last executing test programs: 9m58.927354399s ago: executing program 3 (id=1475): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb}}, 0x3}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xd}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000e40)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4880}, 0x1) recvmmsg(r1, &(0x7f0000001380)=[{{0x0, 0x0, 0x0}, 0x7ffffffd}], 0x1, 0x40010001, 0x0) 9m58.917149609s ago: executing program 3 (id=1476): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp-reno\x00', 0xb) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, 0x0, 0x0) 9m58.821799598s ago: executing program 3 (id=1477): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001800)={0x18, 0x5e, 0xe25, 0x0, 0x3, "", [@typed={0x8, 0x77, 0x0, 0x0, @uid}]}, 0x18}], 0x1}, 0x0) 9m58.821569528s ago: executing program 3 (id=1478): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000440)=0x7) syz_mount_image$f2fs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x8, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0x5505, &(0x7f0000002480)="$eJzs3E1rY9UbAPAn7XTe//Mv4sLdXBiEFiZh0nlBd6PO4At2KKMuXGmapCEzSW5p0rR25cKluPCbiIIrl34GF67diQvFnaDknlud+gJC08ZOfz+4ee45OXnuc8Iw8NxbEsCptZj9/GMlrsSFiJiPiMsRxXmlPAp3U3guIq5GxNwTR6Wc/33ibERcjIgrk+QpZ6V869Pr42u3f3jjp6++OXfm0mdffju7XQOz9nxE9DfT+U4/xbyT4qNyvjHuFrF/a1zG9Eb/cTnOU9xprxcZdhr76xpFvNlJ6/PN7eEkbvQazUnsdDeK+c1BuuBw3NnPU3zgUWOrGLfa60XsDvMidvZSXbt76f+2veEo5WmV+T4o0sdotB/TfHu3nfaz+biIzcGonE9581Z7dxLHZSwvF8281yrqWD/MN/3f9mZ3sL2bjdtbw24+yG7X6i/U6neq9a281R61b1Ub/dadW9lSpzdZVh21G/27nTzv9Nq1Zt5fzpY6zWa1Xs+W7rXXu41BVq/XbtZuVG8vl2fXs1cfvJP1WtnSJL7cHWyPur1htpFvZekTy9lK7eaLy9m1evbW6lq29vD+/dW1t9+79+6Dl1Zff6Vc9JeysqWVGysr1fqN6kp9+RTt/6Oy6CnuHw6lMusCAE4e/T8wC0fX/289jDj6/j/0/1Nxovrf097/H8H+4VD0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp9Z3C5+/VpwspvGlcv5/5dQz5bgSEXMR8evfmI+zB3LOl3kW/mH9wp9q+LoSRYbJNc6Vx8WIuFsev/z/qL8FAAAAeHp98eHVT1K3nl4WZ10QxyndtJm7/P6U8lUiYmHx+yllm5u8PDulZMW/7zOxO6VsxQ2s81NKlm65nZlWtn9l/kA4/0SopDB3rOUAAADH4mAncLxdCAAAAMfp41kXwGxUYv9R5v6z4OIv7/94IHjhwAgAAAA4gSqzLgAAAAA4ckX/7/f/AAAA4OmWfv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfmPnfm4TB6I4AD8bvLD/tGi1921lb1DGlrDHPUYUkCYoIAfSQhqgBnJLCRFEeBwCEYdIHttK9H2SMxnL/HiD4DAz0gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF26r9aL26vf121zdvt28owGAAAAuGRbrRf1P7PU/9rc/97c+tn0i4goI+LS3H0Un84yR01O9fL8zenz1asa7iLqhMN7TJrrS0T8aa7HH11/CgAAAPBxbZareZqtpz+zoQuiT2nRpvz2N1NeERHV7CFTWnnI+5UprP5+j+N/prR6AWuaKSwtuY1zpb1J/XM/rtpNT5oiNeXFlx2LzDZ2AACgR6Ozpt9ZCAAAAH36N3QBDKOI563M41bgJDXN9t7nsx4AAADwDhVDFwAAAAB0rp7/93T+3975fwAAADCMdP4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXdpW68VmuZq3zdnt28kzGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhif95RIATCIAz2ru9M5v6HlQZNTU2qQPj4G4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIv9eUmBEAiCKJgz/nfS9z+sJOgZRIiAhkcVtWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIud+3mNo4oDAP5mZmdrq+IaZQ8RUfCgF7vd1tbexIMSPPgnCCHd1titP9ocbCliLt4k515EjyKCEm/9H3JOIJd4y2EPETwrMzuTnfwA118zm+TzgTfvu8Mw7/tmIeQ77yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACURm9P4iQ7dMZxXJzb3Hu4lPVbh/rM47Xt+axlcVRn0ifDi9UPUbe5RAAAADg7krK+DyHspOsLWR938vo/La/Jav5vnx7HZT1/uO4v+7L2z9ovP+8+vz9QZzxOdtOby8PBpaOptP6/Wc62Z/7yilb+5PN3L0n+hcTvrT43SvPnGX29sfFOOw/P1ZEtAPBPXCz7Iih/H8r6fpOJAXBmtCqFd1n/J51mcwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACow2g1PFnGUQhhvjWJM1t7D5eO6x+vbc+X7dqjR2vhy8k9s1ukIYSby8PBpVpnM9vu3X9we3E4HNytP3gphNDU6G8V07/9wRQXh9DI8xH8R0FcfNmzks/JCBr8oQQAwKmUFi2r63fS9YXsXDQXwh/fHaz/X63EYcr6f/fDa5vVsar1f7+2Gc6+3sqdT3v37j94ffnO4q3BrcHHb1zuv9m/cv3q1eu9/F1JzxsTAAAA/p120ar1fzx3dP3/QiUOU9b/n33T/6I6VqL+P9Zk0a/pTAAAAM62Z1/+/bfomPNRux0+X1xZudsfH/c/Xx4fG0j1bztXtGr9n8w1nRUAAABQh9FqdGD9/0YlDlOu/z/1/Qs/Vu+ZhBDOF+v/F5c+Gd6obzozrY4/J256jgAAADTrfNGq6/9pvv8/3t/yEIcQXntlHBf/BnCq+j9596sfqmNV9/9fqW+KMynujp9H3ndDaHWbzggAAIDT7ImiZcX+r+n6wkc/XXi/bf8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQN3+DAAA//962D6S") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 9m58.687055888s ago: executing program 3 (id=1480): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x1, 0x490, &(0x7f0000000580)="$eJzs3UFrXNUeAPD/nSR9aZu+pO910Vd4feW1khbtTNLYNrioFURXBbXuY0wmIWSSCZlJ24QiKX4AQUQFV67cCH4AQfoRRCjoXkQU0VYXLtSRmdxpa5xJAqa5OPP7wek9556Z+Z/TyZy5557L3AC61omIuBwRPRFxJiIG0/25NMX6Rqo/7t7dm1P1lEStdvX7JJJ0X/O1knR7MH1af0S89HzEq8mf41ZW1+YnS6XiclouVBeWCpXVtbNzC5Ozxdni4tjY6IXxi+Pnx0d2ra+Xnv367Tc+eO7SJ09c/3Li29Ov1Zs1kNY93I/dtNH1vsb/RVNvRCw/imAZ6En705d1QwAA2JEjEfGviPh/4/h/MHoaR3MAAABAJ6k9PRC/JBE1AAAAoGPlGtfAJrl8er3vQORy+fzGNbxH4kCuVK5UH58pryxOb1wrOxR9uZm5UnEkvVZ4KPqSenm0kX9QPrepPBYRhyPircH9jXJ+qlyazvrkBwAAAHSJg5vm/z8Nbsz/AQAAgA4zlHUDAAAAgEfO/B8AAAA6n/k/AAAAdLQXrlypp1rz/tfT11ZX5svXzk4XK/P5hZWp/FR5eSk/Wy7PNn6zb2G71yuVy0tPxuLKjUK1WKkWKqtrEwvllcXqROO+3hNF94kGAACAvXf4f7e/SCJi/an9jVS3L60zV4fOlsu6AUBmerJuAJCZ3qwbAGTGHB9Itqnvb1fx6e63BQAAeDSG/2P9H7qV9X/oXtb/oXtZ/4fuZY4PWP8HAIDON9BISS6frgUORC6Xz0ccatwWoC+ZmSsVRyLinxHx+WDfP+rl0awbDQAAAAAAAAAAAAAAAAAAAAAAAAB/M7VaEjUAAACgo0XkvknS+38ND54a2Hx+YF/y82BjGxHX37v6zo3JanV5tL7/h/v7q++m+89lcQYDAAAA2Kw5T2/O4wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgN927e3OqmfYy7nfPRMRQq/i90d/Y9kdfRBz4MYneh56XRETPLsRfvxURR1vFT+rNiqG0FZvj5yJif8bxD+5CfOhmt+vjz+VWn79cnGhsW3/+etP0V7Uf/3L3x7+eNuPfoR3GOHbno0Lb+LcijvW2Hn+a8ZM28U/uMP4rL6+ttaurvR8x3PL7J/lDrEJ1YalQWV07O7cwOVucLS6OjY1eGL84fn58pDAzVyqm/7aM8eZ/P/5tq/4faBN/aJv+n9ph/3+9c+Puv7eIf/pk6/f/6Bbx638Tj6XfA/X64WZ+fSP/sOMffnZ8q/5Pt+n/du//6R32/8yLr3+1w4cCAHugsro2P1kqFZdlZGRk7meyHpkAAIDd9uCgP+uWAAAAAAAAAAAAAAAAAAAAQPfai58Ty7qPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA78XsAAAD//7cw1BU=") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file2\x00', 0x42, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r0, 0x0, 0x0, 0x0, 0x1000000000000}) 9m58.555043929s ago: executing program 3 (id=1481): r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/snmp6\x00') preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000300)=""/206, 0xce}], 0x1, 0x10, 0x1) 9m58.520917411s ago: executing program 32 (id=1481): r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/snmp6\x00') preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000300)=""/206, 0xce}], 0x1, 0x10, 0x1) 9.802618679s ago: executing program 5 (id=6388): bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000000)={0xb070, 0xffffffff, 0x7e38, 0x3, 0x7f, "05e5ce9c294a2b0ee2c092d21d7642d7a3ef28", 0xfd, 0x69}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 8.789036001s ago: executing program 5 (id=6394): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000200850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0xa, &(0x7f0000000000)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_emit_ethernet(0x3e, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000100)='./bus\x00', 0x1010000, &(0x7f0000000a80)=ANY=[@ANYBLOB='utf8=1,uni_xlate=1,uni_xlate=0,check=strict,utf8=0,uni_xlate=0,rodir,codepage=949,uni_xlate=1,shortname=winnt,shortname=mixed,shortname=win95,shortname=win95,iocharset=iso8859-13,shortname=mixed,nonumtail=0,discard,nonumtail=0,incharset=macturkish,\x00'], 0x1, 0x369, &(0x7f0000000700)="$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") socket$inet6_tcp(0xa, 0x1, 0x0) mount(0x0, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) 7.55302084s ago: executing program 5 (id=6397): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 7.514162793s ago: executing program 5 (id=6398): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000200850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0, r1}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000e80)={r2, &(0x7f0000000d40), 0x0}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0xa, &(0x7f0000000000)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000480), 0x400034f, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000100)='./bus\x00', 0x1010000, &(0x7f0000000a80)=ANY=[@ANYBLOB='utf8=1,uni_xlate=1,uni_xlate=0,check=strict,utf8=0,uni_xlate=0,rodir,codepage=949,uni_xlate=1,shortname=winnt,shortname=mixed,shortname=win95,shortname=win95,iocharset=iso8859-13,shortname=mixed,nonumtail=0,discard,nonumtail=0,incharset=macturkish,\x00'], 0x1, 0x369, &(0x7f0000000700)="$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") mount(0x0, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) 5.57639729s ago: executing program 4 (id=6406): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r2}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x11, 0x2, 0x4}, 0x0, 0x0) 5.060273481s ago: executing program 1 (id=6408): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 5.059247462s ago: executing program 4 (id=6409): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) syz_socket_connect_nvme_tcp() r5 = syz_io_uring_setup(0x75a5, &(0x7f0000000500)={0x0, 0xfffffffd, 0x0, 0xfffffffe}, &(0x7f0000000000), &(0x7f0000000000)) r6 = socket$inet_tcp(0x2, 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000100)=[r6], 0x1) r7 = dup2(r5, r6) io_uring_register$IORING_UNREGISTER_FILES(r7, 0x3, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) socket$nl_route(0x10, 0x3, 0x0) clock_getres(0x2, 0x0) 4.894837305s ago: executing program 1 (id=6411): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x410040, &(0x7f00000003c0)={[{@iocharset={'iocharset', 0x3d, 'default'}}, {@shortname_mixed}, {@shortname_win95}, {@numtail}, {@shortname_win95}, {@utf8no}, {@shortname_lower}]}, 0x11, 0x24b, &(0x7f0000000500)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r0, 0xfffffffffffffffe, 0x29) setuid(0xffffffffffffffff) syz_mount_image$exfat(&(0x7f0000000100), &(0x7f0000000240)='./file0\x00', 0x800000, &(0x7f0000000600)=ANY=[], 0x2, 0x14fe, &(0x7f0000002180)="$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") sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) truncate(&(0x7f0000000000)='./file1\x00', 0x5e00) 4.46568902s ago: executing program 1 (id=6413): socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r4}, 0x18) r5 = inotify_init() creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) inotify_add_watch(r5, &(0x7f0000000200)='./file0\x00', 0x400008bf) 4.096599959s ago: executing program 4 (id=6416): bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./bus\x00', 0x4000, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x1, 0x216, &(0x7f0000000e00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) 4.055518462s ago: executing program 0 (id=6417): bind$unix(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xa, 0x4, 0x7fe2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0x2000000000000111, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone3(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000b00)={0xa, 0xfdfe, 0x100007, @remote, 0xa}, 0x1c) connect$pppl2tp(r5, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x8, 0x0, 0x5, 0x0, {0xa, 0x0, 0xf9d, @private2}}}, 0x32) writev(r5, &(0x7f0000000180)=[{0x0}], 0x1) 3.950398221s ago: executing program 2 (id=6418): bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000004bfa200000000000007020000f8ffffffb70bfa0009000000000000000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb70200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r2}, 0x10) pipe2$9p(&(0x7f00000001c0), 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000480), 0x400034f, 0x2, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000280)={0x0, @loopback}, &(0x7f0000000380)=0xc) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70200000000000085000000860000009500"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) write$vga_arbiter(0xffffffffffffffff, &(0x7f00000000c0)=@other={'unlock', ' ', 'none'}, 0xc) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000300)={[{@noauto_da_alloc}, {@errors_remount}]}, 0x3, 0x445, &(0x7f0000000b00)="$eJzs28+PE1UcAPDvTLeLCLgr4g9+qKto3PhjlwVUDh7UaOIBExM96HGzuxCksIZdEyFEwRg8GWPi3Xj0X/CkF2M8mXjVuyEhhgvgqWbaGbYtbdktLUX6+SQD78282fe+nXnte/PaAEbWVPZPErE1Iv6MiIl6trnAVP2/q5fPLly7fHYhiWr13X+SWrkrl88uFEWL87bkmek0Iv0iid1t6l05feb4fKWydCrPz66e+Gh25fSZF46dmD+6dHTp5P5Dhw4emHv5pf0v9iXOrE1Xdn26vGfnWx988/bhr5rib4mjT6a6HXy6Wu1zdcO1rSGdjA2xIWxIKSKyy1Wu9f+JKMXaxZuINz8fauOAgapWq9UtnQ+fqwJ3sSSa87o8jIrigz6b/xZb6yDg1cENP4bu0mv1CVAW99V8qx8ZizQvU26Z3/bTVES8f+7f77ItBvMcAgCgyU/Z+Of5duO/NB5qKHdfvjY0GRH3R8T2iHggInZExIMRtbIPR8QjG6y/dZHkxvFPerGnwNYpG/+9kq9tNY//itFfTJby3LZa/OXkyLHK0r78NZmO8qYsP9eljp/f+OPrTscax3/ZltVfjAXzdlwc29R8zuL86vytxNzo0vmIXWPt4k+urwQkEbEzInb1WMexZ3/Y0+nYzePvog/rTNXvI56pX/9z0RJ/Iem+Pjl7T1SW9s0Wd8WNfvv9wjud6r+l+Psgu/73tr3/r8c/mTSu165svI4Lf33ZcU7T6/0/nrxXS4/n+z6ZX109NRcxnhyuN7px//61c4t8UT6Lf3pv+/6/PdZeid0Rkd3Ej0bEYxHxeN72JyLiyYjY2yX+X19/6sPe4x+sLP7FDV3/tcR4tO5pnygd/+XHpkonb4j/Wvfrf7CWms73rOf9bz3t6u1uBgAAgP+fNCK2RpLOXE+n6cxM/fvyOyLSyvLK6nNHlj8+uVj/jcBklNPiSddEw/PQuXxaX8+fj4j6VwuK4wfy58bfljbX8jMLy5XFYQcPI25Lh/6f+bs07NYBA+f3WjC69H8YXfo/jC79H0ZXm/6/eRjtAG6/dp//nw2hHcDt19L/LfvBCDH/h9Gl/8Po0v9hJK1sjpv/SL5rovhLPZ5+1yaifEc0Y2CJSO+IZkgMKDHc9yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB++S8AAP///fHg0g==") r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240), 0x3af4701e) 3.119981498s ago: executing program 0 (id=6419): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r2}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x11, 0x2, 0x4}, 0x0, 0x0) 3.118876938s ago: executing program 4 (id=6420): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r2}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x11, 0x2, 0x4}, 0x0, 0x0) 2.464487891s ago: executing program 2 (id=6421): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 2.464188571s ago: executing program 1 (id=6422): r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$tipc(0x1e, 0x5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$VT_GETMODE(0xffffffffffffffff, 0x5601, &(0x7f0000000100)) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x8, 0x3, 0x348, 0x238, 0x11, 0x148, 0x238, 0x0, 0x2d8, 0x2a8, 0x2a8, 0x2d8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1c8, 0x210, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'bridge0\x00', {0x6, 0x6, 0x40, 0x6, 0x0, 0x3, 0x5, 0x8, 0x0, 0x20}, {0x5}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0xfffffffe}}}, {{@ip={@multicast2, @remote, 0x0, 0x0, 'vlan0\x00', 'macvlan1\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a8) 2.324564262s ago: executing program 2 (id=6423): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x2008410, &(0x7f0000000580)=ANY=[], 0x1, 0x553e, &(0x7f0000000f80)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file7\x00', 0x160) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') syz_mount_image$fuse(0x0, 0x0, 0x1320022, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./bus\x00', 0x322020, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0) linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x1000) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) 2.287467645s ago: executing program 5 (id=6424): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$sock(r2, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x40881) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpgid(r3) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) timer_create(0x0, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000400)={0xa, 0x2, 0xac3, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_int(r4, 0x6, 0xa, &(0x7f0000001100)=0x804, 0x4) setsockopt$sock_int(r4, 0x1, 0x20, &(0x7f0000000080)=0xfffffffe, 0x4) sendto$inet6(r4, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 1.944940472s ago: executing program 4 (id=6425): bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000004bfa200000000000007020000f8ffffffb70bfa0009000000000000000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb70200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000280)={0x0, @loopback}, &(0x7f0000000380)=0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70200000000000085000000860000009500"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000300)={[{@noauto_da_alloc}, {@errors_remount}]}, 0x3, 0x445, &(0x7f0000000b00)="$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") r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240), 0x3af4701e) 1.929592574s ago: executing program 0 (id=6426): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r3}, 0x10) rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x8, &(0x7f0000000440)) r4 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) fallocate(r4, 0x0, 0x400000000000000, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) recvmsg(r5, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x40fd) close(r5) openat$selinux_policy(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) 1.500570409s ago: executing program 1 (id=6427): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x15}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0xe, 0x5c, &(0x7f0000000100)="e0857f9f582f0300000000001000", 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 995.648299ms ago: executing program 0 (id=6428): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000140)={0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0100000000000000560000000000000066ba2000b0e2ee"], 0x6e}) ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000001c0)={0x4, 0x9}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x8000000000000035, 0xfff, 0x0, 0x40180, 0x5, 0x14, 0xf1, 0x3, 0x7fffffffffffe, 0x5, 0x5, 0x7, 0x4000000000, 0x45, 0x4, 0xbdb], 0x1, 0x1c4213}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 874.940749ms ago: executing program 0 (id=6429): bind$unix(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xa, 0x4, 0x7fe2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0x2000000000000111, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone3(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000b00)={0xa, 0xfdfe, 0x100007, @remote, 0xa}, 0x1c) connect$pppl2tp(r5, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x8, 0x0, 0x5, 0x0, {0xa, 0x0, 0xf9d, @private2}}}, 0x32) writev(r5, &(0x7f0000000180)=[{0x0}], 0x1) 859.40648ms ago: executing program 1 (id=6430): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) syz_socket_connect_nvme_tcp() unshare(0x2040400) syz_io_uring_setup(0x75a5, &(0x7f0000000500)={0x0, 0xfffffffd, 0x0, 0xfffffffe}, &(0x7f0000000000), &(0x7f0000000000)) socket$inet_tcp(0x2, 0x1, 0x0) 806.966514ms ago: executing program 5 (id=6431): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000780)='./bus\x00', 0x41, &(0x7f0000000c00)={[{@bsdgroups}, {@resgid}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@resuid}, {@auto_da_alloc}, {@noload}, {@jqfmt_vfsv1}]}, 0x64, 0x50a, &(0x7f0000000200)="$eJzs3VFrHFsdAPD/bHZr06Y3ueqDXvB6tZW0aHeTxrbBh1pB9Kmg1vcak00I2WRDdtM2oWiKH0AQUcEnffFF8AMIUvDFRxEK+qyoKKKtPvigncvuTtI03U227TabZn8/mMw5Z2b2f86GmZ0zc5gJYGC9FxHXI+JJmqYXImI0K89lU2y1psZ6jx/dm21MSaTpzX8mkWRl25+VZPPT2WYnI+JrX474ZvJ83NrG5tJMpVJey/Kl+vJqqbaxeXFxeWahvFBemZqavDJ9dfry9ERP2nkmIq598a8/+O7PvnTtV5+586dbfz//rUa1RrLlu9vxgvL7LWw1vdD8LnZvsPaSwY6ifLOFmeF2aww9V3L/NdcJAID2Guf4H4yIT0bEhRiNof1PZwEAAIA3UPr5kfhfEpG2d6JDOQAAAPAGyTXHwCa5YjYWYCRyuWKxNYb3w3EqV6nW6p+er66vzLXGyo5FITe/WClPZGOFx6KQNPKTzfTT/KU9+amIeDsivj863MwXZ6uVuX5f/AAAAIABcXpP//8/o63+PwAAAHDMjPW7AgAAAMBrp/8PAAAAx5/+PwAAABxrX7lxozGl2++/nru9sb5UvX1xrlxbKi6vzxZnq2urxYVqdaH5zL7lgz6vUq2ufjZW1u+W6uVavVTb2Ly1XF1fqd9afOYV2AAAAMAhevvjD/6QRMTW54abU8OJ7jbtcjXgqMrvpJJs3ma3/uNbrflfDqlSwKEY6ncFgL7J97sCQN8U+l0BoO+SA5Z3HLzz22z+id7WBwAA6L3xj3a+/5/bd8ut/RcDR56dGAaX+/8wuJr3/7sdyetkAY6VgjMAGHivfP//QGn6QhUCAAB6bqQ5JblidnlvJHK5YjHiTPO1AIVkfrFSnoiItyLi96OFDzTyk80tkwP7DAAAAAAAAAAAAAAAAAAAAAAAAABAS5omkQIAAADHWkTub8mvW8/yHx89N7L3+sCJ5L+jkb0i9M6Pb/7w7ky9vjbZKP/XTnn9R1n5pX5cwQAAAICB8EIv8N/up2/34wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACglx4/uje7PR1m3H98ISLG2sXPx8nm/GQUIuLUv5PI79ouiYihHsQfbvz5SLv4SaNaOyHbxR/uQfyt+/vGj7HsW2gX/3QP4sMge9A4/lxvt//l4r3mvP3+l494Jv+yOh//Yuf4N9Rh/z/TZYx3Hv6i1DH+/Yh38u2PP9vxkw7xz3YZ/xtf39zstCz9ScR429+f5JlYpfryaqm2sXlxcXlmobxQXpmamrwyfXX68vREaX6xUs7+to3xvY/98sl+7T/VIf7YAe0/12X7///w7qMPtZKFdvHPn20T/zc/zdZ4Pn4u++37VJZuLB/fTm+10ru9+/Pfvbtf++c6tP+g///5Ltt/4avf+XOXqwIAh6C2sbk0U6mU145totFLPwLVkDiCiW/39APTNE0b+9QrfE4SR+FraSb6fWQCAAB67elJf79rAgAAAAAAAAAAAAAAAAAAAIPrMB4ntjfm1k4q6cUjtAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeuL9AAAA//+GAdlV") 724.650191ms ago: executing program 4 (id=6432): gettid() inotify_add_watch(0xffffffffffffffff, 0x0, 0x510004b4) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcc2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) setitimer(0x1, 0x0, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 406.980746ms ago: executing program 2 (id=6433): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000000), &(0x7f00000002c0)}, 0x20) 236.51414ms ago: executing program 2 (id=6434): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 180.636315ms ago: executing program 2 (id=6435): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r2}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x11, 0x2, 0x4}, 0x0, 0x0) 0s ago: executing program 0 (id=6436): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) syz_socket_connect_nvme_tcp() unshare(0x2040400) r3 = syz_io_uring_setup(0x75a5, &(0x7f0000000500)={0x0, 0xfffffffd, 0x0, 0xfffffffe}, &(0x7f0000000000), &(0x7f0000000000)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000100)=[r4], 0x1) io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) socket$nl_route(0x10, 0x3, 0x0) kernel console output (not intermixed with test programs): 70] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 797.070786][ T1970] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 797.088486][ T1970] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 797.104150][ T1970] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 797.119809][ T1970] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 797.137175][ T1970] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 797.154673][T17614] loop5: detected capacity change from 0 to 40427 [ 797.156480][T17616] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 797.170714][T17614] F2FS-fs (loop5): Unrecognized mount option "whint_mode=off" or missing value [ 797.392321][T17621] loop1: detected capacity change from 0 to 256 [ 797.441793][ T2014] device bridge_slave_1 left promiscuous mode [ 797.453669][ T2014] bridge0: port 2(bridge_slave_1) entered disabled state [ 797.461268][ T2014] device bridge_slave_0 left promiscuous mode [ 797.472059][ T2014] bridge0: port 1(bridge_slave_0) entered disabled state [ 797.483759][ T2014] device veth1_macvtap left promiscuous mode [ 797.503550][ T2014] device veth0_vlan left promiscuous mode [ 797.606616][T17629] loop0: detected capacity change from 0 to 128 [ 797.653549][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 797.653564][ T28] audit: type=1326 audit(1756627172.396:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17622 comm="syz.2.5918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0770d8ebe9 code=0x7ffc0000 [ 798.087263][T17627] loop5: detected capacity change from 0 to 512 [ 798.108350][ T28] audit: type=1326 audit(1756627172.396:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17622 comm="syz.2.5918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0770d8ebe9 code=0x7ffc0000 [ 798.131988][ T28] audit: type=1326 audit(1756627172.406:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17622 comm="syz.2.5918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0770d8ebe9 code=0x7ffc0000 [ 798.158589][ T28] audit: type=1326 audit(1756627172.406:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17622 comm="syz.2.5918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0770d8ebe9 code=0x7ffc0000 [ 799.005256][ T28] audit: type=1326 audit(1756627172.406:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17622 comm="syz.2.5918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0770d8ebe9 code=0x7ffc0000 [ 799.028778][T17627] EXT4-fs error (device loop5): ext4_orphan_get:1400: inode #15: comm syz.5.5915: casefold flag without casefold feature [ 799.041833][T17627] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.5915: couldn't read orphan inode 15 (err -117) [ 799.054180][T17627] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 799.076406][T17641] loop1: detected capacity change from 0 to 1024 [ 799.087290][T17645] loop0: detected capacity change from 0 to 256 [ 799.109044][T17641] Quota error (device loop1): do_check_range: Getting block 64 out of range 1-5 [ 799.129695][T17641] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 799.139498][T17641] EXT4-fs error (device loop1): ext4_acquire_dquot:6801: comm syz.1.5921: Failed to acquire dquot type 0 [ 799.153717][T17641] EXT4-fs error (device loop1): mb_free_blocks:1815: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 799.198694][T17641] EXT4-fs error (device loop1): ext4_do_update_inode:5256: inode #13: comm syz.1.5921: corrupted inode contents [ 799.229638][T11238] EXT4-fs (loop5): unmounting filesystem. [ 799.231205][T17639] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 799.400003][T17641] EXT4-fs error (device loop1): ext4_dirty_inode:6121: inode #13: comm syz.1.5921: mark_inode_dirty error [ 799.534136][T17641] EXT4-fs error (device loop1): ext4_do_update_inode:5256: inode #13: comm syz.1.5921: corrupted inode contents [ 799.552916][T17641] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #13: comm syz.1.5921: mark_inode_dirty error [ 799.564690][T17641] EXT4-fs error (device loop1): ext4_do_update_inode:5256: inode #13: comm syz.1.5921: corrupted inode contents [ 799.576878][T17641] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 799.585751][T17641] EXT4-fs error (device loop1): ext4_do_update_inode:5256: inode #13: comm syz.1.5921: corrupted inode contents [ 799.604888][T17641] EXT4-fs error (device loop1): ext4_truncate:4314: inode #13: comm syz.1.5921: mark_inode_dirty error [ 799.616425][T17641] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 799.626001][T17641] EXT4-fs (loop1): 1 truncate cleaned up [ 799.631688][T17641] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 800.492216][T17654] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 800.506267][T17641] EXT4-fs (loop1): re-mounted. Quota mode: writeback. [ 800.520604][ T9784] EXT4-fs (loop1): unmounting filesystem. [ 800.528182][T17653] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 800.557576][T17659] syz.5.5928[17659] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 800.557651][T17659] syz.5.5928[17659] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 800.583995][T17659] netlink: 96 bytes leftover after parsing attributes in process `syz.5.5928'. [ 800.663861][T17662] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 800.672181][T17662] SELinux: failed to load policy [ 801.604696][T17670] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 801.683265][T17675] loop2: detected capacity change from 0 to 512 [ 801.714749][T17675] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 801.986349][T17675] EXT4-fs (loop2): 1 truncate cleaned up [ 801.992115][T17675] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 802.704531][T17685] loop1: detected capacity change from 0 to 128 [ 802.713739][T10323] EXT4-fs (loop2): unmounting filesystem. [ 803.112621][T17689] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 803.377551][T17688] loop2: detected capacity change from 0 to 40427 [ 803.401712][T17688] F2FS-fs (loop2): invalid crc value [ 803.412689][T17688] F2FS-fs (loop2): Found nat_bits in checkpoint [ 803.517515][T17688] F2FS-fs (loop2): Start checkpoint disabled! [ 803.527961][T17699] loop5: detected capacity change from 0 to 512 [ 804.373137][T17699] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 804.617324][T17688] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 804.629527][T17699] EXT4-fs (loop5): orphan cleanup on readonly fs [ 804.638722][T17699] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.5937: bg 0: block 248: padding at end of block bitmap is not set [ 804.654437][T17699] Quota error (device loop5): write_blk: dquota write failed [ 804.661969][T17699] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 804.671957][T17699] EXT4-fs error (device loop5): ext4_acquire_dquot:6801: comm syz.5.5937: Failed to acquire dquot type 1 [ 804.685517][T17699] EXT4-fs (loop5): 1 truncate cleaned up [ 804.692949][T17699] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 804.992460][T17710] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 805.951245][T11238] EXT4-fs (loop5): unmounting filesystem. [ 805.957837][T17708] syz.0.5941[17708] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 805.957914][T17708] syz.0.5941[17708] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 805.980174][T17708] syz.0.5941[17708] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 805.992107][T17708] syz.0.5941[17708] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 806.004457][T17708] netlink: 96 bytes leftover after parsing attributes in process `syz.0.5941'. [ 806.564976][T17722] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 806.987758][T17728] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 807.360120][T17734] loop5: detected capacity change from 0 to 512 [ 807.377435][T17734] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 807.459470][T17734] EXT4-fs (loop5): orphan cleanup on readonly fs [ 807.469236][T17734] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.5949: bg 0: block 248: padding at end of block bitmap is not set [ 807.486524][T17734] Quota error (device loop5): write_blk: dquota write failed [ 807.494059][T17734] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 807.504146][T17734] EXT4-fs error (device loop5): ext4_acquire_dquot:6801: comm syz.5.5949: Failed to acquire dquot type 1 [ 807.518795][T17734] EXT4-fs (loop5): 1 truncate cleaned up [ 807.526242][T17734] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 807.970084][T17715] loop4: detected capacity change from 0 to 40427 [ 808.002255][T17715] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 808.029809][T17715] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 808.501004][T17715] F2FS-fs (loop4): Found nat_bits in checkpoint [ 808.550948][T17715] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 808.558124][T17715] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 808.631718][T11238] EXT4-fs (loop5): unmounting filesystem. [ 808.665131][T17715] overlayfs: missing 'workdir' [ 808.708946][T17746] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 808.768490][T17751] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5951'. [ 809.022836][T17759] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 809.594481][T17761] loop1: detected capacity change from 0 to 512 [ 809.624298][T17761] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 809.822534][T17761] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e12c, mo2=0002] [ 809.830921][T17761] System zones: 1-12 [ 809.866149][T17761] EXT4-fs (loop1): orphan cleanup on readonly fs [ 809.880594][T17761] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.5954: bg 0: block 361: padding at end of block bitmap is not set [ 809.896932][T17761] EXT4-fs (loop1): Remounting filesystem read-only [ 809.903588][T17761] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 809.914405][T17761] EXT4-fs (loop1): Remounting filesystem read-only [ 809.921016][T17761] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.5954: invalid indirect mapped block 12 (level 1) [ 809.935927][T17761] EXT4-fs (loop1): Remounting filesystem read-only [ 809.942547][T17761] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.5954: invalid indirect mapped block 2 (level 2) [ 809.958404][T17761] EXT4-fs (loop1): Remounting filesystem read-only [ 809.965886][T17761] EXT4-fs (loop1): 1 truncate cleaned up [ 809.971613][T17761] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 811.004815][ T9784] EXT4-fs (loop1): unmounting filesystem. [ 811.078306][T17778] loop0: detected capacity change from 0 to 256 [ 811.172688][T17780] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 811.960172][T17783] loop1: detected capacity change from 0 to 512 [ 811.970839][T17783] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 812.083992][T17786] loop5: detected capacity change from 0 to 512 [ 812.197881][T17786] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 812.927557][T17783] EXT4-fs (loop1): orphan cleanup on readonly fs [ 813.084297][T17783] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.5961: bg 0: block 248: padding at end of block bitmap is not set [ 813.336956][T17783] Quota error (device loop1): write_blk: dquota write failed [ 813.344797][T17783] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 813.361165][T17783] EXT4-fs error (device loop1): ext4_acquire_dquot:6801: comm syz.1.5961: Failed to acquire dquot type 1 [ 813.466642][T17783] EXT4-fs (loop1): 1 truncate cleaned up [ 813.608032][T17783] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 816.976544][T17786] EXT4-fs: error -4 creating inode table initialization thread [ 816.984262][T17786] EXT4-fs (loop5): mount failed [ 817.146980][ T9784] EXT4-fs (loop1): unmounting filesystem. [ 817.223827][T17801] loop5: detected capacity change from 0 to 256 [ 817.234283][T17803] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5965'. [ 817.661706][T17805] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 817.681482][T17807] loop1: detected capacity change from 0 to 512 [ 818.516106][T17807] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 818.525379][T17807] ext4 filesystem being mounted at /543/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 818.587638][T17807] No source specified [ 818.672579][T17815] loop4: detected capacity change from 0 to 512 [ 819.192339][T17820] tipc: Enabling of bearer rejected, failed to enable media [ 820.046591][T17815] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.5969: casefold flag without casefold feature [ 820.102053][T17815] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.5969: couldn't read orphan inode 15 (err -117) [ 820.116277][ T9784] EXT4-fs (loop1): unmounting filesystem. [ 820.162464][T17815] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 820.204924][T17829] loop1: detected capacity change from 0 to 512 [ 820.244099][T17816] loop0: detected capacity change from 0 to 40427 [ 820.251628][T17816] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 820.273007][T17829] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.5973: casefold flag without casefold feature [ 820.279819][T17816] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 820.296967][T17585] EXT4-fs (loop4): unmounting filesystem. [ 820.304961][T17829] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.5973: couldn't read orphan inode 15 (err -117) [ 820.338186][T17829] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 820.357350][T17832] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 820.554833][T17816] F2FS-fs (loop0): Found nat_bits in checkpoint [ 820.562074][T17838] loop4: detected capacity change from 0 to 128 [ 820.608683][ T9784] EXT4-fs (loop1): unmounting filesystem. [ 820.619048][T17816] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 820.626296][T17816] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 820.925099][T17844] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 821.160619][T17848] loop0: detected capacity change from 0 to 256 [ 821.929682][T17851] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 822.014821][T17858] loop0: detected capacity change from 0 to 1024 [ 822.037439][T17858] Quota error (device loop0): do_check_range: Getting block 64 out of range 1-5 [ 822.047461][T17858] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 822.073517][T17858] EXT4-fs error (device loop0): ext4_acquire_dquot:6801: comm syz.0.5980: Failed to acquire dquot type 0 [ 822.185705][T17858] EXT4-fs error (device loop0): mb_free_blocks:1815: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 822.187594][T17866] loop1: detected capacity change from 0 to 256 [ 822.200346][T17858] EXT4-fs error (device loop0): ext4_do_update_inode:5256: inode #13: comm syz.0.5980: corrupted inode contents [ 822.313096][T17858] EXT4-fs error (device loop0): ext4_dirty_inode:6121: inode #13: comm syz.0.5980: mark_inode_dirty error [ 822.325475][T17858] EXT4-fs error (device loop0): ext4_do_update_inode:5256: inode #13: comm syz.0.5980: corrupted inode contents [ 822.338190][T17858] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #13: comm syz.0.5980: mark_inode_dirty error [ 822.350375][T17858] EXT4-fs error (device loop0): ext4_do_update_inode:5256: inode #13: comm syz.0.5980: corrupted inode contents [ 822.363757][T17858] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 822.372774][ T28] audit: type=1326 audit(1756627197.056:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17862 comm="syz.2.5984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0770d8ebe9 code=0x7ffc0000 [ 822.402333][ T28] audit: type=1326 audit(1756627197.056:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17862 comm="syz.2.5984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0770d8ebe9 code=0x7ffc0000 [ 822.420192][T17858] EXT4-fs error (device loop0): ext4_do_update_inode:5256: inode #13: comm syz.0.5980: corrupted inode contents [ 822.432860][T17866] FAT-fs (loop1): Directory bread(block 64) failed [ 822.444661][T17866] FAT-fs (loop1): Directory bread(block 65) failed [ 822.451278][T17866] FAT-fs (loop1): Directory bread(block 66) failed [ 822.458472][T17866] FAT-fs (loop1): Directory bread(block 67) failed [ 822.465305][ T28] audit: type=1326 audit(1756627197.056:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17862 comm="syz.2.5984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0770d8ebe9 code=0x7ffc0000 [ 822.491375][T17866] FAT-fs (loop1): Directory bread(block 68) failed [ 822.502574][T17858] EXT4-fs error (device loop0): ext4_truncate:4314: inode #13: comm syz.0.5980: mark_inode_dirty error [ 822.503121][T17866] FAT-fs (loop1): Directory bread(block 69) failed [ 822.523207][ T28] audit: type=1326 audit(1756627197.056:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17862 comm="syz.2.5984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0770d8ebe9 code=0x7ffc0000 [ 822.547604][T17866] FAT-fs (loop1): Directory bread(block 70) failed [ 822.548988][T17858] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 822.554157][T17866] FAT-fs (loop1): Directory bread(block 71) failed [ 822.554203][T17866] FAT-fs (loop1): Directory bread(block 72) failed [ 822.554220][T17866] FAT-fs (loop1): Directory bread(block 73) failed [ 822.604286][ T28] audit: type=1326 audit(1756627197.056:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17862 comm="syz.2.5984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0770d8ebe9 code=0x7ffc0000 [ 822.671231][T17858] EXT4-fs (loop0): 1 truncate cleaned up [ 822.692138][T17858] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 822.803569][T17858] EXT4-fs (loop0): re-mounted. Quota mode: writeback. [ 822.860025][T17537] EXT4-fs (loop0): unmounting filesystem. [ 822.867393][T17872] loop4: detected capacity change from 0 to 40427 [ 822.887619][T17872] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 822.976023][T17872] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 823.122078][T17872] F2FS-fs (loop4): Found nat_bits in checkpoint [ 823.382227][T17872] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 823.389291][T17872] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 823.477176][T17888] loop5: detected capacity change from 0 to 256 [ 823.496059][T17872] overlayfs: missing 'lowerdir' [ 823.571802][T17891] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 823.796650][T17896] loop5: detected capacity change from 0 to 128 [ 824.031717][T17904] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 824.427733][T17907] loop2: detected capacity change from 0 to 128 [ 825.117314][T17919] loop0: detected capacity change from 0 to 40427 [ 825.124882][T17919] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 825.132838][T17919] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 825.184518][T17919] F2FS-fs (loop0): Found nat_bits in checkpoint [ 825.318198][T17919] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 825.357454][T17919] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 825.399806][T17924] loop4: detected capacity change from 0 to 40427 [ 825.407146][T17924] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 825.415123][T17924] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 825.464632][T17924] F2FS-fs (loop4): Found nat_bits in checkpoint [ 825.718852][T17924] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 825.726521][T17924] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 825.781925][ T737] usb 3-1: new full-speed USB device number 41 using dummy_hcd [ 825.797113][T17947] loop5: detected capacity change from 0 to 128 [ 825.813157][T17924] overlayfs: missing 'lowerdir' [ 826.456921][ T737] usb 3-1: config 135 has an invalid interface number: 230 but max is 0 [ 826.465898][ T737] usb 3-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 826.476711][ T737] usb 3-1: config 135 has no interface number 0 [ 826.483203][ T737] usb 3-1: too many endpoints for config 135 interface 230 altsetting 126: 53, using maximum allowed: 30 [ 826.494655][ T737] usb 3-1: config 135 interface 230 altsetting 126 has 0 endpoint descriptors, different from the interface descriptor's value: 53 [ 826.508235][ T737] usb 3-1: config 135 interface 230 has no altsetting 0 [ 826.520061][ T737] usb 3-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 826.530374][T17956] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 826.555353][T17957] loop4: detected capacity change from 0 to 256 [ 826.564222][ T737] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 826.573540][ T737] usb 3-1: Product: syz [ 826.577821][ T737] usb 3-1: Manufacturer: syz [ 826.748996][T17957] FAT-fs (loop4): Directory bread(block 64) failed [ 826.755765][T17957] FAT-fs (loop4): Directory bread(block 65) failed [ 826.764426][T17957] FAT-fs (loop4): Directory bread(block 66) failed [ 826.771131][T17957] FAT-fs (loop4): Directory bread(block 67) failed [ 826.777917][T17957] FAT-fs (loop4): Directory bread(block 68) failed [ 826.784625][T17957] FAT-fs (loop4): Directory bread(block 69) failed [ 826.791336][T17957] FAT-fs (loop4): Directory bread(block 70) failed [ 826.797989][T17957] FAT-fs (loop4): Directory bread(block 71) failed [ 826.804755][T17957] FAT-fs (loop4): Directory bread(block 72) failed [ 826.811338][T17957] FAT-fs (loop4): Directory bread(block 73) failed [ 827.067829][ T737] usb 3-1: SerialNumber: syz [ 827.667474][T17960] loop0: detected capacity change from 0 to 128 [ 827.679002][T17962] loop5: detected capacity change from 0 to 256 [ 827.687249][ T737] usb 3-1: Found UVC 0.00 device syz (18ec:3288) [ 827.768994][ T737] usb 3-1: No valid video chain found. [ 827.911672][ T737] usb 3-1: USB disconnect, device number 41 [ 828.463456][ T28] audit: type=1326 audit(1756627203.216:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17964 comm="syz.4.6015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2071b8ebe9 code=0x7ffc0000 [ 828.514708][ T28] audit: type=1326 audit(1756627203.216:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17964 comm="syz.4.6015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2071b8ebe9 code=0x7ffc0000 [ 828.588929][ T28] audit: type=1326 audit(1756627203.216:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17964 comm="syz.4.6015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2071b8ebe9 code=0x7ffc0000 [ 828.899882][T17978] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 828.956557][ T28] audit: type=1326 audit(1756627203.216:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17964 comm="syz.4.6015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2071b8ebe9 code=0x7ffc0000 [ 829.014136][ T28] audit: type=1326 audit(1756627203.216:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17964 comm="syz.4.6015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2071b8ebe9 code=0x7ffc0000 [ 829.038172][ T28] audit: type=1326 audit(1756627203.216:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17964 comm="syz.4.6015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7f2071b8ebe9 code=0x7ffc0000 [ 829.065255][ T28] audit: type=1326 audit(1756627203.216:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17964 comm="syz.4.6015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2071b8ebe9 code=0x7ffc0000 [ 829.089525][T17977] loop0: detected capacity change from 0 to 40427 [ 829.109634][T17977] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 829.117729][ T28] audit: type=1326 audit(1756627203.216:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17964 comm="syz.4.6015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2071b8ebe9 code=0x7ffc0000 [ 829.125796][T17977] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 829.202462][T17977] F2FS-fs (loop0): Found nat_bits in checkpoint [ 829.296251][T17977] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 829.362197][T17977] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 830.305805][T17984] loop1: detected capacity change from 0 to 40427 [ 830.385210][T17997] overlayfs: unrecognized mount option "/" or missing value [ 830.572773][T17984] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 830.596275][T17984] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 830.629441][T17984] F2FS-fs (loop1): Found nat_bits in checkpoint [ 830.685725][T17984] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 830.693806][T17984] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 830.750422][T17984] overlayfs: missing 'lowerdir' [ 830.899727][T18014] loop4: detected capacity change from 0 to 512 [ 830.908459][T18014] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 830.985308][T18014] EXT4-fs (loop4): orphan cleanup on readonly fs [ 830.996269][T18014] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.6026: bg 0: block 248: padding at end of block bitmap is not set [ 831.013032][T18014] Quota error (device loop4): write_blk: dquota write failed [ 831.020674][T18014] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 831.030700][T18014] EXT4-fs error (device loop4): ext4_acquire_dquot:6801: comm syz.4.6026: Failed to acquire dquot type 1 [ 831.045083][T18014] EXT4-fs (loop4): 1 truncate cleaned up [ 831.052481][T18014] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 831.978016][T18024] loop5: detected capacity change from 0 to 512 [ 831.986177][T18024] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 832.029007][T17585] EXT4-fs (loop4): unmounting filesystem. [ 832.087018][T18024] EXT4-fs (loop5): orphan cleanup on readonly fs [ 832.096216][T18024] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.6029: bg 0: block 248: padding at end of block bitmap is not set [ 832.112242][T18024] EXT4-fs error (device loop5): ext4_acquire_dquot:6801: comm syz.5.6029: Failed to acquire dquot type 1 [ 832.126072][T18024] EXT4-fs (loop5): 1 truncate cleaned up [ 832.132748][T18024] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 833.672779][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 833.676661][ T28] audit: type=1326 audit(1756627208.426:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18036 comm="syz.4.6032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2071b8ebe9 code=0x7ffc0000 [ 833.730462][T18042] loop0: detected capacity change from 0 to 1024 [ 833.743494][ T28] audit: type=1326 audit(1756627208.426:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18036 comm="syz.4.6032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2071b8ebe9 code=0x7ffc0000 [ 833.768864][ T28] audit: type=1326 audit(1756627208.426:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18036 comm="syz.4.6032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2071b8ebe9 code=0x7ffc0000 [ 833.793431][T11238] EXT4-fs (loop5): unmounting filesystem. [ 833.799088][ T28] audit: type=1326 audit(1756627208.426:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18036 comm="syz.4.6032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2071b8ebe9 code=0x7ffc0000 [ 833.868489][ T28] audit: type=1326 audit(1756627208.426:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18036 comm="syz.4.6032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2071b8ebe9 code=0x7ffc0000 [ 833.895124][T18042] Quota error (device loop0): do_check_range: Getting block 64 out of range 1-5 [ 833.923855][T18042] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 833.956321][T18042] EXT4-fs error (device loop0): ext4_acquire_dquot:6801: comm syz.0.6033: Failed to acquire dquot type 0 [ 833.992181][ T28] audit: type=1326 audit(1756627208.426:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18036 comm="syz.4.6032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7f2071b8ebe9 code=0x7ffc0000 [ 834.022710][T18042] EXT4-fs error (device loop0): mb_free_blocks:1815: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 834.046730][T18048] loop5: detected capacity change from 0 to 40427 [ 834.062754][T18048] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 834.070622][T18042] EXT4-fs error (device loop0): ext4_do_update_inode:5256: inode #13: comm syz.0.6033: corrupted inode contents [ 834.081898][ T28] audit: type=1326 audit(1756627208.426:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18036 comm="syz.4.6032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2071b8ebe9 code=0x7ffc0000 [ 834.141911][ T28] audit: type=1326 audit(1756627208.426:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18036 comm="syz.4.6032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2071b8ebe9 code=0x7ffc0000 [ 834.151919][T18048] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 834.174810][T18042] EXT4-fs error (device loop0): ext4_dirty_inode:6121: inode #13: comm syz.0.6033: mark_inode_dirty error [ 834.206715][T18042] EXT4-fs error (device loop0): ext4_do_update_inode:5256: inode #13: comm syz.0.6033: corrupted inode contents [ 834.218958][T18042] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #13: comm syz.0.6033: mark_inode_dirty error [ 834.230519][T18042] EXT4-fs error (device loop0): ext4_do_update_inode:5256: inode #13: comm syz.0.6033: corrupted inode contents [ 834.242743][T18042] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 834.289361][T18048] F2FS-fs (loop5): Found nat_bits in checkpoint [ 834.306387][T18042] EXT4-fs error (device loop0): ext4_do_update_inode:5256: inode #13: comm syz.0.6033: corrupted inode contents [ 834.323767][T18042] EXT4-fs error (device loop0): ext4_truncate:4314: inode #13: comm syz.0.6033: mark_inode_dirty error [ 834.417229][T18059] loop4: detected capacity change from 0 to 512 [ 834.433153][T18059] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 834.444406][T18042] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 834.523908][T18059] EXT4-fs (loop4): 1 truncate cleaned up [ 834.529673][T18059] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 834.853981][T18042] EXT4-fs (loop0): 1 truncate cleaned up [ 834.898567][T18042] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 835.327277][T17585] EXT4-fs (loop4): unmounting filesystem. [ 835.333646][T18042] EXT4-fs (loop0): re-mounted. Quota mode: writeback. [ 835.340974][T18048] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 835.350529][T17537] EXT4-fs (loop0): unmounting filesystem. [ 835.357352][T18048] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 835.476215][T18071] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 836.089452][T18081] netlink: 96 bytes leftover after parsing attributes in process `syz.1.6043'. [ 836.769023][T18089] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 837.500004][T18093] loop5: detected capacity change from 0 to 256 [ 837.675119][T18091] loop0: detected capacity change from 0 to 40427 [ 837.686645][T18091] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 837.702657][T18091] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 837.762129][ T3870] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 837.772798][T18091] F2FS-fs (loop0): Found nat_bits in checkpoint [ 837.821168][T18091] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 837.829470][T18091] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 837.884920][T18091] overlayfs: missing 'lowerdir' [ 837.973162][ T3870] usb 5-1: config 0 has an invalid interface number: 248 but max is 0 [ 837.985837][ T3870] usb 5-1: config 0 has no interface number 0 [ 838.005749][ T3870] usb 5-1: New USB device found, idVendor=1b3d, idProduct=9316, bcdDevice= 4.3d [ 838.039303][ T3870] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 838.071557][ T3870] usb 5-1: config 0 descriptor?? [ 838.088050][ T3870] ftdi_sio 5-1:0.248: FTDI USB Serial Device converter detected [ 838.097997][ T3870] ftdi_sio ttyUSB0: unknown device type: 0x43d [ 838.299792][ T389] usb 5-1: USB disconnect, device number 31 [ 838.306061][ T389] ftdi_sio 5-1:0.248: device disconnected [ 838.716004][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 838.716045][ T28] audit: type=1326 audit(1756627213.456:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18124 comm="syz.1.6057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57e838ebe9 code=0x7ffc0000 [ 838.839368][ T28] audit: type=1326 audit(1756627213.456:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18124 comm="syz.1.6057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57e838ebe9 code=0x7ffc0000 [ 838.869498][ T28] audit: type=1326 audit(1756627213.466:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18124 comm="syz.1.6057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f57e838ebe9 code=0x7ffc0000 [ 838.893537][ T28] audit: type=1326 audit(1756627213.466:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18124 comm="syz.1.6057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57e838ebe9 code=0x7ffc0000 [ 838.922370][ T28] audit: type=1326 audit(1756627213.466:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18124 comm="syz.1.6057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57e838ebe9 code=0x7ffc0000 [ 839.363503][T18147] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 839.638789][T18148] loop1: detected capacity change from 0 to 512 [ 839.782905][T18148] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 839.896507][T18148] EXT4-fs (loop1): orphan cleanup on readonly fs [ 839.905631][T18148] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.6063: bg 0: block 248: padding at end of block bitmap is not set [ 839.922172][T18148] Quota error (device loop1): write_blk: dquota write failed [ 839.929605][T18148] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 839.939599][T18148] EXT4-fs error (device loop1): ext4_acquire_dquot:6801: comm syz.1.6063: Failed to acquire dquot type 1 [ 839.954033][T18148] EXT4-fs (loop1): 1 truncate cleaned up [ 839.963407][T18148] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 840.549599][T18163] loop5: detected capacity change from 0 to 256 [ 841.704259][T18169] loop2: detected capacity change from 0 to 512 [ 842.061117][T18167] loop0: detected capacity change from 0 to 128 [ 842.069471][ T9784] EXT4-fs (loop1): unmounting filesystem. [ 842.140990][T18169] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 842.149980][T18169] ext4 filesystem being mounted at /498/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 842.201683][T18168] No source specified [ 842.821286][T10323] EXT4-fs (loop2): unmounting filesystem. [ 843.763722][ T28] audit: type=1326 audit(1756627218.516:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18183 comm="syz.2.6073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0770d8ebe9 code=0x7ffc0000 [ 843.795526][ T28] audit: type=1326 audit(1756627218.516:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18183 comm="syz.2.6073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0770d8ebe9 code=0x7ffc0000 [ 844.521926][ T28] audit: type=1326 audit(1756627218.516:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18183 comm="syz.2.6073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0770d8ebe9 code=0x7ffc0000 [ 844.550223][ T28] audit: type=1326 audit(1756627218.516:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18183 comm="syz.2.6073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0770d8ebe9 code=0x7ffc0000 [ 844.574126][ T28] audit: type=1326 audit(1756627218.516:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18183 comm="syz.2.6073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0770d8ebe9 code=0x7ffc0000 [ 845.070471][T18205] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 846.361928][T18223] loop2: detected capacity change from 0 to 256 [ 846.943313][T18226] loop4: detected capacity change from 0 to 512 [ 846.949923][T18226] EXT4-fs: Ignoring removed nobh option [ 846.961339][T18226] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 846.981547][T18204] loop1: detected capacity change from 0 to 40427 [ 847.002135][T18226] EXT4-fs (loop4): orphan cleanup on readonly fs [ 847.008889][T18226] Quota error (device loop4): v2_read_file_info: Free block number 1 out of range (1, 6). [ 847.018867][T18226] EXT4-fs warning (device loop4): ext4_enable_quotas:7053: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 847.033710][T18226] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 847.041653][T18226] EXT4-fs (loop4): 1 truncate cleaned up [ 847.047693][T18226] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 847.172333][T18204] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 847.200298][T18204] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 847.355767][T18204] F2FS-fs (loop1): Found nat_bits in checkpoint [ 847.400568][T17585] EXT4-fs (loop4): unmounting filesystem. [ 847.405642][T18204] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 847.413561][T18204] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 847.504468][ T9784] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 847.504491][ T9784] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 847.527589][ T9784] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 847.546621][ T9784] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 847.555149][ T9784] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 847.563245][ T9784] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 847.570906][ T9784] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 847.677809][T18251] loop4: detected capacity change from 0 to 256 [ 847.747555][T18251] FAT-fs (loop4): Directory bread(block 64) failed [ 847.754575][T18251] FAT-fs (loop4): Directory bread(block 65) failed [ 847.761410][T18251] FAT-fs (loop4): Directory bread(block 66) failed [ 847.787897][T18251] FAT-fs (loop4): Directory bread(block 67) failed [ 847.823743][T18251] FAT-fs (loop4): Directory bread(block 68) failed [ 847.858736][T18251] FAT-fs (loop4): Directory bread(block 69) failed [ 847.899139][T18251] FAT-fs (loop4): Directory bread(block 70) failed [ 847.905973][T18251] FAT-fs (loop4): Directory bread(block 71) failed [ 847.912838][T18251] FAT-fs (loop4): Directory bread(block 72) failed [ 847.919476][T18251] FAT-fs (loop4): Directory bread(block 73) failed [ 848.312862][T18259] netlink: 'syz.0.6094': attribute type 27 has an invalid length. [ 849.233854][T18275] loop1: detected capacity change from 0 to 512 [ 849.240499][T18275] EXT4-fs: Ignoring removed nobh option [ 849.258048][T18275] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 849.296578][T18275] EXT4-fs (loop1): orphan cleanup on readonly fs [ 849.304536][T18275] Quota error (device loop1): v2_read_file_info: Free block number 1 out of range (1, 6). [ 849.315239][T18275] EXT4-fs warning (device loop1): ext4_enable_quotas:7053: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 849.330267][T18275] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 849.338763][T18275] EXT4-fs (loop1): 1 truncate cleaned up [ 849.344514][T18275] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 849.871018][T18283] loop2: detected capacity change from 0 to 128 [ 849.984916][ T9784] EXT4-fs (loop1): unmounting filesystem. [ 850.675941][T18297] overlayfs: unrecognized mount option "/" or missing value [ 850.723137][T18296] tipc: Started in network mode [ 850.728061][T18296] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 850.737223][T18296] tipc: Enabled bearer , priority 10 [ 851.853208][T16758] tipc: Node number set to 4269801488 [ 851.885461][T18304] loop2: detected capacity change from 0 to 40427 [ 851.901225][T18304] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 851.916409][T18304] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 851.927105][T18304] F2FS-fs (loop2): Found nat_bits in checkpoint [ 851.949333][T18304] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 851.956497][T18304] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 851.975699][T18304] overlayfs: missing 'lowerdir' [ 852.036147][T18320] loop5: detected capacity change from 0 to 256 [ 852.090074][T18320] FAT-fs (loop5): Directory bread(block 64) failed [ 852.098716][T18320] FAT-fs (loop5): Directory bread(block 65) failed [ 852.105769][T18320] FAT-fs (loop5): Directory bread(block 66) failed [ 852.112556][T18320] FAT-fs (loop5): Directory bread(block 67) failed [ 852.119197][T18320] FAT-fs (loop5): Directory bread(block 68) failed [ 852.126959][T18320] FAT-fs (loop5): Directory bread(block 69) failed [ 852.140018][T18320] FAT-fs (loop5): Directory bread(block 70) failed [ 852.155680][T18320] FAT-fs (loop5): Directory bread(block 71) failed [ 852.162374][T18320] FAT-fs (loop5): Directory bread(block 72) failed [ 852.169006][T18320] FAT-fs (loop5): Directory bread(block 73) failed [ 852.503848][T18329] loop2: detected capacity change from 0 to 256 [ 852.920060][T18332] loop2: detected capacity change from 0 to 40427 [ 852.929095][T18332] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 852.937059][T18332] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 852.971487][T18339] loop1: detected capacity change from 0 to 128 [ 852.987732][T18332] F2FS-fs (loop2): Found nat_bits in checkpoint [ 853.023476][T18332] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 853.030844][T18332] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 853.091060][T18332] overlayfs: failed to resolve './file0': -2 [ 853.795126][T18355] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 853.902993][ T28] audit: type=1326 audit(1756627228.506:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18349 comm="syz.0.6122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdced58ebe9 code=0x7ffc0000 [ 853.977057][ T28] audit: type=1326 audit(1756627228.506:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18349 comm="syz.0.6122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdced58ebe9 code=0x7ffc0000 [ 854.005284][T18359] loop2: detected capacity change from 0 to 512 [ 854.015346][T18359] EXT4-fs: Ignoring removed nobh option [ 854.021439][ T28] audit: type=1326 audit(1756627228.516:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18349 comm="syz.0.6122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdced58ebe9 code=0x7ffc0000 [ 854.045669][T18359] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 854.050050][ T28] audit: type=1326 audit(1756627228.516:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18349 comm="syz.0.6122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdced58ebe9 code=0x7ffc0000 [ 854.088880][T18359] EXT4-fs (loop2): orphan cleanup on readonly fs [ 854.097878][ T28] audit: type=1326 audit(1756627228.516:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18349 comm="syz.0.6122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdced58ebe9 code=0x7ffc0000 [ 854.112619][T18359] Quota error (device loop2): v2_read_file_info: Free block number 1 out of range (1, 6). [ 854.121619][ T28] audit: type=1326 audit(1756627228.516:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18349 comm="syz.0.6122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7fdced58ebe9 code=0x7ffc0000 [ 854.155210][ T28] audit: type=1326 audit(1756627228.516:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18349 comm="syz.0.6122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdced58ebe9 code=0x7ffc0000 [ 854.178685][ T28] audit: type=1326 audit(1756627228.526:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18349 comm="syz.0.6122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdced58ebe9 code=0x7ffc0000 [ 854.202481][T18359] EXT4-fs warning (device loop2): ext4_enable_quotas:7053: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 854.219601][T18359] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 854.232118][T18359] EXT4-fs (loop2): 1 truncate cleaned up [ 854.248156][T18359] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 854.494310][T18371] loop0: detected capacity change from 0 to 256 [ 855.005239][T18371] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 855.362934][T18363] loop1: detected capacity change from 0 to 40427 [ 855.392157][T18363] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 855.410179][T18363] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 855.503274][T18363] F2FS-fs (loop1): Found nat_bits in checkpoint [ 855.807357][T18363] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 855.818678][T18363] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 855.879163][T18363] overlayfs: missing 'lowerdir' [ 856.055682][T18387] loop1: detected capacity change from 0 to 256 [ 856.372396][T18389] loop1: detected capacity change from 0 to 40427 [ 856.392180][T18389] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 856.410208][T18389] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 856.440053][T18389] F2FS-fs (loop1): Found nat_bits in checkpoint [ 856.859183][T18400] loop5: detected capacity change from 0 to 512 [ 856.865842][T18400] EXT4-fs: Ignoring removed nobh option [ 856.938132][T18400] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 856.986119][T18400] EXT4-fs (loop5): orphan cleanup on readonly fs [ 856.993549][T18400] Quota error (device loop5): v2_read_file_info: Free block number 1 out of range (1, 6). [ 857.003576][T18400] EXT4-fs warning (device loop5): ext4_enable_quotas:7053: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 857.018303][T18400] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 857.025544][T18400] EXT4-fs (loop5): 1 truncate cleaned up [ 857.031235][T18400] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 857.109619][T18389] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 857.129238][T18389] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 857.284520][T18389] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 857.306268][T18389] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 857.352416][T18389] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 857.361087][T11238] EXT4-fs (loop5): unmounting filesystem. [ 857.492158][T10323] EXT4-fs (loop2): unmounting filesystem. [ 857.906660][T18419] loop5: detected capacity change from 0 to 256 [ 858.307849][T18420] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 858.418511][T18419] FAT-fs (loop5): Directory bread(block 64) failed [ 858.425481][T18419] FAT-fs (loop5): Directory bread(block 65) failed [ 858.432149][T18419] FAT-fs (loop5): Directory bread(block 66) failed [ 858.438668][T18419] FAT-fs (loop5): Directory bread(block 67) failed [ 858.445276][T18419] FAT-fs (loop5): Directory bread(block 68) failed [ 858.451790][T18419] FAT-fs (loop5): Directory bread(block 69) failed [ 858.458400][T18419] FAT-fs (loop5): Directory bread(block 70) failed [ 858.465025][T18419] FAT-fs (loop5): Directory bread(block 71) failed [ 858.471575][T18419] FAT-fs (loop5): Directory bread(block 72) failed [ 858.478154][T18419] FAT-fs (loop5): Directory bread(block 73) failed [ 859.259368][T18432] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 859.755666][T18430] loop0: detected capacity change from 0 to 512 [ 859.944788][T18430] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 859.954171][T18430] ext4 filesystem being mounted at /46/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 860.661527][T18439] loop2: detected capacity change from 0 to 1024 [ 860.669433][T18427] No source specified [ 860.721460][T18439] Quota error (device loop2): do_check_range: Getting block 64 out of range 1-5 [ 860.731685][T18439] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 860.741606][T18439] EXT4-fs error (device loop2): ext4_acquire_dquot:6801: comm syz.2.6143: Failed to acquire dquot type 0 [ 860.753450][T18439] EXT4-fs error (device loop2): mb_free_blocks:1815: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 860.768714][T18439] EXT4-fs error (device loop2): ext4_do_update_inode:5256: inode #13: comm syz.2.6143: corrupted inode contents [ 862.224675][T18439] EXT4-fs error (device loop2): ext4_dirty_inode:6121: inode #13: comm syz.2.6143: mark_inode_dirty error [ 862.240075][T18449] loop5: detected capacity change from 0 to 512 [ 862.246742][T18439] EXT4-fs error (device loop2): ext4_do_update_inode:5256: inode #13: comm syz.2.6143: corrupted inode contents [ 862.262594][T18449] EXT4-fs (loop5): Test dummy encryption mode enabled [ 862.269634][T18439] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #13: comm syz.2.6143: mark_inode_dirty error [ 862.336457][T18439] EXT4-fs error (device loop2): ext4_do_update_inode:5256: inode #13: comm syz.2.6143: corrupted inode contents [ 862.373613][T18449] EXT4-fs error (device loop5): __ext4_iget:5079: inode #11: block 1: comm syz.5.6145: invalid block [ 862.384866][T18439] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 862.402109][T18439] EXT4-fs error (device loop2): ext4_do_update_inode:5256: inode #13: comm syz.2.6143: corrupted inode contents [ 862.434432][T18449] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.6145: couldn't read orphan inode 11 (err -117) [ 862.451913][T18439] EXT4-fs error (device loop2): ext4_truncate:4314: inode #13: comm syz.2.6143: mark_inode_dirty error [ 862.473005][T17537] EXT4-fs (loop0): unmounting filesystem. [ 862.521564][T18439] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 862.530759][T18449] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 862.602011][T18439] EXT4-fs (loop2): 1 truncate cleaned up [ 862.611939][T18439] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 862.720108][T18456] netlink: 'syz.0.6146': attribute type 27 has an invalid length. [ 862.984563][T10323] EXT4-fs (loop2): unmounting filesystem. [ 863.214173][T18451] loop4: detected capacity change from 0 to 40427 [ 863.272801][T18451] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 863.288987][T18451] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 863.314242][T18451] F2FS-fs (loop4): Found nat_bits in checkpoint [ 863.341985][T16758] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 863.638433][T18451] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 863.654338][T18451] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 863.681938][T16758] usb 2-1: Using ep0 maxpacket: 16 [ 863.688899][T16758] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 863.771240][T16758] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 863.811693][T16758] usb 2-1: config 0 descriptor?? [ 863.821903][T18451] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 863.836778][T18451] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 863.871946][T18451] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 864.156575][T18479] loop2: detected capacity change from 0 to 256 [ 864.199138][T18481] loop2: detected capacity change from 0 to 256 [ 864.282328][T16758] usbhid 2-1:0.0: can't add hid device: -71 [ 864.291975][T16758] usbhid: probe of 2-1:0.0 failed with error -71 [ 864.299215][T16758] usb 2-1: USB disconnect, device number 40 [ 864.352008][ T3870] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 864.544170][ T3870] usb 5-1: config 0 has an invalid interface number: 248 but max is 0 [ 864.574891][ T3870] usb 5-1: config 0 has no interface number 0 [ 864.622156][T11238] EXT4-fs (loop5): unmounting filesystem. [ 864.628002][ T3870] usb 5-1: New USB device found, idVendor=1b3d, idProduct=9316, bcdDevice= 4.3d [ 864.657788][T18487] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 864.665905][T18487] SELinux: failed to load policy [ 864.689248][ T3870] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 864.745863][ T3870] usb 5-1: config 0 descriptor?? [ 864.751667][ T3870] ftdi_sio 5-1:0.248: FTDI USB Serial Device converter detected [ 864.759625][ T3870] ftdi_sio ttyUSB0: unknown device type: 0x43d [ 865.388633][ T300] usb 5-1: USB disconnect, device number 32 [ 865.395968][ T300] ftdi_sio 5-1:0.248: device disconnected [ 865.979851][T18500] tipc: Started in network mode [ 