last executing test programs: 2m4.812819345s ago: executing program 4 (id=10796): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000180)='./file1\x00', 0x1218088, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0xa, 0x2c2, &(0x7f00000008c0)="$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") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) openat$incfs(0xffffffffffffff9c, &(0x7f0000000a40)='.pending_reads\x00', 0x842, 0x0) 2m4.635693513s ago: executing program 4 (id=10806): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000cc0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000000)={0x0, 0x6, [@multicast, @multicast, @remote, @multicast, @broadcast, @remote]}) 2m4.412076803s ago: executing program 4 (id=10815): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000002080)={0xf, {"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", 0x1000}}, 0x1006) 2m4.260456279s ago: executing program 4 (id=10822): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file1\x00', 0x0, &(0x7f0000000200)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@usrjquota}, {@errors_remount}, {@dioread_lock}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@mblk_io_submit}, {@minixdf}, {@barrier_val}, {@nombcache}, {}]}, 0x45, 0x7b6, &(0x7f0000001140)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 2m3.695970023s ago: executing program 4 (id=10836): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @remote}, 0x1c) 2m2.437412457s ago: executing program 4 (id=10878): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000340)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@mblk_io_submit}, {@data_err_abort}, {@test_dummy_encryption}, {@nodioread_nolock}, {@nodelalloc}, {@noquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x1, 0xbaf, &(0x7f00000017c0)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000580)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000007c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000680)='./file1\x00', 0x2) 2m2.383446349s ago: executing program 32 (id=10878): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000340)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@mblk_io_submit}, {@data_err_abort}, {@test_dummy_encryption}, {@nodioread_nolock}, {@nodelalloc}, {@noquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x1, 0xbaf, &(0x7f00000017c0)="$eJzs3M1rXFUbAPDn3ny2zftO+vIi1k0jIi2o07SSYotgKxU3LgTdCg3ppIRMP0giNWkWE/0HRF0LbgS1KF3YdTcKbt1o3VpcCEVioyCikTsfSWxmkrSd5Ibk94Mz95w5d+Z5nrlM7j0wNwHsWgPZQxpxICLOJhGF+vNpRHRXe70Rldp+C/OzI7/Pz44ksbj42i9JJBFxd352pPFeSX27rz7ojYhvX0zif++sjjs5PTM+XC6XJurjI1MXLh+ZnJ55ZuzC8PnS+dLFo8efGzo2dHzwxFDbav3jx1M3fnv85Z8qf37617Vf3/84iVPRV59bWUe7DMTA0meyUmdEDLc7WE466vWsrDPpXOdF6SYnBQBAS+mKa7hHohAdsXzxVoivvss1OQAAAKAtFjsiFgEAAIAdLrH+BwAAgB2u8TuAu/OzI42W7y8Sttad0xHRX6t/od5qM51RqW57oysi9t5NYuVtrUntZQ9tICJu/3Dii6zFJt2HvJbKXEQ82uz4J9X6+6t3ca+uP42IwTbEH7hnvN3qf7q7df2n2hA/7/oB2J1unq6dyFaf/9Kl659ocv7rbHLuehB5n/8a138Lq67/luvvaHH99+oGY1z95MMrreay+p+/8dLnjZbFz7YPVdR9uDMX8Vhns/qTpfqTFvWf3WCMwt9XSq3m8q5/8aOIQ9G8/oZk7f9PdGR0rFwarD02jTH3zdBnreLnXX92/Pe2qH+94395gzHeOHPmequ59etPf+5OXq/2uuvPvDU8NTVxNKI7eWX188fqN7S30Nin8R5Z/YefWPv736z+LESl/jlka4G5+jYbv31PzBeuXf1yrfqztV+ex//cAx7/dzcY48mv3zvcam7l+jdrWfzbSW0tDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANaUT0RZIWl/ppWixG7IuI/8fetHxpcuqp0UtvXjyXzUX0R1c6OlYuDUZEoTZOsvHRan95fOye8bMRsT8iPijsqY6LI5fK5/IuHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgCX7IqIvkrQYEWlELBTStFjMOysAAACg7frzTgAAAADYdNb/AAAAsPNZ/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALDJ9h+8eSuJiMrJPdWW6a7PdeWaGbDZ0rwTAHLTkXcCQG46804AyM19rvFdLsAOlKwz39typqftuQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwfR06cPNWEhGVk3uqLdNdn+tq+oqDW5gdsJnSvBMActOx1mTn1uUBbD1fcdi9mq/xgd0kWWe+d3mfyr9nejYtJwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC2n75qS9JiRKTVfpoWixH/iYj+6EpGx8qlwYj4b0R8X+jqycY9eScNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA201Oz4wPl8ulCR0dnXw7yfZIo9bJ+y8TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB5mJyeGR8ul0sTk3lnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAORtcnpmfLhcLk1soHP9fnZe0cm7RgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8vNPAAAA///5ZQ4Q") syz_mount_image$fuse(0x0, &(0x7f0000000580)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000007c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000680)='./file1\x00', 0x2) 2m0.73916126s ago: executing program 2 (id=10934): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000080)=0x4, 0x4) sendmmsg$inet(r0, &(0x7f0000002240)=[{{&(0x7f0000000180)={0x2, 0x4e22, @broadcast}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast2}}}], 0x20}}], 0x1, 0x4000880) 2m0.699252642s ago: executing program 2 (id=10936): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', 0xa02, 0xc1) sendfile(r0, r0, 0x0, 0x2) 2m0.698873382s ago: executing program 2 (id=10937): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) setresuid(0xee00, 0xee00, 0xee00) ioctl$PIO_SCRNMAP(r0, 0x4b52, 0x0) 2m0.656933543s ago: executing program 2 (id=10948): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file1\x00', 0x0, &(0x7f0000000200)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@usrjquota}, {@errors_remount}, {@dioread_lock}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@mblk_io_submit}, {@minixdf}, {@barrier_val}, {@nombcache}, {}]}, 0x45, 0x7b6, &(0x7f0000001140)="$eJzs3c9rG1ceAPDvyPLPZNdeWNjNngwLu4EQeZ31JruwsF72sBQaCLSnHpoYWTGpZStYcoiNaRNKoZdCW3prLzn356X02h+HXtr/oySkrROa0kNxGf2wZVtyrMSWkubzgYne07zRe995ozcvmrEUwBNrPP0nE3EsIl5PIkbrzycR0V9NZSOma+Xura/l0yWJjY1nvkuqZe6ur+WjaZvUkXrmjxHx+SsRJzK76y2vrM7PFIuFpXp+orJweaK8snry0sLMXGGusHh6cmrq1Jl/nDn9UOENN2d++Hr16K03/v/XD6Z/evkPH772RRLTcbS+rjmOgzIe4/V90p/uwm3+d9CV9czHL+6jUNMRkD3MxtChtGP66r1yLEajb6/+Ge5mywCAw/JSRGy009d2DQDwWEtq5///9LodAEC3ND4HuLu+lm8svf1Eortu/zcihobqudr1zVo6W79mN1S9DjpyN9l2ZSSJiLEDqH88It755Pn30iUO6TokQCvXrkfEhbHx3eN/suuehU79rfXTc82Z8R0rjX/QPZ+m859/tpr/ZTbnP9Fi/jPY4r37IO7//s/cPIBq2krnf/9uurftXlP8dWN99dxvqnO+/uTipWIhHdt+GxHHo38wzU/uUcfxOz/fabeuef73/ZsvvJvWnz5ulcjczA5u32Z2pjLzMDE3u3094k/ZVvGn4/9gtf+TNvPfc/X0wH3qeOpfr77dbl0afxpvY9kd/+HauBHxl5b9n2yWSfa8P3GiejhMNA6KFj6ajpF29Y9nt/o/XdL6G/8X6Ia0/0f2jn8sab5fs7zvl968W+yrG6OftSvUfPy3jr/18T+QPFtNN469qzOVytJkxEDy9O7nT21t28g3yqfxH/9z6/d/Y/xrcfw/l77+hX3uiOytb99/8PgPVxr/bEf933Eihu7N97Wrf3/9P7Vtm/2Mf/tt4IPuNwAAAAAAAAAAAAAAAAAAAAAAAADoRCYijkaSyW2mM5lcrvYb3r+PkUyxVK6cuFhaXpyN6m9lj0V/pvFVl6NN34c6Wf8+/Eb+1I783yPidxHx1uBwNZ/Ll4qzvQ4eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOqOtPn9/9Q3gzsK9/WihQDAoRhyYgeAJ02Szfa6CQBAtw11VHr40NoBAHRPZ+d/AODXwPkfAJ489zn/7/wzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOjUubNn02Xjx/W1fJqfvbKyPF+6cnK2UJ7PLSznc/nS0uXcXKk0Vyzk8qWFti90rfZQLJUuT8Xi8tWJSqFcmSivrJ5fKC0vVs5fWpiZK5wv9HctMgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADYv/LK6vxMsVhYkuhJYv7LWj88Ku2R6CwR12r996i05+ASMbA1Sgz3ZnACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeAz8EgAA//99gB7t") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 2m0.51007976s ago: executing program 2 (id=10940): r0 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r0, 0x0) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) 2m0.193222453s ago: executing program 2 (id=10946): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x1, 0x17d, &(0x7f00000004c0)="$eJzsmD9P6lAYxp/TciH35iY6u2giCTBY2qJGBgdmB038FzeJVIIWMdBB2PwUzn4CZ+JC4sfQQZ1ccHNyqGl7gAP+HdTE+PyG9zzv6dvTc94mT5OCEPJrub15uD5LJS90AP+RRELO3+mDGk2pb489Zi4ry+cn5v1Vu7OUH11PAPD9jz8/BqBT0OHJ3PeH707KcQ1aX69DQ0bqTQgYUm9Dw4bUDgS2pN5TdC2oN4zdiusYOzW3FAgzCFYQ7CDkRvfXPRYoKfsTyvVGs7VfdF2n/oXivf51CxoWlf2p76vXG1PpnwUNltQ5CKxKvYBErzdRS5TzT8QG6+vffH4KCoqfJgb+5J8KpBR/iin+kfWqh9lGszVTqRbLTtk5sO3cvDlrmnN2NjSiKL7hf39Df/qnrP/nldq4iOOo6Hl1K4r93I7iS44bD/1PQ3o6yoWcUwm/B+NiKhjSuswJIYQQQgghhBBCCCHk05mECP+CDpF/NmWvhNVPAQAA//94vnZt") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x0) read$FUSE(r0, &(0x7f00000020c0)={0x2020}, 0x2020) 2m0.193114363s ago: executing program 33 (id=10946): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x1, 0x17d, &(0x7f00000004c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x0) read$FUSE(r0, &(0x7f00000020c0)={0x2020}, 0x2020) 1m28.027355863s ago: executing program 5 (id=12127): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0xfff3}}}, 0x24}}, 0x0) 1m28.007958394s ago: executing program 5 (id=12128): connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000640)=""/4112, 0x1010}, {&(0x7f0000000300)=""/136, 0x88}], 0x5e, 0x4000, 0x0) 1m27.989400315s ago: executing program 5 (id=12129): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000180)=@base={0x16, 0x0, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0xffffffff}, 0x50) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB='\a'], 0x10) 1m27.970284305s ago: executing program 5 (id=12130): syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f0000000040)={[{@test_dummy_encryption}, {@grpquota}]}, 0x2, 0xbbf, &(0x7f0000000440)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000080)='./bus\x00', 0x10040d0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) 1m27.838196611s ago: executing program 5 (id=12135): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x8, 0x42, 0x40, 0xc2, 0x1}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000009c0)={{r0}, &(0x7f0000000940), &(0x7f0000000980)='%ps \x00'}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0xf93, r0}, 0x38) 1m27.137173701s ago: executing program 5 (id=12147): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000000)='./file1\x00', 0x1000801, &(0x7f0000002180)=ANY=[], 0xff, 0x23b, &(0x7f0000002540)="$eJzsmb9rFEEUx7+zu7d3hAS0sLE5i4ARzN7unkoaQW1FEBJRy8OsIbrJyd0VuYBosLHxD/APUSGVhZ2NWFhZxIBgoaWNgiPzy53s3q17d3a+TzF58+bNm/dm5t7ABgRB/Lccfvp+8OzKytpZAPNYRF3rv7iZjWPZf3zu1rT4ZtvBft4fA8B51vf+sr4P4PVlF3is3HL+g9vji9rnGs8CugEHZ7R8EwyBGeICJSZguK3V9yzZBI80YXe66frdzTQJRROJJhZNG+BH4v+2x7AOoKGXYFZ8/eHu/U4K9JSQJkaocbNOYSgveH/8pIk3wqZs/zwcHogTumhtgTivW0+f7Il+oPUhHLmXgggOIn0wbTCsav0K6giCoKm7SWTlf9LL/Lvq2Kz8KyQphcYkxrMLx5dLbUwSY2zMxZ85jF+8kjHn/NEknv2pjqCiYH7zFWcJ08nXcprFWX6mWciv3h2xCVMkyPpDHFPpKQ3Tp3xJJ/22OOvzv76i+7bmYd7Gn/3WZYIsXAAKQ+/n0vSarXl3VQsnjvg5NeZX4Jddkqx+Mg84rU0ZOPesV6E12HrQ6g93lze3OhvJRrIdx+0L4bkwPB+3ZG1WbUn9a8j6NGfVv5p6MnJ2YnEfO53BoBftAINe5Jt+/EK2VsVdfdn9Kuc5sv45WPrJuX5eajLt+uh45PtXV/OY7C25Y4MnCIIgCIIgCIIgCIIgCIIooflB/dWfrhfm0cQr6G+VzPxPrIgXX5cTfgcAAP//o2BSgg==") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x82400, 0x184) getdents(r0, 0x0, 0x40) 1m27.137061621s ago: executing program 34 (id=12147): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000000)='./file1\x00', 0x1000801, &(0x7f0000002180)=ANY=[], 0xff, 0x23b, &(0x7f0000002540)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x82400, 0x184) getdents(r0, 0x0, 0x40) 1.40377327s ago: executing program 1 (id=14731): timer_create(0x3, 0x0, &(0x7f0000000080)=0x0) timer_settime(r0, 0x1, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) syz_clone3(&(0x7f0000000680)={0x40004000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) timer_settime(r0, 0x1, &(0x7f0000000180), &(0x7f00000001c0)) 1.236128077s ago: executing program 7 (id=14734): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x2103) socket$nl_generic(0x10, 0x3, 0x10) 1.179977449s ago: executing program 1 (id=14735): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file2\x00', 0x1000052, &(0x7f0000000240)=ANY=[], 0xfd, 0x120c, &(0x7f0000004500)="$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") ptrace$setsig(0x4203, r0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x10}) 1.133586591s ago: executing program 6 (id=14736): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'ip6gretap0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="1546010000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r1, @ANYBLOB="080003"], 0x44}}, 0x40) 1.109101942s ago: executing program 6 (id=14737): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000280), 0x3, 0x4cd, &(0x7f0000002200)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) fdatasync(r0) 1.049249135s ago: executing program 1 (id=14738): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @loopback={0xff00000000000000}, 0x4}}, {{0xa, 0x4e00, 0xa3, @local, 0x4f1}}}, 0x108) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000088000000240000007f00000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0xca, r0}, 0x38) 1.020070006s ago: executing program 1 (id=14739): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x55}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe06, 0x1000000, &(0x7f0000000100)="b9ff030f6044238cb89e14f088ca1bff430500001100630377fbac141414e000000162079f4b4d2f87e56dca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000}, 0x2c) 902.424291ms ago: executing program 1 (id=14740): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="3800000055003d0902041000fedbdf2507000000", @ANYRES32=r2, @ANYBLOB="100001"], 0x38}}, 0x24048850) 840.353444ms ago: executing program 1 (id=14742): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x2, 0x0, 0x7b, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0xffffffff}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x0, 0xb}}}}}}}]}}, 0x0) ioctl$EVIOCRMFF(r0, 0xc0085508, &(0x7f0000000500)=0x18) 690.02836ms ago: executing program 6 (id=14745): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x1000000, &(0x7f0000000000), 0x1, 0x7b9, &(0x7f00000007c0)="$eJzs3d9rHNUeAPDvbJLmR3tvcuFy7+1b4EJvoHRzU2Or4EPFBxEsFPTZNmy2oWaTLdlNaULAFhF8EVR8EPSlz/6ob776A3zS/8IHaamaFis+SGR2Z5M02c2vJtloPh+YzDkzsznnO+fMzNmdYTeAQ2sw/ZOLOB4RbycR/dnyJCK6aqnOiHP17R4uLvRERCGJpaWXfkpq2zxYXCjEqtekjmaZ/0TEV29EnMytL7cyNz85VioVZ7L8cHXq6nBlbv7UlamxieJEcfrMyOjo6bNPnj2ze7H+8t38sbvvPP+/T8/99vq/b7/1dRLn4li2bnUcu2UwBrN90pXuwkc8t9uFtVnS7gqwI+mh2VE/yuN49EdHLdVC737WDADYK69FxBIAcMgkrv8AcMg0Pgd4sLhQaEzt/URif917NiJ66vE/zKb6ms7snl1P7T5o34PkkTsjSUQM7EL5gxHx4eevnOjI8mk93EsD9sONmxFxaWBw/fk/WffMwnb9f6OVS9212eCaxYft+gPt9EU6/nmq2fgvtzz+iSbjn+76sfuvxy1/8+M/d+dxy9hIOv57pv5s25rx3/JDawMdWe5vtTFfV3L5SqmYntv+HhFD0dWd5kdqmzYfuQ3d//1+q/Kz8d/H6fTzu69+lJafzle2yN3p7H70NeNj1c5vHjfwzL2b0Zcl18SfLLd/0mL8e2GLZbzw9JsftFqXxp/G25jWx7+3lm5FnGja/ittmWz4fOJwrTsMNzpFE599/35fq/JXt386peWn892PtLl7N6PWAZJkZR/U1yzHP5Csfl6zsv0yvr3V/2WrdZvH37T/jx1JXq6lj2TLro9VqzMjEUeSF9cvP73y2ka+sX0a/9B/mx//9WKb9//0PeGlLcbfeffHT3Ye/95K4x/fuP+vaf+ebPHKks0Stx9OdrQqf2vtP1pLDWVL0vbfLK6t1GtnvRkAAAAAAAAAAAAAAAAAAAAAAAAAti8XEcciyeWX07lcPl//De9/Rl+uVK5UT14uz06PR+23sgeiK9f4qsv+Vd+HOpJ9H34jf3pN/omI+EdEvNfdW8vnC+XSeLuDBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDM0Ra//5/6obvdtQMA9kxPuysAAOw7138AOHy2d/3v3bN6AAD7x/t/ADh8tnz9v7S39QAA9o/3/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOyxC+fPp9PSr4sLhTQ/fm1udrJ87dR4sTKZn5ot5Avlmav5iXJ5olTMF8pTLf/RjfqsVC5fHY3p2evD1WKlOlyZm784VZ6drl68MjU2UbxY7Nq3yAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABg6ypz85NjpVJx5i+RuLES2C7/5962xtV3MHbvqkRnHIhqHOhEdxyIauwwsfos0duGMxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAn8MfAQAA//94WBdi") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000000)='2', 0x1, 0xffff) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0xce, 0x100000002, 0x7, 0x20000000fff}) 449.254461ms ago: executing program 6 (id=14755): openat$random(0xffffffffffffff9c, &(0x7f00000003c0), 0x141203, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) write$P9_RGETLOCK(r0, &(0x7f0000000200)={0x1f, 0x37, 0x1, {0x2, 0x2, 0x79, 0x0, 0x1, '\xda'}}, 0x1f) 392.920093ms ago: executing program 0 (id=14758): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000000c0)={{0x0, 0x2}}) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000083c0)={{0x1}}) 379.666343ms ago: executing program 0 (id=14760): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSABS3F(r1, 0x401845ff, 0x0) 361.736835ms ago: executing program 3 (id=14761): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) syz_clone(0x21100, 0x0, 0x0, 0x0, 0x0, 0x0) 330.730346ms ago: executing program 7 (id=14762): mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cf84ded40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c86e00f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec231fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895012f1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c3405000000000000003871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d37261774cc5a3bf6b466cb72812da518ff602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d50a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a31b16ac5fb73fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953f88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a5fe1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9d66ebbc8bab4ea81232fbef665f6212f875b2a00000000000000aceb111b66a500ca52fd8f848088c67ee65dfdcc4c580e9bc18c1699dca07d019bf1bf9dd3da480d6c155d7e60674ce88ab5ae07a9d16e22792d99986b531ab4e592ab5925da779e700cf20309a2137877690dc5c07956fc82d7b3bb46d3138041af18508938c9be4e5d0a98073463a5cff6c146d020743da474cb81677a6f389f0e00c33b70b7f8bab95435c27167f365a29fb09cbf35bf192f6a65616fa2ad9a6c7ca3a3ecd96aaecd993e8badb40e7eb8a22b0015e70c885cd519e28448168c6d914265998bff74ea1b0e651a6cae9419096248a0e41573827ad60fafce6e6540734c1f23f75337d836c31497e8112969a039d65aa297e2b046b5f4d11116a89f9f65693d4dc3e70fbfe0b2044fdb3f87e887d1daae8e38a0c19f668f776e19a02bb2449ee4384f6536879c85d7e41bc0276ee2b125d41ff358323311703ec01d64a573bdeb75bdcc87d01de38365ab9222713d2d1640a742d62fefb5403b2ed9969c32a0841e8c36b0107bb888eb14ac62e6d4bdfaeb9ee7436b97bf3825a19d6c8997ce285edf1d277ed703f560460417bfe702af833e83c5b987befb6d1fcf765ab7ea537d9dafb622a1ba8686cb9b1c63b84470364942e90d1cf856cead864f5e38c83b9ed86cc5725a20299ce512b165"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000440)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000001480)='./file0\x00') 319.506166ms ago: executing program 0 (id=14763): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xe}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0xffffffffffffff1f, 0x2, {0x1, 0x1000}}}]}, 0x38}}, 0x0) 311.486837ms ago: executing program 6 (id=14764): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000c, 0x204031, 0xffffffffffffffff, 0xffffd000) syncfs(0xffffffffffffffff) 293.152487ms ago: executing program 3 (id=14765): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x8800) r0 = socket(0x11, 0xa, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0x7) sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000080)={0x0}, 0x8}, 0x0) 261.063369ms ago: executing program 3 (id=14766): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000440)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 260.335929ms ago: executing program 7 (id=14767): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) syslog(0x4, &(0x7f0000000000)=""/19, 0xb12288e90d7c8384) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100280000000000000002000000200001800d000100"], 0x34}}, 0x0) 242.8494ms ago: executing program 0 (id=14768): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x11, &(0x7f0000000040)={&(0x7f0000000280)={0x80, 0x0, 0x1, 0x401, 0x11, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x100e}, @CTA_SEQ_ADJ_REPLY={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x5}, @CTA_SEQADJ_OFFSET_BEFORE={0xe6ba7615268e7f7}]}]}, 0x80}}, 0x0) 242.30999ms ago: executing program 3 (id=14769): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) msync(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) 194.809091ms ago: executing program 3 (id=14770): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40801, 0x0) ioctl$FS_IOC_GETFLAGS(r1, 0x5437, 0x0) 170.313473ms ago: executing program 3 (id=14771): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1018e58, &(0x7f00000005c0)={[{@nodioread_nolock}, {@noblock_validity}, {@data_err_ignore}, {@grpid}, {@nodiscard}, {@stripe={'stripe', 0x3d, 0x4}}, {@noauto_da_alloc}]}, 0x6, 0x61f, &(0x7f0000000b00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) openat(r0, &(0x7f00000000c0)='.\x00', 0x515401, 0x408) 170.009783ms ago: executing program 7 (id=14772): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000340), 0x200000, 0x0) splice(r0, 0x0, r1, 0x0, 0x7770, 0x2) 151.182663ms ago: executing program 7 (id=14773): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) poll(&(0x7f0000000040)=[{r0, 0x4}, {r1, 0xb41729f6a82e3982}], 0x2, 0x1) readv(r1, &(0x7f0000000000)=[{&(0x7f0000000100)=""/145, 0x91}], 0x1) 146.113224ms ago: executing program 0 (id=14774): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00'}, 0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000880)={@cgroup=r0, 0x1d, 0x1, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 123.153765ms ago: executing program 7 (id=14775): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x200008, &(0x7f0000000340)={[{@grpquota}, {@nombcache}, {@init_itable_val={'init_itable', 0x3d, 0x5}}, {@oldalloc}]}, 0x1, 0x504, &(0x7f0000001000)="$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") capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) creat(&(0x7f00000000c0)='./bus\x00', 0x182) mkdir(&(0x7f0000000100)='./bus\x00', 0x262) 111.829765ms ago: executing program 0 (id=14776): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@jqfmt_vfsv1}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) fallocate(r0, 0x1, 0x8, 0x2007ffc) write$UHID_INPUT(r0, &(0x7f0000000fc0)={0x8, {"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", 0x1000}}, 0x1006) 0s ago: executing program 6 (id=14777): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000000100)={[{@nodiscard}, {@nocheckpoint_merge}, {@discard_unit_block}, {@six_active_logs}, {@flush_merge}, {@fault_injection={'fault_injection', 0x3d, 0x1f}}, {@discard}, {@noacl}, {@fsync_mode_posix}, {@alloc_mode_def}, {@discard_unit_block}, {@two_active_logs}, {@fault_type={'fault_type', 0x3d, 0xfdffff}}]}, 0x1, 0x5517, &(0x7f0000005880)="$eJzs3E1rY9UbAPAn7XTe//Mv4sLdXBiEFiZh0nlBd6PO4At2KKMuXGmapCEzSW5p0rR25cKluPCbiIIrl34GF67diQvFnaDknlud+gJC08ZOfz+4ee45OXnuc8Iw8NxbEsCptZj9/GMlrsSFiJiPiMsRxXmlPAp3U3guIq5GxNwTR6Wc/33ibERcjIgrk+QpZ6V869Pr42u3f3jjp6++OXfm0mdffju7XQOz9nxE9DfT+U4/xbyT4qNyvjHuFrF/a1zG9Eb/cTnOU9xprxcZdhr76xpFvNlJ6/PN7eEkbvQazUnsdDeK+c1BuuBw3NnPU3zgUWOrGLfa60XsDvMidvZSXbt76f+2veEo5WmV+T4o0sdotB/TfHu3nfaz+biIzcGonE9581Z7dxLHZSwvF8281yrqWD/MN/3f9mZ3sL2bjdtbw24+yG7X6i/U6neq9a281R61b1Ub/dadW9lSpzdZVh21G/27nTzv9Nq1Zt5fzpY6zWa1Xs+W7rXXu41BVq/XbtZuVG8vl2fXs1cfvJP1WtnSJL7cHWyPur1htpFvZekTy9lK7eaLy9m1evbW6lq29vD+/dW1t9+79+6Dl1Zff6Vc9JeysqWVGysr1fqN6kp9+RTt/6Oy6CnuHw6lMusCAE4e/T8wC0fX/289jDj6/j/0/1Nxovrf097/H8H+4VD0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp9Z3C5+/VpwspvGlcv5/5dQz5bgSEXMR8evfmI+zB3LOl3kW/mH9wp9q+LoSRYbJNc6Vx8WIuFsev/z/qL8FAAAAeHp98eHVT1K3nl4WZ10QxyndtJm7/P6U8lUiYmHx+yllm5u8PDulZMW/7zOxO6VsxQ2s81NKlm65nZlWtn9l/kA4/0SopDB3rOUAAADH4mAncLxdCAAAAMfp41kXwGxUYv9R5v6z4OIv7/94IHjhwAgAAAA4gSqzLgAAAAA4ckX/7/f/AAAA4OmWfv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfmPnfm4TB6I4AD8bvLD/tGi1921lb1DGlrDHPUYUkCYoIAfSQhqgBnJLCRFEeBwCEYdIHttK9H2SMxnL/HiD4DAz0gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF26r9aL26vf121zdvt28owGAAAAuGRbrRf1P7PU/9rc/97c+tn0i4goI+LS3H0Un84yR01O9fL8zenz1asa7iLqhMN7TJrrS0T8aa7HH11/CgAAAPBxbZareZqtpz+zoQuiT2nRpvz2N1NeERHV7CFTWnnI+5UprP5+j+N/prR6AWuaKSwtuY1zpb1J/XM/rtpNT5oiNeXFlx2LzDZ2AACgR6Ozpt9ZCAAAAH36N3QBDKOI563M41bgJDXN9t7nsx4AAADwDhVDFwAAAAB0rp7/93T+3975fwAAADCMdP4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXdpW68VmuZq3zdnt28kzGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhif95RIATCIAz2ru9M5v6HlQZNTU2qQPj4G4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIv9eTuhEAiCKNj3qf7JRmzo0uDGIEIVCIcZRlgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Ile15f3jE9jT/LttPHreCT5d9VYumqsPWhsPRjzr8eNLwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4GTnXl7rqMIAgH9zX32oNEbJIuIDXOjGpre1tTtxoQQX/glCSG/b2FsfbRa2BDEbd5J1N6JLEUGJu/4PXbfQTd11kUUF18qZRzJJK14fnblNfj84c74ZhjnfmYGQb84kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQLL1zk7cTZuZIu6Ux24/WFtO/Z09fXJz4+58ainOmkz6yfBifSebay8RAAAADo5uVd9HxL3+5mLqOzN5/d+vzkk1/7fPFHFVz++t+6u+qv1T++Xn+89vDzRTjJMuen5lPDrxcCq9xzfL6Xbsb8/o5Xc+f/fSzR9I5/3157b6+f3Mvr51691BHh5qIlsA4N84XvVlUP0+lPphm4kBsJ/19u5UB6r6vzvTSl4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAjdpaj6eqOIuI+d5OnNx5sLZc9IeX6/s3N+7OV+3MjRsb8eXONdMl+hFxfmU8OtHobKbb1WvXLy2Nx6MrzQcvR0Rbo79dTv/ShxOcHNHK/RH8T0GnfNjTks+TEbT4QwkAgH2pX7YsXroYsbmYjmWzEX98t7v+f60Wx676f+0v6//7F8/cro9Vr/+Hjc1w+i2sXv504eq162+sXF66MLow+vjNk8O3hqfOnj59diF/V7LgjQkAAAD/zaBsqa6/1y/q/87sw+v/R2txTFj/f/bN8Iv6WF31/yPtLPq1nQkAAMDB9uwrv/+WPeJ4NhjE50urq1eGxXZ7/2SxbSHVf+xQ2er1f3e27awAAACAJmytZ7vW/8/V4phw/f/p71/4MSKOVdfpRsSRcv3/+PIn43PNTmlqNfHnxG3PEQAAgHYdKVt9/b+ff//f2f7koRMRr79axOW/AZyo/u++99UP9bHq3/+fam6KU6kzV9yPvJ+L6M21nREAAAD72eGypWL/1/7m4kc/Hf1g4Pt/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgKb9GQAA//9wNz5R") mkdir(&(0x7f0000000340)='./file0\x00', 0xfdd8f72d65b76641) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000080)={0x0, 0x2, 0xffe, 0x4000006}) kernel console output (not intermixed with test programs): idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 407.744415][ T293] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.754288][ T293] usb 7-1: Product: syz [ 407.759798][ T293] usb 7-1: Manufacturer: syz [ 407.765799][ T293] usb 7-1: SerialNumber: syz [ 407.795038][T26797] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 408.487903][T26870] loop3: detected capacity change from 0 to 40427 [ 408.544825][T26870] F2FS-fs (loop3): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 408.554994][T26870] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 408.566053][T26870] F2FS-fs (loop3): fault_injection options not supported [ 408.574447][T26870] F2FS-fs (loop3): old and new quota format mixing [ 409.135653][ T30] audit: type=1326 audit(2000000101.639:19736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26897 comm="syz.3.12677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb027ad6749 code=0x7ffc0000 [ 409.164643][ T30] audit: type=1326 audit(2000000101.639:19737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26897 comm="syz.3.12677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb027ad6749 code=0x7ffc0000 [ 409.194296][ T30] audit: type=1326 audit(2000000101.648:19738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26897 comm="syz.3.12677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7fb027ad6749 code=0x7ffc0000 [ 409.221050][ T30] audit: type=1326 audit(2000000101.648:19739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26897 comm="syz.3.12677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb027ad6749 code=0x7ffc0000 [ 409.249123][ T30] audit: type=1326 audit(2000000101.648:19740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26897 comm="syz.3.12677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb027ad6749 code=0x7ffc0000 [ 409.375136][ T30] audit: type=1400 audit(2000000101.863:19741): avc: denied { listen } for pid=26909 comm="syz.3.12683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 409.398248][ T30] audit: type=1400 audit(2000000101.863:19742): avc: denied { accept } for pid=26909 comm="syz.3.12683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 409.641528][T26923] loop3: detected capacity change from 0 to 512 [ 409.681280][T26923] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 409.696340][T26923] EXT4-fs (loop3): 1 truncate cleaned up [ 409.704331][T26923] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,debug_want_extra_isize=0x0000000000000068,barrier,jqfmt=vfsold,quota,. Quota mode: writeback. [ 409.776977][ T30] audit: type=1326 audit(2000000102.237:19743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26930 comm="syz.0.12693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5a36a3749 code=0x7ffc0000 [ 409.804649][ T30] audit: type=1326 audit(2000000102.237:19744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26930 comm="syz.0.12693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5a36a3749 code=0x7ffc0000 [ 409.831939][ T30] audit: type=1326 audit(2000000102.237:19745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26930 comm="syz.0.12693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd5a36a3749 code=0x7ffc0000 [ 409.964422][T26950] incfs: Options parsing error. -22 [ 409.971008][T26950] incfs: mount failed -22 [ 409.984240][ T576] usb 7-1: USB disconnect, device number 4 [ 410.259148][T26963] loop3: detected capacity change from 0 to 40427 [ 410.318719][T26963] F2FS-fs (loop3): Small segment_count (9 < 1 * 24) [ 410.326311][T26963] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 410.338320][T26963] F2FS-fs (loop3): Found nat_bits in checkpoint [ 410.371840][T26963] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 410.381655][T26963] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 410.405754][ T283] attempt to access beyond end of device [ 410.405754][ T283] loop3: rw=2049, want=45104, limit=40427 [ 410.606586][ T576] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 410.848009][T26994] loop1: detected capacity change from 0 to 2048 [ 410.895991][T26994] EXT4-fs (loop1): Ignoring removed nobh option [ 410.937079][T26994] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobh,,errors=continue. Quota mode: none. [ 410.952619][T26994] ext4 filesystem being mounted at /2751/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 411.004641][T27015] loop3: detected capacity change from 0 to 256 [ 411.012888][ T576] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 411.026696][ T576] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 411.040070][ T576] usb 7-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 411.054329][ T576] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.065154][ T576] usb 7-1: config 0 descriptor?? [ 411.070597][T27016] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.12721: bg 0: block 345: padding at end of block bitmap is not set [ 411.088926][T27015] FAT-fs (loop3): Directory bread(block 64) failed [ 411.103244][T27015] FAT-fs (loop3): Directory bread(block 65) failed [ 411.114140][T27015] FAT-fs (loop3): Directory bread(block 66) failed [ 411.122658][T27015] FAT-fs (loop3): Directory bread(block 67) failed [ 411.131188][T27015] FAT-fs (loop3): Directory bread(block 68) failed [ 411.152495][T27016] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 895 with error 117 [ 411.155153][T27015] FAT-fs (loop3): Directory bread(block 69) failed [ 411.172323][T27016] EXT4-fs (loop1): This should not happen!! Data will be lost [ 411.172323][T27016] [ 411.188987][T27015] FAT-fs (loop3): Directory bread(block 70) failed [ 411.210083][ T199] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 911 with max blocks 1 with error 28 [ 411.213621][T27015] FAT-fs (loop3): Directory bread(block 71) failed [ 411.250679][T27015] FAT-fs (loop3): Directory bread(block 72) failed [ 411.266667][ T199] EXT4-fs (loop1): This should not happen!! Data will be lost [ 411.266667][ T199] [ 411.282235][T27015] FAT-fs (loop3): Directory bread(block 73) failed [ 411.292026][ T199] EXT4-fs (loop1): Total free blocks count 0 [ 411.300513][ T199] EXT4-fs (loop1): Free/Dirty block details [ 411.326379][ T199] EXT4-fs (loop1): free_blocks=0 [ 411.338265][ T199] EXT4-fs (loop1): dirty_blocks=16 [ 411.352309][ T199] EXT4-fs (loop1): Block reservation details [ 411.371226][ T199] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 411.450509][T27044] tipc: New replicast peer: 255.255.255.255 [ 411.469230][T27044] tipc: Enabled bearer , priority 10 [ 411.531355][T27060] loop3: detected capacity change from 0 to 512 [ 411.570035][ T576] steelseries_srws1 0003:1038:1410.002A: not enough fields in HID_OUTPUT_REPORT 0 [ 411.670756][T27060] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.12750: casefold flag without casefold feature [ 411.686582][T27060] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.12750: couldn't read orphan inode 15 (err -117) [ 411.709911][T27060] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 411.791703][ T293] usb 7-1: USB disconnect, device number 5 [ 412.077631][T27077] loop3: detected capacity change from 0 to 256 [ 412.104151][T27077] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 412.154689][T27077] exFAT-fs (loop3): hint_cluster is invalid (17) [ 412.178589][T27077] exFAT-fs (loop3): error, invalid access to FAT (entry 0xffffffff) [ 412.187221][T27077] exFAT-fs (loop3): Filesystem has been set read-only [ 413.643125][T27133] netlink: 1 bytes leftover after parsing attributes in process `syz.3.12780'. [ 413.824491][ T470] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 413.886455][T27157] veth1_to_bridge: renamed from veth0_vlan [ 414.056791][T27164] loop1: detected capacity change from 0 to 40427 [ 414.093080][T27164] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 414.101432][T27164] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 414.112992][T27164] F2FS-fs (loop1): invalid crc value [ 414.120215][T27164] F2FS-fs (loop1): Found nat_bits in checkpoint [ 414.152926][T27164] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 414.160343][T27164] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 414.220183][ T470] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 414.240637][ T470] usb 7-1: New USB device found, idVendor=0925, idProduct=8866, bcdDevice= 0.00 [ 414.262873][ T470] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.275515][ T470] usb 7-1: config 0 descriptor?? [ 414.407907][T27189] loop7: detected capacity change from 0 to 1024 [ 414.456153][T27189] EXT4-fs (loop7): Ignoring removed nobh option [ 414.462823][T27189] EXT4-fs (loop7): Ignoring removed bh option [ 414.480916][T27189] EXT4-fs (loop7): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 414.510641][T27189] EXT4-fs (loop7): mounted filesystem without journal. Opts: delalloc,errors=remount-ro,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004005b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,. Quota mode: writeback. [ 414.541348][T27189] EXT4-fs (loop7): shut down requested (2) [ 414.548022][T27189] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop7 ino=12 [ 414.558039][T27189] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop7 ino=12 [ 414.559619][ T30] kauditd_printk_skb: 39 callbacks suppressed [ 414.559640][ T30] audit: type=1400 audit(2000000106.709:19785): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 414.597858][ T30] audit: type=1400 audit(2000000106.709:19786): avc: denied { search } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 414.620847][ T30] audit: type=1400 audit(2000000106.709:19787): avc: denied { write } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 414.644428][ T30] audit: type=1400 audit(2000000106.709:19788): avc: denied { add_name } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 414.665908][ T30] audit: type=1400 audit(2000000106.709:19789): avc: denied { create } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 414.668424][T27201] loop1: detected capacity change from 0 to 4096 [ 414.687732][ T30] audit: type=1400 audit(2000000106.709:19790): avc: denied { append open } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 414.719713][ T30] audit: type=1400 audit(2000000106.709:19791): avc: denied { getattr } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 414.749693][ T30] audit: type=1400 audit(2000000106.727:19792): avc: denied { rmdir } for pid=27188 comm="syz.7.12804" name="file0" dev="loop7" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 414.751332][T27201] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 414.787741][ T470] smartjoyplus 0003:0925:8866.002B: item fetching failed at offset 3/7 [ 414.807855][ T470] smartjoyplus 0003:0925:8866.002B: parse failed [ 414.821464][ T470] smartjoyplus: probe of 0003:0925:8866.002B failed with error -22 [ 415.009225][ T470] usb 7-1: USB disconnect, device number 6 [ 415.189644][T27257] loop7: detected capacity change from 0 to 1024 [ 415.249134][T27257] EXT4-fs (loop7): Ignoring removed nomblk_io_submit option [ 415.298610][T27257] EXT4-fs (loop7): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x0000000000000009,commit=0x0000000000000005,debug_want_extra_isize=0x0000000000000080,jqfmt=vfsv0,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue. Quota mode: none. [ 415.315441][T27277] loop1: detected capacity change from 0 to 256 [ 415.643406][ T30] audit: type=1400 audit(2000000107.728:19793): avc: denied { unlink } for pid=27291 comm="syz.1.12846" name="#5" dev="tmpfs" ino=14167 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 415.668348][T27292] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 415.706135][T27292] overlayfs: overlapping lowerdir path [ 415.792332][T27301] option changes via remount are deprecated (pid=27298 comm=syz.7.12850) [ 415.843879][ T30] audit: type=1326 audit(2000000107.906:19794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27304 comm="syz.7.12852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bd494f749 code=0x7ffc0000 [ 415.941890][T27288] loop6: detected capacity change from 0 to 40427 [ 415.961132][T27288] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 415.973429][T27288] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 415.993544][T27288] F2FS-fs (loop6): invalid crc value [ 416.027738][T27288] F2FS-fs (loop6): Found nat_bits in checkpoint [ 416.123068][T27288] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 416.130730][T27288] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 416.509428][T27346] loop3: detected capacity change from 0 to 1024 [ 416.545710][T27346] EXT4-fs (loop3): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none. [ 416.566928][T27346] ext4 filesystem being mounted at /2689/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 416.608919][T27346] EXT4-fs error (device loop3): ext4_free_blocks:6218: comm syz.3.12871: Freeing blocks not in datazone - block = 0, count = 16 [ 416.631599][ T8] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm kworker/u4:0: bg 0: block 112: padding at end of block bitmap is not set [ 416.648385][ T8] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 416.661606][ T8] EXT4-fs (loop3): This should not happen!! Data will be lost [ 416.661606][ T8] [ 416.672206][ T8] EXT4-fs (loop3): Total free blocks count 0 [ 416.679101][ T8] EXT4-fs (loop3): Free/Dirty block details [ 416.685782][ T8] EXT4-fs (loop3): free_blocks=16 [ 416.690941][ T8] EXT4-fs (loop3): dirty_blocks=16 [ 416.696351][ T8] EXT4-fs (loop3): Block reservation details [ 416.702960][ T8] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 416.793757][T27359] sch_tbf: peakrate 263 is lower than or equals to rate 62733 ! [ 416.817517][T27363] netlink: 36 bytes leftover after parsing attributes in process `syz.6.12878'. [ 417.201223][T27404] loop1: detected capacity change from 0 to 1024 [ 417.266283][T27404] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none. [ 417.283962][T27404] ext4 filesystem being mounted at /2794/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 417.314661][T27404] EXT4-fs error (device loop1): ext4_map_blocks:740: inode #15: block 4: comm syz.1.12897: lblock 4 mapped to illegal pblock 4 (length 1) [ 417.333296][T27404] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 1 with error 117 [ 417.348714][T27404] EXT4-fs (loop1): This should not happen!! Data will be lost [ 417.348714][T27404] [ 417.368320][T27404] EXT4-fs error (device loop1): ext4_map_blocks:630: inode #15: block 4: comm syz.1.12897: lblock 4 mapped to illegal pblock 4 (length 1) [ 417.385459][T27404] EXT4-fs error (device loop1): ext4_map_blocks:630: inode #15: block 4: comm syz.1.12897: lblock 4 mapped to illegal pblock 4 (length 1) [ 417.494580][T27440] SELinux: security_context_str_to_sid(Eá…) failed for (dev ?, type ?) errno=-22 [ 417.545257][T27442] syzkaller1: tun_chr_ioctl cmd 1074025672 [ 417.552125][T27442] syzkaller1: ignored: set checksum enabled [ 417.995934][T27461] loop7: detected capacity change from 0 to 1024 [ 418.066426][T27461] EXT4-fs (loop7): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none. [ 418.143797][T27461] ext4 filesystem being mounted at /149/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 418.163527][T27461] EXT4-fs error (device loop7): ext4_map_blocks:740: inode #15: block 4: comm syz.7.12922: lblock 4 mapped to illegal pblock 4 (length 1) [ 418.189319][T27461] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 1 with error 117 [ 418.206313][T27461] EXT4-fs (loop7): This should not happen!! Data will be lost [ 418.206313][T27461] [ 418.220252][T27477] EXT4-fs error (device loop7): ext4_map_blocks:630: inode #15: block 4: comm syz.7.12922: lblock 4 mapped to illegal pblock 4 (length 1) [ 418.271952][T27477] EXT4-fs error (device loop7): ext4_map_blocks:630: inode #15: block 4: comm syz.7.12922: lblock 4 mapped to illegal pblock 4 (length 1) [ 418.392166][T27505] device veth0 entered promiscuous mode [ 418.424769][T27504] device veth0 left promiscuous mode [ 418.618487][T27537] loop7: detected capacity change from 0 to 256 [ 418.695498][T27537] exfat: Deprecated parameter 'utf8' [ 418.710802][T27537] exfat: Deprecated parameter 'namecase' [ 418.717405][T27537] exfat: Deprecated parameter 'utf8' [ 418.745805][T27515] loop1: detected capacity change from 0 to 40427 [ 418.766585][T27537] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 418.779644][ T20] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 418.793821][T27515] F2FS-fs (loop1): invalid crc value [ 418.814386][T27537] exFAT-fs (loop7): error, tried to truncate zeroed cluster. [ 418.824162][T27515] F2FS-fs (loop1): Found nat_bits in checkpoint [ 418.833691][T27537] exFAT-fs (loop7): hint_cluster is invalid (1) [ 418.856195][T27537] exFAT-fs (loop7): error, invalid access to exfat cache (entry 0x00000000) [ 418.877887][T27537] exFAT-fs (loop7): error, failed to bmap (inode : ffff888128fe00d0 iblock : 9, err : -5) [ 418.893945][T27537] exFAT-fs (loop7): error, tried to truncate zeroed cluster. [ 418.911048][T27537] exFAT-fs (loop7): error, tried to truncate zeroed cluster. [ 418.919860][T27515] F2FS-fs (loop1): Start checkpoint disabled! [ 418.933911][T27515] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 418.996318][T23246] attempt to access beyond end of device [ 418.996318][T23246] loop7: rw=1, want=34359738496, limit=256 [ 419.021440][T27515] attempt to access beyond end of device [ 419.021440][T27515] loop1: rw=2049, want=45104, limit=40427 [ 419.052146][ T20] usb 7-1: Using ep0 maxpacket: 16 [ 419.088126][ T8] attempt to access beyond end of device [ 419.088126][ T8] loop1: rw=2049, want=40968, limit=40427 [ 419.102262][ T8] attempt to access beyond end of device [ 419.102262][ T8] loop1: rw=2049, want=41000, limit=40427 [ 419.201945][ T20] usb 7-1: config 0 has no interfaces? [ 419.287649][ T20] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 419.311475][ T20] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 419.324724][ T20] usb 7-1: Manufacturer: syz [ 419.335793][ T20] usb 7-1: config 0 descriptor?? [ 419.369127][T27590] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.428598][T27594] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12981'. [ 419.567901][T27614] bridge0: port 2(bridge_slave_1) entered learning state [ 419.592746][T27614] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.657082][ T20] usb 7-1: USB disconnect, device number 7 [ 419.683287][T27625] loop7: detected capacity change from 0 to 512 [ 419.748258][T27625] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 419.762311][T27625] EXT4-fs (loop7): 1 truncate cleaned up [ 419.778078][T27625] EXT4-fs (loop7): mounted filesystem without journal. Opts: barrier=0x0000000000000101,errors=remount-ro,. Quota mode: none. [ 420.101286][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 420.101304][ T30] audit: type=1326 audit(2000000367.897:19812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27663 comm="syz.7.13012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bd494f749 code=0x7ffc0000 [ 420.155148][ T30] audit: type=1326 audit(2000000367.925:19813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27663 comm="syz.7.13012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bd494f749 code=0x7ffc0000 [ 420.182581][ T30] audit: type=1326 audit(2000000367.925:19814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27663 comm="syz.7.13012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7f6bd494f749 code=0x7ffc0000 [ 420.184299][T27657] tipc: Resetting bearer [ 420.241300][ T30] audit: type=1326 audit(2000000367.925:19815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27663 comm="syz.7.13012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bd494f749 code=0x7ffc0000 [ 420.274165][ T30] audit: type=1326 audit(2000000367.925:19816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27663 comm="syz.7.13012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bd494f749 code=0x7ffc0000 [ 420.326460][T27657] veth1_to_bridge: renamed from veth0_vlan [ 420.340790][T27666] netlink: 48 bytes leftover after parsing attributes in process `syz.7.13013'. [ 420.418646][ T30] audit: type=1400 audit(2000000368.187:19817): avc: denied { ioctl } for pid=27675 comm="syz.7.13018" path="uts:[4026532558]" dev="nsfs" ino=4026532558 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 420.593956][ T30] audit: type=1326 audit(2000000368.355:19818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27693 comm="syz.0.13028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5a36a3749 code=0x7ffc0000 [ 420.680791][ T30] audit: type=1326 audit(2000000368.355:19819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27693 comm="syz.0.13028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5a36a3749 code=0x7ffc0000 [ 420.780466][T27712] netlink: 'syz.7.13035': attribute type 1 has an invalid length. [ 420.794761][ T30] audit: type=1326 audit(2000000368.383:19820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27693 comm="syz.0.13028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=107 compat=0 ip=0x7fd5a36a3749 code=0x7ffc0000 [ 420.922074][ T30] audit: type=1326 audit(2000000368.383:19821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27693 comm="syz.0.13028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5a36a3749 code=0x7ffc0000 [ 421.085737][T27732] xt_hashlimit: size too large, truncated to 1048576 [ 421.306103][T27740] loop1: detected capacity change from 0 to 40427 [ 421.397432][T27740] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x1f52010) [ 421.406168][T27740] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 421.414538][T27740] F2FS-fs (loop1): Unrecognized mount option "fault_injection=-0000000000000001262" or missing value [ 421.536533][T12621] tipc: Disabling bearer [ 421.697930][T27762] pimreg1: tun_chr_ioctl cmd 1074025677 [ 421.719922][T27762] pimreg1: linktype set to 825 [ 422.028437][T27784] serio: Serial port ptm0 [ 422.186878][T27794] incfs: Options parsing error. -22 [ 422.205096][T27794] incfs: mount failed -22 [ 422.248717][T27801] netlink: 8 bytes leftover after parsing attributes in process `syz.7.13074'. [ 422.485966][T27832] netlink: 71 bytes leftover after parsing attributes in process `syz.0.13088'. [ 422.592822][T27840] syz.0.13091[27840] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 422.592916][T27840] syz.0.13091[27840] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 422.829385][T27862] loop6: detected capacity change from 0 to 256 [ 422.865524][T27862] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 422.885249][T27862] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 423.012787][T27869] loop6: detected capacity change from 0 to 1024 [ 423.084273][T27869] EXT4-fs (loop6): Ignoring removed nomblk_io_submit option [ 423.100005][T27869] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 423.139485][T27869] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 423.155024][T27869] System zones: 0-1, 3-36 [ 423.171352][T27869] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 423.424987][T27842] loop7: detected capacity change from 0 to 131072 [ 423.451630][T27900] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 423.458868][T27901] 8021q: VLANs not supported on gre0 [ 423.494500][T27842] F2FS-fs (loop7): invalid crc value [ 423.519258][T27842] F2FS-fs (loop7): Found nat_bits in checkpoint [ 423.600219][T27842] F2FS-fs (loop7): Cannot turn on quotas: -2 on 2 [ 423.619398][T27842] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4 [ 423.671512][T27895] loop3: detected capacity change from 0 to 40427 [ 423.770080][T27895] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 423.789853][T27895] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 423.822499][T27895] F2FS-fs (loop3): invalid crc value [ 423.861698][T27895] F2FS-fs (loop3): Found nat_bits in checkpoint [ 423.962569][T27895] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 423.973084][T27895] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 424.406280][T27933] loop3: detected capacity change from 0 to 256 [ 424.446806][T27903] loop6: detected capacity change from 0 to 131072 [ 424.552408][T27940] loop1: detected capacity change from 0 to 256 [ 424.566876][T27903] F2FS-fs (loop6): Found nat_bits in checkpoint [ 424.620658][T27940] exfat: Unknown parameter '18446744073709551615ÿÿÿÿ' [ 424.692221][T27903] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 424.719259][T27955] x_tables: duplicate underflow at hook 4 [ 424.747194][T27940] netlink: 32 bytes leftover after parsing attributes in process `syz.1.13134'. [ 424.771680][T27940] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 425.372708][T28013] loop7: detected capacity change from 0 to 512 [ 425.383248][T28011] loop3: detected capacity change from 0 to 128 [ 425.446339][T28013] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 425.467308][T28019] loop6: detected capacity change from 0 to 512 [ 425.469829][T28018] IPv6: NLM_F_REPLACE set, but no existing node found! [ 425.506352][T28011] EXT4-fs (loop3): mounted filesystem without journal. Opts: resgid=0x0000000000000000,max_batch_time=0x0000000000000001,,errors=continue. Quota mode: none. [ 425.523492][T28013] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 425.539362][T28011] ext4 filesystem being mounted at /2770/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 425.554914][T28013] EXT4-fs (loop7): 1 truncate cleaned up [ 425.561955][T28013] EXT4-fs (loop7): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006e,user_xattr,lazytime,quota,,errors=continue. Quota mode: writeback. [ 425.588127][T28019] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 425.605837][T28019] ext4 filesystem being mounted at /345/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 425.625780][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 425.625798][ T30] audit: type=1400 audit(2000000373.060:19846): avc: denied { append } for pid=28012 comm="syz.7.13166" name="file1" dev="loop7" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 425.679549][T28032] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 425.686998][ T30] audit: type=1400 audit(2000000373.060:19847): avc: denied { map } for pid=28012 comm="syz.7.13166" path="/199/file2/file1" dev="loop7" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 425.714530][T28019] EXT4-fs (loop6): changing journal_checksum during remount not supported; ignoring [ 425.739571][T28019] EXT4-fs (loop6): re-mounted. Opts: max_dir_size_kb=0x0000000000000019,journal_ioprio=0x0000000000000001,user_xattr,grpjquota=,data_err=ignore,noblock_validity,minixdf,journal_checksum,. Quota mode: writeback. [ 425.750124][ T30] audit: type=1400 audit(2000000373.060:19848): avc: denied { execute } for pid=28012 comm="syz.7.13166" path="/199/file2/file1" dev="loop7" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 425.786441][T28038] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13170'. [ 425.889173][ T30] audit: type=1326 audit(2000000373.313:19849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28049 comm="syz.3.13181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb027ad6749 code=0x7ffc0000 [ 425.933703][ T30] audit: type=1326 audit(2000000373.313:19850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28049 comm="syz.3.13181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7fb027ad6749 code=0x7ffc0000 [ 425.958216][ T30] audit: type=1326 audit(2000000373.313:19851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28049 comm="syz.3.13181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb027ad6749 code=0x7ffc0000 [ 425.986769][ T30] audit: type=1326 audit(2000000373.359:19852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28049 comm="syz.3.13181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb027ad6749 code=0x7ffc0000 [ 426.014858][T28058] netlink: 16 bytes leftover after parsing attributes in process `syz.7.13183'. [ 426.016338][T28054] loop6: detected capacity change from 0 to 256 [ 426.057697][T28054] FAT-fs (loop6): bogus number of FAT sectors [ 426.065879][T28054] FAT-fs (loop6): Can't find a valid FAT filesystem [ 426.223954][T28084] netlink: 'syz.7.13196': attribute type 1 has an invalid length. [ 426.272168][T28090] netlink: 20 bytes leftover after parsing attributes in process `syz.7.13199'. [ 426.289334][T28090] netlink: 'syz.7.13199': attribute type 3 has an invalid length. [ 426.299563][T28090] netlink: 20 bytes leftover after parsing attributes in process `syz.7.13199'. [ 426.310366][T28090] netlink: 'syz.7.13199': attribute type 3 has an invalid length. [ 426.577859][ T30] audit: type=1400 audit(2000000373.949:19853): avc: denied { listen } for pid=28112 comm="syz.6.13209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 426.916630][T28121] loop7: detected capacity change from 0 to 2048 [ 427.048227][T28121] EXT4-fs (loop7): mounted filesystem without journal. Opts: dioread_lock,journal_dev=0x0000000000000002,quota,norecovery,auto_da_alloc,noquota,grpquota,barrier=0x0000000000000000,grpjquota=,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 427.184733][T28128] syz.3.13213[28128] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 427.184824][T28128] syz.3.13213[28128] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 427.485398][T28154] syz.6.13225[28154] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 427.502965][T28154] syz.6.13225[28154] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 427.551658][ T30] audit: type=1326 audit(2000000374.865:19854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28159 comm="syz.6.13227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd4346749 code=0x7ffc0000 [ 427.612401][ T30] audit: type=1326 audit(2000000374.912:19855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28159 comm="syz.6.13227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7fccd4346749 code=0x7ffc0000 [ 427.647890][ T337] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 427.692907][T28167] loop6: detected capacity change from 0 to 512 [ 427.770571][T28167] EXT4-fs error (device loop6): ext4_orphan_get:1401: inode #15: comm syz.6.13231: casefold flag without casefold feature [ 427.805660][T28167] EXT4-fs error (device loop6): ext4_orphan_get:1406: comm syz.6.13231: couldn't read orphan inode 15 (err -117) [ 427.836455][T28167] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 427.914714][ T337] usb 2-1: Using ep0 maxpacket: 16 [ 428.043070][ T337] usb 2-1: config 166 has an invalid interface number: 177 but max is 1 [ 428.069100][ T337] usb 2-1: config 166 has an invalid interface number: 34 but max is 1 [ 428.085494][ T337] usb 2-1: config 166 has no interface number 0 [ 428.092909][ T337] usb 2-1: config 166 has no interface number 1 [ 428.107585][ T337] usb 2-1: config 166 interface 177 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 428.139200][ T337] usb 2-1: config 166 interface 177 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 428.160575][ T337] usb 2-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 428.182059][ T337] usb 2-1: config 166 interface 34 altsetting 1 has an invalid endpoint with address 0xA6, skipping [ 428.205418][ T337] usb 2-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 428.224257][ T337] usb 2-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 428.235938][ T337] usb 2-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 428.254068][ T337] usb 2-1: config 166 interface 177 has no altsetting 0 [ 428.274087][ T337] usb 2-1: config 166 interface 34 has no altsetting 0 [ 428.297405][T28204] loop6: detected capacity change from 0 to 256 [ 428.459986][ T337] usb 2-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 428.484210][T28233] netlink: 104 bytes leftover after parsing attributes in process `syz.7.13262'. [ 428.494186][ T337] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.502555][ T337] usb 2-1: Product: syz [ 428.517807][ T337] usb 2-1: Manufacturer: syz [ 428.522474][ T337] usb 2-1: SerialNumber: syz [ 428.586913][T28246] syz.6.13269[28246] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 428.587001][T28246] syz.6.13269[28246] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 428.772849][T28268] loop7: detected capacity change from 0 to 512 [ 428.847379][T28273] netlink: 28 bytes leftover after parsing attributes in process `syz.6.13281'. [ 428.885855][T28276] netlink: 48 bytes leftover after parsing attributes in process `syz.6.13282'. [ 428.912645][T28268] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 428.947524][T28268] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 428.968716][T28268] EXT4-fs (loop7): 1 truncate cleaned up [ 428.974742][T28268] EXT4-fs (loop7): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000002,resuid=0x000000000000ee01,debug_want_extra_isize=0x000000000000002e,nombcache,quota,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 429.015889][ T337] usb 2-1: Found UVC 0.00 device syz (0bda:0138) [ 429.024244][ T337] usb 2-1: No valid video chain found. [ 429.039319][ T337] usb 2-1: USB disconnect, device number 119 [ 429.113109][T28289] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13288'. [ 429.138861][T28294] loop7: detected capacity change from 0 to 512 [ 429.155110][T28295] loop3: detected capacity change from 0 to 512 [ 429.216524][T28294] EXT4-fs error (device loop7): ext4_orphan_get:1401: inode #15: comm syz.7.13289: casefold flag without casefold feature [ 429.246284][T28295] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 429.262239][T28294] EXT4-fs error (device loop7): ext4_orphan_get:1406: comm syz.7.13289: couldn't read orphan inode 15 (err -117) [ 429.268878][T28295] ext4 filesystem being mounted at /2800/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 429.302386][T28294] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 429.362491][T28322] tipc: Started in network mode [ 429.370954][T28322] tipc: Node identity ac14140f, cluster identity 4711 [ 429.378096][T28322] tipc: New replicast peer: 255.255.255.255 [ 429.405651][T28322] tipc: Enabled bearer , priority 10 [ 429.431993][T28329] tipc: MTU too low for tipc bearer [ 429.480106][T28336] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13309'. [ 429.516024][T28338] loop1: detected capacity change from 0 to 2048 [ 429.595983][T28338] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 430.043734][T28395] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 430.126370][T28401] netlink: 'syz.1.13339': attribute type 3 has an invalid length. [ 430.220832][T28409] netlink: 36 bytes leftover after parsing attributes in process `syz.6.13343'. [ 430.440326][T28416] loop6: detected capacity change from 0 to 8192 [ 430.471213][T28416] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 430.598089][ T576] tipc: Node number set to 2886997007 [ 430.825441][T28438] loop7: detected capacity change from 0 to 512 [ 430.919635][T28438] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 431.126268][T28457] dvmrp0: tun_chr_ioctl cmd 1074025677 [ 431.153723][T28457] dvmrp0: linktype set to 0 [ 431.230604][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 431.230624][ T30] audit: type=1400 audit(2000000378.367:19873): avc: denied { getopt } for pid=28460 comm="syz.1.13366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 431.322255][ T30] audit: type=1326 audit(2000000378.451:19874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28466 comm="syz.6.13371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd4346749 code=0x7ffc0000 [ 431.358462][T28403] loop3: detected capacity change from 0 to 131072 [ 431.380930][T28403] F2FS-fs (loop3): QUOTA feature is enabled, so ignore qf_name [ 431.393356][ T30] audit: type=1326 audit(2000000378.451:19875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28466 comm="syz.6.13371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd4346749 code=0x7ffc0000 [ 431.395711][T28403] F2FS-fs (loop3): invalid crc value [ 431.451659][ T30] audit: type=1326 audit(2000000378.451:19876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28466 comm="syz.6.13371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7fccd4346749 code=0x7ffc0000 [ 431.481475][ T30] audit: type=1326 audit(2000000378.451:19877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28466 comm="syz.6.13371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd4346749 code=0x7ffc0000 [ 431.497690][T28403] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387) [ 431.535668][ T30] audit: type=1326 audit(2000000378.451:19878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28466 comm="syz.6.13371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd4346749 code=0x7ffc0000 [ 431.569073][T28403] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=60000, run fsck to fix. [ 431.579552][T28403] F2FS-fs (loop3): Bad quota inode 2:393216 [ 431.585830][T28403] F2FS-fs (loop3): Failed to enable quota tracking (type=2, err=-22). Please run fsck to fix. [ 431.596536][T28403] F2FS-fs (loop3): Cannot turn on quotas: error -22 [ 431.609226][T28403] F2FS-fs (loop3): Mounted with checkpoint version = 753bd00b [ 431.663942][T28498] syz.0.13380[28498] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 431.664030][T28498] syz.0.13380[28498] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 431.691579][ T30] audit: type=1400 audit(2000000378.797:19879): avc: denied { setopt } for pid=28499 comm="syz.0.13382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 431.724699][ T337] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 431.998500][ T337] usb 2-1: Using ep0 maxpacket: 16 [ 432.126838][ T337] usb 2-1: config 0 has no interfaces? [ 432.212387][ T337] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 432.221702][ T337] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 432.230255][ T337] usb 2-1: Manufacturer: syz [ 432.238561][ T337] usb 2-1: config 0 descriptor?? [ 432.248831][T28545] loop3: detected capacity change from 0 to 1024 [ 432.265933][ T576] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 432.353906][T28545] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 432.522192][ T20] usb 2-1: USB disconnect, device number 120 [ 432.533288][ T576] usb 7-1: Using ep0 maxpacket: 16 [ 432.672051][ T576] usb 7-1: config 166 has an invalid interface number: 177 but max is 1 [ 432.681134][ T576] usb 7-1: config 166 has an invalid interface number: 34 but max is 1 [ 432.696275][ T576] usb 7-1: config 166 has no interface number 0 [ 432.703664][ T576] usb 7-1: config 166 has no interface number 1 [ 432.710502][ T576] usb 7-1: config 166 interface 177 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 432.723040][ T576] usb 7-1: config 166 interface 177 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 432.734814][ T576] usb 7-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 432.747859][ T576] usb 7-1: config 166 interface 34 altsetting 1 has an invalid endpoint with address 0xA6, skipping [ 432.760797][ T576] usb 7-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 432.772363][ T576] usb 7-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 432.784391][ T576] usb 7-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 432.798273][ T576] usb 7-1: config 166 interface 177 has no altsetting 0 [ 432.807153][ T576] usb 7-1: config 166 interface 34 has no altsetting 0 [ 432.845340][ T30] audit: type=1326 audit(2000000379.882:19880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28569 comm="syz.7.13411" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6bd494f749 code=0x0 [ 432.992817][ T576] usb 7-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 433.014132][ T576] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.037508][ T30] audit: type=1400 audit(2000000380.060:19881): avc: denied { connect } for pid=28582 comm="syz.0.13417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 433.068103][ T576] usb 7-1: Product: syz [ 433.072998][ T576] usb 7-1: Manufacturer: syz [ 433.079923][ T576] usb 7-1: SerialNumber: syz [ 433.127509][ T30] audit: type=1400 audit(2000000380.135:19882): avc: denied { create } for pid=28575 comm="syz.3.13414" dev="anon_inodefs" ino=108156 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 433.571295][ T576] usb 7-1: Found UVC 0.00 device syz (0bda:0138) [ 433.579245][ T576] usb 7-1: No valid video chain found. [ 433.597782][ T576] usb 7-1: USB disconnect, device number 8 [ 433.722629][T28623] __nla_validate_parse: 2 callbacks suppressed [ 433.722654][T28623] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13434'. [ 433.983229][T28639] loop7: detected capacity change from 0 to 512 [ 434.088319][T28639] EXT4-fs (loop7): mounted filesystem without journal. Opts: bsddf,,errors=continue. Quota mode: none. [ 434.114696][T28652] loop6: detected capacity change from 0 to 1024 [ 434.174036][T28652] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 434.365256][T28679] netlink: 44 bytes leftover after parsing attributes in process `syz.7.13460'. [ 434.392853][T28679] netlink: 'syz.7.13460': attribute type 6 has an invalid length. [ 434.411251][T28679] netlink: 'syz.7.13460': attribute type 5 has an invalid length. [ 434.429272][T28679] netlink: 'syz.7.13460': attribute type 4 has an invalid length. [ 434.478297][T28685] syz.7.13461[28685] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 434.478387][T28685] syz.7.13461[28685] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 435.032857][T28701] loop7: detected capacity change from 0 to 128 [ 435.110565][T28701] EXT4-fs (loop7): Test dummy encryption mode enabled [ 435.131731][T28701] EXT4-fs (loop7): mounted filesystem without journal. Opts: test_dummy_encryption,errors=remount-ro,. Quota mode: none. [ 435.150882][T28701] ext4 filesystem being mounted at /256/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 435.313115][T28718] tmpfs: Unknown parameter 'c' [ 435.336079][T28722] loop1: detected capacity change from 0 to 512 [ 435.464246][T28724] loop3: detected capacity change from 0 to 40427 [ 435.506262][T28724] F2FS-fs (loop3): Invalid log_blocksize (0), supports only 12 [ 435.513965][T28724] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 435.523724][T28724] F2FS-fs (loop3): invalid crc value [ 435.530666][T28724] F2FS-fs (loop3): Found nat_bits in checkpoint [ 435.560709][T28724] F2FS-fs (loop3): Start checkpoint disabled! [ 435.567809][T28724] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 435.575000][T28724] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 435.625301][T23246] attempt to access beyond end of device [ 435.625301][T23246] loop3: rw=2049, want=40984, limit=40427 [ 436.453150][T28762] syz.3.13495[28762] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 436.453241][T28762] syz.3.13495[28762] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 436.480081][T28764] loop6: detected capacity change from 0 to 1024 [ 436.542689][T28764] EXT4-fs (loop6): Ignoring removed orlov option [ 436.576633][T28764] EXT4-fs (loop6): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,resuid=0x0000000000000000,mb_optimize_scan=0x0000000000000000,nobarrier,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,stripe=0x0000000000000002,,errors=continue. Quota mode: none. [ 436.653700][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 436.653719][ T30] audit: type=1400 audit(2000000383.437:19912): avc: denied { ioctl } for pid=28777 comm="syz.3.13501" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=108530 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 436.782152][T28786] loop1: detected capacity change from 0 to 512 [ 436.827347][ T30] audit: type=1326 audit(2000000383.596:19913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28793 comm="syz.6.13509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd4346749 code=0x7ffc0000 [ 436.884179][T28786] EXT4-fs (loop1): mounted filesystem without journal. Opts: user_xattr,,errors=continue. Quota mode: writeback. [ 436.892682][ T30] audit: type=1326 audit(2000000383.596:19914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28793 comm="syz.6.13509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fccd4346749 code=0x7ffc0000 [ 436.927056][T28786] ext4 filesystem being mounted at /2886/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 436.986369][ T30] audit: type=1326 audit(2000000383.624:19915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28793 comm="syz.6.13509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd4346749 code=0x7ffc0000 [ 437.011748][ T30] audit: type=1326 audit(2000000383.633:19916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28793 comm="syz.6.13509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fccd4346749 code=0x7ffc0000 [ 437.017296][T28786] Quota error (device loop1): find_block_dqentry: Quota for id 62708 referenced but not present [ 437.035550][ T30] audit: type=1326 audit(2000000383.633:19917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28793 comm="syz.6.13509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd4346749 code=0x7ffc0000 [ 437.076537][ T30] audit: type=1326 audit(2000000383.633:19918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28793 comm="syz.6.13509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=90 compat=0 ip=0x7fccd4346749 code=0x7ffc0000 [ 437.115047][ T30] audit: type=1326 audit(2000000383.633:19919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28793 comm="syz.6.13509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd4346749 code=0x7ffc0000 [ 437.141660][T28786] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 62708 [ 437.176823][T28786] EXT4-fs error (device loop1): ext4_acquire_dquot:6200: comm syz.1.13505: Failed to acquire dquot type 0 [ 437.249799][T28814] loop7: detected capacity change from 0 to 16 [ 437.323657][T28814] erofs: (device loop7): mounted with root inode @ nid 36. [ 437.357020][T28814] erofs: (device loop7): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 437.387110][T28814] erofs: (device loop7): z_erofs_readpage: failed to read, err [-117] [ 437.595820][T28836] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28836 comm=syz.0.13527 [ 437.813270][T28826] loop6: detected capacity change from 0 to 40427 [ 437.819892][T28849] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.829078][T28826] F2FS-fs (loop6): Invalid log_blocksize (0), supports only 12 [ 437.863068][T28826] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 437.889947][T28826] F2FS-fs (loop6): invalid crc value [ 437.907451][T28826] F2FS-fs (loop6): Found nat_bits in checkpoint [ 437.997877][T28826] F2FS-fs (loop6): Start checkpoint disabled! [ 438.032131][T28826] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 438.046883][T28826] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 438.146182][ T10] attempt to access beyond end of device [ 438.146182][ T10] loop6: rw=2049, want=40984, limit=40427 [ 438.302738][T28868] netlink: 'syz.7.13542': attribute type 3 has an invalid length. [ 438.398418][T28877] loop7: detected capacity change from 0 to 2048 [ 438.507427][T28891] netlink: 56 bytes leftover after parsing attributes in process `syz.6.13551'. [ 438.508757][T28877] EXT4-fs (loop7): mounted filesystem without journal. Opts: usrquota,errors=remount-ro,dioread_lock,barrier,bsdgroups,inode_readahead_blks=0x0000000000002000,. Quota mode: writeback. [ 438.541403][T28877] ext4 filesystem being mounted at /272/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 438.656685][T28900] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.13546: bg 0: block 345: padding at end of block bitmap is not set [ 438.683617][T28900] EXT4-fs (loop7): Remounting filesystem read-only [ 440.232899][T28940] loop7: detected capacity change from 0 to 7 [ 440.239828][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 440.250081][T28942] loop3: detected capacity change from 0 to 512 [ 440.250879][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 440.275285][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 440.286611][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 440.294694][T28940] loop7: unable to read partition table [ 440.301820][T28940] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 440.325550][T28947] loop1: detected capacity change from 0 to 1024 [ 440.348038][T28947] EXT4-fs (loop1): Ignoring removed orlov option [ 440.381183][T28947] EXT4-fs (loop1): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,resuid=0x0000000000000000,mb_optimize_scan=0x0000000000000000,nobarrier,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,stripe=0x0000000000000002,,errors=continue. Quota mode: none. [ 440.413516][T28942] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 440.434663][T28945] loop7: detected capacity change from 7 to 0 [ 440.475638][T28942] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 440.538651][T28942] FAT-fs (loop3): Filesystem has been set read-only [ 440.551101][T28942] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 440.577714][T28942] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 440.615423][T28942] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 440.899777][T28996] loop1: detected capacity change from 0 to 256 [ 441.230024][T29037] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 441.242528][T29037] FAT-fs (loop1): unable to read boot sector [ 441.449014][ T293] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 441.716286][ T293] usb 2-1: Using ep0 maxpacket: 16 [ 441.851701][ T293] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 441.862799][ T293] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 441.873225][ T293] usb 2-1: config 0 interface 0 has no altsetting 0 [ 441.881347][ T293] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 441.896943][ T293] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.909426][ T293] usb 2-1: config 0 descriptor?? [ 442.002167][T29090] loop6: detected capacity change from 0 to 512 [ 442.020420][T29090] EXT4-fs (loop6): Ignoring removed bh option [ 442.026938][T29090] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 442.039229][T29090] EXT4-fs (loop6): 1 truncate cleaned up [ 442.044948][T29090] EXT4-fs (loop6): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,bh,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 442.088511][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 442.088546][ T30] audit: type=1326 audit(2000000388.516:19938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29094 comm="syz.0.13640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5a36a3749 code=0x7ffc0000 [ 442.119725][ T30] audit: type=1326 audit(2000000388.535:19939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29094 comm="syz.0.13640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd5a36a3749 code=0x7ffc0000 [ 442.146155][ T30] audit: type=1326 audit(2000000388.553:19940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29094 comm="syz.0.13640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5a36a3749 code=0x7ffc0000 [ 442.172123][ T30] audit: type=1326 audit(2000000388.553:19941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29094 comm="syz.0.13640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd5a36a3749 code=0x7ffc0000 [ 442.196192][ T30] audit: type=1326 audit(2000000388.581:19942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29094 comm="syz.0.13640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5a36a3749 code=0x7ffc0000 [ 442.222439][ T30] audit: type=1326 audit(2000000388.581:19943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29094 comm="syz.0.13640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5a36a3749 code=0x7ffc0000 [ 442.249649][ T30] audit: type=1326 audit(2000000388.581:19944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29094 comm="syz.0.13640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=247 compat=0 ip=0x7fd5a36a3749 code=0x7ffc0000 [ 442.273763][ T30] audit: type=1326 audit(2000000388.581:19945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29094 comm="syz.0.13640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5a36a3749 code=0x7ffc0000 [ 442.290517][T29104] loop6: detected capacity change from 0 to 1024 [ 442.304000][ T30] audit: type=1326 audit(2000000388.581:19946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29094 comm="syz.0.13640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5a36a3749 code=0x7ffc0000 [ 442.357150][T29104] EXT4-fs (loop6): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: none. [ 442.386508][T29104] ext4 filesystem being mounted at /452/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 442.416464][ T293] hid (null): unknown global tag 0xc [ 442.445842][ T293] hid (null): unknown global tag 0xd [ 442.516434][ T30] audit: type=1326 audit(2000000388.918:19947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29122 comm="syz.6.13650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd4346749 code=0x7ffc0000 [ 442.673444][ T293] usb 2-1: USB disconnect, device number 121 [ 442.936259][T29183] loop6: detected capacity change from 0 to 2048 [ 442.970036][T29183] EXT4-fs (loop6): mounted filesystem without journal. Opts: usrquota,errors=remount-ro,dioread_lock,barrier,bsdgroups,inode_readahead_blks=0x0000000000002000,. Quota mode: writeback. [ 442.988648][T29183] ext4 filesystem being mounted at /462/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 443.066169][T29187] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.13681: bg 0: block 345: padding at end of block bitmap is not set [ 443.080998][T29187] EXT4-fs (loop6): Remounting filesystem read-only [ 443.293635][T29205] loop6: detected capacity change from 0 to 512 [ 443.301117][T29205] EXT4-fs (loop6): Ignoring removed bh option [ 443.308566][T29205] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 443.358133][T29205] EXT4-fs (loop6): 1 truncate cleaned up [ 443.372450][T29205] EXT4-fs (loop6): mounted filesystem without journal. Opts: quota,resgid=0x000000000000ee00,bh,noload,data_err=ignore,abort,,errors=continue. Quota mode: writeback. [ 443.921459][T29276] futex_wake_op: syz.0.13722 tries to shift op by 36; fix this program [ 443.992621][T29286] futex_wake_op: syz.7.13726 tries to shift op by 144; fix this program [ 444.392188][T29321] netlink: 28 bytes leftover after parsing attributes in process `syz.3.13744'. [ 445.373399][T29365] netlink: 28 bytes leftover after parsing attributes in process `syz.6.13763'. [ 445.406677][T29367] loop6: detected capacity change from 0 to 256 [ 445.593405][T29379] loop6: detected capacity change from 0 to 2048 [ 445.677036][T29379] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 445.683514][T29387] loop3: detected capacity change from 0 to 512 [ 445.709084][T29379] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.13770: bg 0: block 234: padding at end of block bitmap is not set [ 445.726419][T29379] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 22 with error 117 [ 445.739941][T29379] EXT4-fs (loop6): This should not happen!! Data will be lost [ 445.739941][T29379] [ 445.751606][T29387] EXT4-fs (loop3): mounted filesystem without journal. Opts: auto_da_alloc,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 445.765778][T29387] ext4 filesystem being mounted at /2886/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 445.800806][T23246] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 445.821477][T23246] EXT4-fs (loop6): This should not happen!! Data will be lost [ 445.821477][T23246] [ 445.831182][T23246] EXT4-fs (loop6): Total free blocks count 0 [ 445.853556][T23246] EXT4-fs (loop6): Free/Dirty block details [ 445.859677][T23246] EXT4-fs (loop6): free_blocks=0 [ 445.864706][T23246] EXT4-fs (loop6): dirty_blocks=32 [ 445.869833][T23246] EXT4-fs (loop6): Block reservation details [ 445.875881][T23246] EXT4-fs (loop6): i_reserved_data_blocks=2 [ 445.973560][T29399] loop6: detected capacity change from 0 to 2048 [ 445.992203][T29399] EXT4-fs (loop6): Ignoring removed nomblk_io_submit option [ 446.024233][T29399] EXT4-fs (loop6): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000000,grpquota,nomblk_io_submit,stripe=0x000000000004ffff,norecovery,errors=remount-ro,max_batch_time=0x0000000000000814,. Quota mode: writeback. [ 446.276640][T29425] loop7: detected capacity change from 0 to 256 [ 446.517459][T29450] netlink: 36 bytes leftover after parsing attributes in process `syz.0.13798'. [ 446.585439][T29458] loop6: detected capacity change from 0 to 512 [ 446.689218][T29458] EXT4-fs (loop6): mounted filesystem without journal. Opts: lazytime,sysvgroups,,errors=continue. Quota mode: writeback. [ 446.702116][T29458] ext4 filesystem being mounted at /487/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 446.852298][T29494] loop3: detected capacity change from 0 to 256 [ 446.890911][T29494] exfat: Deprecated parameter 'utf8' [ 446.926372][T29494] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 447.088255][T29511] loop7: detected capacity change from 0 to 256 [ 447.131983][T29511] FAT-fs (loop7): error, clusters badly computed (0 != 128) [ 447.143876][T29515] loop1: detected capacity change from 0 to 512 [ 447.150675][T29511] FAT-fs (loop7): Filesystem has been set read-only [ 447.162240][T29511] FAT-fs (loop7): error, clusters badly computed (1 != 129) [ 447.179652][T29511] FAT-fs (loop7): error, clusters badly computed (2 != 130) [ 447.190128][T29511] FAT-fs (loop7): error, clusters badly computed (3 != 131) [ 447.200738][T29511] FAT-fs (loop7): error, clusters badly computed (4 != 132) [ 447.208117][T29511] FAT-fs (loop7): error, clusters badly computed (5 != 133) [ 447.250909][T29515] EXT4-fs (loop1): Test dummy encryption mode enabled [ 447.261424][T29515] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.13828: invalid indirect mapped block 10 (level 1) [ 447.275770][T29515] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.13828: invalid indirect mapped block 8 (level 1) [ 447.283005][T29525] netlink: 40 bytes leftover after parsing attributes in process `syz.0.13833'. [ 447.290829][T29515] EXT4-fs (loop1): 1 truncate cleaned up [ 447.305505][T29525] netlink: 32 bytes leftover after parsing attributes in process `syz.0.13833'. [ 447.319611][T29515] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption=v1,,errors=continue. Quota mode: none. [ 447.364946][T29533] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 447.397687][T29538] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13838'. [ 447.412338][T29538] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13838'. [ 447.567669][T29561] loop3: detected capacity change from 0 to 512 [ 447.640471][T29561] EXT4-fs (loop3): Test dummy encryption mode enabled [ 447.659400][T29561] EXT4-fs error (device loop3): ext4_get_branch:178: inode #13: block 2: comm syz.3.13847: invalid block [ 447.676764][T29561] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.13847: invalid indirect mapped block 10 (level 1) [ 447.721822][T29561] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.13847: invalid indirect mapped block 8 (level 1) [ 447.736150][T29561] EXT4-fs (loop3): 1 truncate cleaned up [ 447.749490][T29561] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption=v1,,errors=continue. Quota mode: none. [ 447.766008][T29576] loop1: detected capacity change from 0 to 512 [ 447.797157][ T30] kauditd_printk_skb: 78 callbacks suppressed [ 447.797174][ T30] audit: type=1400 audit(2000000393.857:20026): avc: denied { setopt } for pid=29577 comm="syz.0.13855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 447.828164][ T30] audit: type=1400 audit(2000000393.894:20027): avc: denied { compute_member } for pid=29579 comm="syz.6.13856" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 447.850737][T29576] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 447.870892][T29576] EXT4-fs (loop1): 1 truncate cleaned up [ 447.884578][T29576] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,barrier,lazytime,quota,. Quota mode: writeback. [ 447.913039][T29588] netlink: 40 bytes leftover after parsing attributes in process `syz.0.13859'. [ 447.926482][T29588] netlink: 32 bytes leftover after parsing attributes in process `syz.0.13859'. [ 448.170589][T29613] netlink: 20 bytes leftover after parsing attributes in process `syz.3.13871'. [ 448.178902][T29615] loop1: detected capacity change from 0 to 1024 [ 448.302143][T29615] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 448.323187][T29615] ext4 filesystem being mounted at /2933/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 448.436058][ T30] audit: type=1326 audit(2000000394.456:20028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29629 comm="syz.3.13879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb027ad6749 code=0x7ffc0000 [ 448.464552][ T30] audit: type=1326 audit(2000000394.493:20029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29629 comm="syz.3.13879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7fb027ad6749 code=0x7ffc0000 [ 448.493766][ T30] audit: type=1326 audit(2000000394.493:20030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29629 comm="syz.3.13879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb027ad6749 code=0x7ffc0000 [ 448.521872][ T30] audit: type=1326 audit(2000000394.493:20031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29629 comm="syz.3.13879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7fb027ad6749 code=0x7ffc0000 [ 448.559034][ T30] audit: type=1326 audit(2000000394.493:20032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29629 comm="syz.3.13879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb027ad6749 code=0x7ffc0000 [ 448.584540][T29599] overlayfs: failed to clone upperpath [ 448.584843][ T30] audit: type=1326 audit(2000000394.493:20033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29629 comm="syz.3.13879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=255 compat=0 ip=0x7fb027ad6749 code=0x7ffc0000 [ 448.614025][ T30] audit: type=1326 audit(2000000394.493:20034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29629 comm="syz.3.13879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb027ad6749 code=0x7ffc0000 [ 448.637843][ T30] audit: type=1326 audit(2000000394.493:20035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29629 comm="syz.3.13879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb027ad6749 code=0x7ffc0000 [ 448.707928][ T576] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 449.092825][ T576] usb 7-1: config 0 has an invalid interface number: 251 but max is 0 [ 449.101020][ T576] usb 7-1: config 0 has no interface number 0 [ 449.274647][ T576] usb 7-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 449.283734][ T576] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.291921][ T576] usb 7-1: Product: syz [ 449.296118][ T576] usb 7-1: Manufacturer: syz [ 449.300704][ T576] usb 7-1: SerialNumber: syz [ 449.306310][ T576] usb 7-1: config 0 descriptor?? [ 450.268784][ T576] asix 7-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 450.279083][ T576] asix 7-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 450.289567][ T576] asix: probe of 7-1:0.251 failed with error -71 [ 450.297247][ T576] usb 7-1: USB disconnect, device number 9 [ 451.634373][T29648] loop6: detected capacity change from 0 to 512 [ 451.652206][T29648] EXT4-fs (loop6): Test dummy encryption mode enabled [ 451.686301][T29648] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.13887: invalid indirect mapped block 10 (level 1) [ 451.700079][T29648] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.13887: invalid indirect mapped block 8 (level 1) [ 451.714720][T29648] EXT4-fs (loop6): 1 truncate cleaned up [ 451.720450][T29648] EXT4-fs (loop6): mounted filesystem without journal. Opts: test_dummy_encryption=v1,,errors=continue. Quota mode: none. [ 452.189254][T29698] loop1: detected capacity change from 0 to 1024 [ 452.228755][T29698] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 452.245686][T29698] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3871: comm syz.1.13909: Allocating blocks 497-513 which overlap fs metadata [ 452.268502][T29698] EXT4-fs (loop1): pa ffff88811197dd20: logic 16, phys. 129, len 24 [ 452.278893][T29698] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:4888: group 0, free 0, pa_free 1 [ 452.392564][T29704] __nla_validate_parse: 1 callbacks suppressed [ 452.392578][T29704] netlink: 52 bytes leftover after parsing attributes in process `syz.1.13911'. [ 452.575280][T29716] overlayfs: failed to clone lowerpath [ 452.702943][T29736] loop3: detected capacity change from 0 to 256 [ 452.732780][ T576] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 452.805080][T29736] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 452.934369][T29753] loop3: detected capacity change from 0 to 512 [ 452.945729][T29755] netlink: 27 bytes leftover after parsing attributes in process `syz.0.13935'. [ 452.965009][T29753] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 452.981242][T29753] ext4 filesystem being mounted at /2922/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 453.014051][T29753] EXT4-fs error (device loop3): ext4_empty_dir:3136: inode #12: comm syz.3.13934: invalid size [ 453.024805][ T576] usb 2-1: Using ep0 maxpacket: 32 [ 453.033214][T29753] EXT4-fs (loop3): re-mounted. Opts: . Quota mode: writeback. [ 453.106421][T29766] syzkaller1: tun_chr_ioctl cmd 1074812118 [ 453.155377][ T576] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 453.170373][ T576] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 453.183339][ T576] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 453.219355][ T576] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.231255][ T576] usb 2-1: config 0 descriptor?? [ 453.338862][ T26] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 453.385735][T29791] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.395802][T29791] device bridge_slave_1 left promiscuous mode [ 453.403396][T29791] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.414424][ T337] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 453.722183][ T337] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 453.744612][ T576] savu 0003:1E7D:2D5A.002D: unbalanced collection at end of report description [ 453.756041][ T576] savu 0003:1E7D:2D5A.002D: parse failed [ 453.762774][ T576] savu: probe of 0003:1E7D:2D5A.002D failed with error -22 [ 453.800378][T29834] netlink: 'syz.6.13969': attribute type 1 has an invalid length. [ 453.808796][T29834] netlink: 'syz.6.13969': attribute type 2 has an invalid length. [ 453.822965][T29834] netlink: 'syz.6.13969': attribute type 1 has an invalid length. [ 453.832906][T29834] netlink: 'syz.6.13969': attribute type 2 has an invalid length. [ 453.966445][ T293] usb 2-1: USB disconnect, device number 122 [ 454.207945][T29838] loop6: detected capacity change from 0 to 40427 [ 454.221464][T29843] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13973'. [ 454.247687][T29838] F2FS-fs (loop6): invalid crc value [ 454.285323][T29838] F2FS-fs (loop6): Found nat_bits in checkpoint [ 454.352335][T29852] sch_tbf: burst 0 is lower than device lo mtu (39799) ! [ 454.369195][T29838] F2FS-fs (loop6): Cannot turn on quotas: -2 on 0 [ 454.384855][T29838] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 454.852070][T29859] loop1: detected capacity change from 0 to 40427 [ 454.861347][ T30] kauditd_printk_skb: 37 callbacks suppressed [ 454.861364][ T30] audit: type=1326 audit(2000000406.472:20073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29873 comm="syz.3.13987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb027ad6749 code=0x7ffc0000 [ 454.915749][ T30] audit: type=1326 audit(2000000406.510:20074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29873 comm="syz.3.13987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb027ad6749 code=0x7ffc0000 [ 454.947943][ T30] audit: type=1326 audit(2000000406.510:20075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29873 comm="syz.3.13987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb027ad6749 code=0x7ffc0000 [ 454.980912][T29859] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 455.008039][T29859] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 455.047851][ T30] audit: type=1326 audit(2000000406.510:20076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29873 comm="syz.3.13987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb027ad6749 code=0x7ffc0000 [ 455.077051][ T30] audit: type=1326 audit(2000000406.510:20077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29873 comm="syz.3.13987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb027ad6749 code=0x7ffc0000 [ 455.107858][ T30] audit: type=1326 audit(2000000406.510:20078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29873 comm="syz.3.13987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=106 compat=0 ip=0x7fb027ad6749 code=0x7ffc0000 [ 455.112632][T29859] F2FS-fs (loop1): Found nat_bits in checkpoint [ 455.134863][ T30] audit: type=1326 audit(2000000406.510:20079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29873 comm="syz.3.13987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb027ad6749 code=0x7ffc0000 [ 455.201155][T29895] syz.6.13993[29895] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 455.201252][T29895] syz.6.13993[29895] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 455.220889][T29897] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 455.244797][ T30] audit: type=1326 audit(2000000406.762:20080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29884 comm="syz.3.13991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb027ad6749 code=0x7ffc0000 [ 455.287270][T29859] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 455.303805][T29900] loop6: detected capacity change from 0 to 128 [ 455.309424][T29859] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 455.349714][ T30] audit: type=1326 audit(2000000406.762:20081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29884 comm="syz.3.13991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb027ad6749 code=0x7ffc0000 [ 455.754374][T29925] loop3: detected capacity change from 0 to 8192 [ 455.812568][T29939] loop7: detected capacity change from 0 to 1024 [ 456.012447][T29939] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 456.080828][ T30] audit: type=1326 audit(2000000000.608:20082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29967 comm="syz.3.14023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb027ad6749 code=0x7ffc0000 [ 456.319324][T29999] loop7: detected capacity change from 0 to 512 [ 456.413931][T29999] EXT4-fs (loop7): Ignoring removed orlov option [ 456.437288][T29999] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 456.470725][T29999] EXT4-fs error (device loop7): ext4_xattr_ibody_find:2229: inode #15: comm syz.7.14038: corrupted in-inode xattr [ 456.492149][T29999] EXT4-fs error (device loop7): ext4_orphan_get:1406: comm syz.7.14038: couldn't read orphan inode 15 (err -117) [ 456.509420][T29999] EXT4-fs (loop7): mounted filesystem without journal. Opts: jqfmt=vfsold,orlov,user_xattr,noload,nombcache,noblock_validity,init_itable=0x0000000000000601,nodiscard,,errors=continue. Quota mode: none. [ 456.509826][T30012] netlink: 32 bytes leftover after parsing attributes in process `syz.6.14045'. [ 456.567444][T30017] netlink: 32 bytes leftover after parsing attributes in process `syz.6.14045'. [ 456.823897][T30046] syz.6.14059[30046] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 456.824010][T30046] syz.6.14059[30046] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 457.232767][T30087] loop6: detected capacity change from 0 to 2048 [ 457.315089][T30087] EXT4-fs (loop6): Ignoring removed bh option [ 457.378185][T30087] EXT4-fs (loop6): mounted filesystem without journal. Opts: discard,bh,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 457.421053][T30113] loop1: detected capacity change from 0 to 512 [ 457.424860][T30087] EXT4-fs (loop6): shut down requested (2) [ 457.491664][T30119] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 457.501193][T30119] pim6reg0: linktype set to 1 [ 457.519869][T30121] input: syz0 as /devices/virtual/input/input50 [ 457.520542][T30113] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,,errors=continue. Quota mode: writeback. [ 457.550765][T30113] ext4 filesystem being mounted at /2977/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 457.592526][T30113] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.14089: bg 0: block 18: invalid block bitmap [ 457.611456][T30127] netlink: 28 bytes leftover after parsing attributes in process `syz.3.14095'. [ 457.621194][T30113] EXT4-fs error (device loop1): ext4_acquire_dquot:6200: comm syz.1.14089: Failed to acquire dquot type 1 [ 458.022054][T30188] loop1: detected capacity change from 0 to 256 [ 458.044182][T30188] exfat: Deprecated parameter 'namecase' [ 458.062039][T30188] exfat: Deprecated parameter 'namecase' [ 458.079615][T30194] loop3: detected capacity change from 0 to 512 [ 458.102461][T30188] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x18d51376, utbl_chksum : 0xe619d30d) [ 458.115738][ T576] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 458.137678][T30194] EXT4-fs (loop3): too many log groups per flexible block group [ 458.148819][T30194] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 458.158084][T30194] EXT4-fs (loop3): mount failed [ 458.218395][T30198] loop1: detected capacity change from 0 to 1024 [ 458.282173][T30198] EXT4-fs (loop1): Ignoring removed nobh option [ 458.290354][T30198] EXT4-fs (loop1): Ignoring removed bh option [ 458.302533][T30198] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 458.336589][T30198] EXT4-fs (loop1): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000003,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 458.339809][T30216] loop3: detected capacity change from 0 to 128 [ 458.404124][ T576] usb 7-1: Using ep0 maxpacket: 16 [ 458.445324][T30218] netlink: 4 bytes leftover after parsing attributes in process `syz.7.14138'. [ 458.501968][T30226] loop7: detected capacity change from 0 to 128 [ 458.532516][ T576] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 458.553226][ T576] usb 7-1: config 0 has no interface number 0 [ 458.578708][ T576] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 458.590680][ T576] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 458.603487][ T576] usb 7-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 458.617064][ T576] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.629259][ T576] usb 7-1: config 0 descriptor?? [ 459.307949][T30309] incfs: Error accessing: ./file0. [ 459.317213][T30309] incfs: mount failed -20 [ 459.366836][ T576] uclogic 0003:28BD:0071.002E: failed retrieving string descriptor #100: -71 [ 459.378205][ T576] uclogic 0003:28BD:0071.002E: failed retrieving pen parameters: -71 [ 459.390388][ T576] uclogic 0003:28BD:0071.002E: pen probing failed: -71 [ 459.398568][ T576] uclogic 0003:28BD:0071.002E: failed probing parameters: -71 [ 459.406368][ T576] uclogic: probe of 0003:28BD:0071.002E failed with error -71 [ 459.415510][ T576] usb 7-1: USB disconnect, device number 11 [ 459.484930][T30323] netlink: 16 bytes leftover after parsing attributes in process `syz.1.14184'. [ 459.524262][T30327] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14186'. [ 459.924279][T30345] netlink: 'syz.6.14194': attribute type 2 has an invalid length. [ 460.532576][T30379] device gre3 entered promiscuous mode [ 460.827157][T30406] loop1: detected capacity change from 0 to 256 [ 460.864419][T30406] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 460.886594][T30406] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 460.899963][T30406] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 461.003681][T30414] loop1: detected capacity change from 0 to 512 [ 461.024182][T30412] loop3: detected capacity change from 0 to 40427 [ 461.069821][T30412] F2FS-fs (loop3): fault_injection options not supported [ 461.079200][T30412] F2FS-fs (loop3): invalid crc value [ 461.090485][T30412] F2FS-fs (loop3): Found nat_bits in checkpoint [ 461.135178][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 461.135197][ T30] audit: type=1400 audit(2000000005.341:20108): avc: denied { setopt } for pid=30413 comm="syz.1.14226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 461.150661][T30412] F2FS-fs (loop3): Start checkpoint disabled! [ 461.190208][ T30] audit: type=1326 audit(2000000005.388:20109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30420 comm="syz.1.14229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d45c07749 code=0x7ffc0000 [ 461.231702][T30412] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 461.243921][ T30] audit: type=1326 audit(2000000005.425:20110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30420 comm="syz.1.14229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9d45c07749 code=0x7ffc0000 [ 461.294392][T30425] loop1: detected capacity change from 0 to 1024 [ 461.296839][ T30] audit: type=1326 audit(2000000005.425:20111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30420 comm="syz.1.14229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d45c07749 code=0x7ffc0000 [ 461.331555][ T30] audit: type=1326 audit(2000000005.425:20112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30420 comm="syz.1.14229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9d45c07749 code=0x7ffc0000 [ 461.358082][ T30] audit: type=1326 audit(2000000005.425:20113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30420 comm="syz.1.14229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d45c07749 code=0x7ffc0000 [ 461.388288][T30425] EXT4-fs (loop1): Ignoring removed orlov option [ 461.398012][ T30] audit: type=1326 audit(2000000005.425:20114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30420 comm="syz.1.14229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7f9d45c07749 code=0x7ffc0000 [ 461.409847][T30412] attempt to access beyond end of device [ 461.409847][T30412] loop3: rw=2049, want=77960, limit=40427 [ 461.430738][ T30] audit: type=1326 audit(2000000005.425:20115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30420 comm="syz.1.14229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d45c07749 code=0x7ffc0000 [ 461.472555][T30425] EXT4-fs (loop1): mounted filesystem without journal. Opts: nolazytime,auto_da_alloc,sysvgroups,norecovery,jqfmt=vfsv0,orlov,nogrpid,noauto_da_alloc,grpid,,errors=continue. Quota mode: none. [ 461.527398][T30434] device erspan0 entered promiscuous mode [ 461.556140][ T8] attempt to access beyond end of device [ 461.556140][ T8] loop3: rw=2049, want=40984, limit=40427 [ 461.653009][T30446] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 461.658730][T30446] dvmrp1: linktype set to 6 [ 461.714929][T30450] loop1: detected capacity change from 0 to 512 [ 461.739495][T30452] loop6: detected capacity change from 0 to 16 [ 461.764223][T30456] loop3: detected capacity change from 0 to 1024 [ 461.776226][T30456] EXT4-fs (loop3): Ignoring removed oldalloc option [ 461.786925][T30452] erofs: (device loop6): mounted with root inode @ nid 36. [ 461.789975][T30456] EXT4-fs (loop3): Ignoring removed bh option [ 461.798269][T30452] erofs: (device loop6): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 36 [ 461.812867][T30456] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 461.817512][T30452] erofs: (device loop6): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 36 [ 461.827175][T30450] EXT4-fs error (device loop1): ext4_orphan_get:1401: inode #15: comm syz.1.14241: casefold flag without casefold feature [ 461.836926][T30452] erofs: (device loop6): z_erofs_readpage: failed to read, err [-117] [ 461.850841][T30450] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.14241: couldn't read orphan inode 15 (err -117) [ 461.860424][T30456] EXT4-fs (loop3): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,abort,data_err=ignore,mb_optimize_scan=0x0000000000000001,oldalloc,grpquota,noload,nodelalloc,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 461.883272][T30450] EXT4-fs (loop1): mounted filesystem without journal. Opts: delalloc,,errors=continue. Quota mode: writeback. [ 461.994032][T30461] loop6: detected capacity change from 0 to 512 [ 462.057237][T30461] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 462.068473][T30461] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 462.076641][T30461] System zones: 0-1, 15-15, 18-18, 34-34 [ 462.084292][T30461] EXT4-fs (loop6): orphan cleanup on readonly fs [ 462.090988][T30461] Quota error (device loop6): v2_read_header: Failed header read: expected=8 got=0 [ 462.100463][T30461] EXT4-fs warning (device loop6): ext4_enable_quotas:6452: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 462.115178][T30461] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 462.123239][T30461] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.14244: bg 0: block 40: padding at end of block bitmap is not set [ 462.138489][T30461] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6178: Corrupt filesystem [ 462.149425][T30478] loop3: detected capacity change from 0 to 1024 [ 462.150573][T30461] EXT4-fs (loop6): 1 truncate cleaned up [ 462.163310][T30461] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 462.177773][T30461] fscrypt (loop6, inode 16): Error -61 getting encryption context [ 462.201462][ T30] audit: type=1326 audit(2000000006.333:20116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30482 comm="syz.1.14253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d45c07749 code=0x7ffc0000 [ 462.244833][T30478] EXT4-fs (loop3): Ignoring removed nobh option [ 462.263587][T30478] EXT4-fs (loop3): Ignoring removed bh option [ 462.272608][T30478] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 462.300169][T30478] EXT4-fs (loop3): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000003,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 462.744762][T30537] fuse: Bad value for 'fd' [ 462.808378][ T293] usb 4-1: new full-speed USB device number 116 using dummy_hcd [ 462.946626][T30561] overlayfs: failed to clone upperpath [ 463.000624][T30563] device wireguard0 entered promiscuous mode [ 463.011649][T30563] IPv6: ADDRCONF(NETDEV_CHANGE): wireguard0: link becomes ready [ 463.193290][ T293] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 463.212316][ T293] usb 4-1: config 0 has no interface number 0 [ 463.306490][T30579] loop6: detected capacity change from 0 to 1024 [ 463.347858][T30585] netlink: 28 bytes leftover after parsing attributes in process `syz.7.14299'. [ 463.385793][ T293] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 463.391086][T30541] loop1: detected capacity change from 0 to 131072 [ 463.398102][T30588] device gre1 entered promiscuous mode [ 463.407091][ T293] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.415364][ T293] usb 4-1: Product: syz [ 463.415862][T30541] F2FS-fs (loop1): Test dummy encryption mode enabled [ 463.419975][ T293] usb 4-1: Manufacturer: syz [ 463.431624][T30579] EXT4-fs (loop6): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none. [ 463.439170][ T293] usb 4-1: SerialNumber: syz [ 463.454236][ T293] usb 4-1: config 0 descriptor?? [ 463.460641][T30541] F2FS-fs (loop1): invalid crc value [ 463.466765][T30579] ext4 filesystem being mounted at /561/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 463.493923][T30541] F2FS-fs (loop1): Found nat_bits in checkpoint [ 463.506313][T30579] EXT4-fs error (device loop6): ext4_map_blocks:740: inode #15: comm syz.6.14297: lblock 0 mapped to illegal pblock 0 (length 1) [ 463.553718][T30541] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 463.581352][T30579] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 463.608641][T30599] EXT4-fs error (device loop6): ext4_map_blocks:630: inode #15: comm syz.6.14297: lblock 0 mapped to illegal pblock 0 (length 1) [ 463.611088][T30579] EXT4-fs (loop6): This should not happen!! Data will be lost [ 463.611088][T30579] [ 463.751402][T30619] netlink: 45 bytes leftover after parsing attributes in process `syz.0.14312'. [ 463.940814][T30631] loop1: detected capacity change from 0 to 256 [ 464.068235][T30638] xt_hashlimit: max too large, truncated to 1048576 [ 464.189229][T30661] netlink: 1260 bytes leftover after parsing attributes in process `syz.0.14330'. [ 464.433302][ T293] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 464.443427][ T293] asix 4-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 464.451447][T30680] fuse: Bad value for 'fd' [ 464.454287][ T293] asix: probe of 4-1:0.251 failed with error -71 [ 464.470499][ T293] usb 4-1: USB disconnect, device number 116 [ 464.706967][T30721] loop6: detected capacity change from 0 to 16 [ 464.718532][T30721] erofs: (device loop6): mounted with root inode @ nid 36. [ 464.907492][T30732] netlink: 104 bytes leftover after parsing attributes in process `syz.0.14372'. [ 465.103114][T30754] syz.3.14371[30754] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 465.103197][T30754] syz.3.14371[30754] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 465.254050][T30773] input: syz1 as /devices/virtual/input/input51 [ 465.279075][T30774] serio: Serial port ttyS3 [ 465.397489][T30794] loop6: detected capacity change from 0 to 2048 [ 465.417624][T11922] loop6: p1 p3 p4 [ 465.422848][T11922] loop6: p4 size 589824 extends beyond EOD, truncated [ 465.432615][T30794] loop6: p1 p3 p4 [ 465.437505][T30794] loop6: p4 size 589824 extends beyond EOD, truncated [ 465.487365][T30798] netlink: 12 bytes leftover after parsing attributes in process `syz.7.14393'. [ 465.572569][T23559] udevd[23559]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 465.572878][T11921] udevd[11921]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 465.599160][T11922] udevd[11922]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 465.673461][T30817] sch_tbf: burst 824 is lower than device lo mtu (65550) ! [ 465.837958][T30826] Bluetooth: hci0: Frame reassembly failed (-84) [ 465.855084][T12621] Bluetooth: hci0: Frame reassembly failed (-84) [ 466.497222][T30879] syz.0.14431[30879] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 466.497310][T30879] syz.0.14431[30879] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 466.592662][ T20] usb 2-1: new full-speed USB device number 123 using dummy_hcd [ 466.867124][T30905] netlink: 182 bytes leftover after parsing attributes in process `syz.3.14443'. [ 466.994926][T30919] loop7: detected capacity change from 0 to 256 [ 467.009655][ T20] usb 2-1: config 0 has no interfaces? [ 467.018266][ T20] usb 2-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 467.032513][ T20] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.047563][ T20] usb 2-1: config 0 descriptor?? [ 467.074520][T30930] netlink: 44 bytes leftover after parsing attributes in process `syz.0.14455'. [ 467.086231][T30930] netlink: 59 bytes leftover after parsing attributes in process `syz.0.14455'. [ 467.099767][T30930] netlink: 59 bytes leftover after parsing attributes in process `syz.0.14455'. [ 467.129968][T30919] FAT-fs (loop7): Directory bread(block 64) failed [ 467.172163][T30919] FAT-fs (loop7): Directory bread(block 65) failed [ 467.182916][T30919] FAT-fs (loop7): Directory bread(block 66) failed [ 467.191927][T30919] FAT-fs (loop7): Directory bread(block 67) failed [ 467.202358][T30919] FAT-fs (loop7): Directory bread(block 68) failed [ 467.212679][T30919] FAT-fs (loop7): Directory bread(block 69) failed [ 467.221649][T30919] FAT-fs (loop7): Directory bread(block 70) failed [ 467.231841][T30940] input: syz0 as /devices/virtual/input/input52 [ 467.238954][T30919] FAT-fs (loop7): Directory bread(block 71) failed [ 467.250037][T30919] FAT-fs (loop7): Directory bread(block 72) failed [ 467.265958][T30919] FAT-fs (loop7): Directory bread(block 73) failed [ 467.335840][ T26] usb 2-1: USB disconnect, device number 123 [ 467.345509][T30919] attempt to access beyond end of device [ 467.345509][T30919] loop7: rw=2049, want=1256, limit=256 [ 467.489947][T30963] loop7: detected capacity change from 0 to 128 [ 467.515199][ T30] kauditd_printk_skb: 45 callbacks suppressed [ 467.515216][ T30] audit: type=1326 audit(2000000011.309:20162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30966 comm="syz.0.14473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5a36a3749 code=0x7ffc0000 [ 467.559536][ T30] audit: type=1326 audit(2000000011.337:20163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30966 comm="syz.0.14473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=91 compat=0 ip=0x7fd5a36a3749 code=0x7ffc0000 [ 467.588349][ T30] audit: type=1400 audit(2000000011.337:20164): avc: denied { setattr } for pid=30966 comm="syz.0.14473" name="XDP" dev="sockfs" ino=116725 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 467.614643][ T30] audit: type=1326 audit(2000000011.337:20165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30966 comm="syz.0.14473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5a36a3749 code=0x7ffc0000 [ 467.665233][ T30] audit: type=1400 audit(2000000011.431:20166): avc: denied { execstack } for pid=30970 comm="syz.3.14476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 467.669595][T30975] loop3: detected capacity change from 0 to 2048 [ 467.727852][T30975] loop3: p1 p3 p4 [ 467.734671][T30975] loop3: p4 size 589824 extends beyond EOD, truncated [ 467.804566][T30973] loop7: detected capacity change from 0 to 40427 [ 467.814000][T30973] F2FS-fs (loop7): fault_injection options not supported [ 467.823311][T30973] F2FS-fs (loop7): fault_type options not supported [ 467.842145][T30973] F2FS-fs (loop7): invalid crc value [ 467.850668][T30973] F2FS-fs (loop7): Found nat_bits in checkpoint [ 467.885142][T30973] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 467.931942][ T30] audit: type=1326 audit(2000000011.693:20167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30980 comm="syz.1.14480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d45c07749 code=0x7ffc0000 [ 467.966330][ T30] audit: type=1326 audit(2000000011.721:20168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30980 comm="syz.1.14480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9d45c07749 code=0x7ffc0000 [ 468.028052][ T30] audit: type=1326 audit(2000000011.721:20169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30980 comm="syz.1.14480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d45c07749 code=0x7ffc0000 [ 468.054680][ T20] Bluetooth: hci0: command 0x1003 tx timeout [ 468.067881][T21183] Bluetooth: hci0: sending frame failed (-49) [ 468.095183][ T30] audit: type=1326 audit(2000000011.721:20170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30980 comm="syz.1.14480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7f9d45c07749 code=0x7ffc0000 [ 468.122533][ T30] audit: type=1326 audit(2000000011.721:20171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30980 comm="syz.1.14480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d45c07749 code=0x7ffc0000 [ 468.180501][T30996] fuse: Bad value for 'fd' [ 468.299015][T31009] xt_hashlimit: max too large, truncated to 1048576 [ 468.662497][T31039] loop7: detected capacity change from 0 to 40427 [ 468.763520][T31039] F2FS-fs (loop7): Invalid segment/section count (24 != 24 * 3) [ 468.782168][T31039] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 468.797604][T31039] F2FS-fs (loop7): invalid crc value [ 468.805271][T31039] F2FS-fs (loop7): SIT is corrupted node# 0 vs 7 [ 468.815121][T31039] F2FS-fs (loop7): Failed to initialize F2FS segment manager (-117) [ 469.052586][T31046] netlink: 92 bytes leftover after parsing attributes in process `syz.7.14509'. [ 469.150725][T31056] loop1: detected capacity change from 0 to 16 [ 469.252201][T31056] erofs: (device loop1): mounted with root inode @ nid 36. [ 469.377539][T31072] syz.1.14522[31072] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 469.377628][T31072] syz.1.14522[31072] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 469.543371][T31082] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14528'. [ 469.556854][T31096] futex_wake_op: syz.0.14534 tries to shift op by 36; fix this program [ 469.607198][T12621] tipc: Subscription rejected, illegal request [ 469.694525][T31118] loop3: detected capacity change from 0 to 512 [ 469.728458][T31118] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 469.766459][T31118] ext4 filesystem being mounted at /3062/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 469.830041][T31131] loop1: detected capacity change from 0 to 256 [ 469.865336][T31131] FAT-fs (loop1): Directory bread(block 64) failed [ 469.876835][T31131] FAT-fs (loop1): Directory bread(block 65) failed [ 469.889113][T31131] FAT-fs (loop1): Directory bread(block 66) failed [ 469.905507][T31131] FAT-fs (loop1): Directory bread(block 67) failed [ 469.914135][T31131] FAT-fs (loop1): Directory bread(block 68) failed [ 469.921977][T31131] FAT-fs (loop1): Directory bread(block 69) failed [ 469.929674][T31140] syz.0.14554[31140] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 469.929762][T31140] syz.0.14554[31140] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 469.942690][T31131] FAT-fs (loop1): Directory bread(block 70) failed [ 469.965902][T31131] FAT-fs (loop1): Directory bread(block 71) failed [ 469.980280][T31131] FAT-fs (loop1): Directory bread(block 72) failed [ 469.989131][T31131] FAT-fs (loop1): Directory bread(block 73) failed [ 470.047373][T31131] attempt to access beyond end of device [ 470.047373][T31131] loop1: rw=2049, want=1256, limit=256 [ 470.259857][ T20] Bluetooth: hci0: command 0x1001 tx timeout [ 470.271731][T21183] Bluetooth: hci0: sending frame failed (-49) [ 470.614583][T31214] loop1: detected capacity change from 0 to 40427 [ 470.682882][T31214] F2FS-fs (loop1): invalid crc value [ 470.695812][T31214] F2FS-fs (loop1): Found nat_bits in checkpoint [ 470.731331][T31214] F2FS-fs (loop1): Start checkpoint disabled! [ 470.741899][T31214] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 470.816998][T31233] netlink: 45 bytes leftover after parsing attributes in process `syz.7.14596'. [ 471.015269][T31260] loop3: detected capacity change from 0 to 2048 [ 471.051273][T31266] loop7: detected capacity change from 0 to 512 [ 471.084391][T31260] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 471.097850][T31266] EXT4-fs (loop7): Ignoring removed oldalloc option [ 471.121676][T31260] ext4 filesystem being mounted at /3069/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 471.152437][T31266] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000000,quota,oldalloc,,errors=continue. Quota mode: writeback. [ 471.178583][T31266] ext4 filesystem being mounted at /446/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 471.212192][T31266] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.14612: bg 0: block 217: padding at end of block bitmap is not set [ 471.231440][T31266] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6178: Corrupt filesystem [ 471.342061][T31284] pim6reg0: tun_chr_ioctl cmd 2147767517 [ 472.483562][ T20] Bluetooth: hci0: command 0x1009 tx timeout [ 476.966979][T31307] loop3: detected capacity change from 0 to 256 [ 477.038044][T31307] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 477.073271][T31307] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 477.094857][T31307] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 477.252864][T31333] syz.1.14641[31333] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 477.252975][T31333] syz.1.14641[31333] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 477.315976][T31314] loop7: detected capacity change from 0 to 40427 [ 477.329468][T31341] loop6: detected capacity change from 0 to 512 [ 477.353997][T31345] xt_hashlimit: max too large, truncated to 1048576 [ 477.379468][T31314] F2FS-fs (loop7): invalid crc value [ 477.403874][T31314] F2FS-fs (loop7): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 477.435333][T31341] EXT4-fs (loop6): 1 truncate cleaned up [ 477.441021][T31341] EXT4-fs (loop6): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000003,,errors=continue. Quota mode: none. [ 477.495724][T31314] F2FS-fs (loop7): Start checkpoint disabled! [ 477.515647][T31341] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.14644: bg 0: block 465: padding at end of block bitmap is not set [ 477.532344][T31314] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 477.538583][T31361] netlink: 'syz.3.14651': attribute type 12 has an invalid length. [ 477.541743][T31341] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 477.562216][T31341] EXT4-fs (loop6): This should not happen!! Data will be lost [ 477.562216][T31341] [ 477.572315][T31341] EXT4-fs (loop6): Total free blocks count 0 [ 477.578422][T31341] EXT4-fs (loop6): Free/Dirty block details [ 477.584478][T31341] EXT4-fs (loop6): free_blocks=0 [ 477.589593][T31341] EXT4-fs (loop6): dirty_blocks=15 [ 477.594992][T31341] EXT4-fs (loop6): Block reservation details [ 477.601238][T31341] EXT4-fs (loop6): i_reserved_data_blocks=15 [ 477.629969][T31314] attempt to access beyond end of device [ 477.629969][T31314] loop7: rw=10241, want=45104, limit=40427 [ 477.637631][T31365] loop1: detected capacity change from 0 to 256 [ 477.663340][T12621] attempt to access beyond end of device [ 477.663340][T12621] loop7: rw=2049, want=45112, limit=40427 [ 477.678349][T31365] FAT-fs (loop1): bogus number of FAT sectors [ 477.685276][T31365] FAT-fs (loop1): Can't find a valid FAT filesystem [ 477.695588][T12621] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 13 with error 28 [ 477.728666][T12621] EXT4-fs (loop6): This should not happen!! Data will be lost [ 477.728666][T12621] [ 478.004096][T31392] loop7: detected capacity change from 0 to 128 [ 478.055289][T31396] netlink: 45 bytes leftover after parsing attributes in process `syz.1.14666'. [ 478.071591][T31392] attempt to access beyond end of device [ 478.071591][T31392] loop7: rw=1, want=222, limit=128 [ 478.116363][T31400] loop6: detected capacity change from 0 to 256 [ 478.144350][T31404] netlink: 24 bytes leftover after parsing attributes in process `syz.1.14671'. [ 478.172899][T31408] loop1: detected capacity change from 0 to 256 [ 478.192516][T31408] exfat: Deprecated parameter 'utf8' [ 478.200390][T31408] exfat: Deprecated parameter 'namecase' [ 478.206715][T31408] exfat: Deprecated parameter 'utf8' [ 478.215501][T31400] FAT-fs (loop6): Directory bread(block 64) failed [ 478.222312][T31400] FAT-fs (loop6): Directory bread(block 65) failed [ 478.240334][T31400] FAT-fs (loop6): Directory bread(block 66) failed [ 478.244715][T31408] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x389acbd6, utbl_chksum : 0xe619d30d) [ 478.260441][T31400] FAT-fs (loop6): Directory bread(block 67) failed [ 478.292834][ T30] kauditd_printk_skb: 71 callbacks suppressed [ 478.292852][ T30] audit: type=1400 audit(2000000277.386:20243): avc: denied { setattr } for pid=31407 comm="syz.1.14672" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 478.295146][T31400] FAT-fs (loop6): Directory bread(block 68) failed [ 478.329661][T31400] FAT-fs (loop6): Directory bread(block 69) failed [ 478.336767][T31400] FAT-fs (loop6): Directory bread(block 70) failed [ 478.343751][T31400] FAT-fs (loop6): Directory bread(block 71) failed [ 478.350376][T31400] FAT-fs (loop6): Directory bread(block 72) failed [ 478.357223][T31400] FAT-fs (loop6): Directory bread(block 73) failed [ 478.415257][T31417] device ip6tnl6 entered promiscuous mode [ 478.553131][ T30] audit: type=1326 audit(2000000277.629:20244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31427 comm="syz.0.14682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5a36a3749 code=0x7ffc0000 [ 478.600312][ T30] audit: type=1326 audit(2000000277.629:20245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31427 comm="syz.0.14682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd5a36a3749 code=0x7ffc0000 [ 478.642770][ T30] audit: type=1326 audit(2000000277.657:20246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31427 comm="syz.0.14682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5a36a3749 code=0x7ffc0000 [ 478.669419][ T30] audit: type=1326 audit(2000000277.657:20247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31427 comm="syz.0.14682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5a36a3749 code=0x7ffc0000 [ 478.747680][ T30] audit: type=1326 audit(2000000277.667:20248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31427 comm="syz.0.14682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd5a36a3749 code=0x7ffc0000 [ 478.773802][ T30] audit: type=1326 audit(2000000277.667:20249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31427 comm="syz.0.14682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5a36a3749 code=0x7ffc0000 [ 478.799932][ T30] audit: type=1326 audit(2000000277.667:20250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31427 comm="syz.0.14682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5a36a3749 code=0x7ffc0000 [ 478.824674][ T470] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 478.839862][T31440] netlink: 16 bytes leftover after parsing attributes in process `syz.7.14687'. [ 478.862144][ T20] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 478.873938][ T20] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 478.894693][ T30] audit: type=1326 audit(2000000277.667:20251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31427 comm="syz.0.14682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7fd5a36a3749 code=0x7ffc0000 [ 478.923739][ T20] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 478.935866][T31450] loop7: detected capacity change from 0 to 1024 [ 478.949070][T31453] ------------[ cut here ]------------ [ 478.954853][T31453] trace type BPF program uses run-time allocation [ 478.972389][ T30] audit: type=1326 audit(2000000277.667:20252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31427 comm="syz.0.14682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5a36a3749 code=0x7ffc0000 [ 478.990104][T31453] WARNING: CPU: 1 PID: 31453 at kernel/bpf/verifier.c:11722 check_map_prog_compatibility+0x6cd/0x870 [ 479.014969][ T20] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 479.029315][T31453] Modules linked in: [ 479.037180][T31453] CPU: 1 PID: 31453 Comm: syz.6.14692 Not tainted syzkaller #0 [ 479.046189][T31450] EXT4-fs (loop7): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none. [ 479.055702][T31453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 479.073698][T31453] RIP: 0010:check_map_prog_compatibility+0x6cd/0x870 [ 479.080597][T31453] Code: ee ff 48 c7 c6 a0 f7 47 85 4c 8b 65 d0 e9 fd fc ff ff e8 46 4b ee ff c6 05 54 99 6b 05 01 48 c7 c7 00 f4 47 85 e8 73 69 25 03 <0f> 0b e9 88 fb ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c ac f9 ff [ 479.098299][T31450] ext4 filesystem being mounted at /460/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 479.100487][T31453] RSP: 0018:ffffc90000e27428 EFLAGS: 00010246 [ 479.122212][T31453] RAX: df0defb5d523ab00 RBX: 0000000000000001 RCX: 0000000000080000 [ 479.130216][T31453] RDX: ffffc90005f5b000 RSI: 0000000000002bb8 RDI: 0000000000002bb9 [ 479.138284][T31453] RBP: ffffc90000e27470 R08: dffffc0000000000 R09: ffffed103ee265e8 [ 479.146441][T31453] R10: ffffed103ee265e8 R11: 1ffff1103ee265e7 R12: ffff88814cfe4000 [ 479.154739][T31453] R13: 0000000000000011 R14: dffffc0000000000 R15: ffff88812f343800 [ 479.162833][T31453] FS: 00007fccd2dae6c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 479.172025][T31453] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 479.178733][T31453] CR2: 00007fb02651dd58 CR3: 0000000114131000 CR4: 00000000003506a0 [ 479.186826][T31453] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 479.194919][T31453] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 479.203347][T31453] Call Trace: [ 479.206978][T31453] [ 479.210227][T31453] resolve_pseudo_ldimm64+0x685/0x11d0 [ 479.215859][T31453] ? check_attach_btf_id+0xde0/0xde0 [ 479.221324][T31453] ? __mark_reg_known+0x1b0/0x1b0 [ 479.226373][T31453] ? security_capable+0x87/0xb0 [ 479.231405][T31453] bpf_check+0x2c25/0xf280 [ 479.235968][T31453] ? 0xffffffffa0028000 [ 479.239857][ T20] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 479.248180][T31453] ? is_bpf_text_address+0x177/0x190 [ 479.253886][ T470] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 479.264977][T31453] ? bpf_get_btf_vmlinux+0x60/0x60 [ 479.270318][T31453] ? unwind_get_return_address+0x4d/0x90 [ 479.293668][ T470] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 479.296164][T31461] netlink: 4 bytes leftover after parsing attributes in process `syz.7.14694'. [ 479.305407][T31453] ? stack_trace_save+0xe0/0xe0 [ 479.318263][ T470] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 479.327667][T31453] ? arch_stack_walk+0xee/0x140 [ 479.332656][ T470] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.340922][T31453] ? stack_trace_save+0x98/0xe0 [ 479.354207][ T470] usb 2-1: config 0 descriptor?? [ 479.365904][T31453] ? __stack_depot_save+0x34/0x480 [ 479.376680][T31453] ? __kasan_slab_alloc+0x69/0xf0 [ 479.381988][T31453] ? _find_next_bit+0x1fa/0x200 [ 479.386878][T31453] ? __kasan_kmalloc+0xec/0x110 [ 479.399963][T31453] ? __kasan_kmalloc+0xda/0x110 [ 479.405019][T31453] ? kmem_cache_alloc_trace+0x119/0x270 [ 479.421239][T31453] ? selinux_bpf_prog_alloc+0x51/0x140 [ 479.437478][T31453] ? security_bpf_prog_alloc+0x62/0x90 [ 479.463934][T31453] ? bpf_prog_load+0x97c/0x1550 [ 479.471527][T31453] ? __sys_bpf+0x4c3/0x730 [ 479.480004][T31453] ? __x64_sys_bpf+0x7c/0x90 [ 479.484827][T31453] ? x64_sys_call+0x4b9/0x9a0 [ 479.490039][T31453] ? do_syscall_64+0x4c/0xa0 [ 479.495237][T31453] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 479.502107][T31453] ? check_stack_object+0x81/0x140 [ 479.507681][T31453] ? memset+0x35/0x40 [ 479.511703][T31453] ? bpf_obj_name_cpy+0x193/0x1e0 [ 479.516809][T31453] bpf_prog_load+0x1042/0x1550 [ 479.521724][T31453] ? __kasan_check_write+0x14/0x20 [ 479.527422][T31453] ? map_freeze+0x360/0x360 [ 479.536555][T31453] ? selinux_bpf+0xc7/0xf0 [ 479.541886][T31453] ? security_bpf+0x82/0xa0 [ 479.546599][T31453] __sys_bpf+0x4c3/0x730 [ 479.551240][T31453] ? bpf_link_show_fdinfo+0x310/0x310 [ 479.557777][T31453] ? __kasan_check_write+0x14/0x20 [ 479.563060][T31453] ? switch_fpu_return+0x15d/0x2c0 [ 479.568572][T31453] __x64_sys_bpf+0x7c/0x90 [ 479.573677][T31453] x64_sys_call+0x4b9/0x9a0 [ 479.578223][T31453] do_syscall_64+0x4c/0xa0 [ 479.582990][T31453] ? clear_bhb_loop+0x50/0xa0 [ 479.588064][T31453] ? clear_bhb_loop+0x50/0xa0 [ 479.593072][T31453] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 479.599183][T31453] RIP: 0033:0x7fccd4346749 [ 479.603985][T31453] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 479.624001][T31453] RSP: 002b:00007fccd2dae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 479.633443][T31453] RAX: ffffffffffffffda RBX: 00007fccd459cfa0 RCX: 00007fccd4346749 [ 479.641599][T31453] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 479.649873][T31453] RBP: 00007fccd43caf91 R08: 0000000000000000 R09: 0000000000000000 [ 479.660169][T31453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 479.669289][T31453] R13: 00007fccd459d038 R14: 00007fccd459cfa0 R15: 00007fff059b5a78 [ 479.677316][T31453] [ 479.680841][T31453] ---[ end trace 861fc07503cf9c48 ]--- [ 479.838119][ T20] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 479.882854][ T470] pyra 0003:1E7D:2CF6.002F: item fetching failed at offset 0/7 [ 479.896896][ T470] pyra 0003:1E7D:2CF6.002F: parse failed [ 479.908623][ T470] pyra: probe of 0003:1E7D:2CF6.002F failed with error -22 [ 480.074110][T31497] loop6: detected capacity change from 0 to 40427 [ 480.089657][T31497] F2FS-fs (loop6): fault_injection options not supported [ 480.102583][ T471] usb 2-1: USB disconnect, device number 124 [ 480.107775][T31497] F2FS-fs (loop6): fault_type options not supported [ 480.122902][T31497] F2FS-fs (loop6): invalid crc value [ 480.129840][T31497] F2FS-fs (loop6): Found nat_bits in checkpoint [ 480.168905][T31497] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 480.221515][T31497] attempt to access beyond end of device [ 480.221515][T31497] loop6: rw=10241, want=45104, limit=40427 [ 480.241238][T23117] attempt to access beyond end of device [ 480.241238][T23117] loop6: rw=2049, want=45112, limit=40427 [ 480.265981][ T20] usb 4-1: unable to get BOS descriptor or descriptor too short [ 480.351324][ T20] usb 4-1: config 2 has an invalid interface number: 68 but max is 2 [ 480.359456][ T20] usb 4-1: config 2 has an invalid interface number: 255 but max is 2 [ 480.378736][ T20] usb 4-1: config 2 has no interface number 0 [ 480.391805][ T20] usb 4-1: config 2 has no interface number 2 [ 480.410913][ T20] usb 4-1: config 2 interface 68 has no altsetting 0 [ 480.418013][ T20] usb 4-1: config 2 interface 1 has no altsetting 0 [ 480.426506][ T20] usb 4-1: config 2 interface 255 has no altsetting 0 [ 480.597216][ T20] usb 4-1: New USB device found, idVendor=0582, idProduct=0003, bcdDevice=30.a7 [ 480.612975][ T20] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.623751][ T20] usb 4-1: Product: syz [ 480.627966][ T20] usb 4-1: Manufacturer: syz [ 480.638005][ T20] usb 4-1: SerialNumber: syz [ 480.643809][T31514] loop7: detected capacity change from 0 to 512 [ 480.707662][T31514] EXT4-fs (loop7): invalid first ino: 0 [ 481.021404][T31547] loop6: detected capacity change from 0 to 512 [ 481.062316][ T20] usb 4-1: USB disconnect, device number 117 [ 481.079043][T31547] EXT4-fs (loop6): invalid first ino: 0 [ 481.225953][T31554] loop1: detected capacity change from 0 to 8192 [ 481.239964][T31561] loop6: detected capacity change from 0 to 512 [ 481.247409][T31554] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 481.284496][T31561] EXT4-fs error (device loop6): ext4_orphan_get:1401: inode #15: comm syz.6.14737: iget: bad i_size value: 38620345925642 [ 481.311662][T31561] EXT4-fs error (device loop6): ext4_orphan_get:1406: comm syz.6.14737: couldn't read orphan inode 15 (err -117) [ 481.367212][T31561] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 481.443880][T31569] netlink: 16 bytes leftover after parsing attributes in process `syz.1.14740'. [ 481.474965][T31574] EXT4-fs error (device loop6): ext4_validate_block_bitmap:429: comm syz.6.14737: bg 0: block 5: invalid block bitmap [ 481.499367][T31574] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1520 with error 28 [ 481.512804][T31574] EXT4-fs (loop6): This should not happen!! Data will be lost [ 481.512804][T31574] [ 481.522661][T31574] EXT4-fs (loop6): Total free blocks count 0 [ 481.529337][T31574] EXT4-fs (loop6): Free/Dirty block details [ 481.535334][T31574] EXT4-fs (loop6): free_blocks=0 [ 481.540509][T31574] EXT4-fs (loop6): dirty_blocks=1552 [ 481.545894][T31574] EXT4-fs (loop6): Block reservation details [ 481.552492][T31574] EXT4-fs (loop6): i_reserved_data_blocks=1552 [ 481.638147][T12621] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 1520 with max blocks 32 with error 28 [ 481.653204][T12621] EXT4-fs (loop6): This should not happen!! Data will be lost [ 481.653204][T12621] [ 481.746756][T31586] loop6: detected capacity change from 0 to 2048 [ 481.775411][T31586] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 481.791528][T31586] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 481.807328][T31586] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 481.819706][T31586] EXT4-fs (loop6): This should not happen!! Data will be lost [ 481.819706][T31586] [ 481.829929][T31586] EXT4-fs (loop6): Total free blocks count 0 [ 481.836055][T31586] EXT4-fs (loop6): Free/Dirty block details [ 481.842213][T31586] EXT4-fs (loop6): free_blocks=2415919104 [ 481.848490][T31586] EXT4-fs (loop6): dirty_blocks=32 [ 481.853711][T31586] EXT4-fs (loop6): Block reservation details [ 481.860039][T31586] EXT4-fs (loop6): i_reserved_data_blocks=2 [ 481.878779][ T10] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 1 with error 28 [ 481.900153][ T10] EXT4-fs (loop6): This should not happen!! Data will be lost [ 481.900153][ T10] [ 481.925674][T31608] netlink: 6 bytes leftover after parsing attributes in process `syz.3.14757'. [ 482.008746][ T337] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 482.045062][T31622] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14763'. [ 482.113983][T31635] netlink: 'syz.0.14768': attribute type 1 has an invalid length. [ 482.189429][T31642] loop3: detected capacity change from 0 to 1024 [ 482.217328][T31648] loop7: detected capacity change from 0 to 512 [ 482.258723][T31648] EXT4-fs (loop7): Ignoring removed oldalloc option [ 482.265822][ T337] usb 2-1: Using ep0 maxpacket: 8 [ 482.278257][T31642] EXT4-fs error (device loop3): ext4_map_blocks:630: inode #3: block 2: comm syz.3.14771: lblock 2 mapped to illegal pblock 2 (length 1) [ 482.297370][T31642] EXT4-fs error (device loop3): ext4_map_blocks:630: inode #3: block 48: comm syz.3.14771: lblock 0 mapped to illegal pblock 48 (length 1) [ 482.329961][T31648] ================================================================== [ 482.338084][T31648] BUG: KASAN: use-after-free in __ext4_iget+0x2b8/0x3d80 [ 482.345339][T31648] Read of size 8 at addr ffff88810cc96608 by task syz.7.14775/31648 [ 482.353346][T31648] [ 482.355698][T31648] CPU: 1 PID: 31648 Comm: syz.7.14775 Tainted: G W syzkaller #0 [ 482.364654][T31648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 482.374878][T31648] Call Trace: [ 482.378182][T31648] [ 482.381129][T31648] __dump_stack+0x21/0x30 [ 482.385492][T31648] dump_stack_lvl+0xee/0x150 [ 482.386595][T31642] EXT4-fs error (device loop3): ext4_acquire_dquot:6200: comm syz.3.14771: Failed to acquire dquot type 0 [ 482.390110][T31648] ? show_regs_print_info+0x20/0x20 [ 482.406630][T31648] ? load_image+0x3a0/0x3a0 [ 482.411266][T31648] ? _raw_spin_lock+0x8e/0xe0 [ 482.415984][T31648] print_address_description+0x7f/0x2c0 [ 482.421556][T31648] ? __ext4_iget+0x2b8/0x3d80 [ 482.426305][T31648] kasan_report+0xf1/0x140 [ 482.430753][T31648] ? __ext4_iget+0x2b8/0x3d80 [ 482.435458][T31648] __asan_report_load8_noabort+0x14/0x20 [ 482.441200][T31648] __ext4_iget+0x2b8/0x3d80 [ 482.445733][T31648] ? ext4_init_orphan_info+0x155/0xfa0 [ 482.451307][T31648] ? _raw_write_lock+0x8e/0xe0 [ 482.456104][T31648] ? __proc_create+0x564/0x8d0 [ 482.460884][T31648] ? __kasan_check_write+0x14/0x20 [ 482.466019][T31648] ? ext4_get_projid+0x140/0x140 [ 482.471072][T31648] ? _raw_write_unlock+0x2b/0x60 [ 482.476035][T31648] ? ext4_orphan_file_block_trigger+0x400/0x400 [ 482.482295][T31648] ext4_enable_quotas+0x33b/0x6d0 [ 482.487346][T31648] ext4_fill_super+0x87c3/0x9090 [ 482.490510][T31642] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 482.492315][T31648] ? ext4_mount+0x40/0x40 [ 482.506035][T31648] ? set_blocksize+0x1fc/0x380 [ 482.510830][T31648] ? sb_set_blocksize+0xaa/0xf0 [ 482.513873][T31642] EXT4-fs error (device loop3): ext4_evict_inode:283: inode #11: comm syz.3.14771: mark_inode_dirty error [ 482.515706][T31648] ? ext4_mount+0x40/0x40 [ 482.531460][T31648] mount_bdev+0x2ae/0x3e0 [ 482.535826][T31648] ? ext4_mount+0x40/0x40 [ 482.540194][T31648] ext4_mount+0x34/0x40 [ 482.542284][T31642] EXT4-fs warning (device loop3): ext4_evict_inode:286: couldn't mark inode dirty (err -117) [ 482.544384][T31648] legacy_get_tree+0xed/0x190 [ 482.544412][T31648] ? ext4_errno_to_code+0x160/0x160 [ 482.564555][T31648] vfs_get_tree+0x89/0x260 [ 482.569006][T31648] do_new_mount+0x25a/0xa20 [ 482.570086][T31642] EXT4-fs (loop3): 1 orphan inode deleted [ 482.573556][T31648] path_mount+0x675/0x1020 [ 482.583706][T31648] ? user_path_at_empty+0x161/0x1c0 [ 482.585640][ T10] EXT4-fs error (device loop3): ext4_map_blocks:630: inode #3: block 1: comm kworker/u4:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 482.588932][T31648] __se_sys_mount+0x318/0x380 [ 482.607677][T31648] ? __x64_sys_mount+0xd0/0xd0 [ 482.607702][T31642] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,grpid,nodiscard,stripe=0x0000000000000004,noauto_da_alloc,,errors=continue. Quota mode: none. [ 482.612468][T31648] __x64_sys_mount+0xbf/0xd0 [ 482.636951][T31648] x64_sys_call+0x6bf/0x9a0 [ 482.640693][ T10] EXT4-fs error (device loop3): ext4_release_dquot:6236: comm kworker/u4:1: Failed to release dquot type 0 [ 482.641476][T31648] do_syscall_64+0x4c/0xa0 [ 482.657396][T31648] ? clear_bhb_loop+0x50/0xa0 [ 482.662109][T31648] ? clear_bhb_loop+0x50/0xa0 [ 482.666814][T31648] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 482.673000][T31648] RIP: 0033:0x7f6bd4950eea [ 482.677621][T31648] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 482.697379][T31648] RSP: 002b:00007f6bd33b6e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 482.705837][T31648] RAX: ffffffffffffffda RBX: 00007f6bd33b6ef0 RCX: 00007f6bd4950eea [ 482.706317][T31657] loop6: detected capacity change from 0 to 40427 [ 482.713927][T31648] RDX: 0000200000000080 RSI: 0000200000000000 RDI: 00007f6bd33b6eb0 [ 482.713959][T31648] RBP: 0000200000000080 R08: 00007f6bd33b6ef0 R09: 0000000000200008 [ 482.713975][T31648] R10: 0000000000200008 R11: 0000000000000246 R12: 0000200000000000 [ 482.713998][T31648] R13: 00007f6bd33b6eb0 R14: 0000000000000504 R15: 0000200000000340 [ 482.714025][T31648] [ 482.714033][T31648] [ 482.714038][T31648] Allocated by task 31039: [ 482.714055][T31648] __kasan_slab_alloc+0xbd/0xf0 [ 482.714084][T31648] slab_post_alloc_hook+0x4f/0x2b0 [ 482.738021][T31657] F2FS-fs (loop6): fault_injection options not supported [ 482.745495][T31648] kmem_cache_alloc+0xf7/0x260 [ 482.745528][T31648] f2fs_alloc_inode+0x26/0x330 [ 482.790617][T31648] iget_locked+0x16c/0x7e0 [ 482.794095][T31657] F2FS-fs (loop6): fault_type options not supported [ 482.795064][T31648] f2fs_iget+0x55/0x5230 [ 482.805908][T31648] f2fs_fill_super+0x3a20/0x6d10 [ 482.810864][T31648] mount_bdev+0x2ae/0x3e0 [ 482.815206][T31648] f2fs_mount+0x34/0x40 [ 482.819361][T31648] legacy_get_tree+0xed/0x190 [ 482.824042][T31648] vfs_get_tree+0x89/0x260 [ 482.828459][T31648] do_new_mount+0x25a/0xa20 [ 482.832968][T31648] path_mount+0x675/0x1020 [ 482.837381][T31648] __se_sys_mount+0x318/0x380 [ 482.842060][T31648] __x64_sys_mount+0xbf/0xd0 [ 482.847007][T31648] x64_sys_call+0x6bf/0x9a0 [ 482.851532][T31648] do_syscall_64+0x4c/0xa0 [ 482.856058][T31648] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 482.861964][T31648] [ 482.864289][T31648] Last potentially related work creation: [ 482.870377][T31648] kasan_save_stack+0x3a/0x60 [ 482.875176][T31648] __kasan_record_aux_stack+0xd2/0x100 [ 482.880731][T31648] kasan_record_aux_stack_noalloc+0xb/0x10 [ 482.886539][T31648] call_rcu+0x105/0xfe0 [ 482.890701][T31648] evict+0x7da/0x870 [ 482.894596][T31648] iput+0x635/0x7c0 [ 482.898490][T31648] f2fs_fill_super+0x5493/0x6d10 [ 482.903428][T31648] mount_bdev+0x2ae/0x3e0 [ 482.907761][T31648] f2fs_mount+0x34/0x40 [ 482.911928][T31648] legacy_get_tree+0xed/0x190 [ 482.916776][T31648] vfs_get_tree+0x89/0x260 [ 482.921232][T31648] do_new_mount+0x25a/0xa20 [ 482.925758][T31648] path_mount+0x675/0x1020 [ 482.930176][T31648] __se_sys_mount+0x318/0x380 [ 482.934867][T31648] __x64_sys_mount+0xbf/0xd0 [ 482.939459][T31648] x64_sys_call+0x6bf/0x9a0 [ 482.943966][T31648] do_syscall_64+0x4c/0xa0 [ 482.948387][T31648] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 482.954291][T31648] [ 482.956613][T31648] Second to last potentially related work creation: [ 482.963193][T31648] kasan_save_stack+0x3a/0x60 [ 482.967873][T31648] __kasan_record_aux_stack+0xd2/0x100 [ 482.973332][T31648] kasan_record_aux_stack_noalloc+0xb/0x10 [ 482.979144][T31648] call_rcu+0x105/0xfe0 [ 482.983300][T31648] evict+0x7da/0x870 [ 482.987202][T31648] evict_inodes+0x5de/0x650 [ 482.991715][T31648] generic_shutdown_super+0x96/0x330 [ 482.997097][T31648] kill_block_super+0x7f/0xf0 [ 483.001783][T31648] kill_f2fs_super+0x2e7/0x390 [ 483.006551][T31648] deactivate_locked_super+0xa0/0x100 [ 483.012023][T31648] deactivate_super+0xaf/0xe0 [ 483.016703][T31648] cleanup_mnt+0x446/0x500 [ 483.021127][T31648] __cleanup_mnt+0x19/0x20 [ 483.025548][T31648] task_work_run+0x127/0x190 [ 483.030140][T31648] exit_to_user_mode_loop+0xd0/0xe0 [ 483.035339][T31648] exit_to_user_mode_prepare+0x87/0xd0 [ 483.040804][T31648] syscall_exit_to_user_mode+0x1a/0x30 [ 483.046268][T31648] do_syscall_64+0x58/0xa0 [ 483.050685][T31648] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 483.056584][T31648] [ 483.058904][T31648] The buggy address belongs to the object at ffff88810cc96100 [ 483.058904][T31648] which belongs to the cache f2fs_inode_cache of size 1424 [ 483.073474][T31648] The buggy address is located 1288 bytes inside of [ 483.073474][T31648] 1424-byte region [ffff88810cc96100, ffff88810cc96690) [ 483.086926][T31648] The buggy address belongs to the page: [ 483.092552][T31648] page:ffffea0004332400 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88810cc96100 pfn:0x10cc90 [ 483.104100][T31648] head:ffffea0004332400 order:3 compound_mapcount:0 compound_pincount:0 [ 483.112440][T31648] flags: 0x4000000000010200(slab|head|zone=1) [ 483.118636][T31648] raw: 4000000000010200 0000000000000000 dead000000000122 ffff8881081f6a80 [ 483.127222][T31648] raw: ffff88810cc96100 0000000080150010 00000001ffffffff 0000000000000000 [ 483.135801][T31648] page dumped because: kasan: bad access detected [ 483.142236][T31648] page_owner tracks the page as allocated [ 483.147950][T31648] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0x1d2050(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL|__GFP_RECLAIMABLE), pid 551, ts 34581120187, free_ts 0 [ 483.168537][T31648] post_alloc_hook+0x192/0x1b0 [ 483.173352][T31648] prep_new_page+0x1c/0x110 [ 483.177869][T31648] get_page_from_freelist+0x2cc5/0x2d50 [ 483.183421][T31648] __alloc_pages+0x18f/0x440 [ 483.188022][T31648] new_slab+0xa1/0x4d0 [ 483.192094][T31648] ___slab_alloc+0x381/0x810 [ 483.196691][T31648] __slab_alloc+0x49/0x90 [ 483.201025][T31648] kmem_cache_alloc+0x138/0x260 [ 483.205881][T31648] f2fs_alloc_inode+0x26/0x330 [ 483.210741][T31648] iget_locked+0x16c/0x7e0 [ 483.215160][T31648] f2fs_iget+0x55/0x5230 [ 483.219407][T31648] f2fs_fill_super+0x3a20/0x6d10 [ 483.224351][T31648] mount_bdev+0x2ae/0x3e0 [ 483.228782][T31648] f2fs_mount+0x34/0x40 [ 483.232942][T31648] legacy_get_tree+0xed/0x190 [ 483.237712][T31648] vfs_get_tree+0x89/0x260 [ 483.242133][T31648] page_owner free stack trace missing [ 483.247515][T31648] [ 483.249837][T31648] Memory state around the buggy address: [ 483.255466][T31648] ffff88810cc96500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 483.263526][T31648] ffff88810cc96580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 483.271675][T31648] >ffff88810cc96600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 483.279733][T31648] ^ [ 483.284058][T31648] ffff88810cc96680: fb fb fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 483.292120][T31648] ffff88810cc96700: fc fc 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 483.300183][T31648] ================================================================== [ 483.308239][T31648] Disabling lock debugging due to kernel taint [ 483.323630][T31648] EXT4-fs warning (device loop7): ext4_enable_quotas:6452: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 483.345792][T31648] EXT4-fs (loop7): mount failed [ 483.351743][T31657] F2FS-fs (loop6): invalid crc value [ 483.371365][ T8] EXT4-fs error (device loop3): ext4_map_blocks:630: inode #3: block 1: comm kworker/u4:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 483.371919][T31657] F2FS-fs (loop6): Found nat_bits in checkpoint [ 483.392139][ T337] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 483.403408][ T8] EXT4-fs error (device loop3): ext4_release_dquot:6236: comm kworker/u4:0: Failed to release dquot type 0 [ 483.403671][ T337] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 483.425188][ T283] EXT4-fs error (device loop3): __ext4_get_inode_loc:4358: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 483.460492][ T283] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 483.481799][ T283] EXT4-fs error (device loop3): ext4_quota_off:6506: inode #3: comm syz-executor: mark_inode_dirty error [ 483.507388][T31657] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 483.557108][T23117] attempt to access beyond end of device [ 483.557108][T23117] loop6: rw=2049, want=45112, limit=40427 [ 483.612013][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 483.633409][ T337] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 483.642511][ T337] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.650585][ T337] usb 2-1: Product: syz [ 483.654860][ T337] usb 2-1: Manufacturer: syz [ 483.659457][ T337] usb 2-1: SerialNumber: syz [ 483.986195][ T337] cdc_ncm 2-1:1.0: bind() failure [ 483.992450][ T337] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 483.999356][ T337] cdc_ncm 2-1:1.1: bind() failure [ 484.008235][ T337] usb 2-1: USB disconnect, device number 125