSP: 002b:00007fb1f62c8e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1102.843209][T13499] RAX: ffffffffffffffda RBX: 00007fb1f62c8ef0 RCX: 00007fb1f538e90a [ 1102.851022][T13499] RDX: 0000400000000180 RSI: 00004000000001c0 RDI: 00007fb1f62c8eb0 [ 1102.858842][T13499] RBP: 0000400000000180 R08: 00007fb1f62c8ef0 R09: 0000000000000800 [ 1102.866647][T13499] R10: 0000000000000800 R11: 0000000000000246 R12: 00004000000001c0 [ 1102.874458][T13499] R13: 00007fb1f62c8eb0 R14: 000000000000049b R15: 0000400000000700 [ 1102.882272][T13499] [ 1102.885129][T13499] [ 1102.887301][T13499] Allocated by task 13313: [ 1102.891558][T13499] kasan_set_track+0x4b/0x70 [ 1102.895978][T13499] kasan_save_alloc_info+0x1f/0x30 [ 1102.900927][T13499] __kasan_kmalloc+0x9c/0xb0 [ 1102.905359][T13499] kmalloc_trace+0x44/0xa0 [ 1102.909735][T13499] ext4_fill_super+0x102/0x8450 [ 1102.914422][T13499] get_tree_bdev+0x440/0x680 [ 1102.918845][T13499] ext4_get_tree+0x1c/0x20 [ 1102.923108][T13499] vfs_get_tree+0x88/0x290 [ 1102.927358][T13499] do_new_mount+0x2ba/0xb30 [ 1102.931691][T13499] path_mount+0x671/0x1070 [ 1102.935945][T13499] __se_sys_mount+0x2c4/0x3b0 [ 1102.940457][T13499] __x64_sys_mount+0xbf/0xd0 [ 1102.944887][T13499] x64_sys_call+0x49d/0x9a0 [ 1102.949224][T13499] do_syscall_64+0x3b/0xb0 [ 1102.953483][T13499] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1102.953521][T13506] loop4: detected capacity change from 0 to 2048 [ 1102.959202][T13499] [ 1102.959209][T13499] Freed by task 294: [ 1102.959221][T13499] kasan_set_track+0x4b/0x70 [ 1102.959251][T13499] kasan_save_free_info+0x2b/0x40 [ 1102.959269][T13499] ____kasan_slab_free+0x131/0x180 [ 1102.985502][T13499] __kasan_slab_free+0x11/0x20 [ 1102.990103][T13499] __kmem_cache_free+0x21d/0x410 [ 1102.994874][T13499] kfree+0x7a/0xf0 [ 1102.998434][T13499] ext4_put_super+0x9e5/0xd60 [ 1103.002947][T13499] generic_shutdown_super+0x14f/0x370 [ 1103.008154][T13499] kill_block_super+0x7e/0xe0 [ 1103.012668][T13499] deactivate_locked_super+0xad/0x110 [ 1103.017875][T13499] deactivate_super+0xbe/0xf0 [ 1103.022474][T13499] cleanup_mnt+0x485/0x510 [ 1103.026727][T13499] __cleanup_mnt+0x19/0x20 [ 1103.030979][T13499] task_work_run+0x24d/0x2e0 [ 1103.035405][T13499] do_exit+0xbd0/0x2b80 [ 1103.039396][T13499] do_group_exit+0x21a/0x2d0 [ 1103.043826][T13499] __x64_sys_exit_group+0x3f/0x40 [ 1103.048688][T13499] x64_sys_call+0x610/0x9a0 [ 1103.053027][T13499] do_syscall_64+0x3b/0xb0 [ 1103.057278][T13499] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1103.063010][T13499] [ 1103.065177][T13499] The buggy address belongs to the object at ffff8881098b2000 [ 1103.065177][T13499] which belongs to the cache kmalloc-4k of size 4096 [ 1103.079061][T13499] The buggy address is located 1216 bytes inside of [ 1103.079061][T13499] 4096-byte region [ffff8881098b2000, ffff8881098b3000) [ 1103.092342][T13499] [ 1103.094510][T13499] The buggy address belongs to the physical page: [ 1103.100764][T13499] page:ffffea0004262c00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1098b0 [ 1103.110829][T13499] head:ffffea0004262c00 order:3 compound_mapcount:0 compound_pincount:0 [ 1103.118985][T13499] flags: 0x4000000000010200(slab|head|zone=1) [ 1103.124920][T13499] raw: 4000000000010200 0000000000000000 dead000000000001 ffff888100043380 [ 1103.133314][T13499] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 1103.141728][T13499] page dumped because: kasan: bad access detected [ 1103.147981][T13499] page_owner tracks the page as allocated [ 1103.153544][T13499] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 1125, tgid 1118 (syz.1.173), ts 101250934633, free_ts 100810174389 [ 1103.176014][T13499] post_alloc_hook+0x213/0x220 [ 1103.180609][T13499] prep_new_page+0x1b/0x110 [ 1103.185040][T13499] get_page_from_freelist+0x3a98/0x3b10 [ 1103.190414][T13499] __alloc_pages+0x234/0x610 [ 1103.194839][T13499] alloc_slab_page+0x6c/0xf0 [ 1103.199269][T13499] new_slab+0x90/0x3e0 [ 1103.203175][T13499] ___slab_alloc+0x6f9/0xb80 [ 1103.207887][T13499] __slab_alloc+0x5d/0xa0 [ 1103.212051][T13499] __kmem_cache_alloc_node+0x207/0x2a0 [ 1103.217345][T13499] kmalloc_trace+0x2a/0xa0 [ 1103.221597][T13499] __se_sys_mount+0x156/0x3b0 [ 1103.226107][T13499] __x64_sys_mount+0xbf/0xd0 [ 1103.230532][T13499] x64_sys_call+0x49d/0x9a0 [ 1103.234871][T13499] do_syscall_64+0x3b/0xb0 [ 1103.239126][T13499] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1103.244856][T13499] page last free stack trace: [ 1103.249377][T13499] free_unref_page_prepare+0x9f1/0xa00 [ 1103.254665][T13499] free_unref_page+0xb2/0x5c0 [ 1103.259178][T13499] free_compound_page+0x9d/0xd0 [ 1103.263861][T13499] destroy_large_folio+0x56/0x90 [ 1103.268636][T13499] __folio_put+0xcf/0xe0 [ 1103.272716][T13499] page_to_skb+0x7c1/0xbe0 [ 1103.276969][T13499] receive_buf+0x4fc/0x5000 [ 1103.281323][T13499] virtnet_poll+0x6d5/0x1450 [ 1103.285732][T13499] __napi_poll+0xbe/0x5c0 [ 1103.289900][T13499] net_rx_action+0x595/0xdd0 [ 1103.294328][T13499] handle_softirqs+0x1db/0x650 [ 1103.298924][T13499] __do_softirq+0xb/0xd [ 1103.302921][T13499] [ 1103.305101][T13499] Memory state around the buggy address: [ 1103.310560][T13499] ffff8881098b2380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1103.318455][T13499] ffff8881098b2400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1103.326361][T13499] >ffff8881098b2480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1103.334251][T13499] ^ [ 1103.340244][T13499] ffff8881098b2500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1103.348138][T13499] ffff8881098b2580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1103.356122][T13499] ================================================================== [ 1103.364028][T13499] Disabling lock debugging due to kernel taint [ 1103.455065][T13499] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.3044: couldn't read orphan inode 15 (err -117) [ 1103.467212][T13499] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1103.500375][T13506] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1103.514753][T13312] EXT4-fs (loop6): unmounting filesystem. [ 1103.618098][ T9559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1103.625543][ T9559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1103.635252][ T9559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1103.643889][ T9559] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1103.652166][ T9559] bridge0: port 1(bridge_slave_0) entered blocking state [ 1103.659062][ T9559] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1103.805521][T13445] device veth0_vlan entered promiscuous mode [ 1103.920369][T13445] device veth1_macvtap entered promiscuous mode [ 1103.968586][T13396] EXT4-fs (loop4): unmounting filesystem. [ 1103.974405][ T9559] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1103.983083][ T9559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1103.993492][ T9559] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1104.001978][ T9559] bridge0: port 2(bridge_slave_1) entered blocking state [ 1104.008866][ T9559] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1104.016249][ T9559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1104.024522][ T9559] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1104.032611][ T9559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1104.040601][ T9559] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1104.048677][ T9559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1104.056791][ T9559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1104.065027][ T9559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1104.072882][ T9559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1104.080863][ T9559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1104.088821][ T9559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1104.096768][ T9559] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1104.105009][ T9559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1104.113166][ T9559] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1104.121319][ T9559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1104.130715][ T9559] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1104.138019][ T9559] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready