last executing test programs: 27.347903793s ago: executing program 0 (id=6939): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2000040, &(0x7f0000000280), 0x10, 0x4dc, &(0x7f0000000d80)="$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") lchown(0x0, 0x0, 0xee01) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_clone3(&(0x7f0000000480)={0x42030200, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300), {0x11}, &(0x7f0000001280)=""/164, 0xa4, 0x0, &(0x7f0000000440)=[0xffffffffffffffff, 0x0, 0x0], 0x3}, 0x58) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x401}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$inet(0xa, 0x1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\x00\x00\x00\x00\xd4\xa2\x88\x00\xd1l,'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001380)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r3, &(0x7f00000000c0)=""/4096, 0x1000) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x20044e, &(0x7f0000000a40)={[{@minixdf}, {@errors_remount}, {@inlinecrypt}, {@stripe={'stripe', 0x3d, 0x100000000bf}}, {@usrjquota}]}, 0x1, 0x454, &(0x7f0000000400)="$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") creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1b) 21.994983571s ago: executing program 3 (id=6949): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffbfff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) socket(0x10, 0x3, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x409c884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @local}, 0x1c) rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x8, &(0x7f0000000440)) r5 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) fallocate(r5, 0x0, 0x400000000000000, 0x2) 21.25200111s ago: executing program 0 (id=6950): prlimit64(0x0, 0xe, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000740)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@auto_da_alloc}, {@noload}, {@nodiscard}]}, 0x64, 0x50a, &(0x7f0000000200)="$eJzs3VFrHFsdAPD/bHZr06Y3ueqDXvB6tZW0aHeTxrbBh1pB9Kmg1vcak00I2WRDdtM2oWiKH0AQUcEnffFF8AMIUvDFRxEK+qyoKKKtPvigncvuTtI03U227TabZn8/mMw5Z2b2f86GmZ0zc5gJYGC9FxHXI+JJmqYXImI0K89lU2y1psZ6jx/dm21MSaTpzX8mkWRl25+VZPPT2WYnI+JrX474ZvJ83NrG5tJMpVJey/Kl+vJqqbaxeXFxeWahvFBemZqavDJ9dfry9ERP2nkmIq598a8/+O7PvnTtV5+586dbfz//rUa1RrLlu9vxgvL7LWw1vdD8LnZvsPaSwY6ifLOFmeF2aww9V3L/NdcJAID2Guf4H4yIT0bEhRiNof1PZwEAAIA3UPr5kfhfEpG2d6JDOQAAAPAGyTXHwCa5YjYWYCRyuWKxNYb3w3EqV6nW6p+er66vzLXGyo5FITe/WClPZGOFx6KQNPKTzfTT/KU9+amIeDsivj863MwXZ6uVuX5f/AAAAIABcXpP//8/o63+PwAAAHDMjPW7AgAAAMBrp/8PAAAAx5/+PwAAABxrX7lxozGl2++/nru9sb5UvX1xrlxbKi6vzxZnq2urxYVqdaH5zL7lgz6vUq2ufjZW1u+W6uVavVTb2Ly1XF1fqd9afOYV2AAAAMAhevvjD/6QRMTW54abU8OJ7jbtcjXgqMrvpJJs3ma3/uNbrflfDqlSwKEY6ncFgL7J97sCQN8U+l0BoO+SA5Z3HLzz22z+id7WBwAA6L3xj3a+/5/bd8ut/RcDR56dGAaX+/8wuJr3/7sdyetkAY6VgjMAGHivfP//QGn6QhUCAAB6bqQ5JblidnlvJHK5YjHiTPO1AIVkfrFSnoiItyLi96OFDzTyk80tkwP7DAAAAAAAAAAAAAAAAAAAAAAAAABAS5omkQIAAADHWkTub8mvW8/yHx89N7L3+sCJ5L+jkb0i9M6Pb/7w7ky9vjbZKP/XTnn9R1n5pX5cwQAAAICB8EIv8N/up2/34wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACglx4/uje7PR1m3H98ISLG2sXPx8nm/GQUIuLUv5PI79ouiYihHsQfbvz5SLv4SaNaOyHbxR/uQfyt+/vGj7HsW2gX/3QP4sMge9A4/lxvt//l4r3mvP3+l494Jv+yOh//Yuf4N9Rh/z/TZYx3Hv6i1DH+/Yh38u2PP9vxkw7xz3YZ/xtf39zstCz9ScR429+f5JlYpfryaqm2sXlxcXlmobxQXpmamrwyfXX68vREaX6xUs7+to3xvY/98sl+7T/VIf7YAe0/12X7///w7qMPtZKFdvHPn20T/zc/zdZ4Pn4u++37VJZuLB/fTm+10ru9+/Pfvbtf++c6tP+g///5Ltt/4avf+XOXqwIAh6C2sbk0U6mU145totFLPwLVkDiCiW/39APTNE0b+9QrfE4SR+FraSb6fWQCAAB67elJf79rAgAAAAAAAAAAAAAAAAAAAIPrMB4ntjfm1k4q6cUjtAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeuL9AAAA//+GAdlV") 21.049887423s ago: executing program 1 (id=6962): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000, &(0x7f0000000200)='\'\x00') r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005", @ANYBLOB, @ANYBLOB], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454c9, 0xb) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0xb) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x25) sendto(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000340)=@nfc_llcp={0x27, 0x0, 0x0, 0x2, 0xb, 0x7, "86df978be36463552b768254e3036a44a83c50f53dda8ed4cc02ade517e6656e9c9c1bf78f96dfed702d4af81e1d1dbb6e9f2f773c0949fb8606a42cb18f44", 0x24}, 0x80) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000440), 0x1000a) 18.566832304s ago: executing program 3 (id=6952): prlimit64(0x0, 0xe, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = add_key$user(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) keyctl$link(0x8, r3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000740)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@auto_da_alloc}, {@noload}, {@nodiscard}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") 15.305378225s ago: executing program 1 (id=6954): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000, &(0x7f0000000200)='\'\x00') r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454c9, 0xb) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0xb) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x25) sendto(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000340)=@nfc_llcp={0x27, 0x0, 0x0, 0x2, 0xb, 0x7, "86df978be36463552b768254e3036a44a83c50f53dda8ed4cc02ade517e6656e9c9c1bf78f96dfed702d4af81e1d1dbb6e9f2f773c0949fb8606a42cb18f44", 0x24}, 0x80) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000440), 0x1000a) 15.304071115s ago: executing program 4 (id=6955): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000f40)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000f00)={&(0x7f0000000d00)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="000329bd7000ffdbdf2501000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e7465", @ANYBLOB, @ANYBLOB="04000280"], 0xe0}, 0x1, 0x0, 0x0, 0x8064811}, 0x0) getitimer(0x0, &(0x7f0000000440)={{0x0, 0x0}}) open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000b80)=ANY=[@ANYRES8=r1, @ANYRES16=0x0, @ANYRES16=0x0, @ANYBLOB="ef46c1de091444fa8896086170ed381b1fde756219d0b11ebd4e0273050187fdc4e861862525cb0bc86aee464395bcaf0c7fffe0bd609d1d10fbb6226516f199be1c", @ANYRESHEX=r0], 0x0) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$unix(0x1, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000040)=0x52d3, 0x4) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r2, 0x0, 0x20000800) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/timer_list\x00', 0x0, 0x0) 15.303708745s ago: executing program 0 (id=6956): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_tables_matches\x00') r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) write$binfmt_format(r2, &(0x7f0000000100)='-1\x00', 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) fstatfs(r2, &(0x7f00000006c0)=""/169) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) unshare(0x26020480) sendmsg$WG_CMD_SET_DEVICE(r1, 0x0, 0x40) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="500100001000130400000000fbdbdf25fe800000000000000000000000000000ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000010000000032000000fc02000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000a000000000000000000000060001200726663343130362867636d28616573292900"/209], 0x150}}, 0x8004) 14.640042214s ago: executing program 2 (id=6957): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, 0x0, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @broadcast}}}, 0x108) timer_create(0x5, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r5) capset(&(0x7f0000000000)={0x20080522}, 0x0) 14.214635509s ago: executing program 4 (id=6958): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x52, 0x0, 0x41100, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffe97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x8031, 0xffffffffffffffff, 0x69703000) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0xc4) connect$netlink(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x68, 0x30, 0x829, 0x0, 0x25dfdbff, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) unshare(0x64000600) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'xfrm0\x00', 0x0}) r2 = gettid() sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005f00)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r1, @ANYBLOB="6d3082610000", @ANYRES32=r2], 0x28}}, 0x0) 14.213868819s ago: executing program 3 (id=6960): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000, &(0x7f0000000200)='\'\x00') r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000000004000000", @ANYBLOB, @ANYBLOB], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454c9, 0xb) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0xb) sendto(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000340)=@nfc_llcp={0x27, 0x0, 0x0, 0x2, 0xb, 0x7, "86df978be36463552b768254e3036a44a83c50f53dda8ed4cc02ade517e6656e9c9c1bf78f96dfed702d4af81e1d1dbb6e9f2f773c0949fb8606a42cb18f44", 0x24}, 0x80) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000440), 0x1000a) 12.713896569s ago: executing program 2 (id=6961): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000, &(0x7f0000000200)='\'\x00') r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005", @ANYBLOB, @ANYBLOB], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454c9, 0xb) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0xb) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x25) sendto(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000340)=@nfc_llcp={0x27, 0x0, 0x0, 0x2, 0xb, 0x7, "86df978be36463552b768254e3036a44a83c50f53dda8ed4cc02ade517e6656e9c9c1bf78f96dfed702d4af81e1d1dbb6e9f2f773c0949fb8606a42cb18f44", 0x24}, 0x80) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000440), 0x1000a) 12.361986703s ago: executing program 4 (id=6963): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r3, &(0x7f0000001fc0)=""/184, 0x20002078) 11.606792523s ago: executing program 1 (id=6965): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffbfff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) socket(0x10, 0x3, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x409c884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @local}, 0x1c) rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x8, &(0x7f0000000440)) r5 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) fallocate(r5, 0x0, 0x400000000000000, 0x2) 9.752587516s ago: executing program 4 (id=6966): prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = add_key$user(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) keyctl$link(0x8, r3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000740)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@auto_da_alloc}, {@noload}, {@nodiscard}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") 9.698794227s ago: executing program 0 (id=6967): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="09000400"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYRESHEX, @ANYBLOB="1b00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/13], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x60}]}, &(0x7f0000000080)='syzkaller\x00', 0x4, 0x98, &(0x7f00000000c0)=""/152, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r6 = socket(0x2, 0x3, 0xff) bind$inet(r6, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r6, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) bind$inet(r6, &(0x7f0000000500)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x18) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) recvmsg(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1}, 0x40fd) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100), 0x3f00, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000088fc87280400000000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000430000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 7.85549713s ago: executing program 3 (id=6968): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000, &(0x7f0000000200)='\'\x00') r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005", @ANYBLOB, @ANYBLOB], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454c9, 0xb) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0xb) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x25) sendto(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000340)=@nfc_llcp={0x27, 0x0, 0x0, 0x2, 0xb, 0x7, "86df978be36463552b768254e3036a44a83c50f53dda8ed4cc02ade517e6656e9c9c1bf78f96dfed702d4af81e1d1dbb6e9f2f773c0949fb8606a42cb18f44", 0x24}, 0x80) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000440), 0x1000a) 7.799098421s ago: executing program 2 (id=6969): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000, &(0x7f0000000200)='\'\x00') r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005", @ANYBLOB, @ANYBLOB], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454c9, 0xb) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0xb) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x25) sendto(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000340)=@nfc_llcp={0x27, 0x0, 0x0, 0x2, 0xb, 0x7, "86df978be36463552b768254e3036a44a83c50f53dda8ed4cc02ade517e6656e9c9c1bf78f96dfed702d4af81e1d1dbb6e9f2f773c0949fb8606a42cb18f44", 0x24}, 0x80) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000440), 0x1000a) 5.983350994s ago: executing program 4 (id=6970): openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x201c2, 0x40) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') r1 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r1, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x804892, &(0x7f0000000100), 0x1, 0x78f, &(0x7f0000000900)="$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") r4 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3000000, 0x13, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001400030400000000000000000a3f0000", @ANYRES32, @ANYBLOB="14000200ff2300000000000000000000000000011400060000000000060000000000000000000000080008000004"], 0x48}}, 0x0) read$FUSE(r0, &(0x7f0000002280)={0x2020}, 0x2020) chdir(&(0x7f0000000000)='./file0\x00') socket$inet(0x2, 0x1, 0x0) 5.010871466s ago: executing program 1 (id=6971): r0 = socket$inet6(0xa, 0x2, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000d7856e197eeb6f71c93069c6"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_subtree(r5, &(0x7f0000002300)=ANY=[], 0xfdef) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r6, 0x36, 0x0}, 0x10) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000180)='./file0\x00', 0x1000840, &(0x7f0000000f00)=ANY=[@ANYBLOB="696f636861727365743d6b6f69382d72752c73686f72746e616d653d77696e6e742c636f6465706167653d3935302c757466383d312c6e6f6e756d7461696c3d302c73686f72746e616d653d6c6f7765722c757466383d302c756e695f786c6174653d302c696f636861727365743d63703836352c757466383d312c73686f72746e616d653d6c6f7765722c757466383d302c73686f72746e616d653d77696e6e742c001d46d61beb"], 0x3, 0x384, &(0x7f0000000b40)="$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") bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0xfffffffc, @local, 0x2}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4e, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xa}, 0x1c) 4.989525096s ago: executing program 2 (id=6972): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) listen(0xffffffffffffffff, 0x3) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xb, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r3, &(0x7f0000001fc0)=""/184, 0x20002078) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) listen(r4, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000070000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 4.871229128s ago: executing program 3 (id=6973): openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x201c2, 0x40) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') r1 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r1, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x804892, &(0x7f0000000100), 0x1, 0x78f, &(0x7f0000000900)="$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") r4 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3000000, 0x13, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001400030400000000000000000a3f0000", @ANYRES32, @ANYBLOB="14000200ff2300000000000000000000000000011400060000000000060000000000000000000000080008000004"], 0x48}}, 0x0) read$FUSE(r0, &(0x7f0000002280)={0x2020}, 0x2020) chdir(&(0x7f0000000000)='./file0\x00') socket$inet(0x2, 0x1, 0x0) 4.389230224s ago: executing program 0 (id=6974): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000, &(0x7f0000000200)='\'\x00') r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005", @ANYBLOB, @ANYBLOB], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454c9, 0xb) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0xb) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x25) sendto(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000340)=@nfc_llcp={0x27, 0x0, 0x0, 0x2, 0xb, 0x7, "86df978be36463552b768254e3036a44a83c50f53dda8ed4cc02ade517e6656e9c9c1bf78f96dfed702d4af81e1d1dbb6e9f2f773c0949fb8606a42cb18f44", 0x24}, 0x80) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000440), 0x1000a) 4.009354129s ago: executing program 2 (id=6975): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, 