last executing test programs: 2m59.719029354s ago: executing program 4 (id=392): syz_mount_image$jfs(&(0x7f0000000080), &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000001000)=ANY=[], 0xfd, 0x61c6, &(0x7f000000ac00)="$eJzs3U1vHVf9B/DfffRD/m2tLqr+K4TcBx5KaRInJQQKtF3Agk0XqEtQK9etIlJASUBpZRFX3rBgxSsAIbFEiCViwQvogi07VqyIZCOBumLQ2Ockc2/urZ3avnPt8/lIzsxvzlz7zP3euQ+ZmXsCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIjvfud7a52IePNnacFKxP9FL6IbsVTXqxGxtLqS1+9HxJOx1xxPRMRgIaK+/d4/j0W8FBEfPRqxs7u5Xi++dMh+fPsPf/vtD869/tffDy7854+3ei9PW+/27V/++093jrbNAAAAUJqqqqpO+pj/VPp83227UwDATOTX/yrJy898/at/vP7neeqPWq1Wq9UzqJuqye40i4jYat6mfs/gcDwAnDJb8XHbXaBF8i9aPyLOtd0JYK512u4AJ2Jnd3O9k/LtNF8PVvfb87kgI/lvde5d3zFtepDxc0xm9fjajl48PqU/SzPqwzzJ+XfH839zv32Y1jvp/GdlWv7D/UufipPz743nP+bs5N+dmH+pcv79h8q/J38AAAAAAJhj+f//V1o+/rtw9E05lE86/rs6oz4AAAAAAAAAwHE76vh/9xj/DwAAAOZW/Vm99utH7y+b9l1s9fI3OhGPjK0PFCZdLLPcdj8AAAAAAAAAAAAAoCT9/XN43+hEDCLikeXlqqrqn6bx+mEd9fanXenbDyVr+0keAAD2ffTo2LX8nYjFiHgjfdffYHl5uaoWl5ar5WppIb+fHS4sVkuNz7V5Wi9bGB7iDXF/WNW/bLFxu6aDPi8f1D7+++q/Nax6h+jYMRmke3NKc0thA0Cy/2q04xXpjKmqx6a9+YAR9v8zaCVW2n5cMf/afpgCAAAAJ6+qqqqTvs77qXTMv9t2pwCAmciv/+PHBY5Ud6e0RxzP71er1Wq1Wv2p6qZqsjvNIiK2mrep3zMYjh8ATpmt+LjtLtAi+RetHxFPtt0JYK512u4AJ2Jnd3O9k/LtNF8P0vju+VyQkfy3Onu3y7efND3I+Dkms3p8bUcvHp/Snydm1Id5kvPvjuf/5n77MK130vnPyrT8h3uXzJUn598bz3/M2cm/OzH/UuX8+w+Vf0/+AAAAAAAwx/L//684/ps3GQAAAAAAAABOnZ3dzfV83Ws+/v+ZCeu5/vNsyvl3Hjb/pTQv/1Mt598dy/+LY+v1GvN3X7u///9rd3P9d7f++f95etj8F/JMJz2yOukR0Ul/qdNP06Ns3YO2B71h/ZcGnW6vn875qe515uLIut10f1SDd+JaXI+NWBtpr3s6GGm/NNLef6D98kj7IH3vQLWU28/Hevw4rsfbe+3D0bt9osUD7p/qgPacf8/zf5Fy/v3GT53/cmrvjE1rdz/sPrDfN6eT/s6r1z77i4snvzkH2o7evW1rqrfvmRb6s3efnBvGT29u3Dh/+61bt26sRZqMLL0UaXLMcv6DvZ+F+8//z+635yeg5v5698PhQ+c/L7ajPzX/Zxvz9fY+P+O+tSHnP0w/Of+3U/vk/f805z99/3+hhf4AAAAAAAAAAAAAAADAJ6mqau8S0Vcj4kq6/qetazMBgNnKr/9Vkperj73+/rmIeeqPWq1Wqwusm6rJXmkWEfGX5m3q9ww/n/TLAIB59t+I+HvbnaA18i9Y/r6/evpc250BZurm+x/88K3r1zdu3Gy7JwAAAAAAAADAp5XH/1xtjP/8XESsjK03Mv7ra7F61PE/+3nm3gCjxzzQ9xTb3WGv2xhu/OnYG5/7/P742w+O//1MPDj+dx4Tt9fcjikGB7QPD2hfOKB9ceLS+2lNvNCjIef/dGO88zr/p8aGXy9h/NfxMe9LkPN/pvF4rvP/wth6zfyr38xd/luHXXE7uiP5X7j13k8u3Hz/gxevvffWuxvvbvzo8traxctXrly9evXCO9eub1zc//dkej0Hcv557GvngZYl558zl39Zcv6fS7X8y5Lz/3yq5V+WnH9+vyf/suT882cf+Zcl5/98quVflpz/l1It/7Ls7G4u1Pm/kGr5lyXv/19OtfzLkvN/MdXyL0vO/3yq5V+WnP+FVB8if18Pf4bk/PMRLvt/WXL+a6mWf1ly/pdSLf+y5Pwvp1r+Zcn5v5Rq+Zcl5/+VVMu/LDn/K6mWf1ly/l9NtfzLkvO/mmr5lyXn/7VUy78sOf+vp1r+Zcn5v5xq+Zcl5/+NVMu/LDn/b6Za/mXJ+X8r1fIvS87/lVTLvyz3v//fjBkzZvJM289MAAAAAAAAAAAAAMC4WZxO3PY2AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwP/YgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwg4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRX27jVGrrO+H/iZvXntEGIgBCd/A2vHGOMs2fUlvvCviwn3AKVAQqEXbNe7Ngu+4bVLoJFsGiiRcFRUUTV90RZQ1EaqKqyKF7RKaV5Uvbxq2hf0TUVVCalRFaKAitRWNFvNOc/zeGZ2dmbWO17PnvP5SPZvd+bMnDNnzszud+3vHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaLTl7bNfrmVZVv+T/7Uxy15W/3j9xMb8srfc7C0EAAAAVup/879fvC1dcLiHGzUs87ev+4dvLywsLGQfG/6d0a8tLKQrJrJsdF2W5ddFV//t47XGZYJHs/HaUMPnQ11WP9zl+pEu1492uX6sy/Xrulw/3uX6RTtgkfXFz2PyO9uWf7ix2KXZ7dloft22Nrd6tLZuaCj+LCdXy2+zMHoim8tOZbPZdNPyxbK1fPmnt9TX9Z4srmuoYV2b60fIjx45HrehFvbxtqZ1XbvP6IdvyyZ+/KNHjv/RhefvbDe77oam+yu2c8fW+nZ+MVxSbGstW5f2SdzOoYbt3NzmORlu2s5afrv6x63b+WKP2zl8bTNXVetzPp4N5R8/m++nkcYf66X9tDlc9l93Z1l2+dpmty6zaF3ZULah6ZKha8/PeHFE1u+jfii9MhtZ1nG6pYfjtD5ntjUfp62vifj8bwm3G1liGxqfph9+YWzR877c4zSqP+qlXiutx2C/XyuDcgzG4+LZ/EE/1vYY3BYe/yPblz4G2x47bY7B9LgbjsGt3Y7BobHhfJvTk1DLb3PtGNzVtPxwvqZaPp/b3vkYnLpw+tzU/Oc+/+a508dOzp6cPbNn167pPfv2HThwYOrE3KnZ6eLv69zbg29DNpReA1vDvouvgTe2LNt4qC58o3+vw/EOr8ONLcv2+3U40vrgaqvzglx8TBevjQfrO338ylC2xGssf352rvx1mB53w+twpOF12PZrSpvX4UgPr8P6Mud29vY9y0jDn3bbcKO+FmxsOAZbvx9pPQb7/f3IoByD4+G4+JedS38t2By297HJ5X4/MrzoGEwPN7z31C9J3++PH8hHu+PyrvoVt4xlF+dnz9/78LELF87vysJYFa9qOFZaj9cNDY8pW3S8Di37eD0897rH7mpz+cawr8bfXP9rfMnnqr7M3ns7P1f5V7f2+7Pp0t1ZGH222vuz3Vfz+v5MWbLD/qwv88WplX8vnnJpw/vv6BLvvzH3v1SsL93Vo8OjI8XrdzjtndGm9+Pmp2okf++q5et+caq39+PR8Ge1349v7/B+vKll2X6/H4+2Prj4flzr9tOOlWl9PsfDcXJquvP7cX2ZTbuXe0yOdHw/vjvMWtj/bwpJIeWihmNnqeM2rWtkZDQ8rpG4hubjdE/T8qMhm9XX9dTu6ztOd9xd3NdwenTXrNZxOtGybL+P0/R+tdRxWuv207fr0/p8jofj4vY9nY/T+jLP7F35e+f6+GHDe+dYt2NwdHisvs2j6SAs3u8X1sdj8N7seHY2O5XN5NeO5cdTLV/X5H29HYNj4c9qv1du6nAM7mhZtt/HYPo6ttSxVxtZ/OD7oPX5HA/HxRP3dT4G68u8Y39/v3fdES5JyzR879r687WlfuZ1V8tuupE/86pv51/v7/yz2foypw4sN2d23k/3hEtuKS4aa9xPra/fpV5TM9nq7KdNYTufP7D0fqpvT32Zrx3s8Xg6nGXZpc/cn/+8N/z7yp9d/N63m/7dpd2/6Vz6zP0v3Hrib5az/QCsfS8VY0Pxta7hX6Z6+fd/AAAAYE2IuX8ozET+BwAAgNKIuT/+r/BE/gcAAIDSiLl/JMykIvl/0zuen3vpUpaa+QtBvD7thgeK5WLHdTp8PrFwTf3y+5+c/clfXOpt3UNZlv30gV9vu/ymB+J2FSbCdl59Z/Pli294qaf1H33o2nKN/fWvh/uPj6fXw6BdBXc6y7Knb3s8X8/Ex6/k85kHjubzw5cfe7S+zIsHi8/j7Z97VbH874fy7+ETx5pu/1zYDz8Ic/p97fdHvN23rrxp8/6PXltfvF1t68vzh/3EJ4r7jb8n56uPFsvH/bzU9v/lV576Vn35h9/QfvsvDbXf/qfC/T4Z5n+/tli+8Tmofx5v96Ww/XF98Xb3fvO7bbf/6peL5c+9q1juaJhx/TvC59ve9fxc4/56uHas6XFl7y6Wi+uf/t5v5dfH+4v337r940euNO2P1uPjmX8q7meqZfl4eVxP9Oct66/fT+PxGdf/1G8ebdrP3dZ/9cPPvbZ+v63rv6dlueGW27f+xqY/+NLjbdcXt+fwn55rejyHPxRex2H9T3wiHI/h+v+5+njTeqOjH2p+/4nLf33jpabHE73nx8X6r771ZD7/feInv3fLy259+eXX1/ddlj37keL+uq3/5B+ebdr+b9yxM38+4vWxo9+6/qXE9Z//7OSZs/MX52Ya9mr+u3PeX2zPuvH1G+rbe1t4b239/MjZC5+cPT8xPTGdZRPl/RV61+2bYb5QjMvLvf3Oh8LzedfvPr1h+z9+JV7+zw8Wl195X/F1641hua+GyzcWz99CbYXrf2LLHfnru/ZM8XlTj70PNm/7jwM9LRgef+v3BfF4P/fqT+b7oX5d/nUjvq5XuP3fnynu5zthvy6E38y89Y5r62tcPv5uhCsfKV7vK95/4W0uPq9/HJ7vD/yguP+4XfHxfj98H/PdTc3vd/H4+M6lodb7z3+Lx+XwfpJdLq6PS8X9feXFO9puXvw9JNnlO/PPfzvdz53LephLmf/c/NSpuTMXH566MDt/YWr+c58/cvrsxTMXjuS/y/PIp7rd/tr704b8/Wlmdt/ebHp9lmVns+lVeMPq+/anXwjU2/afe+j4zP7p7TOzJ45dPHHhoXOz508en58/Pjszv/3YiROzn+12+7mZQ7t2H9yzf/fkybmZQwcOHtxzcHLuzNn6biw2qot905+ePHP+SH6T+UN7D+66776905Onz87MHto/PT15sdvt869Nk/Vb/9rk+dlTxy7MnZ6dnJ/7/OyhXQf37dvd9bcBnj53Yn5i6vzFM1MX52fPTxWPZeJCfnH9a1+321NO8/9afD/bqlb8Ir7sg/fsS7+fte7JLyx5V8UiLb9A9Pnwu2j+/hXnDvTyecz9o2EmFcn/AAAAUAUx94+Fmcj/AAAAUBox968LM5H/AQAAoDRi7h8PM6lI/tf/1//vrf9fXK//X63+/7nPFL3Std7/j/15/f9quMn9/xWvX/9f/798/f/6R2u0/7/M7df/1/9nsUHr/8fcvz7LKpn/AQAAoApi7t8QZiL/AwAAQGnE3H9LmIn8DwAAAKURc//Lwkwqkv/1/3vq/+/uVrgqf//f+f/1/7O12f+PT47+f2Usu3//0QebPtX/D/T/9f/1//X/9f9ZsdElr7lZ/f+Y+28NM6lI/gcAAIAqiLn/5WEm8j8AAACURsz9t4WZyP8AAABQGjH3bwwzqUj+1/93/n/9f/3/Uvf/V3r+/4aN0f9fG5z/v7Nl9//X6f/31v8f1/9fi/3/0f5u/2D3/7tuvv4/N8Sgnf8/5v5XhJlUJP8DAABAFcTc/8owE/kfAAAASiPm/leFmcj/AAAAUBox998eZlKR/K//r/+v/6//r//ffv3dz/9ffKT/P1j0/ztz/v8unP+/Wv3/Pm//YPf/+33+/9F3tt5e/592Bq3/H3P/q8NMKpL/AQAAoApi7r8jzET+BwAAgNKIuf81YSbyPwAAAJRGzP2bwkwqkv/1//X/9f/1//X/26+/e/+/oP8/WPT/O9P/70L/X/9f/7+3/n+bb371/2ln0Pr/MfffGWZSkfwPAAAAVRBz/11hJvI/AAAAlEbM/f8vzET+BwAAgNKIuX9zmElF8r/+v/6//n+1+v/3jOn/6/+XWzn7//37pkT/vwv9f/1//f8ez/+/2HL6/+u63RmlMWj9/5j7XxtmYdNIVfI/AAAAVEHM/a8LM5H/AQAAoDRi7n99mIn8DwAAAKURc/9EmElF8r/+f7n6/3/yV0+8PtP/1//vsv6S9v/jYaD/X3Hl7P/3j/5/F/r/+v/6/6vS/6c6Bq3/H3P/ljCTiuR/AAAAqIKY+7eGmcj/AAAAUBox998dZiL/AwAAQGnE3L8tzKQi+V//v1z9/0j/X/+/0/pL2v9P9P+rTf+/jYYXqf5/F/r/+v+V7//H7371/+mPQev/x9z/hjCTiuR/AAAAqIKY+7eHmcj/AAAAUBox978xzET+BwAAgNKIuX9HmElF8r/+v/6//r/+v/5/+/Xr/69N+v+dLbf/P6b/r/+v/1+x/r/z/9Nfg9b/j7n/TWEmFcn/AAAAUAUx9+8MM5H/AQAAoDTi/98s/t+r/A8AAABlFHP/ZJhJRfK//r/+f5X6/zX9f/1//f/S0//vzPn/u9D/1//X/1/c/1/X9aHn9P9pZ9D6/zH3vznMpCL5HwAAAKog5v57w0zkfwAAACiNmPunwkzkfwAAACiNmPunw0wqkv/1//X/q9T/H/zz/zf3RPX/C/r/+v/Lof/fmf5/F/r/+v9l6/9nmfP/c1MNWv8/5v5dYSYVyf8AAABQBTH37w4zkf8BAACgNGLu3xNmIv8DAABAacTcvzfMpCL5X/+/rP3/hUz/fy32/53/X/9f/3+l9P870//vQv9f/79s/f9+nP9f/58VGLT+f8z994WZVCT/AwAAQBXE3L8vzET+BwAAgNKIuX9/mEnI/+3+XzcAAACwtsTcfyDMpCL//q//X5L+/2/8XdO6nf9f/7/T+vvT/1+v/x+m/v9gKWn/v/Vlcd30/7vQ/9f/1//X/6evBq3/H3P/wTCTiuR/AAAAqIKY+98SZiL/AwAAQGnE3P//w0zkfwAAACiNmPt/JsykIvlf/78k/f8W+v/6/53W7/z/+v9lVtL+f9+Uqv8/pP+v/z9Y26//r//PYje+/x8/6q3/H3P/oTCTiuR/AAAAqIKY+382zET+BwAAgNKIuf+tYSbyPwAAAJRGzP2Hw0wqkv/1//X/9f/1/29M//+tWatB7P/XDx79/3LR/++sVP1/5//X/x+w7df/1/9nsUE7/3/M/W8LM6lI/gcAAIAqiLn//jAT+R8AAABKI+b+t4eZyP8AAABQGjH3vyPMpCL5X/9f/1//X//f+f/br1//f23S/+9M/78L/X/9f/1//X/6atD6/zH3vzPMpCL5HwAAAKog5v53hZnI/wAAAFAaMfe/O8xE/gcAAIDSiLn/PWEmFcn/+v/6//r/+v/6/+3Xr/+/Nun/d6b/34X+v/6//r/+P301aP3/mPvfG2ZSkfwPAAAAVRBz/wNhJvI/AAAAlEbM/e8LM5H/AQAAoDRi7n9/mElF8r/+v/6//r/+v/5/+/Xr/69N+v+d6f93of+v/6//r/9PXw1a/z/m/g+EmVQk/wMAAEAVxNz/c2Em8j8AAACURsz9Hwwzkf8BAACgNGLu//kwk4rkf/1//f/B6v8vXGq8nf6//n/Wr/5//Ua99f/H4v3o/69N+v+d6f930ab/v07/X/9f/1//n+s2aP3/mPs/FGZSkfwPAAAAVRBz/4fDTOR/AAAAKI2Y+z8SZiL/AwAAQGnE3P9gmElF8r/+fyX7/+khD17/3/n/9f+d/1//f2X0/zvT/+/C+f/1//X/9f/pq0Hr/8fc/1CYSUXyPwAAAFRBzP0fDTOR/wEAAKA0Yu7/hTAT+R8AAABKI+b+j4WZVCT/X1f/P5Ze9f+TNdb/H+Dz/5et/z/SdHxUqf8/3vB8puNS/1//fxXo/3em/9+F/r/+/yD3/8PRvH6J2+v/M4gGrf8fc//Hw0wqkv8BAACgCmLu/8UwE/kfAAAA1oL5XhaKuf+XwkzkfwAAACiNmPt/OcykIvnf+f/1//X/G/v/73X+f+f/1/9f4/T/O9P/70L/X/9/kPv/Xej/M4gGrf8fc/+vhJksGfxe+M8eHiYAAAAwQGLu/0SYSUX+/R8AAACqIOb+I2Em8j8AAACURsz9R8NMKpL/9f9b+//xjKr6/9Xs//f7/P/Nx4f+v/6//v+N17/+/2tuzTL9f/1//X/9/9Xs/w/p/1M6g9b/j7n/WJhJRfI/AAAAVEHM/b8aZiL/AwAAQGnE3H88zET+BwAAgNKIuX8mzKSM+b+1VHtz+/+jg9n/d/7/6+3//1T/X/8/0P9vT/9/dTj/f2f6/13o/+v/O/+//j99NWj9/5j7Z8NMypj/AQAAoFrSj4Nj7j8RZiL/AwAAQGnE3H8yzET+BwAAgNKIuf+TYSYVyf/O/6//7/z/N6P/P9K0vP5/YRn9//wm+v/6/+3o/3em/9+F/r/+v/6//j99NWj9/5j758JMKpL/AQAAoApi7v9UmIn8DwAAAKURc/+nw0zkfwAAACiNmPtPhZlUJP/r/+v/V73/X8uyy87/v+b6/zn9f/3/dvT/O9P/70L/X/9f/1//n74atP5/zP2nw0wqkv8BgP9j7z6a5DqvOw43aRJhZX8Er73y0l7RH8Fb71yltTKVA0nlLFE5ByrnnBOVc86ZyjlSkVIVVADOOcBgGrcBTM/0ve95ns0xUIRnhhzQ9TfqxxcA6CB3/13iFvsfAAAAhpG7/65xi/0PAAAAw8jdf7e4pcn+1//r/7v3/6udvP+/96/X/5+l/9f/b8O+/v6a9X/dxaLwi/b///lf1/+//l//r/+fpP/X/+v/udDc+v/c/XePW5rsfwAAAOggd/894hb7HwAAAIaRu/+ecYv9DwAAAMPI3X993NJk/+v/9f/6f/3/nv7/Vv2//n/ZvP8/Tf+/gf5f/6//1/+zVXPr/3P33ytuabL/AQAAoIPc/feOW+x/AAAAGEbu/vvELfY/AAAADCN3/33jlib7X/+v/9f/L6X/P+b9/wu+Hv2//n8d/f80/f8G+n/9v/5f/89Wza3/z91/v7ilyf4HAACADnL33z9usf8BAABgGLn7HxC32P8AAAAwjNz9D4xbmux//b/+X/+/lP7/iN7/1//r/xfultW5fyccdf9/bAv//QH9/7z7/9VK/z/lkvv59V/ecj7/i9D/6//Zb279f+7+B8Ut/7NaHbvSLxIAAACYldz9D45bmvz5PwAAAHSQu/+GuMX+BwAAgGHk7r8xbmmy//X/+v8r6//Pfr/o//X/+n/9/9x4/3/awfv///i3O9+pb//v/f9p3v/fdv9/+jtD/8+yza3/z91/U9zSZP8DAABAB7n7HxK32P8AAAAwjNz9D41b7H8AAAAYRu7+h8UtTfa//n+0/v9f9vy68/r/M7WL9//1//p//f/o9P/TvP+/wZl/zZ2sH+r/9f/e/9f/czBz6/9z9z88bmmy/wEAAKCD3P2PiFvsfwAAABhG7v5Hxi32PwAAAAwjd/+j4pYm+1//P1r/v/fXHd77//p//b/+X/8/T/r/afr/DUZ5//8Kv2t23c8f1K4/f/2//p/95tb/5+5/dNzSZP8DAABAB7n7HxO32P8AAAAwjNz9j41b7H8AAAAYRu7+x8UtTfa//l//v4z+Pz+C/l//f/j9f9L/L5P+f5r+f4NR+v8rtOt+fumfv/5f/89+c+v/c/c/Pm5psv8BAACgg9z9T4hb7H8AAAAYRu7+J8Yt9j8AAAAMI3f/k+KWJvtf/6//X0b/7/1//b/3//X/l0b/P03/v4H+X/+v/9f/s1Vz6/9z998ctzTZ/wAAANBB7v4nxy32PwAAAAwjd/9T4hb7HwAAAIaRu/+pcUuT/a//1//r//X/+v/1H1//v0z6/2n6/w30//p//b/+n62aUf9/3q86sXpa3NJk/wMAAEAHufufHrfY/wAAADCM3P3PiFvsfwAAABhG7v5nxi1N9r/+fzb9/5mcb6z+/+RqtdL/r5r2/yfP++dZ35f6f/3/EdD/T9P/b3D6N+Spq/T/+n/9v/6fLTna/v/0v/On/3sAufufFbc02f8AAADQQe7+Z8ct9j8AAAAMI3f/c+IW+x8AAACGkbv/uXFLk/2v/59N/3/GWP2/9/8v/P7o1P97/38//f/R0P9P0/9v4P3/A/fzV6/0//p//T/nHG3/v/nHufufFzcdu/aKv0QAAABgZnL3Pz9uafLn/wAAANBB7v4XxC32PwAAACzUzft+Jnf/C+OWJvtf/7/d/v/YeT+n/9f/X/j9of/X/+v/D5/+f5r+fwP9v/f/9f/6f7Zqbv1/7v4XxS1N9j8AAAB0kLv/lrjF/gcAAIBh5O5/cdxi/wMAAMAwcve/JG5psv/1/97/1//r//X/6z++/n+Z9P/T9P8b6P/1/7vt/4+f+x8Pt/8/uebX6/85DJfR/586deqGQ+//c/e/NG5psv8BAACgg9z9L4tb7H8AAAAYRu7+l8ct9j8AAAAMI3f/K+KWJvtf/9+0/89v9WX1/zeuVvp//b/+X/8/Tf8/Tf+/gf5f/+/9f/0/WzW39/9z978ybmmy/wEAAKCD3P2vilvsfwAAABhG7v5Xxy32PwAAAAwjd/9r4pYm+1//37T/9/6//l//f9T9/x0r/f+RWET/v+7h7TD3/v8m/b/+f0K7/v9//3vPD/X/+n/2m1v/n7v/tXFLk/0PAAAAHeTuf13cYv8DAADAMHL3vz5usf8BAABgGLn73xA3XdNk/+v/9f/6f/2//n/9xz/i9/+PrVYr/f8WLKL/nzD3/n877/9f+Lv8HP2//n/Jn7/+X//PfnPr/3P3vzFuabL/AQAAoIPc/W+KW+x/AAAAGEbu/jfHLfY/AAAADCN3/1vilib7X/+v/9f/6/+H7/9vWkT/7/3/LdH/T5tH/39x+n/9/5I/f/2//p9Lt6v+P3f/W+OWJvsfAAAAOsjd/7a4xf4HAACAYeTuf3vcYv8DAADAMHL3vyNuabL/9f/6/8vp//Pz1P+P1f8fn13/f2LP/74m7//r/7dE/z9N/7+B/l//r/+/Wf/PNs3t/f/c/e+MW5rsfwAAAOggd/+74tb/69b+BwAAgGHk7n933GL/AwAAwDBy978nbmmy//X/+n/v/+v/h3//X//fiv5/mv5/A/2//l//7/1/tmpu/X/u/vfGLU32PwAAAHSQu/99cYv9DwAAAMPI3f/+uMX+BwAAgGHk7r81bmmy//X/+n/9v/5f/3/2n6H+fwz6/2lH0/+f1P/r/6ufvyp+F+j/9f+bfj1jmlv/n7v/A3FLk/0PAAAAHeTu/2DcYv8DAADAMHL3fyhusf8BAABgka5Z83O5+z8ctzTZ//p//b/+X/+v/1//8fX/y7ST/j+/KfT/3v8Pffr/f9/zo6W9/3/h//3S/+v/2b659f+5+z8StzTZ/wAAANBB7v6Pxi32PwAAAAwjd//H4hb7HwAAAIaRu//jcUuT/a//1//r//X/+v/1H1//v0ze/5+m/99A/7/T9/OX/vnr//X/7De3/j93/yfilib7HwAAADrI3f/JuMX+BwAAgGHk7v9U3GL/AwAAwDDO7P6Myxruf/2//l//r//X/6//+Pr/ZdL/T9P/b6D/1//r//X/bNXc+v9Pn/lVJ1afiVua7H8AAADoIHf/Z+MW+x8AAACGkbv/c3GL/Q8AAADDyN3/+bilyf7X/+v/l9H/nzp16gb9v/5/79dzrv+/Tf9P0f9P0/9voP/X/+v/9f9s1dz6/9z9X4hbmux/AAAA6CB3/xfjFvsfAAAAhpG7/0txi/0PAAAAw8jd/+W4pcn+1//PoP8/of/3/r/+f+X9f/3/luj/p+n/Nxix/z9x6V/+rvv5g9r156//1/+z39z6/9z9X4lbmux/AAAA6CB3/1fjFvsfAAAAhpG7/2txi/0PAAAAw8jd//W4pcn+1/8fXf9/+u9dl/f/T67Wf/76f/2//l//f9j0/9P0/xuM2P9fhl3380v//PX/+n/2m1v/n7v/G3HL3uF37eV9lQAAAMCc5O7/ZtzS5M//AQAAoIPc/d+KW+x/AAAAGEbu/m/HLU32v/5/Bu//D9j/e/9//feH/n/W/f/V+v8x6P+n6f830P/r//X/W+r/87tZ/9/d3Pr/3P3fiVua7H8AAADoIHf/d+MW+x8AAACGkbv/e3GL/Q8AAADDyN1/W9xy3v5f13aPQv+v/9f/6//1/+s/vv5/mfT/0y61/z++Olj/n/T/+n/9f9f+3/v/nDW3/j93//fjFn/+DwAAAItz7UV+Pnf/D+IW+x8AAACGkbv/h3GL/Q8AAADDyN3/o7jl9qt39SkdKf2//l//r//X/6//+Pr/ZdL/T/P+/wb6/23089fp/8fo/1cr/T8HN7f+P3f/j+MWf/4PAAAAw8jd/5O4xf4HAACAYeTu/2ncYv8DAADAMHL3/yxuabL/9f/6/wP2/2fSTP3/Wfr/s/T/6+n/j4b+f5r+fwP9v/f/9f/e/2er5tb/5+7/edzSZP8DAABAB7n7fxG32P8AAAAwjNz9v4xb7H8AAAAYRu7+X8UtTfb/zvr/+Fut/198/+/9/0Pv/09/dfp//b/+/1Lp/6fp/zfQ/+v/9f/6f7Zqbv1/7v5fxy1N9j8AAAB0kLv/N3GL/Q8AAADDyN3/27jF/gcAAIBh5O7/XdzSZP97/1//r/+fe/8/9Pv/q5X+X/+/Zfr/afr/9eoflP5f/6//1/+zVXPr/3P3/z5uabL/AQAAoIPc/X+IW+x/AAAAGEbu/tvjFvsfAAAAhpG7/49xS5P9r//X/+v/9f/e/1//8fX/y6T/n7bL/v///nXzh/X+/877//wU9P/6f/0/WzG3/j93/5/ilib7HwAAADrI3f/nuMX+BwAAgGHk7v9L3GL/AwAAwDBy9/81bmmy/zf0/8frL9T/T9L/7/389f/rvz/0//p//f/h0/9Pm+7/z/vd3Oz9/6L/9/6//l//z1bNrf/P3f+3uKXJ/gcAAIAOcvffEbfY/wAAADCM3P1/j1vsfwAAABhG7v5/xC1N9r/3/5fU/1+n/9f/6//1//r/DfT/03b5/v+l0P/r/5f8+ev/9f/sN7f+P3f/PwMAAP//dnFCVw==") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000140)=""/186, 0xba) 2m58.724385341s ago: executing program 4 (id=396): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)={0x14, r1, 0x307, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x95}, 0x20004800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) 2m57.174866536s ago: executing program 4 (id=404): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) writev(r0, &(0x7f0000000000)=[{0x0}, {0x0}, {&(0x7f0000001480)}], 0x3) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0xad82, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5393, &(0x7f0000000000)) 2m56.842741281s ago: executing program 4 (id=407): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x50) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x0) r4 = socket$inet6(0xa, 0x3, 0x81) connect$inet6(r4, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x3f8, 0x1c0, 0x43, 0xa0, 0x0, 0x98, 0x360, 0x178, 0x178, 0x360, 0x178, 0x49, 0x0, {[{{@ip={@empty=0x5107, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1a0, 0x1c0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@connbytes={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x168, 0x1a0, 0x0, {}, [@common=@unspec=@connbytes={{0x38}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@multicast1, [], @ipv6=@loopback, [], @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [], @ipv4=@multicast1}}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x468) socket$alg(0x26, 0x5, 0x0) msgrcv(0x0, 0x0, 0xfffffffffffffff7, 0x1, 0x86b1b18158a7c382) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r6, 0x0, 0x48b, &(0x7f0000000100)={0x1, 'geneve0\x00', 0x2}, 0x18) r7 = socket$l2tp(0x2, 0x2, 0x73) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r8) getpeername$l2tp(r7, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r6, 0x0, 0x487, &(0x7f00000001c0), &(0x7f0000000200)=0x30) 2m55.401348765s ago: executing program 4 (id=410): syz_mount_image$nilfs2(&(0x7f0000000180), &(0x7f0000000e00)='./file0\x00', 0x0, &(0x7f0000000100)={[{@errors_continue}, {@nodiscard}, {@errors_continue}, {@order_relaxed}, {@order_relaxed}, {@order_relaxed}, {@discard}, {@norecovery}, {@nobarrier}]}, 0x1, 0xd99, &(0x7f0000000e80)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) 2m54.030908137s ago: executing program 4 (id=415): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_mount_image$hfs(&(0x7f0000000480), &(0x7f0000000140)='./file1\x00', 0x3000840, &(0x7f00000004c0)=ANY=[@ANYBLOB="6469725f756d61736b3d303030303030303030303030303030342c66696c655f756d61736b3d30303030303030303030303030303030303030313334302c696f636861727365743d6d61637475726b6973682c636f6465706167653d69736f383835392d362c63726561746f723d4ddd71752c00eace691af6ae10469da9b01baceb6a9486a6be7f83429052dab3e6e5e287ba3d79e809945e4361c0019a8ed88ae1c6c541bb9a966c0e4d7bde2f8e3add0af5a9c74c520f889381fbcf573e0000000000"], 0x11, 0x2e1, &(0x7f0000000ac0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x240900, 0x0) chmod(&(0x7f0000001140)='./file1\x00', 0x80) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)}, &(0x7f0000000280)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={r3, @in={{0x2, 0x1000, @empty}}, 0x7fff, 0x0, 0xd78e, 0x0, 0x5a1, 0x0, 0x7}, 0x9c) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f00000000c0)=0x6) read$dsp(r1, &(0x7f00000011c0)=""/4117, 0x200021d5) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r5, 0xfffffffd, 0x0, 0x30, 0x0, @in6={0xa, 0x4e20, 0x70c1, @empty, 0x7}, @ib={0x1b, 0x0, 0x0, {"7d0300"}, 0x0, 0x0, 0x376060b0}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r5, 0x9}}, 0x10) close(r4) syz_open_dev$MSR(&(0x7f0000000180), 0x300, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7f03) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x400143, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a09040000000000000000020000000900010073797a30000000000900020073797a3200000000", @ANYRES16], 0x9c}}, 0x0) 2m38.731745627s ago: executing program 32 (id=415): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_mount_image$hfs(&(0x7f0000000480), &(0x7f0000000140)='./file1\x00', 0x3000840, &(0x7f00000004c0)=ANY=[@ANYBLOB="6469725f756d61736b3d303030303030303030303030303030342c66696c655f756d61736b3d30303030303030303030303030303030303030313334302c696f636861727365743d6d61637475726b6973682c636f6465706167653d69736f383835392d362c63726561746f723d4ddd71752c00eace691af6ae10469da9b01baceb6a9486a6be7f83429052dab3e6e5e287ba3d79e809945e4361c0019a8ed88ae1c6c541bb9a966c0e4d7bde2f8e3add0af5a9c74c520f889381fbcf573e0000000000"], 0x11, 0x2e1, &(0x7f0000000ac0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x240900, 0x0) chmod(&(0x7f0000001140)='./file1\x00', 0x80) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)}, &(0x7f0000000280)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={r3, @in={{0x2, 0x1000, @empty}}, 0x7fff, 0x0, 0xd78e, 0x0, 0x5a1, 0x0, 0x7}, 0x9c) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f00000000c0)=0x6) read$dsp(r1, &(0x7f00000011c0)=""/4117, 0x200021d5) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r5, 0xfffffffd, 0x0, 0x30, 0x0, @in6={0xa, 0x4e20, 0x70c1, @empty, 0x7}, @ib={0x1b, 0x0, 0x0, {"7d0300"}, 0x0, 0x0, 0x376060b0}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r5, 0x9}}, 0x10) close(r4) syz_open_dev$MSR(&(0x7f0000000180), 0x300, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7f03) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x400143, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a09040000000000000000020000000900010073797a30000000000900020073797a3200000000", @ANYRES16], 0x9c}}, 0x0) 2m25.041584391s ago: executing program 2 (id=512): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f00000003c0)=@multiplanar_overlay={0x80000000, 0x2, 0x4, 0x40, 0x10000005, {}, {0x2, 0xc, 0x7, 0x7, 0x4, 0xb, "afe692a5"}, 0xff, 0x3, {&(0x7f0000000280)=[{0xa, 0x5, {0x8}, 0xffffffff}, {0x5, 0x4, {0x6}, 0x4}]}, 0x5}) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe(0x0) fcntl$setpipe(r0, 0x407, 0x6) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000240)=0x1) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, 0x0, 0x24040808) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x12dd82, 0x0) sendfile(r0, r3, 0x0, 0x201f00) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_GET_NODES(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={0x1c, r6, 0x1, 0x4, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 2m23.819071881s ago: executing program 2 (id=516): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) bind$xdp(r0, &(0x7f0000000240)={0x2c, 0x1, r2}, 0x10) 2m23.409588198s ago: executing program 2 (id=518): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) r4 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_QUERYBUF(r4, 0xc0585609, &(0x7f00000003c0)=@multiplanar_overlay={0x80000000, 0x2, 0x4, 0x40, 0x10000005, {}, {0x2, 0xc, 0x7, 0x7, 0x4, 0xb, "afe692a5"}, 0xff, 0x3, {&(0x7f0000000280)=[{0xa, 0x5, {0x8}, 0xffffffff}, {0x5, 0x4, {0x6}, 0x4}]}, 0x5}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe(0x0) fcntl$setpipe(r0, 0x407, 0x6) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000240)=0x1) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, 0x0, 0x24040808) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x12dd82, 0x0) sendfile(r0, r5, 0x0, 0x201f00) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r7) sendmsg$TIPC_CMD_GET_NODES(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={0x1c, r8, 0x1, 0x4, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 2m21.730439325s ago: executing program 2 (id=522): syz_mount_image$jfs(&(0x7f0000000080), &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480)=ANY=[], 0x1, 0x6276, &(0x7f0000003680)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r0, 0xfffffffffffffffe, 0x29) 2m18.688441725s ago: executing program 2 (id=531): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400), 0xff, 0x23f, &(0x7f0000000540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x641, 0x14a) r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r1, 0x2007ffc) fallocate(r0, 0x20, 0x4000, 0x8000) 2m14.557850822s ago: executing program 2 (id=539): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$cont(0x20, r0, 0x0, 0x0) 2m12.758034531s ago: executing program 33 (id=539): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$cont(0x20, r0, 0x0, 0x0) 1m13.317575313s ago: executing program 6 (id=712): syz_usb_connect(0x0, 0x6b, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x60200, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 1m6.827606889s ago: executing program 6 (id=721): syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000440)='./file0\x00', 0x2008410, &(0x7f0000001f80)=ANY=[], 0x1, 0x553b, &(0x7f000000ac00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x9) r0 = open(&(0x7f0000000000)='./bus\x00', 0x1, 0xc32a4cddd557707a) fallocate(r0, 0x0, 0x0, 0x9000f4) mkdir(0x0, 0x0) 1m3.153804719s ago: executing program 6 (id=735): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000100)='./file1\x00', 0x8c0, &(0x7f00000001c0)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c6572726f72733d72656d6f756e742d726f2c61636c2c00a9b504852143b698d2e379891a0dde7f9adfca8cbec85bf8e749e04e"], 0x11, 0x443f, &(0x7f00000088c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x0) fcntl$setlease(r0, 0x400, 0x1) unlink(&(0x7f0000000300)='./file1\x00') 59.785821524s ago: executing program 6 (id=743): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3000490, &(0x7f0000000100)={[{@lazytime}, {@usrjquota}, {@errors_remount}, {@noauto_da_alloc}, {@auto_da_alloc}, {@mblk_io_submit}, {@grpquota}, {@barrier_val}, {@grpjquota}, {}, {}, {@usrjquota}]}, 0x45, 0x7b1, &(0x7f00000004c0)="$eJzs3c9rHNcdAPDvrFY/7VYqFFr3JCi0BuNV5ap2C4Wq9FAKNRjaUw+1xWotHK20RrsylhCJTQjkEkhCbsnF5/y8hFzz45BL8n8EGyeRTRxyCAqzP6SVtCvvOtKuHX8+MNZ7M2/2ve+82TfPmtFuAE+tyfSfTMSJiHg5iRivr08iYrCaykbM1so92NzIp0sSW1v/+Sqplrm/uZGPpn1Sx+qZX0fExy9EnMrsr7e8tr44VywWVur5qcrS1any2vrpK0tzC4WFwvLZ6ZmZM+f+dO7s4cX6zefrx++88s/fvzP73fO/evelT5KYjeP1bc1xHJbJmKwfk8H0EO7yj8OurG/ef7aDQk1nQPYoG0OX0o4ZqPfKiRiPgYP6Z7SXLQMAjspzEbHVzkDbLQDAEy2pXf//1u92AAC90vg9wP3NjXxj6e9vJHrr7t8jYqQWf+P+Zm1Ltn7PbqR6H3TsfrLrzkgSEROHUP9kRLzxwf/fSpc4ovuQAK3cuBkRlyYm94//yb5nFrr1h9arF5ozk3s2Gv+gdz5M5z9/bjX/y2zPf6LF/Ge4xXv3UTz8/Z+5fQjVtJXO//7a9Gzbg6b46yYG6rmfVed8g8nlK8VCOrb9PCJOxuBwmp8+oI6T976/125b8/zv61efeTOtP/25UyJzOzu8e5/5ucrcj4m52d2bEb/Jtoo/Hf+Hq/2ftJn/Xuiwjn/95cXX221L40/jbSz74z9aW7ciftey/5PtMsmBzydOVU+HqcZJ0cJ7szHWrv7J7E7/p0taf+P/Ar2Q9v/YwfFPJM3Pa5Y7funtp8U+uzX+UbtCzed/6/hbn/9DyX+r6aH6uutzlcrKdMRQ8u/968/s7NvIN8qn8Z/8bev3f2P8a3H+/y99/UsdHojsnS/ffvT4j1Ya/3xX/d91IkYeLA60q7+z/p/ZtU8n41+nDXzU4wYAAAAAAAAAAAAAAAAAAAAAAAAA3chExPFIMrntdCaTy9W+w/uXMZYplsqVU5dLq8vzUf2u7IkYzDQ+6nK86fNQp+ufh9/In9mT/2NE/CIiXhsereZz+VJxvt/BAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDdsTbf/5/6YnhP4YF+tBAAOBIjLuwA8LRJstl+NwEA6LWRrkqPHlk7AIDe6e76DwD8FLj+A8DT5yHX/71/BgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADdunD+fLpsfbu5kU/z89fWVhdL107PF8qLuaXVfC5fWrmaWyiVFoqFXL601PaFbtR+FEulqzOxvHp9qlIoV6bKa+sXl0qry5WLV5bmFgoXC4M9iwwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOldeW1+cKxYLKxJ9SSx+WuuHx6U9Et0l4kat/x6X9hxeIoZ2RonR/gxOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAE+AHwIAAP//4VQjgA==") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) lseek(r0, 0x100, 0x0) 59.048045266s ago: executing program 1 (id=746): syz_mount_image$erofs(&(0x7f0000000400), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000000840)=ANY=[], 0x2, 0x1ed, &(0x7f00000008c0)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005efe2100850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x18) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x400, 0x0) fadvise64(r1, 0xe0ffff, 0x4101, 0x3) 58.709768962s ago: executing program 6 (id=748): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000c40)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) unshare(0x2040400) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfba2, 0x8}) 58.19071964s ago: executing program 1 (id=751): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_QUERYBUF(r4, 0xc0585609, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe(0x0) fcntl$setpipe(r0, 0x407, 0x6) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000240)=0x1) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, 0x0, 0x24040808) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x12dd82, 0x0) sendfile(r0, r5, 0x0, 0x201f00) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r7) sendmsg$TIPC_CMD_GET_NODES(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={0x1c, r8, 0x1, 0x4, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 55.313080367s ago: executing program 1 (id=754): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x0) 54.698302957s ago: executing program 1 (id=756): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}}, &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) r1 = syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) 54.586872849s ago: executing program 5 (id=757): unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) socket$alg(0x26, 0x5, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) 53.801850162s ago: executing program 6 (id=759): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x400008a, 0x0) socket$nl_route(0x10, 0x3, 0x0) 52.983866075s ago: executing program 34 (id=759): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x400008a, 0x0) socket$nl_route(0x10, 0x3, 0x0) 52.554547222s ago: executing program 1 (id=761): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000001c0), 0x0, 0x40c00) preadv(r1, &(0x7f0000000700)=[{&(0x7f0000000280)=""/173, 0xad}], 0x1, 0x9, 0x7) 51.989625641s ago: executing program 5 (id=763): ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x0, @local}, 0x4a, {0x2, 0x4e23, @private=0xa010100}, 'veth1_virt_wifi\x00'}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x4b52, &(0x7f0000000000)) 51.687903547s ago: executing program 5 (id=765): syz_mount_image$nilfs2(&(0x7f0000000040), &(0x7f00000001c0)='./bus\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0x1, 0xabf, &(0x7f0000002340)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) 50.779730951s ago: executing program 5 (id=767): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001740)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0xfe}}, 0x1c, 0x0}}], 0x1, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000000)={r2, @in={{0x2, 0x0, @empty}}}, 0x90) 50.305874569s ago: executing program 1 (id=768): unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) socket$alg(0x26, 0x5, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x4}, 0x68) 50.162993741s ago: executing program 5 (id=769): syz_mount_image$nilfs2(&(0x7f0000000180), &(0x7f0000000e00)='./file0\x00', 0x0, &(0x7f0000000100)={[{@errors_continue}, {@nodiscard}, {@errors_continue}, {@order_relaxed}, {@order_relaxed}, {@order_relaxed}, {@discard}, {@norecovery}, {@nobarrier}]}, 0x1, 0xd99, &(0x7f0000000e80)="$eJzs3UtvXNUdAPBzx544LxqHmMZN09glpbiP2CRYpbsaKV2gSqgSnwClgYYa+ghdgIKUsOi2kRAfoIh9F31mgRSxSsWmVb8AYtVNipBoG1UCI9vnjMf/zOjOOLbH4/n9pDtn7v2fe88587hz575OAkZWY+1xcXG6SuntW29dvDcz/r/VKTOtHLNrj+N5bCml1GzNl9JkWN7SxHr62SfXLrWnn+e0ShdSlarW9PTs3da8R1JK19Nsup0m03Mfn7z50gfPLL934saJi2/M3dmZ1gMAwGi596N3f/m3x3947fj/f39mKU20ppft86U8fjRv9y9V6+M5af0PqNrSqm28OBDyjeehEfKNdcjXXk4z5BvvUv6BsNxml3wTNeWPtU3r1G4YZhv/46vG/KbxRmN+fv0/+aoPxw5U869cWX7h6oAqCmy7T2fyLj6DwTByw8qxQa+BANbF44b3uR73LDyY1tLGeyv/7tONzvPDNtjtz7/yh6v8d29Y47B99uunqbSrfI+O5vF4HGE8zNfv978sLx6PaPZYz27HEYbl+EK3eo7tcj22qlv94+div/paTsvrcCbE278/8T0dlvcY6Oye/f8Gw8gOK4NeAQF7VjxvbiUr8XheX4xP1MQP1sQP1cQP18SP1MRhlP3h1d+mm9XG//z4n77f/WFlP9tDOf1Sn/WJ+yP7LT+e99uvBy0/nk8Me9rcf09/+uvbf4/n/38ezv8/m39LJ/MKouwvjPvVW+f+hwuDG13yPRyq81CH/GvPpzbnq6Y2lpPa1jP31WN683zHuuU7vTnfZMh3OG+LHAz1jdsnh8N8ZfujrFfL6zUe2tsM7TgQ6lHemeM5PRjac7xbu8KO7AMhXzMPJ0K7pkK7HgnzfTm0q5re3K64/7zU52SYHo+TlHzhbbvvdym+F/G6jEdz+mZO38np+zn9qEO5o6h8Hrud/18+n9OpWb1wZfnyE3m8fE7vjDUnVqef3+V6Aw+u1+t/ptPm63+OtqY3G+3rhWMb06v29cJkmH6hy/Qn83j5Pfvp2KG16fOXfr78k+1uPIy4q6+9/rPnl5cv/8oTTzzxpPVk0GsmYKctvPryLxauvvb6uSsvP//i5Rcvv3L+ie9/78mnnlpcWNuqX2jftgf2l40f/UHXBAAAAAAAAAAAAOhZdajz5JzW3d+2XE9erk+P18czHMr7Vj4N5T4G5frPbvd1KddvHt+FOrL9duNyokG3Eejs3+7/azCM7LCy4i7+wN4w6P7/yn0PS3r03D+Prw4l292nN68v4/0L4UHs9f7nlL+/+v9r9X/V8/ov9Jg1ubVy/3jv0D/aik2nei0/tr/cB3aqv/L/lMsvrXks9Vb+yu9C+fFGpT36cyj/cI/l39f+01sr/y+5/PKyzZ3ttfz1GleNzfWI+43LfQDjfuPir6H95d5+fbd/ix213crlwygbln4m+zUs/X92U5Zb1oN59dw6Tlfuvx37O+i3/uW+3+V34JGw/Krm903/n8Otrv/P8vlb0P8n7DsfOv5nMIzssLKyMtCuT0a135W9YtCv/6C3IQdd/qBf/zqx/8/4fyn2/xnjsf/PGI/9f8Z47F8rxmP/n/H1jP1/xvjJsNzYP+h0TfwrNfFTNfGv1sRP18Tj/7cYn62Jn6mJz9TEH66JP1oTP1sT/0ZN/LGa+OM18bma+H739ZyOavthlMV+I33/YXSU4z/dvv9TNXFgeMV+neP3+5s1cWB4lfM8fL9hBFWd79gR97eX/bhv5vSdnL6f0492rILshm/l9Ns5/U5Ov5vTczmdz+lCTvUNOdx+869TZ25WG+f5HQvxXs8njdcDxPvEnO+xPvH4XL/ns57ssZydKn+Ll4MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADI3G2uPi4nSV0tu33rr4n6kf/Hh1ykwrx+za43geW0opNVNKVR4fD8u7PrGefvbJtUud0ipdWHss4+nZu615j6zOn2bT7TSZnvv45M2XPnhm+b0TN05cfGPuzs60HgAAAEbDFwEAAP//ManlwQ==") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) 49.120808258s ago: executing program 5 (id=772): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000300)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x82, &(0x7f0000000340)={r1, 0x80, 0x3, 0x3, 0x0, 0x704}, &(0x7f0000000380)=0x14) 34.495289797s ago: executing program 35 (id=768): unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) socket$alg(0x26, 0x5, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x4}, 0x68) 33.372244865s ago: executing program 36 (id=772): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000300)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x82, &(0x7f0000000340)={r1, 0x80, 0x3, 0x3, 0x0, 0x704}, &(0x7f0000000380)=0x14) 9.911534268s ago: executing program 0 (id=835): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000340)='./file2\x00', 0x88, &(0x7f0000000280)={[{@noblock_validity}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@sysvgroups}, {@nomblk_io_submit}, {@grpjquota}, {@quota}]}, 0x3, 0x438, &(0x7f0000000580)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.idle_time\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x8004587d, &(0x7f0000000080)) 9.328682388s ago: executing program 0 (id=837): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x10c, &(0x7f00000000c0)={0x0, 0x6d89, 0x400, 0x40000, 0x115}, &(0x7f0000000400)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_CONNECT={0x10, 0x1d, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r1, 0x3129, 0xf7da, 0x2, 0x0, 0x0) recvfrom$unix(r0, 0x0, 0x0, 0x10102, 0x0, 0x0) 8.310074135s ago: executing program 3 (id=838): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_mount_image$hfs(&(0x7f0000000480), &(0x7f0000000140)='./file1\x00', 0x3000840, &(0x7f00000004c0)=ANY=[@ANYBLOB="6469725f756d61736b3d303030303030303030303030303030342c66696c655f756d61736b3d30303030303030303030303030303030303030313334302c696f636861727365743d6d61637475726b6973682c636f6465706167653d69736f383835392d362c63726561746f723d4ddd71752c00eace691af6ae10469da9b01baceb6a9486a6be7f83429052dab3e6e5e287ba3d79e809945e4361c0019a8ed88ae1c6c541bb9a966c0e4d7bde2f8e3add0af5a9c74c520f889381fbcf573e0000000000"], 0x11, 0x2e1, &(0x7f0000000ac0)="$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") openat(0xffffffffffffff9c, 0x0, 0x240900, 0x0) chmod(&(0x7f0000001140)='./file1\x00', 0x80) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)}, &(0x7f0000000280)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={r3, @in={{0x2, 0x1000, @empty}}, 0x7fff, 0x0, 0xd78e, 0x0, 0x5a1, 0x0, 0x7}, 0x9c) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f00000000c0)=0x6) read$dsp(r1, &(0x7f00000011c0)=""/4117, 0x200021d5) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r5, 0xfffffffd, 0x0, 0x30, 0x0, @in6={0xa, 0x4e20, 0x70c1, @empty, 0x7}, @ib={0x1b, 0x0, 0x0, {"7d0300"}, 0x0, 0x0, 0x376060b0}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r5, 0x9}}, 0x10) close(r4) syz_open_dev$MSR(&(0x7f0000000180), 0x300, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7f03) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x400143, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a09040000000000000000020000000900010073797a30000000000900020073797a320000000048000480440001800c0001007061796c6f61640034000280080004400000000008000840000000000800024000000000080005400000000008000340000000"], 0x9c}}, 0x0) 8.225767866s ago: executing program 0 (id=839): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_QUERYBUF(r4, 0xc0585609, &(0x7f00000003c0)=@multiplanar_overlay={0x80000000, 0x2, 0x4, 0x40, 0x10000005, {}, {0x2, 0xc, 0x7, 0x7, 0x4, 0xb, "afe692a5"}, 0xff, 0x3, {&(0x7f0000000280)=[{0xa, 0x5, {0x8}, 0xffffffff}, {0x5, 0x4, {0x6}, 0x4}]}, 0x5}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe(0x0) fcntl$setpipe(r0, 0x407, 0x6) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000240)=0x1) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, 0x0, 0x24040808) r5 = openat$nullb(0xffffffffffffff9c, 0x0, 0x12dd82, 0x0) sendfile(r0, r5, 0x0, 0x201f00) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r7) sendmsg$TIPC_CMD_GET_NODES(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={0x1c, r8, 0x1, 0x4, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 6.553355943s ago: executing program 0 (id=840): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f000014a000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000548000/0x1000)=nil) mlock2(&(0x7f00003ee000/0x4000)=nil, 0x4000, 0x0) syz_clone(0x6a146000, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f00004fd000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f000015a000/0x2000)=nil) 4.768592112s ago: executing program 3 (id=841): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_QUERYBUF(r4, 0xc0585609, &(0x7f00000003c0)=@multiplanar_overlay={0x80000000, 0x2, 0x4, 0x40, 0x10000005, {}, {0x2, 0xc, 0x7, 0x7, 0x4, 0xb, "afe692a5"}, 0xff, 0x3, {&(0x7f0000000280)=[{0xa, 0x5, {0x8}, 0xffffffff}, {0x5, 0x4, {0x6}, 0x4}]}, 0x5}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe(0x0) fcntl$setpipe(r0, 0x407, 0x6) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, 0x0, 0x24040808) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x12dd82, 0x0) sendfile(r0, r5, 0x0, 0x201f00) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r7) sendmsg$TIPC_CMD_GET_NODES(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={0x1c, r8, 0x1, 0x4, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 2.782857645s ago: executing program 3 (id=842): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_QUERYBUF(r4, 0xc0585609, &(0x7f00000003c0)=@multiplanar_overlay={0x80000000, 0x2, 0x4, 0x40, 0x10000005, {}, {0x2, 0xc, 0x7, 0x7, 0x4, 0xb, "afe692a5"}, 0xff, 0x3, {&(0x7f0000000280)=[{0xa, 0x5, {0x8}, 0xffffffff}, {0x5, 0x4, {0x6}, 0x4}]}, 0x5}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe(0x0) fcntl$setpipe(r0, 0x407, 0x6) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000240)=0x1) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, 0x0, 0x24040808) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x12dd82, 0x0) sendfile(r0, r5, 0x0, 0x201f00) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r7) sendmsg$TIPC_CMD_GET_NODES(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={0x1c, r8, 0x1, 0x4, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1.508329586s ago: executing program 3 (id=843): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x1, 0x0, 0x2, {0x0, 0x2710}, {0x77359400}, {0x0, 0x0, 0x0, 0x1}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "6ac6acd41ff800"}}, 0x48}}, 0x20000400) sendmsg$can_bcm(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)={0x1, 0x14, 0x0, {}, {}, {0x0, 0x0, 0x0, 0x1}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "0000000000000100"}}, 0x48}}, 0x0) 1.448707236s ago: executing program 0 (id=844): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0533fccb881625d47e00010000000900010073797a3000"], 0x48}}, 0x0) r0 = syz_open_dev$loop(&(0x7f0000001fc0), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe10859794822cad54afac11d87ebe5d27c3d458dd4992861e800000000008e0000000000000000000900", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 1.161797642s ago: executing program 3 (id=845): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_QUERYBUF(r4, 0xc0585609, &(0x7f00000003c0)=@multiplanar_overlay={0x80000000, 0x2, 0x4, 0x40, 0x10000005, {}, {0x2, 0xc, 0x7, 0x7, 0x4, 0xb, "afe692a5"}, 0xff, 0x3, {&(0x7f0000000280)=[{0xa, 0x5, {0x8}, 0xffffffff}, {0x5, 0x4, {0x6}, 0x4}]}, 0x5}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe(0x0) fcntl$setpipe(r0, 0x407, 0x6) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000240)=0x1) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, 0x0, 0x24040808) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x12dd82, 0x0) sendfile(r0, r5, 0x0, 0x201f00) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r7) sendmsg$TIPC_CMD_GET_NODES(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={0x1c, r8, 0x1, 0x4, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 868.648776ms ago: executing program 0 (id=846): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x40, 0x1000, 0x4, 0x4, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x5}, 0x50) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x8000) 0s ago: executing program 3 (id=847): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_QUERYBUF(r4, 0xc0585609, &(0x7f00000003c0)=@multiplanar_overlay={0x80000000, 0x2, 0x4, 0x40, 0x10000005, {}, {0x2, 0xc, 0x7, 0x7, 0x4, 0xb, "afe692a5"}, 0xff, 0x3, {&(0x7f0000000280)=[{0xa, 0x5, {0x8}, 0xffffffff}, {0x5, 0x4, {0x6}, 0x4}]}, 0x5}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe(0x0) fcntl$setpipe(r0, 0x407, 0x6) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000240)=0x1) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, 0x0, 0x24040808) r5 = openat$nullb(0xffffffffffffff9c, 0x0, 0x12dd82, 0x0) sendfile(r0, r5, 0x0, 0x201f00) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r7) sendmsg$TIPC_CMD_GET_NODES(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={0x1c, r8, 0x1, 0x4, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) kernel console output (not intermixed with test programs): ile (ino=3, block-offset=130) [ 194.431910][ T4257] NILFS error (device loop4): nilfs_readdir: bad page in #12 [ 194.439698][ T4257] NILFS (loop4): I/O error reading meta-data file (ino=3, block-offset=130) [ 194.449974][ T4257] NILFS (loop4): I/O error reading meta-data file (ino=3, block-offset=130) [ 194.458830][ T4257] NILFS error (device loop4): nilfs_readdir: bad page in #12 [ 194.465983][ T5947] loop8: partition table partially beyond EOD, truncated [ 194.466565][ T4257] NILFS (loop4): I/O error reading meta-data file (ino=3, block-offset=130) [ 194.482880][ T4257] NILFS (loop4): I/O error reading meta-data file (ino=3, block-offset=130) [ 194.491719][ T4257] NILFS error (device loop4): nilfs_readdir: bad page in #12 [ 194.499517][ T4257] NILFS (loop4): I/O error reading meta-data file (ino=3, block-offset=130) [ 194.508811][ T4257] NILFS (loop4): I/O error reading meta-data file (ino=3, block-offset=130) [ 194.518135][ T5947] loop8: p1 start 1601398130 is beyond EOD, truncated [ 194.526066][ T4257] NILFS error (device loop4): nilfs_readdir: bad page in #12 [ 194.534140][ T5947] loop8: p2 start 1702059890 is beyond EOD, truncated [ 194.541455][ T4257] NILFS (loop4): I/O error reading meta-data file (ino=3, block-offset=130) [ 194.550481][ T5947] loop8: p3 size 4160749567 extends beyond EOD, truncated [ 194.561022][ T4257] NILFS (loop4): I/O error reading meta-data file (ino=3, block-offset=130) [ 194.582146][ T4257] NILFS error (device loop4): nilfs_readdir: bad page in #12 [ 194.621217][ T4257] NILFS (loop4): I/O error reading meta-data file (ino=3, block-offset=130) [ 194.660677][ T4257] NILFS (loop4): I/O error reading meta-data file (ino=3, block-offset=130) [ 194.710358][ T4437] udevd[4437]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 194.720343][ T4257] NILFS error (device loop4): nilfs_readdir: bad page in #12 [ 194.734620][ T4257] NILFS (loop4): I/O error reading meta-data file (ino=3, block-offset=130) [ 194.804844][ T4257] NILFS (loop4): I/O error reading meta-data file (ino=3, block-offset=130) [ 194.867077][ T4257] NILFS error (device loop4): nilfs_readdir: bad page in #12 [ 194.985231][ T5958] loop0: detected capacity change from 0 to 64 [ 195.696661][ T5960] loop3: detected capacity change from 0 to 256 [ 195.794761][ T5960] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 195.805670][ T5960] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 195.829345][ T5960] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 195.918759][ T4255] ocfs2: Unmounting device (7,2) on (node local) [ 196.746569][ T4265] Bluetooth: hci4: command 0x0406 tx timeout [ 196.747556][ T4268] Bluetooth: hci1: command 0x0406 tx timeout [ 196.899122][ T5974] loop2: detected capacity change from 0 to 128 [ 196.919880][ T5974] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 197.030775][ T5974] ext4 filesystem being mounted at /100/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 197.277347][ T5974] syz.2.475 (pid 5974) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 197.335608][ T5982] Cannot find add_set index 0 as target [ 197.893509][ T5987] loop3: detected capacity change from 0 to 64 [ 198.015589][ T4255] EXT4-fs (loop2): unmounting filesystem. [ 198.122636][ T4265] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 198.133331][ T4265] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 198.141838][ T4265] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 198.151170][ T4269] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 198.170026][ T4265] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 198.187495][ T4265] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 198.268801][ T5589] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.269370][ T5992] loop0: detected capacity change from 0 to 64 [ 198.349070][ T5996] loop3: detected capacity change from 0 to 2048 [ 198.401842][ T5589] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.539826][ T5996] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 199.354674][ T5996] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 199.675899][ T4256] EXT4-fs (loop3): unmounting filesystem. [ 199.692872][ T5589] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.588389][ T4265] Bluetooth: hci4: command 0x0409 tx timeout [ 201.020493][ T5589] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.135954][ T5989] chnl_net:caif_netlink_parms(): no params data found [ 201.685532][ T6037] Cannot find add_set index 0 as target [ 202.646787][ T4265] Bluetooth: hci4: command 0x041b tx timeout [ 202.954369][ T5989] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.986466][ T5989] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.024337][ T6056] netlink: 28 bytes leftover after parsing attributes in process `syz.3.494'. [ 203.035599][ T5989] device bridge_slave_0 entered promiscuous mode [ 203.057700][ T5989] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.065006][ T5989] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.073750][ T5989] device bridge_slave_1 entered promiscuous mode [ 203.286501][ T6062] loop3: detected capacity change from 0 to 256 [ 203.324516][ T6066] loop2: detected capacity change from 0 to 256 [ 203.382733][ T5989] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 203.587579][ T5989] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 203.656880][ T6070] netlink: 'syz.1.498': attribute type 1 has an invalid length. [ 203.702354][ T6070] netlink: 'syz.1.498': attribute type 2 has an invalid length. [ 203.751616][ T6070] netlink: 4 bytes leftover after parsing attributes in process `syz.1.498'. [ 203.871299][ T6075] loop2: detected capacity change from 0 to 128 [ 203.943341][ T6075] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 203.978609][ T6075] ext4 filesystem being mounted at /104/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 203.980826][ T5989] team0: Port device team_slave_0 added [ 204.285159][ T6086] Cannot find add_set index 0 as target [ 204.874887][ T4265] Bluetooth: hci4: command 0x040f tx timeout [ 204.971483][ T5989] team0: Port device team_slave_1 added [ 205.059640][ T4255] EXT4-fs (loop2): unmounting filesystem. [ 205.228632][ T5989] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 205.235657][ T5989] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.354758][ T6099] loop2: detected capacity change from 0 to 2048 [ 205.385217][ T5989] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 205.453253][ T6099] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 205.556356][ T5989] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 205.585931][ T5989] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.659012][ T5989] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 205.705252][ T6102] device batadv_slave_1 entered promiscuous mode [ 205.783372][ T6102] device batadv_slave_1 left promiscuous mode [ 206.852402][ T6117] loop2: detected capacity change from 0 to 128 [ 206.932931][ T6117] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 206.957117][ T4265] Bluetooth: hci4: command 0x0419 tx timeout [ 207.008559][ T6117] ext4 filesystem being mounted at /106/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 208.558095][ T4255] EXT4-fs (loop2): unmounting filesystem. [ 208.619012][ T5989] device hsr_slave_0 entered promiscuous mode [ 208.857164][ T5989] device hsr_slave_1 entered promiscuous mode [ 209.581259][ T5989] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 209.750493][ T5989] Cannot create hsr debugfs directory [ 210.117588][ T6151] loop1: detected capacity change from 0 to 1024 [ 210.476927][ T4265] Bluetooth: hci4: command 0x0411 tx timeout [ 210.622393][ T6151] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 211.169857][ T4258] EXT4-fs (loop1): unmounting filesystem. [ 211.204590][ T6163] loop3: detected capacity change from 0 to 64 [ 211.687621][ T5589] IPVS: stopping master sync thread 4770 ... [ 213.158582][ T6193] loop3: detected capacity change from 0 to 16 [ 213.183654][ T6193] erofs: (device loop3): mounted with root inode @ nid 36. [ 213.608008][ T5589] device hsr_slave_0 left promiscuous mode [ 213.643133][ T5589] device hsr_slave_1 left promiscuous mode [ 213.678388][ T5589] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 213.679376][ T6172] loop2: detected capacity change from 0 to 32768 [ 213.685924][ T5589] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 213.787963][ T5589] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 213.795460][ T5589] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 213.812535][ T6172] [ 213.812535][ T6172] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 213.812535][ T6172] [ 213.851675][ T5589] device bridge_slave_1 left promiscuous mode [ 213.888781][ T5589] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.942374][ T5589] device bridge_slave_0 left promiscuous mode [ 213.978939][ T5589] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.830971][ T5589] device veth1_macvtap left promiscuous mode [ 214.892618][ T4255] non-latin1 character 0x3ff found in JFS file name [ 214.905894][ T5589] device veth0_macvtap left promiscuous mode [ 214.956905][ T5589] device veth1_vlan left promiscuous mode [ 214.962862][ T4255] mount with iocharset=utf8 to access [ 214.983656][ T5589] device veth0_vlan left promiscuous mode [ 215.013348][ T4255] [ 215.013348][ T4255] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 215.013348][ T4255] [ 215.087688][ T4255] [ 215.087688][ T4255] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 215.087688][ T4255] [ 215.125429][ T6223] loop0: detected capacity change from 0 to 64 [ 215.201838][ T4255] [ 215.201838][ T4255] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 215.201838][ T4255] [ 215.421217][ T4255] [ 215.421217][ T4255] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 215.421217][ T4255] [ 215.899182][ T106] [ 215.899182][ T106] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 215.899182][ T106] [ 215.913175][ T4255] read_mapping_page failed! [ 215.918301][ T4255] ERROR: (device loop2): txCommit: [ 215.918301][ T4255] [ 215.929619][ T4255] ERROR: (device loop2): remounting filesystem as read-only [ 217.091726][ T5589] team0 (unregistering): Port device team_slave_1 removed [ 217.172965][ T5589] team0 (unregistering): Port device team_slave_0 removed [ 217.245373][ T5589] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 217.311269][ T5589] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 218.084976][ T5589] bond0 (unregistering): Released all slaves [ 218.603121][ T5989] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 218.662928][ T5989] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 218.937361][ T6245] loop1: detected capacity change from 0 to 128 [ 218.946322][ T5989] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 218.970012][ T5989] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 219.444450][ T6245] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 219.676344][ T6245] ext4 filesystem being mounted at /109/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 219.995041][ T6261] loop3: detected capacity change from 0 to 256 [ 220.181866][ T6261] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d) [ 220.371674][ T5989] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.544304][ T5989] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.572169][ T6263] loop0: detected capacity change from 0 to 4096 [ 220.625153][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 220.667351][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 220.690561][ T4258] EXT4-fs (loop1): unmounting filesystem. [ 220.926799][ T6026] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 220.944002][ T6026] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 220.985299][ T6026] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.992537][ T6026] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.080841][ T6026] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 221.176022][ T6026] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 221.295535][ T6026] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.304344][ T6026] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.377339][ T6026] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 221.386547][ T6026] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 221.397610][ T6026] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 221.408531][ T6026] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 221.417662][ T6026] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 221.425917][ T6026] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 221.441985][ T6026] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 221.455038][ T6026] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 221.485748][ T6026] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 221.547871][ T6026] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 221.598726][ T6026] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 221.634580][ T6026] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 222.269101][ T4268] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 222.280663][ T4268] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 222.292377][ T5589] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.306457][ T4268] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 223.679828][ T4268] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 223.690317][ T4268] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 223.698870][ T4268] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 224.307079][ T6306] xt_hashlimit: size too large, truncated to 1048576 [ 224.858255][ T5589] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.502079][ T5589] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.623377][ T5589] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.724927][ T6321] loop0: detected capacity change from 0 to 512 [ 225.747139][ T4268] Bluetooth: hci3: command 0x0409 tx timeout [ 225.757501][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 225.765374][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 225.852809][ T6321] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 225.860713][ T5989] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 225.920224][ T6321] EXT4-fs (loop0): 1 truncate cleaned up [ 225.925960][ T6321] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 225.961269][ T6291] chnl_net:caif_netlink_parms(): no params data found [ 226.108207][ T6321] EXT4-fs (loop0): shut down requested (1) [ 226.257914][ T4251] EXT4-fs (loop0): unmounting filesystem. [ 226.287930][ T6340] loop1: detected capacity change from 0 to 164 [ 226.299912][ T6337] loop3: detected capacity change from 0 to 1164 [ 226.392639][ T6340] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 226.481304][ T6340] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 226.497043][ T6340] Symlink component flag not implemented [ 226.502846][ T6340] Symlink component flag not implemented [ 226.511583][ T6340] Symlink component flag not implemented (7) [ 226.537841][ T6340] Symlink component flag not implemented (116) [ 226.588461][ T6291] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.638967][ T6291] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.687158][ T6291] device bridge_slave_0 entered promiscuous mode [ 226.698434][ T6291] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.734599][ T6291] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.819677][ T6291] device bridge_slave_1 entered promiscuous mode [ 226.902836][ T6351] loop0: detected capacity change from 0 to 1024 [ 226.970978][ T6351] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 227.133724][ T6351] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 227.340467][ T6291] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 227.395430][ T6291] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 227.485376][ T4251] EXT4-fs (loop0): unmounting filesystem. [ 227.825625][ T6291] team0: Port device team_slave_0 added [ 227.832091][ T4268] Bluetooth: hci3: command 0x041b tx timeout [ 227.915046][ T6291] team0: Port device team_slave_1 added [ 227.976464][ T6376] device dummy0 entered promiscuous mode [ 228.005508][ T6376] device bond0 entered promiscuous mode [ 228.015165][ T6376] device bond_slave_0 entered promiscuous mode [ 228.042163][ T6376] device bond_slave_1 entered promiscuous mode [ 228.138942][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 228.172599][ T6291] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 228.219475][ T6291] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.316451][ T6291] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 228.434370][ T6291] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 228.466989][ T6291] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.563124][ T6291] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 228.692164][ T6026] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 228.711634][ T6026] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 228.842284][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 228.852639][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 228.928123][ T6291] device hsr_slave_0 entered promiscuous mode [ 228.935605][ T6291] device hsr_slave_1 entered promiscuous mode [ 228.944980][ T6373] loop0: detected capacity change from 0 to 32768 [ 228.952239][ T6291] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 228.961041][ T5589] IPVS: stopping master sync thread 5324 ... [ 228.973449][ T6291] Cannot create hsr debugfs directory [ 228.983234][ T6373] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 228.993857][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 229.002813][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 229.027936][ T6373] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 229.131631][ T6373] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 5ms [ 229.168352][ T5329] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 229.175197][ T5329] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 229.298170][ T5329] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 122ms [ 229.307010][ T5989] device veth0_vlan entered promiscuous mode [ 229.331486][ T5329] gfs2: fsid=syz:syz.0: jid=0: Done [ 229.350512][ T6373] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 229.404198][ T5989] device veth1_vlan entered promiscuous mode [ 229.632927][ T6382] loop3: detected capacity change from 0 to 32768 [ 229.691882][ T6382] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 229.736627][ T6382] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 229.797045][ T6382] BTRFS info (device loop3): enabling auto defrag [ 229.823003][ T6382] BTRFS info (device loop3): doing ref verification [ 229.833187][ T5589] device hsr_slave_0 left promiscuous mode [ 229.843262][ T5589] device hsr_slave_1 left promiscuous mode [ 229.867168][ T5589] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 229.869299][ T6382] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 229.895629][ T5589] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 229.907082][ T4268] Bluetooth: hci3: command 0x040f tx timeout [ 229.938727][ T5589] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 229.955015][ T5589] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 229.982208][ T6382] BTRFS info (device loop3): trying to use backup root at mount time [ 230.004254][ T5589] device bridge_slave_1 left promiscuous mode [ 230.026401][ T5589] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.041343][ T6382] BTRFS info (device loop3): max_inline at 4096 [ 230.077167][ T6382] BTRFS info (device loop3): enabling ssd optimizations [ 230.086178][ T5589] device bridge_slave_0 left promiscuous mode [ 230.103567][ T6382] BTRFS info (device loop3): using spread ssd allocation scheme [ 230.133227][ T6382] BTRFS info (device loop3): using free space tree [ 230.137039][ T5589] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.268024][ T5589] device veth1_macvtap left promiscuous mode [ 230.284577][ T5589] device veth0_macvtap left promiscuous mode [ 230.302762][ T5589] device veth1_vlan left promiscuous mode [ 230.317367][ T5589] device veth0_vlan left promiscuous mode [ 230.778158][ T4256] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 231.190522][ T6418] loop0: detected capacity change from 0 to 512 [ 231.278024][ T6418] EXT4-fs (loop0): orphan cleanup on readonly fs [ 231.326235][ T6418] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.569: bg 0: block 248: padding at end of block bitmap is not set [ 231.455186][ T6418] Quota error (device loop0): write_blk: dquota write failed [ 231.537079][ T6418] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 231.577123][ T6418] EXT4-fs error (device loop0): ext4_acquire_dquot:6814: comm syz.0.569: Failed to acquire dquot type 1 [ 231.637311][ T6418] EXT4-fs (loop0): 1 truncate cleaned up [ 231.716639][ T6418] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 231.956479][ T4251] EXT4-fs (loop0): unmounting filesystem. [ 231.986904][ T4268] Bluetooth: hci3: command 0x0419 tx timeout [ 232.516835][ T5332] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 232.535650][ T6426] loop3: detected capacity change from 0 to 32768 [ 232.582613][ T6426] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by syz.3.570 (6426) [ 232.628005][ T6426] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 232.638770][ T6426] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 232.661904][ T6426] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 232.682033][ T6426] BTRFS info (device loop3): use lzo compression, level 0 [ 232.703730][ T6426] BTRFS info (device loop3): force clearing of disk cache [ 232.711391][ T6426] BTRFS info (device loop3): using free space tree [ 232.731008][ T5332] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 232.743395][ T5332] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 232.753471][ T5332] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 232.768032][ T5332] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 232.778393][ T5332] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.795587][ T5332] usb 1-1: config 0 descriptor?? [ 232.901661][ T6426] BTRFS info (device loop3): enabling ssd optimizations [ 232.944530][ T6426] BTRFS info (device loop3): rebuilding free space tree [ 233.033718][ T5589] team0 (unregistering): Port device team_slave_1 removed [ 233.168729][ T5589] team0 (unregistering): Port device team_slave_0 removed [ 233.212957][ T5332] plantronics 0003:047F:FFFF.0004: unknown main item tag 0xd [ 233.290929][ T5332] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 233.300011][ T5589] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 233.309429][ T4256] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 233.348849][ T5332] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 233.532611][ T14] usb 1-1: USB disconnect, device number 6 [ 233.654882][ T6452] fido_id[6452]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 233.868938][ T5589] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 234.107095][ T5332] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 234.306061][ T5332] usb 4-1: Using ep0 maxpacket: 8 [ 234.313099][ T5332] usb 4-1: config 0 has no interfaces? [ 234.325969][ T5332] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 234.349434][ T5332] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.403914][ T5332] usb 4-1: config 0 descriptor?? [ 234.757947][ T5332] usb 4-1: USB disconnect, device number 5 [ 234.792471][ T6460] loop0: detected capacity change from 0 to 40427 [ 234.827968][ T6460] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x3ffff [ 234.879958][ T6460] F2FS-fs (loop0): invalid crc value [ 234.900755][ T6460] F2FS-fs (loop0): Found nat_bits in checkpoint [ 235.094279][ T6460] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 235.345580][ T6460] bio_check_eod: 84 callbacks suppressed [ 235.345601][ T6460] syz.0.574: attempt to access beyond end of device [ 235.345601][ T6460] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 235.423783][ T6460] syz.0.574: attempt to access beyond end of device [ 235.423783][ T6460] loop0: rw=2049, sector=45120, nr_sectors = 8 limit=40427 [ 235.459699][ T5589] bond0 (unregistering): Released all slaves [ 235.642489][ T5989] device veth0_macvtap entered promiscuous mode [ 235.677580][ T5016] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 235.701835][ T5016] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 235.729819][ T5016] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 235.762265][ T5016] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 235.786241][ T5016] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 235.818806][ T5989] device veth1_macvtap entered promiscuous mode [ 235.946614][ T5989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.983542][ T5989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.011023][ T5989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.060318][ T5989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.095386][ T5989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.136345][ T5989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.169224][ T5989] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 236.217577][ T4689] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 236.237634][ T4689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 236.311112][ T5989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.346751][ T5989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.382929][ T5989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.407450][ T5989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.442914][ T5989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.473935][ T5989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.506623][ T5989] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 236.560533][ T5989] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.596764][ T5989] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.625983][ T5989] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.647815][ T5989] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.684978][ T6026] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 236.698088][ T6026] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 237.041571][ T6291] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 237.110784][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.134559][ T6291] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 237.141919][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.198431][ T6469] loop3: detected capacity change from 0 to 40427 [ 237.199631][ T6291] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 237.212071][ T6469] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x3ffff [ 237.271429][ T6469] F2FS-fs (loop3): invalid crc value [ 237.290545][ T6291] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 237.334548][ T6469] F2FS-fs (loop3): Found nat_bits in checkpoint [ 237.342369][ T4689] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 237.374772][ T4689] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.418175][ T4689] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.518978][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 237.636279][ T6474] loop0: detected capacity change from 0 to 32768 [ 237.696002][ T6469] F2FS-fs (loop3): Start checkpoint disabled! [ 237.803745][ T6291] 8021q: adding VLAN 0 to HW filter on device bond0 [ 237.837164][ T6291] 8021q: adding VLAN 0 to HW filter on device team0 [ 237.912781][ T6469] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 237.923894][ T5589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 237.971824][ T6474] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 238.032309][ T5589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 238.040797][ T26] audit: type=1800 audit(1751405246.245:11): pid=6474 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.578" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 238.057543][ T6494] loop5: detected capacity change from 0 to 1024 [ 238.131864][ T6026] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 238.166067][ T6026] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 238.177114][ T6026] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.184300][ T6026] bridge0: port 1(bridge_slave_0) entered forwarding state [ 238.199063][ T6026] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 238.234997][ T6026] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 238.245025][ T6026] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.252258][ T6026] bridge0: port 2(bridge_slave_1) entered forwarding state [ 238.261649][ T6026] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 238.297495][ T6026] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 238.413472][ T6026] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 238.438019][ T6026] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 238.457528][ T6026] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 238.468342][ T6026] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 238.515079][ T6026] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 238.539049][ T4251] ocfs2: Unmounting device (7,0) on (node local) [ 238.579764][ T6026] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 238.637696][ T6026] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 238.692659][ T6026] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 238.761632][ T6026] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 238.794102][ T6291] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 240.861909][ T6026] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 242.195885][ T6539] loop3: detected capacity change from 0 to 256 [ 242.427480][ T6522] loop5: detected capacity change from 0 to 131072 [ 242.448814][ T6522] F2FS-fs (loop5): invalid crc value [ 242.499945][ T6522] F2FS-fs (loop5): Found nat_bits in checkpoint [ 242.616375][ T6522] F2FS-fs (loop5): Cannot turn on quotas: -2 on 2 [ 242.662015][ T6546] netlink: 20 bytes leftover after parsing attributes in process `syz.0.587'. [ 242.671306][ T6522] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 243.045531][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 243.067180][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 243.090897][ T6554] loop3: detected capacity change from 0 to 256 [ 243.111962][ T6291] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 243.524200][ T6560] loop0: detected capacity change from 0 to 1024 [ 243.715726][ T6560] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 243.938275][ T6560] EXT4-fs (loop0): shut down requested (2) [ 245.033775][ T4251] EXT4-fs (loop0): unmounting filesystem. [ 245.139567][ T6579] loop3: detected capacity change from 0 to 16 [ 245.216500][ T6579] erofs: (device loop3): mounted with root inode @ nid 36. [ 247.316708][ T6607] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 247.329455][ T6607] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 247.491427][ T6026] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 247.559658][ T6026] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 247.647433][ T6026] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 247.662541][ T6026] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 247.712178][ T6291] device veth0_vlan entered promiscuous mode [ 247.723096][ T6026] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 247.758720][ T6026] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 247.800058][ T6291] device veth1_vlan entered promiscuous mode [ 247.886874][ T6616] loop3: detected capacity change from 0 to 4096 [ 247.960126][ T5589] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 247.992142][ T5589] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 248.037677][ T5589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 248.086280][ T5589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 248.120583][ T6291] device veth0_macvtap entered promiscuous mode [ 248.210828][ T6291] device veth1_macvtap entered promiscuous mode [ 248.317916][ T6291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.387131][ T6291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.439435][ T6291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.489193][ T6291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.537274][ T6291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.591911][ T6291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.621475][ T6626] loop5: detected capacity change from 0 to 4096 [ 248.654007][ T6291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.701316][ T6291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.174887][ T6291] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 249.365189][ T6291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.430091][ T6291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.461311][ T6291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.470723][ T4256] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 249.518378][ T4256] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 249.528899][ T6291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.538854][ T6291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.549352][ T6291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.559262][ T6291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.570213][ T6291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.581571][ T6291] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 249.590231][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 249.620541][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 249.692824][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 249.764235][ T6640] netlink: 4 bytes leftover after parsing attributes in process `syz.1.607'. [ 249.764629][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 249.853837][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 249.897301][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 249.921222][ T26] audit: type=1326 audit(1751405258.125:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6643 comm="syz.3.606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec2018e929 code=0x7ffc0000 [ 250.007521][ T26] audit: type=1326 audit(1751405258.125:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6643 comm="syz.3.606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fec2018e929 code=0x7ffc0000 [ 250.019168][ T6291] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.047201][ T6640] netlink: 4 bytes leftover after parsing attributes in process `syz.1.607'. [ 250.121908][ T26] audit: type=1326 audit(1751405258.125:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6643 comm="syz.3.606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec2018e929 code=0x7ffc0000 [ 250.124028][ T6291] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.236844][ T26] audit: type=1326 audit(1751405258.125:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6643 comm="syz.3.606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec2018e929 code=0x7ffc0000 [ 250.326760][ T26] audit: type=1326 audit(1751405258.125:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6643 comm="syz.3.606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fec2018e929 code=0x7ffc0000 [ 250.330570][ T6291] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.429018][ T6291] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.747311][ T4692] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.755648][ T4692] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.891149][ T5589] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 250.934054][ T4692] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.974419][ T4692] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.006991][ T6026] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 251.046072][ T26] audit: type=1326 audit(1751405259.245:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6643 comm="syz.3.606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec2018e929 code=0x7ffc0000 [ 251.116871][ T26] audit: type=1326 audit(1751405259.305:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6643 comm="syz.3.606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec2018e929 code=0x7ffc0000 [ 251.272052][ T6668] loop1: detected capacity change from 0 to 128 [ 251.451432][ T6668] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 251.491153][ T6668] ext4 filesystem being mounted at /130/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 252.865895][ T26] audit: type=1326 audit(1751405261.065:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6643 comm="syz.3.606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7fec2018e929 code=0x7ffc0000 [ 252.936783][ T26] audit: type=1326 audit(1751405261.065:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6643 comm="syz.3.606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec2018e929 code=0x7ffc0000 [ 252.989611][ T4258] EXT4-fs (loop1): unmounting filesystem. [ 253.081329][ T26] audit: type=1326 audit(1751405261.065:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6643 comm="syz.3.606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec2018e929 code=0x7ffc0000 [ 253.284349][ T6691] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 255.556554][ T6707] loop1: detected capacity change from 0 to 512 [ 255.827116][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.833490][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.862706][ T6707] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 255.958049][ T6707] EXT4-fs (loop1): 1 truncate cleaned up [ 255.963893][ T6707] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 255.997083][ T26] audit: type=1800 audit(1751405264.205:22): pid=6707 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.622" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 256.129411][ T4258] EXT4-fs (loop1): unmounting filesystem. [ 256.322077][ T6722] loop6: detected capacity change from 0 to 4096 [ 256.424542][ T6722] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 257.972090][ T6749] loop6: detected capacity change from 0 to 512 [ 258.110608][ T6753] input: syz0 as /devices/virtual/input/input7 [ 258.136132][ T6749] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 258.217302][ T6753] input: failed to attach handler leds to device input7, error: -6 [ 258.438316][ T6749] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 258.487323][ T6749] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 259.186561][ T6772] loop0: detected capacity change from 0 to 128 [ 259.341987][ T6772] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 259.468365][ T6772] ext4 filesystem being mounted at /147/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 259.572845][ T6291] EXT4-fs (loop6): unmounting filesystem. [ 260.589642][ T6808] loop3: detected capacity change from 0 to 64 [ 260.726990][ T6456] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 260.966864][ T6456] usb 2-1: Using ep0 maxpacket: 32 [ 260.980786][ T6456] usb 2-1: config 0 has an invalid interface number: 184 but max is 11 [ 261.166022][ T6456] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 12 [ 261.321362][ T6456] usb 2-1: config 0 has no interface number 0 [ 261.440048][ T6456] usb 2-1: config 0 interface 184 has no altsetting 0 [ 261.502588][ T6456] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 261.566897][ T6456] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.575315][ T6456] usb 2-1: Product: syz [ 261.599113][ T6456] usb 2-1: Manufacturer: syz [ 261.603802][ T6456] usb 2-1: SerialNumber: syz [ 261.754097][ T6456] usb 2-1: config 0 descriptor?? [ 261.779103][ T6456] smsc75xx v1.0.0 [ 262.527118][ T6456] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 262.637523][ T6456] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 262.897863][ T6456] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 262.939232][ T6456] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 262.990769][ T6456] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 263.034334][ T6456] smsc75xx: probe of 2-1:0.184 failed with error -71 [ 263.082256][ T6456] usb 2-1: USB disconnect, device number 6 [ 263.223675][ T6835] loop6: detected capacity change from 0 to 256 [ 263.314213][ T6835] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d) [ 263.731297][ T6843] netlink: 'syz.1.657': attribute type 1 has an invalid length. [ 263.959243][ T6824] loop3: detected capacity change from 0 to 32768 [ 264.065889][ T6824] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 264.379167][ T4251] EXT4-fs (loop0): unmounting filesystem. [ 264.434314][ T4256] ocfs2: Unmounting device (7,3) on (node local) [ 265.035915][ T6865] loop3: detected capacity change from 0 to 64 [ 265.598681][ T4265] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 265.607804][ T4265] Bluetooth: hci4: Injecting HCI hardware error event [ 265.622322][ T4268] Bluetooth: hci4: hardware error 0x00 [ 266.055265][ T6856] loop5: detected capacity change from 0 to 32768 [ 266.061540][ T6846] loop6: detected capacity change from 0 to 32768 [ 266.120313][ T6856] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.661 (6856) [ 266.262068][ T6856] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 266.302287][ T6846] XFS (loop6): Mounting V5 Filesystem [ 266.318945][ T6856] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 266.334781][ T6878] loop3: detected capacity change from 0 to 256 [ 266.377943][ T6856] BTRFS info (device loop5): setting nodatacow, compression disabled [ 266.386137][ T6856] BTRFS info (device loop5): max_inline at 0 [ 266.410558][ T6878] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 266.533737][ T6856] BTRFS info (device loop5): enabling disk space caching [ 266.536502][ T6878] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 266.557603][ T6846] XFS (loop6): Ending clean mount [ 266.570960][ T6856] BTRFS info (device loop5): turning off barriers [ 266.623138][ T6856] BTRFS info (device loop5): turning on flush-on-commit [ 266.671666][ T6856] BTRFS info (device loop5): doing ref verification [ 266.686561][ T6878] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 266.710231][ T6846] XFS (loop6): Quotacheck needed: Please wait. [ 266.742327][ T6856] BTRFS info (device loop5): force clearing of disk cache [ 266.787452][ T6856] BTRFS info (device loop5): enabling ssd optimizations [ 266.830704][ T6856] BTRFS info (device loop5): max_inline at 4096 [ 266.913977][ T6856] BTRFS info (device loop5): disk space caching is enabled [ 267.036176][ T6846] XFS (loop6): Quotacheck: Done. [ 267.255749][ T6900] loop0: detected capacity change from 0 to 512 [ 267.336330][ T6291] XFS (loop6): Unmounting Filesystem [ 267.460782][ T6856] BTRFS error (device loop5): open_ctree failed: -12 [ 267.487865][ T6900] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 267.522737][ T6906] loop3: detected capacity change from 0 to 4096 [ 267.530432][ T6900] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 267.641868][ T6900] EXT4-fs error (device loop0): ext4_readdir:263: inode #2: block 3: comm syz.0.669: path /151/file0: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=113, rec_len=0, size=2048 fake=0 [ 267.675853][ T4268] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 267.735222][ T6922] loop1: detected capacity change from 0 to 128 [ 267.773182][ T6906] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 267.821662][ T6922] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 267.838393][ T6906] EXT4-fs (loop3): shut down requested (1) [ 267.869403][ T6922] ext4 filesystem being mounted at /143/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 268.132686][ T4251] EXT4-fs (loop0): unmounting filesystem. [ 268.148066][ T4256] EXT4-fs (loop3): unmounting filesystem. [ 268.246405][ T4437] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by udevd (4437) [ 269.140281][ T4258] EXT4-fs (loop1): unmounting filesystem. [ 271.290095][ T6965] loop3: detected capacity change from 0 to 1024 [ 271.325399][ T4577] Bluetooth: hci5: Frame reassembly failed (-84) [ 271.473415][ T6965] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 271.600481][ T26] audit: type=1800 audit(1751405279.805:23): pid=6965 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.684" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 271.676105][ T6953] loop1: detected capacity change from 0 to 32768 [ 271.763693][ T6953] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode. [ 271.784899][ T4256] EXT4-fs (loop3): unmounting filesystem. [ 272.629863][ T4258] ocfs2: Unmounting device (7,1) on (node local) [ 272.899880][ T6960] loop5: detected capacity change from 0 to 32768 [ 273.089972][ T6960] XFS (loop5): Mounting V5 Filesystem [ 273.206747][ T6455] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 273.348169][ T4268] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 273.660288][ T6960] XFS (loop5): Ending clean mount [ 273.687779][ T6455] usb 7-1: Using ep0 maxpacket: 8 [ 273.871839][ T6455] usb 7-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 273.975896][ T6455] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.012438][ T6455] usb 7-1: Product: syz [ 274.035299][ T6455] usb 7-1: Manufacturer: syz [ 274.051514][ T6455] usb 7-1: SerialNumber: syz [ 274.119187][ T6455] usb 7-1: config 0 descriptor?? [ 274.163758][ T6455] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 274.455424][ T7017] loop1: detected capacity change from 0 to 64 [ 275.230425][ T6455] gspca_sonixj: reg_w1 err -71 [ 275.296805][ T6455] sonixj: probe of 7-1:0.0 failed with error -71 [ 275.304968][ T5989] XFS (loop5): Unmounting Filesystem [ 275.355104][ T6455] usb 7-1: USB disconnect, device number 2 [ 275.678904][ T7029] loop3: detected capacity change from 0 to 4096 [ 275.784989][ T7029] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 275.903915][ T7029] ntfs3: loop3: Failed to load $Extend. [ 276.148605][ T7042] loop0: detected capacity change from 0 to 256 [ 277.039614][ T7052] loop6: detected capacity change from 0 to 128 [ 277.209266][ T7052] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 277.285392][ T7052] ext4 filesystem being mounted at /16/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 277.935674][ T7066] loop1: detected capacity change from 0 to 4096 [ 278.166971][ T7068] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 278.226147][ T6291] EXT4-fs (loop6): unmounting filesystem. [ 278.335843][ T7070] netlink: 64 bytes leftover after parsing attributes in process `syz.5.693'. [ 280.060456][ T7082] netlink: 44 bytes leftover after parsing attributes in process `syz.0.707'. [ 281.851152][ T7094] loop1: detected capacity change from 0 to 128 [ 283.895689][ T7121] netlink: 'syz.1.718': attribute type 29 has an invalid length. [ 283.925999][ T7121] netlink: 'syz.1.718': attribute type 29 has an invalid length. [ 283.986780][ T4265] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 283.993472][ T4268] Bluetooth: hci5: command 0x1003 tx timeout [ 284.038637][ T7126] netlink: 'syz.1.718': attribute type 29 has an invalid length. [ 284.080058][ T7121] netlink: 'syz.1.718': attribute type 29 has an invalid length. [ 284.132014][ T7121] netlink: 'syz.1.718': attribute type 29 has an invalid length. [ 284.216910][ T4644] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 284.426903][ T4644] usb 6-1: Using ep0 maxpacket: 8 [ 284.444144][ T7132] loop0: detected capacity change from 0 to 64 [ 284.481778][ T4644] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 286.010252][ T4644] usb 6-1: config 179 has no interface number 0 [ 286.140747][ T4644] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 286.371179][ T4644] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 286.590093][ T4644] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 286.810846][ T4644] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 287.031888][ T4644] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 287.162859][ T4644] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 287.192266][ T4644] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.409046][ T4644] usb 6-1: can't set config #179, error -71 [ 288.270471][ T4644] usb 6-1: USB disconnect, device number 2 [ 288.404772][ T7153] loop3: detected capacity change from 0 to 512 [ 288.497838][ T7153] EXT4-fs (loop3): Test dummy encryption mode enabled [ 288.504692][ T7153] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 288.582121][ T7153] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00cc018, mo2=0002] [ 288.594833][ T7155] sctp: [Deprecated]: syz.0.725 (pid 7155) Use of int in maxseg socket option. [ 288.594833][ T7155] Use struct sctp_assoc_value instead [ 288.598028][ T7135] loop1: detected capacity change from 0 to 32768 [ 288.634933][ T7153] System zones: 1-12 [ 288.664264][ T7153] EXT4-fs (loop3): 1 truncate cleaned up [ 288.674132][ T7153] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 288.767559][ T7135] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 288.989561][ T4256] EXT4-fs (loop3): unmounting filesystem. [ 289.135342][ T4258] ocfs2: Unmounting device (7,1) on (node local) [ 289.241144][ T7168] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 289.770197][ T7141] loop6: detected capacity change from 0 to 40427 [ 289.860483][ T7178] loop5: detected capacity change from 0 to 256 [ 289.891292][ T7141] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 290.012423][ T7141] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 290.098458][ T7175] loop3: detected capacity change from 0 to 4096 [ 290.132292][ T7175] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 290.143400][ T7141] F2FS-fs (loop6): Failed to initialize F2FS segment manager (-4) [ 290.254802][ T7178] syz.5.732: attempt to access beyond end of device [ 290.254802][ T7178] loop5: rw=2049, sector=256, nr_sectors = 64 limit=256 [ 290.431849][ T7175] ntfs3: loop3: ino=5, "/" directory corrupted [ 290.572042][ T7187] syz.5.732: attempt to access beyond end of device [ 290.572042][ T7187] loop5: rw=2049, sector=256, nr_sectors = 4 limit=256 [ 290.613520][ T7187] Buffer I/O error on dev loop5, logical block 64, lost async page write [ 290.943499][ T7200] loop1: detected capacity change from 0 to 64 [ 292.474217][ T4333] kworker/u4:5: attempt to access beyond end of device [ 292.474217][ T4333] loop5: rw=1, sector=256, nr_sectors = 4 limit=256 [ 293.327404][ T7195] loop6: detected capacity change from 0 to 32768 [ 293.447089][ T7195] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 293.807963][ T6291] ocfs2: Unmounting device (7,6) on (node local) [ 293.903430][ T7225] loop5: detected capacity change from 0 to 2048 [ 293.983467][ T7225] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 294.125233][ T7228] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 294.171227][ T7227] loop6: detected capacity change from 0 to 2048 [ 294.244615][ T7227] EXT4-fs: Ignoring removed mblk_io_submit option [ 294.365773][ T7227] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 294.735530][ T7245] loop1: detected capacity change from 0 to 16 [ 294.804133][ T7210] loop3: detected capacity change from 0 to 40427 [ 294.811063][ T7245] erofs: (device loop1): mounted with root inode @ nid 36. [ 294.832952][ T6291] EXT4-fs error (device loop6): ext4_readdir:263: inode #11: block 34: comm syz-executor: path /21/file0/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0 [ 294.935892][ T7210] F2FS-fs (loop3): invalid crc value [ 294.943581][ T7245] syz.1.746: attempt to access beyond end of device [ 294.943581][ T7245] loop1: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 294.958063][ T7210] F2FS-fs (loop3): SIT is corrupted node# 0 vs 7 [ 294.979817][ T6291] EXT4-fs (loop6): Remounting filesystem read-only [ 295.004756][ T6291] EXT4-fs error (device loop6): ext4_empty_dir:3177: inode #11: block 34: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0 [ 295.035316][ T7245] syz.1.746: attempt to access beyond end of device [ 295.035316][ T7245] loop1: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 295.050317][ T7210] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-117) [ 295.150229][ T6291] EXT4-fs (loop6): Remounting filesystem read-only [ 295.177887][ T6291] EXT4-fs error (device loop6): ext4_readdir:263: inode #11: block 34: comm syz-executor: path /21/file0/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0 [ 295.282240][ T6291] EXT4-fs (loop6): Remounting filesystem read-only [ 295.312610][ T6291] EXT4-fs error (device loop6): ext4_empty_dir:3177: inode #11: block 34: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0 [ 295.510007][ T6291] EXT4-fs (loop6): Remounting filesystem read-only [ 295.553624][ T6291] EXT4-fs error (device loop6): ext4_readdir:263: inode #11: block 34: comm syz-executor: path /21/file0/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0 [ 296.213280][ T6291] EXT4-fs (loop6): Remounting filesystem read-only [ 296.226428][ T6291] EXT4-fs error (device loop6): ext4_empty_dir:3177: inode #11: block 34: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0 [ 296.331618][ T6291] EXT4-fs (loop6): Remounting filesystem read-only [ 296.429085][ T6291] EXT4-fs error (device loop6): ext4_readdir:263: inode #11: block 34: comm syz-executor: path /21/file0/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0 [ 296.566711][ T6291] EXT4-fs (loop6): Remounting filesystem read-only [ 296.573658][ T6291] EXT4-fs error (device loop6): ext4_empty_dir:3177: inode #11: block 34: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0 [ 296.724286][ T6291] EXT4-fs (loop6): Remounting filesystem read-only [ 298.243334][ T7235] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set [ 298.274457][ T7235] EXT4-fs (loop6): Remounting filesystem read-only [ 298.296984][ T6291] EXT4-fs error (device loop6): ext4_readdir:263: inode #11: block 34: comm syz-executor: path /21/file0/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0 [ 299.336950][ T6454] usb 2-1: new low-speed USB device number 7 using dummy_hcd [ 299.357712][ T7258] loop0: detected capacity change from 0 to 32768 [ 299.553624][ T6454] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 299.572639][ T6454] usb 2-1: config 0 has no interface number 0 [ 299.613475][ T6291] EXT4-fs: 194 callbacks suppressed [ 299.613495][ T6291] EXT4-fs (loop6): unmounting filesystem. [ 299.630253][ T6454] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 299.692592][ T6454] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 299.778559][ T6454] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 299.827890][ T6454] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.891043][ T4693] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.897892][ T6454] usb 2-1: config 0 descriptor?? [ 299.964013][ T7278] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 300.013731][ T6454] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 300.190949][ T4693] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.211187][ T6454] usb 2-1: USB disconnect, device number 7 [ 300.217176][ C1] iowarrior 2-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 300.457007][ T4693] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.695918][ T4693] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.944920][ T7280] netlink: 'syz.5.757': attribute type 4 has an invalid length. [ 301.507028][ T5042] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 301.726771][ T5042] usb 2-1: Using ep0 maxpacket: 32 [ 301.734188][ T5042] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 301.780800][ T5042] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 301.816993][ T5042] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 301.817898][ T4268] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 301.826085][ T5042] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.850390][ T4268] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 301.860177][ T4268] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 301.864572][ T5042] usb 2-1: config 0 descriptor?? [ 301.875255][ T4268] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 301.883899][ T4269] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 301.894011][ T4268] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 302.087808][ T7301] loop0: detected capacity change from 0 to 32768 [ 302.151764][ T7301] JBD2: Ignoring recovery information on journal [ 302.213859][ T7310] loop5: detected capacity change from 0 to 2048 [ 302.286213][ T7308] loop3: detected capacity change from 0 to 4096 [ 302.326764][ T5042] savu 0003:1E7D:2D5A.0005: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 302.362177][ T7301] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 302.395343][ T7314] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 302.569577][ T5042] usb 2-1: USB disconnect, device number 8 [ 302.818995][ T7314] NILFS (loop5): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 302.846132][ T7301] OCFS2: ERROR (device loop0): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Invalid dinode #74: signature = [ 302.846178][ T7314] NILFS error (device loop5): nilfs_bmap_propagate: broken bmap (inode number=4) [ 302.944086][ T7314] Remounting filesystem read-only [ 302.970123][ T5989] NILFS (loop5): disposed unprocessed dirty file(s) when stopping log writer [ 302.974799][ T7316] fido_id[7316]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 303.046108][ T7323] loop3: detected capacity change from 0 to 1024 [ 303.087173][ T7301] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 303.097632][ T7301] OCFS2: File system is now read-only. [ 303.103245][ T7301] (syz.0.762,7301,0):ocfs2_assign_bh:2414 ERROR: status = -30 [ 303.114310][ T7301] (syz.0.762,7301,0):ocfs2_inode_lock_full_nested:2509 ERROR: status = -30 [ 303.123247][ T7301] (syz.0.762,7301,0):ocfs2_reserve_suballoc_bits:789 ERROR: status = -30 [ 303.132780][ T7301] (syz.0.762,7301,0):ocfs2_reserve_new_inode:1091 ERROR: status = -30 [ 303.141506][ T7301] (syz.0.762,7301,0):ocfs2_reserve_new_inode:1114 ERROR: status = -30 [ 303.150029][ T7301] (syz.0.762,7301,0):ocfs2_mknod:306 ERROR: status = -30 [ 303.162573][ T7301] (syz.0.762,7301,0):ocfs2_mknod:502 ERROR: status = -30 [ 303.240698][ T7301] (syz.0.762,7301,0):ocfs2_mkdir:659 ERROR: status = -30 [ 303.455479][ T5016] hfsplus: b-tree write err: -5, ino 4 [ 303.621737][ T7337] loop3: detected capacity change from 0 to 736 [ 303.655504][ T4251] ocfs2: Unmounting device (7,0) on (node local) [ 303.725312][ T7333] loop5: detected capacity change from 0 to 4096 [ 303.906900][ T7337] rock: directory entry would overflow storage [ 303.913153][ T7337] rock: sig=0x3b10, size=4, remaining=3 [ 303.972991][ T7340] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 303.986847][ T4268] Bluetooth: hci3: command 0x0409 tx timeout [ 304.258010][ T7333] loop5: detected capacity change from 4096 to 64 [ 304.410896][ T7305] chnl_net:caif_netlink_parms(): no params data found [ 304.452822][ T5989] syz-executor: attempt to access beyond end of device [ 304.452822][ T5989] loop5: rw=0, sector=90, nr_sectors = 2 limit=64 [ 304.556783][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 304.576868][ T5989] syz-executor: attempt to access beyond end of device [ 304.576868][ T5989] loop5: rw=0, sector=90, nr_sectors = 2 limit=64 [ 304.620636][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 304.662770][ T5989] NILFS error (device loop5): nilfs_readdir: bad page in #12 [ 304.670533][ T4693] device hsr_slave_0 left promiscuous mode [ 304.679562][ T4693] device hsr_slave_1 left promiscuous mode [ 304.722284][ T5989] syz-executor: attempt to access beyond end of device [ 304.722284][ T5989] loop5: rw=2049, sector=4088, nr_sectors = 2 limit=64 [ 304.746613][ T4693] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 304.754383][ T4693] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 304.854930][ T4693] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 304.903387][ T4693] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 304.916991][ T5989] Buffer I/O error on dev loop5, logical block 2044, lost sync page write [ 304.947534][ T5989] syz-executor: attempt to access beyond end of device [ 304.947534][ T5989] loop5: rw=0, sector=90, nr_sectors = 2 limit=64 [ 304.963698][ T4693] device bridge_slave_1 left promiscuous mode [ 304.970365][ T4693] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.988518][ T4693] device bridge_slave_0 left promiscuous mode [ 304.994943][ T4693] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.995475][ T7357] loop0: detected capacity change from 0 to 128 [ 305.006414][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 305.023858][ T5989] syz-executor: attempt to access beyond end of device [ 305.023858][ T5989] loop5: rw=0, sector=90, nr_sectors = 2 limit=64 [ 305.097990][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 305.120751][ T5989] NILFS error (device loop5): nilfs_readdir: bad page in #12 [ 305.129049][ T4693] device veth1_macvtap left promiscuous mode [ 305.135160][ T4693] device veth0_macvtap left promiscuous mode [ 305.154619][ T5989] syz-executor: attempt to access beyond end of device [ 305.154619][ T5989] loop5: rw=0, sector=90, nr_sectors = 2 limit=64 [ 305.177815][ T4693] device veth1_vlan left promiscuous mode [ 305.183723][ T4693] device veth0_vlan left promiscuous mode [ 305.190477][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 305.190707][ T7357] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 305.199785][ T5989] syz-executor: attempt to access beyond end of device [ 305.199785][ T5989] loop5: rw=0, sector=90, nr_sectors = 2 limit=64 [ 305.221817][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 305.230648][ T5989] NILFS error (device loop5): nilfs_readdir: bad page in #12 [ 305.261552][ T5989] syz-executor: attempt to access beyond end of device [ 305.261552][ T5989] loop5: rw=0, sector=90, nr_sectors = 2 limit=64 [ 305.371330][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 305.381761][ T5989] syz-executor: attempt to access beyond end of device [ 305.381761][ T5989] loop5: rw=0, sector=90, nr_sectors = 2 limit=64 [ 305.395452][ T7357] ext4 filesystem being mounted at /173/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 305.457463][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 305.466273][ T5989] NILFS error (device loop5): nilfs_readdir: bad page in #12 [ 305.474489][ T5989] syz-executor: attempt to access beyond end of device [ 305.474489][ T5989] loop5: rw=0, sector=90, nr_sectors = 2 limit=64 [ 305.488260][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 305.497761][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 305.506605][ T5989] NILFS error (device loop5): nilfs_readdir: bad page in #12 [ 305.514846][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 305.524377][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 305.564167][ T5989] NILFS error (device loop5): nilfs_readdir: bad page in #12 [ 305.723022][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 305.758034][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 305.767224][ T5989] NILFS error (device loop5): nilfs_readdir: bad page in #12 [ 305.775024][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 305.784641][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 306.284003][ T5989] NILFS error (device loop5): nilfs_readdir: bad page in #12 [ 306.291895][ T4268] Bluetooth: hci3: command 0x041b tx timeout [ 306.304032][ T4251] EXT4-fs (loop0): unmounting filesystem. [ 306.324371][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 306.344175][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 306.356752][ T5989] NILFS error (device loop5): nilfs_readdir: bad page in #12 [ 306.365669][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 306.441478][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 306.502614][ T5989] NILFS error (device loop5): nilfs_readdir: bad page in #12 [ 306.555778][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 306.592714][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 306.645103][ T5989] NILFS error (device loop5): nilfs_readdir: bad page in #12 [ 306.681638][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 306.708907][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 306.755240][ T5989] NILFS error (device loop5): nilfs_readdir: bad page in #12 [ 306.801941][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 306.835122][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 306.878343][ T5989] NILFS error (device loop5): nilfs_readdir: bad page in #12 [ 306.918227][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 306.969157][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 307.020845][ T5989] NILFS error (device loop5): nilfs_readdir: bad page in #12 [ 307.061690][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 307.092971][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 307.142956][ T5989] NILFS error (device loop5): nilfs_readdir: bad page in #12 [ 307.152666][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 307.202306][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 307.241746][ T5989] NILFS error (device loop5): nilfs_readdir: bad page in #12 [ 307.276841][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 307.286066][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 307.326760][ T5989] NILFS error (device loop5): nilfs_readdir: bad page in #12 [ 307.354935][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 307.380642][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 307.431407][ T5989] NILFS error (device loop5): nilfs_readdir: bad page in #12 [ 307.447099][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 307.465890][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 307.503618][ T5989] NILFS error (device loop5): nilfs_readdir: bad page in #12 [ 307.531847][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 307.552336][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 307.571562][ T5989] NILFS error (device loop5): nilfs_readdir: bad page in #12 [ 307.583044][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 307.595795][ T7370] loop3: detected capacity change from 0 to 256 [ 307.623709][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 307.666772][ T5989] NILFS error (device loop5): nilfs_readdir: bad page in #12 [ 307.674716][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 307.705586][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 307.722908][ T5989] NILFS error (device loop5): nilfs_readdir: bad page in #12 [ 307.745999][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 307.780447][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 307.809972][ T5989] NILFS error (device loop5): nilfs_readdir: bad page in #12 [ 307.833877][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 307.881526][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 307.910977][ T5989] NILFS error (device loop5): nilfs_readdir: bad page in #12 [ 307.941864][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 307.963937][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 308.000704][ T5989] NILFS error (device loop5): nilfs_readdir: bad page in #12 [ 308.021168][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 308.044212][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 308.064488][ T7368] loop0: detected capacity change from 0 to 32768 [ 308.080100][ T5989] NILFS error (device loop5): nilfs_readdir: bad page in #12 [ 308.122649][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 308.141317][ T7368] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 308.156242][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 308.172410][ T7368] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 308.185457][ T5989] NILFS error (device loop5): nilfs_readdir: bad page in #12 [ 308.200474][ T7368] BTRFS info (device loop0): metadata ratio 4 [ 308.209622][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 308.223079][ T7368] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 308.235360][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 308.250792][ T7368] BTRFS info (device loop0): force lzo compression, level 0 [ 308.261276][ T7368] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 308.280132][ T5989] NILFS error (device loop5): nilfs_readdir: bad page in #12 [ 308.295230][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 308.306590][ T7368] BTRFS info (device loop0): trying to use backup root at mount time [ 308.315246][ T4268] Bluetooth: hci3: command 0x040f tx timeout [ 308.323142][ T7368] BTRFS info (device loop0): doing ref verification [ 308.330396][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 308.355867][ T7368] BTRFS info (device loop0): enabling ssd optimizations [ 308.365765][ T5989] NILFS error (device loop5): nilfs_readdir: bad page in #12 [ 308.401161][ T7368] BTRFS info (device loop0): using spread ssd allocation scheme [ 308.413883][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 308.455063][ T7368] BTRFS info (device loop0): using free space tree [ 308.481668][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 308.515196][ T5989] NILFS error (device loop5): nilfs_readdir: bad page in #12 [ 308.531294][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 308.560382][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 308.589805][ T5989] NILFS error (device loop5): nilfs_readdir: bad page in #12 [ 308.644185][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 308.689319][ T4693] team0 (unregistering): Port device team_slave_1 removed [ 308.708486][ T5589] BTRFS warning (device loop0): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0x26333c6f level 0 [ 308.740982][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 308.760500][ T5989] NILFS error (device loop5): nilfs_readdir: bad page in #12 [ 308.809608][ T7368] BTRFS warning (device loop0): couldn't read tree root [ 308.817158][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 308.826344][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 308.826893][ T7368] BTRFS warning (device loop0): try to load backup roots slot 1 [ 308.875490][ T5589] BTRFS warning (device loop0): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x78ca8373 level 0 [ 308.894933][ T5989] NILFS error (device loop5): nilfs_readdir: bad page in #12 [ 308.902143][ T7368] BTRFS warning (device loop0): couldn't read tree root [ 308.926274][ T7368] BTRFS warning (device loop0): try to load backup roots slot 2 [ 308.946130][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 308.948570][ T4693] team0 (unregistering): Port device team_slave_0 removed [ 308.963995][ T7368] BTRFS error (device loop0): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7 [ 308.985644][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 308.993296][ T7368] BTRFS warning (device loop0): couldn't read tree root [ 309.005430][ T5989] NILFS error (device loop5): nilfs_readdir: bad page in #12 [ 309.017136][ T7368] BTRFS warning (device loop0): try to load backup roots slot 3 [ 309.066907][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 309.076150][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 309.114562][ T7368] BTRFS info (device loop0): rebuilding free space tree [ 309.133970][ T5989] NILFS error (device loop5): nilfs_readdir: bad page in #12 [ 309.163964][ T7368] BTRFS info (device loop0): checking UUID tree [ 309.183793][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 309.225938][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 309.235903][ T4693] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 309.255583][ T5989] NILFS error (device loop5): nilfs_readdir: bad page in #12 [ 309.291829][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 309.313476][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 309.337993][ T5989] NILFS error (device loop5): nilfs_readdir: bad page in #12 [ 309.372311][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 309.428215][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 309.437619][ T4251] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 309.463972][ T5989] NILFS error (device loop5): nilfs_readdir: bad page in #12 [ 309.481971][ T5989] bio_check_eod: 67 callbacks suppressed [ 309.481987][ T5989] syz-executor: attempt to access beyond end of device [ 309.481987][ T5989] loop5: rw=0, sector=90, nr_sectors = 2 limit=64 [ 309.527995][ T4693] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 309.546757][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 309.556012][ T5989] syz-executor: attempt to access beyond end of device [ 309.556012][ T5989] loop5: rw=0, sector=90, nr_sectors = 2 limit=64 [ 309.575643][ T7381] loop3: detected capacity change from 0 to 32768 [ 309.601757][ T7381] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.779 (7381) [ 309.619970][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 309.649221][ T5989] NILFS error (device loop5): nilfs_readdir: bad page in #12 [ 309.677923][ T5989] syz-executor: attempt to access beyond end of device [ 309.677923][ T5989] loop5: rw=0, sector=90, nr_sectors = 2 limit=64 [ 309.715502][ T4437] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop0 scanned by udevd (4437) [ 309.730159][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 309.755506][ T5989] syz-executor: attempt to access beyond end of device [ 309.755506][ T5989] loop5: rw=0, sector=90, nr_sectors = 2 limit=64 [ 309.776312][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 309.812735][ T5989] NILFS error (device loop5): nilfs_readdir: bad page in #12 [ 309.843243][ T5989] syz-executor: attempt to access beyond end of device [ 309.843243][ T5989] loop5: rw=0, sector=90, nr_sectors = 2 limit=64 [ 309.874479][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 309.895054][ T5989] syz-executor: attempt to access beyond end of device [ 309.895054][ T5989] loop5: rw=0, sector=90, nr_sectors = 2 limit=64 [ 309.921103][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 309.950933][ T5989] NILFS error (device loop5): nilfs_readdir: bad page in #12 [ 309.971454][ T5989] syz-executor: attempt to access beyond end of device [ 309.971454][ T5989] loop5: rw=0, sector=90, nr_sectors = 2 limit=64 [ 310.006864][ T7381] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 310.057049][ T7381] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 310.065774][ T7381] BTRFS info (device loop3): using free space tree [ 310.072654][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 310.088779][ T5989] syz-executor: attempt to access beyond end of device [ 310.088779][ T5989] loop5: rw=0, sector=90, nr_sectors = 2 limit=64 [ 310.127228][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 310.146957][ T5989] NILFS error (device loop5): nilfs_readdir: bad page in #12 [ 310.160241][ T5989] syz-executor: attempt to access beyond end of device [ 310.160241][ T5989] loop5: rw=0, sector=90, nr_sectors = 2 limit=64 [ 310.219158][ T7402] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 310.236879][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 310.255538][ T5989] syz-executor: attempt to access beyond end of device [ 310.255538][ T5989] loop5: rw=0, sector=90, nr_sectors = 2 limit=64 [ 310.288072][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 310.297254][ T5989] NILFS error (device loop5): nilfs_readdir: bad page in #12 [ 310.305835][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 310.316297][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 310.326433][ T5989] NILFS error (device loop5): nilfs_readdir: bad page in #12 [ 310.337232][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 310.381385][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 310.390352][ T4265] Bluetooth: hci3: command 0x0419 tx timeout [ 310.406868][ T5989] NILFS error (device loop5): nilfs_readdir: bad page in #12 [ 310.414634][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 310.433055][ T7381] BTRFS info (device loop3): enabling ssd optimizations [ 310.488013][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 310.537636][ T5989] NILFS error (device loop5): nilfs_readdir: bad page in #12 [ 310.545596][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 310.641516][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 310.657144][ T5989] NILFS error (device loop5): nilfs_readdir: bad page in #12 [ 310.664971][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 310.707191][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 310.715947][ T5989] NILFS error (device loop5): nilfs_readdir: bad page in #12 [ 310.766443][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 310.775975][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 310.790991][ T5989] NILFS error (device loop5): nilfs_readdir: bad page in #12 [ 310.798060][ T7424] loop0: detected capacity change from 0 to 256 [ 310.820611][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 310.868153][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 310.896821][ T5989] NILFS error (device loop5): nilfs_readdir: bad page in #12 [ 310.937093][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 310.969715][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 310.983530][ T5989] NILFS error (device loop5): nilfs_readdir: bad page in #12 [ 310.992265][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 311.002250][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 311.046792][ T5989] NILFS error (device loop5): nilfs_readdir: bad page in #12 [ 311.071893][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 311.113904][ T4689] BTRFS info (device loop3): qgroup scan completed (inconsistency flag cleared) [ 311.114536][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 311.203961][ T5989] NILFS error (device loop5): nilfs_readdir: bad page in #12 [ 311.216841][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 311.247385][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 311.261066][ T5989] NILFS error (device loop5): nilfs_readdir: bad page in #12 [ 311.298263][ T7427] loop0: detected capacity change from 0 to 64 [ 311.358508][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 311.535530][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 311.703091][ T5989] NILFS error (device loop5): nilfs_readdir: bad page in #12 [ 311.829088][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 311.995806][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 312.074337][ T5989] NILFS error (device loop5): nilfs_readdir: bad page in #12 [ 312.082703][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 312.091974][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 312.100860][ T5989] NILFS error (device loop5): nilfs_readdir: bad page in #12 [ 312.108650][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 312.117974][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 312.126788][ T5989] NILFS error (device loop5): nilfs_readdir: bad page in #12 [ 312.134937][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 312.144192][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 312.153348][ T5989] NILFS error (device loop5): nilfs_readdir: bad page in #12 [ 312.173829][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 312.173889][ T4256] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 312.183480][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 312.226794][ T5989] NILFS error (device loop5): nilfs_readdir: bad page in #12 [ 312.252917][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 312.275601][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 312.285240][ T5989] NILFS error (device loop5): nilfs_readdir: bad page in #12 [ 312.335728][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 312.369337][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 312.381539][ T5989] NILFS error (device loop5): nilfs_readdir: bad page in #12 [ 312.431803][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 312.457552][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 312.466329][ T5989] NILFS error (device loop5): nilfs_readdir: bad page in #12 [ 312.583080][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 312.596898][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 312.606394][ T5989] NILFS error (device loop5): nilfs_readdir: bad page in #12 [ 312.614423][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 312.623868][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 312.633577][ T5989] NILFS error (device loop5): nilfs_readdir: bad page in #12 [ 312.641448][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 312.651257][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 312.690294][ T5989] NILFS error (device loop5): nilfs_readdir: bad page in #12 [ 312.699435][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 312.709061][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 312.728451][ T5989] NILFS error (device loop5): nilfs_readdir: bad page in #12 [ 312.736345][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 313.579862][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 313.594027][ T5989] NILFS error (device loop5): nilfs_readdir: bad page in #12 [ 313.602228][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 313.698287][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 313.708011][ T5989] NILFS error (device loop5): nilfs_readdir: bad page in #12 [ 313.715740][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 313.725590][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 313.756862][ T5989] NILFS error (device loop5): nilfs_readdir: bad page in #12 [ 313.764667][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 313.842859][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 313.882360][ T5989] NILFS error (device loop5): nilfs_readdir: bad page in #12 [ 313.917126][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 313.926582][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 313.946994][ T5989] NILFS error (device loop5): nilfs_readdir: bad page in #12 [ 313.954833][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 313.992874][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 314.022047][ T7437] loop0: detected capacity change from 0 to 8192 [ 314.050680][ T5989] NILFS error (device loop5): nilfs_readdir: bad page in #12 [ 314.068297][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 314.119253][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 314.152666][ T5989] NILFS error (device loop5): nilfs_readdir: bad page in #12 [ 314.186962][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 314.223924][ T7439] loop3: detected capacity change from 0 to 1764 [ 314.231069][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 314.241969][ T5989] NILFS error (device loop5): nilfs_readdir: bad page in #12 [ 314.277070][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 314.326154][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 314.357013][ T5989] NILFS error (device loop5): nilfs_readdir: bad page in #12 [ 314.364794][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 314.431385][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 314.457040][ T5989] NILFS error (device loop5): nilfs_readdir: bad page in #12 [ 314.464811][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 314.631400][ T5989] bio_check_eod: 69 callbacks suppressed [ 314.631418][ T5989] syz-executor: attempt to access beyond end of device [ 314.631418][ T5989] loop5: rw=0, sector=90, nr_sectors = 2 limit=64 [ 314.971441][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 315.111317][ T5989] NILFS error (device loop5): nilfs_readdir: bad page in #12 [ 315.229078][ T5989] syz-executor: attempt to access beyond end of device [ 315.229078][ T5989] loop5: rw=0, sector=90, nr_sectors = 2 limit=64 [ 315.335943][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 315.345211][ T5989] syz-executor: attempt to access beyond end of device [ 315.345211][ T5989] loop5: rw=0, sector=90, nr_sectors = 2 limit=64 [ 315.359831][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 315.368638][ T5989] NILFS error (device loop5): nilfs_readdir: bad page in #12 [ 315.376237][ T5989] syz-executor: attempt to access beyond end of device [ 315.376237][ T5989] loop5: rw=0, sector=90, nr_sectors = 2 limit=64 [ 315.389516][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 315.398815][ T5989] syz-executor: attempt to access beyond end of device [ 315.398815][ T5989] loop5: rw=0, sector=90, nr_sectors = 2 limit=64 [ 315.412084][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 315.426823][ T5989] NILFS error (device loop5): nilfs_readdir: bad page in #12 [ 315.434546][ T5989] syz-executor: attempt to access beyond end of device [ 315.434546][ T5989] loop5: rw=0, sector=90, nr_sectors = 2 limit=64 [ 315.447938][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 315.462926][ T5989] syz-executor: attempt to access beyond end of device [ 315.462926][ T5989] loop5: rw=0, sector=90, nr_sectors = 2 limit=64 [ 315.466603][ T7445] loop3: detected capacity change from 0 to 256 [ 315.488028][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 315.496955][ T5989] NILFS error (device loop5): nilfs_readdir: bad page in #12 [ 315.504618][ T5989] syz-executor: attempt to access beyond end of device [ 315.504618][ T5989] loop5: rw=0, sector=90, nr_sectors = 2 limit=64 [ 315.532044][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 315.589155][ T5989] syz-executor: attempt to access beyond end of device [ 315.589155][ T5989] loop5: rw=0, sector=90, nr_sectors = 2 limit=64 [ 315.613472][ T4693] bond0 (unregistering): Released all slaves [ 315.647227][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 315.655986][ T5989] NILFS error (device loop5): nilfs_readdir: bad page in #12 [ 315.713173][ T7447] loop0: detected capacity change from 0 to 16 [ 315.715167][ T5989] syz-executor: attempt to access beyond end of device [ 315.715167][ T5989] loop5: rw=0, sector=90, nr_sectors = 2 limit=64 [ 315.734036][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 315.746206][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 315.759588][ T5989] NILFS error (device loop5): nilfs_readdir: bad page in #12 [ 315.771290][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 315.780753][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 315.790115][ T5989] NILFS error (device loop5): nilfs_readdir: bad page in #12 [ 315.800304][ T7447] erofs: (device loop0): mounted with root inode @ nid 36. [ 315.837863][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 315.864881][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 315.876439][ T5989] NILFS error (device loop5): nilfs_readdir: bad page in #12 [ 315.892992][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 315.961495][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 316.056966][ T5989] NILFS error (device loop5): nilfs_readdir: bad page in #12 [ 316.067537][ T7456] loop3: detected capacity change from 0 to 64 [ 316.437286][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 316.771423][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 316.903987][ T5989] NILFS error (device loop5): nilfs_readdir: bad page in #12 [ 316.911992][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 316.921406][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 316.930365][ T5989] NILFS error (device loop5): nilfs_readdir: bad page in #12 [ 316.938268][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 316.947847][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 316.956753][ T5989] NILFS error (device loop5): nilfs_readdir: bad page in #12 [ 316.964497][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 316.973873][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 316.982691][ T5989] NILFS error (device loop5): nilfs_readdir: bad page in #12 [ 316.990573][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 317.002026][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 317.010902][ T5989] NILFS error (device loop5): nilfs_readdir: bad page in #12 [ 317.018799][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 317.037209][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 317.046110][ T5989] NILFS error (device loop5): nilfs_readdir: bad page in #12 [ 317.069950][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 317.085493][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 317.108242][ T5989] NILFS error (device loop5): nilfs_readdir: bad page in #12 [ 317.150686][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 317.184059][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 317.194524][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.195769][ T5989] NILFS error (device loop5): nilfs_readdir: bad page in #12 [ 317.202607][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.218142][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 317.228094][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 317.236966][ T5989] NILFS error (device loop5): nilfs_readdir: bad page in #12 [ 317.244741][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 317.254115][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 317.263066][ T5989] NILFS error (device loop5): nilfs_readdir: bad page in #12 [ 317.271107][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 317.280427][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 317.289220][ T5989] NILFS error (device loop5): nilfs_readdir: bad page in #12 [ 317.297063][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 317.306497][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 317.315281][ T5989] NILFS error (device loop5): nilfs_readdir: bad page in #12 [ 317.323131][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 317.332552][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 317.341440][ T5989] NILFS error (device loop5): nilfs_readdir: bad page in #12 [ 317.363358][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 317.375201][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 317.391092][ T5989] NILFS error (device loop5): nilfs_readdir: bad page in #12 [ 317.412548][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 317.450801][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 318.964239][ T5989] NILFS error (device loop5): nilfs_readdir: bad page in #12 [ 318.972622][ T7305] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.982489][ T5989] NILFS (loop5): I/O error reading meta-data file (ino=3, block-offset=130) [ 318.987256][ T7305] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.004154][ T7305] device bridge_slave_0 entered promiscuous mode [ 319.025151][ T7305] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.028366][ T7470] loop3: detected capacity change from 0 to 1024 [ 319.041761][ T7305] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.081252][ T7305] device bridge_slave_1 entered promiscuous mode [ 319.160262][ T7470] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 319.302521][ T7470] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 319.446125][ T7305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 319.645683][ T4256] EXT4-fs (loop3): unmounting filesystem. [ 319.746542][ T7305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 319.955321][ T7305] team0: Port device team_slave_0 added [ 320.020529][ T7305] team0: Port device team_slave_1 added [ 320.085013][ T4268] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 320.098046][ T4268] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 320.106709][ T4268] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 320.116098][ T4268] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 320.124423][ T4268] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 320.131745][ T4268] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 320.285267][ T7305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 320.313722][ T7305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 320.366062][ T7491] loop0: detected capacity change from 0 to 164 [ 320.460858][ T7305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 320.599572][ T7305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 320.646461][ T7305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 320.747950][ T7305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 321.088089][ T4693] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.603987][ T4265] Bluetooth: hci4: command 0x0409 tx timeout [ 322.650396][ T7504] loop0: detected capacity change from 0 to 256 [ 322.694082][ T7504] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d) [ 323.133831][ T4693] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.264035][ T7507] loop0: detected capacity change from 0 to 64 [ 323.430927][ T7305] device hsr_slave_0 entered promiscuous mode [ 323.636249][ T7305] device hsr_slave_1 entered promiscuous mode [ 323.861691][ T7305] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 324.020912][ T7305] Cannot create hsr debugfs directory [ 324.168991][ T4269] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 324.180741][ T4269] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 324.191749][ T4269] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 324.192782][ T4693] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.223117][ T4268] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 324.242653][ T4268] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 324.252256][ T4268] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 324.516560][ T4693] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.626984][ T4268] Bluetooth: hci4: command 0x041b tx timeout [ 325.079967][ T7487] chnl_net:caif_netlink_parms(): no params data found [ 325.499962][ T7513] loop3: detected capacity change from 0 to 32768 [ 325.596217][ T7515] loop0: detected capacity change from 0 to 32768 [ 325.612648][ T7513] XFS (loop3): Mounting V5 Filesystem [ 325.664323][ T7515] XFS: attr2 mount option is deprecated. [ 325.677359][ T7515] XFS: ikeep mount option is deprecated. [ 325.683195][ T7515] XFS: noikeep mount option is deprecated. [ 325.741140][ T7513] XFS (loop3): Ending clean mount [ 325.781970][ T7513] XFS (loop3): Quotacheck needed: Please wait. [ 325.822240][ T7515] XFS (loop0): Mounting V5 Filesystem [ 325.881102][ T7513] XFS (loop3): Quotacheck: Done. [ 326.003400][ T7515] XFS (loop0): Ending clean mount [ 326.022428][ T7487] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.045227][ T7487] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.079508][ T7515] XFS (loop0): Quotacheck needed: Please wait. [ 326.085550][ T7487] device bridge_slave_0 entered promiscuous mode [ 326.226071][ T7515] XFS (loop0): Quotacheck: Done. [ 326.227210][ T7487] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.285353][ T7487] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.307249][ T4268] Bluetooth: hci2: command 0x0409 tx timeout [ 326.335769][ T7487] device bridge_slave_1 entered promiscuous mode [ 326.362405][ T7305] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 326.395573][ T4256] XFS (loop3): Unmounting Filesystem [ 326.403957][ T7305] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 326.697855][ T7305] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 326.707523][ T4268] Bluetooth: hci4: command 0x040f tx timeout [ 326.717890][ T4251] XFS (loop0): Unmounting Filesystem [ 326.726809][ T7305] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 326.910150][ T7487] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 326.974643][ T7509] chnl_net:caif_netlink_parms(): no params data found [ 327.206865][ T7487] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 328.291965][ T7571] loop0: detected capacity change from 0 to 64 [ 328.666816][ T4268] Bluetooth: hci2: command 0x041b tx timeout [ 328.796863][ T4268] Bluetooth: hci4: command 0x0419 tx timeout [ 330.012134][ T7581] loop3: detected capacity change from 0 to 128 [ 330.039894][ T7581] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 330.068026][ T7581] ext4 filesystem being mounted at /184/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 330.766734][ T4265] Bluetooth: hci2: command 0x040f tx timeout [ 331.307076][ T4256] EXT4-fs (loop3): unmounting filesystem. [ 331.352651][ T7588] loop0: detected capacity change from 0 to 64 [ 331.875153][ T7487] team0: Port device team_slave_0 added [ 332.421631][ T7487] team0: Port device team_slave_1 added [ 332.531706][ T7604] mmap: syz.0.813 (7604) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 332.787128][ T4268] Bluetooth: hci2: command 0x0419 tx timeout [ 332.882740][ T7487] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 332.914952][ T7487] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 333.003359][ T7487] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 333.111443][ T7509] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.130573][ T7509] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.164676][ T7509] device bridge_slave_0 entered promiscuous mode [ 333.213322][ T7487] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 333.222936][ T7487] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 333.320524][ T7487] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 333.650278][ T7509] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.669836][ T7509] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.699140][ T7509] device bridge_slave_1 entered promiscuous mode [ 333.908730][ T7509] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 334.000908][ T7619] loop3: detected capacity change from 0 to 64 [ 334.751722][ T7622] loop0: detected capacity change from 0 to 1024 [ 334.827685][ T7622] EXT4-fs: Ignoring removed bh option [ 334.914924][ T7509] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 334.979051][ T7487] device hsr_slave_0 entered promiscuous mode [ 334.992569][ T7622] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 335.023067][ T7487] device hsr_slave_1 entered promiscuous mode [ 335.109044][ T7487] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 335.140187][ T7487] Cannot create hsr debugfs directory [ 335.235474][ T7509] team0: Port device team_slave_0 added [ 335.299278][ T4693] device hsr_slave_0 left promiscuous mode [ 335.310520][ T4693] device hsr_slave_1 left promiscuous mode [ 335.329198][ T4251] EXT4-fs (loop0): unmounting filesystem. [ 335.344792][ T4693] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 335.373800][ T4693] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 335.440194][ T4693] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 335.456756][ T4693] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 335.485495][ T4693] device bridge_slave_1 left promiscuous mode [ 335.567648][ T7641] loop0: detected capacity change from 0 to 64 [ 335.639027][ T4693] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.890023][ T4693] device bridge_slave_0 left promiscuous mode [ 336.026456][ T4693] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.463598][ T4693] device veth1_macvtap left promiscuous mode [ 336.471463][ T4693] device veth0_macvtap left promiscuous mode [ 336.477768][ T4693] device veth1_vlan left promiscuous mode [ 336.483671][ T4693] device veth0_vlan left promiscuous mode [ 336.632092][ T7644] loop0: detected capacity change from 0 to 2048 [ 336.715832][ T7644] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 337.469629][ T7640] loop3: detected capacity change from 0 to 32768 [ 337.528955][ T26] audit: type=1800 audit(1751405345.735:24): pid=7640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.821" name="file1" dev="loop3" ino=7 res=0 errno=0 [ 337.627938][ T26] audit: type=1800 audit(1751405345.825:25): pid=7649 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.821" name="file1" dev="loop3" ino=7 res=0 errno=0 [ 338.312565][ T7648] loop0: detected capacity change from 0 to 32768 [ 338.461632][ T7648] XFS (loop0): Mounting V5 Filesystem [ 338.730313][ T7648] XFS (loop0): Ending clean mount [ 338.752564][ T7648] XFS (loop0): Quotacheck needed: Please wait. [ 338.949874][ T7648] XFS (loop0): Quotacheck: Done. [ 339.185753][ T7654] loop3: detected capacity change from 0 to 32768 [ 339.341885][ T4251] XFS (loop0): Unmounting Filesystem [ 339.514167][ T4693] team0 (unregistering): Port device team_slave_1 removed [ 339.688507][ T4693] team0 (unregistering): Port device team_slave_0 removed [ 339.938530][ T4693] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 340.033669][ T7668] loop3: detected capacity change from 0 to 1024 [ 340.044498][ T7670] loop0: detected capacity change from 0 to 512 [ 340.057654][ T7668] EXT4-fs: Ignoring removed nomblk_io_submit option [ 340.115002][ T7670] EXT4-fs: Ignoring removed orlov option [ 340.137646][ T7670] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 340.177123][ T7668] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 340.246111][ T7670] EXT4-fs (loop0): 1 orphan inode deleted [ 340.301763][ T7670] EXT4-fs (loop0): 1 truncate cleaned up [ 340.307851][ T7670] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 340.361298][ T4693] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 340.370011][ T4256] EXT4-fs (loop3): unmounting filesystem. [ 340.385030][ T7670] EXT4-fs error (device loop0): ext4_check_all_de:666: inode #12: block 7: comm syz.0.827: bad entry in directory: rec_len is too small for name_len - offset=0, inode=13, rec_len=16, size=124 fake=0 [ 340.540684][ T7670] EXT4-fs (loop0): Remounting filesystem read-only [ 340.571593][ T7677] loop3: detected capacity change from 0 to 2048 [ 340.596467][ T7677] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 340.607530][ T7675] EXT4-fs error (device loop0): ext4_generic_delete_entry:2729: inode #12: block 7: comm syz.0.827: bad entry in directory: rec_len is too small for name_len - offset=0, inode=13, rec_len=16, size=56 fake=0 [ 340.649516][ T26] audit: type=1800 audit(1751405348.855:26): pid=7677 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.830" name="file1" dev="loop3" ino=1415 res=0 errno=0 [ 340.677432][ T7675] EXT4-fs (loop0): Remounting filesystem read-only [ 340.724633][ T7675] EXT4-fs error (device loop0) in ext4_delete_inline_entry:1804: Corrupt filesystem [ 340.801394][ T7675] EXT4-fs (loop0): Remounting filesystem read-only [ 340.980033][ T4251] EXT4-fs (loop0): unmounting filesystem. [ 341.198790][ T7679] loop0: detected capacity change from 0 to 128 [ 341.284321][ T7679] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 341.328796][ T7679] ext4 filesystem being mounted at /202/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 342.367594][ T4251] EXT4-fs (loop0): unmounting filesystem. [ 343.705337][ T7694] loop0: detected capacity change from 0 to 512 [ 343.752628][ T7694] EXT4-fs: Ignoring removed nomblk_io_submit option [ 343.788323][ T7694] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 343.891090][ T7694] EXT4-fs (loop0): 1 truncate cleaned up [ 343.898484][ T7694] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 343.970781][ T7694] EXT4-fs (loop0): shut down requested (0) [ 344.271294][ T4251] EXT4-fs (loop0): unmounting filesystem. [ 344.579282][ T7698] loop3: detected capacity change from 0 to 32768 [ 344.688560][ T7698] XFS (loop3): Mounting V5 Filesystem [ 344.803471][ T7698] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 344.867767][ T7698] XFS (loop3): Starting recovery (logdev: internal) [ 344.923238][ T4693] bond0 (unregistering): Released all slaves [ 344.938617][ T7698] XFS (loop3): Ending recovery (logdev: internal) [ 345.224215][ T7509] team0: Port device team_slave_1 added [ 345.282423][ T4256] XFS (loop3): Unmounting Filesystem [ 347.043116][ T7509] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 347.055429][ T7509] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 347.144335][ T7509] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 347.169632][ T7305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 347.230920][ T7509] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 347.253119][ T7509] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 347.377801][ T7509] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 347.447616][ T6026] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 347.493445][ T6026] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 347.562635][ T7305] 8021q: adding VLAN 0 to HW filter on device team0 [ 347.883089][ T7725] loop3: detected capacity change from 0 to 64 [ 348.002406][ T7726] netlink: 8 bytes leftover after parsing attributes in process `syz.3.838'. [ 348.083910][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 348.183488][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 348.390512][ T4499] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.397736][ T4499] bridge0: port 1(bridge_slave_0) entered forwarding state [ 348.657831][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 348.666812][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 348.675525][ T4499] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.682748][ T4499] bridge0: port 2(bridge_slave_1) entered forwarding state [ 348.691392][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 348.700700][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 348.727276][ T7509] device hsr_slave_0 entered promiscuous mode [ 348.809025][ T7509] device hsr_slave_1 entered promiscuous mode [ 348.817314][ T7509] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 348.865923][ T7509] Cannot create hsr debugfs directory [ 348.933238][ T4692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 348.957145][ T4692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 349.024537][ T4692] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 349.046939][ T4692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 349.084431][ T4692] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 349.103768][ T4692] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 350.829788][ T4692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 350.839338][ T4692] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 350.862280][ T7305] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 350.924158][ T7305] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 350.940226][ T4687] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 350.985075][ T4687] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 352.289224][ T7753] loop0: detected capacity change from 0 to 7 [ 352.345332][ T4437] Dev loop0: unable to read RDB block 7 [ 352.351222][ T4437] loop0: AHDI p3 p4 [ 352.374572][ T4437] loop0: partition table partially beyond EOD, truncated [ 352.410943][ T4437] loop0: p3 start 16777216 is beyond EOD, truncated [ 352.419555][ T4693] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.449531][ T7753] Dev loop0: unable to read RDB block 7 [ 352.455328][ T7753] loop0: AHDI p3 p4 [ 352.472476][ T7753] loop0: partition table partially beyond EOD, truncated [ 352.499759][ T7753] loop0: p3 start 16777216 is beyond EOD, truncated [ 352.639924][ T7487] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 353.670847][ T4693] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.867644][ T7487] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 353.883121][ T7487] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 353.925906][ T7487] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 355.368850][ T27] INFO: task syz-executor:4257 blocked for more than 144 seconds. [ 355.384080][ T27] Not tainted 6.1.142-syzkaller #0 [ 355.480238][ T7762] device macsec0 entered promiscuous mode [ 355.517040][ T7762] device macsec1 entered promiscuous mode [ 355.527728][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 355.553375][ T27] task:syz-executor state:D stack:22048 pid:4257 ppid:1 flags:0x00004006 [ 355.577499][ T27] Call Trace: [ 355.585758][ T27] [ 355.593000][ T27] __schedule+0x10e9/0x40d0 [ 355.604832][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 355.617199][ T27] ? release_firmware_map_entry+0x18a/0x18a [ 355.629643][ T27] ? prepare_to_wait_event+0x430/0x470 [ 355.644289][ T27] schedule+0xb9/0x180 [ 355.654571][ T27] wb_wait_for_completion+0x162/0x280 [ 355.668966][ T27] ? __bpf_trace_writeback_inode_template+0x20/0x20 [ 355.685378][ T27] ? rwsem_write_trylock+0x12f/0x1b0 [ 355.699883][ T27] ? wake_bit_function+0x200/0x200 [ 355.712681][ T27] ? __might_sleep+0xd0/0xd0 [ 355.727521][ T27] ? preempt_count_add+0x8d/0x190 [ 355.739963][ T27] sync_inodes_sb+0x1b8/0x9e0 [ 355.751422][ T27] ? filemap_flush+0xc1/0x110 [ 355.764213][ T27] ? filemap_fdatawrite_range+0x120/0x120 [ 355.770444][ T27] ? try_to_writeback_inodes_sb+0xc0/0xc0 [ 355.776647][ T27] ? nilfs_put_super+0x150/0x150 [ 355.781783][ T27] ? get_nr_dirty_inodes+0x290/0x2c0 [ 355.787354][ T27] sync_filesystem+0x16d/0x220 [ 355.792307][ T27] generic_shutdown_super+0x6b/0x340 [ 355.797846][ T27] kill_block_super+0x7c/0xe0 [ 355.802709][ T27] deactivate_locked_super+0x93/0xf0 [ 355.808300][ T27] cleanup_mnt+0x463/0x4f0 [ 355.823764][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 355.837662][ T27] task_work_run+0x1ca/0x250 [ 355.849388][ T27] ? task_work_cancel+0x230/0x230 [ 355.862740][ T27] ? do_exit+0x939/0x2400 [ 355.874211][ T27] ? kmem_cache_free+0xf7/0x290 [ 355.887202][ T27] do_exit+0x93e/0x2400 [ 355.898233][ T27] ? put_task_struct+0x80/0x80 [ 355.911034][ T27] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 355.926917][ T27] ? lock_chain_count+0x20/0x20 [ 355.939813][ T27] ? _raw_spin_lock_irq+0xab/0xe0 [ 355.952887][ T27] do_group_exit+0x217/0x2d0 [ 355.965091][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 355.979058][ T27] get_signal+0x1272/0x1350 [ 355.991097][ T27] arch_do_signal_or_restart+0xb0/0x1230 [ 356.006170][ T27] ? preempt_count_add+0x8d/0x190 [ 356.019644][ T27] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 356.034406][ T27] ? mutex_unlock+0x10/0x10 [ 356.046764][ T27] ? down_read_killable+0x1cc/0x340 [ 356.061337][ T27] ? get_sigframe_size+0x10/0x10 [ 356.075178][ T27] ? iterate_dir+0x49f/0x560 [ 356.087631][ T27] ? __x64_sys_getdents64+0x80/0x80 [ 356.101513][ T27] ? exit_to_user_mode_loop+0x3b/0x110 [ 356.116264][ T27] exit_to_user_mode_loop+0x70/0x110 [ 356.130328][ T27] exit_to_user_mode_prepare+0xb1/0x140 [ 356.144963][ T27] syscall_exit_to_user_mode+0x16/0x40 [ 356.159658][ T27] do_syscall_64+0x58/0xa0 [ 356.171093][ T27] ? clear_bhb_loop+0x60/0xb0 [ 356.184225][ T27] ? clear_bhb_loop+0x60/0xb0 [ 356.196999][ T27] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 356.212481][ T27] RIP: 0033:0x7f85f8fc1293 [ 356.224331][ T27] RSP: 002b:00007fffa586f728 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 356.247177][ T27] RAX: fffffffffffffffb RBX: 000055556553b640 RCX: 00007f85f8fc1293 [ 356.268163][ T27] RDX: 0000000000008000 RSI: 000055556553b640 RDI: 0000000000000006 [ 356.288150][ T27] RBP: 000055556553b614 R08: 0000000000000000 R09: 0000000000000000 [ 356.309205][ T27] R10: 0000000000001000 R11: 0000000000000293 R12: ffffffffffffffa8 [ 356.330703][ T27] R13: 0000000000000016 R14: 000055556553b610 R15: 00007fffa5872ad0 [ 356.351711][ T27] [ 356.372150][ T27] [ 356.372150][ T27] Showing all locks held in the system: [ 356.401298][ T27] 3 locks held by kworker/0:0/7: [ 356.422935][ T27] #0: ffff88802f53e938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 356.450974][ T27] #1: ffffc900000c7d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 356.482592][ T27] #2: ffffffff8db34ee8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xc4/0x14d0 [ 356.506827][ T27] 2 locks held by kworker/u4:0/9: [ 356.511930][ T27] #0: ffff8880b8e3aa98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x26/0x140 [ 356.544935][ T27] #1: ffff8880b8e27848 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x398/0x6d0 [ 356.580544][ T27] 1 lock held by rcu_tasks_kthre/12: [ 356.586007][ T27] #0: ffffffff8c92b430 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00 [ 356.622863][ T27] 1 lock held by rcu_tasks_trace/13: [ 356.642879][ T27] #0: ffffffff8c92bc50 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00 [ 356.673680][ T27] 1 lock held by khungtaskd/27: [ 356.694536][ T27] #0: ffffffff8c92aaa0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 356.728607][ T27] 2 locks held by kworker/u4:2/33: [ 356.742218][ T27] #0: ffff888019ecf938 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 356.771010][ T27] #1: ffffc90000a9fd00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 356.802205][ T27] 1 lock held by dhcpcd/3918: [ 356.807327][ T27] #0: ffffffff8db34ee8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x740/0xed0 [ 356.817232][ T27] 2 locks held by getty/4014: [ 356.822088][ T27] #0: ffff88814cfaf098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 356.832737][ T27] #1: ffffc9000326b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x41b/0x1380 [ 356.843345][ T27] 2 locks held by syz-executor/4257: [ 356.849115][ T27] #0: ffff88807d2c20e0 (&type->s_umount_key#80){++++}-{3:3}, at: deactivate_super+0xa0/0xd0 [ 356.859973][ T27] #1: ffff8881443187d0 (&bdi->wb_switch_rwsem){+.+.}-{3:3}, at: sync_inodes_sb+0x19c/0x9e0 [ 356.870680][ T27] 2 locks held by kworker/u4:9/4577: [ 356.876083][ T27] 5 locks held by kworker/u4:15/4693: [ 356.882217][ T27] #0: ffff888017616938 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 356.893149][ T27] #1: ffffc9000c36fd00 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 356.904812][ T27] #2: ffffffff8db28250 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x132/0xb80 [ 356.922987][ T27] #3: ffff8880563a72f8 (&devlink->lock_key#5){+.+.}-{3:3}, at: devlink_pernet_pre_exit+0xf8/0x270 [ 356.934620][ T27] #4: ffffffff8db34ee8 (rtnl_mutex){+.+.}-{3:3}, at: devlink_nl_port_fill+0x298/0x910 [ 356.944920][ T27] 2 locks held by kworker/u4:16/5016: [ 356.950738][ T27] #0: ffff888019ecf938 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 356.961885][ T27] #1: ffffc9000e437d00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 356.974546][ T27] 3 locks held by kworker/1:13/5330: [ 356.980339][ T27] #0: ffff88802f53e938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 356.991810][ T27] #1: ffffc9001cf37d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 357.004535][ T27] #2: ffffffff8db34ee8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xc4/0x14d0 [ 357.014498][ T27] 3 locks held by kworker/u4:19/5589: [ 357.020348][ T27] #0: ffff888017479138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 357.032003][ T27] #1: ffffc90003b4fd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 357.043105][ T27] #2: ffffffff8db34ee8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xa/0x50 [ 357.052568][ T27] 2 locks held by segctord/5724: [ 357.057975][ T27] 2 locks held by syz-executor/5989: [ 357.063432][ T27] #0: ffff888060f8a0e0 (&type->s_umount_key#80){++++}-{3:3}, at: deactivate_super+0xa0/0xd0 [ 357.074364][ T27] #1: ffff88814431e7d0 (&bdi->wb_switch_rwsem){+.+.}-{3:3}, at: sync_inodes_sb+0x19c/0x9e0 [ 357.085269][ T27] 2 locks held by kworker/1:16/6454: [ 357.091003][ T27] #0: ffff888017472138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 357.101890][ T27] #1: ffffc9000360fd00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 357.113942][ T27] 1 lock held by syz-executor/7305: [ 357.119657][ T27] #0: ffffffff8db34ee8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x740/0xed0 [ 357.129610][ T27] 1 lock held by segctord/7340: [ 357.134644][ T27] 3 locks held by syz-executor/7487: [ 357.140658][ T27] #0: ffffffff8db94c30 (cb_lock){++++}-{3:3}, at: genl_rcv+0x15/0x40 [ 357.149372][ T27] #1: ffffffff8db94a48 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x103/0x780 [ 357.158930][ T27] #2: ffffffff8db34ee8 (rtnl_mutex){+.+.}-{3:3}, at: wg_set_device+0xf2/0x1ee0 [ 357.168535][ T27] 1 lock held by syz-executor/7509: [ 357.173933][ T27] #0: ffffffff8db34ee8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x740/0xed0 [ 357.184013][ T27] 2 locks held by syz.0.846/7762: [ 357.189696][ T27] #0: ffffffff8db34ee8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x740/0xed0 [ 357.199700][ T27] #1: ffffffff8c930778 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x455/0x830 [ 357.211280][ T27] [ 357.213818][ T27] ============================================= [ 357.213818][ T27] [ 357.222761][ T27] NMI backtrace for cpu 0 [ 357.227151][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted 6.1.142-syzkaller #0 [ 357.235080][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 357.245171][ T27] Call Trace: [ 357.248477][ T27] [ 357.251433][ T27] dump_stack_lvl+0x168/0x22e [ 357.256149][ T27] ? irq_work_queue+0xb8/0x140 [ 357.260954][ T27] ? show_regs_print_info+0x12/0x12 [ 357.266198][ T27] ? load_image+0x3b0/0x3b0 [ 357.270736][ T27] ? vprintk_emit+0x571/0x680 [ 357.275456][ T27] ? printk_sprint+0x460/0x460 [ 357.280266][ T27] nmi_cpu_backtrace+0x3f4/0x470 [ 357.285249][ T27] ? nmi_trigger_cpumask_backtrace+0x450/0x450 [ 357.291442][ T27] ? _printk+0xcc/0x110 [ 357.295639][ T27] ? load_image+0x3b0/0x3b0 [ 357.300177][ T27] ? load_image+0x3b0/0x3b0 [ 357.304718][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 357.310841][ T27] nmi_trigger_cpumask_backtrace+0x1d4/0x450 [ 357.316872][ T27] watchdog+0xeee/0xf30 [ 357.321057][ T27] ? watchdog+0x1ed/0xf30 [ 357.325416][ T27] kthread+0x29d/0x330 [ 357.329500][ T27] ? hungtask_pm_notify+0x40/0x40 [ 357.334536][ T27] ? kthread_blkcg+0xd0/0xd0 [ 357.339148][ T27] ret_from_fork+0x1f/0x30 [ 357.343597][ T27] [ 357.347044][ T27] Sending NMI from CPU 0 to CPUs 1: [ 357.352287][ C1] NMI backtrace for cpu 1 [ 357.352296][ C1] CPU: 1 PID: 9 Comm: kworker/u4:0 Not tainted 6.1.142-syzkaller #0 [ 357.352312][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 357.352323][ C1] Workqueue: bat_events batadv_nc_worker [ 357.352345][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x60 [ 357.352365][ C1] Code: 2e 0f 1f 84 00 00 00 00 00 90 53 48 89 fb e8 17 00 00 00 48 8b 3d e0 b7 7d 0c 48 89 de 5b e9 b7 b2 50 00 00 00 cc cc 00 00 cc <48> 8b 04 24 65 48 8b 0d b4 97 81 7e 65 8b 15 b5 97 81 7e 81 e2 00 [ 357.352380][ C1] RSP: 0018:ffffc900000e7bd8 EFLAGS: 00000202 [ 357.352392][ C1] RAX: 0000000000000001 RBX: 0000000000000001 RCX: a4b4a33b613f1f00 [ 357.352404][ C1] RDX: ffff88813fe30000 RSI: ffffffff8abf1480 RDI: ffffffff8abf1440 [ 357.352416][ C1] RBP: ffff888062dd1740 R08: dffffc0000000000 R09: fffffbfff2117249 [ 357.352428][ C1] R10: fffffbfff2117249 R11: 1ffffffff2117248 R12: dffffc0000000000 [ 357.352440][ C1] R13: ffffffff89d9d83e R14: ffff88807605cc80 R15: 00000000000002e8 [ 357.352452][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 357.352465][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 357.352476][ C1] CR2: 00007fc35621fe9c CR3: 000000000c68e000 CR4: 00000000003506e0 [ 357.352491][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 357.352500][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 357.352510][ C1] Call Trace: [ 357.352515][ C1] [ 357.352520][ C1] batadv_nc_worker+0x111/0x600 [ 357.352542][ C1] ? process_one_work+0x7a1/0x1160 [ 357.352561][ C1] process_one_work+0x898/0x1160 [ 357.352584][ C1] ? worker_detach_from_pool+0x240/0x240 [ 357.352604][ C1] ? _raw_spin_lock_irq+0xab/0xe0 [ 357.352627][ C1] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 357.352650][ C1] ? kthread_data+0x4b/0xc0 [ 357.352674][ C1] worker_thread+0xaa2/0x1250 [ 357.352704][ C1] kthread+0x29d/0x330 [ 357.352725][ C1] ? worker_clr_flags+0x1a0/0x1a0 [ 357.352741][ C1] ? kthread_blkcg+0xd0/0xd0 [ 357.352765][ C1] ret_from_fork+0x1f/0x30 [ 357.352793][ C1] [ 357.573443][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 357.580367][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted 6.1.142-syzkaller #0 [ 357.588281][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 357.598348][ T27] Call Trace: [ 357.601656][ T27] [ 357.604605][ T27] dump_stack_lvl+0x168/0x22e [ 357.609311][ T27] ? memcpy+0x3c/0x60 [ 357.613312][ T27] ? show_regs_print_info+0x12/0x12 [ 357.618562][ T27] ? load_image+0x3b0/0x3b0 [ 357.623087][ T27] panic+0x2c9/0x710 [ 357.626994][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 357.632639][ T27] ? bpf_jit_dump+0xd0/0xd0 [ 357.637147][ T27] ? __irq_work_queue_local+0x12c/0x190 [ 357.642712][ T27] ? nmi_trigger_cpumask_backtrace+0x35b/0x450 [ 357.648885][ T27] ? nmi_trigger_cpumask_backtrace+0x360/0x450 [ 357.655055][ T27] watchdog+0xf2d/0xf30 [ 357.659224][ T27] ? watchdog+0x1ed/0xf30 [ 357.663567][ T27] kthread+0x29d/0x330 [ 357.667652][ T27] ? hungtask_pm_notify+0x40/0x40 [ 357.672687][ T27] ? kthread_blkcg+0xd0/0xd0 [ 357.677298][ T27] ret_from_fork+0x1f/0x30 [ 357.681737][ T27] [ 357.685124][ T27] Kernel Offset: disabled [ 357.689456][ T27] Rebooting in 86400 seconds..