last executing test programs: 7.534607357s ago: executing program 4 (id=863): syz_mount_image$minix(&(0x7f0000000200), &(0x7f0000000040)='./file2\x00', 0x120080c, &(0x7f0000000600)=ANY=[@ANYRES8=0x0, @ANYBLOB="5c5b6d2f1f419c61b6f3a76f32213d81167bb6495d4720c6f453741a9fa3083f051141a11d93d478b90573c205891ffb07d98fee0b7dd49629a7d25a58aff2fca3240f1aea0f923cf374ec93004dfb883cd9898a3565e4052f0a61b1de5c264cde06ea3d36a920c37ff783375c0d55a09aa558d7bf52d52761c4c999941df9c17655c8e0cbd1e2f1b145b7f0d9e83cfbf6fc5d2f86085d72431645c1ace7d9c8d277e56978fe4e3e", @ANYBLOB="7665b56bff7d13a2d819dd99d7b7fb44d89826e61bdd16b72b7b4b28466b2dd5276d640c15e37c725cc51cf9ccb08269fbbcf21642cf3700d39319aedab841312becd7508764407fc111e219d48aff23cec7bff40e31ce41ce552026be34aef66f44ef30690a7b52e1dd15b63c9d5de5b8fd41279c39eaa7c3660cdf0466414f5b966df46c5dd09f5d724a4d956293d161bf6a0aab3287558cfa91db1a051d07", @ANYRES32, @ANYRESHEX, @ANYRES8, @ANYRESHEX], 0x9, 0x1f3, &(0x7f0000000780)="$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") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) 7.260580443s ago: executing program 4 (id=864): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() r1 = syz_io_uring_setup(0x4f6, &(0x7f0000000380)={0x0, 0x80fd, 0x10, 0x4, 0x2cf}, &(0x7f0000000300)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, 0x0, 0x0, 0x4) socket$l2tp6(0xa, 0x2, 0x73) syz_io_uring_submit(r2, r3, 0x0) io_uring_enter(r1, 0x47bc, 0xf5, 0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x1a000, 0x0) r6 = io_uring_setup(0x115c, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0x3, 0x117}) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f0000000640)=[{0x0}], 0x178) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4ff02"], 0x0}, 0x94) io_uring_register$IORING_REGISTER_FILES(r6, 0x1e, &(0x7f0000000000)=[r6], 0x1) 6.104362311s ago: executing program 4 (id=877): syz_usb_connect(0x0, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0x46, 0x43, 0xfa, 0x20, 0x14aa, 0x301, 0xb213, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x83, 0x2, 0x0, 0xc8, 0xe, 0x30}}]}}]}}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x4370, 0x5}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) setfsuid(0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) 3.593309725s ago: executing program 4 (id=890): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903000000092100000001222200090581030800000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_enter\x00', r2}, 0x10) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') 3.454219725s ago: executing program 2 (id=892): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x40840) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, 0x0, 0x20004000) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg$inet(r1, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) 3.102360274s ago: executing program 2 (id=897): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x20, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x10000, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0, 0x104) r4 = fanotify_init(0x200, 0x0) fanotify_mark(r4, 0x201, 0x4800003e, r3, 0x0) lsetxattr$security_capability(&(0x7f0000000140)='./file0/file1\x00', &(0x7f0000000180), 0x0, 0x0, 0x1) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r5, 0x29, 0x13, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000300)=ANY=[], 0xe0}], 0x1}, 0x0) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) getsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000000100), &(0x7f0000000140)=0x8) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, 0x0) ioctl$UFFDIO_COPY(r6, 0xc028aa03, &(0x7f0000000000)={&(0x7f000067d000/0x2000)=nil, &(0x7f000053d000/0x1000)=nil, 0x2000}) ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file3\x00', 0xcc0, &(0x7f00000001c0)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6865617274626561743d6e6f6e652c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c636f686572656e63793d62756666657265642c6572726f72733d636f6e74696e75652c757365725f78617474722c626172726965723d30303030303030303030303030303032363131352c6469725f726573765f6c6576656c3d30303030303030303030303030303030303030362c696e74722c6a6f75726e616c5f6173796e635f636f6d6d69742c00535d4e036013ec9e6e7ecdee3849b40884b95e94f35cec9600cd19beb0"], 0x1, 0x4443, &(0x7f0000004480)="$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") 2.618930457s ago: executing program 1 (id=899): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e4, &(0x7f00000016c0)="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") 2.556036217s ago: executing program 1 (id=900): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000040)={0x3}) 2.555769964s ago: executing program 1 (id=901): close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r4, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {}, {0xc, 0x14, 'syz0\x00'}}}, 0x28}, 0x1, 0x0, 0x0, 0x890}, 0x840) 2.292352118s ago: executing program 3 (id=902): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x31, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) 2.263776993s ago: executing program 3 (id=904): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={0xd8, 0x0, 0xfffffffffffffff9, [{{0x5, 0x2, 0x3, 0x2, 0x5, 0x8, {0x6, 0x9, 0x0, 0xff, 0x3, 0x0, 0x7fffffff, 0x57, 0x3, 0x8000, 0x3ff, 0x0, r2, 0x4, 0x4}}, {0x20000000000000, 0x537, 0x2b, 0x9, ':-(\\\xc9\x80\x00\x00\x00\xc3\x00\x00\xf39}\xd8mM\x92\x8d$\xd3\xa4a\xb6\x02E\x89\x85V\xc6\x00\x00\x00\x00\x00\x00+\x13;\x00\x00\x00'}}]}, 0x0, 0x0, 0x0}) getdents64(r3, &(0x7f0000000100)=""/134, 0x86) getdents64(r3, 0x0, 0xc0) getdents64(r3, 0x0, 0x3705) syz_fuse_handle_req(r0, &(0x7f0000010ec0)="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", 0x2000, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x10, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0}) 2.220099467s ago: executing program 2 (id=905): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x3}, 0x6) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) syz_mount_image$udf(&(0x7f0000000500), &(0x7f0000000080)='./file0\x00', 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="6e6f6164696e6963622c6e6f7374726963742c6d6f64653d30303030303030303030303030303030303030303030342c7569643d666f726765742c6e6f6164696e6963622c756d61736b3d30303030303030303030303030303034303030323030302c6c617374626c6f636b3d303030ea193030303030303030303030303031332c756e64656c6574652c706172746974696f6e3d30303030303030303030303030303030303030352c00"], 0x43, 0xc11, &(0x7f0000001dc0)="$eJzs3V1oXOl5B/DnnSOtRto00WYTb9Jm04GUxCi18VdsBZcgZxW1AccbIit0r6LRh51h5ZGR5MabtkFtSQu9Cd2b0psimi4t5KJX3V5WabaQUAol5CK9KAiaLHvRC10ECi0bhXPmHWlky7ayXlvS7u+3zP7PnHnO+P0YnzkCvzoBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAER89nOXTp1OB90KAOBxujL5pVNnff8DwLvKVT//AwAAAAAAAAAAAADAYZeiiGORYujVzTRdPe+oX261b92eGp/Y+7DBFClqUVT15aN++szZc586f2G0m/c//u324Xh+8uqlxnOLN24uzS8vz881ptqt2cW5+X2/w8Mef6eRagAaN168NXft2nLjzMmzu16+Pfz6wJPHhi9eOHF+tFs7NT4xMdlT09f/lv/0u9xrhccTUUQzUrw5/EZqRkQtHn4sHvDZedQGq06MVJ2YGp+oOrLQarZXyhdTLVfVIho9B411x+gxzMVDGYtYLZtfNnik7N7kzeZSc2ZhvvHF5tJKa6W12E61TmvL/jSiFqMpYi0iNgbufrv+KOKjkeLlU5tpJiKK7jh8sloY/OD21B5BH/ehbGejP2KtdgTm7BAbiCKuRIqfvXY8Zssxy4/4eMQXynw14pUyPxORyg/GuYif7vE54mjqiyL+PVIsps00V50PuueVy19ufL59bbGntnteOfLfD4/TIT831aOImeqMv5ne+sUOAAAAAAAAAAAAAAAAAG+3wSji25HiT579vWpdcVTr0t93cfQ9L/x275rxZx7wPmXtyYhYre1vTW5/XjqcauV/j6Bj7Es9ivhGXv/3RwfdGAAAAAAAAAAAAAAAAAAAgHe1Il6IFF85cTytRe89xVvt642rzZmFzl1hu/f+7d4zfWtra6uROjmWczrnas61nOs5N3JGLR+fcyzndM7VnGs513Nu5IwiH59zLOd0ztWcaznXc27kjL58fM6xnNM5V3Ou5VzPuZEzDsm9ewEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3klqUcTPI8W3vraZIkXEWMR0dHJ94KBbBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACU6qmIk5Fi/YV69XytFnE1In6+tbXVfUTEZpkP66D7CgAAAAAAAAAAAAAAAAAAAIdWKuJjkeLp/9tMjYi4Pfz6wJPHhi9eOHF+tIgiUlnSW//85NVLjecWb9xcml9enp9rTLVbs4tz8/v94+qXW+1bt6fGJx5JZx5o8BG3f7D+3OLNl5Za17+6sufrQ/VLM8srS83ZvV+OwahFTPfuGakaPDU+UTV6odVsV4em2j0aWIsY229nAAAAAAAAAAAAAAAAAAAAODSGUhGfixQ/+a9zqbtuvK+z5v9XOs+K7dpX/mDndwEs3JFdvb8/YD/bab8NHakW3jemxicmJnt29/XfXVq2KaUinokUn3j5Q9V6+BRDe66NL+veW9bdOJfrhn+trFvdVVUfmRqfaFxZbJ+4tLCwONtcac4szDcmbzZn9/2LAwAAAAAAAAAAAAAAAAAAAOA+hlIRP4oU//P3/5G6953P6//7Os961v//VrWEvlJPu3Nbtbb/vdXa/s72+y6ODn302XvtfxTr/8s2pVTENyPF2R99qLqffnf9//QdtWXdn0WKN579SK6rPVHWNbvd6bzjtdbC/Kmy9q8jxa+/2a2NqvZ6rn16p/Z0WTsYKf5yc3ftV3PtB3Zqz5S1xyPF9/5779oP7tSeLWt/Ein+6e8a3dqhsvb3c+2xndqTs4sLcw8a1nL+vxMp/vbK76Run+85/z2//2H1jtx215zff/vtmv/hnn2reV7/NM9/8wHzfz5SfKf+kVzXGfuZ/PpT1f935v8TkeI//2137bVc+/6d2tP77dZBK+f/25Hiu3/14+0+5/nPI7szQ73z/6t9u3P7U3JA8/9Uz77h3K7ZX3Is3o2WX/r6i82FhfklGzZs2NjeOOgzE49D+f3/55Hi/48VqXsdk7//39N5tnP997/f2Pn+v3hHbjug7//39+y7mK9a+vsi6is3bvY/E1FffunrJ1o3mtfnr8+3z5w+9elPnz996vT5/ie6F3c7W/seu3eCcv5/ECl++A8/3P45Zvf1397X/0N35LYDmv+ne/u067pm30PxrlTO/99Eiqc+++Ptnzfvd/3f/fn/+Md25/bfvwOa/w/07BvO7Wr9kmMBAAAAAAAAAABwlAylIv4iUvzuH/9m6q4h2s+//5u7I7cd0L//Otazb+4xrWvY9yADABwi5fXfByPFP299f3st9+7rv/iNbm3v9d+9HIb7/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwFGXoog/jBRDr26m9YHyeUf9cqt96/bU+MTehw2mSFGLoqovH/XTZ86e+9T5C6PdvP/xb7cPx/OTVy81nlu8cXNpfnl5fq4x1W7NLs7N7/sdHvb4O41UA9C48eKtuWvXlhtnTp7d9fLt4dcHnjw2fPHCifOj3dqp8YmJyZ6avv63/KffJd1j/xNRxPcjxZvDb6TvDkTU4uHH4gGfnUdtsOrESNWJqfGJqiMLrWZ7pXwx1XJVLaLRc9BYd4wew1w8lLGI1bL5ZYNHyu5N3mwuNWcW5htfbC6ttFZai+1U67S27E8jajGaItYiYmPg7rfrjyK+GSlePrWZ/mUgouiOwyevTH7p1NkHt6f2CPq4D2U7G/0Ra7UjMGeH2EAU8Y+R4mevHY/vDUT0RecRH4/4QpmvRrxS5mciUvnBOBfx0z0+RxxNfVHEuUixmDbTawPl+aB7Xrn85cbn29cWe2q755Uj//3wOB3yc1M9ivhBdcbfTP/q7zUAAAAAAAAAAAAAAADAIVLEWqT4yonjqVofvL2muNW+3rjanFnoLOvrrv3rrpne2traaqROjuWczrmacy3nes6NnFHLx+ccyzmdczXnWs71nBs5o8jH5xzLOZ1zNedazvWcGzmjLx+fcyzndM7VnGs513Nu5IxDsnYPAAAAAAAAAAAAAAAAAAB4Z6lFUd3F/Vtf20xbA537S09HJ9fdD/Qd7xcBAAD//0kCdPc=") fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) socket(0x28, 0x5, 0x0) openat(0xffffffffffffffff, &(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', 0x600100, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6a72c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) r5 = openat$random(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) ioctl$RNDADDTOENTCNT(r5, 0x40045201, &(0x7f0000000000)=0x2) 2.167957297s ago: executing program 0 (id=906): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newsa={0x13c, 0x10, 0x713, 0x70bd28, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@local, 0x4e23, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0xe831cb58833da74d, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x3c}, @in=@rand_addr=0x64010100, {0x0, 0x0, 0x8, 0x100000001, 0x6, 0x0, 0x0, 0xffffdffffffffffd}, {0x0, 0x0, 0x2, 0xfffffffffffffffc}, {0xc}, 0x70bd2d, 0x4, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 2.161926972s ago: executing program 0 (id=907): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x40840) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, 0x0, 0x20004000) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg$inet(r1, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) 2.077926147s ago: executing program 0 (id=908): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x46, &(0x7f0000000040)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x2, 0xb, 0x38, 0x6a, 0x0, 0x88, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x35}}, @redirect={0x5, 0x2, 0x0, @remote, {0x5, 0x4, 0x3, 0x1f, 0x501, 0x66, 0x7ef, 0x48, 0x1, 0x12, @remote, @private=0xa010100}, "71a11a3882e4f61c"}}}}}, 0x0) 2.03626932s ago: executing program 0 (id=909): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c000000090601080000000000000000050000000900020073797a3100000000050001000700000024000780060004404e2300000c000180080001400a0101010c00194000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 2.034653268s ago: executing program 0 (id=910): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x20, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x10000, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0, 0x104) r4 = fanotify_init(0x200, 0x0) fanotify_mark(r4, 0x201, 0x4800003e, r3, 0x0) lsetxattr$security_capability(&(0x7f0000000140)='./file0/file1\x00', &(0x7f0000000180), 0x0, 0x0, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, 0x0) ioctl$UFFDIO_COPY(r5, 0xc028aa03, 0x0) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file3\x00', 0xcc0, &(0x7f00000001c0)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6865617274626561743d6e6f6e652c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c636f686572656e63793d62756666657265642c6572726f72733d636f6e74696e75652c757365725f78617474722c626172726965723d30303030303030303030303030303032363131352c6469725f726573765f6c6576656c3d30303030303030303030303030303030303030362c696e74722c6a6f75726e616c5f6173796e635f636f6d6d69742c00535d4e036013ec9e6e7ecdee3849b40884b95e94f35cec9600cd19beb0"], 0x1, 0x4443, &(0x7f0000004480)="$eJzs3c9rHG0dAPDvbPL6JvXta9P2UEFwwYKiEpKe1BRM07Rp0sZKtUW8bDfJto1usiXZiIeC8VbwJHgQD0XBW04lB6/1T/DisZ4LKngRhGJkd2fTzOwu2ZZsYvt+PodM5vm9+53n2WcPs1NI1R+tbhZXN4vl9WJt+cHmpeLPatWttUoUjknX/j86vv7pzyCuk5O+9j7Lbl+9/oN7lyL+vPLXV3t7e3vRMBwtP4qMyQP///tfT5YPHtsK2SrNdmOgfhwR5zvG1TDUeAl/ikgi4kqaNpMeRyPidLTy7j351f3iEY3m+cvK5dLrxae7UxcXdp7t9n7tScTvql/85sO1v39laOpvXz+i7gEAAAAAAAAAAAAAAAAAeM/N3bl99/sTk/EiieGdpPN+3bn0mN4fm7+9N/aOzJeP5wUDAAAAAAAAAAAAAAAAAADA/6E39/8Xk7Nd7v+fTY/TPervfXfwY2Rw5r93e/baxGT6/PekI/9badI/rgzFWJfnvuef/34lV7/78987+3lX7fG1+z0TSWE8c14ojI9H/CF98PuF5FShWtusf+NBbWt95ciG8d7Kxr/18x6Z6KS/+NFv/Gdy7bfjn0T8czCv4FzH1dQ4v390l9gHLRv/oZ7l/vjLpK/4X83V6z7/j9K5wTb/gcvGf7iZNnqwwHRrAWjE/9fDh8d/Ntf+oOL/aUQUk8ZYi5kVoLGHaaT32q+QlY3/R820zNKZvpG95v9/cvG/lmv/OOZ/t/V/O/9BRFfZ+H+umTaSKfFm/o8VDp//13Ptn0T8G+Pf9vnfl2z8P24lDmeKNN/Jftf/uVz7g4r/3UI6zk+TzBWwk7TSi4Po9AOUjf9IR/6b73+FvvZ/N3L1j+v7X7vf9ve/9vL/taT1/Y/usvEf7Vmu3/k/n6s36PV/urn/411l43+qmba/d977RXNGxVvEfyHX/qDi39yVjLTj31gExprp//24lf57+7++ZOP/+VZi5ldet5t/m/u/5PD9/81c+yex/2uMf7vjl2rpJhv/T3qWa8T/L318/t/K1Rt8/CMm7PXfWTb+p3uWa87/kcPjv5irN+j4f3WQjQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC8B2bS45lICuOZ80JhfDzianp+IU4lS+WV0lK1tvzTzYjZNL0YZ5OH1dpSuVpaXa+tVErlarW2HHEtzT8fI8lmtVYvrZUfX99vazR5VClv1Jcq5XpEzKXpX4rT7baWVutr5ccRcWM/7wuF2sbjR+X10srqxncmJiYmYn5/DGNJ5ef1ynq91XsrN2Jhv+6Z5MDgmtk398fySfKT2tbGernaTL91oE61tlyuHqizmOb9JsaS+sbW+nK5XilVaw/b/Z2k6fQ4O3/nh3duTXbk309ax5njHRYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAb+nF1Ld/GxHDrbNCREy3/0m6lX/+snK59Hrx6e7UxYWdZ7uvepUDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/scOHAgAAAAAAPm/NkJVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVUVdukYpYEgCgPwm7FQO49htex2tiuKaOGK4An0GB5Gj+IlvEOKFGlThEAyC2GzC9sk1fc1D+Zn5j2YBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPM8vXcfb3UTkeJqcxnx9/W/OMxfSv25H79/cYYZOZ3n1+7hsW7Kv6ej/K4cLdu8S9er788Yqb3fwZ4M92mv73M9OdfUvk3N1/e9iZSriGhLfptyrqp5bwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwZQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCwAAAAAIMzfOoq+DQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBXAAAA//8kRCHo") 1.437860538s ago: executing program 1 (id=911): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000015000504e1ff4319918e00352d"], 0x2c}}, 0x60040050) 1.371980673s ago: executing program 1 (id=912): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180500002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001900010000000000000000001c140000fe000001000000000800", @ANYRES64=r1], 0x24}}, 0x4000000) 1.371620168s ago: executing program 1 (id=913): bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0, @ANYRES64=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000008002000010100"/28], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x40) socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r1, 0x0, 0xffdd) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x2000) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000000100)={0x2, 0x2, 0x0, 0xc2c6d7ed92c4ca45, 0x4}) syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e21, 0x63, @loopback, 0x7}, 0x1c) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/fib_triestat\x00') preadv(r6, &(0x7f0000000080)=[{&(0x7f0000000040)=""/46, 0x2e}], 0x1, 0x0, 0x4) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r7, 0x84, 0x21, &(0x7f00000001c0), &(0x7f0000000240)=0x4) shutdown(0xffffffffffffffff, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x54}}, 0x0) 1.31114183s ago: executing program 3 (id=914): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x31, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) 1.281965858s ago: executing program 2 (id=915): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(0xffffffffffffffff, 0x0, 0x18) symlinkat(&(0x7f00000001c0)='./file0\x00', r3, &(0x7f0000000140)='./file0\x00') openat2(r3, &(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x8}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x2, 0x300) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000000000)={0x10, 0x0, 0x2ddfdbff, 0x2ffffffff}, 0xc) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000000000)={0x10, 0x0, 0x2ddfdbff, 0x2ffffffff}, 0xc) 1.118801145s ago: executing program 3 (id=916): openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0xafa1, 0x800, 0x0, 0x11f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 850.851525ms ago: executing program 0 (id=917): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_io_uring_setup(0x50cf, &(0x7f0000000000)={0x0, 0xfffffffc, 0x40000, 0x2, 0x333}, &(0x7f0000000080), &(0x7f0000ff4000)) 683.986129ms ago: executing program 3 (id=918): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x40840) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, 0x0, 0x20004000) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg$inet(r1, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) 628.468761ms ago: executing program 3 (id=919): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000070000000100010008"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e00000004000000080000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='contention_end\x00', r1, 0xe4}, 0x18) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x1, 0x800001, 0x0, 0x0, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mlock2(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x1) mincore(&(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x0) 543.085721ms ago: executing program 4 (id=920): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c000000090601080000000000000000050000000900020073797a3100000000050001000700000024000780060004404e2300000c000180080001400a0101010c00194000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 470.725875ms ago: executing program 4 (id=921): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000480), r0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x24, r1, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x4001}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 76.327806ms ago: executing program 2 (id=922): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0x2, 0x4e24, @empty}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x8c935e316d0f0eb3, &(0x7f0000e68000)={0x2, 0x4e23, @remote}, 0x10) 0s ago: executing program 2 (id=923): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x103000) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$invalidate(0x15, r1) keyctl$read(0xb, r1, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x4e22, 0xfffffffa, @mcast2, 0x1}, 0x1c) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000400)={{0x1, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x704, &(0x7f0000000680)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x46f, &(0x7f0000000bc0)="$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") kernel console output (not intermixed with test programs): entered allmulticast mode [ 42.994434][ T6785] veth1_vlan: entered allmulticast mode [ 42.994566][ T6785] veth0_vlan: entered allmulticast mode [ 42.994755][ T6785] vlan0: entered allmulticast mode [ 42.995358][ T6785] vlan1: entered allmulticast mode [ 42.995500][ T6785] macvlan0: entered allmulticast mode [ 42.995626][ T6785] macvlan1: entered allmulticast mode [ 42.995780][ T6785] ipvlan0: entered allmulticast mode [ 42.995826][ T6785] ipvlan1: entered allmulticast mode [ 42.995858][ T6785] veth1_macvtap: entered allmulticast mode [ 42.995988][ T6785] veth0_macvtap: entered allmulticast mode [ 42.996122][ T6785] macvtap0: entered allmulticast mode [ 42.996254][ T6785] macsec0: entered allmulticast mode [ 42.996379][ T6785] geneve0: entered allmulticast mode [ 42.996504][ T6785] geneve1: entered allmulticast mode [ 42.996635][ T6785] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 42.996775][ T6785] netdevsim netdevsim4 netdevsim1: entered allmulticast mode [ 42.997058][ T6785] netdevsim netdevsim4 netdevsim2: entered allmulticast mode [ 42.997198][ T6785] netdevsim netdevsim4 netdevsim3: entered allmulticast mode [ 42.997342][ T6785] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 42.997483][ T6785] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 43.314596][ T6804] syzkaller0: entered promiscuous mode [ 43.314634][ T6804] syzkaller0: entered allmulticast mode [ 44.565008][ T6827] loop3: detected capacity change from 0 to 1024 [ 44.567610][ T6827] EXT4-fs: Ignoring removed i_version option [ 44.581214][ T6827] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 44.609803][ T6827] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.52: Invalid block bitmap block 0 in block_group 0 [ 44.610769][ T6827] Quota error (device loop3): write_blk: dquota write failed [ 44.610813][ T6827] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 44.611005][ T6827] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.52: Failed to acquire dquot type 0 [ 44.612604][ T6827] EXT4-fs error (device loop3): ext4_free_blocks:6696: comm syz.3.52: Freeing blocks not in datazone - block = 0, count = 4096 [ 44.614004][ T6827] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.52: Invalid inode bitmap blk 0 in block_group 0 [ 44.614640][ T6827] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 44.614987][ T6827] EXT4-fs (loop3): 1 orphan inode deleted [ 44.618464][ T6827] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.638063][ T6685] Quota error (device loop3): do_check_range: Getting block 0 out of range 1-8 [ 44.638230][ T6685] EXT4-fs error (device loop3): ext4_release_dquot:6973: comm kworker/u8:9: Failed to release dquot type 0 [ 45.394143][ T6821] loop2: detected capacity change from 0 to 40427 [ 45.405261][ T6821] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 45.405291][ T6821] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 45.419587][ T6821] F2FS-fs (loop2): invalid crc value [ 45.465567][ T6821] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 45.481864][ T6825] loop1: detected capacity change from 0 to 512 [ 45.494596][ T6821] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 45.496239][ T6821] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 45.549639][ T6821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.551236][ T6821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.573945][ T6827] lo: entered promiscuous mode [ 45.573993][ T6827] lo: entered allmulticast mode [ 45.574458][ T6827] tunl0: entered promiscuous mode [ 45.574472][ T6827] tunl0: entered allmulticast mode [ 45.574710][ T6827] gre0: entered promiscuous mode [ 45.574722][ T6827] gre0: entered allmulticast mode [ 45.575002][ T6827] gretap0: entered promiscuous mode [ 45.575014][ T6827] gretap0: entered allmulticast mode [ 45.575225][ T6827] erspan0: entered promiscuous mode [ 45.575236][ T6827] erspan0: entered allmulticast mode [ 45.575455][ T6827] ip_vti0: entered promiscuous mode [ 45.575466][ T6827] ip_vti0: entered allmulticast mode [ 45.575688][ T6827] ip6_vti0: entered promiscuous mode [ 45.575698][ T6827] ip6_vti0: entered allmulticast mode [ 45.575927][ T6827] sit0: entered promiscuous mode [ 45.575939][ T6827] sit0: entered allmulticast mode [ 45.576160][ T6827] ip6tnl0: entered promiscuous mode [ 45.576173][ T6827] ip6tnl0: entered allmulticast mode [ 45.576612][ T6827] ip6gre0: entered promiscuous mode [ 45.576654][ T6827] ip6gre0: entered allmulticast mode [ 45.577041][ T6827] syz_tun: entered promiscuous mode [ 45.577053][ T6827] syz_tun: entered allmulticast mode [ 45.577328][ T6827] ip6gretap0: entered promiscuous mode [ 45.577338][ T6827] ip6gretap0: entered allmulticast mode [ 45.577551][ T6827] bridge0: entered promiscuous mode [ 45.577565][ T6827] bridge0: entered allmulticast mode [ 45.577806][ T6827] vcan0: entered promiscuous mode [ 45.577820][ T6827] vcan0: entered allmulticast mode [ 45.577948][ T6827] bond0: entered promiscuous mode [ 45.577959][ T6827] bond_slave_0: entered promiscuous mode [ 45.578020][ T6827] bond_slave_1: entered promiscuous mode [ 45.578071][ T6827] bond0: entered allmulticast mode [ 45.578081][ T6827] bond_slave_0: entered allmulticast mode [ 45.578090][ T6827] bond_slave_1: entered allmulticast mode [ 45.578495][ T6827] team0: entered promiscuous mode [ 45.578504][ T6827] team_slave_0: entered promiscuous mode [ 45.578561][ T6827] team_slave_1: entered promiscuous mode [ 45.578605][ T6827] team0: entered allmulticast mode [ 45.578613][ T6827] team_slave_0: entered allmulticast mode [ 45.578621][ T6827] team_slave_1: entered allmulticast mode [ 45.578998][ T6827] dummy0: entered promiscuous mode [ 45.579012][ T6827] dummy0: entered allmulticast mode [ 45.579220][ T6827] nlmon0: entered promiscuous mode [ 45.579230][ T6827] nlmon0: entered allmulticast mode [ 45.580891][ T6825] EXT4-fs (loop1): orphan cleanup on readonly fs [ 45.606240][ T6827] caif0: entered promiscuous mode [ 45.606249][ T6827] caif0: entered allmulticast mode [ 45.606259][ T6827] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 45.665209][ T6825] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0 [ 45.665253][ T6825] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 45.665277][ T6825] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.47: Failed to acquire dquot type 1 [ 45.680691][ T6539] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.684545][ T6825] EXT4-fs (loop1): 1 truncate cleaned up [ 45.685058][ T6825] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 45.819985][ T6837] mmap: syz.0.53 (6837) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 45.823425][ T6837] netlink: 4 bytes leftover after parsing attributes in process `syz.0.53'. [ 46.903306][ T6528] bio_check_eod: 27 callbacks suppressed [ 46.906388][ T6528] syz-executor: attempt to access beyond end of device [ 46.906388][ T6528] loop2: rw=2049, sector=45096, nr_sectors = 24 limit=40427 [ 46.912578][ T6528] CPU: 1 UID: 0 PID: 6528 Comm: syz-executor Not tainted syzkaller #0 PREEMPT [ 46.912602][ T6528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 46.912607][ T6528] Call trace: [ 46.912611][ T6528] show_stack+0x2c/0x3c (C) [ 46.912626][ T6528] __dump_stack+0x30/0x40 [ 46.912636][ T6528] dump_stack_lvl+0xd8/0x12c [ 46.912643][ T6528] dump_stack+0x1c/0x28 [ 46.912648][ T6528] f2fs_handle_critical_error+0x34c/0x4b8 [ 46.912656][ T6528] f2fs_stop_checkpoint+0x5c/0x70 [ 46.912662][ T6528] f2fs_write_end_io+0x768/0xa70 [ 46.912668][ T6528] bio_endio+0x858/0x894 [ 46.912675][ T6528] submit_bio_noacct+0x158/0x177c [ 46.912681][ T6528] submit_bio+0x3b4/0x550 [ 46.912686][ T6528] f2fs_submit_write_bio+0x13c/0x324 [ 46.912692][ T6528] __submit_merged_bio+0x254/0x704 [ 46.912698][ T6528] __submit_merged_write_cond+0x23c/0x4ac [ 46.912704][ T6528] f2fs_write_data_pages+0x1d28/0x2634 [ 46.912710][ T6528] do_writepages+0x270/0x468 [ 46.912718][ T6528] filemap_fdatawrite+0x14c/0x1f4 [ 46.912725][ T6528] f2fs_sync_dirty_inodes+0x2b8/0x788 [ 46.912730][ T6528] f2fs_write_checkpoint+0x690/0x16a0 [ 46.912736][ T6528] kill_f2fs_super+0x21c/0x584 [ 46.912742][ T6528] deactivate_locked_super+0xc4/0x12c [ 46.912747][ T6528] deactivate_super+0xe0/0x100 [ 46.912752][ T6528] cleanup_mnt+0x31c/0x3ac [ 46.912757][ T6528] __cleanup_mnt+0x20/0x30 [ 46.912762][ T6528] task_work_run+0x1dc/0x260 [ 46.912768][ T6528] exit_to_user_mode_loop+0xfc/0x168 [ 46.912775][ T6528] el0_svc+0x170/0x254 [ 46.912783][ T6528] el0t_64_sync_handler+0x84/0x12c [ 46.912790][ T6528] el0t_64_sync+0x198/0x19c [ 46.934256][ T6528] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 46.934350][ T6528] CPU: 1 UID: 0 PID: 6528 Comm: syz-executor Not tainted syzkaller #0 PREEMPT [ 46.934359][ T6528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 46.934364][ T6528] Call trace: [ 46.934366][ T6528] show_stack+0x2c/0x3c (C) [ 46.934378][ T6528] __dump_stack+0x30/0x40 [ 46.934384][ T6528] dump_stack_lvl+0xd8/0x12c [ 46.934389][ T6528] dump_stack+0x1c/0x28 [ 46.934394][ T6528] f2fs_handle_critical_error+0x34c/0x4b8 [ 46.934402][ T6528] f2fs_stop_checkpoint+0x5c/0x70 [ 46.934407][ T6528] f2fs_write_end_io+0x768/0xa70 [ 46.934414][ T6528] bio_endio+0x858/0x894 [ 46.934421][ T6528] submit_bio_noacct+0x158/0x177c [ 46.934427][ T6528] submit_bio+0x3b4/0x550 [ 46.934432][ T6528] f2fs_submit_write_bio+0x13c/0x324 [ 46.934438][ T6528] __submit_merged_bio+0x254/0x704 [ 46.934444][ T6528] __submit_merged_write_cond+0x23c/0x4ac [ 46.934450][ T6528] f2fs_write_data_pages+0x1d28/0x2634 [ 46.934456][ T6528] do_writepages+0x270/0x468 [ 46.934464][ T6528] filemap_fdatawrite+0x14c/0x1f4 [ 46.934471][ T6528] f2fs_sync_dirty_inodes+0x2b8/0x788 [ 46.934476][ T6528] f2fs_write_checkpoint+0x690/0x16a0 [ 46.934481][ T6528] kill_f2fs_super+0x21c/0x584 [ 46.934487][ T6528] deactivate_locked_super+0xc4/0x12c [ 46.934493][ T6528] deactivate_super+0xe0/0x100 [ 46.934497][ T6528] cleanup_mnt+0x31c/0x3ac [ 46.934503][ T6528] __cleanup_mnt+0x20/0x30 [ 46.934508][ T6528] task_work_run+0x1dc/0x260 [ 46.934514][ T6528] exit_to_user_mode_loop+0xfc/0x168 [ 46.934521][ T6528] el0_svc+0x170/0x254 [ 46.934529][ T6528] el0t_64_sync_handler+0x84/0x12c [ 46.934536][ T6528] el0t_64_sync+0x198/0x19c [ 46.934543][ T6528] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 46.934556][ T6528] CPU: 1 UID: 0 PID: 6528 Comm: syz-executor Not tainted syzkaller #0 PREEMPT [ 46.934563][ T6528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 46.934567][ T6528] Call trace: [ 46.934569][ T6528] show_stack+0x2c/0x3c (C) [ 46.934576][ T6528] __dump_stack+0x30/0x40 [ 46.934581][ T6528] dump_stack_lvl+0xd8/0x12c [ 46.934586][ T6528] dump_stack+0x1c/0x28 [ 46.934591][ T6528] f2fs_handle_critical_error+0x34c/0x4b8 [ 46.934597][ T6528] f2fs_stop_checkpoint+0x5c/0x70 [ 46.934602][ T6528] f2fs_write_end_io+0x768/0xa70 [ 46.934608][ T6528] bio_endio+0x858/0x894 [ 46.934614][ T6528] submit_bio_noacct+0x158/0x177c [ 46.934619][ T6528] submit_bio+0x3b4/0x550 [ 46.934625][ T6528] f2fs_submit_write_bio+0x13c/0x324 [ 46.934631][ T6528] __submit_merged_bio+0x254/0x704 [ 46.934637][ T6528] __submit_merged_write_cond+0x23c/0x4ac [ 46.934642][ T6528] f2fs_write_data_pages+0x1d28/0x2634 [ 46.934649][ T6528] do_writepages+0x270/0x468 [ 46.934655][ T6528] filemap_fdatawrite+0x14c/0x1f4 [ 46.934662][ T6528] f2fs_sync_dirty_inodes+0x2b8/0x788 [ 46.934667][ T6528] f2fs_write_checkpoint+0x690/0x16a0 [ 46.934673][ T6528] kill_f2fs_super+0x21c/0x584 [ 46.934679][ T6528] deactivate_locked_super+0xc4/0x12c [ 46.934684][ T6528] deactivate_super+0xe0/0x100 [ 46.934688][ T6528] cleanup_mnt+0x31c/0x3ac [ 46.934693][ T6528] __cleanup_mnt+0x20/0x30 [ 46.934698][ T6528] task_work_run+0x1dc/0x260 [ 46.934704][ T6528] exit_to_user_mode_loop+0xfc/0x168 [ 46.934710][ T6528] el0_svc+0x170/0x254 [ 46.934716][ T6528] el0t_64_sync_handler+0x84/0x12c [ 46.934723][ T6528] el0t_64_sync+0x198/0x19c [ 46.934729][ T6528] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 47.595795][ T6866] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2 [ 47.596057][ T6866] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 47.947224][ T6527] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.088150][ T6872] netlink: 56 bytes leftover after parsing attributes in process `syz.4.61'. [ 48.315613][ T6876] 9pnet_fd: Insufficient options for proto=fd [ 48.843350][ T6885] netlink: 132 bytes leftover after parsing attributes in process `syz.0.65'. [ 49.141777][ T6887] loop2: detected capacity change from 0 to 1024 [ 49.146551][ T6887] EXT4-fs: Ignoring removed i_version option [ 49.252508][ T6887] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 49.329186][ T6887] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.66: Invalid block bitmap block 0 in block_group 0 [ 49.336911][ T6887] Quota error (device loop2): write_blk: dquota write failed [ 49.336943][ T6887] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 49.336982][ T6887] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.66: Failed to acquire dquot type 0 [ 49.350959][ T6887] EXT4-fs error (device loop2): ext4_free_blocks:6696: comm syz.2.66: Freeing blocks not in datazone - block = 0, count = 4096 [ 49.360668][ T6887] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.66: Invalid inode bitmap blk 0 in block_group 0 [ 49.367130][ T6887] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 49.370549][ T6887] EXT4-fs (loop2): 1 orphan inode deleted [ 49.374399][ T6887] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.522644][ T6888] Quota error (device loop2): do_check_range: Getting block 0 out of range 1-8 [ 49.527172][ T6888] EXT4-fs error (device loop2): ext4_release_dquot:6973: comm kworker/u8:11: Failed to release dquot type 0 [ 49.768334][ T6887] lo: entered promiscuous mode [ 49.768388][ T6887] lo: entered allmulticast mode [ 49.768815][ T6887] tunl0: entered promiscuous mode [ 49.768829][ T6887] tunl0: entered allmulticast mode [ 49.769066][ T6887] gre0: entered promiscuous mode [ 49.769078][ T6887] gre0: entered allmulticast mode [ 49.769393][ T6887] gretap0: entered promiscuous mode [ 49.769404][ T6887] gretap0: entered allmulticast mode [ 49.769623][ T6887] erspan0: entered promiscuous mode [ 49.769635][ T6887] erspan0: entered allmulticast mode [ 49.769849][ T6887] ip_vti0: entered promiscuous mode [ 49.769861][ T6887] ip_vti0: entered allmulticast mode [ 49.770079][ T6887] ip6_vti0: entered promiscuous mode [ 49.770092][ T6887] ip6_vti0: entered allmulticast mode [ 49.770336][ T6887] sit0: entered promiscuous mode [ 49.770347][ T6887] sit0: entered allmulticast mode [ 49.770605][ T6887] ip6tnl0: entered promiscuous mode [ 49.770616][ T6887] ip6tnl0: entered allmulticast mode [ 49.770872][ T6887] ip6gre0: entered promiscuous mode [ 49.770882][ T6887] ip6gre0: entered allmulticast mode [ 49.771122][ T6887] syz_tun: entered promiscuous mode [ 49.771133][ T6887] syz_tun: entered allmulticast mode [ 49.771354][ T6887] ip6gretap0: entered promiscuous mode [ 49.771366][ T6887] ip6gretap0: entered allmulticast mode [ 49.771581][ T6887] bridge0: entered promiscuous mode [ 49.771594][ T6887] bridge0: entered allmulticast mode [ 49.771822][ T6887] vcan0: entered promiscuous mode [ 49.771832][ T6887] vcan0: entered allmulticast mode [ 49.771961][ T6887] bond0: entered promiscuous mode [ 49.771971][ T6887] bond_slave_0: entered promiscuous mode [ 49.772025][ T6887] bond_slave_1: entered promiscuous mode [ 49.772071][ T6887] bond0: entered allmulticast mode [ 49.772080][ T6887] bond_slave_0: entered allmulticast mode [ 49.772089][ T6887] bond_slave_1: entered allmulticast mode [ 49.773118][ T6887] team0: entered promiscuous mode [ 49.773132][ T6887] team_slave_0: entered promiscuous mode [ 49.773183][ T6887] team_slave_1: entered promiscuous mode [ 49.773221][ T6887] team0: entered allmulticast mode [ 49.773228][ T6887] team_slave_0: entered allmulticast mode [ 49.773236][ T6887] team_slave_1: entered allmulticast mode [ 49.773564][ T6887] dummy0: entered promiscuous mode [ 49.773576][ T6887] dummy0: entered allmulticast mode [ 49.773809][ T6887] nlmon0: entered promiscuous mode [ 49.773821][ T6887] nlmon0: entered allmulticast mode [ 49.857003][ T6887] caif0: entered promiscuous mode [ 49.857021][ T6887] caif0: entered allmulticast mode [ 49.857040][ T6887] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 49.864646][ T6899] lo: entered promiscuous mode [ 49.865994][ T6899] lo: entered allmulticast mode [ 49.869959][ T6899] tunl0: entered promiscuous mode [ 49.876436][ T6899] tunl0: entered allmulticast mode [ 49.878128][ T6899] gre0: entered promiscuous mode [ 49.882327][ T6899] gre0: entered allmulticast mode [ 49.882830][ T6899] gretap0: entered promiscuous mode [ 49.882847][ T6899] gretap0: entered allmulticast mode [ 49.883070][ T6899] erspan0: entered promiscuous mode [ 49.883085][ T6899] erspan0: entered allmulticast mode [ 49.883473][ T6899] ip_vti0: entered promiscuous mode [ 49.883488][ T6899] ip_vti0: entered allmulticast mode [ 49.883727][ T6899] ip6_vti0: entered promiscuous mode [ 49.883739][ T6899] ip6_vti0: entered allmulticast mode [ 49.884004][ T6899] sit0: entered promiscuous mode [ 49.884018][ T6899] sit0: entered allmulticast mode [ 49.884577][ T6899] ip6tnl0: entered promiscuous mode [ 49.884593][ T6899] ip6tnl0: entered allmulticast mode [ 49.884857][ T6899] ip6gre0: entered promiscuous mode [ 49.884869][ T6899] ip6gre0: entered allmulticast mode [ 49.885113][ T6899] syz_tun: entered promiscuous mode [ 49.885125][ T6899] syz_tun: entered allmulticast mode [ 49.885349][ T6899] bridge0: entered promiscuous mode [ 49.885363][ T6899] bridge0: entered allmulticast mode [ 49.885586][ T6899] vcan0: entered promiscuous mode [ 49.920304][ T6899] vcan0: entered allmulticast mode [ 49.920635][ T6899] bond0: entered promiscuous mode [ 49.920661][ T6899] bond_slave_0: entered promiscuous mode [ 49.920756][ T6899] bond_slave_1: entered promiscuous mode [ 49.920815][ T6899] bond0: entered allmulticast mode [ 49.920826][ T6899] bond_slave_0: entered allmulticast mode [ 49.920838][ T6899] bond_slave_1: entered allmulticast mode [ 49.921315][ T6899] team0: entered promiscuous mode [ 49.921328][ T6899] team_slave_0: entered promiscuous mode [ 49.921381][ T6899] team_slave_1: entered promiscuous mode [ 49.921433][ T6899] team0: entered allmulticast mode [ 49.921442][ T6899] team_slave_0: entered allmulticast mode [ 49.921451][ T6899] team_slave_1: entered allmulticast mode [ 49.921827][ T6899] dummy0: entered promiscuous mode [ 49.921841][ T6899] dummy0: entered allmulticast mode [ 49.922088][ T6899] nlmon0: entered promiscuous mode [ 49.922099][ T6899] nlmon0: entered allmulticast mode [ 49.960101][ T6899] caif0: entered promiscuous mode [ 49.960116][ T6899] caif0: entered allmulticast mode [ 49.960132][ T6899] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 50.369487][ T6908] loop0: detected capacity change from 0 to 256 [ 50.371167][ T6908] msdos: Bad value for 'time_offset' [ 50.402544][ T6528] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.063774][ T6917] loop4: detected capacity change from 0 to 256 [ 51.158698][ T6918] loop2: detected capacity change from 0 to 512 [ 51.492922][ T6918] EXT4-fs (loop2): orphan cleanup on readonly fs [ 51.496175][ T6918] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0 [ 51.496349][ T6918] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 51.496381][ T6918] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.72: Failed to acquire dquot type 1 [ 51.505658][ T6918] EXT4-fs (loop2): 1 truncate cleaned up [ 52.007470][ T6918] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 52.045408][ T6917] FAT-fs (loop4): Directory bread(block 64) failed [ 52.045451][ T6917] FAT-fs (loop4): Directory bread(block 65) failed [ 52.045492][ T6917] FAT-fs (loop4): Directory bread(block 66) failed [ 52.045510][ T6917] FAT-fs (loop4): Directory bread(block 67) failed [ 52.045540][ T6917] FAT-fs (loop4): Directory bread(block 68) failed [ 52.045558][ T6917] FAT-fs (loop4): Directory bread(block 69) failed [ 52.045594][ T6917] FAT-fs (loop4): Directory bread(block 70) failed [ 52.045610][ T6917] FAT-fs (loop4): Directory bread(block 71) failed [ 52.045634][ T6917] FAT-fs (loop4): Directory bread(block 72) failed [ 52.045648][ T6917] FAT-fs (loop4): Directory bread(block 73) failed [ 52.163040][ T6528] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.598814][ T6924] loop0: detected capacity change from 0 to 512 [ 52.599216][ T6924] EXT4-fs: Ignoring removed oldalloc option [ 53.186370][ T6927] netlink: 8 bytes leftover after parsing attributes in process `syz.2.76'. [ 53.459260][ T6929] netlink: 'syz.4.74': attribute type 11 has an invalid length. [ 53.469951][ T6924] EXT4-fs (loop0): 1 truncate cleaned up [ 53.477173][ T6924] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.114934][ T6526] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.119218][ T6926] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 54.606155][ T6937] loop4: detected capacity change from 0 to 256 [ 54.616023][ T6937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.616192][ T6937] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.186515][ T6958] loop1: detected capacity change from 0 to 256 [ 55.199187][ T6958] FAT-fs (loop1): Directory bread(block 64) failed [ 55.199225][ T6958] FAT-fs (loop1): Directory bread(block 65) failed [ 55.199261][ T6958] FAT-fs (loop1): Directory bread(block 66) failed [ 55.199277][ T6958] FAT-fs (loop1): Directory bread(block 67) failed [ 55.199302][ T6958] FAT-fs (loop1): Directory bread(block 68) failed [ 55.199317][ T6958] FAT-fs (loop1): Directory bread(block 69) failed [ 55.199340][ T6958] FAT-fs (loop1): Directory bread(block 70) failed [ 55.199353][ T6958] FAT-fs (loop1): Directory bread(block 71) failed [ 55.199377][ T6958] FAT-fs (loop1): Directory bread(block 72) failed [ 55.199390][ T6958] FAT-fs (loop1): Directory bread(block 73) failed [ 55.286989][ T6964] loop2: detected capacity change from 0 to 16 [ 55.309265][ T6964] erofs (device loop2): mounted with root inode @ nid 36. [ 55.314608][ T6964] erofs (device loop2): read error -117 @ 8200 of nid 36 [ 55.568642][ T6962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.575984][ T6962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.119836][ T6973] netlink: 8 bytes leftover after parsing attributes in process `syz.1.86'. [ 56.583770][ T6975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.584103][ T6975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.085892][ T6986] netlink: 20 bytes leftover after parsing attributes in process `syz.0.94'. [ 57.107759][ T6986] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.168509][ T6995] loop0: detected capacity change from 0 to 512 [ 57.175577][ T6995] netlink: 'syz.0.94': attribute type 1 has an invalid length. [ 57.179225][ T6995] netlink: 'syz.0.94': attribute type 2 has an invalid length. [ 57.686308][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 58.081942][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 58.088880][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 58.090808][ T9] usb 1-1: New USB device found, idVendor=056a, idProduct=003f, bcdDevice= 0.00 [ 58.092287][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.107552][ T9] usb 1-1: config 0 descriptor?? [ 58.110438][ T7010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.111013][ T7010] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.202645][ T7008] loop3: detected capacity change from 0 to 40427 [ 58.205792][ T7008] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 58.205855][ T7008] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 58.208886][ T7008] F2FS-fs (loop3): invalid crc value [ 58.223735][ T7008] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 58.224456][ T7008] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 58.224466][ T7008] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 58.233919][ T7008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.234106][ T7008] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.560363][ T7023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.561654][ T7023] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.030017][ T6539] syz-executor: attempt to access beyond end of device [ 59.030017][ T6539] loop3: rw=2049, sector=45096, nr_sectors = 24 limit=40427 [ 59.030191][ T6539] CPU: 1 UID: 0 PID: 6539 Comm: syz-executor Not tainted syzkaller #0 PREEMPT [ 59.030201][ T6539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 59.030206][ T6539] Call trace: [ 59.030208][ T6539] show_stack+0x2c/0x3c (C) [ 59.030222][ T6539] __dump_stack+0x30/0x40 [ 59.030228][ T6539] dump_stack_lvl+0xd8/0x12c [ 59.030233][ T6539] dump_stack+0x1c/0x28 [ 59.030238][ T6539] f2fs_handle_critical_error+0x34c/0x4b8 [ 59.030247][ T6539] f2fs_stop_checkpoint+0x5c/0x70 [ 59.030252][ T6539] f2fs_write_end_io+0x768/0xa70 [ 59.030259][ T6539] bio_endio+0x858/0x894 [ 59.030266][ T6539] submit_bio_noacct+0x158/0x177c [ 59.030272][ T6539] submit_bio+0x3b4/0x550 [ 59.030277][ T6539] f2fs_submit_write_bio+0x13c/0x324 [ 59.030283][ T6539] __submit_merged_bio+0x254/0x704 [ 59.030289][ T6539] __submit_merged_write_cond+0x23c/0x4ac [ 59.030295][ T6539] f2fs_write_data_pages+0x1d28/0x2634 [ 59.030302][ T6539] do_writepages+0x270/0x468 [ 59.030309][ T6539] filemap_fdatawrite+0x14c/0x1f4 [ 59.030316][ T6539] f2fs_sync_dirty_inodes+0x2b8/0x788 [ 59.030322][ T6539] f2fs_write_checkpoint+0x690/0x16a0 [ 59.030327][ T6539] kill_f2fs_super+0x21c/0x584 [ 59.030333][ T6539] deactivate_locked_super+0xc4/0x12c [ 59.030339][ T6539] deactivate_super+0xe0/0x100 [ 59.030344][ T6539] cleanup_mnt+0x31c/0x3ac [ 59.030350][ T6539] __cleanup_mnt+0x20/0x30 [ 59.030354][ T6539] task_work_run+0x1dc/0x260 [ 59.030361][ T6539] exit_to_user_mode_loop+0xfc/0x168 [ 59.030368][ T6539] el0_svc+0x170/0x254 [ 59.030376][ T6539] el0t_64_sync_handler+0x84/0x12c [ 59.030382][ T6539] el0t_64_sync+0x198/0x19c [ 59.030390][ T6539] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 59.031095][ T6539] CPU: 1 UID: 0 PID: 6539 Comm: syz-executor Not tainted syzkaller #0 PREEMPT [ 59.031109][ T6539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 59.031112][ T6539] Call trace: [ 59.031114][ T6539] show_stack+0x2c/0x3c (C) [ 59.031122][ T6539] __dump_stack+0x30/0x40 [ 59.031127][ T6539] dump_stack_lvl+0xd8/0x12c [ 59.031132][ T6539] dump_stack+0x1c/0x28 [ 59.031137][ T6539] f2fs_handle_critical_error+0x34c/0x4b8 [ 59.031143][ T6539] f2fs_stop_checkpoint+0x5c/0x70 [ 59.031148][ T6539] f2fs_write_end_io+0x768/0xa70 [ 59.031155][ T6539] bio_endio+0x858/0x894 [ 59.031161][ T6539] submit_bio_noacct+0x158/0x177c [ 59.031167][ T6539] submit_bio+0x3b4/0x550 [ 59.031172][ T6539] f2fs_submit_write_bio+0x13c/0x324 [ 59.031178][ T6539] __submit_merged_bio+0x254/0x704 [ 59.031184][ T6539] __submit_merged_write_cond+0x23c/0x4ac [ 59.031190][ T6539] f2fs_write_data_pages+0x1d28/0x2634 [ 59.031197][ T6539] do_writepages+0x270/0x468 [ 59.031204][ T6539] filemap_fdatawrite+0x14c/0x1f4 [ 59.031211][ T6539] f2fs_sync_dirty_inodes+0x2b8/0x788 [ 59.031216][ T6539] f2fs_write_checkpoint+0x690/0x16a0 [ 59.031221][ T6539] kill_f2fs_super+0x21c/0x584 [ 59.031228][ T6539] deactivate_locked_super+0xc4/0x12c [ 59.031233][ T6539] deactivate_super+0xe0/0x100 [ 59.031237][ T6539] cleanup_mnt+0x31c/0x3ac [ 59.031243][ T6539] __cleanup_mnt+0x20/0x30 [ 59.031248][ T6539] task_work_run+0x1dc/0x260 [ 59.031254][ T6539] exit_to_user_mode_loop+0xfc/0x168 [ 59.031260][ T6539] el0_svc+0x170/0x254 [ 59.031267][ T6539] el0t_64_sync_handler+0x84/0x12c [ 59.031274][ T6539] el0t_64_sync+0x198/0x19c [ 59.031281][ T6539] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 59.031657][ T6539] CPU: 1 UID: 0 PID: 6539 Comm: syz-executor Not tainted syzkaller #0 PREEMPT [ 59.031664][ T6539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 59.031667][ T6539] Call trace: [ 59.031669][ T6539] show_stack+0x2c/0x3c (C) [ 59.031674][ T6539] __dump_stack+0x30/0x40 [ 59.031679][ T6539] dump_stack_lvl+0xd8/0x12c [ 59.031684][ T6539] dump_stack+0x1c/0x28 [ 59.031689][ T6539] f2fs_handle_critical_error+0x34c/0x4b8 [ 59.031695][ T6539] f2fs_stop_checkpoint+0x5c/0x70 [ 59.031700][ T6539] f2fs_write_end_io+0x768/0xa70 [ 59.031706][ T6539] bio_endio+0x858/0x894 [ 59.031713][ T6539] submit_bio_noacct+0x158/0x177c [ 59.031718][ T6539] submit_bio+0x3b4/0x550 [ 59.031724][ T6539] f2fs_submit_write_bio+0x13c/0x324 [ 59.031730][ T6539] __submit_merged_bio+0x254/0x704 [ 59.031736][ T6539] __submit_merged_write_cond+0x23c/0x4ac [ 59.031742][ T6539] f2fs_write_data_pages+0x1d28/0x2634 [ 59.031748][ T6539] do_writepages+0x270/0x468 [ 59.031755][ T6539] filemap_fdatawrite+0x14c/0x1f4 [ 59.031761][ T6539] f2fs_sync_dirty_inodes+0x2b8/0x788 [ 59.031767][ T6539] f2fs_write_checkpoint+0x690/0x16a0 [ 59.031772][ T6539] kill_f2fs_super+0x21c/0x584 [ 59.031779][ T6539] deactivate_locked_super+0xc4/0x12c [ 59.031783][ T6539] deactivate_super+0xe0/0x100 [ 59.031788][ T6539] cleanup_mnt+0x31c/0x3ac [ 59.031793][ T6539] __cleanup_mnt+0x20/0x30 [ 59.031798][ T6539] task_work_run+0x1dc/0x260 [ 59.031811][ T6539] exit_to_user_mode_loop+0xfc/0x168 [ 59.031818][ T6539] el0_svc+0x170/0x254 [ 59.031825][ T6539] el0t_64_sync_handler+0x84/0x12c [ 59.031832][ T6539] el0t_64_sync+0x198/0x19c [ 59.032287][ T6539] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 59.393640][ T7046] loop2: detected capacity change from 0 to 512 [ 59.395203][ T7046] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 59.914481][ T7046] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 59.916194][ T7046] EXT4-fs (loop2): 1 truncate cleaned up [ 59.916624][ T7046] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.384987][ T6585] usb 1-1: USB disconnect, device number 2 [ 60.876712][ T7061] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2 [ 60.876747][ T7061] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 61.481064][ T6528] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.053681][ T7085] loop0: detected capacity change from 0 to 512 [ 62.071314][ T7085] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 62.157393][ T31] audit: type=1326 audit(62.030:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7081 comm="syz.0.123" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbdf5b3a8 code=0x7ffc0000 [ 62.160986][ T31] audit: type=1326 audit(62.030:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7081 comm="syz.0.123" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbdf5b3a8 code=0x7ffc0000 [ 62.164461][ T31] audit: type=1326 audit(62.030:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7081 comm="syz.0.123" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbdf5b3a8 code=0x7ffc0000 [ 62.164500][ T31] audit: type=1326 audit(62.030:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7081 comm="syz.0.123" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbdf5b3a8 code=0x7ffc0000 [ 62.164572][ T31] audit: type=1326 audit(62.030:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7081 comm="syz.0.123" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffbdf5b3a8 code=0x7ffc0000 [ 62.164635][ T31] audit: type=1326 audit(62.030:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7081 comm="syz.0.123" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbdf5b3a8 code=0x7ffc0000 [ 62.169886][ T31] audit: type=1326 audit(62.030:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7081 comm="syz.0.123" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbdf5b3a8 code=0x7ffc0000 [ 62.169988][ T31] audit: type=1326 audit(62.030:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7081 comm="syz.0.123" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbdf5b3a8 code=0x7ffc0000 [ 62.170052][ T31] audit: type=1326 audit(62.030:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7081 comm="syz.0.123" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbdf5b3a8 code=0x7ffc0000 [ 62.170113][ T31] audit: type=1326 audit(62.030:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7081 comm="syz.0.123" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=155 compat=0 ip=0xffffbdf5b3a8 code=0x7ffc0000 [ 62.253101][ T7085] EXT4-fs (loop0): 1 truncate cleaned up [ 62.256390][ T7085] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.901806][ T7086] netlink: 76 bytes leftover after parsing attributes in process `syz.2.120'. [ 63.241249][ T6526] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.683152][ T2412] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.684268][ T2412] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.692258][ T7118] loop0: detected capacity change from 0 to 512 [ 64.703008][ T7118] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 64.725695][ T7118] EXT4-fs (loop0): 1 truncate cleaned up [ 64.730370][ T7118] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.165388][ T7130] netlink: 4 bytes leftover after parsing attributes in process `syz.1.133'. [ 65.366786][ T6526] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.615534][ T7147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.618125][ T7147] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.689105][ T7150] loop0: detected capacity change from 0 to 1024 [ 65.689491][ T7150] EXT4-fs: Ignoring removed i_version option [ 65.776762][ T7150] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 65.797088][ T7150] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.137: Invalid block bitmap block 0 in block_group 0 [ 65.800830][ T7150] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.137: Failed to acquire dquot type 0 [ 65.803920][ T7150] EXT4-fs error (device loop0): ext4_free_blocks:6696: comm syz.0.137: Freeing blocks not in datazone - block = 0, count = 4096 [ 65.807368][ T7150] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.137: Invalid inode bitmap blk 0 in block_group 0 [ 65.810323][ T7150] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 65.812470][ T7150] EXT4-fs (loop0): 1 orphan inode deleted [ 65.815614][ T7150] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.854273][ T41] EXT4-fs error (device loop0): ext4_release_dquot:6973: comm kworker/u8:2: Failed to release dquot type 0 [ 65.917095][ T7150] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 66.349051][ T7154] overlayfs: failed to get inode (-116) [ 66.350488][ T7154] overlayfs: failed to get inode (-116) [ 66.351824][ T7154] overlayfs: failed to get inode (-116) [ 66.353081][ T7154] overlayfs: failed to get inode (-116) [ 66.419319][ T7148] overlayfs: failed to get inode (-116) [ 66.420572][ T7148] overlayfs: failed to get inode (-116) [ 66.561732][ T6526] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.018839][ T7162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.020742][ T7162] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.149535][ T7168] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2 [ 67.149628][ T7168] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 67.363980][ T7175] loop1: detected capacity change from 0 to 1024 [ 67.422252][ T7175] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.446724][ T7181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.448052][ T7181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.930403][ T7179] loop4: detected capacity change from 0 to 40427 [ 67.934255][ T7179] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 67.934573][ T7179] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 67.941308][ T7179] F2FS-fs (loop4): invalid crc value [ 67.961310][ T7179] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 67.963971][ T7179] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 67.965375][ T7179] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 67.980444][ T7179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.983355][ T7179] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.037304][ T6527] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.184072][ T26] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 68.195602][ T7199] lo: entered promiscuous mode [ 68.195673][ T7199] lo: entered allmulticast mode [ 68.197514][ T7199] tunl0: entered promiscuous mode [ 68.197529][ T7199] tunl0: entered allmulticast mode [ 68.198564][ T7199] gre0: entered promiscuous mode [ 68.198578][ T7199] gre0: entered allmulticast mode [ 68.199799][ T7199] gretap0: entered promiscuous mode [ 68.199824][ T7199] gretap0: entered allmulticast mode [ 68.200688][ T7199] erspan0: entered promiscuous mode [ 68.200699][ T7199] erspan0: entered allmulticast mode [ 68.201689][ T7199] ip_vti0: entered promiscuous mode [ 68.201719][ T7199] ip_vti0: entered allmulticast mode [ 68.202482][ T7199] ip6_vti0: entered promiscuous mode [ 68.202493][ T7199] ip6_vti0: entered allmulticast mode [ 68.203544][ T7199] sit0: entered promiscuous mode [ 68.203586][ T7199] sit0: entered allmulticast mode [ 68.204608][ T7199] ip6tnl0: entered promiscuous mode [ 68.204650][ T7199] ip6tnl0: entered allmulticast mode [ 68.205308][ T7199] ip6gre0: entered promiscuous mode [ 68.205338][ T7199] ip6gre0: entered allmulticast mode [ 68.206026][ T7199] syz_tun: entered promiscuous mode [ 68.206056][ T7199] syz_tun: entered allmulticast mode [ 68.207048][ T7199] ip6gretap0: entered promiscuous mode [ 68.207057][ T7199] ip6gretap0: entered allmulticast mode [ 68.207921][ T7199] bridge0: entered promiscuous mode [ 68.207958][ T7199] bridge0: entered allmulticast mode [ 68.208597][ T7199] bond0: entered promiscuous mode [ 68.208625][ T7199] bond_slave_0: entered promiscuous mode [ 68.208908][ T7199] bond_slave_1: entered promiscuous mode [ 68.209113][ T7199] bond0: entered allmulticast mode [ 68.209133][ T7199] bond_slave_0: entered allmulticast mode [ 68.209144][ T7199] bond_slave_1: entered allmulticast mode [ 68.210303][ T7199] team0: entered promiscuous mode [ 68.210331][ T7199] team_slave_0: entered promiscuous mode [ 68.210533][ T7199] team_slave_1: entered promiscuous mode [ 68.210761][ T7199] team0: entered allmulticast mode [ 68.210778][ T7199] team_slave_0: entered allmulticast mode [ 68.210832][ T7199] team_slave_1: entered allmulticast mode [ 68.213731][ T7199] dummy0: entered promiscuous mode [ 68.213762][ T7199] dummy0: entered allmulticast mode [ 68.214520][ T7199] nlmon0: entered promiscuous mode [ 68.214552][ T7199] nlmon0: entered allmulticast mode [ 68.227101][ T7199] caif0: entered promiscuous mode [ 68.227133][ T7199] caif0: entered allmulticast mode [ 68.227180][ T7199] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 68.580428][ T26] usb 1-1: Using ep0 maxpacket: 16 [ 68.730714][ T26] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 68.746532][ T26] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 68.763550][ T26] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 68.766158][ T26] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.020691][ T26] usb 1-1: config 0 descriptor?? [ 69.038491][ T6529] syz-executor: attempt to access beyond end of device [ 69.038491][ T6529] loop4: rw=2049, sector=45096, nr_sectors = 24 limit=40427 [ 69.041519][ T6529] CPU: 1 UID: 0 PID: 6529 Comm: syz-executor Not tainted syzkaller #0 PREEMPT [ 69.041541][ T6529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 69.041547][ T6529] Call trace: [ 69.041550][ T6529] show_stack+0x2c/0x3c (C) [ 69.041568][ T6529] __dump_stack+0x30/0x40 [ 69.041578][ T6529] dump_stack_lvl+0xd8/0x12c [ 69.041585][ T6529] dump_stack+0x1c/0x28 [ 69.041591][ T6529] f2fs_handle_critical_error+0x34c/0x4b8 [ 69.041602][ T6529] f2fs_stop_checkpoint+0x5c/0x70 [ 69.041609][ T6529] f2fs_write_end_io+0x768/0xa70 [ 69.041616][ T6529] bio_endio+0x858/0x894 [ 69.041624][ T6529] submit_bio_noacct+0x158/0x177c [ 69.041630][ T6529] submit_bio+0x3b4/0x550 [ 69.041635][ T6529] f2fs_submit_write_bio+0x13c/0x324 [ 69.041641][ T6529] __submit_merged_bio+0x254/0x704 [ 69.041647][ T6529] __submit_merged_write_cond+0x23c/0x4ac [ 69.041653][ T6529] f2fs_write_data_pages+0x1d28/0x2634 [ 69.041660][ T6529] do_writepages+0x270/0x468 [ 69.041667][ T6529] filemap_fdatawrite+0x14c/0x1f4 [ 69.041674][ T6529] f2fs_sync_dirty_inodes+0x2b8/0x788 [ 69.041680][ T6529] f2fs_write_checkpoint+0x690/0x16a0 [ 69.041685][ T6529] kill_f2fs_super+0x21c/0x584 [ 69.041691][ T6529] deactivate_locked_super+0xc4/0x12c [ 69.041696][ T6529] deactivate_super+0xe0/0x100 [ 69.041701][ T6529] cleanup_mnt+0x31c/0x3ac [ 69.041706][ T6529] __cleanup_mnt+0x20/0x30 [ 69.041711][ T6529] task_work_run+0x1dc/0x260 [ 69.041718][ T6529] exit_to_user_mode_loop+0xfc/0x168 [ 69.041725][ T6529] el0_svc+0x170/0x254 [ 69.041733][ T6529] el0t_64_sync_handler+0x84/0x12c [ 69.041739][ T6529] el0t_64_sync+0x198/0x19c [ 69.074823][ T6529] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 69.076369][ T6529] CPU: 1 UID: 0 PID: 6529 Comm: syz-executor Not tainted syzkaller #0 PREEMPT [ 69.076382][ T6529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 69.076388][ T6529] Call trace: [ 69.076393][ T6529] show_stack+0x2c/0x3c (C) [ 69.076411][ T6529] __dump_stack+0x30/0x40 [ 69.076422][ T6529] dump_stack_lvl+0xd8/0x12c [ 69.076429][ T6529] dump_stack+0x1c/0x28 [ 69.076435][ T6529] f2fs_handle_critical_error+0x34c/0x4b8 [ 69.076444][ T6529] f2fs_stop_checkpoint+0x5c/0x70 [ 69.076451][ T6529] f2fs_write_end_io+0x768/0xa70 [ 69.076459][ T6529] bio_endio+0x858/0x894 [ 69.076467][ T6529] submit_bio_noacct+0x158/0x177c [ 69.076472][ T6529] submit_bio+0x3b4/0x550 [ 69.076477][ T6529] f2fs_submit_write_bio+0x13c/0x324 [ 69.076484][ T6529] __submit_merged_bio+0x254/0x704 [ 69.076489][ T6529] __submit_merged_write_cond+0x23c/0x4ac [ 69.076496][ T6529] f2fs_write_data_pages+0x1d28/0x2634 [ 69.076502][ T6529] do_writepages+0x270/0x468 [ 69.076510][ T6529] filemap_fdatawrite+0x14c/0x1f4 [ 69.076516][ T6529] f2fs_sync_dirty_inodes+0x2b8/0x788 [ 69.076522][ T6529] f2fs_write_checkpoint+0x690/0x16a0 [ 69.076527][ T6529] kill_f2fs_super+0x21c/0x584 [ 69.076533][ T6529] deactivate_locked_super+0xc4/0x12c [ 69.076539][ T6529] deactivate_super+0xe0/0x100 [ 69.076543][ T6529] cleanup_mnt+0x31c/0x3ac [ 69.076549][ T6529] __cleanup_mnt+0x20/0x30 [ 69.076554][ T6529] task_work_run+0x1dc/0x260 [ 69.076560][ T6529] exit_to_user_mode_loop+0xfc/0x168 [ 69.076567][ T6529] el0_svc+0x170/0x254 [ 69.076574][ T6529] el0t_64_sync_handler+0x84/0x12c [ 69.076581][ T6529] el0t_64_sync+0x198/0x19c [ 69.101646][ T6529] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 69.101690][ T6529] CPU: 1 UID: 0 PID: 6529 Comm: syz-executor Not tainted syzkaller #0 PREEMPT [ 69.101702][ T6529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 69.101707][ T6529] Call trace: [ 69.101710][ T6529] show_stack+0x2c/0x3c (C) [ 69.101723][ T6529] __dump_stack+0x30/0x40 [ 69.101730][ T6529] dump_stack_lvl+0xd8/0x12c [ 69.101735][ T6529] dump_stack+0x1c/0x28 [ 69.101740][ T6529] f2fs_handle_critical_error+0x34c/0x4b8 [ 69.101748][ T6529] f2fs_stop_checkpoint+0x5c/0x70 [ 69.101754][ T6529] f2fs_write_end_io+0x768/0xa70 [ 69.101760][ T6529] bio_endio+0x858/0x894 [ 69.101767][ T6529] submit_bio_noacct+0x158/0x177c [ 69.101773][ T6529] submit_bio+0x3b4/0x550 [ 69.101778][ T6529] f2fs_submit_write_bio+0x13c/0x324 [ 69.101784][ T6529] __submit_merged_bio+0x254/0x704 [ 69.101789][ T6529] __submit_merged_write_cond+0x23c/0x4ac [ 69.101795][ T6529] f2fs_write_data_pages+0x1d28/0x2634 [ 69.101805][ T6529] do_writepages+0x270/0x468 [ 69.101814][ T6529] filemap_fdatawrite+0x14c/0x1f4 [ 69.101822][ T6529] f2fs_sync_dirty_inodes+0x2b8/0x788 [ 69.101828][ T6529] f2fs_write_checkpoint+0x690/0x16a0 [ 69.101833][ T6529] kill_f2fs_super+0x21c/0x584 [ 69.101839][ T6529] deactivate_locked_super+0xc4/0x12c [ 69.101845][ T6529] deactivate_super+0xe0/0x100 [ 69.101849][ T6529] cleanup_mnt+0x31c/0x3ac [ 69.101855][ T6529] __cleanup_mnt+0x20/0x30 [ 69.101860][ T6529] task_work_run+0x1dc/0x260 [ 69.101866][ T6529] exit_to_user_mode_loop+0xfc/0x168 [ 69.101872][ T6529] el0_svc+0x170/0x254 [ 69.101880][ T6529] el0t_64_sync_handler+0x84/0x12c [ 69.101887][ T6529] el0t_64_sync+0x198/0x19c [ 69.101908][ T6529] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 69.281948][ T7201] loop1: detected capacity change from 0 to 1024 [ 69.283107][ T7201] EXT4-fs: Ignoring removed i_version option [ 69.283129][ T7201] EXT4-fs: inline encryption not supported [ 69.289032][ T7201] EXT4-fs (loop1): Test dummy encryption mode enabled [ 69.310479][ T7201] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.330107][ T7204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.330339][ T7204] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.493913][ T7210] fuse: Bad value for 'rootmode' [ 69.631566][ T26] HID 045e:07da: Invalid code 65791 type 1 [ 69.702400][ T26] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0002/input/input3 [ 69.721997][ T26] microsoft 0003:045E:07DA.0002: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 69.754002][ T7216] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.754177][ T7216] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.222676][ T7219] bridge0: port 3(syz_tun) entered blocking state [ 70.222985][ T7219] bridge0: port 3(syz_tun) entered disabled state [ 70.258850][ T7219] bridge0: port 3(syz_tun) entered blocking state [ 70.258924][ T7219] bridge0: port 3(syz_tun) entered forwarding state [ 70.375649][ T6527] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.502994][ T12] Bluetooth: hci5: Frame reassembly failed (-84) [ 70.512853][ T6120] Bluetooth: hci5: unexpected event 0x03 length: 2 < 11 [ 71.027697][ T7226] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 71.411131][ T7241] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.412464][ T7241] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.416195][ T7241] loop2: detected capacity change from 0 to 1024 [ 71.418011][ T7241] EXT4-fs: Ignoring removed nomblk_io_submit option [ 71.431777][ T7241] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.152442][ T6132] usb 1-1: USB disconnect, device number 3 [ 72.566886][ T6120] Bluetooth: hci5: command 0x1003 tx timeout [ 72.606988][ T6544] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 73.196138][ T7257] loop1: detected capacity change from 0 to 1024 [ 73.196609][ T7257] EXT4-fs: Ignoring removed i_version option [ 73.199049][ T7257] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 73.221943][ T7257] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.164: Invalid block bitmap block 0 in block_group 0 [ 73.224368][ T7257] __quota_error: 372 callbacks suppressed [ 73.224376][ T7257] Quota error (device loop1): write_blk: dquota write failed [ 73.224388][ T7257] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 73.224412][ T7257] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.164: Failed to acquire dquot type 0 [ 73.224568][ T7257] EXT4-fs error (device loop1): ext4_free_blocks:6696: comm syz.1.164: Freeing blocks not in datazone - block = 0, count = 4096 [ 73.225402][ T7257] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.164: Invalid inode bitmap blk 0 in block_group 0 [ 73.228298][ T7257] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 73.231684][ T7257] EXT4-fs (loop1): 1 orphan inode deleted [ 73.232171][ T7257] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.239573][ T6891] Quota error (device loop1): do_check_range: Getting block 0 out of range 1-8 [ 73.239598][ T6891] EXT4-fs error (device loop1): ext4_release_dquot:6973: comm kworker/u8:13: Failed to release dquot type 0 [ 73.287475][ T7264] loop4: detected capacity change from 0 to 1024 [ 73.324261][ T7264] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.370717][ T6527] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.995222][ T6529] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.032046][ T7282] loop4: detected capacity change from 0 to 256 [ 74.181266][ T7284] loop3: detected capacity change from 0 to 40427 [ 74.200805][ T7284] F2FS-fs (loop3): invalid crc value [ 74.215659][ T7282] FAT-fs (loop4): Directory bread(block 64) failed [ 74.215695][ T7282] FAT-fs (loop4): Directory bread(block 65) failed [ 74.215729][ T7282] FAT-fs (loop4): Directory bread(block 66) failed [ 74.215745][ T7282] FAT-fs (loop4): Directory bread(block 67) failed [ 74.215769][ T7282] FAT-fs (loop4): Directory bread(block 68) failed [ 74.215783][ T7282] FAT-fs (loop4): Directory bread(block 69) failed [ 74.215812][ T7282] FAT-fs (loop4): Directory bread(block 70) failed [ 74.215826][ T7282] FAT-fs (loop4): Directory bread(block 71) failed [ 74.215849][ T7282] FAT-fs (loop4): Directory bread(block 72) failed [ 74.215862][ T7282] FAT-fs (loop4): Directory bread(block 73) failed [ 74.351075][ T7284] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 74.367591][ T7284] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 74.723554][ T7296] loop1: detected capacity change from 0 to 256 [ 76.343972][ T6528] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.477454][ T7296] FAT-fs (loop1): Directory bread(block 64) failed [ 76.477489][ T7296] FAT-fs (loop1): Directory bread(block 65) failed [ 76.477519][ T7296] FAT-fs (loop1): Directory bread(block 66) failed [ 76.477533][ T7296] FAT-fs (loop1): Directory bread(block 67) failed [ 76.477553][ T7296] FAT-fs (loop1): Directory bread(block 68) failed [ 76.477565][ T7296] FAT-fs (loop1): Directory bread(block 69) failed [ 76.477587][ T7296] FAT-fs (loop1): Directory bread(block 70) failed [ 76.477599][ T7296] FAT-fs (loop1): Directory bread(block 71) failed [ 76.477618][ T7296] FAT-fs (loop1): Directory bread(block 72) failed [ 76.477630][ T7296] FAT-fs (loop1): Directory bread(block 73) failed [ 76.549891][ T7302] loop2: detected capacity change from 0 to 256 [ 76.564628][ T7302] FAT-fs (loop2): Directory bread(block 64) failed [ 76.566742][ T7302] FAT-fs (loop2): Directory bread(block 65) failed [ 76.570248][ T7302] FAT-fs (loop2): Directory bread(block 66) failed [ 76.572547][ T7302] FAT-fs (loop2): Directory bread(block 67) failed [ 76.574244][ T7302] FAT-fs (loop2): Directory bread(block 68) failed [ 76.575634][ T7302] FAT-fs (loop2): Directory bread(block 69) failed [ 76.575689][ T7302] FAT-fs (loop2): Directory bread(block 70) failed [ 76.575709][ T7302] FAT-fs (loop2): Directory bread(block 71) failed [ 76.575741][ T7302] FAT-fs (loop2): Directory bread(block 72) failed [ 76.575756][ T7302] FAT-fs (loop2): Directory bread(block 73) failed [ 76.703166][ T6539] syz-executor: attempt to access beyond end of device [ 76.703166][ T6539] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 76.705486][ T6539] CPU: 1 UID: 0 PID: 6539 Comm: syz-executor Not tainted syzkaller #0 PREEMPT [ 76.705503][ T6539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 76.705509][ T6539] Call trace: [ 76.705513][ T6539] show_stack+0x2c/0x3c (C) [ 76.705531][ T6539] __dump_stack+0x30/0x40 [ 76.705543][ T6539] dump_stack_lvl+0xd8/0x12c [ 76.705549][ T6539] dump_stack+0x1c/0x28 [ 76.705555][ T6539] f2fs_handle_critical_error+0x34c/0x4b8 [ 76.705567][ T6539] f2fs_stop_checkpoint+0x5c/0x70 [ 76.705574][ T6539] f2fs_write_end_io+0x768/0xa70 [ 76.705582][ T6539] bio_endio+0x858/0x894 [ 76.705590][ T6539] submit_bio_noacct+0x158/0x177c [ 76.705596][ T6539] submit_bio+0x3b4/0x550 [ 76.705601][ T6539] f2fs_submit_write_bio+0x13c/0x324 [ 76.705607][ T6539] __submit_merged_bio+0x254/0x704 [ 76.705613][ T6539] __submit_merged_write_cond+0x23c/0x4ac [ 76.705619][ T6539] f2fs_write_data_pages+0x1d28/0x2634 [ 76.705626][ T6539] do_writepages+0x270/0x468 [ 76.705634][ T6539] filemap_fdatawrite+0x14c/0x1f4 [ 76.705641][ T6539] f2fs_sync_dirty_inodes+0x2b8/0x788 [ 76.705647][ T6539] f2fs_write_checkpoint+0x690/0x16a0 [ 76.705652][ T6539] kill_f2fs_super+0x21c/0x584 [ 76.705658][ T6539] deactivate_locked_super+0xc4/0x12c [ 76.705664][ T6539] deactivate_super+0xe0/0x100 [ 76.705668][ T6539] cleanup_mnt+0x31c/0x3ac [ 76.705674][ T6539] __cleanup_mnt+0x20/0x30 [ 76.705679][ T6539] task_work_run+0x1dc/0x260 [ 76.705685][ T6539] exit_to_user_mode_loop+0xfc/0x168 [ 76.705692][ T6539] el0_svc+0x170/0x254 [ 76.705700][ T6539] el0t_64_sync_handler+0x84/0x12c [ 76.705707][ T6539] el0t_64_sync+0x198/0x19c [ 76.731559][ T6539] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 77.121386][ T7312] netlink: 'syz.2.173': attribute type 11 has an invalid length. [ 77.697024][ T7311] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 78.080886][ T7325] loop1: detected capacity change from 0 to 128 [ 78.110474][ T7325] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (59572!=65535) [ 78.155312][ T7325] EXT4-fs error (device loop1): __ext4_fill_super:5504: inode #2: comm syz.1.181: iget: checksum invalid [ 78.163490][ T7325] EXT4-fs (loop1): get root inode failed [ 78.163526][ T7325] EXT4-fs (loop1): mount failed [ 78.215342][ T7330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.217173][ T7330] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.487376][ T6120] Bluetooth: hci5: command 0x1003 tx timeout [ 78.487453][ T6544] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 78.705314][ T6132] hid-generic 0005:0458:05DF.0003: item fetching failed at offset 0/1 [ 78.707276][ T6132] hid-generic 0005:0458:05DF.0003: probe with driver hid-generic failed with error -22 [ 78.864675][ T7369] netlink: 224 bytes leftover after parsing attributes in process `syz.1.198'. [ 79.224608][ T7400] netlink: 'syz.2.207': attribute type 4 has an invalid length. [ 79.229618][ T7397] IPVS: length: 4096 != 6895624 [ 79.261469][ T7405] netlink: 104 bytes leftover after parsing attributes in process `syz.1.211'. [ 79.401356][ T7414] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 79.403508][ T7414] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 79.449206][ T7423] netlink: 'syz.3.218': attribute type 10 has an invalid length. [ 79.503143][ T7424] netlink: 'syz.3.218': attribute type 10 has an invalid length. [ 79.503180][ T7424] netlink: 40 bytes leftover after parsing attributes in process `syz.3.218'. [ 80.118638][ T7430] tipc: Can't bind to reserved service type 1 [ 80.208337][ T7436] netlink: 'syz.0.225': attribute type 9 has an invalid length. [ 80.434475][ T7440] can: request_module (can-proto-0) failed. [ 80.468312][ T7423] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.468881][ T7423] batadv0: entered promiscuous mode [ 80.468935][ T7423] batadv0: entered allmulticast mode [ 80.469573][ T7423] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 80.489617][ T7424] bond0: (slave batadv0): Releasing backup interface [ 80.519305][ T7424] bridge0: port 3(batadv0) entered blocking state [ 80.519423][ T7424] bridge0: port 3(batadv0) entered disabled state [ 80.594164][ T7457] netlink: 4 bytes leftover after parsing attributes in process `syz.4.231'. [ 80.650622][ T7457] netlink: 4 bytes leftover after parsing attributes in process `syz.4.231'. [ 80.741487][ T6889] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 80.741511][ T6889] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 81.170972][ T7506] bond1: entered promiscuous mode [ 81.172911][ T7506] 8021q: adding VLAN 0 to HW filter on device bond1 [ 81.197999][ T7506] netlink: 'syz.4.246': attribute type 7 has an invalid length. [ 81.281082][ T7520] netlink: 'syz.4.246': attribute type 10 has an invalid length. [ 81.281123][ T7520] netlink: 40 bytes leftover after parsing attributes in process `syz.4.246'. [ 81.281172][ T7520] dummy0: entered promiscuous mode [ 81.281188][ T7520] dummy0: left allmulticast mode [ 81.281613][ T7520] bridge0: port 1(dummy0) entered blocking state [ 81.285312][ T7520] bridge0: port 1(dummy0) entered disabled state [ 81.285388][ T7520] dummy0: entered allmulticast mode [ 81.286173][ T7520] bridge0: port 1(dummy0) entered blocking state [ 81.286200][ T7520] bridge0: port 1(dummy0) entered forwarding state [ 81.371640][ T7532] loop2: detected capacity change from 0 to 1024 [ 81.397865][ T7532] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.416183][ T7539] warning: `syz.1.259' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 81.986252][ T6528] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.033360][ T7559] netlink: 12 bytes leftover after parsing attributes in process `syz.2.267'. [ 82.162004][ T7567] netlink: 4 bytes leftover after parsing attributes in process `syz.4.269'. [ 82.207868][ T7559] netlink: 8 bytes leftover after parsing attributes in process `syz.2.267'. [ 82.321078][ T7538] Set syz1 is full, maxelem 65536 reached [ 82.404719][ T7581] loop0: detected capacity change from 0 to 1024 [ 82.441041][ T7579] tipc: Started in network mode [ 82.441078][ T7579] tipc: Node identity 2632fc827e3f, cluster identity 4711 [ 82.441192][ T7579] tipc: Enabled bearer , priority 0 [ 82.441597][ T7579] syzkaller0: entered promiscuous mode [ 82.441606][ T7579] syzkaller0: entered allmulticast mode [ 82.444390][ T7579] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 82.450267][ T7581] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.460324][ T7579] tipc: Resetting bearer [ 82.461967][ T7578] tipc: Resetting bearer [ 82.482295][ T7578] tipc: Disabling bearer [ 82.626137][ T7599] syz.3.284 uses obsolete (PF_INET,SOCK_PACKET) [ 82.628746][ T7607] tipc: Started in network mode [ 82.628777][ T7607] tipc: Node identity b9, cluster identity 4711 [ 82.628783][ T7607] tipc: Node number set to 185 [ 82.739834][ T7619] tipc: Started in network mode [ 82.741316][ T7619] tipc: Node identity 0ee85896041a, cluster identity 4711 [ 82.742715][ T7619] tipc: Enabled bearer , priority 0 [ 82.744226][ T7619] syzkaller0: entered promiscuous mode [ 82.745273][ T7619] syzkaller0: entered allmulticast mode [ 82.762447][ T7619] tipc: Resetting bearer [ 82.771307][ T7618] tipc: Resetting bearer [ 82.780968][ T7618] tipc: Disabling bearer [ 82.816421][ T6526] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.922183][ T7639] netlink: 36 bytes leftover after parsing attributes in process `syz.4.302'. [ 83.538990][ T7687] syzkaller0: entered promiscuous mode [ 83.540109][ T7687] syzkaller0: entered allmulticast mode [ 83.570606][ T7683] nbd4: detected capacity change from 0 to 63 [ 83.573211][ T7686] block nbd4: NBD_DISCONNECT [ 83.573817][ T7686] block nbd4: Disconnected due to user request. [ 83.573826][ T7686] block nbd4: shutting down sockets [ 83.577349][ T6970] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 83.581108][ T6970] buffer_io_error: 6 callbacks suppressed [ 83.582976][ T6970] Buffer I/O error on dev nbd4, logical block 0, async page read [ 83.587150][ T6970] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 83.588687][ T6970] Buffer I/O error on dev nbd4, logical block 1, async page read [ 83.590109][ T6970] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 83.592064][ T6970] Buffer I/O error on dev nbd4, logical block 2, async page read [ 83.593556][ T6970] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 83.595203][ T6970] Buffer I/O error on dev nbd4, logical block 3, async page read [ 83.595293][ T6970] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 83.595311][ T6970] Buffer I/O error on dev nbd4, logical block 0, async page read [ 83.595354][ T6970] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 83.595368][ T6970] Buffer I/O error on dev nbd4, logical block 1, async page read [ 83.595399][ T6970] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 83.595411][ T6970] Buffer I/O error on dev nbd4, logical block 2, async page read [ 83.595441][ T6970] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 83.595452][ T6970] Buffer I/O error on dev nbd4, logical block 3, async page read [ 83.595488][ T6970] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 83.595499][ T6970] Buffer I/O error on dev nbd4, logical block 0, async page read [ 83.595534][ T6970] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 83.595544][ T6970] Buffer I/O error on dev nbd4, logical block 1, async page read [ 83.603891][ T6970] ldm_validate_partition_table(): Disk read failed. [ 83.604305][ T6970] Dev nbd4: unable to read RDB block 0 [ 83.604819][ T6970] nbd4: unable to read partition table [ 83.622554][ T6970] ldm_validate_partition_table(): Disk read failed. [ 83.623935][ T6970] Dev nbd4: unable to read RDB block 0 [ 83.624436][ T6970] nbd4: unable to read partition table [ 83.675543][ T7697] Bluetooth: MGMT ver 1.23 [ 83.951107][ T7743] netlink: 'syz.1.334': attribute type 13 has an invalid length. [ 84.081258][ T7743] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 84.164910][ T7732] infiniband syz1: set active [ 84.164950][ T7732] infiniband syz1: added bond0 [ 84.219848][ T7732] RDS/IB: syz1: added [ 84.219981][ T7732] smc: adding ib device syz1 with port count 1 [ 84.220025][ T7732] smc: ib device syz1 port 1 has pnetid [ 84.900599][ T7846] Zero length message leads to an empty skb [ 85.726589][ T7865] __nla_validate_parse: 3 callbacks suppressed [ 85.729031][ T7865] netlink: 16 bytes leftover after parsing attributes in process `syz.0.359'. [ 86.394185][ T7895] netlink: 16 bytes leftover after parsing attributes in process `syz.1.371'. [ 86.445724][ T7897] netlink: 248 bytes leftover after parsing attributes in process `syz.1.372'. [ 86.750144][ T7914] process 'syz.1.377' launched './file1' with NULL argv: empty string added [ 86.932245][ T7942] netlink: 'syz.3.387': attribute type 3 has an invalid length. [ 86.932344][ T7942] netlink: 'syz.3.387': attribute type 3 has an invalid length. [ 87.583614][ T7993] loop0: detected capacity change from 0 to 512 [ 87.585216][ T7993] journal_path: Non-blockdev passed as './file1' [ 87.585230][ T7993] EXT4-fs: error: could not find journal device path [ 87.622820][ T7998] sctp: [Deprecated]: syz.1.407 (pid 7998) Use of struct sctp_assoc_value in delayed_ack socket option. [ 87.622820][ T7998] Use struct sctp_sack_info instead [ 87.654980][ T8002] netlink: 8 bytes leftover after parsing attributes in process `syz.0.409'. [ 87.655017][ T8002] netlink: 8 bytes leftover after parsing attributes in process `syz.0.409'. [ 87.739959][ T31] audit: type=1326 audit(87.720:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8009 comm="syz.0.411" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbdf5b3a8 code=0x7ffc0000 [ 87.740014][ T31] audit: type=1326 audit(87.720:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8009 comm="syz.0.411" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbdf5b3a8 code=0x7ffc0000 [ 87.740050][ T31] audit: type=1326 audit(87.720:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8009 comm="syz.0.411" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=425 compat=0 ip=0xffffbdf5b3a8 code=0x7ffc0000 [ 87.743779][ T31] audit: type=1326 audit(87.720:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8009 comm="syz.0.411" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbdf5b3a8 code=0x7ffc0000 [ 87.890510][ T8024] bridge0: port 3(syz_tun) entered disabled state [ 87.906923][ T8029] netlink: 40 bytes leftover after parsing attributes in process `syz.1.418'. [ 87.908029][ T8024] bridge_slave_0: left allmulticast mode [ 87.908111][ T8024] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.949515][ T8032] netlink: 5 bytes leftover after parsing attributes in process `syz.1.419'. [ 87.952847][ T8024] bridge_slave_1: left allmulticast mode [ 87.952882][ T8024] bridge_slave_1: left promiscuous mode [ 87.953657][ T8024] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.085630][ T8024] bond0: (slave bond_slave_0): Releasing backup interface [ 88.107262][ T8024] bond_slave_0: left promiscuous mode [ 88.110632][ T8024] bond_slave_0: left allmulticast mode [ 88.113678][ T8024] bond0: (slave bond_slave_1): Releasing backup interface [ 88.126108][ T8042] netlink: 4 bytes leftover after parsing attributes in process `syz.3.422'. [ 88.128811][ T8024] bond_slave_1: left promiscuous mode [ 88.128871][ T8024] bond_slave_1: left allmulticast mode [ 88.132565][ T8024] team_slave_0: left promiscuous mode [ 88.136962][ T8024] team_slave_0: left allmulticast mode [ 88.144486][ T8024] team0: Port device team_slave_0 removed [ 88.146193][ T8024] team_slave_1: left promiscuous mode [ 88.147580][ T8024] team_slave_1: left allmulticast mode [ 88.150871][ T8024] team0: Port device team_slave_1 removed [ 88.152277][ T8024] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 88.153656][ T8024] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 88.155515][ T8024] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 88.156440][ T8024] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 88.161185][ T8032] 0ªX¹¦D: renamed from gretap0 (while UP) [ 88.162797][ T8032] 0ªX¹¦D: left promiscuous mode [ 88.163002][ T8032] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 88.194234][ T8036] syzkaller0: entered promiscuous mode [ 88.194276][ T8036] syzkaller0: entered allmulticast mode [ 88.197648][ T8042] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 88.198073][ T8042] team0: Device ipvlan2 is already an upper device of the team interface [ 88.378496][ T8070] netlink: 8 bytes leftover after parsing attributes in process `syz.0.431'. [ 88.803171][ T8089] netlink: 68 bytes leftover after parsing attributes in process `syz.3.444'. [ 89.335657][ T8163] loop3: detected capacity change from 0 to 1024 [ 90.153326][ T8163] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.272120][ T8178] vlan0: entered allmulticast mode [ 90.302181][ T6539] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.463492][ T8192] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 90.497165][ T8192] bond_slave_0: left promiscuous mode [ 90.497306][ T8192] bond_slave_0: left allmulticast mode [ 90.500552][ T8192] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 90.517601][ T8192] bond_slave_1: left promiscuous mode [ 90.518641][ T8192] bond_slave_1: left allmulticast mode [ 90.523218][ T8192] bond0 (unregistering): Released all slaves [ 90.754707][ T8216] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2 [ 90.754786][ T8216] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 91.049058][ T7820] wlan0: Trigger new scan to find an IBSS to join [ 91.163369][ T8235] __nla_validate_parse: 6 callbacks suppressed [ 91.163414][ T8235] netlink: 248 bytes leftover after parsing attributes in process `syz.0.509'. [ 91.192463][ T8233] loop4: detected capacity change from 0 to 1024 [ 91.225301][ T8233] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.521145][ T8284] netlink: 12 bytes leftover after parsing attributes in process `syz.1.525'. [ 91.921986][ T8299] netlink: 104 bytes leftover after parsing attributes in process `syz.1.528'. [ 91.970097][ T8302] bridge0: port 3(syz_tun) entered blocking state [ 91.975495][ T8302] bridge0: port 3(syz_tun) entered disabled state [ 91.976724][ T8302] bridge0: port 3(syz_tun) entered blocking state [ 91.976745][ T8302] bridge0: port 3(syz_tun) entered forwarding state [ 92.009224][ T6529] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.059996][ T8320] netlink: 248 bytes leftover after parsing attributes in process `syz.2.537'. [ 92.622998][ T8397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.623171][ T8397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.927539][ T8401] team_slave_0: left promiscuous mode [ 92.928613][ T8401] team_slave_0: left allmulticast mode [ 92.932175][ T8401] team0 (unregistering): Port device team_slave_0 removed [ 92.932272][ T8401] team_slave_1: left promiscuous mode [ 92.932315][ T8401] team_slave_1: left allmulticast mode [ 92.938009][ T8401] team0 (unregistering): Port device team_slave_1 removed [ 92.951462][ T8409] tipc: Enabling of bearer rejected, failed to enable media [ 92.991103][ T8420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.993000][ T8420] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.020969][ T8422] IPv6: NLM_F_CREATE should be specified when creating new route [ 93.021162][ T8422] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 93.021168][ T8422] IPv6: NLM_F_CREATE should be set when creating new route [ 93.021239][ T8422] IPv6: NLM_F_CREATE should be set when creating new route [ 93.574849][ T8459] team_slave_0: left promiscuous mode [ 93.575699][ T8459] team_slave_0: left allmulticast mode [ 93.581741][ T8459] team0 (unregistering): Port device team_slave_0 removed [ 93.581898][ T8459] team_slave_1: left promiscuous mode [ 93.581939][ T8459] team_slave_1: left allmulticast mode [ 93.585139][ T8459] team0 (unregistering): Port device team_slave_1 removed [ 93.686928][ T6651] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 94.141126][ T249] wlan0: Trigger new scan to find an IBSS to join [ 94.159650][ T6651] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 94.161753][ T6651] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 94.161789][ T6651] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 94.161810][ T6651] usb 1-1: config 0 interface 0 has no altsetting 0 [ 94.173036][ T8478] netlink: 16 bytes leftover after parsing attributes in process `syz.4.585'. [ 94.174107][ T6651] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 94.174132][ T6651] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 94.174145][ T6651] usb 1-1: config 0 interface 0 has no altsetting 0 [ 94.175011][ T6651] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 94.175032][ T6651] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 94.175042][ T6651] usb 1-1: config 0 interface 0 has no altsetting 0 [ 94.175870][ T6651] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 94.175882][ T6651] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 94.175890][ T6651] usb 1-1: config 0 interface 0 has no altsetting 0 [ 94.176663][ T6651] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 94.176681][ T6651] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 94.176690][ T6651] usb 1-1: config 0 interface 0 has no altsetting 0 [ 94.178603][ T6651] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 94.178619][ T6651] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 94.178634][ T6651] usb 1-1: config 0 interface 0 has no altsetting 0 [ 94.179587][ T6651] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 94.179611][ T6651] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 94.179631][ T6651] usb 1-1: config 0 interface 0 has no altsetting 0 [ 94.180812][ T6651] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 94.180837][ T6651] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 94.180847][ T6651] usb 1-1: config 0 interface 0 has no altsetting 0 [ 94.183697][ T6651] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 94.183718][ T6651] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 94.183731][ T6651] usb 1-1: Product: syz [ 94.183737][ T6651] usb 1-1: Manufacturer: syz [ 94.183743][ T6651] usb 1-1: SerialNumber: syz [ 94.187594][ T6651] usb 1-1: config 0 descriptor?? [ 94.201006][ T6651] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 94.638376][ T8504] netlink: 16 bytes leftover after parsing attributes in process `syz.1.596'. [ 94.651959][ T8508] binder: 8506:8508 BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 94.653566][ T8508] binder: 8506:8508 ioctl c0306201 200001c0 returned -22 [ 94.735368][ T8521] syzkaller1: entered promiscuous mode [ 94.736445][ T8521] syzkaller1: entered allmulticast mode [ 95.122999][ T8534] netlink: 16 bytes leftover after parsing attributes in process `syz.4.609'. [ 95.152348][ T8538] netlink: 168 bytes leftover after parsing attributes in process `syz.4.611'. [ 95.358368][ T8542] loop4: detected capacity change from 0 to 32768 [ 95.411941][ T8542] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names,read_only [ 95.411963][ T8542] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 95.412472][ T8542] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0 [ 95.413125][ T8542] bcachefs (loop4): invalid bkey in superblock btree=xattrs level=1: u64s 11 type btree_ptr_v2 U64_MAX:U64_MAX:4278190080 len 7 ver 0: seq 2285c34bed0abe32 written 16 min_key POS_MIN durability: 1 ptr: 0:31:0 gen 0 [ 95.413134][ T8542] size != 0, deleting [ 95.413232][ T8542] bcachefs (loop4): invalid bkey in superblock btree=deleted_inodes level=1: u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 1db8f60c84bb244c written 8 min_key 0:0:83886080 durability: 1 ptr: 0:0:64 gen 0 [ 95.413247][ T8542] pointer spans multiple buckets (64 + 256 > 256), deleting [ 95.413272][ T8542] bcachefs (loop4): recovering from clean shutdown, journal seq 10 [ 95.413304][ T8542] bcachefs (loop4): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.28: inode_has_case_insensitive [ 95.413304][ T8542] running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes [ 95.421454][ T8542] bcachefs (loop4): btree node read error at btree extents level 0/0 [ 95.421462][ T8542] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c6c25c03258c59c5 written 16 min_key POS_MIN durability: 1 ptr: 0:27:0 gen 0 [ 95.421467][ T8542] loop4 node offset 0/16: got wrong btree node: got [ 95.421471][ T8542] btree=extents level=0 seq 10c25c03258c59c5 1 [ 95.421474][ T8542] min: POS_MIN [ 95.421477][ T8542] max: U64_MAX:18446475792872374271:U32_MAX [ 95.421480][ T8542] loop4 btree validate error [ 95.421483][ T8542] flagging btree extents lost data [ 95.421486][ T8542] running recovery pass check_topology (2), currently at recovery_pass_empty (0) [ 95.421489][ T8542] running recovery pass check_lrus (14), currently at recovery_pass_empty (0) [ 95.421493][ T8542] running recovery pass check_backpointers_to_extents (16), currently at recovery_pass_empty (0) [ 95.421496][ T8542] running recovery pass check_topology (2), currently at recovery_pass_empty (0) [ 95.421499][ T8542] running recovery pass scan_for_btree_nodes (1), currently at recovery_pass_empty (0) [ 95.421503][ T8542] ret btree_node_read_err_bad_node [ 95.422050][ T8542] bcachefs (loop4): error reading btree root btree=extents level=0: btree_node_read_error, fixing [ 95.423039][ T8542] bcachefs (loop4): invalid bkey in btree_node btree=inodes level=0: u64s 17 type inode_v3 0:4097:353539 len 0 ver 0: (unpack error) [ 95.423046][ T8542] invalid variable length fields, deleting [ 95.423107][ T8542] bcachefs (loop4): invalid bkey in btree_node btree=inodes level=0: u64s 18 type inode_v3 0:4100:353539 len 0 ver 0: (unpack error) [ 95.423111][ T8542] invalid variable length fields, deleting [ 95.424703][ T8542] bcachefs (loop4): invalid bkey in btree_node btree=alloc level=0: u64s 12 type alloc_v4 0:34:0 len 0 ver 0: [ 95.424710][ T8542] gen 182 oldest_gen 190 data_type (unknown data_type 65) [ 95.424713][ T8542] journal_seq_nonempty 5 [ 95.424716][ T8542] journal_seq_empty 117440512 [ 95.424719][ T8542] need_discard 1 [ 95.424722][ T8542] need_inc_gen 1 [ 95.424725][ T8542] dirty_sectors 0 [ 95.424728][ T8542] stripe_sectors 1769482 [ 95.424730][ T8542] cached_sectors 0 [ 95.424733][ T8542] stripe 0 [ 95.424736][ T8542] stripe_redundancy 45 [ 95.424739][ T8542] io_time[READ] 1 [ 95.424741][ T8542] io_time[WRITE] 512 [ 95.424744][ T8542] fragmentation 0 [ 95.424747][ T8542] bp_start 7 [ 95.424749][ T8542] [ 95.424752][ T8542] invalid data type (got 65 should be 9), deleting [ 95.426239][ T8542] bcachefs (loop4): btree node read error at btree subvolumes level 0/0 [ 95.426245][ T8542] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c0bef60d07ceb940 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0 [ 95.426250][ T8542] loop4 node offset 0/16 bset u64s 0: invalid bkey format: field 0 too large: 18446744073709551615 + 30064771072 > 18446744073709551615 [ 95.426254][ T8542] u64s 3 fields 64:30064771072, 64:0, 32:0, 0:0, 0:0, 0:0 [ 95.426257][ T8542] loop4 btree validate error [ 95.426260][ T8542] flagging btree subvolumes lost data [ 95.426262][ T8542] ret btree_node_read_err_bad_node [ 95.426329][ T8542] bcachefs (loop4): error reading btree root btree=subvolumes level=0: btree_node_read_error, fixing [ 95.428297][ T8542] bcachefs (loop4): btree node read error at btree lru level 0/0 [ 95.428303][ T8542] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 28f61e078e70b95c written 16 min_key POS_MIN durability: 1 ptr: 0:28:0 gen 0 [ 95.428308][ T8542] loop4 node offset 0/16: bad magic: want 59513f585d347cd2, got 59513f585d340000 [ 95.428312][ T8542] loop4 btree validate error [ 95.428315][ T8542] flagging btree lru lost data [ 95.428318][ T8542] running recovery pass check_alloc_info (13), currently at recovery_pass_empty (0) [ 95.428321][ T8542] ret btree_node_read_err_bad_node [ 95.428386][ T8542] bcachefs (loop4): error reading btree root btree=lru level=0: btree_node_read_error, fixing [ 95.428950][ T8542] bcachefs (loop4): btree node read error at btree freespace level 0/0 [ 95.428955][ T8542] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0 [ 95.428959][ T8542] loop4 node offset 0/32 bset u64s 0: invalid bkey format: field 4 too large: 0 + 17163091968 > 4294967295 [ 95.428963][ T8542] u64s 3 fields 64:0, 64:0, 32:0, 0:0, 0:17163091968, 0:0 [ 95.428966][ T8542] loop4 btree validate error [ 95.428969][ T8542] flagging btree freespace lost data [ 95.428971][ T8542] ret btree_node_read_err_bad_node [ 95.429006][ T8542] bcachefs (loop4): error reading btree root btree=freespace level=0: btree_node_read_error, fixing [ 95.430018][ T8542] bcachefs (loop4): check_topology... [ 95.430046][ T8542] bcachefs (loop4): btree root extents unreadable, must recover from scan [ 95.430434][ T8542] bcachefs (loop4): running recovery pass scan_for_btree_nodes (1), currently at check_topology (2) - rewinding [ 95.430455][ T8542] bcachefs (loop4): bch2_check_root(): error restart_recovery [ 95.430465][ T8542] bcachefs (loop4): scan_for_btree_nodes... [ 95.435633][ T8542] bcachefs (loop4): btree node scan found 2 nodes after overwrites [ 95.436396][ T8542] done [ 95.436404][ T8542] bcachefs (loop4): check_topology... [ 95.436427][ T8542] bcachefs (loop4): btree root extents unreadable, must recover from scan [ 95.436479][ T8542] bcachefs (loop4): bch2_get_scanned_nodes(): recovery btree=extents level=0 POS_MIN - SPOS_MAX [ 95.436545][ T8542] bcachefs (loop4): bch2_get_scanned_nodes(): recovering u64s 11 type btree_ptr_v2 U64_MAX:18446475792872374271:U32_MAX len 0 ver 0: seq 10c25c03258c59c5 written 8 min_key POS_MIN durability: 1 ptr: 0:27:0 gen 0 [ 95.436601][ T8542] bcachefs (loop4): bch2_get_scanned_nodes(): recovering u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 1db8f60c84bb244c written 8 min_key R U64_MAX:18446475792872374272:0 durability: 1 ptr: 0:42:0 gen 0 [ 95.439468][ T8542] bcachefs (loop4): btree root subvolumes unreadable, must recover from scan [ 95.440236][ T8542] bcachefs (loop4): no nodes found for btree subvolumes, shutting down [ 95.440243][ T8542] error not marked as autofix and not in fsck [ 95.440247][ T8542] run fsck, and forward to devs so error can be marked for self-healing [ 95.440251][ T8542] emergency read only at seq 10 [ 95.440279][ T8542] bcachefs (loop4): bch2_check_root(): error fsck_errors_not_fixed [ 95.440313][ T8542] bcachefs (loop4): error in recovery: fsck_errors_not_fixed [ 95.440326][ T8542] bcachefs (loop4): bch2_fs_start(): error starting filesystem fsck_errors_not_fixed [ 95.440330][ T8542] bcachefs (loop4): shutting down [ 95.450629][ T8542] bcachefs (loop4): shutdown complete [ 95.653141][ T8550] loop2: detected capacity change from 0 to 32768 [ 95.667484][ T8550] (syz.2.616,8550,0):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options [ 95.672887][ T8550] (syz.2.616,8550,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 95.723700][ T8558] netlink: 12 bytes leftover after parsing attributes in process `syz.3.620'. [ 95.725326][ T8559] rdma_rxe: rxe_newlink: failed to add syz_tun [ 95.848036][ T8565] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 96.328001][ T8588] netlink: 12 bytes leftover after parsing attributes in process `syz.2.632'. [ 96.451719][ T9] usb 1-1: USB disconnect, device number 4 [ 96.455837][ T9] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 96.512341][ T8602] netlink: 12 bytes leftover after parsing attributes in process `syz.0.640'. [ 96.584262][ T8610] netlink: 12 bytes leftover after parsing attributes in process `syz.2.643'. [ 96.601140][ T8542] bcachefs: bch2_fs_get_tree() error: fsck_errors_not_fixed [ 97.030973][ T8628] batadv1: entered allmulticast mode [ 97.035008][ T8628] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 97.035484][ T8628] bridge0: port 4(batadv1) entered blocking state [ 97.043938][ T8628] bridge0: port 4(batadv1) entered disabled state [ 97.045834][ T8628] batadv1: entered promiscuous mode [ 97.046164][ T8628] bridge0: port 4(batadv1) entered blocking state [ 97.046219][ T8628] bridge0: port 4(batadv1) entered forwarding state [ 97.054994][ T8634] netlink: 12 bytes leftover after parsing attributes in process `syz.4.652'. [ 97.055953][ T8632] bridge0: port 5(syz_tun) entered blocking state [ 97.056104][ T8632] bridge0: port 5(syz_tun) entered disabled state [ 97.061987][ T8632] bridge0: port 5(syz_tun) entered blocking state [ 97.062040][ T8632] bridge0: port 5(syz_tun) entered forwarding state [ 97.261287][ T8640] netlink: 4 bytes leftover after parsing attributes in process `syz.4.655'. [ 97.298392][ T249] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 97.298424][ T249] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 97.383468][ T8644] loop1: detected capacity change from 0 to 32768 [ 97.428354][ T8644] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 97.436971][ T8651] loop3: detected capacity change from 0 to 512 [ 97.440607][ T8651] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 97.456583][ T8651] EXT4-fs (loop3): 1 truncate cleaned up [ 97.458322][ T8651] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.472097][ T8651] EXT4-fs error (device loop3): ext4_ext_precache:632: inode #15: comm syz.3.660: pblk 0 bad header/extent: invalid magic - magic 7973, entries 27514, max 27745(0), depth 25964(25964) [ 97.480592][ T8644] XFS (loop1): Ending clean mount [ 97.513840][ T6539] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.520867][ T8664] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.522631][ T8664] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.579439][ T8670] netlink: 12 bytes leftover after parsing attributes in process `syz.2.665'. [ 97.589114][ T6527] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 97.836724][ T8668] loop3: detected capacity change from 0 to 32768 [ 97.848973][ T8668] btrfs: Deprecated parameter 'usebackuproot' [ 97.850278][ T8668] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 97.888767][ T8668] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.662 (8668) [ 97.911097][ T8706] loop1: detected capacity change from 0 to 32768 [ 97.952265][ T8668] BTRFS info (device loop3): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 97.955259][ T8668] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 97.957358][ T8668] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 97.960017][ T8668] workqueue: max_active 2097158 requested for btrfs-worker is out of range, clamping between 1 and 2048 [ 97.972621][ T8668] workqueue: max_active 2097158 requested for btrfs-delalloc is out of range, clamping between 1 and 2048 [ 97.997245][ T8668] workqueue: max_active 2097158 requested for btrfs-endio is out of range, clamping between 1 and 2048 [ 98.012973][ T8668] workqueue: max_active 2097158 requested for btrfs-endio-meta is out of range, clamping between 1 and 2048 [ 98.020726][ T8668] workqueue: max_active 2097158 requested for btrfs-rmw is out of range, clamping between 1 and 2048 [ 98.023370][ T8668] workqueue: max_active 2097158 requested for btrfs-endio-write is out of range, clamping between 1 and 2048 [ 98.027162][ T8668] workqueue: max_active 2097158 requested for btrfs-compressed-write is out of range, clamping between 1 and 2048 [ 98.057899][ T7820] BTRFS warning (device loop3): checksum verify failed on logical 5332992 mirror 1 wanted 0xb929531db417ae5491593d99afe1510df15bdaa63fb6603d26a93ec9245f098d found 0xfae43531cd8d6aa70badeef4a79286b041c7728bcafc57258374f4f8998ef68d level 0 [ 98.064939][ T8668] BTRFS warning (device loop3): couldn't read tree root [ 98.065000][ T8668] BTRFS warning (device loop3): try to load backup roots slot 1 [ 98.320044][ T8668] BTRFS info (device loop3): enabling ssd optimizations [ 98.320088][ T8668] BTRFS info (device loop3): turning off barriers [ 98.320118][ T8668] BTRFS info (device loop3): disabling tree log [ 98.320135][ T8668] BTRFS info (device loop3): enabling disk space caching [ 98.320151][ T8668] BTRFS info (device loop3): force clearing of disk cache [ 98.320168][ T8668] BTRFS info (device loop3): trying to use backup root at mount time [ 98.320185][ T8668] BTRFS info (device loop3): ignoring unknown super block flags [ 98.352615][ T8745] rdma_rxe: rxe_newlink: failed to add syz_tun [ 98.414196][ T6539] BTRFS info (device loop3): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 98.590979][ T8740] loop4: detected capacity change from 0 to 32768 [ 98.602623][ T8740] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.674 (8740) [ 98.635051][ T8740] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 98.635108][ T8740] BTRFS info (device loop4): using crc32c (crc32c-lib) checksum algorithm [ 98.746590][ T8740] BTRFS info (device loop4): turning off barriers [ 98.746626][ T8740] BTRFS info (device loop4): enabling free space tree [ 98.746646][ T8740] BTRFS info (device loop4): use zstd compression, level 3 [ 98.810442][ T8801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.810615][ T8801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.914210][ T6529] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 98.971558][ T8825] loop4: detected capacity change from 0 to 256 [ 99.033894][ T8831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.034071][ T8831] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.488184][ T8876] loop3: detected capacity change from 0 to 64 [ 99.979038][ T8892] loop1: detected capacity change from 0 to 32768 [ 100.067021][ T8892] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,nocow,no_data_io [ 100.067052][ T8892] allowing incompatible features above 0.0: (unknown version) [ 100.067326][ T8892] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 100.067584][ T8892] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0 [ 100.067993][ T8892] bcachefs (loop1): invalid bkey in superblock btree=extents level=1: u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c6c25c03258c59c5 written 16 min_key 259635068010496:0:0 durability: 0 (invalid extent entry 0000000000000000) [ 100.067999][ T8892] invalid extent entry type (got 7, max 7), deleting [ 100.068035][ T8892] bcachefs (loop1): recovering from clean shutdown, journal seq 10 [ 100.068099][ T8892] bcachefs (loop1): Version upgrade required: [ 100.068099][ T8892] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 100.068099][ T8892] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 100.068099][ T8892] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 100.068191][ T8892] bcachefs (loop1): dropping and reconstructing all alloc info [ 100.071514][ T8892] bcachefs (loop1): accounting_read... done [ 100.087292][ T8892] bcachefs (loop1): alloc_read... done [ 100.087422][ T8892] bcachefs (loop1): snapshots_read... done [ 100.087600][ T8892] bcachefs (loop1): Fixed errors, running fsck a second time to verify fs is clean [ 100.087693][ T8892] bcachefs (loop1): done starting filesystem [ 100.131756][ T6527] bcachefs (loop1): shutting down [ 100.175696][ T6527] bcachefs (loop1): shutdown complete [ 100.746160][ T8917] loop4: detected capacity change from 0 to 8192 [ 100.879823][ T8925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.880015][ T8925] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.036288][ T8929] loop4: detected capacity change from 0 to 32768 [ 101.073154][ T8929] JBD2: journal file too short [ 101.073189][ T8929] (syz.4.711,8929,1):ocfs2_journal_init:973 ERROR: Linux journal layer error [ 101.073206][ T8929] (syz.4.711,8929,1):ocfs2_check_volume:2347 ERROR: Could not initialize journal! [ 101.073220][ T8929] (syz.4.711,8929,1):ocfs2_check_volume:2432 ERROR: status = -22 [ 101.073229][ T8929] (syz.4.711,8929,1):ocfs2_mount_volume:1764 ERROR: status = -22 [ 101.086463][ T8929] (syz.4.711,8929,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 101.128392][ T8935] loop4: detected capacity change from 0 to 1024 [ 101.142310][ T8935] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.369127][ T6529] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.552297][ T8951] netlink: 24 bytes leftover after parsing attributes in process `syz.1.718'. [ 101.616596][ T8945] loop4: detected capacity change from 0 to 32768 [ 101.674082][ T8954] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 101.751599][ T8953] loop1: detected capacity change from 0 to 32768 [ 101.839943][ T8953] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 101.839973][ T8953] allowing incompatible features above 0.0: (unknown version) [ 101.839992][ T8953] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 101.840006][ T8953] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0 [ 101.840028][ T8953] bcachefs (loop1): initializing new filesystem [ 101.841488][ T8953] bcachefs (loop1): going read-write [ 101.937216][ T8953] bcachefs (loop1): marking superblocks [ 101.970294][ T8956] loop4: detected capacity change from 0 to 32768 [ 101.975650][ T8953] bcachefs (loop1): initializing freespace [ 101.979453][ T8953] bcachefs (loop1): done initializing freespace [ 101.986444][ T8953] bcachefs (loop1): reading snapshots table [ 101.986503][ T8953] bcachefs (loop1): reading snapshots done [ 102.267030][ T8953] bcachefs (loop1): done starting filesystem [ 102.285788][ T8956] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,checksum_err_retry_nr=12,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,degraded=yes,nojournal_transaction_names [ 102.285832][ T8956] allowing incompatible features above 0.0: (unknown version) [ 102.286374][ T8956] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 102.286394][ T8956] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0 [ 102.286416][ T8956] bcachefs (loop4): initializing new filesystem [ 102.292012][ T8956] bcachefs (loop4): going read-write [ 102.301096][ T8953] bcachefs (loop1): going read-only [ 102.301143][ T8953] bcachefs (loop1): finished waiting for writes to stop [ 102.307234][ T8956] bcachefs (loop4): marking superblocks [ 102.319871][ T8956] bcachefs (loop4): initializing freespace [ 102.322015][ T8953] bcachefs (loop1): flushing journal and stopping allocators, journal seq 2 [ 102.322825][ T8956] bcachefs (loop4): done initializing freespace [ 102.332844][ T8956] bcachefs (loop4): reading snapshots table [ 102.332891][ T8956] bcachefs (loop4): reading snapshots done [ 102.344639][ T8956] bcachefs (loop4): done starting filesystem [ 102.356676][ T6529] bcachefs (loop4): shutting down [ 102.356708][ T6529] bcachefs (loop4): going read-only [ 102.356748][ T6529] bcachefs (loop4): finished waiting for writes to stop [ 102.381154][ T6529] bcachefs (loop4): flushing journal and stopping allocators, journal seq 1 [ 102.390800][ T8953] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 2 [ 102.394875][ T8953] bcachefs (loop1): clean shutdown complete, journal seq 3 [ 102.395502][ T8953] bcachefs (loop1): marking filesystem clean [ 102.412722][ T6527] bcachefs (loop1): shutting down [ 102.412887][ T6529] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 2 [ 102.415294][ T6529] bcachefs (loop4): clean shutdown complete, journal seq 3 [ 102.415673][ T6529] bcachefs (loop4): marking filesystem clean [ 102.434107][ T6529] bcachefs (loop4): shutdown complete [ 102.435765][ T6527] bcachefs (loop1): shutdown complete [ 102.866145][ T8994] netlink: 104 bytes leftover after parsing attributes in process `syz.2.728'. [ 102.985968][ T9006] loop2: detected capacity change from 0 to 4096 [ 104.358438][ T9041] netlink: 4 bytes leftover after parsing attributes in process `syz.2.744'. [ 105.419134][ T9056] loop1: detected capacity change from 0 to 32768 [ 105.434098][ T9058] netlink: 40 bytes leftover after parsing attributes in process `syz.2.749'. [ 105.673680][ T9070] loop2: detected capacity change from 0 to 32768 [ 105.725403][ T9056] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 105.725437][ T9056] allowing incompatible features above 0.0: (unknown version) [ 105.725456][ T9056] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 105.725468][ T9056] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0 [ 105.725490][ T9056] bcachefs (loop1): initializing new filesystem [ 105.726980][ T9056] bcachefs (loop1): going read-write [ 105.743494][ T9094] loop3: detected capacity change from 0 to 1024 [ 105.807258][ T9056] bcachefs (loop1): marking superblocks [ 105.808981][ T9056] bcachefs (loop1): initializing freespace [ 105.809709][ T9056] bcachefs (loop1): done initializing freespace [ 105.810167][ T9056] bcachefs (loop1): reading snapshots table [ 105.810192][ T9056] bcachefs (loop1): reading snapshots done [ 105.837229][ T9056] bcachefs (loop1): done starting filesystem [ 105.858747][ T9079] loop0: detected capacity change from 0 to 32768 [ 105.903646][ T9079] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 105.934785][ T9094] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.994301][ T9079] XFS (loop0): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 106.019764][ T9079] XFS (loop0): Starting recovery (logdev: internal) [ 106.255236][ T6527] bcachefs (loop1): shutting down [ 106.255270][ T6527] bcachefs (loop1): going read-only [ 106.267107][ T9079] XFS (loop0): Ending recovery (logdev: internal) [ 106.269626][ T6527] bcachefs (loop1): finished waiting for writes to stop [ 106.305553][ T6527] bcachefs (loop1): flushing journal and stopping allocators, journal seq 2 [ 106.357640][ T9079] XFS (loop0): Metadata corruption detected at xfs_inobt_verify+0x98/0x1cc, xfs_finobt block 0x8 [ 106.357707][ T9079] XFS (loop0): Unmount and run xfs_repair [ 106.357743][ T9079] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 106.357758][ T9079] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 106.357771][ T9079] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10 ................ [ 106.357782][ T9079] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 106.357798][ T9079] 00000030: 00 00 00 00 c8 fc 31 e4 00 00 04 4e 00 00 00 02 ......1....N.... [ 106.357809][ T9079] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00 ...`............ [ 106.357820][ T9079] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 106.357830][ T9079] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 106.357840][ T9079] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 106.357951][ T9079] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x1f8/0x380" at daddr 0x8 len 8 error 117 [ 106.415151][ T6527] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 3 [ 106.421439][ T6526] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 106.421696][ T6526] XFS (loop0): Uncorrected metadata errors detected; please run xfs_repair. [ 106.425550][ T6527] bcachefs (loop1): clean shutdown complete, journal seq 4 [ 106.425991][ T6527] bcachefs (loop1): marking filesystem clean [ 106.516013][ T9131] netlink: 40 bytes leftover after parsing attributes in process `syz.0.761'. [ 106.535132][ T6527] bcachefs (loop1): shutdown complete [ 106.645124][ T6539] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.735631][ T9147] loop2: detected capacity change from 0 to 512 [ 106.738020][ T9147] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 106.756622][ T9147] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.765411][ T9147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.765580][ T9147] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.195993][ T9163] netlink: 'syz.0.773': attribute type 3 has an invalid length. [ 107.196098][ T9163] netlink: 'syz.0.773': attribute type 3 has an invalid length. [ 107.201803][ T9165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.201974][ T9165] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.255236][ T9167] loop0: detected capacity change from 0 to 1024 [ 107.269981][ T9167] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.613668][ T6528] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.701586][ T6526] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.783743][ T9182] loop2: detected capacity change from 0 to 32768 [ 107.796738][ T9182] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.779 (9182) [ 107.831009][ T9185] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.835429][ T9185] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.254244][ T9182] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 108.254316][ T9182] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm [ 108.540296][ T9182] BTRFS info (device loop2): rebuilding free space tree [ 108.550210][ T9182] BTRFS info (device loop2): setting nodatasum [ 108.551382][ T9182] BTRFS info (device loop2): enabling ssd optimizations [ 108.552694][ T9182] BTRFS info (device loop2): using spread ssd allocation scheme [ 108.554027][ T9182] BTRFS info (device loop2): turning off barriers [ 108.555181][ T9182] BTRFS info (device loop2): enabling free space tree [ 108.556367][ T9182] BTRFS info (device loop2): force clearing of disk cache [ 108.631416][ T6528] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 108.820295][ T9212] loop2: detected capacity change from 0 to 32768 [ 108.863589][ T9212] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 108.903640][ T9212] XFS (loop2): Ending clean mount [ 109.091714][ T9212] XFS (loop2): Quotacheck needed: Please wait. [ 109.329353][ T9212] XFS (loop2): Quotacheck: Done. [ 109.342628][ T6528] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 109.444914][ T9231] loop3: detected capacity change from 0 to 32768 [ 109.452914][ T9231] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 109.466734][ T9231] XFS (loop3): Ending clean mount [ 109.491806][ T6539] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 109.596010][ T9233] loop2: detected capacity change from 0 to 32768 [ 109.642418][ T9247] loop3: detected capacity change from 0 to 1024 [ 109.669778][ T9247] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.741813][ T9233] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 109.741847][ T9233] allowing incompatible features above 0.0: (unknown version) [ 109.745658][ T9233] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 109.745696][ T9233] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0 [ 109.745732][ T9233] bcachefs (loop2): initializing new filesystem [ 109.764164][ T9233] bcachefs (loop2): going read-write [ 109.804939][ T9233] bcachefs (loop2): marking superblocks [ 109.811856][ T9233] bcachefs (loop2): initializing freespace [ 109.818522][ T6539] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.823317][ T9233] bcachefs (loop2): done initializing freespace [ 109.831906][ T9233] bcachefs (loop2): reading snapshots table [ 109.836771][ T9233] bcachefs (loop2): reading snapshots done [ 109.847577][ T9233] bcachefs (loop2): done starting filesystem [ 109.874126][ T9253] loop1: detected capacity change from 0 to 32768 [ 109.881728][ T9253] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 109.928605][ T9253] XFS (loop1): Ending clean mount [ 109.941115][ T6528] bcachefs (loop2): shutting down [ 109.942381][ T6528] bcachefs (loop2): going read-only [ 109.943465][ T6528] bcachefs (loop2): finished waiting for writes to stop [ 110.287526][ T9276] netlink: 12 bytes leftover after parsing attributes in process `syz.3.792'. [ 110.289327][ T9276] xfrm1: entered promiscuous mode [ 110.289355][ T9276] xfrm1: entered allmulticast mode [ 110.289491][ T9276] netlink: 12 bytes leftover after parsing attributes in process `syz.3.792'. [ 110.404797][ T6528] bcachefs (loop2): flushing journal and stopping allocators, journal seq 3 [ 110.430937][ T6528] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 3 [ 110.434761][ T6528] bcachefs (loop2): clean shutdown complete, journal seq 4 [ 110.436447][ T6528] bcachefs (loop2): marking filesystem clean [ 110.448568][ T6528] bcachefs (loop2): shutdown complete [ 110.782748][ T6527] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 110.960157][ T9298] loop0: detected capacity change from 0 to 512 [ 111.000293][ T9298] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 111.013143][ T9300] loop4: detected capacity change from 0 to 1024 [ 111.042378][ T9300] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.067072][ T9298] EXT4-fs (loop0): 1 truncate cleaned up [ 111.067575][ T9298] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.086521][ T9288] loop3: detected capacity change from 0 to 32768 [ 111.136616][ T9288] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 111.165836][ T9288] OCFS2: ERROR (device loop3): int ocfs2_reserve_suballoc_bits(struct ocfs2_super *, struct ocfs2_alloc_context *, int, u32, u64 *, int): Invalid chain allocator 71 [ 111.165888][ T9288] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 111.165908][ T9288] OCFS2: File system is now read-only. [ 111.165913][ T9288] (syz.3.798,9288,1):ocfs2_reserve_suballoc_bits:856 ERROR: status = -30 [ 111.165925][ T9288] (syz.3.798,9288,1):ocfs2_reserve_cluster_bitmap_bits:1139 ERROR: status = -30 [ 111.165935][ T9288] (syz.3.798,9288,1):ocfs2_reserve_clusters_with_limit:1208 ERROR: status = -30 [ 111.165958][ T9288] (syz.3.798,9288,1):ocfs2_reserve_clusters_with_limit:1221 ERROR: status = -30 [ 111.165965][ T9288] (syz.3.798,9288,1):ocfs2_block_group_alloc:679 ERROR: status = -30 [ 111.165972][ T9288] (syz.3.798,9288,1):ocfs2_block_group_alloc:764 ERROR: status = -30 [ 111.165978][ T9288] (syz.3.798,9288,1):ocfs2_reserve_suballoc_bits:839 ERROR: status = -30 [ 111.165984][ T9288] (syz.3.798,9288,1):ocfs2_reserve_suballoc_bits:856 ERROR: status = -30 [ 111.165991][ T9288] (syz.3.798,9288,1):ocfs2_reserve_new_metadata_blocks:996 ERROR: status = -30 [ 111.166004][ T9288] (syz.3.798,9288,1):ocfs2_reserve_new_metadata_blocks:1019 ERROR: status = -30 [ 111.166011][ T9288] (syz.3.798,9288,1):ocfs2_mknod:353 ERROR: status = -30 [ 111.166175][ T9288] (syz.3.798,9288,1):ocfs2_mknod:505 ERROR: status = -30 [ 111.166186][ T9288] (syz.3.798,9288,1):ocfs2_create:678 ERROR: status = -30 [ 111.239261][ T6539] ocfs2: Unmounting device (7,3) on (node local) [ 111.281882][ T9309] loop3: detected capacity change from 0 to 47 [ 111.364093][ T6529] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.550108][ T9321] loop3: detected capacity change from 0 to 2048 [ 111.578969][ T9321] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 111.712679][ T9318] loop1: detected capacity change from 0 to 40427 [ 111.734346][ T9318] F2FS-fs (loop1): build fault injection rate: 19 [ 111.734373][ T9318] F2FS-fs (loop1): build fault injection type: 0x3bfe8c [ 111.780563][ T9318] F2FS-fs (loop1): invalid crc value [ 111.782373][ T9318] F2FS-fs (loop1): inject page alloc in f2fs_grab_cache_folio of f2fs_ra_meta_pages+0x4e8/0x7ac [ 111.805566][ T9318] F2FS-fs (loop1): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x1b0/0x3b0 [ 111.810815][ T9318] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 111.811889][ T9318] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 111.829919][ T9318] F2FS-fs (loop1): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x19c/0x868 [ 111.830752][ T9318] F2FS-fs (loop1): inject checkpoint error in f2fs_balance_fs of f2fs_setattr+0xcc0/0x10d8 [ 111.831851][ T9318] CPU: 1 UID: 0 PID: 9318 Comm: syz.1.806 Not tainted syzkaller #0 PREEMPT [ 111.831862][ T9318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 111.831868][ T9318] Call trace: [ 111.831870][ T9318] show_stack+0x2c/0x3c (C) [ 111.831882][ T9318] __dump_stack+0x30/0x40 [ 111.831890][ T9318] dump_stack_lvl+0xd8/0x12c [ 111.831895][ T9318] dump_stack+0x1c/0x28 [ 111.831901][ T9318] f2fs_handle_critical_error+0x34c/0x4b8 [ 111.831912][ T9318] f2fs_stop_checkpoint+0x5c/0x70 [ 111.831919][ T9318] f2fs_balance_fs+0x278/0x6ec [ 111.831926][ T9318] f2fs_setattr+0xcc0/0x10d8 [ 111.831935][ T9318] notify_change+0x9a4/0xc50 [ 111.831944][ T9318] file_remove_privs_flags+0x2a0/0x4ac [ 111.831951][ T9318] file_modified_flags+0x5c/0x450 [ 111.831959][ T9318] file_modified+0x24/0x34 [ 111.831965][ T9318] f2fs_fallocate+0x2d0/0x8ec [ 111.831976][ T9318] vfs_fallocate+0x52c/0x668 [ 111.831984][ T9318] __arm64_sys_fallocate+0xbc/0x10c [ 111.831991][ T9318] invoke_syscall+0x98/0x254 [ 111.831998][ T9318] el0_svc_common+0x130/0x23c [ 111.832004][ T9318] do_el0_svc+0x48/0x58 [ 111.832010][ T9318] el0_svc+0x5c/0x254 [ 111.832021][ T9318] el0t_64_sync_handler+0x84/0x12c [ 111.832031][ T9318] el0t_64_sync+0x198/0x19c [ 111.832039][ T9318] F2FS-fs (loop1): Stopped filesystem due to reason: 1 [ 112.012656][ T9329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.014471][ T9329] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.723456][ T9346] loop2: detected capacity change from 0 to 1024 [ 112.741424][ T9346] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.988121][ T6526] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.346453][ T6528] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.347354][ T9358] loop0: detected capacity change from 0 to 1024 [ 113.414837][ T9364] loop4: detected capacity change from 0 to 256 [ 113.438421][ T9364] FAT-fs (loop4): Directory bread(block 64) failed [ 113.439577][ T9364] FAT-fs (loop4): Directory bread(block 65) failed [ 113.440908][ T9364] FAT-fs (loop4): Directory bread(block 66) failed [ 113.442206][ T9364] FAT-fs (loop4): Directory bread(block 67) failed [ 113.443504][ T9364] FAT-fs (loop4): Directory bread(block 68) failed [ 113.444851][ T9364] FAT-fs (loop4): Directory bread(block 69) failed [ 113.446276][ T9364] FAT-fs (loop4): Directory bread(block 70) failed [ 113.449650][ T9364] FAT-fs (loop4): Directory bread(block 71) failed [ 113.450896][ T9364] FAT-fs (loop4): Directory bread(block 72) failed [ 113.451989][ T9364] FAT-fs (loop4): Directory bread(block 73) failed [ 113.476499][ T9360] loop1: detected capacity change from 0 to 32768 [ 113.486236][ T9360] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 113.499943][ T249] hfsplus: b-tree write err: -5, ino 4 [ 113.518668][ T9360] XFS (loop1): Ending clean mount [ 113.540517][ T9360] XFS (loop1): Quotacheck needed: Please wait. [ 113.603196][ T9378] loop4: detected capacity change from 0 to 8 [ 113.640819][ T9360] XFS (loop1): Quotacheck: Done. [ 113.666067][ T9383] loop0: detected capacity change from 0 to 256 [ 113.669735][ T9383] exfat: Deprecated parameter 'namecase' [ 113.675955][ T6527] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 113.743892][ T9383] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 114.082203][ T9387] loop1: detected capacity change from 0 to 256 [ 114.094792][ T9387] FAT-fs (loop1): Directory bread(block 64) failed [ 114.094836][ T9387] FAT-fs (loop1): Directory bread(block 65) failed [ 114.094861][ T9387] FAT-fs (loop1): Directory bread(block 66) failed [ 114.094873][ T9387] FAT-fs (loop1): Directory bread(block 67) failed [ 114.094893][ T9387] FAT-fs (loop1): Directory bread(block 68) failed [ 114.094903][ T9387] FAT-fs (loop1): Directory bread(block 69) failed [ 114.094929][ T9387] FAT-fs (loop1): Directory bread(block 70) failed [ 114.094939][ T9387] FAT-fs (loop1): Directory bread(block 71) failed [ 114.094974][ T9387] FAT-fs (loop1): Directory bread(block 72) failed [ 114.094984][ T9387] FAT-fs (loop1): Directory bread(block 73) failed [ 114.659603][ T9403] loop2: detected capacity change from 0 to 128 [ 114.689091][ T9403] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 114.689404][ T9403] hpfs: filesystem error: improperly stopped [ 114.689425][ T9403] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 114.689443][ T9403] hpfs: You really don't want any checks? You are crazy... [ 114.697100][ T9403] hpfs: hpfs_map_sector(): read error [ 114.700354][ T9403] hpfs: code page support is disabled [ 114.705097][ T9403] hpfs: hpfs_map_4sectors(): unaligned read [ 114.708892][ T9397] loop4: detected capacity change from 0 to 32768 [ 114.712430][ T9403] hpfs: hpfs_map_4sectors(): unaligned read [ 114.712461][ T9403] hpfs: filesystem error: unable to find root dir [ 114.736241][ T9397] ea_get: extended attribute size too large: 2617245744 > INT_MAX [ 114.736281][ T9397] ea_get: extended attribute size too large: 2617245744 > INT_MAX [ 114.736310][ T9397] ea_get: extended attribute size too large: 2617245744 > INT_MAX [ 114.736469][ T9397] ea_get: extended attribute size too large: 2617245744 > INT_MAX [ 114.828892][ T9405] loop1: detected capacity change from 0 to 32768 [ 114.834165][ T9405] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.831 (9405) [ 114.841654][ T9405] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 114.841722][ T9405] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 114.902566][ T9405] BTRFS info (device loop1): enabling ssd optimizations [ 114.904757][ T9405] BTRFS info (device loop1): enabling free space tree [ 114.904820][ T9405] BTRFS info (device loop1): use lzo compression, level 1 [ 114.944425][ T6527] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 115.182474][ T9444] loop3: detected capacity change from 0 to 256 [ 115.184198][ T9444] exfat: Deprecated parameter 'utf8' [ 115.204171][ T9444] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xdd33351c, utbl_chksum : 0xe619d30d) [ 115.219139][ T9446] loop1: detected capacity change from 0 to 2048 [ 115.236418][ T9447] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 115.244571][ T6120] Bluetooth: hci4: unexpected event 0x0b length: 234 > 11 [ 115.389850][ T9457] loop1: detected capacity change from 0 to 512 [ 115.422919][ T9457] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.454325][ T6527] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.463446][ T9467] netlink: 4 bytes leftover after parsing attributes in process `syz.4.850'. [ 115.463807][ T9467] netlink: 4 bytes leftover after parsing attributes in process `syz.4.850'. [ 115.463861][ T9467] netlink: 4 bytes leftover after parsing attributes in process `syz.4.850'. [ 115.470166][ T9465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.470353][ T9465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.971046][ T9474] loop1: detected capacity change from 0 to 32768 [ 116.530411][ T9503] loop4: detected capacity change from 0 to 64 [ 116.560749][ T9501] loop1: detected capacity change from 0 to 32768 [ 116.576491][ T9501] (syz.1.862,9501,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 116.581082][ T9501] (syz.1.862,9501,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 116.665089][ T9501] JBD2: Ignoring recovery information on journal [ 116.692485][ T9501] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 117.105632][ T6527] ocfs2: Unmounting device (7,1) on (node local) [ 117.221217][ T9521] loop0: detected capacity change from 0 to 32768 [ 117.352243][ T9534] loop1: detected capacity change from 0 to 1024 [ 117.444214][ T6687] hfsplus: b-tree write err: -5, ino 4 [ 117.809860][ T9539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.811932][ T9539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.918099][ T9541] loop1: detected capacity change from 0 to 32768 [ 117.919773][ T9541] btrfs: Unknown parameter 'fragment' [ 118.730846][ T9550] loop0: detected capacity change from 0 to 47 [ 118.760856][ T9540] loop2: detected capacity change from 0 to 32768 [ 118.764296][ T9540] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.876 (9540) [ 118.995511][ T9540] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 118.995572][ T9540] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 119.120209][ T9540] BTRFS info (device loop2): enabling ssd optimizations [ 119.120242][ T9540] BTRFS info (device loop2): enabling free space tree [ 119.120253][ T9540] BTRFS info (device loop2): use lzo compression, level 1 [ 119.434577][ T6528] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 119.493237][ T9573] "syz.0.884" (9573) uses obsolete ecb(arc4) skcipher [ 119.585406][ T9557] loop3: detected capacity change from 0 to 32768 [ 119.911569][ T9597] loop1: detected capacity change from 0 to 512 [ 119.912306][ T9597] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 119.913090][ T9597] EXT4-fs (loop1): orphan cleanup on readonly fs [ 119.915101][ T9597] EXT4-fs (loop1): 1 truncate cleaned up [ 119.915651][ T9597] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 120.371335][ T9602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.373724][ T9602] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.794770][ T6527] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.800280][ T9610] netlink: 28 bytes leftover after parsing attributes in process `syz.0.893'. [ 121.217971][ T9622] evm: overlay not supported [ 121.306761][ T9621] loop2: detected capacity change from 0 to 32768 [ 121.335817][ T9621] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 121.683287][ T9639] loop0: detected capacity change from 0 to 8 [ 121.683962][ T9639] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 121.738382][ T6528] ocfs2: Unmounting device (7,2) on (node local) [ 121.819990][ T9648] loop2: detected capacity change from 0 to 2048 [ 121.821629][ T9648] udf: Bad value for 'lastblock' [ 122.490442][ T9659] loop0: detected capacity change from 0 to 32768 [ 122.517103][ T9659] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 122.520240][ T9663] netlink: 20 bytes leftover after parsing attributes in process `syz.1.911'. [ 122.777613][ T9675] netlink: 'syz.1.913': attribute type 13 has an invalid length. [ 122.811109][ T9675] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 123.080247][ T6526] ocfs2: Unmounting device (7,0) on (node local) [ 123.242455][ T9684] netlink: 68 bytes leftover after parsing attributes in process `syz.3.918'. [ 123.944411][ T9698] loop2: detected capacity change from 0 to 512 [ 123.964807][ T9698] [ 123.965219][ T9698] ====================================================== [ 123.966342][ T9698] WARNING: possible circular locking dependency detected [ 123.967492][ T9698] syzkaller #0 Not tainted [ 123.968239][ T9698] ------------------------------------------------------ [ 123.969358][ T9698] syz.2.923/9698 is trying to acquire lock: [ 123.970278][ T9698] ffff0000c6c24b98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x150/0x2a0 [ 123.971889][ T9698] [ 123.971889][ T9698] but task is already holding lock: [ 123.973052][ T9698] ffff0000f600ba28 (&ei->xattr_sem){++++}-{4:4}, at: __ext4_mark_inode_dirty+0x358/0x6fc [ 123.974740][ T9698] [ 123.974740][ T9698] which lock already depends on the new lock. [ 123.974740][ T9698] [ 123.976533][ T9698] [ 123.976533][ T9698] the existing dependency chain (in reverse order) is: [ 123.978012][ T9698] [ 123.978012][ T9698] -> #2 (&ei->xattr_sem){++++}-{4:4}: [ 123.979183][ T9698] down_write+0x50/0xc0 [ 123.979916][ T9698] ext4_xattr_set_handle+0x11c/0x1260 [ 123.980852][ T9698] ext4_initxattrs+0xa4/0x11c [ 123.981681][ T9698] security_inode_init_security+0x6dc/0x7f4 [ 123.982709][ T9698] ext4_init_security+0x44/0x58 [ 123.983552][ T9698] __ext4_new_inode+0x27f4/0x3190 [ 123.984393][ T9698] ext4_create+0x1f8/0x3fc [ 123.985188][ T9698] path_openat+0x12d8/0x2c40 [ 123.986037][ T9698] do_filp_open+0x18c/0x36c [ 123.986772][ T9698] do_sys_openat2+0x11c/0x1b4 [ 123.987612][ T9698] __arm64_sys_openat+0x120/0x158 [ 123.988434][ T9698] invoke_syscall+0x98/0x254 [ 123.989192][ T9698] el0_svc_common+0x130/0x23c [ 123.990019][ T9698] do_el0_svc+0x48/0x58 [ 123.990706][ T9698] el0_svc+0x5c/0x254 [ 123.991380][ T9698] el0t_64_sync_handler+0x84/0x12c [ 123.992255][ T9698] el0t_64_sync+0x198/0x19c [ 123.992938][ T9698] [ 123.992938][ T9698] -> #1 (jbd2_handle){++++}-{0:0}: [ 123.993964][ T9698] start_this_handle+0xe74/0x10dc [ 123.994758][ T9698] jbd2__journal_start+0x288/0x51c [ 123.995713][ T9698] __ext4_journal_start_sb+0x378/0x88c [ 123.996761][ T9698] ext4_do_writepages+0xb94/0x39b4 [ 123.997702][ T9698] ext4_writepages+0x178/0x2a0 [ 123.998495][ T9698] do_writepages+0x270/0x468 [ 123.999312][ T9698] file_write_and_wait_range+0x1d0/0x2c4 [ 124.000407][ T9698] ext4_sync_file+0x274/0xb44 [ 124.001243][ T9698] __arm64_sys_fsync+0x170/0x1d4 [ 124.002070][ T9698] invoke_syscall+0x98/0x254 [ 124.002814][ T9698] el0_svc_common+0x130/0x23c [ 124.003590][ T9698] do_el0_svc+0x48/0x58 [ 124.004311][ T9698] el0_svc+0x5c/0x254 [ 124.005027][ T9698] el0t_64_sync_handler+0x84/0x12c [ 124.005853][ T9698] el0t_64_sync+0x198/0x19c [ 124.006703][ T9698] [ 124.006703][ T9698] -> #0 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 124.008021][ T9698] __lock_acquire+0x1774/0x30a4 [ 124.008897][ T9698] lock_acquire+0x14c/0x2e0 [ 124.009718][ T9698] percpu_down_read_internal+0x5c/0x298 [ 124.010727][ T9698] ext4_writepages+0x150/0x2a0 [ 124.011644][ T9698] do_writepages+0x270/0x468 [ 124.012485][ T9698] __writeback_single_inode+0x15c/0x13e8 [ 124.013558][ T9698] writeback_single_inode+0x18c/0x54c [ 124.014467][ T9698] write_inode_now+0x13c/0x1a4 [ 124.015299][ T9698] iput+0x570/0x83c [ 124.015979][ T9698] ext4_xattr_block_set+0x13dc/0x24bc [ 124.016927][ T9698] ext4_expand_extra_isize_ea+0xeb4/0x182c [ 124.017898][ T9698] __ext4_expand_extra_isize+0x2a0/0x37c [ 124.018864][ T9698] __ext4_mark_inode_dirty+0x3c0/0x6fc [ 124.019826][ T9698] ext4_evict_inode+0x930/0x1084 [ 124.020695][ T9698] evict+0x414/0x928 [ 124.021377][ T9698] iput+0x6e4/0x83c [ 124.022053][ T9698] ext4_process_orphan+0x240/0x2b4 [ 124.022883][ T9698] ext4_orphan_cleanup+0x930/0x107c [ 124.023716][ T9698] ext4_fill_super+0x4724/0x4ea4 [ 124.024505][ T9698] get_tree_bdev_flags+0x360/0x414 [ 124.025339][ T9698] get_tree_bdev+0x2c/0x3c [ 124.026121][ T9698] ext4_get_tree+0x28/0x38 [ 124.026898][ T9698] vfs_get_tree+0x90/0x28c [ 124.027672][ T9698] do_new_mount+0x278/0x7f4 [ 124.028458][ T9698] path_mount+0x5b4/0xde0 [ 124.029214][ T9698] __arm64_sys_mount+0x3e8/0x468 [ 124.030054][ T9698] invoke_syscall+0x98/0x254 [ 124.030821][ T9698] el0_svc_common+0x130/0x23c [ 124.031591][ T9698] do_el0_svc+0x48/0x58 [ 124.032229][ T9698] el0_svc+0x5c/0x254 [ 124.032872][ T9698] el0t_64_sync_handler+0x84/0x12c [ 124.033688][ T9698] el0t_64_sync+0x198/0x19c [ 124.034439][ T9698] [ 124.034439][ T9698] other info that might help us debug this: [ 124.034439][ T9698] [ 124.036030][ T9698] Chain exists of: [ 124.036030][ T9698] &sbi->s_writepages_rwsem --> jbd2_handle --> &ei->xattr_sem [ 124.036030][ T9698] [ 124.038101][ T9698] Possible unsafe locking scenario: [ 124.038101][ T9698] [ 124.039268][ T9698] CPU0 CPU1 [ 124.040033][ T9698] ---- ---- [ 124.040905][ T9698] lock(&ei->xattr_sem); [ 124.041605][ T9698] lock(jbd2_handle); [ 124.042631][ T9698] lock(&ei->xattr_sem); [ 124.043746][ T9698] rlock(&sbi->s_writepages_rwsem); [ 124.044653][ T9698] [ 124.044653][ T9698] *** DEADLOCK *** [ 124.044653][ T9698] [ 124.045943][ T9698] 3 locks held by syz.2.923/9698: [ 124.046686][ T9698] #0: ffff0000c735e0e0 (&type->s_umount_key#26/1){+.+.}-{4:4}, at: alloc_super+0x1a0/0x80c [ 124.048259][ T9698] #1: ffff0000c735e618 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x2b0/0x1084 [ 124.049670][ T9698] #2: ffff0000f600ba28 (&ei->xattr_sem){++++}-{4:4}, at: __ext4_mark_inode_dirty+0x358/0x6fc [ 124.051220][ T9698] [ 124.051220][ T9698] stack backtrace: [ 124.052122][ T9698] CPU: 0 UID: 0 PID: 9698 Comm: syz.2.923 Not tainted syzkaller #0 PREEMPT [ 124.053460][ T9698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 124.055038][ T9698] Call trace: [ 124.055573][ T9698] show_stack+0x2c/0x3c (C) [ 124.056300][ T9698] __dump_stack+0x30/0x40 [ 124.057001][ T9698] dump_stack_lvl+0xd8/0x12c [ 124.057707][ T9698] dump_stack+0x1c/0x28 [ 124.058358][ T9698] print_circular_bug+0x324/0x32c [ 124.059074][ T9698] check_noncircular+0x154/0x174 [ 124.059834][ T9698] __lock_acquire+0x1774/0x30a4 [ 124.060616][ T9698] lock_acquire+0x14c/0x2e0 [ 124.061312][ T9698] percpu_down_read_internal+0x5c/0x298 [ 124.062210][ T9698] ext4_writepages+0x150/0x2a0 [ 124.062988][ T9698] do_writepages+0x270/0x468 [ 124.063728][ T9698] __writeback_single_inode+0x15c/0x13e8 [ 124.064673][ T9698] writeback_single_inode+0x18c/0x54c [ 124.065514][ T9698] write_inode_now+0x13c/0x1a4 [ 124.066242][ T9698] iput+0x570/0x83c [ 124.066827][ T9698] ext4_xattr_block_set+0x13dc/0x24bc [ 124.067676][ T9698] ext4_expand_extra_isize_ea+0xeb4/0x182c [ 124.068488][ T9698] __ext4_expand_extra_isize+0x2a0/0x37c [ 124.069317][ T9698] __ext4_mark_inode_dirty+0x3c0/0x6fc [ 124.070155][ T9698] ext4_evict_inode+0x930/0x1084 [ 124.070889][ T9698] evict+0x414/0x928 [ 124.071480][ T9698] iput+0x6e4/0x83c [ 124.072050][ T9698] ext4_process_orphan+0x240/0x2b4 [ 124.072852][ T9698] ext4_orphan_cleanup+0x930/0x107c [ 124.073709][ T9698] ext4_fill_super+0x4724/0x4ea4 [ 124.074438][ T9698] get_tree_bdev_flags+0x360/0x414 [ 124.075189][ T9698] get_tree_bdev+0x2c/0x3c [ 124.075915][ T9698] ext4_get_tree+0x28/0x38 [ 124.076641][ T9698] vfs_get_tree+0x90/0x28c [ 124.077285][ T9698] do_new_mount+0x278/0x7f4 [ 124.078029][ T9698] path_mount+0x5b4/0xde0 [ 124.078743][ T9698] __arm64_sys_mount+0x3e8/0x468 [ 124.079500][ T9698] invoke_syscall+0x98/0x254 [ 124.080264][ T9698] el0_svc_common+0x130/0x23c [ 124.080944][ T9698] do_el0_svc+0x48/0x58 [ 124.081606][ T9698] el0_svc+0x5c/0x254 [ 124.082219][ T9698] el0t_64_sync_handler+0x84/0x12c [ 124.082986][ T9698] el0t_64_sync+0x198/0x19c [ 124.096271][ T9698] ------------[ cut here ]------------ [ 124.096294][ T9698] EA inode 11 i_nlink=2 [ 124.099281][ T9698] WARNING: CPU: 0 PID: 9698 at fs/ext4/xattr.c:1053 ext4_xattr_inode_update_ref+0x444/0x488 [ 124.101451][ T9698] Modules linked in: [ 124.101982][ T9698] CPU: 0 UID: 0 PID: 9698 Comm: syz.2.923 Not tainted syzkaller #0 PREEMPT [ 124.103222][ T9698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 124.105082][ T9698] pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 124.106316][ T9698] pc : ext4_xattr_inode_update_ref+0x444/0x488 [ 124.107221][ T9698] lr : ext4_xattr_inode_update_ref+0x444/0x488 [ 124.108079][ T9698] sp : ffff80009da46dc0 [ 124.108749][ T9698] x29: ffff80009da46e50 x28: 0000000000000000 x27: 1fffe0001ec01b53 [ 124.109970][ T9698] x26: dfff800000000000 x25: ffff80009da46dc0 x24: ffff700013b48db8 [ 124.111197][ T9698] x23: ffff800092e28000 x22: ffff0000f600d8e8 x21: 0000000000000002 [ 124.112428][ T9698] x20: 0000000000000001 x19: ffff0000f600d8a8 x18: 1fffe0003378f088 [ 124.113742][ T9698] x17: ffff80008f7ee000 x16: ffff80008b021030 x15: 0000000000000001 [ 124.114957][ T9698] x14: 1fffe000184f3128 x13: 0000000000000000 x12: 0000000000000000 [ 124.116257][ T9698] x11: 0000000000080000 x10: 0000000000000003 x9 : 4e3bc6294fa9ef00 [ 124.117430][ T9698] x8 : 4e3bc6294fa9ef00 x7 : 0000000000000000 x6 : ffff800080493090 [ 124.118692][ T9698] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff800080485624 [ 124.120013][ T9698] x2 : 0000000000000001 x1 : ffff80008b678a40 x0 : 0000000000000001 [ 124.121185][ T9698] Call trace: [ 124.121682][ T9698] ext4_xattr_inode_update_ref+0x444/0x488 (P) [ 124.122581][ T9698] ext4_xattr_set_entry+0x928/0x15c0 [ 124.123394][ T9698] ext4_xattr_ibody_set+0x204/0x5fc [ 124.124161][ T9698] ext4_expand_extra_isize_ea+0xefc/0x182c [ 124.125004][ T9698] __ext4_expand_extra_isize+0x2a0/0x37c [ 124.125815][ T9698] __ext4_mark_inode_dirty+0x3c0/0x6fc [ 124.126621][ T9698] ext4_evict_inode+0x930/0x1084 [ 124.127393][ T9698] evict+0x414/0x928 [ 124.127939][ T9698] iput+0x6e4/0x83c [ 124.128517][ T9698] ext4_process_orphan+0x240/0x2b4 [ 124.129215][ T9698] ext4_orphan_cleanup+0x930/0x107c [ 124.130037][ T9698] ext4_fill_super+0x4724/0x4ea4 [ 124.130834][ T9698] get_tree_bdev_flags+0x360/0x414 [ 124.131637][ T9698] get_tree_bdev+0x2c/0x3c [ 124.132300][ T9698] ext4_get_tree+0x28/0x38 [ 124.132966][ T9698] vfs_get_tree+0x90/0x28c [ 124.133582][ T9698] do_new_mount+0x278/0x7f4 [ 124.134253][ T9698] path_mount+0x5b4/0xde0 [ 124.134943][ T9698] __arm64_sys_mount+0x3e8/0x468 [ 124.135777][ T9698] invoke_syscall+0x98/0x254 [ 124.136517][ T9698] el0_svc_common+0x130/0x23c [ 124.137165][ T9698] do_el0_svc+0x48/0x58 [ 124.137771][ T9698] el0_svc+0x5c/0x254 [ 124.138356][ T9698] el0t_64_sync_handler+0x84/0x12c [ 124.139167][ T9698] el0t_64_sync+0x198/0x19c [ 124.139842][ T9698] irq event stamp: 2047 [ 124.140495][ T9698] hardirqs last enabled at (2047): [] _raw_spin_unlock_irqrestore+0x38/0x98 [ 124.141986][ T9698] hardirqs last disabled at (2046): [] _raw_spin_lock_irqsave+0x2c/0x7c [ 124.143501][ T9698] softirqs last enabled at (1298): [] local_bh_enable+0x10/0x34 [ 124.144899][ T9698] softirqs last disabled at (1296): [] local_bh_disable+0x10/0x34 [ 124.146283][ T9698] ---[ end trace 0000000000000000 ]--- [ 124.149044][ T9698] EXT4-fs (loop2): 1 orphan inode deleted [ 124.150494][ T9698] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.161245][ T6528] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.927209][ T2412] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.927247][ T2412] ieee802154 phy1 wpan1: encryption failed: -22