865.985568][T18500] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 865.994746][T18500] tipc: Enabled bearer , priority 10 [ 866.728405][T18510] syz.0.6163[18510] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 866.728480][T18510] syz.0.6163[18510] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 866.798913][T18514] loop2: detected capacity change from 0 to 512 [ 866.817036][T18514] EXT4-fs: Ignoring removed nobh option [ 866.830035][T18510] netlink: 96 bytes leftover after parsing attributes in process `syz.0.6163'. [ 866.839359][T18514] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 866.863907][T18514] EXT4-fs (loop2): orphan cleanup on readonly fs [ 866.870622][T18514] Quota error (device loop2): v2_read_file_info: Free block number 1 out of range (1, 6). [ 866.880682][T18514] EXT4-fs warning (device loop2): ext4_enable_quotas:7053: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 866.895441][T18514] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 866.903423][T18514] EXT4-fs (loop2): 1 truncate cleaned up [ 866.909122][T18514] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 867.128668][ T4806] tipc: Node number set to 4269801488 [ 867.480969][T10323] EXT4-fs (loop2): unmounting filesystem. [ 867.485321][T18529] loop5: detected capacity change from 0 to 256 [ 867.573228][T18533] 9pnet_fd: Insufficient options for proto=fd [ 867.718035][T18531] loop2: detected capacity change from 0 to 40427 [ 867.733153][T18531] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 867.748893][T18531] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 867.759598][T18531] F2FS-fs (loop2): Found nat_bits in checkpoint [ 867.803030][T18531] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 867.816863][T18531] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 868.027327][T10323] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 868.027349][T10323] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 868.043024][T10323] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 868.077282][T10323] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 868.272887][ T28] audit: type=1326 audit(1756627242.936:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18544 comm="syz.0.6173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fdced585ba7 code=0x7ffc0000 [ 868.302803][T10323] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 868.304636][ T28] audit: type=1326 audit(1756627242.936:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18544 comm="syz.0.6173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdced52adb9 code=0x7ffc0000 [ 868.306107][T10323] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 868.316467][ T28] audit: type=1326 audit(1756627242.936:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18544 comm="syz.0.6173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fdced585ba7 code=0x7ffc0000 [ 868.336250][T10323] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 868.371340][ T28] audit: type=1326 audit(1756627242.936:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18544 comm="syz.0.6173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdced52adb9 code=0x7ffc0000 [ 868.409242][ T28] audit: type=1326 audit(1756627242.936:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18544 comm="syz.0.6173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdced58ebe9 code=0x7ffc0000 [ 868.433209][ T28] audit: type=1326 audit(1756627242.936:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18544 comm="syz.0.6173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdced58ebe9 code=0x7ffc0000 [ 868.456891][ T28] audit: type=1326 audit(1756627242.956:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18544 comm="syz.0.6173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdced58ebe9 code=0x7ffc0000 [ 868.498667][T18550] netlink: 96 bytes leftover after parsing attributes in process `syz.5.6175'. [ 868.519509][ T28] audit: type=1326 audit(1756627242.956:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18544 comm="syz.0.6173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdced58ebe9 code=0x7ffc0000 [ 868.544078][ T28] audit: type=1326 audit(1756627242.956:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18544 comm="syz.0.6173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdced58ebe9 code=0x7ffc0000 [ 868.706741][T18552] loop1: detected capacity change from 0 to 40427 [ 868.713853][T18552] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 868.721704][T18552] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 868.803649][T18552] F2FS-fs (loop1): Found nat_bits in checkpoint [ 868.862745][T18552] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 868.871167][T18552] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 868.960852][T18570] loop0: detected capacity change from 0 to 512 [ 868.967590][T18570] EXT4-fs: Ignoring removed nobh option [ 868.974872][T18570] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 869.447485][T18570] EXT4-fs (loop0): orphan cleanup on readonly fs [ 869.454912][T18570] EXT4-fs warning (device loop0): ext4_enable_quotas:7053: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 869.469975][T18570] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 869.477672][T18570] EXT4-fs (loop0): 1 truncate cleaned up [ 869.483524][T18570] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 869.648037][ T9784] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 869.648060][ T9784] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 869.655857][ T9784] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 869.924189][T17537] EXT4-fs (loop0): unmounting filesystem. [ 870.251041][T18581] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 870.454317][T18593] overlayfs: unrecognized mount option "/" or missing value [ 870.834797][T18598] loop4: detected capacity change from 0 to 512 [ 870.922191][T18598] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 871.200831][T18598] EXT4-fs (loop4): orphan cleanup on readonly fs [ 871.225436][T18598] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.6186: bg 0: block 248: padding at end of block bitmap is not set [ 871.241649][T18598] EXT4-fs error (device loop4): ext4_acquire_dquot:6801: comm syz.4.6186: Failed to acquire dquot type 1 [ 871.258600][T18598] EXT4-fs (loop4): 1 truncate cleaned up [ 871.265892][T18598] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 872.536734][T17585] EXT4-fs (loop4): unmounting filesystem. [ 872.681916][ T2750] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 872.972781][T18621] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 873.303014][ T2750] usb 1-1: config 0 has an invalid interface number: 248 but max is 0 [ 873.311915][ T2750] usb 1-1: config 0 has no interface number 0 [ 873.318147][ T2750] usb 1-1: New USB device found, idVendor=1b3d, idProduct=9316, bcdDevice= 4.3d [ 873.327293][ T2750] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 873.339927][ T2750] usb 1-1: config 0 descriptor?? [ 873.347928][ T2750] ftdi_sio 1-1:0.248: FTDI USB Serial Device converter detected [ 873.356757][ T2750] ftdi_sio ttyUSB0: unknown device type: 0x43d [ 875.244455][T18633] loop2: detected capacity change from 0 to 512 [ 876.193951][T18633] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 876.285430][T18633] EXT4-fs (loop2): orphan cleanup on readonly fs [ 876.292635][T18633] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.6197: bg 0: block 248: padding at end of block bitmap is not set [ 876.307288][T18633] __quota_error: 6 callbacks suppressed [ 876.307304][T18633] Quota error (device loop2): write_blk: dquota write failed [ 876.319492][ T60] usb 1-1: USB disconnect, device number 18 [ 876.320280][T18633] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 876.336136][T18633] EXT4-fs error (device loop2): ext4_acquire_dquot:6801: comm syz.2.6197: Failed to acquire dquot type 1 [ 876.338395][ T60] ftdi_sio 1-1:0.248: device disconnected [ 876.354243][T18633] EXT4-fs (loop2): 1 truncate cleaned up [ 876.367833][T18633] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 876.744217][T18642] loop0: detected capacity change from 0 to 512 [ 876.810431][T10323] EXT4-fs (loop2): unmounting filesystem. [ 876.943038][T18642] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 876.952385][T18642] ext4 filesystem being mounted at /57/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 877.117059][T18642] No source specified [ 877.659557][T17537] EXT4-fs (loop0): unmounting filesystem. [ 878.211986][ T60] usb 3-1: new full-speed USB device number 42 using dummy_hcd [ 878.403650][ T60] usb 3-1: config 135 has an invalid interface number: 230 but max is 0 [ 878.429023][ T60] usb 3-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 878.476547][ T60] usb 3-1: config 135 has no interface number 0 [ 878.525545][ T60] usb 3-1: too many endpoints for config 135 interface 230 altsetting 126: 53, using maximum allowed: 30 [ 878.594851][ T60] usb 3-1: config 135 interface 230 altsetting 126 has 0 endpoint descriptors, different from the interface descriptor's value: 53 [ 878.675217][ T60] usb 3-1: config 135 interface 230 has no altsetting 0 [ 878.727331][ T60] usb 3-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 878.863179][ T60] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 879.063709][T18664] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 879.293604][ T60] usb 3-1: Product: syz [ 879.297864][ T60] usb 3-1: Manufacturer: syz [ 879.316970][ T60] usb 3-1: SerialNumber: syz [ 879.344583][ T60] usb 3-1: Found UVC 0.00 device syz (18ec:3288) [ 879.373826][ T60] usb 3-1: No valid video chain found. [ 879.797225][ T809] usb 3-1: USB disconnect, device number 42 [ 880.066689][T18682] loop1: detected capacity change from 0 to 512 [ 880.112929][T18682] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 880.140052][T18682] EXT4-fs (loop1): orphan cleanup on readonly fs [ 880.150156][T18682] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.6211: bg 0: block 248: padding at end of block bitmap is not set [ 880.168773][T18682] Quota error (device loop1): write_blk: dquota write failed [ 880.176633][T18682] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 880.187501][T18682] EXT4-fs error (device loop1): ext4_acquire_dquot:6801: comm syz.1.6211: Failed to acquire dquot type 1 [ 880.204688][T18682] EXT4-fs (loop1): 1 truncate cleaned up [ 880.212056][T18682] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 881.108699][T18689] loop4: detected capacity change from 0 to 512 [ 881.117189][T18689] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 881.131425][ T9784] EXT4-fs (loop1): unmounting filesystem. [ 881.244163][T18689] EXT4-fs (loop4): orphan cleanup on readonly fs [ 881.253524][T18689] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.6212: bg 0: block 248: padding at end of block bitmap is not set [ 881.294070][T18689] Quota error (device loop4): write_blk: dquota write failed [ 881.301593][T18689] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 881.311748][T18689] EXT4-fs error (device loop4): ext4_acquire_dquot:6801: comm syz.4.6212: Failed to acquire dquot type 1 [ 881.326293][T18689] EXT4-fs (loop4): 1 truncate cleaned up [ 881.333052][T18689] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 882.209795][T18694] loop2: detected capacity change from 0 to 512 [ 882.219617][T18693] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 882.237552][T18693] SELinux: failed to load policy [ 882.306158][T17585] EXT4-fs (loop4): unmounting filesystem. [ 882.320865][T18694] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.6214: casefold flag without casefold feature [ 882.451647][T18694] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.6214: couldn't read orphan inode 15 (err -117) [ 882.922268][T18694] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 883.097982][T18711] loop1: detected capacity change from 0 to 256 [ 883.119049][T10323] EXT4-fs (loop2): unmounting filesystem. [ 883.226986][T18718] loop0: detected capacity change from 0 to 1024 [ 883.275291][T18712] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 883.297711][T18718] Quota error (device loop0): do_check_range: Getting block 64 out of range 1-5 [ 883.306989][T18718] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 883.316899][T18718] EXT4-fs error (device loop0): ext4_acquire_dquot:6801: comm syz.0.6223: Failed to acquire dquot type 0 [ 883.530042][T18718] EXT4-fs error (device loop0): mb_free_blocks:1815: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 884.401014][T18718] EXT4-fs error (device loop0): ext4_do_update_inode:5256: inode #13: comm syz.0.6223: corrupted inode contents [ 884.406098][ T28] audit: type=1326 audit(1756627259.136:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18721 comm="syz.4.6224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2071b8ebe9 code=0x7ffc0000 [ 884.440147][T18718] EXT4-fs error (device loop0): ext4_dirty_inode:6121: inode #13: comm syz.0.6223: mark_inode_dirty error [ 884.476454][T18718] EXT4-fs error (device loop0): ext4_do_update_inode:5256: inode #13: comm syz.0.6223: corrupted inode contents [ 884.535115][T18718] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #13: comm syz.0.6223: mark_inode_dirty error [ 884.547272][ T28] audit: type=1326 audit(1756627259.136:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18721 comm="syz.4.6224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2071b8ebe9 code=0x7ffc0000 [ 884.613535][T18718] EXT4-fs error (device loop0): ext4_do_update_inode:5256: inode #13: comm syz.0.6223: corrupted inode contents [ 884.626027][T18718] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 884.634787][ T28] audit: type=1326 audit(1756627259.136:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18721 comm="syz.4.6224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2071b8ebe9 code=0x7ffc0000 [ 884.676020][T18718] EXT4-fs error (device loop0): ext4_do_update_inode:5256: inode #13: comm syz.0.6223: corrupted inode contents [ 884.688684][T18718] EXT4-fs error (device loop0): ext4_truncate:4314: inode #13: comm syz.0.6223: mark_inode_dirty error [ 884.691828][ T28] audit: type=1326 audit(1756627259.136:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18721 comm="syz.4.6224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2071b8ebe9 code=0x7ffc0000 [ 884.737642][ T28] audit: type=1326 audit(1756627259.136:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18721 comm="syz.4.6224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2071b8ebe9 code=0x7ffc0000 [ 884.748754][T18718] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 884.768171][ T28] audit: type=1326 audit(1756627259.136:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18721 comm="syz.4.6224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7f2071b8ebe9 code=0x7ffc0000 [ 885.293260][ T28] audit: type=1326 audit(1756627259.136:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18721 comm="syz.4.6224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2071b8ebe9 code=0x7ffc0000 [ 885.328323][ T28] audit: type=1326 audit(1756627259.136:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18721 comm="syz.4.6224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2071b8ebe9 code=0x7ffc0000 [ 885.351904][T18718] EXT4-fs (loop0): 1 truncate cleaned up [ 885.358233][T18718] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 886.186694][T18718] EXT4-fs (loop0): re-mounted. Quota mode: writeback. [ 886.605733][T18756] loop1: detected capacity change from 0 to 512 [ 886.614551][T17537] EXT4-fs (loop0): unmounting filesystem. [ 886.671119][T18756] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.6233: casefold flag without casefold feature [ 886.712333][T18756] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.6233: couldn't read orphan inode 15 (err -117) [ 886.772803][T18756] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 887.776113][T18774] loop5: detected capacity change from 0 to 1024 [ 888.408370][T18774] __quota_error: 11 callbacks suppressed [ 888.408398][T18774] Quota error (device loop5): do_check_range: Getting block 64 out of range 1-5 [ 888.428395][T18774] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 888.438888][T18774] EXT4-fs error (device loop5): ext4_acquire_dquot:6801: comm syz.5.6239: Failed to acquire dquot type 0 [ 888.522555][T18774] EXT4-fs error (device loop5): mb_free_blocks:1815: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 888.547364][T18774] EXT4-fs error (device loop5): ext4_do_update_inode:5256: inode #13: comm syz.5.6239: corrupted inode contents [ 888.569429][T18774] EXT4-fs error (device loop5): ext4_dirty_inode:6121: inode #13: comm syz.5.6239: mark_inode_dirty error [ 888.710985][T18774] EXT4-fs error (device loop5): ext4_do_update_inode:5256: inode #13: comm syz.5.6239: corrupted inode contents [ 888.732117][T18774] EXT4-fs error (device loop5): __ext4_ext_dirty:202: inode #13: comm syz.5.6239: mark_inode_dirty error [ 888.752170][T18774] EXT4-fs error (device loop5): ext4_do_update_inode:5256: inode #13: comm syz.5.6239: corrupted inode contents [ 888.781753][T18774] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 888.790699][T18774] EXT4-fs error (device loop5): ext4_do_update_inode:5256: inode #13: comm syz.5.6239: corrupted inode contents [ 888.809885][ T452] tipc: Disabling bearer [ 888.815515][ T452] tipc: Left network mode [ 888.819931][T18786] bridge0: port 1(bridge_slave_0) entered blocking state [ 888.828003][T18786] bridge0: port 1(bridge_slave_0) entered disabled state [ 888.840670][ T9784] EXT4-fs (loop1): unmounting filesystem. [ 888.846562][T18774] EXT4-fs error (device loop5): ext4_truncate:4314: inode #13: comm syz.5.6239: mark_inode_dirty error [ 888.872477][T18774] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 888.887757][T18774] EXT4-fs (loop5): 1 truncate cleaned up [ 888.891341][T18786] device bridge_slave_0 entered promiscuous mode [ 888.896353][T18774] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 888.929509][T18786] bridge0: port 2(bridge_slave_1) entered blocking state [ 888.938308][T18774] EXT4-fs (loop5): re-mounted. Quota mode: writeback. [ 888.945942][T18786] bridge0: port 2(bridge_slave_1) entered disabled state [ 888.962688][T18786] device bridge_slave_1 entered promiscuous mode [ 888.975894][T11238] EXT4-fs (loop5): unmounting filesystem. [ 889.246350][T18786] bridge0: port 2(bridge_slave_1) entered blocking state [ 889.253533][T18786] bridge0: port 2(bridge_slave_1) entered forwarding state [ 889.260826][T18786] bridge0: port 1(bridge_slave_0) entered blocking state [ 889.267887][T18786] bridge0: port 1(bridge_slave_0) entered forwarding state [ 889.378336][ T2112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 889.394676][ T2112] bridge0: port 1(bridge_slave_0) entered disabled state [ 889.414500][ T2112] bridge0: port 2(bridge_slave_1) entered disabled state [ 889.418395][T18803] loop5: detected capacity change from 0 to 40427 [ 889.445265][T18803] F2FS-fs (loop5): invalid crc value [ 889.456541][ T2112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 889.480628][T18803] F2FS-fs (loop5): Found nat_bits in checkpoint [ 889.498409][ T2112] bridge0: port 1(bridge_slave_0) entered blocking state [ 889.505497][ T2112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 889.552467][ T2112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 889.583465][ T2112] bridge0: port 2(bridge_slave_1) entered blocking state [ 889.590539][ T2112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 889.598292][T18803] F2FS-fs (loop5): Start checkpoint disabled! [ 889.602645][T18813] loop2: detected capacity change from 0 to 256 [ 889.622154][T18803] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 889.666225][ T473] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 889.768045][ T452] device bridge_slave_1 left promiscuous mode [ 889.774935][ T452] bridge0: port 2(bridge_slave_1) entered disabled state [ 889.790475][ T452] device bridge_slave_0 left promiscuous mode [ 889.820885][ T452] bridge0: port 1(bridge_slave_0) entered disabled state [ 889.837739][ T2112] kworker/u4:438: attempt to access beyond end of device [ 889.837739][ T2112] loop5: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 889.933569][ T452] device veth1_macvtap left promiscuous mode [ 889.961706][ T452] device veth0_vlan left promiscuous mode [ 890.178527][ T473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 890.190232][ T473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 890.219999][ T473] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 890.248325][ T473] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 890.256184][ T473] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 890.269372][T18786] device veth0_vlan entered promiscuous mode [ 890.379364][ T2051] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 890.390172][ T2051] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 890.535095][T18826] loop0: detected capacity change from 0 to 256 [ 890.641935][T18826] FAT-fs (loop0): Directory bread(block 64) failed [ 890.648578][T18826] FAT-fs (loop0): Directory bread(block 65) failed [ 890.655364][T18826] FAT-fs (loop0): Directory bread(block 66) failed [ 890.662072][T18826] FAT-fs (loop0): Directory bread(block 67) failed [ 890.668815][T18826] FAT-fs (loop0): Directory bread(block 68) failed [ 890.675415][T18826] FAT-fs (loop0): Directory bread(block 69) failed [ 890.682139][T18826] FAT-fs (loop0): Directory bread(block 70) failed [ 890.688691][T18826] FAT-fs (loop0): Directory bread(block 71) failed [ 890.695559][T18826] FAT-fs (loop0): Directory bread(block 72) failed [ 890.702139][T18826] FAT-fs (loop0): Directory bread(block 73) failed [ 891.013634][T18786] device veth1_macvtap entered promiscuous mode [ 891.548705][ T1496] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 891.572405][ T1496] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 891.584191][ T1496] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 891.900261][ T1496] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 891.951756][ T1496] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 891.965256][T18833] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6256'. [ 892.253644][T18843] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6254'. [ 892.947116][T18844] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6241'. [ 893.418932][T18860] loop1: detected capacity change from 0 to 256 [ 893.443271][T18860] FAT-fs (loop1): Directory bread(block 64) failed [ 893.449890][T18860] FAT-fs (loop1): Directory bread(block 65) failed [ 893.456558][T18860] FAT-fs (loop1): Directory bread(block 66) failed [ 893.463196][T18860] FAT-fs (loop1): Directory bread(block 67) failed [ 893.469823][T18860] FAT-fs (loop1): Directory bread(block 68) failed [ 893.476661][T18860] FAT-fs (loop1): Directory bread(block 69) failed [ 893.483290][T18860] FAT-fs (loop1): Directory bread(block 70) failed [ 893.489868][T18860] FAT-fs (loop1): Directory bread(block 71) failed [ 893.496516][T18860] FAT-fs (loop1): Directory bread(block 72) failed [ 893.503142][T18860] FAT-fs (loop1): Directory bread(block 73) failed [ 893.581914][ T60] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 893.783406][ T60] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 893.805659][ T60] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 894.378249][ T60] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 894.387637][ T60] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 894.418275][T18869] netlink: 96 bytes leftover after parsing attributes in process `syz.1.6266'. [ 894.430344][ T60] usb 3-1: invalid MIDI out EP 0 [ 894.442840][ T60] snd-usb-audio: probe of 3-1:27.0 failed with error -22 [ 894.465421][ T339] udevd[339]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 894.640313][ T389] usb 3-1: USB disconnect, device number 43 [ 895.480146][T18874] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 895.527521][T18881] loop4: detected capacity change from 0 to 256 [ 895.870369][ T28] audit: type=1326 audit(1756627270.506:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18875 comm="syz.0.6269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdced58ebe9 code=0x7ffc0000 [ 895.899084][T18886] loop5: detected capacity change from 0 to 512 [ 895.911092][ T28] audit: type=1326 audit(1756627270.506:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18875 comm="syz.0.6269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdced58ebe9 code=0x7ffc0000 [ 896.001522][T18886] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 896.028971][ T28] audit: type=1326 audit(1756627270.516:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18875 comm="syz.0.6269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdced58ebe9 code=0x7ffc0000 [ 896.750573][ T28] audit: type=1326 audit(1756627270.526:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18875 comm="syz.0.6269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdced58ebe9 code=0x7ffc0000 [ 896.879357][ T28] audit: type=1326 audit(1756627270.526:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18875 comm="syz.0.6269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdced58ebe9 code=0x7ffc0000 [ 896.932140][ T28] audit: type=1326 audit(1756627270.546:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18875 comm="syz.0.6269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7fdced58ebe9 code=0x7ffc0000 [ 896.948101][T18886] EXT4-fs (loop5): 1 truncate cleaned up [ 896.973221][T18886] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 897.382272][ T28] audit: type=1326 audit(1756627270.556:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18875 comm="syz.0.6269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdced58ebe9 code=0x7ffc0000 [ 897.406595][ T28] audit: type=1326 audit(1756627270.556:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18875 comm="syz.0.6269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdced58ebe9 code=0x7ffc0000 [ 897.476048][T11238] EXT4-fs (loop5): unmounting filesystem. [ 897.672335][T18912] loop2: detected capacity change from 0 to 512 [ 897.728354][T18913] loop5: detected capacity change from 0 to 512 [ 897.734986][T18913] EXT4-fs: Ignoring removed nobh option [ 898.163016][T18912] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 898.174209][T18913] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 898.316226][T18913] EXT4-fs (loop5): orphan cleanup on readonly fs [ 898.323504][T18913] Quota error (device loop5): v2_read_file_info: Free block number 1 out of range (1, 6). [ 898.333672][T18913] EXT4-fs warning (device loop5): ext4_enable_quotas:7053: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 898.348434][T18913] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 898.356378][T18913] EXT4-fs (loop5): 1 truncate cleaned up [ 898.362051][T18913] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 898.422270][T18912] EXT4-fs (loop2): 1 truncate cleaned up [ 898.428327][T18912] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 898.523076][T11238] EXT4-fs (loop5): unmounting filesystem. [ 899.087269][T10323] EXT4-fs (loop2): unmounting filesystem. [ 899.147922][T18927] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6283'. [ 899.297624][T18907] loop4: detected capacity change from 0 to 40427 [ 899.342167][T18907] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 899.351177][T18907] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 899.397694][T18907] F2FS-fs (loop4): Found nat_bits in checkpoint [ 899.452025][ T6] usb 3-1: new full-speed USB device number 44 using dummy_hcd [ 899.474375][T18907] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 899.482779][T18907] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 899.578438][T17585] f2fs_fill_dentries: 4 callbacks suppressed [ 899.578455][T17585] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 899.590025][T17585] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 899.620667][T17585] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 899.643773][ T6] usb 3-1: config 135 has an invalid interface number: 230 but max is 0 [ 899.663464][T18932] loop1: detected capacity change from 0 to 40427 [ 899.672774][T17585] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 899.672793][T17585] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 899.691934][T17585] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 899.702409][ T6] usb 3-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 899.705238][T17585] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 899.710797][ T6] usb 3-1: config 135 has no interface number 0 [ 899.734237][T18932] F2FS-fs (loop1): invalid crc value [ 899.755416][T18932] F2FS-fs (loop1): Found nat_bits in checkpoint [ 899.799317][ T6] usb 3-1: too many endpoints for config 135 interface 230 altsetting 126: 53, using maximum allowed: 30 [ 899.841058][ T6] usb 3-1: config 135 interface 230 altsetting 126 has 0 endpoint descriptors, different from the interface descriptor's value: 53 [ 899.859322][ T6] usb 3-1: config 135 interface 230 has no altsetting 0 [ 899.875715][ T6] usb 3-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 899.883661][T18932] F2FS-fs (loop1): Start checkpoint disabled! [ 899.899863][ T6] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 899.914847][T18932] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 899.920029][ T6] usb 3-1: Product: syz [ 899.930107][ T6] usb 3-1: Manufacturer: syz [ 899.940207][ T6] usb 3-1: SerialNumber: syz [ 899.973032][ T6] usb 3-1: Found UVC 0.00 device syz (18ec:3288) [ 899.980650][ T6] usb 3-1: No valid video chain found. [ 900.034376][ T497] kworker/u4:74: attempt to access beyond end of device [ 900.034376][ T497] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 900.427454][ T1154] usb 3-1: USB disconnect, device number 44 [ 902.681250][ T28] audit: type=1326 audit(1756627277.266:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18950 comm="syz.4.6290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2071b85ba7 code=0x7ffc0000 [ 902.860717][ T28] audit: type=1326 audit(1756627277.276:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18950 comm="syz.4.6290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2071b2adb9 code=0x7ffc0000 [ 902.877377][T18953] loop5: detected capacity change from 0 to 40427 [ 902.953292][T18969] loop4: detected capacity change from 0 to 512 [ 902.959991][ T28] audit: type=1326 audit(1756627277.276:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18950 comm="syz.4.6290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2071b85ba7 code=0x7ffc0000 [ 902.990664][T18970] loop0: detected capacity change from 0 to 512 [ 904.574901][T18953] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 904.584679][T18970] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 904.600495][T18969] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 904.628414][T18970] EXT4-fs (loop0): orphan cleanup on readonly fs [ 904.646488][T18970] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.6293: bg 0: block 248: padding at end of block bitmap is not set [ 904.663115][T18970] Quota error (device loop0): write_blk: dquota write failed [ 904.672856][T18970] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 904.683036][T18970] EXT4-fs error (device loop0): ext4_acquire_dquot:6801: comm syz.0.6293: Failed to acquire dquot type 1 [ 904.699533][T18970] EXT4-fs (loop0): 1 truncate cleaned up [ 904.707371][T18970] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 905.272602][T18969] EXT4-fs (loop4): orphan cleanup on readonly fs [ 905.287097][ T28] audit: type=1326 audit(1756627277.276:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18950 comm="syz.4.6290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2071b2adb9 code=0x7ffc0000 [ 905.311101][ T28] audit: type=1326 audit(1756627277.276:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18950 comm="syz.4.6290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2071b8ebe9 code=0x7ffc0000 [ 905.338911][T18969] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.6294: bg 0: block 248: padding at end of block bitmap is not set [ 905.358156][ T28] audit: type=1326 audit(1756627277.276:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18950 comm="syz.4.6290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2071b8ebe9 code=0x7ffc0000 [ 905.432240][T18953] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 905.442707][T17537] EXT4-fs (loop0): unmounting filesystem. [ 905.454446][T18969] Quota error (device loop4): write_blk: dquota write failed [ 905.459848][ T28] audit: type=1326 audit(1756627277.316:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18950 comm="syz.4.6290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2071b8ebe9 code=0x7ffc0000 [ 905.462045][T18969] EXT4-fs error (device loop4): ext4_acquire_dquot:6801: comm syz.4.6294: Failed to acquire dquot type 1 [ 905.608493][T18969] EXT4-fs (loop4): 1 truncate cleaned up [ 905.759108][T18953] F2FS-fs (loop5): Failed to start F2FS issue_checkpoint_thread (-4) [ 905.759934][T18969] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 905.792716][T18984] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 905.807178][T18984] SELinux: failed to load policy [ 905.911688][T17585] EXT4-fs (loop4): unmounting filesystem. [ 907.270010][T19007] loop4: detected capacity change from 0 to 512 [ 907.279892][T19007] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.6306: casefold flag without casefold feature [ 907.295655][T19007] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.6306: couldn't read orphan inode 15 (err -117) [ 907.459723][T19007] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 907.562469][ T1154] usb 3-1: new full-speed USB device number 45 using dummy_hcd [ 907.624992][T17585] EXT4-fs (loop4): unmounting filesystem. [ 907.754711][ T1154] usb 3-1: config 135 has an invalid interface number: 230 but max is 0 [ 907.769101][ T1154] usb 3-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 907.781831][ T1154] usb 3-1: config 135 has no interface number 0 [ 907.788244][ T1154] usb 3-1: too many endpoints for config 135 interface 230 altsetting 126: 53, using maximum allowed: 30 [ 908.077921][ T1154] usb 3-1: config 135 interface 230 altsetting 126 has 0 endpoint descriptors, different from the interface descriptor's value: 53 [ 908.117628][ T1154] usb 3-1: config 135 interface 230 has no altsetting 0 [ 908.126825][ T1154] usb 3-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 908.138481][ T1154] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 908.154493][ T1154] usb 3-1: Product: syz [ 908.158867][ T1154] usb 3-1: Manufacturer: syz [ 908.163650][ T1154] usb 3-1: SerialNumber: syz [ 908.174607][ T1154] usb 3-1: Found UVC 0.00 device syz (18ec:3288) [ 908.181091][ T1154] usb 3-1: No valid video chain found. [ 908.376398][ T1154] usb 3-1: USB disconnect, device number 45 [ 909.441769][ T28] kauditd_printk_skb: 36 callbacks suppressed [ 909.441821][ T28] audit: type=1326 audit(1756627284.186:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19041 comm="syz.2.6317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0770d8ebe9 code=0x7ffc0000 [ 909.472444][ T28] audit: type=1326 audit(1756627284.186:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19041 comm="syz.2.6317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0770d8ebe9 code=0x7ffc0000 [ 909.560744][ T28] audit: type=1326 audit(1756627284.186:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19041 comm="syz.2.6317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0770d8ebe9 code=0x7ffc0000 [ 909.588488][ T28] audit: type=1326 audit(1756627284.186:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19041 comm="syz.2.6317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0770d8ebe9 code=0x7ffc0000 [ 909.620859][ T28] audit: type=1326 audit(1756627284.186:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19041 comm="syz.2.6317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0770d8ebe9 code=0x7ffc0000 [ 909.644671][ T28] audit: type=1326 audit(1756627284.186:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19041 comm="syz.2.6317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7f0770d8ebe9 code=0x7ffc0000 [ 909.668228][ T28] audit: type=1326 audit(1756627284.186:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19041 comm="syz.2.6317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0770d8ebe9 code=0x7ffc0000 [ 909.692229][ T28] audit: type=1326 audit(1756627284.186:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19041 comm="syz.2.6317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0770d8ebe9 code=0x7ffc0000 [ 909.788007][T19054] loop4: detected capacity change from 0 to 40427 [ 909.798253][T19056] loop1: detected capacity change from 0 to 512 [ 909.805001][T19056] EXT4-fs: Ignoring removed nobh option [ 909.812412][T19056] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 909.839249][T19054] F2FS-fs (loop4): invalid crc value [ 909.947480][T19056] EXT4-fs (loop1): orphan cleanup on readonly fs [ 909.954436][T19056] Quota error (device loop1): v2_read_file_info: Free block number 1 out of range (1, 6). [ 909.965138][T19056] EXT4-fs warning (device loop1): ext4_enable_quotas:7053: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 909.980511][T19056] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 909.989356][T19056] EXT4-fs (loop1): 1 truncate cleaned up [ 909.995248][T19056] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 910.023800][T19054] F2FS-fs (loop4): Found nat_bits in checkpoint [ 910.207216][T19054] F2FS-fs (loop4): Start checkpoint disabled! [ 910.474466][T19054] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 910.482933][T18786] EXT4-fs (loop1): unmounting filesystem. [ 910.781588][T19073] loop1: detected capacity change from 0 to 512 [ 911.340372][T19073] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 911.349635][T19073] ext4 filesystem being mounted at /14/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 911.488939][T19081] loop2: detected capacity change from 0 to 512 [ 916.196006][T19081] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 916.208340][T19081] EXT4-fs: failed to create workqueue [ 916.213781][T19081] EXT4-fs (loop2): mount failed [ 916.269608][T18786] EXT4-fs (loop1): unmounting filesystem. [ 916.291573][T19087] loop0: detected capacity change from 0 to 512 [ 916.307772][ T339] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 916.442344][T19095] loop2: detected capacity change from 0 to 512 [ 916.479556][T19095] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 916.945624][T19095] EXT4-fs (loop2): orphan cleanup on readonly fs [ 917.327693][T19095] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.6331: bg 0: block 248: padding at end of block bitmap is not set [ 917.343571][T19095] Quota error (device loop2): write_blk: dquota write failed [ 917.351209][T19095] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 917.361228][T19095] EXT4-fs error (device loop2): ext4_acquire_dquot:6801: comm syz.2.6331: Failed to acquire dquot type 1 [ 917.376057][T19095] EXT4-fs (loop2): 1 truncate cleaned up [ 917.382828][T19095] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 917.506975][T19087] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.6329: casefold flag without casefold feature [ 917.871762][T19087] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.6329: couldn't read orphan inode 15 (err -117) [ 917.884604][T19087] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 918.186090][T17537] EXT4-fs (loop0): unmounting filesystem. [ 918.231778][T10323] EXT4-fs (loop2): unmounting filesystem. [ 918.544069][T19111] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 919.240431][T19115] loop4: detected capacity change from 0 to 1024 [ 919.312412][ T60] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 919.345997][T19115] Quota error (device loop4): do_check_range: Getting block 64 out of range 1-5 [ 919.356416][T19115] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 919.366169][T19115] EXT4-fs error (device loop4): ext4_acquire_dquot:6801: comm syz.4.6335: Failed to acquire dquot type 0 [ 919.378790][T19115] EXT4-fs error (device loop4): mb_free_blocks:1815: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 919.393863][T19115] EXT4-fs error (device loop4): ext4_do_update_inode:5256: inode #13: comm syz.4.6335: corrupted inode contents [ 919.425402][T19115] EXT4-fs error (device loop4): ext4_dirty_inode:6121: inode #13: comm syz.4.6335: mark_inode_dirty error [ 919.443409][T19115] EXT4-fs error (device loop4): ext4_do_update_inode:5256: inode #13: comm syz.4.6335: corrupted inode contents [ 919.470813][T19115] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #13: comm syz.4.6335: mark_inode_dirty error [ 919.680581][T19115] EXT4-fs error (device loop4): ext4_do_update_inode:5256: inode #13: comm syz.4.6335: corrupted inode contents [ 919.719364][T19118] loop2: detected capacity change from 0 to 40427 [ 919.721609][T19115] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 919.725963][ T60] usb 2-1: Using ep0 maxpacket: 16 [ 919.741922][T19115] EXT4-fs error (device loop4): ext4_do_update_inode:5256: inode #13: comm syz.4.6335: corrupted inode contents [ 919.756468][T19115] EXT4-fs error (device loop4): ext4_truncate:4314: inode #13: comm syz.4.6335: mark_inode_dirty error [ 919.763303][ T60] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 919.769382][T19115] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 919.788033][ T60] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 919.795892][T19115] EXT4-fs (loop4): 1 truncate cleaned up [ 919.796252][T19118] F2FS-fs (loop2): invalid crc value [ 919.801920][T19115] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 919.817488][ T60] usb 2-1: config 0 descriptor?? [ 919.832505][T19118] F2FS-fs (loop2): Found nat_bits in checkpoint [ 919.867070][T19115] EXT4-fs (loop4): re-mounted. Quota mode: writeback. [ 919.901438][T17585] EXT4-fs (loop4): unmounting filesystem. [ 919.901775][T19118] F2FS-fs (loop2): Start checkpoint disabled! [ 919.943308][T19118] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 919.966407][T19128] loop4: detected capacity change from 0 to 1024 [ 919.995639][T19128] Quota error (device loop4): do_check_range: Getting block 64 out of range 1-5 [ 920.007746][T19128] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 920.022045][T19128] EXT4-fs error (device loop4): ext4_acquire_dquot:6801: comm syz.4.6339: Failed to acquire dquot type 0 [ 920.034812][T19118] F2FS-fs (loop2): ino:10, start:0, end:8192, need to trigger GC to reclaim enough free segment when checkpoint is enabled [ 920.043571][T19128] EXT4-fs error (device loop4): mb_free_blocks:1815: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 920.083302][T19128] EXT4-fs error (device loop4): ext4_do_update_inode:5256: inode #13: comm syz.4.6339: corrupted inode contents [ 920.109476][ T480] kworker/u4:63: attempt to access beyond end of device [ 920.109476][ T480] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 920.137053][T19128] EXT4-fs error (device loop4): ext4_dirty_inode:6121: inode #13: comm syz.4.6339: mark_inode_dirty error [ 920.156234][T19128] EXT4-fs error (device loop4): ext4_do_update_inode:5256: inode #13: comm syz.4.6339: corrupted inode contents [ 920.168436][T19128] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #13: comm syz.4.6339: mark_inode_dirty error [ 920.184927][T19128] EXT4-fs error (device loop4): ext4_do_update_inode:5256: inode #13: comm syz.4.6339: corrupted inode contents [ 920.226786][T19128] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 920.239421][T19128] EXT4-fs error (device loop4): ext4_do_update_inode:5256: inode #13: comm syz.4.6339: corrupted inode contents [ 920.267697][ T60] koneplus 0003:1E7D:2E22.0013: unknown main item tag 0x1 [ 920.275449][T19128] EXT4-fs error (device loop4): ext4_truncate:4314: inode #13: comm syz.4.6339: mark_inode_dirty error [ 920.288114][ T60] koneplus 0003:1E7D:2E22.0013: hidraw0: USB HID v20.00 Device [HID 1e7d:2e22] on usb-dummy_hcd.1-1/input0 [ 920.300539][T19128] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 920.354977][T19136] loop0: detected capacity change from 0 to 512 [ 920.364489][T19136] EXT4-fs (loop0): Test dummy encryption mode enabled [ 920.462629][T19136] EXT4-fs error (device loop0): __ext4_iget:5079: inode #11: block 1: comm syz.0.6342: invalid block [ 920.474194][T19136] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.6342: couldn't read orphan inode 11 (err -117) [ 920.486564][T19136] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 920.587050][T19128] EXT4-fs (loop4): 1 truncate cleaned up [ 920.596270][T19128] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 920.685080][T19141] loop5: detected capacity change from 0 to 512 [ 920.703530][T19128] EXT4-fs (loop4): re-mounted. Quota mode: writeback. [ 920.718410][ T3870] usb 2-1: USB disconnect, device number 41 [ 920.755373][T19141] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 920.799619][T19141] EXT4-fs (loop5): 1 truncate cleaned up [ 920.812537][T19141] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 920.838337][T17585] EXT4-fs (loop4): unmounting filesystem. [ 921.034052][T19144] loop4: detected capacity change from 0 to 40427 [ 921.041096][T19144] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 921.049209][T19144] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 921.099413][T19144] F2FS-fs (loop4): Found nat_bits in checkpoint [ 921.131453][T17537] EXT4-fs (loop0): unmounting filesystem. [ 921.164357][T19144] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 921.181621][T19144] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 921.262556][T19144] overlayfs: failed to resolve './file0': -2 [ 921.709648][T19159] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 922.442512][T19169] loop2: detected capacity change from 0 to 4096 [ 922.459185][T19169] EXT4-fs: Ignoring removed mblk_io_submit option [ 922.477254][T19169] EXT4-fs (loop2): Test dummy encryption mode enabled [ 922.495781][T19169] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 922.511956][ T60] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 922.523855][ T28] audit: type=1326 audit(1756627297.276:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19168 comm="syz.2.6349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0770d8ebe9 code=0x7ffc0000 [ 922.575963][ T28] audit: type=1326 audit(1756627297.276:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19168 comm="syz.2.6349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0770d8ebe9 code=0x7ffc0000 [ 922.609534][ T28] audit: type=1326 audit(1756627297.276:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19168 comm="syz.2.6349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0770d8ebe9 code=0x7ffc0000 [ 922.652290][ T28] audit: type=1326 audit(1756627297.276:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19168 comm="syz.2.6349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0770d8ebe9 code=0x7ffc0000 [ 922.691880][ T28] audit: type=1326 audit(1756627297.276:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19168 comm="syz.2.6349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0770d8ebe9 code=0x7ffc0000 [ 922.732957][ T60] usb 1-1: config 135 has an invalid interface number: 230 but max is 0 [ 922.735633][ T28] audit: type=1326 audit(1756627297.276:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19168 comm="syz.2.6349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=287 compat=0 ip=0x7f0770d8ebe9 code=0x7ffc0000 [ 922.742847][ T60] usb 1-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 922.766196][ T28] audit: type=1326 audit(1756627297.276:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19168 comm="syz.2.6349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0770d8ebe9 code=0x7ffc0000 [ 922.787460][ T60] usb 1-1: config 135 has no interface number 0 [ 922.799576][ T24] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 922.808380][T11238] EXT4-fs (loop5): unmounting filesystem. [ 922.838524][ T60] usb 1-1: too many endpoints for config 135 interface 230 altsetting 126: 53, using maximum allowed: 30 [ 922.850546][ T28] audit: type=1326 audit(1756627297.276:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19168 comm="syz.2.6349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0770d8ebe9 code=0x7ffc0000 [ 922.874745][ T28] audit: type=1400 audit(1756627297.276:742): avc: denied { ioctl } for pid=19168 comm="syz.2.6349" path=2F3535312F131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D3382F66696C6531 dev="loop2" ino=15 ioctlcmd=0x6628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 922.887355][ T60] usb 1-1: config 135 interface 230 altsetting 126 has 0 endpoint descriptors, different from the interface descriptor's value: 53 [ 922.928560][ T60] usb 1-1: config 135 interface 230 has no altsetting 0 [ 922.945016][ T60] usb 1-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 922.955044][ T60] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 922.963821][ T60] usb 1-1: Product: syz [ 922.968094][ T60] usb 1-1: Manufacturer: syz [ 922.974242][ T60] usb 1-1: SerialNumber: syz [ 922.979370][ T28] audit: type=1326 audit(1756627297.276:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19168 comm="syz.2.6349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0770d8ebe9 code=0x7ffc0000 [ 923.021446][ T60] usb 1-1: Found UVC 0.00 device syz (18ec:3288) [ 923.036425][ T60] usb 1-1: No valid video chain found. [ 923.048254][T19172] loop1: detected capacity change from 0 to 40427 [ 923.138761][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 923.150987][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 923.171460][T19172] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 923.233360][ T24] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 923.265440][T19172] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 923.273826][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 923.286998][ T24] usb 3-1: config 0 descriptor?? [ 923.290535][ T60] usb 1-1: USB disconnect, device number 19 [ 923.307584][T19172] F2FS-fs (loop1): Found nat_bits in checkpoint [ 923.354549][T19172] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 923.361979][T19172] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 923.409932][T19172] overlayfs: missing 'lowerdir' [ 923.499302][ T24] usbhid 3-1:0.0: can't add hid device: -71 [ 923.507417][ T24] usbhid: probe of 3-1:0.0 failed with error -71 [ 923.518567][ T24] usb 3-1: USB disconnect, device number 46 [ 923.839065][T19192] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6356'. [ 924.041299][T10323] EXT4-fs (loop2): unmounting filesystem. [ 924.129476][T19190] loop5: detected capacity change from 0 to 40427 [ 924.151751][T19190] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 924.174358][T19190] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 924.204205][T19190] F2FS-fs (loop5): Found nat_bits in checkpoint [ 924.287863][T19194] loop0: detected capacity change from 0 to 40427 [ 924.298017][T19201] loop2: detected capacity change from 0 to 256 [ 924.312411][T19190] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 924.319643][T19194] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 924.330333][T19190] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 924.338894][T19194] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 924.381017][T19194] F2FS-fs (loop0): Found nat_bits in checkpoint [ 924.387756][T19201] FAT-fs (loop2): Directory bread(block 64) failed [ 924.425146][T19207] loop1: detected capacity change from 0 to 512 [ 924.426601][T19201] FAT-fs (loop2): Directory bread(block 65) failed [ 924.440523][T19201] FAT-fs (loop2): Directory bread(block 66) failed [ 924.447217][T19201] FAT-fs (loop2): Directory bread(block 67) failed [ 924.456845][T19201] FAT-fs (loop2): Directory bread(block 68) failed [ 924.464275][T19201] FAT-fs (loop2): Directory bread(block 69) failed [ 924.470910][T19201] FAT-fs (loop2): Directory bread(block 70) failed [ 924.473715][T19207] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 924.478009][T19201] FAT-fs (loop2): Directory bread(block 71) failed [ 924.496931][T19201] FAT-fs (loop2): Directory bread(block 72) failed [ 924.504740][T19201] FAT-fs (loop2): Directory bread(block 73) failed [ 924.538448][T11238] F2FS-fs (loop5): invalid namelen(0), ino:0, run fsck to fix. [ 924.538467][T11238] F2FS-fs (loop5): invalid namelen(0), ino:0, run fsck to fix. [ 924.548456][T11238] F2FS-fs (loop5): invalid namelen(0), ino:0, run fsck to fix. [ 924.557022][T19194] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 924.572425][T19194] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 924.580013][T11238] F2FS-fs (loop5): invalid namelen(0), ino:0, run fsck to fix. [ 924.580031][T11238] F2FS-fs (loop5): invalid namelen(0), ino:0, run fsck to fix. [ 924.604663][T11238] F2FS-fs (loop5): invalid namelen(0), ino:0, run fsck to fix. [ 924.629639][T11238] F2FS-fs (loop5): invalid namelen(0), ino:0, run fsck to fix. [ 924.645416][T19194] overlayfs: failed to resolve './file0': -2 [ 924.971791][T19215] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 925.271984][T18786] FAT-fs (loop1): error, invalid access to FAT (entry 0x22000003) [ 925.289860][T18786] FAT-fs (loop1): Filesystem has been set read-only [ 925.518970][T19222] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 926.319850][T19237] loop2: detected capacity change from 0 to 128 [ 926.551913][T19113] usb 2-1: new full-speed USB device number 42 using dummy_hcd [ 927.106627][T19113] usb 2-1: config 135 has an invalid interface number: 230 but max is 0 [ 927.123891][T19113] usb 2-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 927.137367][T19113] usb 2-1: config 135 has no interface number 0 [ 927.151201][T19113] usb 2-1: too many endpoints for config 135 interface 230 altsetting 126: 53, using maximum allowed: 30 [ 927.221052][T19113] usb 2-1: config 135 interface 230 altsetting 126 has 0 endpoint descriptors, different from the interface descriptor's value: 53 [ 927.251890][T19113] usb 2-1: config 135 interface 230 has no altsetting 0 [ 927.263556][T19113] usb 2-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 927.274669][T19113] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 927.293051][T19113] usb 2-1: Product: syz [ 927.302128][T19113] usb 2-1: Manufacturer: syz [ 927.306738][T19113] usb 2-1: SerialNumber: syz [ 927.327021][T19113] usb 2-1: Found UVC 0.00 device syz (18ec:3288) [ 927.336386][T19113] usb 2-1: No valid video chain found. [ 927.529024][T19245] loop4: detected capacity change from 0 to 40427 [ 927.529186][T19113] usb 2-1: USB disconnect, device number 42 [ 927.545983][T19245] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 927.560272][T19245] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 927.601950][T19245] F2FS-fs (loop4): Found nat_bits in checkpoint [ 927.664372][T19245] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 927.674719][T19245] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 927.679330][T19264] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 927.734232][T19245] overlayfs: failed to resolve './file0': -2 [ 929.138068][T19297] loop1: detected capacity change from 0 to 256 [ 929.699129][T19299] loop0: detected capacity change from 0 to 40427 [ 929.710695][T19299] F2FS-fs (loop0): invalid crc value [ 929.719744][T19299] F2FS-fs (loop0): Found nat_bits in checkpoint [ 929.796827][T19299] F2FS-fs (loop0): Start checkpoint disabled! [ 929.813380][T19299] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 929.881891][ T367] usb 3-1: new full-speed USB device number 47 using dummy_hcd [ 929.949691][T19299] F2FS-fs (loop0): ino:10, start:0, end:8192, need to trigger GC to reclaim enough free segment when checkpoint is enabled [ 930.065883][ T713] kworker/u4:173: attempt to access beyond end of device [ 930.065883][ T713] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 930.187213][ T28] kauditd_printk_skb: 22 callbacks suppressed [ 930.187267][ T28] audit: type=1326 audit(1756627304.916:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19312 comm="syz.4.6391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2071b8ebe9 code=0x7ffc0000 [ 930.220890][ T367] usb 3-1: config 135 has an invalid interface number: 230 but max is 0 [ 930.269642][ T367] usb 3-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 930.312602][ T367] usb 3-1: config 135 has no interface number 0 [ 930.318934][ T367] usb 3-1: too many endpoints for config 135 interface 230 altsetting 126: 53, using maximum allowed: 30 [ 930.342828][ T28] audit: type=1326 audit(1756627304.916:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19312 comm="syz.4.6391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2071b8ebe9 code=0x7ffc0000 [ 930.355584][ T367] usb 3-1: config 135 interface 230 altsetting 126 has 0 endpoint descriptors, different from the interface descriptor's value: 53 [ 930.366506][ T28] audit: type=1326 audit(1756627304.926:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19312 comm="syz.4.6391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2071b8ebe9 code=0x7ffc0000 [ 930.379826][ T367] usb 3-1: config 135 interface 230 has no altsetting 0 [ 930.412485][T19318] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 930.417363][ T28] audit: type=1326 audit(1756627304.926:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19312 comm="syz.4.6391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2071b8ebe9 code=0x7ffc0000 [ 930.447393][ T367] usb 3-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 930.466639][ T367] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 930.480381][ T367] usb 3-1: Product: syz [ 930.484684][ T367] usb 3-1: Manufacturer: syz [ 930.489373][ T367] usb 3-1: SerialNumber: syz [ 930.494126][ T28] audit: type=1326 audit(1756627304.926:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19312 comm="syz.4.6391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2071b8ebe9 code=0x7ffc0000 [ 930.504198][ T367] usb 3-1: Found UVC 0.00 device syz (18ec:3288) [ 930.545751][ T367] usb 3-1: No valid video chain found. [ 930.549172][ T28] audit: type=1326 audit(1756627304.936:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19312 comm="syz.4.6391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7f2071b8ebe9 code=0x7ffc0000 [ 930.608841][ T28] audit: type=1326 audit(1756627304.936:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19312 comm="syz.4.6391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2071b8ebe9 code=0x7ffc0000 [ 930.633335][ T28] audit: type=1326 audit(1756627304.936:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19312 comm="syz.4.6391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2071b8ebe9 code=0x7ffc0000 [ 930.786125][ T367] usb 3-1: USB disconnect, device number 47 [ 930.857009][T19324] loop5: detected capacity change from 0 to 256 [ 930.982080][T19324] FAT-fs (loop5): Directory bread(block 64) failed [ 930.989060][T19324] FAT-fs (loop5): Directory bread(block 65) failed [ 930.996024][T19324] FAT-fs (loop5): Directory bread(block 66) failed [ 931.002690][T19324] FAT-fs (loop5): Directory bread(block 67) failed [ 931.009588][T19324] FAT-fs (loop5): Directory bread(block 68) failed [ 931.016289][T19324] FAT-fs (loop5): Directory bread(block 69) failed [ 931.023126][T19324] FAT-fs (loop5): Directory bread(block 70) failed [ 931.029852][T19324] FAT-fs (loop5): Directory bread(block 71) failed [ 931.036686][T19324] FAT-fs (loop5): Directory bread(block 72) failed [ 931.043410][T19324] FAT-fs (loop5): Directory bread(block 73) failed [ 932.111100][T19338] tipc: Started in network mode [ 932.116162][T19338] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 932.125977][T19338] tipc: Enabled bearer , priority 10 [ 932.415159][T19341] loop5: detected capacity change from 0 to 256 [ 932.451893][T19341] FAT-fs (loop5): Directory bread(block 64) failed [ 932.472242][T19341] FAT-fs (loop5): Directory bread(block 65) failed [ 932.495309][T19341] FAT-fs (loop5): Directory bread(block 66) failed [ 932.511941][T19341] FAT-fs (loop5): Directory bread(block 67) failed [ 932.528306][T19341] FAT-fs (loop5): Directory bread(block 68) failed [ 932.673535][T19341] FAT-fs (loop5): Directory bread(block 69) failed [ 932.774337][T19341] FAT-fs (loop5): Directory bread(block 70) failed [ 932.780968][T19341] FAT-fs (loop5): Directory bread(block 71) failed [ 932.793569][T19341] FAT-fs (loop5): Directory bread(block 72) failed [ 932.800168][T19341] FAT-fs (loop5): Directory bread(block 73) failed [ 932.921455][T19352] loop4: detected capacity change from 0 to 256 [ 933.357677][ T3870] tipc: Node number set to 4269801488 [ 933.717427][T19362] loop2: detected capacity change from 0 to 512 [ 933.734184][T19362] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 933.954335][T19362] EXT4-fs (loop2): 1 truncate cleaned up [ 933.960084][T19362] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 934.366703][T19373] loop0: detected capacity change from 0 to 128 [ 934.434167][ T28] audit: type=1400 audit(1756627309.126:774): avc: denied { write } for pid=19371 comm="syz.1.6408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 934.799544][T10323] EXT4-fs (loop2): unmounting filesystem. [ 934.803938][T19380] loop1: detected capacity change from 0 to 128 [ 934.813631][ T28] audit: type=1326 audit(1756627309.566:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19370 comm="syz.4.6409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2071b8ebe9 code=0x7ffc0000 [ 934.953195][T19386] 9pnet_fd: Insufficient options for proto=fd [ 935.347479][T19396] loop4: detected capacity change from 0 to 256 [ 936.077204][T19406] loop2: detected capacity change from 0 to 512 [ 936.087228][T19406] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 936.440592][T19406] EXT4-fs (loop2): 1 truncate cleaned up [ 936.446357][T19406] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 936.934314][T10323] EXT4-fs (loop2): unmounting filesystem. [ 937.832705][T19432] loop4: detected capacity change from 0 to 512 [ 937.892240][T19432] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 937.970107][T19432] EXT4-fs (loop4): 1 truncate cleaned up [ 937.975888][T19432] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 938.297752][T19419] loop2: detected capacity change from 0 to 40427 [ 938.359172][T19419] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 938.388063][T19419] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 938.465063][T19419] F2FS-fs (loop2): Found nat_bits in checkpoint [ 938.635550][T17585] EXT4-fs (loop4): unmounting filesystem. [ 938.679215][T19419] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 938.688415][T19419] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 938.712345][T19454] loop5: detected capacity change from 0 to 512 [ 938.832999][T19454] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 938.857723][T19419] overlayfs: failed to resolve './file0': -2 [ 938.960869][T19454] EXT4-fs (loop5): orphan cleanup on readonly fs [ 938.987724][T19454] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.6431: bg 0: block 248: padding at end of block bitmap is not set [ 939.003116][T19454] __quota_error: 7 callbacks suppressed [ 939.003134][T19454] Quota error (device loop5): write_blk: dquota write failed [ 939.017179][T19454] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 939.027481][T19454] EXT4-fs error (device loop5): ext4_acquire_dquot:6801: comm syz.5.6431: Failed to acquire dquot type 1 [ 939.055496][T19454] EXT4-fs (loop5): 1 truncate cleaned up [ 939.071638][T19454] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 939.400185][ T692] ================================================================== [ 939.408287][ T692] BUG: KASAN: use-after-free in l2tp_session_delete+0x27/0x4e0 [ 939.415970][ T692] Write of size 8 at addr ffff888131a06408 by task kworker/u4:154/692 [ 939.424125][ T692] [ 939.426466][ T692] CPU: 1 PID: 692 Comm: kworker/u4:154 Not tainted syzkaller #0 [ 939.434099][ T692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 939.444159][ T692] Workqueue: l2tp l2tp_tunnel_del_work [ 939.449657][ T692] Call Trace: [ 939.452944][ T692] [ 939.455877][ T692] __dump_stack+0x21/0x24 [ 939.460334][ T692] dump_stack_lvl+0xee/0x150 [ 939.464962][ T692] ? __cfi_dump_stack_lvl+0x8/0x8 [ 939.470007][ T692] ? release_firmware_map_entry+0x194/0x194 [ 939.476013][ T692] ? l2tp_session_delete+0x27/0x4e0 [ 939.481273][ T692] print_address_description+0x71/0x210 [ 939.486951][ T692] print_report+0x4a/0x60 [ 939.491305][ T692] kasan_report+0x122/0x150 [ 939.495921][ T692] ? l2tp_session_delete+0x27/0x4e0 [ 939.501143][ T692] ? __this_cpu_preempt_check+0x13/0x20 [ 939.506705][ T692] kasan_check_range+0x280/0x290 [ 939.512547][ T692] __kasan_check_write+0x14/0x20 [ 939.517490][ T692] l2tp_session_delete+0x27/0x4e0 [ 939.522516][ T692] l2tp_tunnel_del_work+0x201/0x420 [ 939.527706][ T692] process_one_work+0x71f/0xc40 [ 939.532566][ T692] worker_thread+0xa29/0x11f0 [ 939.537301][ T692] kthread+0x281/0x320 [ 939.541358][ T692] ? __cfi_worker_thread+0x10/0x10 [ 939.546452][ T692] ? __cfi_kthread+0x10/0x10 [ 939.551024][ T692] ret_from_fork+0x1f/0x30 [ 939.555434][ T692] [ 939.558435][ T692] [ 939.560746][ T692] Allocated by task 19455: [ 939.565134][ T692] kasan_set_track+0x4b/0x70 [ 939.569706][ T692] kasan_save_alloc_info+0x25/0x30 [ 939.574801][ T692] __kasan_kmalloc+0x95/0xb0 [ 939.579371][ T692] __kmalloc+0xb1/0x1e0 [ 939.583609][ T692] l2tp_session_create+0x38/0xbe0 [ 939.588619][ T692] pppol2tp_connect+0xb35/0x1570 [ 939.593538][ T692] __sys_connect+0x398/0x420 [ 939.598173][ T692] __x64_sys_connect+0x7a/0x90 [ 939.602949][ T692] x64_sys_call+0x88d/0x9a0 [ 939.607439][ T692] do_syscall_64+0x4c/0xa0 [ 939.611835][ T692] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 939.617765][ T692] [ 939.620075][ T692] Freed by task 19451: [ 939.624137][ T692] kasan_set_track+0x4b/0x70 [ 939.628724][ T692] kasan_save_free_info+0x31/0x50 [ 939.633739][ T692] ____kasan_slab_free+0x132/0x180 [ 939.638838][ T692] __kasan_slab_free+0x11/0x20 [ 939.643593][ T692] slab_free_freelist_hook+0xc2/0x190 [ 939.649128][ T692] __kmem_cache_free+0xb7/0x1b0 [ 939.653981][ T692] kfree+0x6f/0xf0 [ 939.657715][ T692] l2tp_session_dec_refcount+0xaf/0x1a0 [ 939.663252][ T692] pppol2tp_session_destruct+0xb1/0xf0 [ 939.668702][ T692] __sk_destruct+0x64/0x600 [ 939.673257][ T692] __sk_free+0x313/0x410 [ 939.677480][ T692] sk_free+0x54/0x90 [ 939.681376][ T692] pppol2tp_put_sk+0x7a/0xb0 [ 939.685946][ T692] rcu_do_batch+0x515/0xb90 [ 939.690491][ T692] rcu_core+0x5a5/0xe70 [ 939.694626][ T692] rcu_core_si+0x9/0x10 [ 939.698767][ T692] handle_softirqs+0x1d7/0x600 [ 939.703511][ T692] __irq_exit_rcu+0x52/0xf0 [ 939.707995][ T692] irq_exit_rcu+0x9/0x10 [ 939.712217][ T692] sysvec_apic_timer_interrupt+0x58/0xc0 [ 939.717836][ T692] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 939.723830][ T692] [ 939.726138][ T692] Last potentially related work creation: [ 939.731828][ T692] kasan_save_stack+0x3a/0x60 [ 939.736489][ T692] __kasan_record_aux_stack+0xb6/0xc0 [ 939.741844][ T692] kasan_record_aux_stack_noalloc+0xb/0x10 [ 939.747640][ T692] call_rcu+0xd4/0xf90 [ 939.751689][ T692] pppol2tp_release+0x208/0x2d0 [ 939.756518][ T692] sock_close+0xf1/0x290 [ 939.760744][ T692] __fput+0x1fc/0x8f0 [ 939.764792][ T692] ____fput+0x15/0x20 [ 939.768756][ T692] task_work_run+0x1db/0x240 [ 939.773333][ T692] exit_to_user_mode_loop+0x9b/0xb0 [ 939.778564][ T692] exit_to_user_mode_prepare+0x5a/0xa0 [ 939.784001][ T692] syscall_exit_to_user_mode+0x1a/0x30 [ 939.789439][ T692] do_syscall_64+0x58/0xa0 [ 939.793828][ T692] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 939.799787][ T692] [ 939.802092][ T692] Second to last potentially related work creation: [ 939.808653][ T692] kasan_save_stack+0x3a/0x60 [ 939.813313][ T692] __kasan_record_aux_stack+0xb6/0xc0 [ 939.818669][ T692] kasan_record_aux_stack_noalloc+0xb/0x10 [ 939.824456][ T692] kvfree_call_rcu+0x95/0x7a0 [ 939.829112][ T692] inet6_ifa_finish_destroy+0x129/0x1b0 [ 939.834704][ T692] addrconf_ifdown+0x1225/0x1910 [ 939.839924][ T692] addrconf_notify+0x39f/0xe40 [ 939.844670][ T692] raw_notifier_call_chain+0xa1/0x110 [ 939.850031][ T692] dev_close_many+0x32d/0x4d0 [ 939.854816][ T692] unregister_netdevice_many+0x439/0x1820 [ 939.860555][ T692] unregister_netdevice_queue+0x31c/0x360 [ 939.866257][ T692] __tun_detach+0xca6/0x1460 [ 939.870993][ T692] tun_chr_close+0x92/0x140 [ 939.875504][ T692] __fput+0x1fc/0x8f0 [ 939.879486][ T692] ____fput+0x15/0x20 [ 939.883452][ T692] task_work_run+0x1db/0x240 [ 939.888026][ T692] exit_to_user_mode_loop+0x9b/0xb0 [ 939.893207][ T692] exit_to_user_mode_prepare+0x5a/0xa0 [ 939.898647][ T692] syscall_exit_to_user_mode+0x1a/0x30 [ 939.904090][ T692] do_syscall_64+0x58/0xa0 [ 939.908486][ T692] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 939.914448][ T692] [ 939.916763][ T692] The buggy address belongs to the object at ffff888131a06400 [ 939.916763][ T692] which belongs to the cache kmalloc-512 of size 512 [ 939.931193][ T692] The buggy address is located 8 bytes inside of [ 939.931193][ T692] 512-byte region [ffff888131a06400, ffff888131a06600) [ 939.944293][ T692] [ 939.946609][ T692] The buggy address belongs to the physical page: [ 939.953000][ T692] page:ffffea0004c68100 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x131a04 [ 939.963224][ T692] head:ffffea0004c68100 order:2 compound_mapcount:0 compound_pincount:0 [ 939.971548][ T692] flags: 0x4000000000010200(slab|head|zone=1) [ 939.977620][ T692] raw: 4000000000010200 ffffea00041e3500 dead000000000002 ffff888100042f00 [ 939.986187][ T692] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 939.994742][ T692] page dumped because: kasan: bad access detected [ 940.001139][ T692] page_owner tracks the page as allocated [ 940.006829][ T692] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 284, tgid 284 (syz-executor), ts 22391463308, free_ts 0 [ 940.027298][ T692] post_alloc_hook+0x1f5/0x210 [ 940.032124][ T692] prep_new_page+0x1c/0x110 [ 940.036644][ T692] get_page_from_freelist+0x2c7b/0x2cf0 [ 940.042354][ T692] __alloc_pages+0x1c3/0x450 [ 940.046946][ T692] alloc_slab_page+0x6e/0xf0 [ 940.051610][ T692] new_slab+0x98/0x3d0 [ 940.055666][ T692] ___slab_alloc+0x6f6/0xb50 [ 940.060246][ T692] __slab_alloc+0x5e/0xa0 [ 940.064557][ T692] __kmem_cache_alloc_node+0x203/0x2c0 [ 940.069999][ T692] kmalloc_trace+0x29/0xb0 [ 940.074411][ T692] ipv6_add_addr+0x3d8/0xe40 [ 940.078984][ T692] add_addr+0x8a/0x290 [ 940.083051][ T692] add_v4_addrs+0x5f4/0xa70 [ 940.087542][ T692] addrconf_init_auto_addrs+0x928/0xcc0 [ 940.093158][ T692] addrconf_notify+0x803/0xe40 [ 940.097909][ T692] raw_notifier_call_chain+0xa1/0x110 [ 940.103269][ T692] page_owner free stack trace missing [ 940.108614][ T692] [ 940.110925][ T692] Memory state around the buggy address: [ 940.116706][ T692] ffff888131a06300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 940.124746][ T692] ffff888131a06380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 940.132793][ T692] >ffff888131a06400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 940.140922][ T692] ^ [ 940.145240][ T692] ffff888131a06480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 940.153279][ T692] ffff888131a06500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 940.161314][ T692] ================================================================== [ 940.169941][ T692] Disabling lock debugging due to kernel taint [ 940.219634][T11238] EXT4-fs (loop5): unmounting filesystem. [ 940.491931][ T28] audit: type=1326 audit(1756627315.196:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19467 comm="syz.0.6436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdced58ebe9 code=0x7ffc0000 [ 940.515508][ T28] audit: type=1326 audit(1756627315.196:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19467 comm="syz.0.6436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdced58ebe9 code=0x7ffc0000 [ 940.539291][ T28] audit: type=1326 audit(1756627315.196:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19467 comm="syz.0.6436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdced58ebe9 code=0x7ffc0000 [ 940.562836][ T28] audit: type=1326 audit(1756627315.196:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19467 comm="syz.0.6436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdced58ebe9 code=0x7ffc0000 [ 940.587109][ T28] audit: type=1326 audit(1756627315.196:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19467 comm="syz.0.6436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdced58ebe9 code=0x7ffc0000