0x0, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @broadcast}}}, 0x108) timer_create(0x5, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r5) capset(&(0x7f0000000000)={0x20080522}, 0x0) 4.006001349s ago: executing program 1 (id=6985): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000140)={0x2, 0x200, @remote}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, 0x0) mlockall(0x7) 2.914202633s ago: executing program 4 (id=6976): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000, &(0x7f0000000200)='\'\x00') r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454c9, 0xb) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0xb) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x25) sendto(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000340)=@nfc_llcp={0x27, 0x0, 0x0, 0x2, 0xb, 0x7, "86df978be36463552b768254e3036a44a83c50f53dda8ed4cc02ade517e6656e9c9c1bf78f96dfed702d4af81e1d1dbb6e9f2f773c0949fb8606a42cb18f44", 0x24}, 0x80) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000440), 0x1000a) 4.72786ms ago: executing program 0 (id=6977): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_tables_matches\x00') r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) write$binfmt_format(r2, &(0x7f0000000100)='-1\x00', 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) fstatfs(r2, &(0x7f00000006c0)=""/169) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) unshare(0x26020480) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8810}, 0x40) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="500100001000130400000000fbdbdf25fe800000000000000000000000000000ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000010000000032000000fc02000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000a000000000000000000000060001200726663343130362867636d28616573292900"/209], 0x150}}, 0x8004) 3.95894ms ago: executing program 1 (id=6978): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) listen(0xffffffffffffffff, 0x3) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xb, &(0x7f0000000100)=0x400, 0x4) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r3, &(0x7f0000001fc0)=""/184, 0x20002078) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) listen(r4, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000070000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 2.51559ms ago: executing program 2 (id=6979): prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000740)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@auto_da_alloc}, {@noload}, {@nodiscard}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") 0s ago: executing program 3 (id=6980): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, 0x0, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @broadcast}}}, 0x108) timer_create(0x5, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r5) capset(&(0x7f0000000000)={0x20080522}, 0x0) kernel console output (not intermixed with test programs): 326 audit(1745496555.000:2174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30387 comm="syz.1.6464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519bfd7969 code=0x7ffc0000 [ 2182.701435][T30393] syz.1.6464[30393] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2182.701487][T30393] syz.1.6464[30393] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2182.701516][ T23] audit: type=1326 audit(1745496555.000:2175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30387 comm="syz.1.6464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f519bfd7969 code=0x7ffc0000 [ 2182.778832][T30386] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 2182.792883][T30386] ext4 filesystem being mounted at /64/bus supports timestamps until (%ptR?) (0x7fffffff) [ 2182.798906][ T23] audit: type=1326 audit(1745496555.000:2176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30387 comm="syz.1.6464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519bfd7969 code=0x7ffc0000 [ 2182.832894][T30391] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 2182.855514][ T23] audit: type=1326 audit(1745496555.000:2177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30387 comm="syz.1.6464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519bfd7969 code=0x7ffc0000 [ 2182.921711][ T23] audit: type=1326 audit(1745496555.000:2178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30387 comm="syz.1.6464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f519bfd7969 code=0x7ffc0000 [ 2182.998199][ T23] audit: type=1326 audit(1745496555.000:2179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30387 comm="syz.1.6464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519bfd7969 code=0x7ffc0000 [ 2183.051623][T30397] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 2183.540618][T30402] F2FS-fs (loop4): invalid crc value [ 2183.581738][T30402] F2FS-fs (loop4): Cannot turn on quotas: -2 on 0 [ 2183.588791][T30402] F2FS-fs (loop4): Start checkpoint disabled! [ 2183.595996][T30402] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 2184.301473][T30412] EXT4-fs (loop0): 1 orphan inode deleted [ 2184.312636][T30421] EXT4-fs (loop1): orphan cleanup on readonly fs [ 2184.322549][T30421] EXT4-fs error (device loop1): ext4_validate_block_bitmap:418: comm syz.1.6469: bg 0: block 248: padding at end of block bitmap is not set [ 2184.345505][T30421] EXT4-fs (loop1): 1 truncate cleaned up [ 2184.351525][T30421] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue [ 2184.439285][T30412] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 2184.920262][T30412] ext4 filesystem being mounted at /78/file1 supports timestamps until (%ptR?) (0x7fffffff) [ 2186.588789][T30438] overlayfs: overlapping lowerdir path [ 2187.279111][ T7] attempt to access beyond end of device [ 2187.279111][ T7] loop4: rw=2049, want=45104, limit=40427 [ 2188.003197][T30445] F2FS-fs (loop2): invalid crc value [ 2188.057832][T30445] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0 [ 2188.066441][T30445] F2FS-fs (loop2): Start checkpoint disabled! [ 2188.180695][T30450] EXT4-fs (loop3): orphan cleanup on readonly fs [ 2188.190503][T30450] EXT4-fs error (device loop3): ext4_validate_block_bitmap:418: comm syz.3.6476: bg 0: block 248: padding at end of block bitmap is not set [ 2188.205493][T30450] __quota_error: 33 callbacks suppressed [ 2188.210986][T30450] Quota error (device loop3): write_blk: dquota write failed [ 2188.218323][T30450] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 2188.230020][T30450] EXT4-fs (loop3): 1 truncate cleaned up [ 2188.236170][T30450] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue [ 2188.309381][T30445] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 2189.005986][T30461] attempt to access beyond end of device [ 2189.005986][T30461] loop2: rw=2049, want=78344, limit=40427 [ 2189.235904][T19089] attempt to access beyond end of device [ 2189.235904][T19089] loop2: rw=2049, want=45104, limit=40427 [ 2192.623656][T30468] EXT4-fs warning (device loop3): ext4_multi_mount_protect:387: Unable to create kmmpd thread for loop3. [ 2192.668155][ T23] audit: type=1326 audit(1745496566.290:2211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30478 comm="syz.2.6479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3359409969 code=0x7ffc0000 [ 2193.692498][T30485] syz.2.6479[30485] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2193.692545][T30485] syz.2.6479[30485] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2193.725528][ T23] audit: type=1326 audit(1745496566.440:2212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30478 comm="syz.2.6479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f3359409969 code=0x7ffc0000 [ 2193.770407][ T23] audit: type=1326 audit(1745496566.440:2213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30478 comm="syz.2.6479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3359409969 code=0x7ffc0000 [ 2193.795039][ T23] audit: type=1326 audit(1745496566.450:2214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30478 comm="syz.2.6479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3359409969 code=0x7ffc0000 [ 2193.864693][ T23] audit: type=1326 audit(1745496566.450:2215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30478 comm="syz.2.6479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3359409969 code=0x7ffc0000 [ 2193.917501][ T23] audit: type=1326 audit(1745496566.450:2216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30478 comm="syz.2.6479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3359409969 code=0x7ffc0000 [ 2193.948879][ T23] audit: type=1326 audit(1745496566.450:2217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30478 comm="syz.2.6479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3359409969 code=0x7ffc0000 [ 2193.972465][ T23] audit: type=1326 audit(1745496566.450:2218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30478 comm="syz.2.6479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3359409969 code=0x7ffc0000 [ 2193.996757][ T23] audit: type=1326 audit(1745496566.450:2219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30478 comm="syz.2.6479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3359409969 code=0x7ffc0000 [ 2194.041112][ T23] audit: type=1326 audit(1745496566.450:2220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30478 comm="syz.2.6479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f3359409969 code=0x7ffc0000 [ 2194.145849][ T23] audit: type=1326 audit(1745496566.450:2221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30478 comm="syz.2.6479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3359409969 code=0x7ffc0000 [ 2194.564894][T30482] EXT4-fs (loop4): orphan cleanup on readonly fs [ 2194.571872][T30482] EXT4-fs error (device loop4): ext4_validate_block_bitmap:418: comm syz.4.6475: bg 0: block 248: padding at end of block bitmap is not set [ 2194.591146][T30482] EXT4-fs (loop4): 1 truncate cleaned up [ 2194.596791][T30482] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue [ 2194.823414][T30498] erofs: (device loop2): mounted with opts: , root inode @ nid 36. [ 2194.900169][T30497] F2FS-fs (loop3): invalid crc value [ 2194.952003][T30497] F2FS-fs (loop3): Cannot turn on quotas: -2 on 0 [ 2194.958456][T30497] F2FS-fs (loop3): Start checkpoint disabled! [ 2194.974875][T30497] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 2195.023871][T30491] EXT4-fs (loop1): Unsupported blocksize for fs encryption [ 2195.040256][T30502] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 2195.210087][T30502] ext4 filesystem being mounted at /81/bus supports timestamps until (%ptR?) (0x7fffffff) [ 2196.068055][T30515] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 2196.082220][T30515] ext4 filesystem being mounted at /116/bus supports timestamps until (%ptR?) (0x7fffffff) [ 2196.095425][T10280] attempt to access beyond end of device [ 2196.095425][T10280] loop3: rw=2049, want=45104, limit=40427 [ 2197.613307][T30530] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 2197.627481][T30530] ext4 filesystem being mounted at /70/bus supports timestamps until (%ptR?) (0x7fffffff) [ 2199.053460][T30541] F2FS-fs (loop2): invalid crc value [ 2199.105286][T30541] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0 [ 2199.113009][T30541] F2FS-fs (loop2): Start checkpoint disabled! [ 2199.129427][T30541] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 2199.299576][T30547] EXT4-fs (loop3): 1 orphan inode deleted [ 2199.305116][T30547] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 2199.677877][T30547] ext4 filesystem being mounted at /71/file1 supports timestamps until (%ptR?) (0x7fffffff) [ 2200.760327][T30559] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 2200.774597][T30559] ext4 filesystem being mounted at /118/bus supports timestamps until (%ptR?) (0x7fffffff) [ 2201.818514][T30569] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 2201.837740][T30567] F2FS-fs (loop2): invalid crc value [ 2201.860887][T30567] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0 [ 2201.867324][T30567] F2FS-fs (loop2): Start checkpoint disabled! [ 2201.873899][T30567] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 2202.615673][T30589] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 2202.635111][T10280] attempt to access beyond end of device [ 2202.635111][T10280] loop2: rw=2049, want=45104, limit=40427 [ 2202.851273][T30588] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 2202.880314][T30588] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 2202.909936][T30588] F2FS-fs (loop3): invalid crc value [ 2202.926247][T30588] F2FS-fs (loop3): Found nat_bits in checkpoint [ 2203.122307][T30588] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 2203.136736][T30588] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 2203.236008][T30594] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 2203.249755][T30594] ext4 filesystem being mounted at /120/bus supports timestamps until (%ptR?) (0x7fffffff) [ 2203.907112][T30614] overlayfs: missing 'lowerdir' [ 2205.438486][T19089] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 2205.452018][T19089] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 2205.740548][T30608] F2FS-fs (loop4): invalid crc value [ 2205.780611][T30608] F2FS-fs (loop4): Cannot turn on quotas: -2 on 0 [ 2205.787094][T30608] F2FS-fs (loop4): Start checkpoint disabled! [ 2205.803492][T30608] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 2205.818500][T30612] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 2205.832264][T30612] ext4 filesystem being mounted at /83/bus supports timestamps until (%ptR?) (0x7fffffff) [ 2207.040610][T30646] overlayfs: overlapping lowerdir path [ 2208.479177][T30644] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 2208.492925][T30644] ext4 filesystem being mounted at /84/bus supports timestamps until (%ptR?) (0x7fffffff) [ 2208.580284][T30652] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 2208.600350][T30660] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 2208.891698][T30663] EXT4-fs (loop4): Unsupported blocksize for fs encryption [ 2210.059990][T30671] F2FS-fs (loop3): invalid crc value [ 2210.256343][T30671] F2FS-fs (loop3): Cannot turn on quotas: -2 on 0 [ 2210.264029][T30671] F2FS-fs (loop3): Start checkpoint disabled! [ 2210.368100][T29003] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 2210.537649][T30683] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 2210.551867][T30683] ext4 filesystem being mounted at /86/bus supports timestamps until (%ptR?) (0x7fffffff) [ 2210.769228][T30671] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 2210.828360][T29003] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2211.237091][T29003] usb 2-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 2211.256305][T29003] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2211.384602][T29003] usb 2-1: config 0 descriptor?? [ 2212.043688][T10280] attempt to access beyond end of device [ 2212.043688][T10280] loop3: rw=2049, want=45104, limit=40427 [ 2212.109732][T29003] hid-generic 0003:046D:C222.0048: unbalanced collection at end of report description [ 2212.124692][T29003] hid-generic: probe of 0003:046D:C222.0048 failed with error -22 [ 2212.273095][T30694] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 2212.288025][T30694] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 2212.348480][T30694] F2FS-fs (loop0): invalid crc value [ 2212.435201][T24296] usb 2-1: USB disconnect, device number 52 [ 2212.443346][T30694] F2FS-fs (loop0): Found nat_bits in checkpoint [ 2212.483237][T30700] F2FS-fs (loop2): invalid crc value [ 2212.513056][T30700] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0 [ 2212.515638][T30702] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 2212.519943][T30694] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 2212.533057][T30702] ext4 filesystem being mounted at /77/bus supports timestamps until (%ptR?) (0x7fffffff) [ 2212.540320][T30694] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 2212.574121][T30700] F2FS-fs (loop2): Start checkpoint disabled! [ 2212.734452][T30700] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 2212.878986][T30717] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 2212.893097][T30717] ext4 filesystem being mounted at /123/bus supports timestamps until (%ptR?) (0x7fffffff) [ 2214.294595][T30731] overlayfs: missing 'lowerdir' [ 2214.530466][T30729] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 2214.544257][T30729] ext4 filesystem being mounted at /108/bus supports timestamps until (%ptR?) (0x7fffffff) [ 2214.653769][T30736] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 2214.662445][T19089] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 2214.671741][T19089] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 2218.186278][T30749] F2FS-fs (loop4): invalid crc value [ 2218.231377][T30753] FAT-fs (loop2): Directory bread(block 64) failed [ 2218.237745][T30753] FAT-fs (loop2): Directory bread(block 65) failed [ 2218.244122][T30753] FAT-fs (loop2): Directory bread(block 66) failed [ 2218.250474][T30753] FAT-fs (loop2): Directory bread(block 67) failed [ 2218.256738][T30753] FAT-fs (loop2): Directory bread(block 68) failed [ 2218.263069][T30753] FAT-fs (loop2): Directory bread(block 69) failed [ 2218.276743][T30753] FAT-fs (loop2): Directory bread(block 70) failed [ 2218.283094][T30753] FAT-fs (loop2): Directory bread(block 71) failed [ 2218.289446][T30753] FAT-fs (loop2): Directory bread(block 72) failed [ 2218.295730][T30753] FAT-fs (loop2): Directory bread(block 73) failed [ 2218.905327][T30749] F2FS-fs (loop4): Cannot turn on quotas: -2 on 0 [ 2218.911911][T30749] F2FS-fs (loop4): Start checkpoint disabled! [ 2218.973126][T30771] overlayfs: overlapping lowerdir path [ 2221.086265][T30780] F2FS-fs (loop3): invalid crc value [ 2221.633660][T30780] F2FS-fs (loop3): Cannot turn on quotas: -2 on 0 [ 2221.640358][T30780] F2FS-fs (loop3): Start checkpoint disabled! [ 2222.220899][T30780] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 2222.309172][T30788] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 2222.322914][T30788] ext4 filesystem being mounted at /111/bus supports timestamps until (%ptR?) (0x7fffffff) [ 2222.418091][T24296] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 2223.172196][T30802] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 2223.186349][T30802] ext4 filesystem being mounted at /90/bus supports timestamps until (%ptR?) (0x7fffffff) [ 2224.025617][T19089] attempt to access beyond end of device [ 2224.025617][T19089] loop3: rw=2049, want=45104, limit=40427 [ 2224.542248][T30815] F2FS-fs (loop2): invalid crc value [ 2224.580406][T30815] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0 [ 2224.586802][T30815] F2FS-fs (loop2): Start checkpoint disabled! [ 2224.596900][T30815] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 2224.650001][T30819] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 2224.664757][T30819] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 2225.085982][T30831] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6541'. [ 2225.123850][T30819] F2FS-fs (loop1): invalid crc value [ 2225.134381][T30819] F2FS-fs (loop1): Found nat_bits in checkpoint [ 2226.442599][T30839] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 2226.599334][T30819] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 2226.606303][T30819] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 2226.917832][T30830] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 2226.931813][T30830] ext4 filesystem being mounted at /91/bus supports timestamps until (%ptR?) (0x7fffffff) [ 2226.961334][T30842] F2FS-fs (loop4): invalid crc value [ 2227.007104][T30842] F2FS-fs (loop4): Cannot turn on quotas: -2 on 0 [ 2227.014430][T30842] F2FS-fs (loop4): Start checkpoint disabled! [ 2227.089005][T30849] overlayfs: missing 'lowerdir' [ 2227.431405][T19089] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 2227.454916][T30842] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 2227.462963][T19089] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 2228.556308][T30858] F2FS-fs (loop0): invalid crc value [ 2228.603811][T30858] F2FS-fs (loop0): Cannot turn on quotas: -2 on 0 [ 2228.610603][T30858] F2FS-fs (loop0): Start checkpoint disabled! [ 2228.726675][T30858] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 2228.891391][T10280] attempt to access beyond end of device [ 2228.891391][T10280] loop4: rw=2049, want=45104, limit=40427 [ 2228.944803][T30873] F2FS-fs (loop3): invalid crc value [ 2229.014953][T30873] F2FS-fs (loop3): Cannot turn on quotas: -2 on 0 [ 2229.022276][T30873] F2FS-fs (loop3): Start checkpoint disabled! [ 2229.038466][T30873] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 2229.421279][T30879] F2FS-fs (loop1): invalid crc value [ 2229.708086][T30889] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6547'. [ 2230.420176][T10280] attempt to access beyond end of device [ 2230.420176][T10280] loop0: rw=2049, want=45104, limit=40427 [ 2230.432612][T19089] attempt to access beyond end of device [ 2230.432612][T19089] loop3: rw=2049, want=45104, limit=40427 [ 2230.470172][T30879] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0 [ 2230.476751][T30879] F2FS-fs (loop1): Start checkpoint disabled! [ 2231.330434][T30891] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 2231.344199][T30891] ext4 filesystem being mounted at /129/bus supports timestamps until (%ptR?) (0x7fffffff) [ 2231.364254][T30879] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 2231.845821][T10280] attempt to access beyond end of device [ 2231.845821][T10280] loop1: rw=2049, want=45104, limit=40427 [ 2232.650788][T30904] F2FS-fs (loop4): invalid crc value [ 2232.780113][T30904] F2FS-fs (loop4): Cannot turn on quotas: -2 on 0 [ 2232.786903][T30904] F2FS-fs (loop4): Start checkpoint disabled! [ 2232.800748][T30914] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 2232.814692][T30914] ext4 filesystem being mounted at /85/bus supports timestamps until (%ptR?) (0x7fffffff) [ 2233.563272][ T125] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 2233.581460][T30904] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 2233.683162][T30923] F2FS-fs (loop2): invalid crc value [ 2233.714051][T30923] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0 [ 2233.720559][T30923] F2FS-fs (loop2): Start checkpoint disabled! [ 2233.771862][T30923] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 2233.981910][T30935] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6553'. [ 2234.271379][T30937] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6556'. [ 2234.475222][T30933] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 2234.488988][T30933] ext4 filesystem being mounted at /115/bus supports timestamps until (%ptR?) (0x7fffffff) [ 2234.530156][T10280] attempt to access beyond end of device [ 2234.530156][T10280] loop4: rw=2049, want=45104, limit=40427 [ 2234.532060][T30942] netlink: 620 bytes leftover after parsing attributes in process `syz.3.6557'. [ 2234.550952][T19089] attempt to access beyond end of device [ 2234.550952][T19089] loop2: rw=2049, want=45104, limit=40427 [ 2234.568025][ T125] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2234.587800][ T125] usb 1-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 2234.597276][ T125] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2234.611212][ T125] usb 1-1: config 0 descriptor?? [ 2235.022153][T30946] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 2235.036297][T30946] ext4 filesystem being mounted at /116/bus supports timestamps until (%ptR?) (0x7fffffff) [ 2235.234530][ T125] hid-generic 0003:046D:C222.0049: unbalanced collection at end of report description [ 2235.313713][ T125] hid-generic: probe of 0003:046D:C222.0049 failed with error -22 [ 2235.819329][ T125] usb 1-1: USB disconnect, device number 36 [ 2236.095396][T30959] fuse: Bad value for 'group_id' [ 2239.539726][T30966] EXT4-fs warning (device loop2): ext4_multi_mount_protect:387: Unable to create kmmpd thread for loop2. [ 2239.561351][T30964] EXT4-fs warning (device loop1): ext4_multi_mount_protect:387: Unable to create kmmpd thread for loop1. [ 2241.890343][T30977] F2FS-fs (loop3): invalid crc value [ 2241.913310][T30977] F2FS-fs (loop3): Cannot turn on quotas: -2 on 0 [ 2241.919751][T30977] F2FS-fs (loop3): Start checkpoint disabled! [ 2241.926264][T30977] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 2241.949644][T30980] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 2241.963627][T30980] ext4 filesystem being mounted at /94/bus supports timestamps until (%ptR?) (0x7fffffff) [ 2242.191695][T30982] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 2242.205486][T30982] ext4 filesystem being mounted at /132/bus supports timestamps until (%ptR?) (0x7fffffff) [ 2243.312568][T30993] EXT4-fs (loop1): 1 orphan inode deleted [ 2243.324338][T30993] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 2243.334101][T30993] ext4 filesystem being mounted at /118/file1 supports timestamps until (%ptR?) (0x7fffffff) [ 2243.372423][T19089] attempt to access beyond end of device [ 2243.372423][T19089] loop3: rw=2049, want=45104, limit=40427 [ 2245.104180][T31018] overlayfs: failed to resolve './file0': -2 [ 2246.147888][T31014] F2FS-fs (loop2): invalid crc value [ 2246.181395][T31014] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0 [ 2246.188334][T31014] F2FS-fs (loop2): Start checkpoint disabled! [ 2246.398128][T31017] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 2246.412234][T31017] ext4 filesystem being mounted at /133/bus supports timestamps until (%ptR?) (0x7fffffff) [ 2247.645319][T31032] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 2247.659492][T31032] ext4 filesystem being mounted at /96/bus supports timestamps until (%ptR?) (0x7fffffff) [ 2247.960492][T31030] F2FS-fs (loop3): invalid crc value [ 2248.355449][T31030] F2FS-fs (loop3): Cannot turn on quotas: -2 on 0 [ 2248.365995][T31030] F2FS-fs (loop3): Start checkpoint disabled! [ 2248.451150][T31044] F2FS-fs (loop2): invalid crc value [ 2248.456617][T31030] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 2248.507259][T31044] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0 [ 2248.513883][T31044] F2FS-fs (loop2): Start checkpoint disabled! [ 2248.541481][T31049] EXT4-fs (loop1): orphan cleanup on readonly fs [ 2248.551358][T31049] EXT4-fs error (device loop1): ext4_validate_block_bitmap:418: comm syz.1.6571: bg 0: block 248: padding at end of block bitmap is not set [ 2248.566359][T31049] __quota_error: 26 callbacks suppressed [ 2248.566379][T31049] Quota error (device loop1): write_blk: dquota write failed [ 2248.579216][T31049] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 2248.591010][T31049] EXT4-fs (loop1): 1 truncate cleaned up [ 2248.597575][T31049] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue [ 2248.770634][T31044] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 2248.782215][T31048] EXT4-fs (loop4): orphan cleanup on readonly fs [ 2248.793121][T31048] EXT4-fs error (device loop4): ext4_validate_block_bitmap:418: comm syz.4.6573: bg 0: block 248: padding at end of block bitmap is not set [ 2248.809245][T31048] Quota error (device loop4): write_blk: dquota write failed [ 2248.816685][T31048] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 2248.830330][T31048] EXT4-fs (loop4): 1 truncate cleaned up [ 2248.836597][T31048] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue [ 2250.893349][T31066] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6574'. [ 2251.099173][T10280] attempt to access beyond end of device [ 2251.099173][T10280] loop3: rw=2049, want=45104, limit=40427 [ 2251.147081][T19089] attempt to access beyond end of device [ 2251.147081][T19089] loop2: rw=2049, want=45104, limit=40427 [ 2251.207995][T14353] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 2251.578122][T14353] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2251.587822][T14353] usb 1-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 2251.596939][T14353] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2251.605694][T14353] usb 1-1: config 0 descriptor?? [ 2251.779395][T31073] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 2251.793197][T31073] ext4 filesystem being mounted at /120/bus supports timestamps until (%ptR?) (0x7fffffff) [ 2251.906646][T31069] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 2251.931447][T31069] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2251.944879][T31069] F2FS-fs (loop4): invalid crc value [ 2251.953976][T31069] F2FS-fs (loop4): Found nat_bits in checkpoint [ 2252.000289][T31069] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 2252.007172][T31069] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 2252.103908][T31079] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 2252.109732][T14353] hid-generic 0003:046D:C222.004A: unbalanced collection at end of report description [ 2252.124121][T14353] hid-generic: probe of 0003:046D:C222.004A failed with error -22 [ 2252.240272][T31091] overlayfs: failed to resolve './file0': -2 [ 2252.355682][T31093] overlayfs: missing 'lowerdir' [ 2252.731454][T14353] usb 1-1: USB disconnect, device number 37 [ 2252.760450][T19089] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 2252.786085][T19089] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 2253.968361][T31101] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 2253.982464][T31101] ext4 filesystem being mounted at /131/bus supports timestamps until (%ptR?) (0x7fffffff) [ 2255.981713][T31109] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 2255.995766][T31109] ext4 filesystem being mounted at /98/bus supports timestamps until (%ptR?) (0x7fffffff) [ 2256.735411][T31127] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 2256.825773][T31126] EXT4-fs (loop3): orphan cleanup on readonly fs [ 2256.833048][T31126] EXT4-fs error (device loop3): ext4_validate_block_bitmap:418: comm syz.3.6587: bg 0: block 248: padding at end of block bitmap is not set [ 2256.849765][T31126] Quota error (device loop3): write_blk: dquota write failed [ 2256.856969][T31126] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 2256.867745][T31126] EXT4-fs (loop3): 1 truncate cleaned up [ 2256.973011][T31126] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue [ 2257.196736][T31136] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 2257.210969][T31136] ext4 filesystem being mounted at /123/bus supports timestamps until (%ptR?) (0x7fffffff) [ 2258.356206][T31149] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 2258.356300][T31143] F2FS-fs (loop1): invalid crc value [ 2258.371164][T31129] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 2258.409527][T31129] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 2258.418491][T31143] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0 [ 2258.425093][T31143] F2FS-fs (loop1): Start checkpoint disabled! [ 2258.453120][T31143] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 2258.463674][T31129] F2FS-fs (loop0): invalid crc value [ 2258.472010][T31129] F2FS-fs (loop0): Found nat_bits in checkpoint [ 2260.952759][T31163] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 2261.380120][T19089] attempt to access beyond end of device [ 2261.380120][T19089] loop1: rw=2049, want=45104, limit=40427 [ 2261.436535][T31164] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 2261.450389][T31164] ext4 filesystem being mounted at /92/bus supports timestamps until (%ptR?) (0x7fffffff) [ 2262.705350][T31176] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 2262.719416][T31176] ext4 filesystem being mounted at /138/bus supports timestamps until (%ptR?) (0x7fffffff) [ 2264.032002][T31187] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 2264.046015][T31187] ext4 filesystem being mounted at /93/bus supports timestamps until (%ptR?) (0x7fffffff) [ 2264.277024][T31184] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 2264.799511][T31202] EXT4-fs (loop4): orphan cleanup on readonly fs [ 2264.806360][T31202] EXT4-fs error (device loop4): ext4_validate_block_bitmap:418: comm syz.4.6600: bg 0: block 248: padding at end of block bitmap is not set [ 2264.821279][T31202] Quota error (device loop4): write_blk: dquota write failed [ 2264.828519][T31202] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 2265.114928][T31202] EXT4-fs (loop4): 1 truncate cleaned up [ 2265.137312][T31202] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue [ 2265.162848][T31196] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 2265.198068][T31196] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 2265.218188][T31196] F2FS-fs (loop1): invalid crc value [ 2265.304221][T31196] F2FS-fs (loop1): Found nat_bits in checkpoint [ 2265.742538][T31196] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 2265.749839][T31196] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 2266.590630][T31226] overlayfs: missing 'lowerdir' [ 2267.717609][T31225] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 2267.731758][T31225] ext4 filesystem being mounted at /101/bus supports timestamps until (%ptR?) (0x7fffffff) [ 2268.230480][T31235] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 2268.244586][T31235] ext4 filesystem being mounted at /95/bus supports timestamps until (%ptR?) (0x7fffffff) [ 2268.478842][ T7] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 2268.487837][ T7] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 2268.703831][T31223] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 2269.033593][T31244] F2FS-fs (loop0): invalid crc value [ 2269.041110][T31248] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 2269.139457][T31244] F2FS-fs (loop0): Cannot turn on quotas: -2 on 0 [ 2269.145970][T31244] F2FS-fs (loop0): Start checkpoint disabled! [ 2269.159055][T31244] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 2269.991982][T22112] attempt to access beyond end of device [ 2269.991982][T22112] loop0: rw=2049, want=45104, limit=40427 [ 2271.753179][T31269] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 2271.767272][T31269] ext4 filesystem being mounted at /138/bus supports timestamps until (%ptR?) (0x7fffffff) [ 2272.068560][T31268] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 2272.082696][T31268] ext4 filesystem being mounted at /126/bus supports timestamps until (%ptR?) (0x7fffffff) [ 2272.468099][T31261] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 2272.563750][T31261] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 2272.585349][T31261] F2FS-fs (loop3): invalid crc value [ 2272.616506][T31261] F2FS-fs (loop3): Found nat_bits in checkpoint [ 2272.664006][T31261] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 2272.700060][T31261] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 2272.893481][T31286] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 2272.907520][T31286] ext4 filesystem being mounted at /103/bus supports timestamps until (%ptR?) (0x7fffffff) [ 2274.698218][T31296] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 2274.712325][T31296] ext4 filesystem being mounted at /140/bus supports timestamps until (%ptR?) (0x7fffffff) [ 2275.857405][T31307] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 2275.871685][T31307] ext4 filesystem being mounted at /104/bus supports timestamps until (%ptR?) (0x7fffffff) [ 2276.152330][T31306] EXT4-fs (loop1): orphan cleanup on readonly fs [ 2276.291923][T31295] EXT4-fs (loop2): 1 orphan inode deleted [ 2276.297833][T31295] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 2276.327584][T31306] EXT4-fs error (device loop1): ext4_validate_block_bitmap:418: comm syz.1.6613: bg 0: block 248: padding at end of block bitmap is not set [ 2276.329405][T31295] ext4 filesystem being mounted at /139/file1 supports timestamps until (%ptR?) (0x7fffffff) [ 2276.342323][T31306] Quota error (device loop1): write_blk: dquota write failed [ 2276.358893][T31306] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 2276.369124][T31306] EXT4-fs (loop1): 1 truncate cleaned up [ 2276.376538][T31306] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue [ 2278.498859][T31330] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 2278.512938][T31330] ext4 filesystem being mounted at /105/bus supports timestamps until (%ptR?) (0x7fffffff) [ 2279.433453][T31346] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 2279.715364][T31354] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 2279.729459][T31354] ext4 filesystem being mounted at /106/bus supports timestamps until (%ptR?) (0x7fffffff) [ 2279.946524][T31351] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 2279.960598][T31351] ext4 filesystem being mounted at /143/bus supports timestamps until (%ptR?) (0x7fffffff) [ 2281.168982][T31365] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 2281.183019][T31365] ext4 filesystem being mounted at /144/bus supports timestamps until (%ptR?) (0x7fffffff) [ 2281.439359][ T23] audit: type=1326 audit(1745496655.050:2246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31370 comm="syz.0.6625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f987e99e969 code=0x7ffc0000 [ 2281.873623][ T23] audit: type=1326 audit(1745496655.490:2247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31370 comm="syz.0.6625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f987e99e969 code=0x7ffc0000 [ 2281.897442][ T23] audit: type=1326 audit(1745496655.490:2248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31370 comm="syz.0.6625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f987e99e969 code=0x7ffc0000 [ 2281.921415][ T23] audit: type=1326 audit(1745496655.490:2249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31370 comm="syz.0.6625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f987e99e969 code=0x7ffc0000 [ 2281.977977][ T23] audit: type=1326 audit(1745496655.490:2250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31370 comm="syz.0.6625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f987e99e969 code=0x7ffc0000 [ 2282.048257][ T23] audit: type=1326 audit(1745496655.490:2251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31370 comm="syz.0.6625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f987e99e969 code=0x7ffc0000 [ 2282.193177][ T23] audit: type=1326 audit(1745496655.490:2252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31370 comm="syz.0.6625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f987e99e969 code=0x7ffc0000 [ 2282.217588][ T23] audit: type=1326 audit(1745496655.490:2253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31370 comm="syz.0.6625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f987e99e969 code=0x7ffc0000 [ 2282.242064][ T23] audit: type=1326 audit(1745496655.490:2254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31370 comm="syz.0.6625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f987e99e969 code=0x7ffc0000 [ 2282.266610][ T23] audit: type=1326 audit(1745496655.490:2255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31370 comm="syz.0.6625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f987e99e969 code=0x7ffc0000 [ 2283.322997][T31382] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 2283.336975][T31382] ext4 filesystem being mounted at /141/bus supports timestamps until (%ptR?) (0x7fffffff) [ 2283.348505][T31379] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 2283.362756][T31379] ext4 filesystem being mounted at /145/bus supports timestamps until (%ptR?) (0x7fffffff) [ 2283.659958][T31375] syz.0.6625[31375] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2283.660010][T31375] syz.0.6625[31375] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2287.313807][T31409] EXT4-fs (loop1): orphan cleanup on readonly fs [ 2287.332119][T31409] EXT4-fs error (device loop1): ext4_validate_block_bitmap:418: comm syz.1.6631: bg 0: block 248: padding at end of block bitmap is not set [ 2287.346543][T31409] __quota_error: 25 callbacks suppressed [ 2287.346553][T31409] Quota error (device loop1): write_blk: dquota write failed [ 2287.359284][T31409] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 2287.371758][T31409] EXT4-fs (loop1): 1 truncate cleaned up [ 2287.377448][T31409] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue [ 2287.446902][T31408] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 2287.476237][T31408] ext4 filesystem being mounted at /108/bus supports timestamps until (%ptR?) (0x7fffffff) [ 2289.014984][T31428] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 2289.029062][T31428] ext4 filesystem being mounted at /101/bus supports timestamps until (%ptR?) (0x7fffffff) [ 2292.163243][T31442] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 2292.177463][T31442] ext4 filesystem being mounted at /131/bus supports timestamps until (%ptR?) (0x7fffffff) [ 2292.321565][T31458] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 2292.337075][T31449] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 2292.350903][T31449] ext4 filesystem being mounted at /143/bus supports timestamps until (%ptR?) (0x7fffffff) [ 2293.439576][T31465] F2FS-fs (loop1): invalid crc value [ 2293.481495][T31465] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0 [ 2293.488617][T31465] F2FS-fs (loop1): Start checkpoint disabled! [ 2293.518359][T31465] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 2294.311023][T31482] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6641'. [ 2294.618712][T31478] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 2296.582252][ T7] attempt to access beyond end of device [ 2296.582252][ T7] loop1: rw=2049, want=45104, limit=40427 [ 2296.712208][T31483] EXT4-fs: failed to create workqueue [ 2296.717418][T31483] EXT4-fs (loop4): mount failed [ 2296.718581][T31490] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 2296.735874][T31490] ext4 filesystem being mounted at /103/bus supports timestamps until (%ptR?) (0x7fffffff) [ 2299.329561][T31508] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 2299.343447][T31508] ext4 filesystem being mounted at /133/bus supports timestamps until (%ptR?) (0x7fffffff) [ 2299.503789][T31499] FAT-fs (loop2): Directory bread(block 64) failed [ 2299.510279][T31499] FAT-fs (loop2): Directory bread(block 65) failed [ 2299.516839][T31499] FAT-fs (loop2): Directory bread(block 66) failed [ 2299.527092][T31513] F2FS-fs (loop0): invalid crc value [ 2299.546986][T31499] FAT-fs (loop2): Directory bread(block 67) failed [ 2299.557204][T31499] FAT-fs (loop2): Directory bread(block 68) failed [ 2299.578213][T31516] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 2299.592562][T31516] ext4 filesystem being mounted at /150/bus supports timestamps until (%ptR?) (0x7fffffff) [ 2299.594253][T31513] F2FS-fs (loop0): Cannot turn on quotas: -2 on 0 [ 2300.928024][T31513] F2FS-fs (loop0): Start checkpoint disabled! [ 2301.019187][T31499] FAT-fs (loop2): Directory bread(block 69) failed [ 2301.171659][T31499] FAT-fs (loop2): Directory bread(block 70) failed [ 2301.212860][T31528] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 2301.227018][T31528] ext4 filesystem being mounted at /104/bus supports timestamps until (%ptR?) (0x7fffffff) [ 2301.618094][T31499] FAT-fs (loop2): Directory bread(block 71) failed [ 2301.624481][T31499] FAT-fs (loop2): Directory bread(block 72) failed [ 2301.631160][T31499] FAT-fs (loop2): Directory bread(block 73) failed [ 2304.449752][T31541] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 2304.463542][T31541] ext4 filesystem being mounted at /151/bus supports timestamps until (%ptR?) (0x7fffffff) [ 2305.822161][T31559] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 2305.843435][T31559] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 2305.849695][T31566] EXT4-fs (loop1): orphan cleanup on readonly fs [ 2305.859714][T31566] EXT4-fs error (device loop1): ext4_validate_block_bitmap:418: comm syz.1.6658: bg 0: block 248: padding at end of block bitmap is not set [ 2305.874165][T31566] Quota error (device loop1): write_blk: dquota write failed [ 2305.881428][T31566] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 2305.891823][T31566] EXT4-fs (loop1): 1 truncate cleaned up [ 2305.938468][T31566] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue [ 2305.959779][T31559] F2FS-fs (loop3): invalid crc value [ 2306.030552][T31559] F2FS-fs (loop3): Found nat_bits in checkpoint [ 2306.055519][T31576] FAT-fs (loop2): Directory bread(block 64) failed [ 2306.062083][T31576] FAT-fs (loop2): Directory bread(block 65) failed [ 2306.068364][T31576] FAT-fs (loop2): Directory bread(block 66) failed [ 2306.074650][T31576] FAT-fs (loop2): Directory bread(block 67) failed [ 2306.081082][T31576] FAT-fs (loop2): Directory bread(block 68) failed [ 2306.087337][T31576] FAT-fs (loop2): Directory bread(block 69) failed [ 2306.093717][T31576] FAT-fs (loop2): Directory bread(block 70) failed [ 2306.100019][T31576] FAT-fs (loop2): Directory bread(block 71) failed [ 2306.106355][T31576] FAT-fs (loop2): Directory bread(block 72) failed [ 2306.112690][T31576] FAT-fs (loop2): Directory bread(block 73) failed [ 2306.181375][T31573] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 2306.325660][T31559] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 2306.345187][T31559] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 2306.848143][T31590] overlayfs: missing 'lowerdir' [ 2307.175324][T22112] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 2307.184117][T22112] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 2307.442015][T31589] EXT4-fs (loop1): orphan cleanup on readonly fs [ 2307.449091][T31589] EXT4-fs error (device loop1): ext4_validate_block_bitmap:418: comm syz.1.6659: bg 0: block 248: padding at end of block bitmap is not set [ 2307.463635][T31589] Quota error (device loop1): write_blk: dquota write failed [ 2307.470886][T31589] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 2307.481642][T31589] EXT4-fs (loop1): 1 truncate cleaned up [ 2307.491043][T31589] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue [ 2307.598069][T31598] erofs: (device loop0): mounted with opts: , root inode @ nid 36. [ 2307.613410][T31604] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 2307.844971][T24986] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 2308.774814][T31613] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 2308.788925][T31613] ext4 filesystem being mounted at /137/bus supports timestamps until (%ptR?) (0x7fffffff) [ 2309.319990][T31619] F2FS-fs (loop3): invalid crc value [ 2309.353220][T31619] F2FS-fs (loop3): Cannot turn on quotas: -2 on 0 [ 2309.359795][T31619] F2FS-fs (loop3): Start checkpoint disabled! [ 2309.366608][T31619] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 2309.518329][T24986] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2309.528149][T24986] usb 5-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 2309.537108][T24986] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2309.547581][T24986] usb 5-1: config 0 descriptor?? [ 2309.553516][T31624] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 2309.567300][T31624] ext4 filesystem being mounted at /148/bus supports timestamps until (%ptR?) (0x7fffffff) [ 2309.643936][T31635] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6668'. [ 2310.041383][T31634] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 2310.055221][T31634] ext4 filesystem being mounted at /114/bus supports timestamps until (%ptR?) (0x7fffffff) [ 2310.123614][T10280] attempt to access beyond end of device [ 2310.123614][T10280] loop3: rw=2049, want=45104, limit=40427 [ 2310.629327][T24986] hid-generic 0003:046D:C222.004B: unbalanced collection at end of report description [ 2310.654707][T24986] hid-generic: probe of 0003:046D:C222.004B failed with error -22 [ 2311.071370][T24986] usb 5-1: USB disconnect, device number 48 [ 2311.118652][T31649] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 2311.132756][T31649] ext4 filesystem being mounted at /149/bus supports timestamps until (%ptR?) (0x7fffffff) [ 2313.339651][T31666] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 2314.637220][T31664] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 2314.652250][T31664] ext4 filesystem being mounted at /140/bus supports timestamps until (%ptR?) (0x7fffffff) [ 2315.359631][T31668] EXT4-fs: failed to create workqueue [ 2315.364883][T31668] EXT4-fs (loop4): mount failed [ 2318.296123][T31682] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 2318.310239][T31682] ext4 filesystem being mounted at /111/bus supports timestamps until (%ptR?) (0x7fffffff) [ 2318.519611][T31700] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 2318.556984][T31692] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 2318.571271][T31692] ext4 filesystem being mounted at /141/bus supports timestamps until (%ptR?) (0x7fffffff) [ 2320.349748][T31708] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 2320.363795][T31708] ext4 filesystem being mounted at /151/bus supports timestamps until (%ptR?) (0x7fffffff) [ 2321.329659][T31707] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 2321.343469][T31707] ext4 filesystem being mounted at /156/bus supports timestamps until (%ptR?) (0x7fffffff) [ 2322.492358][T31717] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 2322.506514][T31717] ext4 filesystem being mounted at /117/bus supports timestamps until (%ptR?) (0x7fffffff) [ 2322.890105][T31724] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 2322.890552][T31727] EXT4-fs (loop3): 1 orphan inode deleted [ 2322.904524][T31727] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 2322.913405][T31727] ext4 filesystem being mounted at /112/file1 supports timestamps until (%ptR?) (0x7fffffff) [ 2323.276958][T31744] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 2323.291073][T31744] ext4 filesystem being mounted at /158/bus supports timestamps until (%ptR?) (0x7fffffff) [ 2324.316332][ T23] audit: type=1326 audit(1745496697.930:2281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31755 comm="syz.0.6690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f987e99e969 code=0x7ffc0000 [ 2324.341099][ T23] audit: type=1326 audit(1745496697.960:2282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31755 comm="syz.0.6690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f987e99e969 code=0x7ffc0000 [ 2324.377040][ T23] audit: type=1326 audit(1745496697.990:2283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31755 comm="syz.0.6690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f987e99e969 code=0x7ffc0000 [ 2324.438360][ T23] audit: type=1326 audit(1745496697.990:2284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31755 comm="syz.0.6690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f987e99e969 code=0x7ffc0000 [ 2324.552917][ T23] audit: type=1326 audit(1745496697.990:2285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31755 comm="syz.0.6690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f987e99e969 code=0x7ffc0000 [ 2324.671433][T31763] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 2324.851767][ T23] audit: type=1326 audit(1745496697.990:2286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31755 comm="syz.0.6690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f987e99e969 code=0x7ffc0000 [ 2324.994634][T31765] erofs: (device loop1): mounted with opts: , root inode @ nid 36. [ 2325.118501][ T23] audit: type=1326 audit(1745496697.990:2287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31755 comm="syz.0.6690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f987e99e969 code=0x7ffc0000 [ 2325.147640][ T23] audit: type=1326 audit(1745496697.990:2288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31755 comm="syz.0.6690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f987e99e969 code=0x7ffc0000 [ 2325.174287][ T23] audit: type=1326 audit(1745496697.990:2289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31755 comm="syz.0.6690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f987e99e969 code=0x7ffc0000 [ 2325.243700][ T23] audit: type=1326 audit(1745496697.990:2290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31755 comm="syz.0.6690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f987e99e969 code=0x7ffc0000 [ 2325.294164][T31769] syz.0.6690[31769] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2325.294216][T31769] syz.0.6690[31769] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2325.324141][T31772] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6693'. [ 2325.346559][T31771] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 2325.814857][T31778] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 2325.829096][T31778] ext4 filesystem being mounted at /160/bus supports timestamps until (%ptR?) (0x7fffffff) [ 2327.001542][T31785] F2FS-fs (loop0): invalid crc value [ 2327.068057][T31785] F2FS-fs (loop0): Cannot turn on quotas: -2 on 0 [ 2327.074647][T31785] F2FS-fs (loop0): Start checkpoint disabled! [ 2327.146703][T31790] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 2327.160986][T31790] ext4 filesystem being mounted at /155/bus supports timestamps until (%ptR?) (0x7fffffff) [ 2327.848280][T31785] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 2328.018838][T31798] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 2328.337020][T31808] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6697'. [ 2329.783020][T31806] EXT4-fs (loop3): orphan cleanup on readonly fs [ 2329.792593][T31806] EXT4-fs error (device loop3): ext4_validate_block_bitmap:418: comm syz.3.6702: bg 0: block 248: padding at end of block bitmap is not set [ 2329.809160][T31806] __quota_error: 26 callbacks suppressed [ 2329.809182][T31806] Quota error (device loop3): write_blk: dquota write failed [ 2329.822082][T31806] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 2329.833768][T31806] EXT4-fs (loop3): 1 truncate cleaned up [ 2329.839988][T31806] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue [ 2329.874927][T31807] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 2329.889085][T31807] ext4 filesystem being mounted at /162/bus supports timestamps until (%ptR?) (0x7fffffff) [ 2329.961090][T22112] attempt to access beyond end of device [ 2329.961090][T22112] loop0: rw=2049, want=45104, limit=40427 [ 2331.075328][T31814] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 2331.089403][T31814] ext4 filesystem being mounted at /144/bus supports timestamps until (%ptR?) (0x7fffffff) [ 2332.026320][T31826] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 2332.040152][T31826] ext4 filesystem being mounted at /156/bus supports timestamps until (%ptR?) (0x7fffffff) [ 2332.386064][T31833] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 2332.418218][T31846] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 2332.491935][T31843] F2FS-fs (loop0): invalid crc value [ 2332.546737][T31843] F2FS-fs (loop0): Cannot turn on quotas: -2 on 0 [ 2332.553602][T31843] F2FS-fs (loop0): Start checkpoint disabled! [ 2332.566772][T31843] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 2333.277734][T31856] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6704'. [ 2333.640603][T31852] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 2333.809830][T19089] attempt to access beyond end of device [ 2333.809830][T19089] loop0: rw=2049, want=45104, limit=40427 [ 2333.849091][T31864] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 2333.997807][T31861] FAT-fs (loop3): Directory bread(block 64) failed [ 2334.004322][T31861] FAT-fs (loop3): Directory bread(block 65) failed [ 2334.010879][T31861] FAT-fs (loop3): Directory bread(block 66) failed [ 2334.017244][T31861] FAT-fs (loop3): Directory bread(block 67) failed [ 2334.023735][T31861] FAT-fs (loop3): Directory bread(block 68) failed [ 2334.030128][T31861] FAT-fs (loop3): Directory bread(block 69) failed [ 2334.036563][T31861] FAT-fs (loop3): Directory bread(block 70) failed [ 2334.043069][T31861] FAT-fs (loop3): Directory bread(block 71) failed [ 2334.049646][T31861] FAT-fs (loop3): Directory bread(block 72) failed [ 2334.056050][T31861] FAT-fs (loop3): Directory bread(block 73) failed [ 2334.889697][T31868] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 2335.263946][T31882] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6713'. [ 2335.384500][T31878] EXT4-fs (loop4): orphan cleanup on readonly fs [ 2335.394253][T31878] EXT4-fs error (device loop4): ext4_validate_block_bitmap:418: comm syz.4.6716: bg 0: block 248: padding at end of block bitmap is not set [ 2335.409922][T31878] Quota error (device loop4): write_blk: dquota write failed [ 2335.417287][T31878] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 2335.433309][T31878] EXT4-fs (loop4): 1 truncate cleaned up [ 2335.501361][T31871] F2FS-fs (loop2): invalid crc value [ 2335.549018][T31880] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 2335.563127][T31880] ext4 filesystem being mounted at /117/bus supports timestamps until (%ptR?) (0x7fffffff) [ 2335.847381][T31871] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0 [ 2335.855197][T31871] F2FS-fs (loop2): Start checkpoint disabled! [ 2335.891243][T31871] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 2336.331651][T31878] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue [ 2336.790572][T31897] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6715'. [ 2337.298796][T10280] attempt to access beyond end of device [ 2337.298796][T10280] loop2: rw=2049, want=45104, limit=40427 [ 2341.670454][T31895] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 2341.685962][T31895] ext4 filesystem being mounted at /165/bus supports timestamps until (%ptR?) (0x7fffffff) [ 2342.903873][T31919] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 2344.049078][T31927] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 2344.062948][T31927] ext4 filesystem being mounted at /166/bus supports timestamps until (%ptR?) (0x7fffffff) [ 2344.165442][T31941] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 2344.331766][T31937] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 2344.899538][T31956] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 2344.913689][T31956] ext4 filesystem being mounted at /168/bus supports timestamps until (%ptR?) (0x7fffffff) [ 2345.258131][T29003] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 2346.048316][T29003] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2347.416377][T29003] usb 1-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 2347.427335][T29003] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2347.521124][T29003] usb 1-1: config 0 descriptor?? [ 2347.822383][T31973] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 2347.836533][T31973] ext4 filesystem being mounted at /150/bus supports timestamps until (%ptR?) (0x7fffffff) [ 2348.130025][T29003] usbhid 1-1:0.0: can't add hid device: -71 [ 2348.274959][T29003] usbhid: probe of 1-1:0.0 failed with error -71 [ 2348.289075][T31974] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 2348.303209][T31974] ext4 filesystem being mounted at /170/bus supports timestamps until (%ptR?) (0x7fffffff) [ 2348.323326][T29003] usb 1-1: USB disconnect, device number 38 [ 2348.741422][T31983] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 2349.020979][T31990] F2FS-fs (loop3): invalid crc value [ 2349.114075][T31990] F2FS-fs (loop3): Cannot turn on quotas: -2 on 0 [ 2349.120648][T31990] F2FS-fs (loop3): Start checkpoint disabled! [ 2350.341696][T31997] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 2350.355739][T31997] ext4 filesystem being mounted at /151/bus supports timestamps until (%ptR?) (0x7fffffff) [ 2350.473918][T31990] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 2351.861359][T32003] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 2351.875466][T32003] ext4 filesystem being mounted at /171/bus supports timestamps until (%ptR?) (0x7fffffff) [ 2352.465303][T32020] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 2352.769784][T32028] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 2352.785374][T32032] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 2352.806934][T32029] F2FS-fs (loop2): invalid crc value [ 2352.851349][T32029] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0 [ 2352.858011][T32029] F2FS-fs (loop2): Start checkpoint disabled! [ 2352.864983][T32029] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 2353.040741][T32044] fuse: Unknown parameter 'group_i00000000000000000000' [ 2353.159335][T14353] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 2353.903141][T32043] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 2353.917226][T32043] ext4 filesystem being mounted at /121/bus supports timestamps until (%ptR?) (0x7fffffff) [ 2355.851159][T32060] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6744'. [ 2356.012591][T32052] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 2356.026692][T32052] ext4 filesystem being mounted at /174/bus supports timestamps until (%ptR?) (0x7fffffff) [ 2358.269117][T32079] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 2358.283032][T32079] ext4 filesystem being mounted at /129/bus supports timestamps until (%ptR?) (0x7fffffff) [ 2358.348241][T32074] F2FS-fs (loop4): invalid crc value [ 2358.397556][T32074] F2FS-fs (loop4): Cannot turn on quotas: -2 on 0 [ 2358.403961][T14353] usb 1-1: device not accepting address 39, error -71 [ 2358.410755][T32074] F2FS-fs (loop4): Start checkpoint disabled! [ 2358.429057][T32074] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 2358.432400][T32076] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 2358.450323][T32076] ext4 filesystem being mounted at /154/bus supports timestamps until (%ptR?) (0x7fffffff) [ 2358.748222][T32097] FAT-fs (loop0): Directory bread(block 64) failed [ 2358.754696][T32097] FAT-fs (loop0): Directory bread(block 65) failed [ 2358.761109][T32097] FAT-fs (loop0): Directory bread(block 66) failed [ 2358.767435][T32097] FAT-fs (loop0): Directory bread(block 67) failed [ 2358.773826][T32097] FAT-fs (loop0): Directory bread(block 68) failed [ 2358.780122][T32097] FAT-fs (loop0): Directory bread(block 69) failed [ 2358.786601][T32097] FAT-fs (loop0): Directory bread(block 70) failed [ 2358.793076][T32097] FAT-fs (loop0): Directory bread(block 71) failed [ 2358.799815][T32097] FAT-fs (loop0): Directory bread(block 72) failed [ 2358.806254][T32097] FAT-fs (loop0): Directory bread(block 73) failed [ 2358.862079][T32102] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6751'. [ 2360.550431][T10280] attempt to access beyond end of device [ 2360.550431][T10280] loop4: rw=2049, want=45104, limit=40427 [ 2360.625147][T32104] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 2360.639312][T32104] ext4 filesystem being mounted at /165/bus supports timestamps until (%ptR?) (0x7fffffff) [ 2361.216787][T32113] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 2361.641222][T32115] F2FS-fs (loop0): invalid crc value [ 2361.697090][T32124] fuse: Unknown parameter 'group_i00000000000000000000' [ 2362.088707][T32115] F2FS-fs (loop0): Cannot turn on quotas: -2 on 0 [ 2362.095693][T32115] F2FS-fs (loop0): Start checkpoint disabled! [ 2362.121080][T32115] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 2362.603941][T32132] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 2362.952685][T32140] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6758'. [ 2363.398071][ T805] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 2363.455133][T10280] attempt to access beyond end of device [ 2363.455133][T10280] loop0: rw=2049, want=45104, limit=40427 [ 2363.486093][T32139] F2FS-fs (loop3): invalid crc value [ 2363.549277][T32139] F2FS-fs (loop3): Cannot turn on quotas: -2 on 0 [ 2363.555765][T32139] F2FS-fs (loop3): Start checkpoint disabled! [ 2363.562344][T32139] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 2363.572538][T32148] erofs: (device loop1): mounted with opts: , root inode @ nid 36. [ 2363.778463][ T805] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2363.820412][T32154] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6762'. [ 2363.873707][ T805] usb 3-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 2363.903702][ T805] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2364.032323][ T805] usb 3-1: config 0 descriptor?? [ 2364.144243][T22112] attempt to access beyond end of device [ 2364.144243][T22112] loop3: rw=2049, want=45104, limit=40427 [ 2364.281035][T32162] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 2364.382538][T32158] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 2364.870910][T32168] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 2364.885042][T32168] ext4 filesystem being mounted at /125/bus supports timestamps until (%ptR?) (0x7fffffff) [ 2366.105094][ T805] hid-generic 0003:046D:C222.004C: unbalanced collection at end of report description [ 2366.114767][ T805] hid-generic: probe of 0003:046D:C222.004C failed with error -22 [ 2366.123608][ T805] usb 3-1: USB disconnect, device number 55 [ 2366.385491][T32174] F2FS-fs (loop4): invalid crc value [ 2366.438229][T32174] F2FS-fs (loop4): Cannot turn on quotas: -2 on 0 [ 2366.444733][T32174] F2FS-fs (loop4): Start checkpoint disabled! [ 2366.455857][T32174] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 2366.487683][T32180] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 2367.701034][T32202] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 2367.814715][T32205] fuse: Unknown parameter 'group_id00000000000000000000' [ 2368.304790][T32196] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 2368.318903][T32196] ext4 filesystem being mounted at /126/bus supports timestamps until (%ptR?) (0x7fffffff) [ 2368.757809][T32208] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 2369.228912][T32210] F2FS-fs (loop1): invalid crc value [ 2369.266017][T32210] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0 [ 2369.272542][T32210] F2FS-fs (loop1): Start checkpoint disabled! [ 2369.279201][T32210] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 2372.087019][T32236] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6776'. [ 2374.559996][T10280] attempt to access beyond end of device [ 2374.559996][T10280] loop1: rw=2049, want=45104, limit=40427 [ 2375.141004][T32244] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 2375.205798][T32241] F2FS-fs (loop0): invalid crc value [ 2375.254512][T32241] F2FS-fs (loop0): Cannot turn on quotas: -2 on 0 [ 2375.261400][T32241] F2FS-fs (loop0): Start checkpoint disabled! [ 2375.422975][T32241] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 2375.713604][T32260] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 2375.727703][T32260] ext4 filesystem being mounted at /180/bus supports timestamps until (%ptR?) (0x7fffffff) [ 2375.783370][ T499] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 2376.349402][T32270] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 2376.607470][T32272] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6780'. [ 2376.972735][T31911] attempt to access beyond end of device [ 2376.972735][T31911] loop0: rw=2049, want=45104, limit=40427 [ 2377.187021][ T499] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2377.511020][ T499] usb 4-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 2377.856678][ T499] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2378.150370][ T499] usb 4-1: config 0 descriptor?? [ 2378.169375][T32281] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 2378.183372][T32281] ext4 filesystem being mounted at /181/bus supports timestamps until (%ptR?) (0x7fffffff) [ 2378.248705][T32289] fuse: Unknown parameter 'group_id00000000000000000000' [ 2379.104775][ T499] usb 4-1: can't set config #0, error -71 [ 2379.139615][ T499] usb 4-1: USB disconnect, device number 54 [ 2379.285125][T32300] FAT-fs (loop3): Directory bread(block 64) failed [ 2379.291711][T32300] FAT-fs (loop3): Directory bread(block 65) failed [ 2379.298136][T32300] FAT-fs (loop3): Directory bread(block 66) failed [ 2379.304377][T32300] FAT-fs (loop3): Directory bread(block 67) failed [ 2379.310782][T32300] FAT-fs (loop3): Directory bread(block 68) failed [ 2379.317048][T32300] FAT-fs (loop3): Directory bread(block 69) failed [ 2379.323433][T32300] FAT-fs (loop3): Directory bread(block 70) failed [ 2379.329735][T32300] FAT-fs (loop3): Directory bread(block 71) failed [ 2379.336066][T32300] FAT-fs (loop3): Directory bread(block 72) failed [ 2379.342473][T32300] FAT-fs (loop3): Directory bread(block 73) failed [ 2379.355695][T32297] F2FS-fs (loop2): invalid crc value [ 2379.388470][T32297] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0 [ 2379.398066][T32296] F2FS-fs (loop1): invalid crc value [ 2379.403478][T32297] F2FS-fs (loop2): Start checkpoint disabled! [ 2379.436461][ T23] audit: type=1326 audit(1745496753.040:2317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32308 comm="syz.4.6793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dee85a969 code=0x7ffc0000 [ 2379.461370][T32296] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0 [ 2379.498594][T32296] F2FS-fs (loop1): Start checkpoint disabled! [ 2379.569586][T32297] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 2379.651276][T32296] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 2380.101583][ T23] audit: type=1326 audit(1745496753.040:2318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32308 comm="syz.4.6793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f0dee85a969 code=0x7ffc0000 [ 2380.566125][T32320] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6791'. [ 2381.072420][ T23] audit: type=1326 audit(1745496753.040:2319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32308 comm="syz.4.6793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dee85a969 code=0x7ffc0000 [ 2381.096123][ T23] audit: type=1326 audit(1745496753.040:2320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32308 comm="syz.4.6793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dee85a969 code=0x7ffc0000 [ 2381.150108][ T23] audit: type=1326 audit(1745496753.040:2321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32308 comm="syz.4.6793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0dee85a969 code=0x7ffc0000 [ 2381.191145][T11111] attempt to access beyond end of device [ 2381.191145][T11111] loop2: rw=2049, want=45104, limit=40427 [ 2381.427211][T32322] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 2381.441488][T32322] ext4 filesystem being mounted at /130/bus supports timestamps until (%ptR?) (0x7fffffff) [ 2381.929704][T32330] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6790'. [ 2382.206153][T32332] EXT4-fs (loop0): orphan cleanup on readonly fs [ 2382.230945][T32332] EXT4-fs error (device loop0): ext4_validate_block_bitmap:418: comm syz.0.6796: bg 0: block 248: padding at end of block bitmap is not set [ 2382.255723][ T23] audit: type=1326 audit(1745496753.040:2322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32308 comm="syz.4.6793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dee85a969 code=0x7ffc0000 [ 2382.281028][T32332] Quota error (device loop0): write_blk: dquota write failed [ 2382.288452][T32332] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 2382.298482][ T23] audit: type=1326 audit(1745496753.040:2323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32308 comm="syz.4.6793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dee85a969 code=0x7ffc0000 [ 2382.323111][T31911] attempt to access beyond end of device [ 2382.323111][T31911] loop1: rw=2049, want=45104, limit=40427 [ 2382.335073][T32332] EXT4-fs (loop0): 1 truncate cleaned up [ 2382.351957][T32332] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue [ 2382.382186][ T23] audit: type=1326 audit(1745496753.040:2324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32308 comm="syz.4.6793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0dee85a969 code=0x7ffc0000 [ 2382.434618][T32311] syz.4.6793[32311] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2382.434744][T32311] syz.4.6793[32311] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2382.762945][T32340] F2FS-fs (loop3): invalid crc value [ 2383.026602][T32356] fuse: Unknown parameter 'group_id00000000000000000000' [ 2384.009462][T32357] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 2384.765478][T32340] F2FS-fs (loop3): Cannot turn on quotas: -2 on 0 [ 2384.772186][T32340] F2FS-fs (loop3): Start checkpoint disabled! [ 2384.892757][T32340] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 2385.221388][T32368] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 2385.265198][T32355] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 2385.279381][T32355] ext4 filesystem being mounted at /162/bus supports timestamps until (%ptR?) (0x7fffffff) [ 2386.804896][ T1279] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 2386.862968][T32382] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 2388.151123][T32389] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 2388.165220][T32389] ext4 filesystem being mounted at /164/bus supports timestamps until (%ptR?) (0x7fffffff) [ 2388.847985][ T1279] usb 1-1: device descriptor read/all, error -71 [ 2389.082207][T32395] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 2389.294867][T32415] fuse: Bad value for 'user_id' [ 2390.569709][T32416] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 2393.409620][T32418] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 2393.423751][T32418] ext4 filesystem being mounted at /165/bus supports timestamps until (%ptR?) (0x7fffffff) [ 2393.446195][T32423] erofs: (device loop0): mounted with opts: , root inode @ nid 36. [ 2393.524550][T32432] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 2395.289811][T32436] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 2395.303593][T32436] ext4 filesystem being mounted at /186/bus supports timestamps until (%ptR?) (0x7fffffff) [ 2396.651683][T32458] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 2396.665767][T32458] ext4 filesystem being mounted at /182/bus supports timestamps until (%ptR?) (0x7fffffff) [ 2396.778074][ T499] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 2398.872878][T32474] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 2398.887074][T32474] ext4 filesystem being mounted at /187/bus supports timestamps until (%ptR?) (0x7fffffff) [ 2399.011030][ T499] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2399.387767][ T499] usb 1-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 2399.397003][ T499] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2399.405764][ T499] usb 1-1: config 0 descriptor?? [ 2399.413171][T32473] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 2399.426944][T32473] ext4 filesystem being mounted at /135/bus supports timestamps until (%ptR?) (0x7fffffff) [ 2399.688132][ T499] usb 1-1: can't set config #0, error -71 [ 2399.700381][ T499] usb 1-1: USB disconnect, device number 43 [ 2399.710358][T32487] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 2399.918050][T32491] fuse: Bad value for 'user_id' [ 2400.111490][T32490] F2FS-fs (loop4): invalid crc value [ 2400.217615][ T23] kauditd_printk_skb: 42 callbacks suppressed [ 2400.217628][ T23] audit: type=1326 audit(1745496773.830:2367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32497 comm="syz.3.6836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35a1a9c969 code=0x7ffc0000 [ 2400.250774][ T23] audit: type=1326 audit(1745496773.870:2368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32497 comm="syz.3.6836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f35a1a9c969 code=0x7ffc0000 [ 2400.276721][T32499] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 2400.318685][T32490] F2FS-fs (loop4): Cannot turn on quotas: -2 on 0 [ 2400.325295][T32490] F2FS-fs (loop4): Start checkpoint disabled! [ 2400.390410][T32490] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 2400.395136][ T23] audit: type=1326 audit(1745496773.870:2369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32497 comm="syz.3.6836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35a1a9c969 code=0x7ffc0000 [ 2400.421965][ T23] audit: type=1326 audit(1745496773.870:2370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32497 comm="syz.3.6836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f35a1a9c969 code=0x7ffc0000 [ 2403.347155][ T23] audit: type=1326 audit(1745496773.870:2371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32497 comm="syz.3.6836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35a1a9c969 code=0x7ffc0000 [ 2405.367416][ T23] audit: type=1326 audit(1745496773.870:2372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32497 comm="syz.3.6836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f35a1a9c969 code=0x7ffc0000 [ 2405.391578][ T23] audit: type=1326 audit(1745496773.870:2373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32497 comm="syz.3.6836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35a1a9c969 code=0x7ffc0000 [ 2405.415207][ T23] audit: type=1326 audit(1745496773.870:2374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32497 comm="syz.3.6836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f35a1a9c969 code=0x7ffc0000 [ 2405.438828][ T23] audit: type=1326 audit(1745496773.870:2375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32497 comm="syz.3.6836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35a1a9c969 code=0x7ffc0000 [ 2405.462627][ T23] audit: type=1326 audit(1745496773.870:2376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32497 comm="syz.3.6836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f35a1a9c969 code=0x7ffc0000 [ 2405.545408][ T23] audit: type=1326 audit(1745496773.870:2377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32497 comm="syz.3.6836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35a1a9c969 code=0x7ffc0000 [ 2405.569312][ T23] audit: type=1326 audit(1745496773.870:2378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32497 comm="syz.3.6836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f35a1a9c969 code=0x7ffc0000 [ 2405.640766][ T23] audit: type=1326 audit(1745496773.870:2379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32497 comm="syz.3.6836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35a1a9c969 code=0x7ffc0000 [ 2406.539468][T32527] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 2408.064884][T32526] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 2408.079006][T32526] ext4 filesystem being mounted at /147/bus supports timestamps until (%ptR?) (0x7fffffff) [ 2408.373039][T32524] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 2408.403596][ T23] audit: type=1326 audit(1745496773.870:2380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32497 comm="syz.3.6836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f35a1a9c969 code=0x7ffc0000 [ 2409.326057][ T23] audit: type=1326 audit(1745496773.870:2381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32497 comm="syz.3.6836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35a1a9c969 code=0x7ffc0000 [ 2409.686234][T32521] EXT4-fs warning (device loop3): ext4_multi_mount_protect:387: Unable to create kmmpd thread for loop3. [ 2409.990514][T32553] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6838'. [ 2410.298033][T30850] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 2410.340337][T32556] F2FS-fs (loop4): invalid crc value [ 2410.346288][T32562] fuse: Bad value for 'user_id' [ 2410.608855][T32556] F2FS-fs (loop4): Cannot turn on quotas: -2 on 0 [ 2410.615698][T32556] F2FS-fs (loop4): Start checkpoint disabled! [ 2410.653617][T32556] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 2410.708137][T30850] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2410.736210][T30850] usb 1-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 2410.762649][T30850] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2410.793458][T30850] usb 1-1: config 0 descriptor?? [ 2411.069025][T32567] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6844'. [ 2411.420644][T31911] attempt to access beyond end of device [ 2411.420644][T31911] loop4: rw=2049, want=45104, limit=40427 [ 2411.471602][T32571] EXT4-fs (loop2): orphan cleanup on readonly fs [ 2411.478964][T32571] EXT4-fs error (device loop2): ext4_validate_block_bitmap:418: comm syz.2.6840: bg 0: block 248: padding at end of block bitmap is not set [ 2411.493634][T32571] __quota_error: 3 callbacks suppressed [ 2411.493643][T32571] Quota error (device loop2): write_blk: dquota write failed [ 2411.506717][T32571] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 2411.517193][T32571] EXT4-fs (loop2): 1 truncate cleaned up [ 2411.523134][T32571] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue [ 2411.557107][T30850] hid-generic 0003:046D:C222.004D: unbalanced collection at end of report description [ 2411.567556][T30850] hid-generic: probe of 0003:046D:C222.004D failed with error -22 [ 2411.618950][T32576] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 2411.754719][ T499] usb 1-1: USB disconnect, device number 44 [ 2414.349527][T32597] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 2420.390695][T32607] F2FS-fs (loop0): invalid crc value [ 2420.425647][T32607] F2FS-fs (loop0): Cannot turn on quotas: -2 on 0 [ 2420.433201][T32607] F2FS-fs (loop0): Start checkpoint disabled! [ 2420.666754][T32610] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 2420.681028][T32610] ext4 filesystem being mounted at /191/bus supports timestamps until (%ptR?) (0x7fffffff) [ 2420.758416][T32628] fuse: Bad value for 'fd' [ 2421.916520][T32611] EXT4-fs: failed to create workqueue [ 2421.921792][T32611] EXT4-fs (loop3): mount failed [ 2423.287002][ T23] audit: type=1326 audit(1745496796.900:2385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32634 comm="syz.2.6852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3359409969 code=0x7ffc0000 [ 2423.311137][ T23] audit: type=1326 audit(1745496796.900:2386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32634 comm="syz.2.6852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3359409969 code=0x7ffc0000 [ 2423.336084][T32630] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 2423.349895][T32630] ext4 filesystem being mounted at /173/bus supports timestamps until (%ptR?) (0x7fffffff) [ 2423.360262][ T23] audit: type=1326 audit(1745496796.930:2387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32634 comm="syz.2.6852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f3359409969 code=0x7ffc0000 [ 2423.384636][ T23] audit: type=1326 audit(1745496796.930:2388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32634 comm="syz.2.6852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3359409969 code=0x7ffc0000 [ 2423.439145][ T23] audit: type=1326 audit(1745496796.930:2389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32634 comm="syz.2.6852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3359409969 code=0x7ffc0000 [ 2423.463147][ T23] audit: type=1326 audit(1745496796.930:2390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32634 comm="syz.2.6852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3359409969 code=0x7ffc0000 [ 2423.486722][ T23] audit: type=1326 audit(1745496796.930:2391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32634 comm="syz.2.6852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3359409969 code=0x7ffc0000 [ 2423.510303][T32638] syz.2.6852[32638] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2423.510342][T32638] syz.2.6852[32638] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2423.513116][ T23] audit: type=1326 audit(1745496796.930:2392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32634 comm="syz.2.6852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3359409969 code=0x7ffc0000 [ 2423.580496][ T23] audit: type=1326 audit(1745496796.930:2393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32634 comm="syz.2.6852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3359409969 code=0x7ffc0000 [ 2423.607936][ T23] audit: type=1326 audit(1745496796.930:2394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32634 comm="syz.2.6852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3359409969 code=0x7ffc0000 [ 2424.244968][T32642] F2FS-fs (loop4): invalid crc value [ 2424.278077][T14354] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 2424.359827][T32649] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 2424.373834][T32649] ext4 filesystem being mounted at /141/bus supports timestamps until (%ptR?) (0x7fffffff) [ 2424.600942][T32642] F2FS-fs (loop4): Cannot turn on quotas: -2 on 0 [ 2424.607998][T32642] F2FS-fs (loop4): Start checkpoint disabled! [ 2424.624671][T32655] EXT4-fs (loop0): orphan cleanup on readonly fs [ 2424.635383][T32655] EXT4-fs error (device loop0): ext4_validate_block_bitmap:418: comm syz.0.6856: bg 0: block 248: padding at end of block bitmap is not set [ 2425.058188][T32655] EXT4-fs (loop0): 1 truncate cleaned up [ 2425.063863][T32655] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue [ 2425.162762][T32642] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 2425.311086][T32674] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 2425.867657][T14354] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2425.883702][T14354] usb 2-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 2425.894501][T14354] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2425.906328][T14354] usb 2-1: config 0 descriptor?? [ 2426.054801][T32680] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 2426.069300][T32680] ext4 filesystem being mounted at /152/bus supports timestamps until (%ptR?) (0x7fffffff) [ 2426.619661][T32687] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 2426.746089][T14354] hid-generic 0003:046D:C222.004E: unbalanced collection at end of report description [ 2426.755818][T14354] hid-generic: probe of 0003:046D:C222.004E failed with error -22 [ 2426.819080][T32692] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 2426.850870][T14354] usb 2-1: USB disconnect, device number 53 [ 2426.869276][T32694] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 2427.244756][T32701] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 2427.259355][T32701] ext4 filesystem being mounted at /193/bus supports timestamps until (%ptR?) (0x7fffffff) [ 2429.481862][T32714] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 2429.496047][T32714] ext4 filesystem being mounted at /175/bus supports timestamps until (%ptR?) (0x7fffffff) [ 2429.731373][T32711] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 2430.752229][T32726] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 2430.766377][T32726] ext4 filesystem being mounted at /154/bus supports timestamps until (%ptR?) (0x7fffffff) [ 2433.704073][T32738] EXT4-fs (loop4): orphan cleanup on readonly fs [ 2433.713936][T32738] EXT4-fs error (device loop4): ext4_validate_block_bitmap:418: comm syz.4.6866: bg 0: block 248: padding at end of block bitmap is not set [ 2433.729061][T32738] __quota_error: 30 callbacks suppressed [ 2433.734546][T32738] Quota error (device loop4): write_blk: dquota write failed [ 2433.741908][T32738] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 2433.753625][T32738] EXT4-fs (loop4): 1 truncate cleaned up [ 2433.760009][T32738] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue [ 2434.312343][T32748] overlayfs: overlapping lowerdir path [ 2434.704676][T32749] F2FS-fs (loop0): invalid crc value [ 2434.738509][T32749] F2FS-fs (loop0): Cannot turn on quotas: -2 on 0 [ 2434.745010][T32749] F2FS-fs (loop0): Start checkpoint disabled! [ 2434.751963][T32749] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 2437.322415][T32746] EXT4-fs (loop2): 1 orphan inode deleted [ 2437.330408][T32746] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 2437.339343][T32746] ext4 filesystem being mounted at /194/file1 supports timestamps until (%ptR?) (0x7fffffff) [ 2438.525185][ T304] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 2438.682277][ T308] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 2439.220035][ T318] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 2440.085219][ T317] EXT4-fs (loop4): orphan cleanup on readonly fs [ 2440.095215][ T317] EXT4-fs error (device loop4): ext4_validate_block_bitmap:418: comm syz.4.6879: bg 0: block 248: padding at end of block bitmap is not set [ 2440.110630][ T317] Quota error (device loop4): write_blk: dquota write failed [ 2440.118048][ T317] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 2440.129949][ T317] EXT4-fs (loop4): 1 truncate cleaned up [ 2440.136582][ T317] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue [ 2443.612985][ T327] F2FS-fs (loop2): invalid crc value [ 2443.619317][ T327] F2FS-fs (loop2): Failed to initialize F2FS segment manager (-4) [ 2444.290629][ T351] overlayfs: overlapping lowerdir path [ 2444.682923][ T347] EXT4-fs (loop3): Unsupported blocksize for fs encryption [ 2445.103629][ T349] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 2445.117737][ T349] ext4 filesystem being mounted at /157/bus supports timestamps until (%ptR?) (0x7fffffff) [ 2445.946978][ T365] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 2445.961275][ T365] ext4 filesystem being mounted at /148/bus supports timestamps until (%ptR?) (0x7fffffff) [ 2446.037729][ T359] EXT4-fs (loop1): 1 orphan inode deleted [ 2446.056835][ T359] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 2446.098023][ T359] ext4 filesystem being mounted at /181/file1 supports timestamps until (%ptR?) (0x7fffffff) [ 2448.090228][ T378] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 2448.104083][ T378] ext4 filesystem being mounted at /197/bus supports timestamps until (%ptR?) (0x7fffffff) [ 2448.180150][ T379] EXT4-fs (loop0): orphan cleanup on readonly fs [ 2448.187226][ T379] EXT4-fs error (device loop0): ext4_validate_block_bitmap:418: comm syz.0.6889: bg 0: block 248: padding at end of block bitmap is not set [ 2448.202522][ T379] Quota error (device loop0): write_blk: dquota write failed [ 2448.210587][ T379] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 2448.220853][ T379] EXT4-fs (loop0): 1 truncate cleaned up [ 2448.226573][ T379] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue [ 2448.240847][ T384] F2FS-fs (loop4): invalid crc value [ 2448.267173][ T384] F2FS-fs (loop4): Cannot turn on quotas: -2 on 0 [ 2448.278313][ T384] F2FS-fs (loop4): Start checkpoint disabled! [ 2448.284952][ T384] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 2451.519909][ T402] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 2451.533686][ T402] ext4 filesystem being mounted at /149/bus supports timestamps until (%ptR?) (0x7fffffff) [ 2451.661650][T10280] attempt to access beyond end of device [ 2451.661650][T10280] loop4: rw=2049, want=45104, limit=40427 [ 2452.518763][ T420] overlayfs: overlapping lowerdir path [ 2453.962937][ T419] EXT4-fs (loop2): orphan cleanup on readonly fs [ 2453.973778][ T419] EXT4-fs error (device loop2): ext4_validate_block_bitmap:418: comm syz.2.6897: bg 0: block 248: padding at end of block bitmap is not set [ 2453.989384][ T419] Quota error (device loop2): write_blk: dquota write failed [ 2453.996962][ T419] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 2454.010633][ T419] EXT4-fs (loop2): 1 truncate cleaned up [ 2454.017653][ T419] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue [ 2456.840150][ T429] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 2456.854261][ T429] ext4 filesystem being mounted at /184/bus supports timestamps until (%ptR?) (0x7fffffff) [ 2457.755298][ T441] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 2457.769426][ T441] ext4 filesystem being mounted at /199/bus supports timestamps until (%ptR?) (0x7fffffff) [ 2457.839171][ T438] F2FS-fs (loop0): invalid crc value [ 2458.127772][ T438] F2FS-fs (loop0): Cannot turn on quotas: -2 on 0 [ 2458.134724][ T438] F2FS-fs (loop0): Start checkpoint disabled! [ 2459.057456][ T438] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 2459.319056][ T458] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 2459.333059][ T458] ext4 filesystem being mounted at /201/bus supports timestamps until (%ptR?) (0x7fffffff) [ 2459.695846][ T454] EXT4-fs (loop1): 1 orphan inode deleted [ 2460.072796][ T454] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 2460.143295][ T454] ext4 filesystem being mounted at /185/file1 supports timestamps until (%ptR?) (0x7fffffff) [ 2460.269225][T11111] attempt to access beyond end of device [ 2460.269225][T11111] loop0: rw=2049, want=45104, limit=40427 [ 2461.646076][ T473] EXT4-fs (loop4): orphan cleanup on readonly fs [ 2461.654089][ T473] EXT4-fs error (device loop4): ext4_validate_block_bitmap:418: comm syz.4.6903: bg 0: block 248: padding at end of block bitmap is not set [ 2461.670163][ T473] Quota error (device loop4): write_blk: dquota write failed [ 2461.677604][ T473] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 2461.688216][ T473] EXT4-fs (loop4): 1 truncate cleaned up [ 2461.697308][ T473] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue [ 2463.002657][ T483] F2FS-fs (loop3): invalid crc value [ 2463.017463][ T488] EXT4-fs (loop2): orphan cleanup on readonly fs [ 2463.024628][ T488] EXT4-fs error (device loop2): ext4_validate_block_bitmap:418: comm syz.2.6908: bg 0: block 248: padding at end of block bitmap is not set [ 2463.039359][ T488] Quota error (device loop2): write_blk: dquota write failed [ 2463.046762][ T488] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 2463.075140][ T483] F2FS-fs (loop3): Cannot turn on quotas: -2 on 0 [ 2463.082329][ T483] F2FS-fs (loop3): Start checkpoint disabled! [ 2463.088676][ T488] EXT4-fs (loop2): 1 truncate cleaned up [ 2463.094744][ T488] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue [ 2463.142770][ T483] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 2463.153169][ T484] erofs: (device loop0): mounted with opts: , root inode @ nid 36. [ 2463.217259][ T492] F2FS-fs (loop1): invalid crc value [ 2463.245420][ T504] overlayfs: overlapping lowerdir path [ 2463.550119][ T492] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0 [ 2463.556613][ T492] F2FS-fs (loop1): Start checkpoint disabled! [ 2463.564821][ T492] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 2464.450204][ T7] attempt to access beyond end of device [ 2464.450204][ T7] loop3: rw=2049, want=45104, limit=40427 [ 2464.550774][ T517] overlayfs: overlapping lowerdir path [ 2464.881646][ T7] attempt to access beyond end of device [ 2464.881646][ T7] loop1: rw=2049, want=45104, limit=40427 [ 2465.339207][ T527] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6914'. [ 2465.827326][ T530] F2FS-fs (loop3): invalid crc value [ 2465.969620][ T539] EXT4-fs (loop2): orphan cleanup on readonly fs [ 2465.980374][ T539] EXT4-fs error (device loop2): ext4_validate_block_bitmap:418: comm syz.2.6916: bg 0: block 248: padding at end of block bitmap is not set [ 2465.995802][ T539] Quota error (device loop2): write_blk: dquota write failed [ 2466.003155][ T539] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 2466.015346][ T539] EXT4-fs (loop2): 1 truncate cleaned up [ 2466.022027][ T539] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue [ 2466.141952][ T530] F2FS-fs (loop3): Cannot turn on quotas: -2 on 0 [ 2466.150421][ T530] F2FS-fs (loop3): Start checkpoint disabled! [ 2466.221665][ T530] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 2466.269838][ T538] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 2466.283907][ T538] ext4 filesystem being mounted at /187/bus supports timestamps until (%ptR?) (0x7fffffff) [ 2468.280607][ T555] F2FS-fs (loop4): invalid crc value [ 2468.362948][ T7] attempt to access beyond end of device [ 2468.362948][ T7] loop3: rw=2049, want=45104, limit=40427 [ 2468.400886][ T555] F2FS-fs (loop4): Cannot turn on quotas: -2 on 0 [ 2468.407441][ T555] F2FS-fs (loop4): Start checkpoint disabled! [ 2468.414357][ T555] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 2469.171357][ T564] F2FS-fs (loop1): invalid crc value [ 2469.180737][ T567] EXT4-fs (loop2): orphan cleanup on readonly fs [ 2469.190755][ T567] EXT4-fs error (device loop2): ext4_validate_block_bitmap:418: comm syz.2.6920: bg 0: block 248: padding at end of block bitmap is not set [ 2469.206032][ T567] Quota error (device loop2): write_blk: dquota write failed [ 2469.213503][ T567] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 2469.226360][ T567] EXT4-fs (loop2): 1 truncate cleaned up [ 2469.233359][ T567] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue [ 2469.398607][ T564] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0 [ 2469.405214][ T564] F2FS-fs (loop1): Start checkpoint disabled! [ 2469.459642][ T574] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 2469.473762][ T574] ext4 filesystem being mounted at /163/bus supports timestamps until (%ptR?) (0x7fffffff) [ 2469.712165][ T564] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 2470.320876][ T7] attempt to access beyond end of device [ 2470.320876][ T7] loop4: rw=2049, want=45104, limit=40427 [ 2470.387927][ T23] audit: type=1326 audit(1745496843.990:2423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=583 comm="syz.0.6924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f987e99e969 code=0x7ffc0000 [ 2470.416499][ T23] audit: type=1326 audit(1745496843.990:2424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=583 comm="syz.0.6924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f987e99e969 code=0x7ffc0000 [ 2470.440122][ T23] audit: type=1326 audit(1745496843.990:2425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=583 comm="syz.0.6924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f987e99e969 code=0x7ffc0000 [ 2470.688602][ T23] audit: type=1326 audit(1745496843.990:2426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=583 comm="syz.0.6924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f987e99e969 code=0x7ffc0000 [ 2470.741713][ T23] audit: type=1326 audit(1745496843.990:2427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=583 comm="syz.0.6924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f987e99e969 code=0x7ffc0000 [ 2470.765341][ T23] audit: type=1326 audit(1745496843.990:2428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=583 comm="syz.0.6924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f987e99e969 code=0x7ffc0000 [ 2470.815231][ T23] audit: type=1326 audit(1745496843.990:2429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=583 comm="syz.0.6924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f987e99e969 code=0x7ffc0000 [ 2470.852340][T31911] attempt to access beyond end of device [ 2470.852340][T31911] loop1: rw=2049, want=45104, limit=40427 [ 2470.859265][ T23] audit: type=1326 audit(1745496843.990:2430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=583 comm="syz.0.6924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f987e99e969 code=0x7ffc0000 [ 2471.381710][ T594] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 2471.395802][ T594] ext4 filesystem being mounted at /153/bus supports timestamps until (%ptR?) (0x7fffffff) [ 2473.819546][ T614] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 2474.439330][ T611] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 2474.453716][ T611] ext4 filesystem being mounted at /154/bus supports timestamps until (%ptR?) (0x7fffffff) [ 2474.746731][ T602] EXT4-fs: failed to create workqueue [ 2475.241622][ T602] EXT4-fs (loop4): mount failed [ 2478.218786][ T629] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 2479.192826][ T628] EXT4-fs (loop2): orphan cleanup on readonly fs [ 2479.223978][ T628] EXT4-fs error (device loop2): ext4_validate_block_bitmap:418: comm syz.2.6932: bg 0: block 248: padding at end of block bitmap is not set [ 2479.257199][ T628] __quota_error: 60 callbacks suppressed [ 2479.257221][ T628] Quota error (device loop2): write_blk: dquota write failed [ 2479.270071][ T628] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 2479.485072][ T641] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 2479.499180][ T641] ext4 filesystem being mounted at /166/bus supports timestamps until (%ptR?) (0x7fffffff) [ 2479.600348][ T628] EXT4-fs (loop2): 1 truncate cleaned up [ 2479.606917][ T628] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue [ 2480.478319][ T645] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 2480.687734][ T653] EXT4-fs (loop3): orphan cleanup on readonly fs [ 2480.704932][ T653] EXT4-fs error (device loop3): ext4_validate_block_bitmap:418: comm syz.3.6935: bg 0: block 248: padding at end of block bitmap is not set [ 2480.738213][ T653] Quota error (device loop3): write_blk: dquota write failed [ 2480.745540][ T653] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 2480.766510][ T653] EXT4-fs (loop3): 1 truncate cleaned up [ 2480.774678][ T657] F2FS-fs (loop0): invalid crc value [ 2480.815892][ T657] F2FS-fs (loop0): Cannot turn on quotas: -2 on 0 [ 2480.824844][ T657] F2FS-fs (loop0): Start checkpoint disabled! [ 2480.833438][ T664] EXT4-fs (loop2): orphan cleanup on readonly fs [ 2480.844715][ T657] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 2480.855063][ T664] EXT4-fs error (device loop2): ext4_validate_block_bitmap:418: comm syz.2.6937: bg 0: block 248: padding at end of block bitmap is not set [ 2480.869181][ T653] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue [ 2480.958245][ T664] Quota error (device loop2): write_blk: dquota write failed [ 2480.965647][ T664] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 2480.989425][ T664] EXT4-fs (loop2): 1 truncate cleaned up [ 2481.035328][ T664] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue [ 2481.572600][T31911] attempt to access beyond end of device [ 2481.572600][T31911] loop0: rw=2049, want=45104, limit=40427 [ 2482.788722][ T686] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 2482.802808][ T686] ext4 filesystem being mounted at /211/bus supports timestamps until (%ptR?) (0x7fffffff) [ 2483.614377][ T698] EXT4-fs (loop0): 1 orphan inode deleted [ 2483.620158][ T698] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 2483.630661][ T698] ext4 filesystem being mounted at /168/file1 supports timestamps until (%ptR?) (0x7fffffff) [ 2484.908057][ T712] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 2485.223839][ T717] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6945'. [ 2485.842999][ T727] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 2485.857221][ T727] ext4 filesystem being mounted at /214/bus supports timestamps until (%ptR?) (0x7fffffff) [ 2487.057913][ T23] audit: type=1326 audit(1745496860.670:2491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=735 comm="syz.3.6949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35a1a9c969 code=0x7ffc0000 [ 2487.095798][ T23] audit: type=1326 audit(1745496860.680:2492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=735 comm="syz.3.6949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35a1a9c969 code=0x7ffc0000 [ 2487.174839][ T23] audit: type=1326 audit(1745496860.700:2493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=735 comm="syz.3.6949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f35a1a9c969 code=0x7ffc0000 [ 2487.221452][ T739] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 2487.435033][ T738] overlayfs: unrecognized mount option "/" or missing value [ 2487.444215][ T738] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 2487.502571][ T23] audit: type=1326 audit(1745496860.700:2494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=735 comm="syz.3.6949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35a1a9c969 code=0x7ffc0000 [ 2487.637504][ T23] audit: type=1326 audit(1745496860.700:2495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=735 comm="syz.3.6949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35a1a9c969 code=0x7ffc0000 [ 2487.691367][ T23] audit: type=1326 audit(1745496860.700:2496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=735 comm="syz.3.6949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f35a1a9c969 code=0x7ffc0000 [ 2487.752286][ T23] audit: type=1326 audit(1745496860.700:2497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=735 comm="syz.3.6949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35a1a9c969 code=0x7ffc0000 [ 2487.795196][ T23] audit: type=1326 audit(1745496860.700:2498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=735 comm="syz.3.6949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35a1a9c969 code=0x7ffc0000 [ 2487.825302][ T23] audit: type=1326 audit(1745496860.700:2499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=735 comm="syz.3.6949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f35a1a9c969 code=0x7ffc0000 [ 2487.854172][ T23] audit: type=1326 audit(1745496860.700:2500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=735 comm="syz.3.6949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35a1a9c969 code=0x7ffc0000 [ 2488.072058][ T745] EXT4-fs (loop0): orphan cleanup on readonly fs [ 2488.094187][ T745] EXT4-fs error (device loop0): ext4_validate_block_bitmap:418: comm syz.0.6950: bg 0: block 248: padding at end of block bitmap is not set [ 2488.150306][ T745] EXT4-fs (loop0): 1 truncate cleaned up [ 2489.389656][ T756] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 2490.122336][ T753] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 2490.136769][ T753] ext4 filesystem being mounted at /196/bus supports timestamps until (%ptR?) (0x7fffffff) [ 2490.368103][ T745] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue [ 2491.238707][ T771] overlayfs: overlapping lowerdir path [ 2493.898265][ T772] EXT4-fs: failed to create workqueue [ 2493.903647][ T772] EXT4-fs (loop3): mount failed [ 2493.937892][ T770] EXT4-fs warning (device loop2): ext4_multi_mount_protect:387: Unable to create kmmpd thread for loop2. [ 2494.854160][ T796] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6958'. [ 2496.339272][ T794] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 2496.353313][ T794] ext4 filesystem being mounted at /197/bus supports timestamps until (%ptR?) (0x7fffffff) [ 2497.286411][ T810] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 2499.278404][ T813] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 2499.292596][ T813] ext4 filesystem being mounted at /159/bus supports timestamps until (%ptR?) (0x7fffffff) [ 2500.352585][ T23] kauditd_printk_skb: 28 callbacks suppressed [ 2500.352598][ T23] audit: type=1326 audit(1745496873.970:2527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=828 comm="syz.1.6965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519bfd7969 code=0x7ffc0000 [ 2500.364399][ T814] EXT4-fs: failed to create workqueue [ 2500.386819][ T814] EXT4-fs (loop2): mount failed [ 2501.097928][ T23] audit: type=1326 audit(1745496873.970:2528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=828 comm="syz.1.6965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519bfd7969 code=0x7ffc0000 [ 2501.139526][ T23] audit: type=1326 audit(1745496874.700:2529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=828 comm="syz.1.6965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f519bfd7969 code=0x7ffc0000 [ 2501.163438][ T826] EXT4-fs (loop4): orphan cleanup on readonly fs [ 2501.171326][ T826] EXT4-fs error (device loop4): ext4_validate_block_bitmap:418: comm syz.4.6966: bg 0: block 248: padding at end of block bitmap is not set [ 2501.178022][ T23] audit: type=1326 audit(1745496874.700:2530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=828 comm="syz.1.6965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519bfd7969 code=0x7ffc0000 [ 2501.185983][ T826] Quota error (device loop4): write_blk: dquota write failed [ 2501.215917][ T826] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 2502.700397][ T23] audit: type=1326 audit(1745496874.700:2531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=828 comm="syz.1.6965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519bfd7969 code=0x7ffc0000 [ 2502.723965][ T23] audit: type=1326 audit(1745496874.700:2532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=828 comm="syz.1.6965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f519bfd7969 code=0x7ffc0000 [ 2502.757679][ T826] EXT4-fs (loop4): 1 truncate cleaned up [ 2502.772951][ T826] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue [ 2502.961193][ T23] audit: type=1326 audit(1745496874.700:2533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=828 comm="syz.1.6965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519bfd7969 code=0x7ffc0000 [ 2503.290035][ T840] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 2503.304212][ T840] ext4 filesystem being mounted at /220/bus supports timestamps until (%ptR?) (0x7fffffff) [ 2503.334390][ T841] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 2503.348192][ T841] ext4 filesystem being mounted at /160/bus supports timestamps until (%ptR?) (0x7fffffff) [ 2503.795936][ T23] audit: type=1326 audit(1745496874.700:2534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=828 comm="syz.1.6965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519bfd7969 code=0x7ffc0000 [ 2504.187119][ T865] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 2504.470796][ T852] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 2504.488028][ T864] FAT-fs (loop1): Directory bread(block 64) failed [ 2504.494382][ T864] FAT-fs (loop1): Directory bread(block 65) failed [ 2504.500823][ T864] FAT-fs (loop1): Directory bread(block 66) failed [ 2504.507155][ T864] FAT-fs (loop1): Directory bread(block 67) failed [ 2504.513582][ T864] FAT-fs (loop1): Directory bread(block 68) failed [ 2504.519851][ T864] FAT-fs (loop1): Directory bread(block 69) failed [ 2504.526190][ T864] FAT-fs (loop1): Directory bread(block 70) failed [ 2504.532534][ T864] FAT-fs (loop1): Directory bread(block 71) failed [ 2504.539059][ T864] FAT-fs (loop1): Directory bread(block 72) failed [ 2504.545340][ T864] FAT-fs (loop1): Directory bread(block 73) failed [ 2504.589504][ T861] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 2505.087024][ T874] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 2505.101165][ T874] ext4 filesystem being mounted at /172/bus supports timestamps until (%ptR?) (0x7fffffff) [ 2508.961319][ T891] ================================================================== [ 2508.969245][ T891] BUG: KASAN: use-after-free in __ext4_iget+0x384/0x4330 [ 2508.976074][ T891] Read of size 8 at addr ffff8881c1d6c600 by task syz.4.6976/891 [ 2508.983613][ T891] [ 2508.985811][ T891] CPU: 0 PID: 891 Comm: syz.4.6976 Not tainted 5.4.290-syzkaller-00001-g986c38813dff #0 [ 2508.995334][ T891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 2509.005231][ T891] Call Trace: [ 2509.008362][ T891] dump_stack+0x1d8/0x241 [ 2509.012525][ T891] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 2509.018167][ T891] ? printk+0xd1/0x111 [ 2509.022517][ T891] ? __ext4_iget+0x384/0x4330 [ 2509.027024][ T891] print_address_description+0x8c/0x600 [ 2509.032403][ T891] ? iget_locked+0x850/0x850 [ 2509.036827][ T891] ? __kasan_check_write+0x14/0x20 [ 2509.041782][ T891] ? _raw_spin_lock+0xa4/0x1b0 [ 2509.046380][ T891] ? __ext4_iget+0x384/0x4330 [ 2509.050890][ T891] __kasan_report+0xf3/0x120 [ 2509.055328][ T891] ? __ext4_iget+0x384/0x4330 [ 2509.059838][ T891] kasan_report+0x30/0x60 [ 2509.063995][ T891] __asan_report_load8_noabort+0x14/0x20 [ 2509.069467][ T891] __ext4_iget+0x384/0x4330 [ 2509.073816][ T891] ? idr_replace+0x230/0x230 [ 2509.078229][ T891] ? ext4_get_projid+0x140/0x140 [ 2509.083000][ T891] ? _raw_write_lock+0xa4/0x170 [ 2509.087744][ T891] ? __proc_create+0x65a/0xa00 [ 2509.092289][ T891] ext4_enable_quotas+0x528/0x940 [ 2509.097148][ T891] ? ext4_fill_flex_info+0x5b0/0x5b0 [ 2509.102269][ T891] ? proc_create+0x230/0x230 [ 2509.106693][ T891] ? __kasan_check_write+0x14/0x20 [ 2509.111644][ T891] ? ext4_register_sysfs+0x1f9/0x240 [ 2509.116762][ T891] ext4_fill_super+0x84f0/0x8d90 [ 2509.121549][ T891] ? ext4_mount+0x40/0x40 [ 2509.125710][ T891] ? memcpy+0x49/0x60 [ 2509.129518][ T891] ? vscnprintf+0x80/0x80 [ 2509.133681][ T891] ? sb_set_blocksize+0xa8/0xf0 [ 2509.138368][ T891] mount_bdev+0x273/0x380 [ 2509.142533][ T891] ? ext4_mount+0x40/0x40 [ 2509.146707][ T891] ext4_mount+0x34/0x40 [ 2509.150691][ T891] legacy_get_tree+0xee/0x190 [ 2509.155204][ T891] ? ext4_lazyinit_thread+0xc70/0xc70 [ 2509.160411][ T891] vfs_get_tree+0x88/0x290 [ 2509.164670][ T891] do_new_mount+0x292/0x570 [ 2509.169005][ T891] ? cap_capable+0x1ce/0x270 [ 2509.173433][ T891] ? do_move_mount_old+0x160/0x160 [ 2509.178390][ T891] ? security_capable+0x87/0xb0 [ 2509.183072][ T891] ? ns_capable+0x89/0xe0 [ 2509.187236][ T891] do_mount+0x688/0xe10 [ 2509.191224][ T891] ? copy_mount_options+0x5f/0x330 [ 2509.196171][ T891] ? copy_mount_string+0x30/0x30 [ 2509.200944][ T891] ? copy_mount_options+0x2bf/0x330 [ 2509.206012][ T891] ksys_mount+0xcc/0x100 [ 2509.210061][ T891] __x64_sys_mount+0xbf/0xd0 [ 2509.214486][ T891] do_syscall_64+0xd8/0x170 [ 2509.218829][ T891] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 2509.224562][ T891] RIP: 0033:0x7f0dee85c10a [ 2509.228813][ T891] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2509.248260][ T891] RSP: 002b:00007f0dece80e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2509.256489][ T891] RAX: ffffffffffffffda RBX: 00007f0dece80ef0 RCX: 00007f0dee85c10a [ 2509.264301][ T891] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 00007f0dece80eb0 [ 2509.272112][ T891] RBP: 0000200000000180 R08: 00007f0dece80ef0 R09: 000000000021081e [ 2509.279928][ T891] R10: 000000000021081e R11: 0000000000000246 R12: 0000200000000000 [ 2509.287743][ T891] R13: 00007f0dece80eb0 R14: 00000000000004fa R15: 00002000000001c0 [ 2509.295556][ T891] [ 2509.297721][ T891] Allocated by task 31619: [ 2509.301999][ T891] __kasan_kmalloc+0x171/0x210 [ 2509.306572][ T891] kasan_slab_alloc+0xe/0x10 [ 2509.311007][ T891] kmem_cache_alloc+0xe0/0x260 [ 2509.315599][ T891] f2fs_alloc_inode+0x26/0x3c0 [ 2509.320200][ T891] iget_locked+0x14f/0x850 [ 2509.324449][ T891] f2fs_iget+0x55/0x4c50 [ 2509.328619][ T891] f2fs_fill_super+0x6909/0x8330 [ 2509.333393][ T891] mount_bdev+0x273/0x380 [ 2509.337556][ T891] f2fs_mount+0x34/0x40 [ 2509.341550][ T891] legacy_get_tree+0xee/0x190 [ 2509.346070][ T891] vfs_get_tree+0x88/0x290 [ 2509.350315][ T891] do_new_mount+0x292/0x570 [ 2509.354657][ T891] do_mount+0x688/0xe10 [ 2509.358647][ T891] ksys_mount+0xcc/0x100 [ 2509.362742][ T891] __x64_sys_mount+0xbf/0xd0 [ 2509.367156][ T891] do_syscall_64+0xd8/0x170 [ 2509.371504][ T891] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 2509.377214][ T891] [ 2509.379388][ T891] Freed by task 17: [ 2509.383038][ T891] __kasan_slab_free+0x1b5/0x270 [ 2509.387820][ T891] kasan_slab_free+0xe/0x10 [ 2509.392150][ T891] kmem_cache_free+0x1a0/0x410 [ 2509.396750][ T891] f2fs_free_inode+0x24/0x30 [ 2509.401176][ T891] i_callback+0x4b/0x70 [ 2509.405168][ T891] rcu_do_batch+0x492/0xa00 [ 2509.409507][ T891] rcu_core+0x4c8/0xcb0 [ 2509.413502][ T891] rcu_core_si+0x9/0x10 [ 2509.417496][ T891] __do_softirq+0x24a/0x687 [ 2509.421826][ T891] [ 2509.424004][ T891] The buggy address belongs to the object at ffff8881c1d6c140 [ 2509.424004][ T891] which belongs to the cache f2fs_inode_cache of size 1264 [ 2509.438467][ T891] The buggy address is located 1216 bytes inside of [ 2509.438467][ T891] 1264-byte region [ffff8881c1d6c140, ffff8881c1d6c630) [ 2509.451685][ T891] The buggy address belongs to the page: [ 2509.457172][ T891] page:ffffea0007075a00 refcount:1 mapcount:0 mapping:ffff8881f0ffbb80 index:0xffff8881c1d68000 compound_mapcount: 0 [ 2509.469232][ T891] flags: 0x8000000000010200(slab|head) [ 2509.474531][ T891] raw: 8000000000010200 ffffea00071ebe08 ffff8881f0fc5390 ffff8881f0ffbb80 [ 2509.482941][ T891] raw: ffff8881c1d68000 0000000000170001 00000001ffffffff 0000000000000000 [ 2509.491378][ T891] page dumped because: kasan: bad access detected [ 2509.497609][ T891] page_owner tracks the page as allocated [ 2509.503184][ T891] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0x1d2050(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL|__GFP_RECLAIMABLE) [ 2509.520352][ T891] prep_new_page+0x192/0x370 [ 2509.524775][ T891] get_page_from_freelist+0x2d13/0x2d90 [ 2509.530152][ T891] __alloc_pages_nodemask+0x393/0x840 [ 2509.535447][ T891] alloc_slab_page+0x3b/0x400 [ 2509.539970][ T891] new_slab+0x98/0x430 [ 2509.543866][ T891] ___slab_alloc+0x2e0/0x460 [ 2509.548290][ T891] __slab_alloc+0x63/0xa0 [ 2509.552458][ T891] kmem_cache_alloc+0x12a/0x260 [ 2509.557145][ T891] f2fs_alloc_inode+0x26/0x3c0 [ 2509.561752][ T891] iget_locked+0x14f/0x850 [ 2509.566001][ T891] f2fs_iget+0x55/0x4c50 [ 2509.570077][ T891] f2fs_fill_super+0x4d1b/0x8330 [ 2509.574855][ T891] mount_bdev+0x273/0x380 [ 2509.579018][ T891] f2fs_mount+0x34/0x40 [ 2509.583016][ T891] legacy_get_tree+0xee/0x190 [ 2509.587524][ T891] vfs_get_tree+0x88/0x290 [ 2509.591772][ T891] page last free stack trace: [ 2509.596289][ T891] __free_pages_ok+0x847/0x950 [ 2509.600891][ T891] __free_pages+0x91/0x140 [ 2509.605140][ T891] kfree+0x2cb/0x360 [ 2509.608873][ T891] kvfree+0x46/0x50 [ 2509.612525][ T891] kvm_arch_free_memslot+0xa9/0x3f0 [ 2509.617555][ T891] kvm_put_kvm+0xcbd/0x1080 [ 2509.621898][ T891] kvm_vcpu_release+0x7d/0x90 [ 2509.626409][ T891] __fput+0x289/0x6c0 [ 2509.630258][ T891] ____fput+0x15/0x20 [ 2509.634050][ T891] task_work_run+0x146/0x170 [ 2509.638470][ T891] get_signal+0x142d/0x14b0 [ 2509.642808][ T891] do_signal+0xb3/0xf10 [ 2509.646891][ T891] exit_to_usermode_loop+0xc4/0x1b0 [ 2509.651925][ T891] prepare_exit_to_usermode+0x19c/0x200 [ 2509.657307][ T891] do_syscall_64+0x144/0x170 [ 2509.661744][ T891] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 2509.667455][ T891] [ 2509.669623][ T891] Memory state around the buggy address: [ 2509.675101][ T891] ffff8881c1d6c500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2509.682995][ T891] ffff8881c1d6c580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2509.690912][ T891] >ffff8881c1d6c600: fb fb fb fb fb fb fc fc fc fc fc fc fc fc fc fc [ 2509.698787][ T891] ^ [ 2509.702703][ T891] ffff8881c1d6c680: fc fc fc fc fc fc 00 00 00 00 00 00 00 00 00 00 [ 2509.710597][ T891] ffff8881c1d6c700: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2509.718498][ T891] ================================================================== [ 2509.726388][ T891] Disabling lock debugging due to kernel taint [ 2509.732790][ T891] EXT4-fs warning (device loop4): ext4_enable_quotas:6100: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 2509.747353][ T891] EXT4-fs (loop4): mount failed [ 2509.889999][ T911] overlayfs: overlapping lowerdir path [ 2510.443957][ T904] EXT4-fs (loop2): orphan cleanup on readonly fs [ 2510.451425][ T904] EXT4-fs error (device loop2): ext4_validate_block_bitmap:418: comm syz.2.6979: bg 0: block 248: padding at end of block bitmap is not set [ 2510.465963][ T904] __quota_error: 22 callbacks suppressed [ 2510.465980][ T904] Quota error (device loop2): write_blk: dquota write failed [ 2510.478746][ T904] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 2510.489049][ T904] EXT4-fs (loop2): 1 truncate cleaned up [ 2510.494870][ T904] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue