last executing test programs: 1m11.086841801s ago: executing program 0 (id=565): r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000d40), 0x2, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) writev(r0, &(0x7f0000000f80)=[{&(0x7f0000000d80)="8d", 0x1}, {0x0, 0x2}], 0x2) 1m10.96433738s ago: executing program 0 (id=570): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) getsockopt$bt_BT_SECURITY(r0, 0x6, 0x23, 0x0, 0xfffffffffffffcdf) 1m10.899273269s ago: executing program 3 (id=573): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r0, 0x1100100) keyctl$chown(0x6, r0, 0x0, 0x0) 1m10.850161411s ago: executing program 0 (id=575): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x1800011, &(0x7f00000001c0), 0x1, 0xb80, &(0x7f0000000c40)="$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") r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)=ANY=[@ANYBLOB="cc0300001000010000000000fcdbdf25000000000000000000000000000000000000000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x3cc}}, 0x0) 1m10.849979255s ago: executing program 3 (id=576): chdir(&(0x7f0000000140)='./file0\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800800080088a8ffff060027"], 0x44}}, 0x0) 1m10.611288595s ago: executing program 3 (id=581): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_mreq(r0, 0x29, 0x7, 0x0, &(0x7f0000001580)) 1m10.554555348s ago: executing program 3 (id=583): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x9, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0x54}}, &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000380)=@framed={{}, [@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r0, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) 1m10.436668169s ago: executing program 3 (id=584): syz_mount_image$bcachefs(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000080)={[{@reconstruct_alloc}, {@read_only}, {@journal_flush_disabled}, {@data_checksum={'data_checksum', 0x3d, 'crc32c'}}, {@btree_node_prefetch}, {@ratelimit_errors}, {@recovery_pass_last={'recovery_pass_last', 0x3d, 'trans_mark_dev_sbs'}}, {@nocow_enabled}, {@no_data_io}]}, 0x1, 0x5910, &(0x7f0000009d00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x101100, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x4018bc0e, &(0x7f0000000340)={0x1001, 0x10001, 0x8000000000008005, 0x1, 0x2}) 1m10.435115511s ago: executing program 0 (id=595): syz_mount_image$btrfs(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x16, &(0x7f00000002c0)={[{@nobarrier}, {@noflushoncommit}, {@nossd}, {@commit={'commit', 0x3d, 0x3f}}, {@nodatasum}, {@nodiscard}, {@nobarrier}, {@compress_algo={'compress', 0x3d, 'zlib'}}, {@noacl}]}, 0x6, 0x5104, &(0x7f0000005480)="$eJzs3U+IVWUfB/Dnzp1x5lVw7isEtsoikGrh4CYioqtMUFF0y8VgBE4tgnThJEi0EMQW/Vt4S4paSK6kFsksjKA2LqQwArehYS7cKAaSi3Yac8957pz7HO+5d0ZtTD8fmTnnOb/zPOe5l7O43+uccwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACEEF74/bNDVfVT16bPnJtp7jywZebyvul1p0OodbbX8vqOrc++8ua2HS9OxA6zL2fLRqPfkFnX81ljVc/GhX69P6+HEMaSAer58pk1pVGLq3vKA1a6fnH30U17mxuPH27Xr146e7L80lkwsdITWCn5eXVh8Vxqdn6PJHt024VTr9Zzimb90xPuX3kRAMCSTLU6i+7H0fwjbre9P60n7WbSbift+AmhXWwsRzbuqn7z3JDWV2iezSwqjPedZ1LP3/9uu5X2T9pJ1FjCPHt3zSPNRL95ziX1lZonAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJ3kkbdHH6qqn7o2febcTHPngS0zl/dNrzsdQqOzvZaVa6vfP9z869utxw78uPmr4xeef6ye94vL0cLO4be48sRkCG8UKhfisBfXhtDqLXSa4cty4a3OynOxAAAAwN3k/s7vkW47i4NjPe1aJ03WOv+iLCxev7j76Ka9zY3HD7frVy+dPbn88Vp9xmvecLxuu7H4UysE4xh/0/EW63HXPaVxqqUjpnn+8fNTf1f1L+X/RnX+j++c/A8AAMDNkP/TcaoNyv/fvfbHJ1X9S/l/Q88hS/k/zjjm/5GwvPwPAAAAd7Lbnf+bpXGqDcr/4y+NfV3Vv5T/p4bL/6PFaceNv8YJ75pcNWjiAAAAQF/x/90Xv1qIeT375iDN6089evBc1Xil/N8cLv+P3dJXBQAAANyMI19sf7iqXsr/reHy//htnTUAAACwFO98OPFBVb2U/2dvnP/rSf5fnS/zKx+yTj/Fv0I4NBnCxMLKXFb4ObSf7hYAAACAWyTm9D8/3flD1X6l/D9Xff//eKeDeP1/z/3/Ctf/hzDVW8ju+vdkXgAAAIB7Svl6/nh7/OzJBf2evz/s9f8P/O/gq1XHL+X//cPl/3pxeSuf/wcAAADL8F97/t/20jjVBt3//76P3v2lqn8p/7eHy/9xuab48k7E9+e9yRDWL6zkdxP8Jh5uV1KYHysUOlpJj22xR16YHy8UOuaSHpsnQ3hwYWV/Uvh/LLSTwpW1eeFIUjgdC/n50C0cSwon4pn2+dp8umnh+1jIL7CYj1dQrOleEpH0uNqvx0Lhhj3Odg8OAABwT4nhOc+yY73NkEbZ+dqgHVYP2mFk0A71QTuMJjukO/bbHmZ7C3F7+8zGpT3//8hw+T++Fflz/vpd/x/i9f/5cw271//PxkIjKczHQiu9Y0ArHiMLux/HYzRaeY8r67sFAAAAuKvF7wXqKzwPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+Ie9e42Rq7oPAH72Od6H1wtJFUKjZJPUOG7i9domD7VUWVOqRqQ064aCqohiY6/J4gU7tikxCpGxiWiEoLRBSj4UYRRFNR+gViAiKSBcpDhC5RFRFQUQKLSGKIiUkkSkCVKoZu89s3fO3Xks9hov/f0k75yZ/3neeXjOvXfOBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/n84/JWr/rZZ/OHfnvP0cxeOX7Zv/YUvX3POqY+HMDHzeEcW7ui//tbxn9959l377lt72z1Hz/1wb14uj4eB6p/O/M51sdajS0O4tyOE7jSwajAL9OT3B2N97xkM4ZQwG6iVmOzPSqQNh+/3hXAgzAZqVX2vL4TBQuD8Jx568MZq4pa+EJaHECppG89Wsjb60sAZvVmgPw1s784Cv3ojUwt8tzMLwDGLb4bai/7QRH2G4bnLNXj99Ry3jr210uF1xcRw43w/W7/AnSroTR+YOKanrVQdC6L09jjs3bYI3m2l7Xyzp634RSr/hvLGbKgSOrdMbt105fTu+EhnGB3talTTAj3PT736pc3zSS+a12HswPBxeR3e9NjyO7tWnvfoPauWv3jwI/tfOtZu/qiwSYvphVYJ+Wtu0TyP0bjPk0Xw9it9SxrxpSuEsPXzv/eZZvHS/H+4+fw/vpzjbWdd7ljr60PZ3Dw+MhgTrwxlc3MAAABYNBbDXtPtow98oll9pfn/SHvH/+Mh/3wyn432cAjjM4n9y0I4bebxLHBHbO6SZSG8fyY1UR9YnwQOh/DumcTKWlVJiSWxxEgS+MlQHhhPAkdiYCIJfCsGbk4C18XAoSSwOQYOJ4GzYyBM1Y/j94fycbQd6IuBjdlGPBTPQvjFUGwt2VbP1KoCAAA4TvLZYU/93cK5DseaIU4vD/W1yhDPwG6YoZLUkM5ga9OqhjV0t6qhs1UNtXHvbT78Us0drWounYbRUZ/h1l/+zWdDE6X5/1jz+X9ljo50lI7/h7Bh5m/M3ZlHpmvxjRN1GQAAAIBjMPC/z3+zWbw0/x9v7/z/uE+kq5A5PBJ3Q2xbFsJYfSCr9g/Lgeyo90AeAAAAgMWgdjy+dix8Kr/NTtFO59Pl/BPzzB8P/I/Pmb/38P0bm/W3NP+faO/8//7626wTR2IvvrYshCWFwA9iL6uBGSMx8ONP1gfy8R+JG+CGWFV+YkKtqhtiiY0xMJYEDjQq8cNaidPqA/mTVWt8f20cU3mJQgAAAABOuLg7IB6Xj+f/f+A3a69qVq40/984v/P/Z+bBpdP7pwdCWN0dQlf6w4BH+rOFAWNgsCNPPNCf1dWVVnVtfwhnVQeWVvV8vv5/d7rG4BN9WVUxcNoHDr56RjXxzb4QVhcDT37u9o9WE7uTQK3xv+wL4X3V0aaNf2dJ1nhP2vjXl4Tw3kKgVtUlS0KoNtabVvVQJb+OQVrVP1dCeEchUKvqY5UQ9gQAFqn4X+mW4oO79ly9bdP09OTOBUzEffh9YevU9OTo5u3TWyoN+rQl6XPdMkbXlsfU7pVvnsmXKLrg7g2D7aRrvxMcK7aV78cvnTiY34/fhXpmxrm2p+7uunTIH/pguYlQ+CbVaMidCzzk/mIls09iqf6YvzcMhCVX7prcOfrFTbt371yT/W03+9rsbzzMlG2rNem26p+rb228PBqulpV4s9tqRbGS1bsv37F6156rV01dvunSyUsnr1jzsbVjZ46tG/v4mauroxrL/rYY6oq5qk6G+sbtbY7rOA719O5CJSfiU0NCQmKxJbYPrGj6f3Jp/r+j+fw/furET/58fYZGx/+H42H+7PHZw/wbY+BAu8f/hxsdza+dGDCSBPbGwF6H+QEAAHh7iJP8uDcz7pX+6crvvNisXGn+v7e93/8fp/X/a0vXn9tomf+VscRYo/X/02X+a+v/7220/n+6zH9t/f8Db8H6/1fWAskm+YX1/wEAgLeDE7f+f8vl/dMLBJQytFzeP71AQClDy2X8271AwLzX/3/2P//qv0MTpfn/ze3N/y3cDwAAACePL//ZVb/TLF6a/x9ob/5/4tf/C43O/x9pFJhotDCg9f8AAABYpBqt/zd8ff/FzcqV5v+H2pv/x9MuOutyx1pfH8rWtAvpmnavDNV+MgAAAACLQ2cYHe1pM2/dyqjr33ybT+VLgTZLFz3/J0fnd/7/4fbm/3W/y7jpseV3dq0879HX71m1/MWDH9n/0uzxfwAAAGDhtLtfAgAAAAAAAAAAAAAAeOs9/x/71jWLl37/HzbMPN7o9//xun/x9wXvrMsda229/l9+//xP37VnZsnCR4ZC+GAxsG3ftlNCfm3+FcXAgxetfFc1sS8tcf9zZ79QTVycBj616tTXqomzksDGuEjiu9NAvKria0uTQFxe8d/TQNweh9JAbx746tJsHB3ptvrpYLatOtJt9fRgCMsKgdq2uncwa6MjHeAtSaA2wC+kgTjAP88DnWmv7hrIehUDg7HobQNZrwAAOGnFb4E9YevU9ORY/Aofb0/vrr+N6pYsu7ZcbUebzT+TL012wd0bBttJd6XfRWevNd4TKtUhrCl9XS1m6ZgZ5fGppcWme2eDIbda7a2zQbnUfDddb+MR9WUjGt28fXpLT8uBr2udZW13yyxrSpOdYpbOmU3aRi1t9KWNEbW5bdrocrzfGUZHu5JcfxCDw6FOq1dEu7/XL67z1+hVUMxzxdH9v2pWX2n+P9ze/L9SHNdr+cUA9sYr6/3dMsv8AwAAwML66vpffyP+++z1Dz/ZLG9p/j/S3vw/7sHKDwVnezsOx+v/718Wwsyl9YezwB2xuUuWhfD+mdRELJFdUP/cWGIsC9wRd5isjCU2TtRXtSQGDiWBnwzlgcNJ4EgM5HspDoZ8V87fD4Xw0ZnUhvoSO2KJ4STwmRgYSQKjMTCWBJbGwHgSeHlpHphIAv8WA2GqflvdvTTfVgAAAPORz7N66u+GdJ53qLtVho5WGfpbZehslaHSKkOjUcT7344ZepKTVzoKmXrSWvuSWkoZ4sXw592vUobww/qcacFS0/H8g9r5Bh31Ge77RHclNFGa/4+1N//vr7/NWj8S5/+z1//LAj+I3ftaPHV8JAZ+/Mn6QL5j4Eic7N5Qq2oiL5FP2m+IJcZjYCQJ7IiB8SSwcUMeOPCu+kA+0641vr/W+FReohAAAACAEy7uIIi7aeL8/7ZdXxloVi6f/4/U5v/j7c3/Y3sDxcaui7UeXRrCvR2zvakFVg1mgbgfYzD+PP49gyGcUtjBUSsx2Z+V6E0aDt/vy36h3ptW9b2+7McH8f75Tzz04I3VxC19ISwv7H2ptfFsJWujLw2c0ZsF+tPA9u4sEPf81ALf7cwCcMxqewXjCyo/1aVmeO5yDV5/b5drgqbDK+0DnSPfXL+5WiilHa75PtWa+T1tTfffctyU3h6HvdsW47tt2Lut+EUq/4byxmyoEjq3TG7ddOX07vhI8ZesJQv0PBd/pdpO+ji8Dve++d62Vkk7MJZ8fIzNXW7u12FHrO6mx5bf2bXyvEfvWbX8xYMf2f9S291oIP5Q+KFr/nXwR4XNu9AqIX/NLbrPkwmfJ4vxv4ERT1sIYcPLX7+hWbx0/H+ivfl/d3I749dxY+5aFsKHChv3kbj5/3hZ9jlYCGSfku8oB7JD7v811PCTEwAAAI632u6O2v6Cqfw2OyE8nSeX80/MM3/cXzE+Z/52+93/1xctbxYvzf83Np//L0m66fi/4/8sEMf/53Sy74pekj6w95h2RZeqY0E4/j+nk/3d5vj/nBz/d/x/Lo7/t+D4/5xO9qet9C1phy9dIYQX/+iBp5vFS/P/He3N/63/N/eifbX1/zY2Wv9vR6P1//Za/w8AAFhQDRaaS+d5pdX7ShnS1ftKGVouENhyiUHr/817/b8XTn/2N6GJ0vx/b3vz//hyGCi2vljW/xvZ0KCqm2Ngh4UBAQAAOBk12kEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAW+u+f/ifLc3iD//2nKefu3D8sn3rL3z5mnNOfTyEqZnHO7JwR//1t47//M6z79p339rb7jl67ocrebme/PZ363LHWl8fCuFA4ZHBmHhlqHpnNnD+p+/a011NPDIUwgeLgW37tp1STXxrKIQVxcCDF618VzWxLy1x/3Nnv1BNXJwGPrXq1NeqibPyQEfa3X9cmnW3I+3ujUtDWFYI1Lp72dL6qmpt/Gke6Ezb+KfBrI0YGIxFvzGYtRED07HE1JIQVneH0JVW9XAlq6orrepfKllVXWlVX66EcFYIoTut6rnerKrudOSP92ZVxcBpHzj46hnVxIHeEFYXA09+7vaPVhNfSAK1xv+iN4T3VV8yaePf7ska70kbv6UnhPeGEHrTEr/szkr0piWe7w7hHYVArfHPd4ewJ/C2ED986j7Rdu25etum6enJnQuY6M3b6gtbp6YnRzdvn95SSfrUSEch/ca1b37sz7z6pc3V2wvu3jDYTro7L9cz0+W1PXV3153svY/96i9WMvt8lOqP+XvDQFhy5a7JnaNf3LR798412d92s6/N/nbl0WxbrVks22pFsZLVuy/fsXrXnqtXTV2+6dLJSyevWPOxtWNnjq0b+/iZq6ujGsv+Nh5qb9tDvf3ED/X07kIlJ+IDQOLEJqqvy5OgGxKLOtFZ9+k2drJ/kJe+6M92tCdUZj6gS9OKYpaOmVEej0GvT4Irjv+gR+L3lJYjWlOaOJSyrG2dZV1pMjGbpS/LMvO9rjQ5LNbUObNJ4/3OMDra1Wg7DNffLW7en6Wbdx6eyjdju2kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgP9jBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCjtwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYgWMBAAAAAGH+1mH0bAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAlwIAAP//5DAgkw==") setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000200)=ANY=[], 0x841, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000040)=ANY=[], 0x835, 0x2) 1m10.381714374s ago: executing program 4 (id=586): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000040)=0x8, 0x4) 1m10.247510632s ago: executing program 4 (id=587): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x68, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0x0, 0x0, 0x2}}}}}}, 0x0) 1m9.945392447s ago: executing program 4 (id=588): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001880)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0xfffffffffffffdb8, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x1}}]}}, @TCA_RATE={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48801}, 0x0) 1m9.462072007s ago: executing program 4 (id=589): r0 = socket$kcm(0x11, 0xa, 0x300) syz_emit_ethernet(0xfdef, &(0x7f0000000200)=ANY=[], 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001b80)=""/4106, 0xfffffe80}], 0x8}, 0x0) 1m9.049229518s ago: executing program 4 (id=590): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) 1m8.989228033s ago: executing program 0 (id=592): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000140)='./file1\x00', 0x8c0, &(0x7f00000001c0)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c6572726f72733d72656d6f756e742d726f2c61636c2c00a9b504852143b698d2e379891a0dde7f9adfca8cbec85bf8e749e04e"], 0x11, 0x444f, &(0x7f0000004480)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) lseek(r0, 0x0, 0x1) 1m8.591216084s ago: executing program 3 (id=598): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = socket(0x22, 0x2, 0x3) ioctl$IMGETCOUNT(r0, 0x80044942, &(0x7f00000002c0)) 1m8.321005402s ago: executing program 1 (id=600): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002100)='/proc/partitions\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000080)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) tkill(r1, 0xd) 1m8.131553257s ago: executing program 2 (id=603): r0 = socket$kcm(0x11, 0xa, 0x300) syz_emit_ethernet(0xfdef, &(0x7f0000000200)=ANY=[], 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001b80)=""/4106, 0xfffffe80}], 0x8}, 0x0) 1m8.12720273s ago: executing program 1 (id=613): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x30, 0x0, 0x0, 0x36fd}, {0x30, 0x0, 0x0, 0x80000001}, {0x6}]}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000b40)=ANY=[], 0x457f) 1m8.026586566s ago: executing program 1 (id=604): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000002280)={0xc, {"a2e3ad214fc752f91b3e090987f70e06d038e7ff7fc6e5539b3264078b089b0e083860090890e0878f0f1ac6e7049b334c959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31310d3b5d0001cd3b78070daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5003a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d780231c9c99a80002695104f674c2431dca141fae269ca050e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f068bb87af8b90fd8f08876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d541da95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd7072f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d27df2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb84bed4b281769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f3eb22802e4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c743ba2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2c1cde360500000000000000b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea5211a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e51074b41bc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) 1m7.885879544s ago: executing program 2 (id=605): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@link_local={0x3}, @multicast, @val={@void, {0x8100, 0x0, 0x0, 0x2}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @empty, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) 1m7.767941394s ago: executing program 4 (id=606): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f00000001c0)='./bus\x00', 0x3008015, &(0x7f0000000300)=ANY=[@ANYRES32=0x0, @ANYRES16=0x0, @ANYRESDEC, @ANYRES8], 0x5, 0x559a, &(0x7f000000cf00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fsync(r0) 1m7.68883317s ago: executing program 1 (id=607): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x22, 0xffffffffffffffff, &(0x7f0000000100)=0x48) 1m7.688726113s ago: executing program 2 (id=608): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f00000000c0)=0x801, 0x4) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) 1m7.48137047s ago: executing program 1 (id=609): r0 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r0, &(0x7f0000000180)={0x2a, 0x1, 0x4001}, 0xc) bind$qrtr(r0, &(0x7f0000000080)={0x2a, 0x1, 0x4001}, 0xc) 1m7.480868022s ago: executing program 2 (id=610): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x3) shutdown(r0, 0x2) 1m7.334978591s ago: executing program 0 (id=611): syz_mount_image$udf(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x81, 0x4ac, &(0x7f00000011c0)="$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") r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 1m7.334029735s ago: executing program 2 (id=612): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x68, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0x0, 0x0, 0x2}}}}}}, 0x0) 1m7.206494356s ago: executing program 1 (id=614): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000280)='\b\x00\x00\x00', 0x4}, {&(0x7f0000000640)='\x00', 0x1}], 0x2) 29.275622059s ago: executing program 2 (id=615): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000040), 0x10) sendmsg$netlink(r0, &(0x7f0000005d80)={&(0x7f0000000440)=@kern={0x1d, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000005cc0)=[{&(0x7f0000000540)=ANY=[], 0x10}, {&(0x7f0000001f40)={0x134, 0x11, 0x400, 0x70bd2a, 0x25dfdbfc, "", [@generic="96d5ca4ec94685d95d02fccda06116c423d3b58b840614f40d8101799566ba8464c489e4a3dbc83f68f0b28329cbf13d4c93f169197e12a996a5c644121dfa7dd2805cc13b4ad5b84c9cdf07f9d0effd1372e12940", @generic="e77bef1fd3d83bd72f4247750a75beafd891e81ac47308521fb3fef4a6cc58d644aa093743e2f5042e64ec55ba1eb4cf23319d4cd440746e61d6bf8ad177358bbf0e29026fb7c78db08b8f4d1a592db0f9abc1daada3221ac7375e24f4e29d06b6714f2cbb4d139291f558e8c19a7f082361c5a42eb8b2cf30cefaac2da61e3a35751ca34eedad720c99b5ef07ae56ba5a3d8ee9c9e727b96339c74a692e8fdab3166eb092d63730a88feed54720808e440f233f4a3641b647b3c514a7000182235473bf39b3b4d8", @nested={0x4, 0x118}]}, 0x134}, {&(0x7f0000000780)={0xd4, 0x2a, 0x300, 0x70bd27, 0x25dfdbfe, "", [@generic="0fe9dd82312b0b0bbe4f1082758180bac7", @typed={0x8, 0xe9, 0x0, 0x0, @uid}, @generic="c0a846330416858d7c62415ba676a363047facd88c2f5b5c5ebcec2a763789db9e19f0e268c2ae4238c12f5f673c902dfc4fc2f42cd2e1c21a3170db6fa9e3c7dc3bf5e620b010996a671cbb166415e7183e398fbaf922fe6ca75821cce0ef4182d466769877845bdb78b6857f682bf42f4c969bb2ec967c8270d1c50e16a7cde6722b9a4d5563c913af7e754f1c9e8dc97cf72430ad30bdc74e02edb187fb20df63d2f17e001dce"]}, 0xd4}], 0x3, 0x0, 0x0, 0x44011}, 0x0) 0s ago: executing program 32 (id=611): syz_mount_image$udf(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x81, 0x4ac, &(0x7f00000011c0)="$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") r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.143' (ED25519) to the list of known hosts. [ 34.107106][ T6479] cgroup: Unknown subsys name 'net' [ 34.365945][ T6479] cgroup: Unknown subsys name 'cpuset' [ 34.369830][ T6479] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 34.692755][ T6479] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 36.155144][ T6499] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 36.169839][ T6504] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 36.170950][ T6504] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 36.171417][ T6504] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 36.172214][ T6504] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 36.172544][ T6504] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 36.173058][ T6504] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 36.173857][ T6504] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 36.174231][ T6504] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 36.174888][ T6504] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 36.175199][ T6504] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 36.176090][ T6504] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 36.177012][ T6504] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 36.177265][ T6504] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 36.177435][ T6504] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 36.178362][ T6504] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 36.178603][ T6504] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 36.178859][ T6504] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 36.179931][ T6504] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 36.185244][ T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 36.208181][ T6493] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 36.210537][ T6493] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 36.223485][ T6493] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 36.226709][ T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 36.227337][ T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 36.544400][ T6497] chnl_net:caif_netlink_parms(): no params data found [ 36.574021][ T6500] chnl_net:caif_netlink_parms(): no params data found [ 36.579756][ T6495] chnl_net:caif_netlink_parms(): no params data found [ 36.695247][ T6497] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.697683][ T6497] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.699816][ T6497] bridge_slave_0: entered allmulticast mode [ 36.702405][ T6497] bridge_slave_0: entered promiscuous mode [ 36.755668][ T6497] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.755743][ T6497] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.755880][ T6497] bridge_slave_1: entered allmulticast mode [ 36.756678][ T6497] bridge_slave_1: entered promiscuous mode [ 36.768288][ T6491] chnl_net:caif_netlink_parms(): no params data found [ 36.792472][ T6497] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.807549][ T6500] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.809555][ T6500] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.811722][ T6500] bridge_slave_0: entered allmulticast mode [ 36.814267][ T6500] bridge_slave_0: entered promiscuous mode [ 36.815926][ T6500] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.815971][ T6500] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.816068][ T6500] bridge_slave_1: entered allmulticast mode [ 36.817117][ T6500] bridge_slave_1: entered promiscuous mode [ 36.836413][ T6497] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.859883][ T6500] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.880218][ T6500] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.880486][ T6492] chnl_net:caif_netlink_parms(): no params data found [ 36.891819][ T6497] team0: Port device team_slave_0 added [ 36.892701][ T6495] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.892797][ T6495] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.892920][ T6495] bridge_slave_0: entered allmulticast mode [ 36.896239][ T6495] bridge_slave_0: entered promiscuous mode [ 36.898191][ T6495] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.898236][ T6495] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.898339][ T6495] bridge_slave_1: entered allmulticast mode [ 36.899199][ T6495] bridge_slave_1: entered promiscuous mode [ 36.922855][ T6497] team0: Port device team_slave_1 added [ 36.966440][ T6500] team0: Port device team_slave_0 added [ 36.989867][ T6495] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.999158][ T6500] team0: Port device team_slave_1 added [ 37.004426][ T6497] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.006487][ T6497] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.013957][ T6497] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.018954][ T6495] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.025512][ T6491] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.027527][ T6491] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.029499][ T6491] bridge_slave_0: entered allmulticast mode [ 37.031988][ T6491] bridge_slave_0: entered promiscuous mode [ 37.035110][ T6491] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.037076][ T6491] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.038110][ T6491] bridge_slave_1: entered allmulticast mode [ 37.038995][ T6491] bridge_slave_1: entered promiscuous mode [ 37.065815][ T6497] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.065865][ T6497] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.065894][ T6497] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.101939][ T6500] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.103454][ T6500] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.103485][ T6500] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.105097][ T6500] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.105123][ T6500] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.105151][ T6500] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.126725][ T6492] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.128757][ T6492] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.130824][ T6492] bridge_slave_0: entered allmulticast mode [ 37.133467][ T6492] bridge_slave_0: entered promiscuous mode [ 37.136421][ T6492] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.137984][ T6492] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.138098][ T6492] bridge_slave_1: entered allmulticast mode [ 37.138923][ T6492] bridge_slave_1: entered promiscuous mode [ 37.155767][ T6495] team0: Port device team_slave_0 added [ 37.157447][ T6495] team0: Port device team_slave_1 added [ 37.166720][ T6491] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.177226][ T6500] hsr_slave_0: entered promiscuous mode [ 37.177922][ T6500] hsr_slave_1: entered promiscuous mode [ 37.201221][ T6497] hsr_slave_0: entered promiscuous mode [ 37.203562][ T6497] hsr_slave_1: entered promiscuous mode [ 37.203923][ T6497] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.207509][ T6497] Cannot create hsr debugfs directory [ 37.219840][ T6491] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.232666][ T6492] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.235278][ T6492] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.256292][ T6491] team0: Port device team_slave_0 added [ 37.282088][ T6495] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.282148][ T6495] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.282200][ T6495] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.299276][ T6491] team0: Port device team_slave_1 added [ 37.301186][ T6492] team0: Port device team_slave_0 added [ 37.310325][ T6495] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.310369][ T6495] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.310398][ T6495] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.331492][ T6492] team0: Port device team_slave_1 added [ 37.361676][ T6491] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.361727][ T6491] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.361770][ T6491] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.362953][ T6491] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.362980][ T6491] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.363007][ T6491] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.379543][ T6492] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.379578][ T6492] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.379608][ T6492] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.411034][ T6492] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.411088][ T6492] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.411117][ T6492] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.463075][ T6495] hsr_slave_0: entered promiscuous mode [ 37.466070][ T6495] hsr_slave_1: entered promiscuous mode [ 37.466811][ T6495] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.466842][ T6495] Cannot create hsr debugfs directory [ 37.521018][ T6491] hsr_slave_0: entered promiscuous mode [ 37.521571][ T6491] hsr_slave_1: entered promiscuous mode [ 37.522000][ T6491] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.522043][ T6491] Cannot create hsr debugfs directory [ 37.551686][ T6492] hsr_slave_0: entered promiscuous mode [ 37.552274][ T6492] hsr_slave_1: entered promiscuous mode [ 37.552628][ T6492] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.552657][ T6492] Cannot create hsr debugfs directory [ 37.702952][ T6500] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 37.729316][ T6500] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 37.740016][ T6500] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 37.744953][ T6500] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 37.813855][ T6497] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 37.826911][ T6497] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 37.832163][ T6497] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 37.848803][ T6495] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 37.855254][ T6497] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 37.869699][ T6495] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 37.875319][ T6495] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 37.880269][ T6495] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 37.948003][ T6491] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 37.952840][ T6491] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 37.961009][ T6491] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 37.966675][ T6500] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.966976][ T6491] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 38.029374][ T6500] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.038085][ T6495] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.046303][ T2444] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.046428][ T2444] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.052243][ T6492] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 38.056537][ T6492] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 38.060510][ T6492] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 38.072421][ T6495] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.085710][ T6492] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 38.091818][ T2644] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.091900][ T2644] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.100574][ T2644] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.100659][ T2644] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.111366][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.111445][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.117322][ T6497] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.136163][ T6497] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.141662][ T2444] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.141758][ T2444] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.180653][ T2444] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.180731][ T2444] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.202264][ T6491] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.218609][ T6497] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 38.218670][ T6497] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.236049][ T6491] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.247549][ T6495] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 38.250822][ T6495] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.263963][ T55] Bluetooth: hci0: command tx timeout [ 38.265676][ T55] Bluetooth: hci3: command tx timeout [ 38.267305][ T55] Bluetooth: hci2: command tx timeout [ 38.268943][ T55] Bluetooth: hci1: command tx timeout [ 38.270559][ T55] Bluetooth: hci4: command tx timeout [ 38.291146][ T2563] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.291237][ T2563] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.292167][ T2563] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.292209][ T2563] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.326717][ T6491] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 38.329779][ T6491] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.380908][ T6492] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.390501][ T6492] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.408340][ T1545] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.408427][ T1545] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.424794][ T1545] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.424873][ T1545] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.480036][ T6500] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.511491][ T6497] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.549596][ T6500] veth0_vlan: entered promiscuous mode [ 38.558915][ T6500] veth1_vlan: entered promiscuous mode [ 38.563793][ T6497] veth0_vlan: entered promiscuous mode [ 38.569959][ T6495] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.588851][ T6497] veth1_vlan: entered promiscuous mode [ 38.630229][ T6491] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.657596][ T6497] veth0_macvtap: entered promiscuous mode [ 38.669182][ T6497] veth1_macvtap: entered promiscuous mode [ 38.687253][ T6500] veth0_macvtap: entered promiscuous mode [ 38.689098][ T6500] veth1_macvtap: entered promiscuous mode [ 38.696380][ T6500] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.698267][ T6500] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.699777][ T6500] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.699857][ T6500] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.699897][ T6500] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.699927][ T6500] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.711450][ T6495] veth0_vlan: entered promiscuous mode [ 38.718166][ T6495] veth1_vlan: entered promiscuous mode [ 38.734858][ T6492] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.737937][ T6497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.738025][ T6497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.738735][ T6497] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.742289][ T6497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.742320][ T6497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.742889][ T6497] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.759053][ T6491] veth0_vlan: entered promiscuous mode [ 38.761952][ T6491] veth1_vlan: entered promiscuous mode [ 38.798269][ T6497] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.798345][ T6497] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.799529][ T6497] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.799563][ T6497] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.834155][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.834239][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.850727][ T6495] veth0_macvtap: entered promiscuous mode [ 38.854799][ T6495] veth1_macvtap: entered promiscuous mode [ 38.864658][ T6495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.868018][ T6495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.870677][ T6495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.875016][ T6495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.878921][ T6495] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.898769][ T2644] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.898830][ T2644] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.915999][ T6491] veth0_macvtap: entered promiscuous mode [ 38.924923][ T6495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.924981][ T6495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.925017][ T6495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.925044][ T6495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.925585][ T6495] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.946755][ T6495] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.949224][ T6495] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.951668][ T6495] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.954352][ T6495] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.969083][ T6491] veth1_macvtap: entered promiscuous mode [ 38.998651][ T6491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.001994][ T6491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.002991][ T6491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.003015][ T6491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.003037][ T6491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.003057][ T6491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.005614][ T6491] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.017550][ T1545] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.017582][ T1545] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.040074][ T6500] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 39.049280][ T6491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.049345][ T6491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.049365][ T6491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.049386][ T6491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.049405][ T6491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.049425][ T6491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.049994][ T6491] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.052332][ T6491] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.052372][ T6491] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.052402][ T6491] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.052431][ T6491] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.076529][ T2563] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.076578][ T2563] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.215913][ T2644] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.215973][ T2644] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.221439][ T6580] loop2: detected capacity change from 0 to 512 [ 39.231585][ T6492] veth0_vlan: entered promiscuous mode [ 39.237989][ T6580] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 39.238053][ T6580] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 39.247391][ T6580] EXT4-fs (loop2): 1 truncate cleaned up [ 39.251029][ T6580] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.288852][ T6580] EXT4-fs error (device loop2): ext4_generic_delete_entry:2670: inode #2: block 13: comm syz.2.7: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 39.298025][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.298082][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.303773][ T6580] EXT4-fs error (device loop2) in ext4_delete_entry:2741: Corrupt filesystem [ 39.308665][ T6580] EXT4-fs warning (device loop2): ext4_rename_delete:3728: inode #2: comm syz.2.7: Deleting old file: nlink 4, error=-117 [ 39.329015][ T6492] veth1_vlan: entered promiscuous mode [ 39.341592][ T2644] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.341653][ T2644] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.379576][ T6500] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.469415][ T6492] veth0_macvtap: entered promiscuous mode [ 39.471263][ T6492] veth1_macvtap: entered promiscuous mode [ 39.546370][ T2563] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.546436][ T2563] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.563873][ T6492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.563951][ T6492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.563991][ T6492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.564018][ T6492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.564043][ T6492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.564069][ T6492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.564094][ T6492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.564119][ T6492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.564740][ T6492] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.566121][ T6492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.566164][ T6492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.566190][ T6492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.566215][ T6492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.566240][ T6492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.566265][ T6492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.566289][ T6492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.566314][ T6492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.566844][ T6492] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.568384][ T6492] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.568441][ T6492] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.568479][ T6492] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.568516][ T6492] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.650731][ T6584] loop3: detected capacity change from 0 to 32768 [ 39.928244][ T2444] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.928315][ T2444] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.937101][ T6590] loop1: detected capacity change from 0 to 32768 [ 39.939862][ T6590] ======================================================= [ 39.939862][ T6590] WARNING: The mand mount option has been deprecated and [ 39.939862][ T6590] and is ignored by this kernel. Remove the mand [ 39.939862][ T6590] option from the mount to silence this warning. [ 39.939862][ T6590] ======================================================= [ 39.981952][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.982021][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.014834][ T6590] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 40.078035][ T6590] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 40.111241][ T6607] loop0: detected capacity change from 0 to 64 [ 40.320375][ T6495] ocfs2: Unmounting device (7,1) on (node local) [ 40.345447][ T6059] Bluetooth: hci4: command tx timeout [ 40.345520][ T6059] Bluetooth: hci1: command tx timeout [ 40.345572][ T6059] Bluetooth: hci2: command tx timeout [ 40.345611][ T6059] Bluetooth: hci3: command tx timeout [ 40.345649][ T6059] Bluetooth: hci0: command tx timeout [ 40.499244][ T6629] loop0: detected capacity change from 0 to 256 [ 40.499893][ T6629] exfat: Deprecated parameter 'utf8' [ 40.499963][ T6629] exfat: Deprecated parameter 'utf8' [ 40.531237][ T6629] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x2a9dd593, utbl_chksum : 0xe619d30d) [ 40.578013][ T6634] warning: `syz.4.26' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 40.928685][ T6652] capability: warning: `syz.3.35' uses 32-bit capabilities (legacy support in use) [ 41.250007][ T6648] loop0: detected capacity change from 0 to 32768 [ 41.376875][ T6646] loop2: detected capacity change from 0 to 32768 [ 41.388454][ T6641] loop4: detected capacity change from 0 to 40427 [ 41.391261][ T6641] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 41.391768][ T6641] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 41.398264][ T6641] F2FS-fs (loop4): invalid crc value [ 41.400438][ T6646] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.33 (6646) [ 41.480303][ T6646] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 41.480462][ T6646] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm [ 41.480504][ T6646] BTRFS info (device loop2): using free-space-tree [ 41.492022][ T6641] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 41.492178][ T6641] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 41.525750][ T6648] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): Using encoding defined by superblock: utf8-12.1.0 [ 41.567011][ T6654] loop3: detected capacity change from 0 to 40427 [ 41.571165][ T6648] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,no_data_io [ 41.571165][ T6648] allowing incompatible features above 0.0: (unknown version) [ 41.571332][ T6648] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 41.571466][ T6648] bcachefs (loop0): Version upgrade required: [ 41.571466][ T6648] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 41.571466][ T6648] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.25: extent_flags [ 41.571466][ T6648] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 41.571773][ T6648] bcachefs (loop0): dropping and reconstructing all alloc info [ 41.592569][ T6654] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x7 [ 41.596140][ T6654] F2FS-fs (loop3): invalid crc value [ 41.608271][ T6648] bcachefs (loop0): accounting_read... done [ 41.675328][ T6648] bcachefs (loop0): alloc_read... done [ 41.675397][ T6648] bcachefs (loop0): snapshots_read... done [ 41.675833][ T6648] bcachefs (loop0): done starting filesystem [ 41.678663][ T6646] BTRFS info (device loop2): rebuilding free space tree [ 41.760181][ T6654] F2FS-fs (loop3): Start checkpoint disabled! [ 41.786229][ T6654] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 41.799199][ T6491] bcachefs (loop0): shutting down [ 41.930636][ T1545] kworker/u8:5: attempt to access beyond end of device [ 41.930636][ T1545] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 41.931185][ T1545] CPU: 1 UID: 0 PID: 1545 Comm: kworker/u8:5 Not tainted 6.15.0-rc6-syzkaller-ga82e92598ab1 #0 PREEMPT [ 41.931210][ T1545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 41.931218][ T1545] Workqueue: writeback wb_workfn (flush-7:3) [ 41.931240][ T1545] Call trace: [ 41.931244][ T1545] show_stack+0x2c/0x3c (C) [ 41.931259][ T1545] __dump_stack+0x30/0x40 [ 41.931270][ T1545] dump_stack_lvl+0xd8/0x12c [ 41.931280][ T1545] dump_stack+0x1c/0x28 [ 41.931290][ T1545] f2fs_handle_critical_error+0x34c/0x4b8 [ 41.931305][ T1545] f2fs_stop_checkpoint+0x58/0x6c [ 41.931317][ T1545] f2fs_write_end_io+0x794/0xadc [ 41.931331][ T1545] bio_endio+0x81c/0x858 [ 41.931344][ T1545] submit_bio_noacct+0x158/0x176c [ 41.931356][ T1545] submit_bio+0x354/0x4d4 [ 41.931366][ T1545] f2fs_submit_write_bio+0x13c/0x324 [ 41.931379][ T1545] __submit_merged_bio+0x254/0x704 [ 41.931392][ T1545] __submit_merged_write_cond+0x23c/0x4ac [ 41.931405][ T1545] f2fs_write_data_pages+0x1e9c/0x27ac [ 41.931419][ T1545] do_writepages+0x2c0/0x6a8 [ 41.931433][ T1545] __writeback_single_inode+0x15c/0x13e8 [ 41.931444][ T1545] writeback_sb_inodes+0x558/0xe38 [ 41.931454][ T1545] wb_writeback+0x3cc/0xd70 [ 41.931465][ T1545] wb_workfn+0x338/0xdc0 [ 41.931478][ T1545] process_one_work+0x7e8/0x156c [ 41.931489][ T1545] worker_thread+0x958/0xed8 [ 41.931499][ T1545] kthread+0x5fc/0x75c [ 41.931512][ T1545] ret_from_fork+0x10/0x20 [ 41.931700][ T1545] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 42.056809][ T6491] bcachefs (loop0): shutdown complete [ 42.094218][ T6500] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 42.283405][ T31] audit: type=1326 audit(42.000:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6699 comm="syz.2.46" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9215b728 code=0x0 [ 42.381635][ T6706] loop3: detected capacity change from 0 to 1024 [ 42.388530][ T6695] loop1: detected capacity change from 0 to 32768 [ 42.423953][ T55] Bluetooth: hci0: command tx timeout [ 42.424020][ T55] Bluetooth: hci3: command tx timeout [ 42.424072][ T55] Bluetooth: hci2: command tx timeout [ 42.424110][ T55] Bluetooth: hci1: command tx timeout [ 42.550692][ T6709] loop4: detected capacity change from 0 to 512 [ 42.570951][ T2446] hfsplus: b-tree write err: -5, ino 4 [ 42.580929][ T6709] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #17: comm syz.4.49: iget: bogus i_mode (0) [ 42.586924][ T6709] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.49: couldn't read orphan inode 17 (err -117) [ 42.590994][ T6709] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.642503][ T6709] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.49: bg 0: block 7: invalid block bitmap [ 42.716865][ T6712] team0: entered promiscuous mode [ 42.718700][ T6712] team_slave_0: entered promiscuous mode [ 42.720805][ T6712] team_slave_1: entered promiscuous mode [ 42.731311][ T6712] team0: Cannot enslave team device to itself [ 42.735579][ T6712] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 42.751552][ T6492] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.165125][ T6733] loop1: detected capacity change from 0 to 128 [ 43.182588][ T6735] loop2: detected capacity change from 0 to 512 [ 43.214650][ T6735] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.61: iget: bad extended attribute block 1 [ 43.222944][ T6733] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 43.223146][ T6735] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.61: couldn't read orphan inode 15 (err -117) [ 43.243695][ T6735] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.268186][ T6059] Bluetooth: hci1: unexpected Set CIG Parameters response data [ 43.316737][ T6740] loop4: detected capacity change from 0 to 8192 [ 43.361728][ T6495] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 43.370775][ T6500] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.385531][ T6508] loop4: p1 < > p3 < p5 > p4 [ 43.385636][ T6508] loop4: partition table partially beyond EOD, truncated [ 43.385868][ T6508] loop4: p1 start 4294967040 is beyond EOD, truncated [ 43.503454][ T6740] loop4: p1 < > p3 < p5 > p4 [ 43.505205][ T6740] loop4: partition table partially beyond EOD, truncated [ 43.507601][ T6740] loop4: p1 start 4294967040 is beyond EOD, truncated [ 43.956547][ T6508] udevd[6508]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 43.962372][ T6484] udevd[6484]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 43.967779][ T6757] loop4: detected capacity change from 0 to 512 [ 43.983976][ T6757] EXT4-fs: Ignoring removed nobh option [ 44.010136][ T6757] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.71: invalid indirect mapped block 256 (level 2) [ 44.017528][ T6585] udevd[6585]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 44.029033][ T6757] EXT4-fs (loop4): 2 truncates cleaned up [ 44.029936][ T6757] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.052050][ T6757] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.71: bg 0: block 5: invalid block bitmap [ 44.058252][ T6757] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 44.058333][ T6757] EXT4-fs (loop4): This should not happen!! Data will be lost [ 44.058333][ T6757] [ 44.058358][ T6757] EXT4-fs (loop4): Total free blocks count 0 [ 44.058380][ T6757] EXT4-fs (loop4): Free/Dirty block details [ 44.058407][ T6757] EXT4-fs (loop4): free_blocks=0 [ 44.058434][ T6757] EXT4-fs (loop4): dirty_blocks=2 [ 44.058484][ T6757] EXT4-fs (loop4): Block reservation details [ 44.058505][ T6757] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 44.080035][ T6492] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.131414][ T6742] loop2: detected capacity change from 0 to 32768 [ 44.199525][ T6508] udevd[6508]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 44.210371][ T6484] udevd[6484]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 44.230376][ T6585] udevd[6585]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 44.290217][ T6768] loop1: detected capacity change from 0 to 4096 [ 44.330563][ T6742] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): Using encoding defined by superblock: utf8-12.1.0 [ 44.363174][ T6742] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,erasure_code,degraded,no_splitbrain_check,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,nocow [ 44.363174][ T6742] allowing incompatible features above 0.0: (unknown version) [ 44.383217][ T6742] bcachefs (loop2): recovering from clean shutdown, journal seq 10 [ 44.385918][ T6742] bcachefs (loop2): Version upgrade required: [ 44.385918][ T6742] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 44.385918][ T6742] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.25: extent_flags [ 44.385918][ T6742] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 44.403134][ T6742] bcachefs (loop2): dropping and reconstructing all alloc info [ 44.432577][ T6742] bcachefs (loop2): accounting_read... done [ 44.479646][ T6742] bcachefs (loop2): alloc_read... done [ 44.479701][ T6742] bcachefs (loop2): snapshots_read... done [ 44.480480][ T6742] bcachefs (loop2): done starting filesystem [ 44.504273][ T6059] Bluetooth: hci2: command tx timeout [ 44.504346][ T6059] Bluetooth: hci3: command tx timeout [ 44.504402][ T6059] Bluetooth: hci0: command tx timeout [ 44.585560][ T55] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 44.585684][ T55] Bluetooth: hci4: Injecting HCI hardware error event [ 44.586367][ T55] Bluetooth: hci4: hardware error 0x00 [ 44.670227][ T6500] bcachefs (loop2): shutting down [ 44.776104][ T6500] bcachefs (loop2): shutdown complete [ 44.966591][ T6718] loop3: detected capacity change from 0 to 131072 [ 44.973050][ T6718] F2FS-fs (loop3): QUOTA feature is enabled, so ignore jquota_fmt [ 45.099684][ T6718] F2FS-fs (loop3): Mounted with checkpoint version = 1b41e955 [ 45.121612][ T6780] loop1: detected capacity change from 0 to 40427 [ 45.125431][ T6780] F2FS-fs (loop1): Mismatch start address, segment0(512) cp_blkaddr(175702528) [ 45.125494][ T6780] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 45.134705][ T6780] F2FS-fs (loop1): invalid crc value [ 45.215587][ T6780] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 45.215656][ T6780] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 45.529828][ T6781] orangefs_mount: mount request failed with -4 [ 45.789571][ T6794] loop3: detected capacity change from 0 to 32768 [ 45.848088][ T6794] XFS (loop3): DAX unsupported by block device. Turning off DAX. [ 45.852772][ T6794] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 45.949641][ T6794] XFS (loop3): Ending clean mount [ 45.971883][ T6794] XFS (loop3): Quotacheck needed: Please wait. [ 45.978836][ T43] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x50/0xf0, xfs_cntbt block 0x10 [ 45.978960][ T43] XFS (loop3): Unmount and run xfs_repair [ 45.978983][ T43] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 45.979006][ T43] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 45.979028][ T43] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10 ................ [ 45.979049][ T43] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 45.979070][ T43] 00000030: 00 00 00 00 20 bb 84 11 00 00 04 4e 00 00 00 02 .... ......N.... [ 45.979091][ T43] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00 ...`............ [ 45.979112][ T43] 00000050: 00 00 00 00 00 00 07 00 00 00 00 00 00 00 00 00 ................ [ 45.979132][ T43] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 45.979153][ T43] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 45.979243][ T43] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x1f8/0x380" at daddr 0x10 len 8 error 74 [ 45.981831][ T6794] XFS (loop3): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 46.111084][ T6803] loop1: detected capacity change from 0 to 32768 [ 46.154400][ T6497] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 46.171848][ T6497] XFS (loop3): Uncorrected metadata errors detected; please run xfs_repair. [ 46.195933][ T6801] loop0: detected capacity change from 0 to 32768 [ 46.591102][ T6801] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): Using encoding defined by superblock: utf8-12.1.0 [ 46.600478][ T6843] loop4: detected capacity change from 0 to 128 [ 46.612564][ T6845] netlink: 8 bytes leftover after parsing attributes in process `syz.3.93'. [ 46.623228][ T6843] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 46.687964][ T6843] FAT-fs (loop4): error, invalid access to FAT (entry 0x0affffff) [ 46.688082][ T6843] FAT-fs (loop4): Filesystem has been set read-only [ 46.688395][ T6843] FAT-fs (loop4): error, invalid access to FAT (entry 0x0affffff) [ 46.699821][ T6801] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=crc64,compression=lz4,journal_flush_disabled,fsck,recovery_pass_last=set_may_go_rw,reconstruct_alloc,no_data_io [ 46.699821][ T6801] allowing incompatible features above 0.0: (unknown version) [ 46.699979][ T6801] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 46.700106][ T6801] bcachefs (loop0): Version upgrade required: [ 46.700106][ T6801] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 46.700106][ T6801] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.25: extent_flags [ 46.700106][ T6801] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 46.713632][ T6801] bcachefs (loop0): dropping and reconstructing all alloc info [ 46.745064][ T6801] bcachefs (loop0): accounting_read... done [ 46.783710][ T6801] bcachefs (loop0): alloc_read... done [ 46.783768][ T6801] bcachefs (loop0): snapshots_read... done [ 46.783852][ T6801] bcachefs (loop0): check_allocations... [ 46.787998][ T6847] loop3: detected capacity change from 0 to 1024 [ 46.796612][ T6492] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 46.840094][ T6801] done [ 46.874882][ T6801] bcachefs (loop0): going read-write [ 46.893695][ T6801] bcachefs (loop0): done starting filesystem [ 46.953023][ T6847] hfsplus: request for non-existent node 33423360 in B*Tree [ 46.953135][ T6847] hfsplus: request for non-existent node 33423360 in B*Tree [ 46.983479][ T55] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 47.040058][ T6859] loop1: detected capacity change from 0 to 1024 [ 47.153188][ T6491] bcachefs (loop0): shutting down [ 47.153644][ T6491] bcachefs (loop0): going read-only [ 47.153887][ T6491] bcachefs (loop0): finished waiting for writes to stop [ 47.188558][ T43] hfsplus: b-tree write err: -5, ino 4 [ 47.195921][ T6491] bcachefs (loop0): flushing journal and stopping allocators, journal seq 10 [ 47.196211][ T6491] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 10 [ 47.212258][ T6491] bcachefs (loop0): unclean shutdown complete, journal seq 11 [ 47.241806][ T6491] bcachefs (loop0): done going read-only, filesystem not clean [ 47.384435][ T55] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 47.386409][ T6491] bcachefs (loop0): shutdown complete [ 47.388237][ T55] Bluetooth: hci1: Injecting HCI hardware error event [ 47.389171][ T6059] Bluetooth: hci1: hardware error 0x00 [ 47.529076][ T6857] loop2: detected capacity change from 0 to 65536 [ 47.553849][ T6877] ubi31: attaching mtd0 [ 47.555535][ T6877] ubi31 error: ubi_attach_mtd_dev: bad VID header (536871680) or data offsets (536871744) [ 47.616453][ T6885] loop1: detected capacity change from 0 to 512 [ 48.260749][ T6896] loop4: detected capacity change from 0 to 32768 [ 48.450549][ T6935] loop1: detected capacity change from 0 to 512 [ 48.493883][ T6937] loop3: detected capacity change from 0 to 4096 [ 48.538803][ T6937] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 48.546714][ T6935] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.567363][ T6937] netlink: 460 bytes leftover after parsing attributes in process `syz.3.136'. [ 48.607202][ T6948] loop2: detected capacity change from 0 to 128 [ 48.611955][ T6497] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.636359][ T6948] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 48.671974][ T6495] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.735059][ T6500] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 48.752254][ T6956] CUSE: unknown device info "KJ éH+ßãÛ¤2Lh¸änLþ1Õ`†CcÝòn§õ†îì8­¨×0º©®(À3Õ¶ië®â>f¡Çè_Ù®,°ð<Ö_e¤FÀÆ" [ 48.760195][ T6956] CUSE: unknown device info "3ÜŸ•,²¥Ì˜õ" [ 48.761907][ T6956] CUSE: unknown device info "Jô©Ð2S Zûü !e/ëÅúãõž‘­J½+-n´¸a4¼ßØÁDÿ|G$öó­5O~©q ´ƒ [ 48.761907][ T6956] f𳦧ìýzóÚXÁSAäx¡Ùjª½T¾Ç”¨åw— üæšxRÉQ÷®(hÒj pøVdY0¨Æ|M?2JÿúIšvö^RÎ@´å" [ 48.767596][ T6956] CUSE: unknown device info "!ToÛ}Ý&|L+U²®oæõϲ±„Ð"–¨FstVµ:׌E• gJºî‹ÂÁ<@cÁ”²ûŽ4ÊTáM˜M|©·š‚ô" [ 48.767645][ T6956] CUSE: DEVNAME unspecified [ 48.819163][ T6960] netlink: 28 bytes leftover after parsing attributes in process `syz.3.143'. [ 48.830976][ T6896] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): Using encoding defined by superblock: utf8-12.1.0 [ 48.869055][ T6896] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,recovery_pass_last=set_may_go_rw,reconstruct_alloc,nocow [ 48.869055][ T6896] allowing incompatible features above 0.0: (unknown version) [ 48.904062][ T6896] bcachefs (loop4): recovering from clean shutdown, journal seq 10 [ 48.904230][ T6896] bcachefs (loop4): Version upgrade required: [ 48.904230][ T6896] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 48.904230][ T6896] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.25: extent_flags [ 48.904230][ T6896] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 48.965251][ T6896] bcachefs (loop4): dropping and reconstructing all alloc info [ 48.983731][ T6896] bcachefs (loop4): accounting_read... done [ 49.067201][ T6896] bcachefs (loop4): alloc_read... done [ 49.067302][ T6896] bcachefs (loop4): snapshots_read... done [ 49.067377][ T6896] bcachefs (loop4): check_allocations... [ 49.124180][ T6974] openvswitch: netlink: nsh attr 12032 is out of range max 3 [ 49.128556][ T6974] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 49.139126][ T6896] done [ 49.174879][ T6896] bcachefs (loop4): going read-write [ 49.191510][ T6896] bcachefs (loop4): done starting filesystem [ 49.371985][ T6972] loop0: detected capacity change from 0 to 32768 [ 49.400935][ T6492] bcachefs (loop4): shutting down [ 49.400998][ T6492] bcachefs (loop4): going read-only [ 49.401044][ T6492] bcachefs (loop4): finished waiting for writes to stop [ 49.434168][ T6492] bcachefs (loop4): flushing journal and stopping allocators, journal seq 11 [ 49.441944][ T6492] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 11 [ 49.475683][ T6492] bcachefs (loop4): unclean shutdown complete, journal seq 12 [ 49.485045][ T6972] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): Using encoding defined by superblock: utf8-12.1.0 [ 49.489203][ T6972] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): filesystem UUID already open [ 49.493613][ T6972] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete [ 49.512833][ T6492] bcachefs (loop4): done going read-only, filesystem not clean [ 49.596088][ T6972] bcachefs: bch2_fs_get_tree() error: EINVAL [ 49.711506][ T6059] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 49.730188][ T6492] bcachefs (loop4): shutdown complete [ 49.888581][ T6999] loop3: detected capacity change from 0 to 40427 [ 49.894594][ T6999] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 49.896870][ T6999] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 49.930178][ T7008] loop2: detected capacity change from 0 to 256 [ 50.007383][ T6978] loop1: detected capacity change from 0 to 32768 [ 50.018424][ T6999] F2FS-fs (loop3): invalid crc value [ 50.036837][ T6978] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.151 (6978) [ 50.065799][ T6978] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 50.069091][ T6978] BTRFS info (device loop1): using crc32c (crc32c-arm64) checksum algorithm [ 50.071617][ T6978] BTRFS info (device loop1): using free-space-tree [ 50.074753][ T6999] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 50.119290][ T6999] F2FS-fs (loop3): Try to recover 1th superblock, ret: -30 [ 50.119361][ T6999] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 50.157061][ T7028] loop0: detected capacity change from 0 to 2048 [ 50.198919][ T7031] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 50.330121][ T6495] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 50.732182][ T7057] loop3: detected capacity change from 0 to 2048 [ 50.817885][ T7057] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 51.090321][ T7046] loop0: detected capacity change from 0 to 40427 [ 51.094052][ T7046] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x3fffff [ 51.094111][ T7046] F2FS-fs (loop0): Image doesn't support compression [ 51.094145][ T7046] F2FS-fs (loop0): Image doesn't support compression [ 51.095429][ T7046] F2FS-fs (loop0): invalid crc value [ 51.193187][ T7071] loop3: detected capacity change from 0 to 256 [ 51.205610][ T7046] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 51.263069][ T7071] FAT-fs (loop3): Directory bread(block 64) failed [ 51.265741][ T7071] FAT-fs (loop3): Directory bread(block 65) failed [ 51.265866][ T7071] FAT-fs (loop3): Directory bread(block 66) failed [ 51.265914][ T7071] FAT-fs (loop3): Directory bread(block 67) failed [ 51.265997][ T7071] FAT-fs (loop3): Directory bread(block 68) failed [ 51.266041][ T7071] FAT-fs (loop3): Directory bread(block 69) failed [ 51.266109][ T7071] FAT-fs (loop3): Directory bread(block 70) failed [ 51.266152][ T7071] FAT-fs (loop3): Directory bread(block 71) failed [ 51.266220][ T7071] FAT-fs (loop3): Directory bread(block 72) failed [ 51.266264][ T7071] FAT-fs (loop3): Directory bread(block 73) failed [ 51.312127][ T7063] loop2: detected capacity change from 0 to 32768 [ 51.321397][ T7063] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.179 (7063) [ 51.342998][ T7063] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 51.343100][ T7063] BTRFS info (device loop2): using crc32c (crc32c-arm64) checksum algorithm [ 51.343136][ T7063] BTRFS info (device loop2): using free-space-tree [ 51.343184][ T7063] workqueue: max_active -2147483648 requested for btrfs-worker is out of range, clamping between 1 and 2048 [ 51.348172][ T7063] workqueue: max_active -2147483648 requested for btrfs-delalloc is out of range, clamping between 1 and 2048 [ 51.368808][ T7063] workqueue: max_active -2147483648 requested for btrfs-endio is out of range, clamping between 1 and 2048 [ 51.372865][ T7063] workqueue: max_active -2147483648 requested for btrfs-endio-meta is out of range, clamping between 1 and 2048 [ 51.380427][ T7063] workqueue: max_active -2147483648 requested for btrfs-rmw is out of range, clamping between 1 and 2048 [ 51.380854][ T7063] workqueue: max_active -2147483648 requested for btrfs-endio-write is out of range, clamping between 1 and 2048 [ 51.381566][ T7063] workqueue: max_active -2147483648 requested for btrfs-compressed-write is out of range, clamping between 1 and 2048 [ 51.456502][ T6491] syz-executor: attempt to access beyond end of device [ 51.456502][ T6491] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 51.457304][ T6491] CPU: 0 UID: 0 PID: 6491 Comm: syz-executor Not tainted 6.15.0-rc6-syzkaller-ga82e92598ab1 #0 PREEMPT [ 51.457324][ T6491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 51.457332][ T6491] Call trace: [ 51.457336][ T6491] show_stack+0x2c/0x3c (C) [ 51.457353][ T6491] __dump_stack+0x30/0x40 [ 51.457365][ T6491] dump_stack_lvl+0xd8/0x12c [ 51.457375][ T6491] dump_stack+0x1c/0x28 [ 51.457385][ T6491] f2fs_handle_critical_error+0x34c/0x4b8 [ 51.457400][ T6491] f2fs_stop_checkpoint+0x58/0x6c [ 51.457412][ T6491] f2fs_write_end_io+0x794/0xadc [ 51.457426][ T6491] bio_endio+0x81c/0x858 [ 51.457439][ T6491] submit_bio_noacct+0x158/0x176c [ 51.457451][ T6491] submit_bio+0x354/0x4d4 [ 51.457461][ T6491] f2fs_submit_write_bio+0x13c/0x324 [ 51.457475][ T6491] __submit_merged_bio+0x254/0x704 [ 51.457488][ T6491] __submit_merged_write_cond+0x23c/0x4ac [ 51.457501][ T6491] f2fs_write_data_pages+0x1e9c/0x27ac [ 51.457515][ T6491] do_writepages+0x2c0/0x6a8 [ 51.457529][ T6491] filemap_fdatawrite+0x144/0x1e8 [ 51.457540][ T6491] f2fs_sync_dirty_inodes+0x2b8/0x788 [ 51.457552][ T6491] f2fs_write_checkpoint+0x684/0x1694 [ 51.457565][ T6491] kill_f2fs_super+0x21c/0x584 [ 51.457578][ T6491] deactivate_locked_super+0xc4/0x12c [ 51.457590][ T6491] deactivate_super+0xe0/0x100 [ 51.457602][ T6491] cleanup_mnt+0x31c/0x3ac [ 51.457614][ T6491] __cleanup_mnt+0x20/0x30 [ 51.457626][ T6491] task_work_run+0x1dc/0x260 [ 51.457638][ T6491] do_notify_resume+0x16c/0x1ec [ 51.457651][ T6491] el0_svc+0xb4/0x17c [ 51.457664][ T6491] el0t_64_sync_handler+0x78/0x108 [ 51.457678][ T6491] el0t_64_sync+0x198/0x19c [ 51.457691][ T6491] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 51.497839][ T7063] BTRFS info (device loop2): rebuilding free space tree [ 51.499864][ T43] workqueue: max_active -2147483648 requested for btrfs-cache is out of range, clamping between 1 and 2048 [ 51.585819][ T7060] loop1: detected capacity change from 0 to 32768 [ 51.662861][ T7088] loop3: detected capacity change from 0 to 256 [ 51.679288][ T7088] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 51.744210][ T6500] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 51.762898][ T7060] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): Using encoding defined by superblock: utf8-12.1.0 [ 51.772177][ T7088] exFAT-fs (loop3): error, invalid access to FAT free cluster (entry 0x00000008) [ 51.819163][ T7097] binder: 7096:7097 ioctl 541b 0 returned -22 [ 51.950815][ T7060] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 51.950815][ T7060] allowing incompatible features above 0.0: (unknown version) [ 51.979321][ T7060] bcachefs (loop1): initializing new filesystem [ 51.980031][ T7060] bcachefs (loop1): going read-write [ 52.078910][ T7060] bcachefs (loop1): marking superblocks [ 52.105663][ T7060] bcachefs (loop1): initializing freespace [ 52.119226][ T7114] netlink: 'syz.3.189': attribute type 30 has an invalid length. [ 52.133889][ T7060] bcachefs (loop1): done initializing freespace [ 52.135308][ T7060] bcachefs (loop1): reading snapshots table [ 52.135407][ T7060] bcachefs (loop1): reading snapshots done [ 52.199467][ T7060] bcachefs (loop1): done starting filesystem [ 52.311001][ T6495] bcachefs (loop1): shutting down [ 52.311058][ T6495] bcachefs (loop1): going read-only [ 52.311084][ T6495] bcachefs (loop1): finished waiting for writes to stop [ 52.474287][ T7109] loop4: detected capacity change from 0 to 32768 [ 52.513382][ T6495] bcachefs (loop1): flushing journal and stopping allocators, journal seq 3 [ 52.555770][ T7109] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 52.601033][ T6495] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 3 [ 52.618400][ T6495] bcachefs (loop1): clean shutdown complete, journal seq 4 [ 52.707779][ T6495] bcachefs (loop1): marking filesystem clean [ 52.790964][ T7109] XFS (loop4): Ending clean mount [ 52.890066][ T6492] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 52.925524][ T6495] bcachefs (loop1): shutdown complete [ 53.181021][ T7150] loop2: detected capacity change from 0 to 512 [ 53.324454][ T7138] loop3: detected capacity change from 0 to 32768 [ 53.503207][ T7162] loop4: detected capacity change from 0 to 4096 [ 53.530001][ T7135] loop0: detected capacity change from 0 to 40427 [ 53.532032][ T7135] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x3fffff [ 53.532117][ T7135] F2FS-fs (loop0): heap/no_heap options were deprecated [ 53.532161][ T7135] F2FS-fs (loop0): Image doesn't support compression [ 53.535215][ T7135] F2FS-fs (loop0): invalid crc value [ 53.680400][ T7135] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 53.768086][ T6491] syz-executor: attempt to access beyond end of device [ 53.768086][ T6491] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 53.773249][ T6491] CPU: 0 UID: 0 PID: 6491 Comm: syz-executor Not tainted 6.15.0-rc6-syzkaller-ga82e92598ab1 #0 PREEMPT [ 53.773272][ T6491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 53.773279][ T6491] Call trace: [ 53.773283][ T6491] show_stack+0x2c/0x3c (C) [ 53.773301][ T6491] __dump_stack+0x30/0x40 [ 53.773313][ T6491] dump_stack_lvl+0xd8/0x12c [ 53.773323][ T6491] dump_stack+0x1c/0x28 [ 53.773333][ T6491] f2fs_handle_critical_error+0x34c/0x4b8 [ 53.773348][ T6491] f2fs_stop_checkpoint+0x58/0x6c [ 53.773360][ T6491] f2fs_write_end_io+0x794/0xadc [ 53.773374][ T6491] bio_endio+0x81c/0x858 [ 53.773388][ T6491] submit_bio_noacct+0x158/0x176c [ 53.773400][ T6491] submit_bio+0x354/0x4d4 [ 53.773410][ T6491] f2fs_submit_write_bio+0x13c/0x324 [ 53.773423][ T6491] __submit_merged_bio+0x254/0x704 [ 53.773436][ T6491] __submit_merged_write_cond+0x23c/0x4ac [ 53.773449][ T6491] f2fs_write_data_pages+0x1e9c/0x27ac [ 53.773463][ T6491] do_writepages+0x2c0/0x6a8 [ 53.773477][ T6491] filemap_fdatawrite+0x144/0x1e8 [ 53.773488][ T6491] f2fs_sync_dirty_inodes+0x2b8/0x788 [ 53.773500][ T6491] f2fs_write_checkpoint+0x684/0x1694 [ 53.773512][ T6491] kill_f2fs_super+0x21c/0x584 [ 53.773526][ T6491] deactivate_locked_super+0xc4/0x12c [ 53.773539][ T6491] deactivate_super+0xe0/0x100 [ 53.773550][ T6491] cleanup_mnt+0x31c/0x3ac [ 53.773563][ T6491] __cleanup_mnt+0x20/0x30 [ 53.773575][ T6491] task_work_run+0x1dc/0x260 [ 53.773587][ T6491] do_notify_resume+0x16c/0x1ec [ 53.773599][ T6491] el0_svc+0xb4/0x17c [ 53.773614][ T6491] el0t_64_sync_handler+0x78/0x108 [ 53.773627][ T6491] el0t_64_sync+0x198/0x19c [ 53.789696][ T6491] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 53.865401][ T7178] netlink: 8 bytes leftover after parsing attributes in process `syz.2.217'. [ 53.865482][ T7178] netlink: 4 bytes leftover after parsing attributes in process `syz.2.217'. [ 53.865534][ T7178] netlink: 'syz.2.217': attribute type 18 has an invalid length. [ 54.080991][ T7175] loop3: detected capacity change from 0 to 32768 [ 54.109681][ T7175] [ 54.109681][ T7175] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 54.109681][ T7175] [ 54.138535][ T7175] ERROR: (device loop3): dbAlloc: the hint is outside the map [ 54.138535][ T7175] [ 54.193105][ T1545] read_mapping_page failed! [ 54.195416][ T1545] ERROR: (device loop3): txAbort: [ 54.195416][ T1545] [ 54.197627][ T1545] jfs_write_inode: jfs_commit_inode failed! [ 54.199882][ T6497] [ 54.199882][ T6497] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 54.199882][ T6497] [ 54.200197][ T6497] [ 54.200197][ T6497] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 54.200197][ T6497] [ 54.354938][ T7197] loop4: detected capacity change from 0 to 16 [ 54.374335][ T7197] erofs (device loop4): mounted with root inode @ nid 36. [ 54.397585][ T7197] erofs (device loop4): readahead error at folio 144 @ nid 36 [ 54.397715][ T7197] erofs (device loop4): bogus lookback distance 25964 @ lcn 143 of nid 36 [ 54.397742][ T7197] erofs (device loop4): readahead error at folio 143 @ nid 36 [ 54.439131][ T7197] erofs (device loop4): readahead error at folio 142 @ nid 36 [ 54.439206][ T7197] erofs (device loop4): readahead error at folio 141 @ nid 36 [ 54.439230][ T7197] erofs (device loop4): readahead error at folio 140 @ nid 36 [ 54.439254][ T7197] erofs (device loop4): readahead error at folio 139 @ nid 36 [ 54.439278][ T7197] erofs (device loop4): readahead error at folio 138 @ nid 36 [ 54.439301][ T7197] erofs (device loop4): bogus lookback distance 24939 @ lcn 137 of nid 36 [ 54.439325][ T7197] erofs (device loop4): readahead error at folio 137 @ nid 36 [ 54.439348][ T7197] erofs (device loop4): readahead error at folio 136 @ nid 36 [ 54.439371][ T7197] erofs (device loop4): readahead error at folio 135 @ nid 36 [ 54.439394][ T7197] erofs (device loop4): bogus lookback distance 364 @ lcn 134 of nid 36 [ 54.439417][ T7197] erofs (device loop4): readahead error at folio 134 @ nid 36 [ 54.439440][ T7197] erofs (device loop4): readahead error at folio 133 @ nid 36 [ 54.439463][ T7197] erofs (device loop4): readahead error at folio 132 @ nid 36 [ 54.439486][ T7197] erofs (device loop4): readahead error at folio 131 @ nid 36 [ 54.439509][ T7197] erofs (device loop4): readahead error at folio 130 @ nid 36 [ 54.439532][ T7197] erofs (device loop4): readahead error at folio 129 @ nid 36 [ 54.439555][ T7197] erofs (device loop4): bogus lookback distance 24939 @ lcn 128 of nid 36 [ 54.439578][ T7197] erofs (device loop4): readahead error at folio 128 @ nid 36 [ 54.439602][ T7197] erofs (device loop4): readahead error at folio 127 @ nid 36 [ 54.439625][ T7197] erofs (device loop4): readahead error at folio 126 @ nid 36 [ 54.439647][ T7197] erofs (device loop4): bogus lookback distance 25964 @ lcn 125 of nid 36 [ 54.439671][ T7197] erofs (device loop4): readahead error at folio 125 @ nid 36 [ 54.439694][ T7197] erofs (device loop4): readahead error at folio 124 @ nid 36 [ 54.439716][ T7197] erofs (device loop4): readahead error at folio 123 @ nid 36 [ 54.439739][ T7197] erofs (device loop4): readahead error at folio 122 @ nid 36 [ 54.439762][ T7197] erofs (device loop4): readahead error at folio 121 @ nid 36 [ 54.439794][ T7197] erofs (device loop4): readahead error at folio 120 @ nid 36 [ 54.439818][ T7197] erofs (device loop4): bogus lookback distance 24939 @ lcn 119 of nid 36 [ 54.439841][ T7197] erofs (device loop4): readahead error at folio 119 @ nid 36 [ 54.439870][ T7197] erofs (device loop4): readahead error at folio 118 @ nid 36 [ 54.439894][ T7197] erofs (device loop4): readahead error at folio 117 @ nid 36 [ 54.439917][ T7197] erofs (device loop4): bogus lookback distance 25964 @ lcn 116 of nid 36 [ 54.439940][ T7197] erofs (device loop4): readahead error at folio 116 @ nid 36 [ 54.439963][ T7197] erofs (device loop4): readahead error at folio 115 @ nid 36 [ 54.439986][ T7197] erofs (device loop4): readahead error at folio 114 @ nid 36 [ 54.440009][ T7197] erofs (device loop4): readahead error at folio 113 @ nid 36 [ 54.440032][ T7197] erofs (device loop4): readahead error at folio 112 @ nid 36 [ 54.440055][ T7197] erofs (device loop4): readahead error at folio 111 @ nid 36 [ 54.440078][ T7197] erofs (device loop4): bogus lookback distance 24939 @ lcn 110 of nid 36 [ 54.440101][ T7197] erofs (device loop4): readahead error at folio 110 @ nid 36 [ 54.440124][ T7197] erofs (device loop4): readahead error at folio 109 @ nid 36 [ 54.440147][ T7197] erofs (device loop4): readahead error at folio 108 @ nid 36 [ 54.440170][ T7197] erofs (device loop4): bogus lookback distance 25964 @ lcn 107 of nid 36 [ 54.440193][ T7197] erofs (device loop4): readahead error at folio 107 @ nid 36 [ 54.440216][ T7197] erofs (device loop4): readahead error at folio 106 @ nid 36 [ 54.440239][ T7197] erofs (device loop4): readahead error at folio 105 @ nid 36 [ 54.440262][ T7197] erofs (device loop4): readahead error at folio 104 @ nid 36 [ 54.440285][ T7197] erofs (device loop4): readahead error at folio 103 @ nid 36 [ 54.440308][ T7197] erofs (device loop4): readahead error at folio 102 @ nid 36 [ 54.440331][ T7197] erofs (device loop4): bogus lookback distance 24939 @ lcn 101 of nid 36 [ 54.440354][ T7197] erofs (device loop4): readahead error at folio 101 @ nid 36 [ 54.440377][ T7197] erofs (device loop4): readahead error at folio 100 @ nid 36 [ 54.440400][ T7197] erofs (device loop4): readahead error at folio 99 @ nid 36 [ 54.440422][ T7197] erofs (device loop4): bogus lookback distance 25964 @ lcn 98 of nid 36 [ 54.440446][ T7197] erofs (device loop4): readahead error at folio 98 @ nid 36 [ 54.440469][ T7197] erofs (device loop4): readahead error at folio 97 @ nid 36 [ 54.440492][ T7197] erofs (device loop4): readahead error at folio 96 @ nid 36 [ 54.440514][ T7197] erofs (device loop4): readahead error at folio 95 @ nid 36 [ 54.440537][ T7197] erofs (device loop4): readahead error at folio 94 @ nid 36 [ 54.440560][ T7197] erofs (device loop4): readahead error at folio 93 @ nid 36 [ 54.440583][ T7197] erofs (device loop4): bogus lookback distance 24939 @ lcn 92 of nid 36 [ 54.440606][ T7197] erofs (device loop4): readahead error at folio 92 @ nid 36 [ 54.440629][ T7197] erofs (device loop4): readahead error at folio 91 @ nid 36 [ 54.440651][ T7197] erofs (device loop4): readahead error at folio 90 @ nid 36 [ 54.440674][ T7197] erofs (device loop4): bogus lookback distance 25964 @ lcn 89 of nid 36 [ 54.440697][ T7197] erofs (device loop4): readahead error at folio 89 @ nid 36 [ 54.440720][ T7197] erofs (device loop4): readahead error at folio 88 @ nid 36 [ 54.440743][ T7197] erofs (device loop4): readahead error at folio 87 @ nid 36 [ 54.440765][ T7197] erofs (device loop4): readahead error at folio 86 @ nid 36 [ 54.440797][ T7197] erofs (device loop4): readahead error at folio 85 @ nid 36 [ 54.440820][ T7197] erofs (device loop4): readahead error at folio 84 @ nid 36 [ 54.440843][ T7197] erofs (device loop4): bogus lookback distance 24939 @ lcn 83 of nid 36 [ 54.440869][ T7197] erofs (device loop4): readahead error at folio 83 @ nid 36 [ 54.440893][ T7197] erofs (device loop4): readahead error at folio 82 @ nid 36 [ 54.440916][ T7197] erofs (device loop4): readahead error at folio 81 @ nid 36 [ 54.440939][ T7197] erofs (device loop4): bogus lookback distance 25964 @ lcn 80 of nid 36 [ 54.440962][ T7197] erofs (device loop4): readahead error at folio 80 @ nid 36 [ 54.440985][ T7197] erofs (device loop4): readahead error at folio 79 @ nid 36 [ 54.441008][ T7197] erofs (device loop4): readahead error at folio 78 @ nid 36 [ 54.441031][ T7197] erofs (device loop4): readahead error at folio 77 @ nid 36 [ 54.441054][ T7197] erofs (device loop4): readahead error at folio 76 @ nid 36 [ 54.441077][ T7197] erofs (device loop4): readahead error at folio 75 @ nid 36 [ 54.441099][ T7197] erofs (device loop4): bogus lookback distance 24939 @ lcn 74 of nid 36 [ 54.441123][ T7197] erofs (device loop4): readahead error at folio 74 @ nid 36 [ 54.441145][ T7197] erofs (device loop4): readahead error at folio 73 @ nid 36 [ 54.441169][ T7197] erofs (device loop4): inconsistent algorithmtype 0 for nid 36 [ 54.441191][ T7197] erofs (device loop4): readahead error at folio 72 @ nid 36 [ 54.441214][ T7197] erofs (device loop4): readahead error at folio 71 @ nid 36 [ 54.441237][ T7197] erofs (device loop4): readahead error at folio 70 @ nid 36 [ 54.441260][ T7197] erofs (device loop4): readahead error at folio 69 @ nid 36 [ 54.441283][ T7197] erofs (device loop4): readahead error at folio 68 @ nid 36 [ 54.443016][ T7197] erofs (device loop4): readahead error at folio 66 @ nid 36 [ 54.443053][ T7197] erofs (device loop4): bogus lookback distance 4459 @ lcn 65 of nid 36 [ 54.443077][ T7197] erofs (device loop4): readahead error at folio 65 @ nid 36 [ 54.443100][ T7197] erofs (device loop4): readahead error at folio 64 @ nid 36 [ 54.443123][ T7197] erofs (device loop4): readahead error at folio 63 @ nid 36 [ 54.443146][ T7197] erofs (device loop4): bogus lookback distance 25964 @ lcn 62 of nid 36 [ 54.443169][ T7197] erofs (device loop4): readahead error at folio 62 @ nid 36 [ 54.443192][ T7197] erofs (device loop4): readahead error at folio 61 @ nid 36 [ 54.443215][ T7197] erofs (device loop4): readahead error at folio 60 @ nid 36 [ 54.443237][ T7197] erofs (device loop4): readahead error at folio 59 @ nid 36 [ 54.464421][ T7197] erofs (device loop4): readahead error at folio 58 @ nid 36 [ 54.464448][ T7197] erofs (device loop4): readahead error at folio 57 @ nid 36 [ 54.464472][ T7197] erofs (device loop4): bogus lookback distance 24939 @ lcn 56 of nid 36 [ 54.464496][ T7197] erofs (device loop4): readahead error at folio 56 @ nid 36 [ 54.464519][ T7197] erofs (device loop4): readahead error at folio 55 @ nid 36 [ 54.464542][ T7197] erofs (device loop4): readahead error at folio 54 @ nid 36 [ 54.464565][ T7197] erofs (device loop4): bogus lookback distance 25964 @ lcn 53 of nid 36 [ 54.464588][ T7197] erofs (device loop4): readahead error at folio 53 @ nid 36 [ 54.464611][ T7197] erofs (device loop4): readahead error at folio 52 @ nid 36 [ 54.464634][ T7197] erofs (device loop4): readahead error at folio 51 @ nid 36 [ 54.464657][ T7197] erofs (device loop4): readahead error at folio 50 @ nid 36 [ 54.464681][ T7197] erofs (device loop4): readahead error at folio 49 @ nid 36 [ 54.464704][ T7197] erofs (device loop4): readahead error at folio 48 @ nid 36 [ 54.464727][ T7197] erofs (device loop4): bogus lookback distance 24939 @ lcn 47 of nid 36 [ 54.464750][ T7197] erofs (device loop4): readahead error at folio 47 @ nid 36 [ 54.464773][ T7197] erofs (device loop4): readahead error at folio 46 @ nid 36 [ 54.464851][ T7197] erofs (device loop4): readahead error at folio 44 @ nid 36 [ 54.464882][ T7197] erofs (device loop4): bogus lookback distance 0 @ lcn 43 of nid 36 [ 54.464905][ T7197] erofs (device loop4): readahead error at folio 43 @ nid 36 [ 54.465213][ T7197] erofs (device loop4): bogus lookback distance 49 @ lcn 41 of nid 36 [ 54.465244][ T7197] erofs (device loop4): readahead error at folio 41 @ nid 36 [ 54.465267][ T7197] erofs (device loop4): readahead error at folio 40 @ nid 36 [ 54.465314][ T7197] erofs (device loop4): inconsistent algorithmtype 0 for nid 36 [ 54.465336][ T7197] erofs (device loop4): readahead error at folio 38 @ nid 36 [ 54.465359][ T7197] erofs (device loop4): inconsistent algorithmtype 0 for nid 36 [ 54.465381][ T7197] erofs (device loop4): readahead error at folio 37 @ nid 36 [ 54.465423][ T7197] erofs (device loop4): readahead error at folio 36 @ nid 36 [ 54.465466][ T7197] erofs (device loop4): readahead error at folio 35 @ nid 36 [ 54.465506][ T7197] erofs (device loop4): readahead error at folio 33 @ nid 36 [ 54.465530][ T7197] erofs (device loop4): readahead error at folio 32 @ nid 36 [ 54.465553][ T7197] erofs (device loop4): inconsistent algorithmtype 0 for nid 36 [ 54.465575][ T7197] erofs (device loop4): readahead error at folio 31 @ nid 36 [ 54.465653][ T7197] erofs (device loop4): readahead error at folio 26 @ nid 36 [ 54.465677][ T7197] erofs (device loop4): readahead error at folio 25 @ nid 36 [ 54.465700][ T7197] erofs (device loop4): bogus lookback distance 24939 @ lcn 24 of nid 36 [ 54.465724][ T7197] erofs (device loop4): readahead error at folio 24 @ nid 36 [ 54.465746][ T7197] erofs (device loop4): readahead error at folio 23 @ nid 36 [ 54.465769][ T7197] erofs (device loop4): readahead error at folio 22 @ nid 36 [ 54.465806][ T7197] erofs (device loop4): bogus lookback distance 25964 @ lcn 21 of nid 36 [ 54.465831][ T7197] erofs (device loop4): readahead error at folio 21 @ nid 36 [ 54.465854][ T7197] erofs (device loop4): readahead error at folio 20 @ nid 36 [ 54.465887][ T7197] erofs (device loop4): readahead error at folio 19 @ nid 36 [ 54.465911][ T7197] erofs (device loop4): readahead error at folio 18 @ nid 36 [ 54.465943][ T7197] erofs (device loop4): readahead error at folio 17 @ nid 36 [ 54.465966][ T7197] erofs (device loop4): readahead error at folio 16 @ nid 36 [ 54.465989][ T7197] erofs (device loop4): bogus lookback distance 24939 @ lcn 15 of nid 36 [ 54.466013][ T7197] erofs (device loop4): readahead error at folio 15 @ nid 36 [ 54.466036][ T7197] erofs (device loop4): readahead error at folio 14 @ nid 36 [ 54.466067][ T7197] erofs (device loop4): inconsistent algorithmtype 0 for nid 36 [ 54.466090][ T7197] erofs (device loop4): readahead error at folio 12 @ nid 36 [ 54.466352][ T7197] syz.4.224: attempt to access beyond end of device [ 54.466352][ T7197] loop4: rw=524288, sector=64, nr_sectors = 8 limit=16 [ 54.466469][ T7197] syz.4.224: attempt to access beyond end of device [ 54.466469][ T7197] loop4: rw=524288, sector=1183592, nr_sectors = 8 limit=16 [ 54.466541][ T7197] syz.4.224: attempt to access beyond end of device [ 54.466541][ T7197] loop4: rw=524288, sector=288, nr_sectors = 8 limit=16 [ 54.466734][ T7197] syz.4.224: attempt to access beyond end of device [ 54.466734][ T7197] loop4: rw=524288, sector=1048576, nr_sectors = 8 limit=16 [ 54.466845][ T7197] syz.4.224: attempt to access beyond end of device [ 54.466845][ T7197] loop4: rw=524288, sector=3670464, nr_sectors = 8 limit=16 [ 54.466942][ T7197] syz.4.224: attempt to access beyond end of device [ 54.466942][ T7197] loop4: rw=524288, sector=790376, nr_sectors = 8 limit=16 [ 54.467089][ T7197] syz.4.224: attempt to access beyond end of device [ 54.467089][ T7197] loop4: rw=524288, sector=13075468288, nr_sectors = 8 limit=16 [ 55.008604][ T7194] loop3: detected capacity change from 0 to 40427 [ 55.038450][ T7194] F2FS-fs (loop3): invalid crc value [ 55.112491][ T7194] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 55.191092][ T7198] loop2: detected capacity change from 0 to 32768 [ 55.231209][ T7198] [ 55.231209][ T7198] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 55.231209][ T7198] [ 55.301891][ T7198] [ 55.301891][ T7198] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 55.301891][ T7198] [ 55.302020][ T7198] [ 55.302020][ T7198] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 55.302020][ T7198] [ 55.302042][ T7198] [ 55.302042][ T7198] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 55.302042][ T7198] [ 55.302066][ T7198] [ 55.302066][ T7198] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 55.302066][ T7198] [ 55.302089][ T7198] [ 55.302089][ T7198] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 55.302089][ T7198] [ 55.318470][ T101] [ 55.318470][ T101] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 55.318470][ T101] [ 55.383116][ T2644] [ 55.383116][ T2644] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 55.383116][ T2644] [ 55.383258][ T2644] [ 55.383258][ T2644] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 55.383258][ T2644] [ 55.385186][ T102] [ 55.385186][ T102] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 55.385186][ T102] [ 55.385249][ T6500] [ 55.385249][ T6500] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 55.385249][ T6500] [ 55.389940][ T6500] [ 55.389940][ T6500] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 55.389940][ T6500] [ 55.415869][ T7215] loop4: detected capacity change from 0 to 32768 [ 55.492395][ T7225] Driver unsupported XDP return value 0 on prog (id 6) dev N/A, expect packet loss! [ 56.130439][ T7220] loop0: detected capacity change from 0 to 32768 [ 56.201135][ T7220] XFS (loop0): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 56.262658][ T7220] XFS (loop0): Ending clean mount [ 56.281129][ T7238] loop1: detected capacity change from 0 to 32768 [ 56.283090][ T7220] XFS (loop0): Quotacheck needed: Please wait. [ 56.290547][ T7238] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.241 (7238) [ 56.298519][ T7238] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 56.302526][ T7238] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 56.304986][ T7238] BTRFS info (device loop1): using free-space-tree [ 56.305693][ T7194] F2FS-fs (loop3): LFS is not compatible with IPU [ 56.326542][ T7220] XFS (loop0): Quotacheck: Done. [ 56.386777][ T7243] loop4: detected capacity change from 0 to 32768 [ 56.525806][ T6495] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 56.528440][ T7243] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): Using encoding defined by superblock: utf8-12.1.0 [ 56.583965][ T6491] XFS (loop0): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 56.591527][ T7241] loop2: detected capacity change from 0 to 40427 [ 56.602532][ T7243] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,metadata_target=invalid label 246,noinodes_use_key_cache,journal_flush_delay=3,journal_reclaim_delay=1000,nocow [ 56.602532][ T7243] allowing incompatible features above 0.0: (unknown version) [ 56.602627][ T7243] bcachefs (loop4): initializing new filesystem [ 56.608526][ T7243] bcachefs (loop4): going read-write [ 56.611764][ T7241] F2FS-fs (loop2): invalid crc value [ 56.682844][ T7243] bcachefs (loop4): marking superblocks [ 56.721385][ T7241] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 56.727604][ T7243] bcachefs (loop4): initializing freespace [ 56.750302][ T7243] bcachefs (loop4): done initializing freespace [ 56.758118][ T7243] bcachefs (loop4): reading snapshots table [ 56.759028][ T7243] bcachefs (loop4): reading snapshots done [ 56.840621][ T7243] bcachefs (loop4): done starting filesystem [ 56.979866][ T6492] bcachefs (loop4): shutting down [ 56.979922][ T6492] bcachefs (loop4): going read-only [ 56.979966][ T6492] bcachefs (loop4): finished waiting for writes to stop [ 57.007643][ T6492] bcachefs (loop4): flushing journal and stopping allocators, journal seq 8 [ 57.084067][ T6492] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 11 [ 57.094779][ T6492] bcachefs (loop4): clean shutdown complete, journal seq 12 [ 57.133640][ T6492] bcachefs (loop4): marking filesystem clean [ 57.198607][ T7302] capability: warning: `syz.2.251' uses deprecated v2 capabilities in a way that may be insecure [ 57.294226][ T7305] netlink: 52 bytes leftover after parsing attributes in process `syz.2.257'. [ 57.348695][ T6492] bcachefs (loop4): shutdown complete [ 57.585654][ T7284] loop3: detected capacity change from 0 to 40427 [ 57.589030][ T7284] F2FS-fs (loop3): heap/no_heap options were deprecated [ 58.047452][ T7336] [U] [ 58.293291][ T7339] loop3: detected capacity change from 0 to 32768 [ 58.299263][ T7339] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.274 (7339) [ 58.321988][ T7339] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 58.322087][ T7339] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 58.322128][ T7339] BTRFS info (device loop3): using free-space-tree [ 58.387561][ T7339] BTRFS info (device loop3): rebuilding free space tree [ 58.498110][ T6497] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 58.686246][ T7378] loop2: detected capacity change from 0 to 1024 [ 58.743093][ T7378] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 58.769807][ T7378] EXT4-fs error (device loop2): ext4_map_blocks:709: inode #15: block 1: comm syz.2.285: lblock 1 mapped to illegal pblock 1 (length 1) [ 58.779885][ T7378] EXT4-fs error (device loop2): ext4_ext_remove_space:2951: inode #15: comm syz.2.285: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 58.924188][ T6500] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 58.982570][ T7393] Bluetooth: MGMT ver 1.23 [ 59.218595][ T7391] loop0: detected capacity change from 0 to 32768 [ 59.584807][ T7428] netlink: 4 bytes leftover after parsing attributes in process `syz.0.308'. [ 60.015385][ T7427] loop1: detected capacity change from 0 to 40427 [ 60.019204][ T7427] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x3fffff [ 60.034425][ T7427] F2FS-fs (loop1): invalid crc value [ 60.065456][ T7438] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 60.091219][ T7427] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 60.148150][ T7430] loop3: detected capacity change from 0 to 40427 [ 60.151250][ T7447] loop0: detected capacity change from 0 to 256 [ 60.166498][ T7430] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x3fffff [ 60.166573][ T7430] F2FS-fs (loop3): heap/no_heap options were deprecated [ 60.166611][ T7430] F2FS-fs (loop3): Image doesn't support compression [ 60.169849][ T7430] F2FS-fs (loop3): invalid crc value [ 60.233176][ T6495] syz-executor: attempt to access beyond end of device [ 60.233176][ T6495] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 60.233274][ T6495] CPU: 1 UID: 0 PID: 6495 Comm: syz-executor Not tainted 6.15.0-rc6-syzkaller-ga82e92598ab1 #0 PREEMPT [ 60.233288][ T6495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 60.233296][ T6495] Call trace: [ 60.233299][ T6495] show_stack+0x2c/0x3c (C) [ 60.233316][ T6495] __dump_stack+0x30/0x40 [ 60.233328][ T6495] dump_stack_lvl+0xd8/0x12c [ 60.233339][ T6495] dump_stack+0x1c/0x28 [ 60.233349][ T6495] f2fs_handle_critical_error+0x34c/0x4b8 [ 60.233364][ T6495] f2fs_stop_checkpoint+0x58/0x6c [ 60.233376][ T6495] f2fs_write_end_io+0x794/0xadc [ 60.233390][ T6495] bio_endio+0x81c/0x858 [ 60.233404][ T6495] submit_bio_noacct+0x158/0x176c [ 60.233415][ T6495] submit_bio+0x354/0x4d4 [ 60.233426][ T6495] f2fs_submit_write_bio+0x13c/0x324 [ 60.233439][ T6495] __submit_merged_bio+0x254/0x704 [ 60.233452][ T6495] __submit_merged_write_cond+0x23c/0x4ac [ 60.233465][ T6495] f2fs_write_data_pages+0x1e9c/0x27ac [ 60.233479][ T6495] do_writepages+0x2c0/0x6a8 [ 60.233493][ T6495] filemap_fdatawrite+0x144/0x1e8 [ 60.233504][ T6495] f2fs_sync_dirty_inodes+0x2b8/0x788 [ 60.233516][ T6495] f2fs_write_checkpoint+0x684/0x1694 [ 60.233529][ T6495] kill_f2fs_super+0x21c/0x584 [ 60.233542][ T6495] deactivate_locked_super+0xc4/0x12c [ 60.233555][ T6495] deactivate_super+0xe0/0x100 [ 60.233566][ T6495] cleanup_mnt+0x31c/0x3ac [ 60.233578][ T6495] __cleanup_mnt+0x20/0x30 [ 60.233590][ T6495] task_work_run+0x1dc/0x260 [ 60.233603][ T6495] do_notify_resume+0x16c/0x1ec [ 60.233615][ T6495] el0_svc+0xb4/0x17c [ 60.233629][ T6495] el0t_64_sync_handler+0x78/0x108 [ 60.233643][ T6495] el0t_64_sync+0x198/0x19c [ 60.233656][ T6495] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 60.338317][ T7430] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 60.429438][ T7450] f2fs_ckpt-7:3: attempt to access beyond end of device [ 60.429438][ T7450] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 60.430168][ T7450] CPU: 1 UID: 0 PID: 7450 Comm: f2fs_ckpt-7:3 Not tainted 6.15.0-rc6-syzkaller-ga82e92598ab1 #0 PREEMPT [ 60.430189][ T7450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 60.430197][ T7450] Call trace: [ 60.430201][ T7450] show_stack+0x2c/0x3c (C) [ 60.430219][ T7450] __dump_stack+0x30/0x40 [ 60.430230][ T7450] dump_stack_lvl+0xd8/0x12c [ 60.430241][ T7450] dump_stack+0x1c/0x28 [ 60.430251][ T7450] f2fs_handle_critical_error+0x34c/0x4b8 [ 60.430265][ T7450] f2fs_stop_checkpoint+0x58/0x6c [ 60.430277][ T7450] f2fs_write_end_io+0x794/0xadc [ 60.430291][ T7450] bio_endio+0x81c/0x858 [ 60.430305][ T7450] submit_bio_noacct+0x158/0x176c [ 60.430316][ T7450] submit_bio+0x354/0x4d4 [ 60.430326][ T7450] f2fs_submit_write_bio+0x13c/0x324 [ 60.430339][ T7450] __submit_merged_bio+0x254/0x704 [ 60.430353][ T7450] __submit_merged_write_cond+0x23c/0x4ac [ 60.430366][ T7450] f2fs_write_data_pages+0x1e9c/0x27ac [ 60.430379][ T7450] do_writepages+0x2c0/0x6a8 [ 60.430394][ T7450] filemap_fdatawrite+0x144/0x1e8 [ 60.430405][ T7450] f2fs_sync_dirty_inodes+0x2b8/0x788 [ 60.430417][ T7450] f2fs_write_checkpoint+0x684/0x1694 [ 60.430429][ T7450] __checkpoint_and_complete_reqs+0xe8/0x3c0 [ 60.430442][ T7450] issue_checkpoint_thread+0xcc/0x240 [ 60.430454][ T7450] kthread+0x5fc/0x75c [ 60.430468][ T7450] ret_from_fork+0x10/0x20 [ 60.431564][ T7450] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 60.651758][ T7468] netlink: 16 bytes leftover after parsing attributes in process `syz.2.325'. [ 60.992218][ T6499] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 60.992865][ T6499] Bluetooth: hci0: command 0x0c1a tx timeout [ 61.006282][ T7484] loop1: detected capacity change from 0 to 256 [ 61.006868][ T7484] exfat: Deprecated parameter 'utf8' [ 61.006906][ T7484] exfat: Deprecated parameter 'utf8' [ 61.006936][ T7484] exfat: Deprecated parameter 'utf8' [ 61.050666][ T7484] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d) [ 61.087540][ T7462] loop4: detected capacity change from 0 to 32768 [ 61.090982][ T7462] XFS: attr2 mount option is deprecated. [ 61.092571][ T7462] XFS: noikeep mount option is deprecated. [ 61.151465][ T7462] XFS (loop4): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 61.191187][ T7486] loop2: detected capacity change from 0 to 4096 [ 61.269128][ T7462] XFS (loop4): Ending clean mount [ 61.282580][ T7462] XFS (loop4): Quotacheck needed: Please wait. [ 61.321452][ T7486] ntfs3(loop2): ino=18, mi_enum_attr [ 61.321603][ T7486] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 61.338930][ T7462] XFS (loop4): Quotacheck: Done. [ 61.349172][ T7464] loop0: detected capacity change from 0 to 40427 [ 61.361723][ T7464] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 61.361811][ T7464] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 61.466711][ T7464] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 61.466776][ T7464] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 61.586154][ T6492] XFS (loop4): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 61.656574][ T7500] loop3: detected capacity change from 0 to 32768 [ 61.675182][ T7500] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.335 (7500) [ 61.699460][ T7500] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 61.699563][ T7500] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 61.699604][ T7500] BTRFS info (device loop3): using free-space-tree [ 61.891310][ T7535] netlink: 'syz.4.344': attribute type 2 has an invalid length. [ 62.033902][ T6497] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 62.563637][ T7542] loop1: detected capacity change from 0 to 32768 [ 62.583838][ T7542] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.348 (7542) [ 62.604778][ T7542] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 62.604884][ T7542] BTRFS info (device loop1): using crc32c (crc32c-arm64) checksum algorithm [ 62.604913][ T7542] BTRFS info (device loop1): using free-space-tree [ 62.705634][ T7542] BTRFS info (device loop1): rebuilding free space tree [ 62.834337][ T7590] loop0: detected capacity change from 0 to 2048 [ 62.878337][ T7590] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.932492][ T7588] "syz.2.362" (7588) uses obsolete ecb(arc4) skcipher [ 62.997932][ T6495] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 63.056569][ T6491] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.182950][ T7611] netlink: 4 bytes leftover after parsing attributes in process `syz.0.367'. [ 63.183080][ T7611] netlink: 2 bytes leftover after parsing attributes in process `syz.0.367'. [ 63.564414][ T7636] netlink: 4 bytes leftover after parsing attributes in process `syz.1.379'. [ 63.975042][ T7658] loop1: detected capacity change from 0 to 1024 [ 63.991728][ T7658] hfsplus: failed to load root directory [ 64.095179][ T7658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.095633][ T7658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.187277][ T7654] loop0: detected capacity change from 0 to 32768 [ 64.193808][ T7654] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.389 (7654) [ 64.215416][ T7654] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 64.215522][ T7654] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 64.215562][ T7654] BTRFS info (device loop0): disk space caching is enabled [ 64.215779][ T7654] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 64.305482][ T7656] loop3: detected capacity change from 0 to 32768 [ 64.323398][ T7654] BTRFS info (device loop0): rebuilding free space tree [ 64.329279][ T7654] BTRFS info (device loop0): disabling free space tree [ 64.329363][ T7654] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 64.329451][ T7654] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 64.336720][ T7646] loop2: detected capacity change from 0 to 32768 [ 64.391696][ T7646] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 64.503597][ T7646] XFS (loop2): Ending clean mount [ 64.506439][ T7646] XFS (loop2): Quotacheck needed: Please wait. [ 64.509565][ T6491] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 64.524031][ T2390] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.524193][ T2390] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.531764][ T7646] XFS (loop2): Quotacheck: Done. [ 64.719321][ T6500] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 65.101288][ T7688] loop3: detected capacity change from 0 to 40427 [ 65.104085][ T7688] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 65.104392][ T7688] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 65.209551][ T7688] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 65.209616][ T7688] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 65.295599][ T7693] loop1: detected capacity change from 0 to 32768 [ 65.355810][ T7693] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 65.509472][ T7693] XFS (loop1): Ending clean mount [ 65.660768][ T6495] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 65.777638][ T7730] dvmrp0: entered allmulticast mode [ 65.993663][ T7741] loop3: detected capacity change from 0 to 256 [ 66.004870][ T7741] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 66.085443][ T7745] loop1: detected capacity change from 0 to 1024 [ 66.170350][ T7711] loop4: detected capacity change from 0 to 40427 [ 66.179504][ T7711] F2FS-fs (loop4): heap/no_heap options were deprecated [ 66.248180][ T2446] hfsplus: b-tree write err: -5, ino 4 [ 66.287729][ T7743] loop2: detected capacity change from 0 to 32768 [ 66.296110][ T7743] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.413 (7743) [ 66.304948][ T7743] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 66.307997][ T7743] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm [ 66.310376][ T7743] BTRFS info (device loop2): using free-space-tree [ 66.423714][ T7766] Bluetooth: MGMT ver 1.23 [ 66.439643][ T6500] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 66.860015][ T7791] loop1: detected capacity change from 0 to 256 [ 66.877625][ T7791] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 67.252550][ T7776] loop3: detected capacity change from 0 to 32768 [ 67.303074][ T7776] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 67.379761][ T7776] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 67.519106][ T6497] ocfs2: Unmounting device (7,3) on (node local) [ 67.528372][ T7805] loop1: detected capacity change from 0 to 40427 [ 67.572510][ T7805] F2FS-fs (loop1): heap/no_heap options were deprecated [ 67.735959][ T7826] loop3: detected capacity change from 0 to 1024 [ 67.760049][ T6499] Bluetooth: hci0: command 0x0c1a tx timeout [ 67.762900][ T6059] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 67.814224][ T7828] loop2: detected capacity change from 0 to 1024 [ 67.849527][ T7828] hfsplus: failed to load root directory [ 67.895558][ T1545] hfsplus: b-tree write err: -5, ino 4 [ 67.916627][ T7828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.923024][ T7828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.367486][ T7830] loop0: detected capacity change from 0 to 40427 [ 68.371303][ T7830] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x7 [ 68.374834][ T7830] F2FS-fs (loop0): invalid crc value [ 68.416069][ T7830] F2FS-fs (loop0): Start checkpoint disabled! [ 68.450719][ T7830] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 68.487612][ T7852] loop3: detected capacity change from 0 to 47 [ 68.554806][ T1545] kworker/u8:5: attempt to access beyond end of device [ 68.554806][ T1545] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 68.554909][ T1545] CPU: 1 UID: 0 PID: 1545 Comm: kworker/u8:5 Not tainted 6.15.0-rc6-syzkaller-ga82e92598ab1 #0 PREEMPT [ 68.554924][ T1545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 68.554931][ T1545] Workqueue: writeback wb_workfn (flush-7:0) [ 68.554954][ T1545] Call trace: [ 68.554961][ T1545] show_stack+0x2c/0x3c (C) [ 68.554975][ T1545] __dump_stack+0x30/0x40 [ 68.554986][ T1545] dump_stack_lvl+0xd8/0x12c [ 68.554997][ T1545] dump_stack+0x1c/0x28 [ 68.555007][ T1545] f2fs_handle_critical_error+0x34c/0x4b8 [ 68.555021][ T1545] f2fs_stop_checkpoint+0x58/0x6c [ 68.555033][ T1545] f2fs_write_end_io+0x794/0xadc [ 68.555047][ T1545] bio_endio+0x81c/0x858 [ 68.555061][ T1545] submit_bio_noacct+0x158/0x176c [ 68.555072][ T1545] submit_bio+0x354/0x4d4 [ 68.555083][ T1545] f2fs_submit_write_bio+0x13c/0x324 [ 68.555096][ T1545] __submit_merged_bio+0x254/0x704 [ 68.555109][ T1545] __submit_merged_write_cond+0x23c/0x4ac [ 68.555122][ T1545] f2fs_write_data_pages+0x1e9c/0x27ac [ 68.555135][ T1545] do_writepages+0x2c0/0x6a8 [ 68.555150][ T1545] __writeback_single_inode+0x15c/0x13e8 [ 68.555161][ T1545] writeback_sb_inodes+0x558/0xe38 [ 68.555172][ T1545] wb_writeback+0x3cc/0xd70 [ 68.555182][ T1545] wb_workfn+0x338/0xdc0 [ 68.555195][ T1545] process_one_work+0x7e8/0x156c [ 68.555206][ T1545] worker_thread+0x958/0xed8 [ 68.555217][ T1545] kthread+0x5fc/0x75c [ 68.555230][ T1545] ret_from_fork+0x10/0x20 [ 68.555268][ T1545] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 68.798369][ T7857] loop2: detected capacity change from 0 to 8192 [ 68.848372][ T6484] loop2: p1 < > p3 < p5 > p4 [ 68.849900][ T6484] loop2: partition table partially beyond EOD, truncated [ 68.852109][ T6484] loop2: p1 start 4294967040 is beyond EOD, truncated [ 68.878156][ T7857] loop2: p1 < > p3 < p5 > p4 [ 68.878218][ T7857] loop2: partition table partially beyond EOD, truncated [ 68.878336][ T7857] loop2: p1 start 4294967040 is beyond EOD, truncated [ 68.883597][ T7781] loop4: detected capacity change from 0 to 131072 [ 68.888779][ T7781] F2FS-fs (loop4): QUOTA feature is enabled, so ignore jquota_fmt [ 69.020630][ T7781] F2FS-fs (loop4): Mounted with checkpoint version = 1b41e955 [ 69.312780][ T7869] loop1: detected capacity change from 0 to 40427 [ 69.317443][ T7869] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x3fffff [ 69.317515][ T7869] F2FS-fs (loop1): heap/no_heap options were deprecated [ 69.317552][ T7869] F2FS-fs (loop1): Image doesn't support compression [ 69.322700][ T7869] F2FS-fs (loop1): invalid crc value [ 69.404169][ T7869] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 69.435307][ T6585] udevd[6585]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 69.448673][ T6483] udevd[6483]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory [ 69.507374][ T7886] netlink: 4 bytes leftover after parsing attributes in process `syz.2.468'. [ 69.521348][ T7878] f2fs_ckpt-7:1: attempt to access beyond end of device [ 69.521348][ T7878] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 69.521451][ T7878] CPU: 1 UID: 0 PID: 7878 Comm: f2fs_ckpt-7:1 Not tainted 6.15.0-rc6-syzkaller-ga82e92598ab1 #0 PREEMPT [ 69.521466][ T7878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 69.521473][ T7878] Call trace: [ 69.521477][ T7878] show_stack+0x2c/0x3c (C) [ 69.521494][ T7878] __dump_stack+0x30/0x40 [ 69.521506][ T7878] dump_stack_lvl+0xd8/0x12c [ 69.521516][ T7878] dump_stack+0x1c/0x28 [ 69.521526][ T7878] f2fs_handle_critical_error+0x34c/0x4b8 [ 69.521542][ T7878] f2fs_stop_checkpoint+0x58/0x6c [ 69.521553][ T7878] f2fs_write_end_io+0x794/0xadc [ 69.521568][ T7878] bio_endio+0x81c/0x858 [ 69.521581][ T7878] submit_bio_noacct+0x158/0x176c [ 69.521593][ T7878] submit_bio+0x354/0x4d4 [ 69.521603][ T7878] f2fs_submit_write_bio+0x13c/0x324 [ 69.521616][ T7878] __submit_merged_bio+0x254/0x704 [ 69.521630][ T7878] __submit_merged_write_cond+0x23c/0x4ac [ 69.521643][ T7878] f2fs_write_data_pages+0x1e9c/0x27ac [ 69.521657][ T7878] do_writepages+0x2c0/0x6a8 [ 69.521671][ T7878] filemap_fdatawrite+0x144/0x1e8 [ 69.521682][ T7878] f2fs_sync_dirty_inodes+0x2b8/0x788 [ 69.521694][ T7878] f2fs_write_checkpoint+0x684/0x1694 [ 69.521706][ T7878] __checkpoint_and_complete_reqs+0xe8/0x3c0 [ 69.521719][ T7878] issue_checkpoint_thread+0xcc/0x240 [ 69.521731][ T7878] kthread+0x5fc/0x75c [ 69.521745][ T7878] ret_from_fork+0x10/0x20 [ 69.521758][ T7878] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 69.581375][ T6484] udevd[6484]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 69.585866][ T3892] cfg80211: failed to load regulatory.db [ 69.692668][ T7877] loop3: detected capacity change from 0 to 32768 [ 69.768552][ T7877] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.478 (7877) [ 69.779526][ T7877] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 69.779626][ T7877] BTRFS info (device loop3): using crc32c (crc32c-arm64) checksum algorithm [ 69.779677][ T7877] BTRFS info (device loop3): using free-space-tree [ 69.890074][ T7909] netlink: 4 bytes leftover after parsing attributes in process `syz.4.476'. [ 69.893436][ T7909] netlink: 2 bytes leftover after parsing attributes in process `syz.4.476'. [ 69.896054][ T7877] BTRFS info (device loop3): rebuilding free space tree [ 70.167872][ T6497] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 70.181140][ T6585] udevd[6585]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 70.190160][ T6508] udevd[6508]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory [ 70.262654][ T6998] udevd[6998]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 70.409445][ T7930] netlink: 8 bytes leftover after parsing attributes in process `syz.2.484'. [ 71.576740][ T7922] loop0: detected capacity change from 0 to 32768 [ 71.594098][ T7922] [ 71.594098][ T7922] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 71.594098][ T7922] [ 71.648438][ T7946] loop4: detected capacity change from 0 to 32768 [ 71.663379][ T7946] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.491 (7946) [ 71.664702][ T7922] ERROR: (device loop0): dbAlloc: the hint is outside the map [ 71.664702][ T7922] [ 71.685240][ T7946] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 71.685346][ T7946] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 71.685387][ T7946] BTRFS info (device loop4): using free-space-tree [ 71.737056][ T2446] read_mapping_page failed! [ 71.738669][ T2446] ERROR: (device loop0): txAbort: [ 71.738669][ T2446] [ 71.738745][ T2446] jfs_write_inode: jfs_commit_inode failed! [ 71.742670][ T6491] [ 71.742670][ T6491] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 71.742670][ T6491] [ 71.745681][ T6491] [ 71.745681][ T6491] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 71.745681][ T6491] [ 71.774773][ T7974] loop1: detected capacity change from 0 to 1024 [ 71.814751][ T7974] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 71.821110][ T7949] loop2: detected capacity change from 0 to 32768 [ 71.835097][ T7949] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.492 (7949) [ 71.869589][ T7984] netlink: 8 bytes leftover after parsing attributes in process `syz.0.500'. [ 71.877573][ T7949] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 71.877691][ T7949] BTRFS info (device loop2): using crc32c (crc32c-arm64) checksum algorithm [ 71.877729][ T7949] BTRFS info (device loop2): using free-space-tree [ 71.887603][ T7974] EXT4-fs error (device loop1): ext4_map_blocks:709: inode #15: block 1: comm syz.1.499: lblock 1 mapped to illegal pblock 1 (length 1) [ 71.892130][ T7974] EXT4-fs error (device loop1): ext4_ext_remove_space:2951: inode #15: comm syz.1.499: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 71.984498][ T7949] BTRFS info (device loop2): rebuilding free space tree [ 71.999158][ T6492] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 72.008398][ T6495] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 72.030993][ T8003] loop3: detected capacity change from 0 to 128 [ 72.054354][ T8003] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 72.125104][ T8003] FAT-fs (loop3): error, invalid access to FAT (entry 0x0affffff) [ 72.125176][ T8003] FAT-fs (loop3): Filesystem has been set read-only [ 72.125618][ T8003] FAT-fs (loop3): error, invalid access to FAT (entry 0x0affffff) [ 72.144875][ T6497] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 72.187362][ T6500] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 72.358913][ T8015] loop1: detected capacity change from 0 to 1024 [ 72.459308][ T8015] hfsplus: request for non-existent node 33423360 in B*Tree [ 72.459369][ T8015] hfsplus: request for non-existent node 33423360 in B*Tree [ 72.711336][ T8035] ubi31: attaching mtd0 [ 72.712601][ T8035] ubi31 error: ubi_attach_mtd_dev: bad VID header (536871680) or data offsets (536871744) [ 72.741155][ T8040] loop3: detected capacity change from 0 to 128 [ 72.801097][ T8044] loop0: detected capacity change from 0 to 512 [ 73.010811][ T8059] netlink: 32 bytes leftover after parsing attributes in process `syz.1.533'. [ 73.149287][ T8070] loop3: detected capacity change from 0 to 64 [ 73.172230][ T8070] syz.3.535: attempt to access beyond end of device [ 73.172230][ T8070] loop3: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 73.172487][ T8070] Buffer I/O error on dev loop3, logical block 512, async page read [ 73.173124][ T8070] syz.3.535: attempt to access beyond end of device [ 73.173124][ T8070] loop3: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 73.173163][ T8070] Buffer I/O error on dev loop3, logical block 56576, async page read [ 73.486704][ T8085] loop0: detected capacity change from 0 to 128 [ 73.524395][ T8090] process 'syz.2.545' launched '/dev/fd/3' with NULL argv: empty string added [ 73.762738][ T8096] loop1: detected capacity change from 0 to 1024 [ 73.813334][ T8096] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.872316][ T8094] loop0: detected capacity change from 0 to 4096 [ 73.915181][ T8101] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 73.948269][ T8081] loop3: detected capacity change from 0 to 32768 [ 73.970223][ T8081] jfs_lookup: dtSearch returned -5 [ 74.041673][ T6495] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.330671][ T8098] loop2: detected capacity change from 0 to 32768 [ 74.530594][ T8130] netlink: 68 bytes leftover after parsing attributes in process `syz.3.564'. [ 74.776230][ T8150] openvswitch: netlink: nsh attr 12032 is out of range max 3 [ 74.778523][ T8150] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 74.850328][ T8157] netlink: 'syz.3.576': attribute type 8 has an invalid length. [ 74.953511][ T8153] loop0: detected capacity change from 0 to 4096 [ 74.974442][ T8153] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 75.012449][ T8153] netlink: 460 bytes leftover after parsing attributes in process `syz.0.575'. [ 75.102741][ T6491] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.146352][ T8169] netlink: 32 bytes leftover after parsing attributes in process `syz.2.593'. [ 75.362446][ T8154] loop1: detected capacity change from 0 to 32768 [ 75.421603][ T8154] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 75.523640][ T8154] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 75.836537][ T8177] loop3: detected capacity change from 0 to 32768 [ 75.849557][ T6495] ocfs2: Unmounting device (7,1) on (node local) [ 75.970567][ T8190] netlink: 28 bytes leftover after parsing attributes in process `syz.4.588'. [ 76.059919][ T8173] loop0: detected capacity change from 0 to 32768 [ 76.063181][ T8173] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.595 (8173) [ 76.099228][ T8173] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 76.102236][ T8173] BTRFS info (device loop0): using crc32c (crc32c-arm64) checksum algorithm [ 76.105338][ T8173] BTRFS info (device loop0): using free-space-tree [ 76.123171][ T8177] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): Using encoding defined by superblock: utf8-12.1.0 [ 76.172223][ T8177] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,compression=lz4,journal_flush_disabled,recovery_pass_last=trans_mark_dev_sbs,nojournal_transaction_names,reconstruct_alloc,no_data_io [ 76.172223][ T8177] allowing incompatible features above 0.0: (unknown version) [ 76.210642][ T8177] bcachefs (loop3): recovering from clean shutdown, journal seq 10 [ 76.210766][ T8177] bcachefs (loop3): Version upgrade from 1.20: directory_size to 1.7: mi_btree_bitmap incomplete [ 76.210766][ T8177] Doing compatible version upgrade from 1.20: directory_size to 1.25: extent_flags [ 76.210766][ T8177] running recovery passes: check_extents_to_backpointers [ 76.223708][ T8177] bcachefs (loop3): dropping and reconstructing all alloc info [ 76.236443][ T8177] bcachefs (loop3): bcachefs (loop3): error validating btree node on loop3 at btree extents level 0/0 [ 76.244178][ T8177] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c6c25c03258c59c5 written 16 min_key POS_MIN durability: 1 ptr: 0:27:0 gen 0 [ 76.244223][ T8177] node offset 8/16 bset u64s 49: bset at wrong sector offset, shutting down [ 76.244240][ T8177] error not marked as autofix and not in fsck [ 76.244255][ T8177] run fsck, and forward to devs so error can be marked for self-healing [ 76.244271][ T8177] inconsistency detected - emergency read only at journal seq 10 [ 76.244626][ T8177] bcachefs (loop3): flagging btree extents lost data [ 76.244717][ T8177] bcachefs (loop3): running explicit recovery pass check_topology (2), currently at recovery_pass_empty (0) [ 76.244781][ T8177] bcachefs (loop3): running explicit recovery pass check_backpointers_to_extents (16), currently at recovery_pass_empty (0) [ 76.244817][ T8177] bcachefs (loop3): running explicit recovery pass scan_for_btree_nodes (1), currently at recovery_pass_empty (0) [ 76.278239][ T8177] bcachefs (loop3): error reading btree root btree=extents level=0: btree_node_read_error, fixing [ 76.298566][ T8177] bcachefs (loop3): invalid bkey in btree_node btree=inodes level=0: u64s 18 type inode_v3 0:536870914:U32_MAX len 0 ver 0: [ 76.298604][ T8177] mode=100755 [ 76.298628][ T8177] flags=(15300000) [ 76.298642][ T8177] journal_seq=4 [ 76.298656][ T8177] hash_seed=d483206f1ed95abf [ 76.298671][ T8177] hash_type=siphash [ 76.298685][ T8177] bi_size=100 [ 76.298698][ T8177] bi_sectors=8 [ 76.298712][ T8177] bi_version=1126999418470400 [ 76.298726][ T8177] bi_atime=0 [ 76.298740][ T8177] bi_ctime=0 [ 76.298754][ T8177] bi_mtime=0 [ 76.298767][ T8177] bi_otime=2780562352 [ 76.298781][ T8177] bi_uid=2780562352 [ 76.298802][ T8177] bi_gid=0 [ 76.298816][ T8177] bi_nlink=2780562352 [ 76.298829][ T8177] bi_generation=0 [ 76.298843][ T8177] bi_dev=16 [ 76.298857][ T8177] bi_data_checksum=18 [ 76.298871][ T8177] bi_compression=0 [ 76.298884][ T8177] bi_project=0 [ 76.298898][ T8177] bi_background_compression=0 [ 76.298918][ T8177] bi_data_replicas=0 [ 76.298933][ T8177] bi_promote_target=0 [ 76.298947][ T8177] bi_foreground_target=0 [ 76.298961][ T8177] bi_background_target=0 [ 76.298975][ T8177] bi_erasure_code=0 [ 76.298989][ T8177] bi_fields_set=0 [ 76.299003][ T8177] bi_dir=0 [ 76.299016][ T8177] bi_dir_offset=0 [ 76.299030][ T8177] bi_subvol=0 [ 76.299044][ T8177] bi_parent_subvol=0 [ 76.299058][ T8177] bi_nocow=0 [ 76.299071][ T8177] bi_depth=0 [ 76.299085][ T8177] bi_inodes_32bit=0 [ 76.299099][ T8177] bi_casefold=0 [ 76.299112][ T8177] invalid data checksum type (18 >= 5, deleting [ 76.377378][ T8177] bcachefs (loop3): scan_for_btree_nodes... [ 76.394129][ T8177] bcachefs (loop3): btree node scan found 3 nodes after overwrites [ 76.394201][ T8177] done [ 76.394240][ T8177] bcachefs (loop3): check_topology... [ 76.410897][ T8177] bcachefs (loop3): btree root extents unreadable, must recover from scan [ 76.411165][ T8177] bcachefs (loop3): bch2_get_scanned_nodes(): recovery btree=extents level=0 POS_MIN - SPOS_MAX [ 76.411282][ T8177] bcachefs (loop3): bch2_get_scanned_nodes(): recovering u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c6c25c03258c59c5 written 16 min_key POS_MIN durability: 1 ptr: 0:27:0 gen 0 [ 76.429978][ T8177] bcachefs (loop3): Topology repair: unreadable btree node at [ 76.439741][ T8177] btree=extents level=0 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c6c25c03258c59c5 written 16 min_key POS_MIN durability: 1 ptr: 0:27:0 gen 0, fixing [ 76.451272][ T8177] bcachefs (loop3): empty interior btree node at btree=extents level=1 [ 76.451317][ T8177] u64s 5 type btree_ptr SPOS_MAX len 0 ver 0, fixing [ 76.451396][ T8177] bcachefs (loop3): empty btree root extents [ 76.451496][ T8177] done [ 76.451526][ T8177] bcachefs (loop3): accounting_read... [ 76.598890][ T8176] loop2: detected capacity change from 0 to 32768 [ 76.599477][ T8176] XFS: attr2 mount option is deprecated. [ 76.636205][ T8177] done [ 76.636262][ T8177] bcachefs (loop3): alloc_read... done [ 76.636340][ T8177] bcachefs (loop3): snapshots_read... done [ 76.637634][ T8177] bcachefs (loop3): check_allocations... [ 76.638681][ T8177] bcachefs (loop3): btree ptr not marked in member info btree allocated bitmap [ 76.638716][ T8177] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing [ 76.663701][ T8176] XFS (loop2): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 76.671672][ T6491] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 76.675665][ T8177] bcachefs (loop3): btree ptr not marked in member info btree allocated bitmap [ 76.675704][ T8177] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing [ 76.703004][ T8177] bcachefs (loop3): btree ptr not marked in member info btree allocated bitmap [ 76.703043][ T8177] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c0bef60d07ceb940 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing [ 76.710671][ T8177] bcachefs (loop3): btree ptr not marked in member info btree allocated bitmap [ 76.710706][ T8177] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ebb8d5a9e3463bdb written 16 min_key POS_MIN durability: 1 ptr: 0:32:0 gen 0, fixing [ 76.747511][ T8177] done [ 76.762658][ T8177] bcachefs (loop3): going read-write [ 76.775074][ T8176] XFS (loop2): Ending clean mount [ 76.786158][ T8176] XFS (loop2): Quotacheck needed: Please wait. [ 76.788813][ T8177] bcachefs (loop3): done starting filesystem [ 76.828575][ T8176] XFS (loop2): Quotacheck: Done. [ 76.982377][ T6500] XFS (loop2): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 77.024965][ T6497] bcachefs (loop3): shutting down [ 77.027454][ T6497] bcachefs (loop3): going read-only [ 77.027514][ T6497] bcachefs (loop3): finished waiting for writes to stop [ 77.154154][ T6497] bcachefs (loop3): flushing journal and stopping allocators, journal seq 10 [ 77.154252][ T6497] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 10 [ 77.159492][ T6497] bcachefs (loop3): unclean shutdown complete, journal seq 10 [ 77.368399][ T6497] bcachefs (loop3): done going read-only, filesystem not clean [ 77.678859][ T6497] bcachefs (loop3): shutdown complete [ 78.484173][ T6576] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 79.222538][ T6576] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 82.881982][ C1] sched: DL replenish lagged too much [ 126.108227][ T2390] ieee802154 phy0 wpan0: encryption failed: -22 [ 126.117096][ T2390] ieee802154 phy1 wpan1: encryption failed: -22 [ 161.946823][ T6506] Bluetooth: hci2: command 0x0406 tx timeout [ 161.953615][ T6493] Bluetooth: hci3: command 0x0406 tx timeout [ 161.965059][ T6493] Bluetooth: hci0: command 0x0c1a tx timeout [ 189.443772][ T2390] ieee802154 phy0 wpan0: encryption failed: -22 [ 189.452780][ T2390] ieee802154 phy1 wpan1: encryption failed: -22 [ 240.339822][ T32] INFO: task kworker/0:1:11 blocked for more than 145 seconds. [ 240.344400][ T32] Not tainted 6.15.0-rc6-syzkaller-ga82e92598ab1 #0 [ 240.353393][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 240.362447][ T32] task:kworker/0:1 state:D stack:0 pid:11 tgid:11 ppid:2 task_flags:0x4208060 flags:0x00000010 [ 240.385046][ T32] Workqueue: events reg_todo [ 240.403089][ T32] Call trace: [ 240.412081][ T32] __switch_to+0x414/0x834 (T) [ 240.422422][ T32] __schedule+0x13b0/0x28d4 [ 240.431538][ T32] schedule+0xb4/0x230 [ 240.445474][ T32] schedule_preempt_disabled+0x18/0x2c [ 240.454557][ T32] __mutex_lock_common+0xbd0/0x2190 [ 240.463597][ T32] mutex_lock_nested+0x2c/0x38 [ 240.472639][ T32] reg_process_self_managed_hints+0xc4/0x1c0 [ 240.481822][ T32] reg_todo+0x834/0x968 [ 240.495268][ T32] process_one_work+0x7e8/0x156c [ 240.504325][ T32] worker_thread+0x958/0xed8 [ 240.513763][ T32] kthread+0x5fc/0x75c [ 240.524039][ T32] ret_from_fork+0x10/0x20 [ 240.533174][ T32] [ 240.533174][ T32] Showing all locks held in the system: [ 240.665962][ T32] 1 lock held by kthreadd/2: [ 240.665991][ T32] 4 locks held by kworker/0:1/11: [ 240.666012][ T32] #0: ffff0000c0028d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x658/0x156c [ 240.666095][ T32] #1: ffff800097647bc0 (reg_work){+.+.}-{0:0}, at: process_one_work+0x6ec/0x156c [ 240.666168][ T32] #2: ffff80009248b428 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock+0x20/0x2c [ 240.666242][ T32] #3: ffff0000d7098768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: reg_process_self_managed_hints+0xc4/0x1c0 [ 240.666320][ T32] 3 locks held by kworker/u8:0/12: [ 240.666340][ T32] 3 locks held by kworker/u8:1/13: [ 240.666362][ T32] 2 locks held by kworker/1:0/24: [ 240.666383][ T32] 2 locks held by kworker/1:1/26: [ 240.666404][ T32] 1 lock held by khungtaskd/32: [ 240.666424][ T32] #0: ffff80008f5088a0 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire+0x4/0x48 [ 240.666499][ T32] 3 locks held by kworker/u8:2/43: [ 240.666520][ T32] 3 locks held by kworker/u8:3/45: [ 240.666540][ T32] 1 lock held by pr/ttyAMA0/46: [ 240.666567][ T32] 3 locks held by kworker/u8:4/712: [ 240.666587][ T32] #0: ffff0000c0031948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x658/0x156c [ 240.666661][ T32] #1: ffff80009d057bc0 ((crda_timeout).work){+.+.}-{0:0}, at: process_one_work+0x6ec/0x156c [ 240.666734][ T32] #2: ffff80009248b428 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock+0x20/0x2c [ 240.666814][ T32] 3 locks held by kworker/u8:5/1545: [ 240.666835][ T32] 3 locks held by kworker/u8:6/1577: [ 240.666855][ T32] #0: ffff0000c0031948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x658/0x156c [ 240.666928][ T32] #1: ffff80009eab7bc0 ((reg_check_chans).work){+.+.}-{0:0}, at: process_one_work+0x6ec/0x156c [ 240.667005][ T32] #2: ffff80009248b428 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock+0x20/0x2c [ 240.667081][ T32] 3 locks held by kworker/u8:7/2444: [ 240.667102][ T32] 3 locks held by kworker/u8:8/2446: [ 240.667122][ T32] 3 locks held by kworker/u8:9/2513: [ 240.667143][ T32] 3 locks held by kworker/u8:10/2563: [ 240.667164][ T32] 3 locks held by kworker/u8:11/2644: [ 240.667190][ T32] 2 locks held by kworker/1:2/3892: [ 240.667210][ T32] 3 locks held by kworker/R-ipv6_/4143: [ 240.667231][ T32] #0: ffff0000d32f0148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x658/0x156c [ 240.667304][ T32] #1: ffff8000a2377ba0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0x6ec/0x156c [ 240.667378][ T32] #2: ffff80009248b428 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock+0x20/0x2c [ 240.667465][ T32] 5 locks held by kworker/R-bat_e/4224: [ 240.667488][ T32] 1 lock held by klogd/6096: [ 240.667508][ T32] 2 locks held by udevd/6107: [ 240.667528][ T32] 2 locks held by dhcpcd/6161: [ 240.667549][ T32] 3 locks held by dhcpcd/6162: [ 240.667571][ T32] 2 locks held by getty/6255: [ 240.667590][ T32] #0: ffff0000d88580a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c [ 240.667668][ T32] #1: ffff80009b5be2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x34c/0xfa0 [ 240.667744][ T32] 1 lock held by syz-executor/6479: [ 240.667765][ T32] 2 locks held by kworker/1:3/6482: [ 240.667786][ T32] 3 locks held by syz-executor/6491: [ 240.667812][ T32] 3 locks held by syz-executor/6492: [ 240.667833][ T32] 2 locks held by syz-executor/6495: [ 240.667854][ T32] 3 locks held by syz-executor/6497: [ 240.667878][ T32] 1 lock held by syz-executor/6500: [ 240.667899][ T32] 4 locks held by udevd/6508: [ 240.667924][ T32] 2 locks held by kworker/1:4/6542: [ 240.667948][ T32] 3 locks held by kworker/0:4/6545: [ 240.667968][ T32] 4 locks held by kworker/1:6/6546: [ 240.667989][ T32] 2 locks held by kworker/1:7/6569: [ 240.668009][ T32] 2 locks held by kworker/0:5/6576: [ 240.668031][ T32] 3 locks held by udevadm/8244: [ 240.668051][ T32] 2 locks held by kworker/u8:12/8271: [ 240.668071][ T32] 3 locks held by kworker/u8:13/8272: [ 240.668092][ T32] 4 locks held by kworker/u8:14/8273: [ 240.668112][ T32] [ 240.668129][ T32] ============================================= [ 240.668129][ T32] [ 240.668149][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 240.775899][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted 6.15.0-rc6-syzkaller-ga82e92598ab1 #0 PREEMPT [ 240.778685][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 240.781315][ T32] Call trace: [ 240.782160][ T32] show_stack+0x2c/0x3c (C) [ 240.783370][ T32] __dump_stack+0x30/0x40 [ 240.784520][ T32] dump_stack_lvl+0x30/0x12c [ 240.785698][ T32] dump_stack+0x1c/0x28 [ 240.786769][ T32] panic+0x2bc/0x7ac [ 240.787777][ T32] hung_task_panic+0x0/0x2c [ 240.788963][ T32] kthread+0x5fc/0x75c [ 240.790035][ T32] ret_from_fork+0x10/0x20 [ 240.791211][ T32] SMP: stopping secondary CPUs [ 240.792598][ T32] Kernel Offset: disabled [ 240.793747][ T32] CPU features: 0x0800,000040e0,01000250,82017203 [ 240.795405][ T32] Memory Limit: none [ 241.259852][ T32] Rebooting in 86400 seconds..