last executing test programs: 29.068786181s ago: executing program 0 (id=898): r0 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1={0xff, 0x4}}, 0x1c) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="a0"], 0xffd8}}, 0x4000000) 28.954711312s ago: executing program 0 (id=902): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000580)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(r0, &(0x7f00000029c0)={0x658, 0x0, r1, [{{0x0, 0x2, 0x8001, 0x46, 0xff, 0x2, {0x6, 0xfa9, 0xfffffffffffffff9, 0xfff, 0x2, 0x3, 0x4, 0x0, 0xed07, 0xa000, 0x8, r2, 0x0, 0x55fd, 0x80000001}}, {0x0, 0x3, 0x6, 0x5, 'vcan0\x00'}}, {{0x6, 0x0, 0x5, 0xffffffffffffffc0, 0x3, 0x200, {0x3, 0x2, 0x5, 0xffffffffffffff01, 0xf, 0x7, 0xffff, 0x2, 0xfffffe01, 0x3000, 0x2, r2, r3, 0x5, 0x4c18}}, {0x0, 0x10001, 0x8, 0xb, '%pB \x00'}}, {{0x1, 0x0, 0xffffffff, 0x7, 0xf425, 0x2, {0x6, 0x7, 0x2, 0xf, 0xffffffffffffffff, 0x1, 0x2, 0x8, 0x9461, 0xe000, 0x7, r2, r3, 0x8000, 0x1ff8000}}, {0x1, 0xd0a9, 0xa, 0x9a5e, '/dev/cuse\x00'}}, {{0x6, 0x2, 0x5f, 0x4, 0x4, 0x1, {0x0, 0x7, 0x1000, 0xfffffffffffffff9, 0x8001, 0x0, 0x800, 0x80000000, 0xb83, 0xc000, 0x80000001, r2, r3, 0x28a, 0x7}}, {0x5, 0x4, 0x1, 0xa, '\x00'}}, {{0x5, 0x2, 0x8, 0x8001, 0xd, 0x6, {0x6, 0x184, 0x587, 0x8000, 0x8, 0x0, 0xffffffff, 0x6, 0x10, 0x2000, 0xb, r2, r3, 0x80000000, 0xb}}, {0x2, 0x8, 0x1, 0xa2, '('}}, {{0x2, 0x1, 0x9, 0x6, 0xfffffff8, 0x7fff, {0x5, 0x1, 0xc, 0xa, 0x6, 0x6, 0x3, 0x6, 0x7, 0x8000, 0x8, r2, r3, 0x5, 0x3}}, {0x3, 0x2, 0x1, 0x9, ','}}, {{0x6, 0x0, 0x5dd5, 0x3, 0x5, 0x81, {0x3, 0x100000001, 0x5, 0x2, 0x1, 0x2, 0x6, 0x69504f9e, 0x80000000, 0x2000, 0x6, r2, r3, 0x6, 0x5}}, {0x0, 0xfffffffffffffffc, 0x6, 0x4, '&\'.:&('}}, {{0x2, 0x1, 0x401, 0x5, 0x80, 0x4, {0x5, 0x404, 0x5, 0x4, 0x801, 0xff, 0x6, 0xd7a2, 0x7fff, 0x4000, 0x7f, 0x0, 0x0, 0x7fffffff, 0xc6}}, {0x4, 0x100000001, 0x4, 0xf4f, '\\--,'}}, {{0x5, 0x1, 0x7ff, 0x4, 0x3d, 0x7f, {0x6, 0x7, 0x5, 0x3, 0x59ec, 0x5, 0x4, 0xf6c, 0x80000000, 0x4000, 0x80, r2, r3, 0x6, 0x6a4a}}, {0x2, 0x54f, 0x8, 0x3ff, 'nl80211\x00'}}, {{0x5, 0x2, 0x2, 0x49f, 0x7fff, 0x65, {0x5, 0xbe4a, 0x707, 0x4b3, 0x0, 0x3, 0x10001, 0xfffff800, 0x6, 0x4000, 0x4b4cca3e, 0xee00, r3, 0x1, 0x62e2}}, {0x2, 0x101, 0x1, 0x3, '\xad'}}]}, 0x658) 28.812779974s ago: executing program 0 (id=905): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x68, r1, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x5, 0x4, @broadcast}, @NLBL_UNLABEL_A_SECCTX={0x2f, 0x7, 'system_u:object_r:systemd_logind_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0}]}, 0x68}}, 0x0) 28.726493895s ago: executing program 0 (id=907): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000001080), 0x1, 0x4e2, &(0x7f0000000b80)="$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") mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f00000002c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000040)='./file0/file0\x00') 28.41682347s ago: executing program 0 (id=909): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0x53b, 0x70bd2d, 0x0, {}, [{0x34, 0x1, [@m_simple={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4, 0x21}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) syz_read_part_table(0x5e0, &(0x7f0000000000)="$eJzs3DFoU1sYB/CT4EtQEHFzM5gh4pJCxhBBQ7yUgAnBhw4iutUhi04OsYIBcTAuEcGlDopQg/LQSUSQJ2LiIGQSi31LW0qHR6FLoJQ8yrtduhWaBw9/Pzhcznf+h+8c7nxv4H8tGf4ej8eJEMI4HcZ73f37fOXcdKZ+pnEhhES4HEKY+qM4s72SiBPj9L/PE/F8MZ4X3h9oPpiP7nW6h4+9zWx+Tcbrd+KxMnhyZR+ux4SdvHnq4/HR8Oi7anjaP90vHmpemunlyrO9b/U3Z59nXuy89/yE+r8ufT5yt30j6twqXf8etZai1eTGenT+8Vw+9TDdyK1NxbmrE+rf3LqYevnsU7m9fLDwpVqrdV8tPMq2Kh/at4eD7I/R/Wtx7md6QgcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGBfnbx56uPx0fDou2p42j/dLx5qXprp5cqzvW/1N2efZ16ciHP5CfV/Xfp85G77RtS5Vbr+PWotRavJjfXo/OO5fOrhbCO3NhXnrk6of3PrYurls0/l9vLBwpdqrdZ9tfAo26p8aN8eDrI/Rvevxbmf6d07/5zQiQAAAAAAAAAAAAAAAAAAAPgVVc5NZ+pnGhdCSITLIYTi3PTCdn0cf++eiHM7/wFYjOuF9weaD+aje53u4WNvM5tf/4rrd+KxMnhyZXev3/6LC7En/wQAAP//gfCLfw==") 27.67274026s ago: executing program 0 (id=914): r0 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r0, &(0x7f0000004600)=""/102381, 0x18fed, 0xfffffffffffffffc, 0x0) 27.61916164s ago: executing program 32 (id=914): r0 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r0, &(0x7f0000004600)=""/102381, 0x18fed, 0xfffffffffffffffc, 0x0) 6.125606995s ago: executing program 4 (id=1345): syz_mount_image$bfs(&(0x7f0000000040), &(0x7f0000000000)='./bus\x00', 0x98, &(0x7f00000004c0)=ANY=[], 0xff, 0xa4, &(0x7f00000000c0)="$eJzs0b+pAkEQB+C5e/C4A9EC7OFq0CKswBKMBEEsyFYswdTIwNTkZHFFuGDBQFH4Ptg/P4ZdBuZw3U9jHNFvI/q/eOiT1XoXJf/FKr+gzmeThj655/M8YhYRVaqn7bJZHvMaPF80xd9Hb+sbAAB4XTXIdXTdM53afGk/2RMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAN7kFAAD//z7jFwY=") r0 = syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0xe1, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0xa4d430, &(0x7f0000000300)=ANY=[@ANYRES64=r0, @ANYRES64=r0, @ANYBLOB="63830b3c4fe51e88c0a891f651a37a3ff10013f226c59c2969d1cb0b59989bad3efb19baa1748725fdfe188072ac415fb4ea4d2565b340cd512b994edbc6a91e43616bdb7ac1ed02dbba9bcbfb6bc65cf9ecd8a0bbe88deefbc6948d883540ec5b00a4ccaf43c6fa8119317d0cfa75e42f936a1c11ce91ad2119202b8c", @ANYRES64=r0], 0x1, 0x0, &(0x7f0000000080)) 5.82702225s ago: executing program 3 (id=1349): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x30, r1, 0xc01, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0xbe, 0x42}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x246}]}, 0x30}, 0x1, 0x0, 0x0, 0x8040810}, 0x0) 5.753848921s ago: executing program 3 (id=1350): syz_mount_image$jfs(&(0x7f0000000100), &(0x7f00000000c0)='./file0\x00', 0x1010003, &(0x7f0000000140)=ANY=[@ANYBLOB="696e746567726974792c646973636172643d3078303030303030303030303030303030302c75737271756f74612c696f636861727365743d6370383530006572726f72733d72656d6f756e742d726f2c64697363ea7353b72433e73b", @ANYRESHEX=0x0, @ANYRES32=0x0], 0x23, 0x61fb, &(0x7f0000009680)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000003e40)=""/4121, 0x1019) 5.08779332s ago: executing program 3 (id=1352): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), r0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)={0x44, r1, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010100}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @remote}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x4000) 4.895010293s ago: executing program 4 (id=1354): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f0000000000), 0x4) sendmsg$inet(r0, &(0x7f0000002d40)={0x0, 0x0, &(0x7f0000002980)=[{&(0x7f0000000040)='P', 0xfe1b}], 0x1}, 0x0) 4.888042453s ago: executing program 3 (id=1355): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x14, r1, 0x1, 0x70bd2b, 0x25dfdbfe}, 0x14}}, 0x8) 4.833097204s ago: executing program 3 (id=1356): syz_mount_image$xfs(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x4800802, &(0x7f0000000000), 0x4, 0x982a, &(0x7f0000009b80)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000380)=ANY=[@ANYBLOB="000000004c90020003000000030001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000003000000000000006b3b000000000000000000000000000000000000000000000000000000000000ffffffff"]) 4.35929088s ago: executing program 2 (id=1361): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8607}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x14, 0x16, 0xa01, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) 4.314806651s ago: executing program 2 (id=1362): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a0b0400000000000000000200000028000480240001800b0001007470726f7879000014000280080002401000000b08000140000000020900010073797a30000000000900020073797a32"], 0x7c}}, 0x0) 3.577893391s ago: executing program 3 (id=1366): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_SEQ_GETTIME(r0, 0xc0045103, &(0x7f0000000040)) 3.465630522s ago: executing program 4 (id=1368): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = syz_io_uring_setup(0x3fed, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f00000019c0)={0xf7, 0x0, 0x0, 0x0}, 0x20) 3.331819214s ago: executing program 4 (id=1379): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={'nr', 0x0}, 0x0, 'syz0\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x0, 0x300, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) 3.112141387s ago: executing program 4 (id=1371): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0b0400000000000000000200000028000480240001800b00010065787468647200001400028008000440000000f508000640000000010900010073797a30000000000900020073797a3200000000050007"], 0x84}}, 0x0) 1.612612888s ago: executing program 1 (id=1376): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8607}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x14, 0x16, 0xa01, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) 1.540755159s ago: executing program 1 (id=1377): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fbdbdf2505000000200001"], 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) 1.437265621s ago: executing program 1 (id=1378): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x104880, 0x0, 0x1, 0x0, &(0x7f0000000200)) setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d440fe0000000000002900000002000000", 0xfe60) 1.363271371s ago: executing program 1 (id=1380): r0 = timerfd_create(0x1, 0x80000) timerfd_settime(r0, 0x3, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000007000)={{}, {0x0, 0x989680}}, 0x0) 1.357168851s ago: executing program 5 (id=1381): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) 1.272766643s ago: executing program 5 (id=1382): syz_mount_image$btrfs(&(0x7f00000051c0), &(0x7f0000005200)='./file0\x00', 0x1204408, &(0x7f00000003c0)={[{@compress_force}, {@clear_cache}, {@nodatasum}, {@nossd}, {}, {@space_cache_v1}]}, 0x0, 0x51ab, &(0x7f000000a440)="$eJzs3V9oVFceB/Az+aPxDyY+xV32wX1YWcUFWRF2UdggGF2Whdn1YVnYrFlZxT+7JUgDwb5YS2lBxGCgthSKD33pS0mlUFqqBAsthYogVloUW0teWiiESsGXlpK590xmzvVmxlQbq5+PJHfO/d1z7pnhPsx3zLkTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIIRwcM3Kv+xaPb2urD7dP3bq6LLt507vP3ljaGjLlRAqtf2VvL5n+66/79+95689scPw37JtX1/ZkFnXz7PGkqads/2af/4TQuhOBujMtzs6G/pW0hOEI8UB53XgZv/o5u7BaxN3zmy8eP3QhuJTZ1bPYk9gseTX1fTctTRQ+92RHFFvN1x6laZLNOufXnA/yZMAAO7JpmptU387mr/FrbePpfWkPZC0x5N2fIcw3thYiGzcJWXzXJvWF2meA1lUWFo6z6Sev/71djXtn7STqHEP82w+NI80PWXzHEnqizVPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIfJqx9euvTcy+u3ldWn+8dOHV22/dzp/SdvDA1tuRJCX21/JStXlv+q8w+fLtt57fiRN36zr+ftk515v7jtajg4fBIf/LE3hL0Nlek47JerQqg2F2rN8FKxcLD24M+xAAAAwKPkF7XfHfV2Fge7m9qVWpqs1P5FWVg8cLN/dHP34LWJO2c2Xrx+aMPCx6uWjDdw1/Hq7b65n0pDMI7xNx1vrh4PPVIYZ37piGme/2zmyVsXJn7777L+hfzfN3/+j6+c/A8AAMCPIf+n48yvVf6/+s7zT3UN7n2vrH8h/69tOmUh/8cZx/zfERaW/wEAAOBh9qDz/0BhnPm1yv/fnZ86f/nb46+U9S/k/03t5f+uxmnHnR/FCR/uDWFTq6kDAAAAJeL/u899tBDzevbJQZrXO2ZGe6d6blwtG6+Q/wfay//d9/2ZAQAAAAv1v7F/Hb8wNn6zrF7I/9X28v/SBz5zAAAAoF37Tvz/3PoNIyvL6oX8P9xe/l+eb/OVD1mn9+NfIUz0htAz+2AkK3wQxv9ULwAAAAD3SczpX41u/f7jwel3y44r5P+R+e//H+90ENf/N93/r7D+v6GQ3fVvqxsDAAAA8DgqruePt8fPvrmg7Pv3213/f+uXO3b9d+c/vig7fyH/H2sv/3c2bu/n9/8BAADAAvzcvv/vn4Vx5tfq/v/fDN36et3hZwfL+hfy/3h7+T9uVzQ+van4+jzTG8Ka2Qf53QRfi6c7nBQmuxsK2Quf9Ngde+SFyaUNhZqRpMfve0P49eyDY0lhdSyMJ4WZVXnhbFK4HAv59VAvvJ4UpuKV9sKqfLpp4a1YyBdYTMYVFCvqSyKSHrfLeswW7trjev3kAAAAj5UYnvMs293cDGmUnay0OmB5qwM6Wh3Q2eqAruSA9MCy/WG4uRD3v7jtd7evPPHm06FEIf+fbS//x5diSbYpW/8f4vr//HsN6+v/h2OhLylMxkI1vWNANZ4jC7sn4jn6qnmPmTX1AgAAADzS4ucCnYs8DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH5g7/6D7KrqA4Cf/f0jm91FHAFJNYqA6ZDNJjFKK1MC1UFxpi4OdZw60UR2g9ssJCZhICnthEA7U5hUVKa1o0NDHUdpkUY6jlK1pEyBcaRTm7ZMxWhl/EFtaxnGSodSm87be8/d+87dm/dCdiFLP58/9p33vufnfT/2nXvvOxcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOD/h38ZWPMb+1f89Py6+PfPuOHDewcuve+jWw8c3bRpw5EQJmYf78jCHYMrui785sBlj+3f+flzp/rvP9Cbl8vjYVnjT2d+55ai1uUhfLEjhO40sHooC/Tk94difSuGQjgtzAWKElODWYm04fDQQAgHw1ygqOr+gRCGSoErjzz4wIFG4o6BEM4NIfSlbXy7L2tjIA2c15sFBtPA9u4s8F/HMkXgS51ZAE5afDMUL/pDE80ZRucvV/P661mwjr240uF1xcRofb4fX7LInSrpTR+YOKmnrVIdi6Ly9jjs3bYE3m2V7Xy7p638RSr/hnJsLtQXOientm65bmZ3fKQzjI111dW0SM/z40/feNWJpJfM6zB2YHRBXofP3vme68+afMuNt24/54m177vg6Ml2s27zLra+kL/mlszzGG30ebIE3n6Vb0krfekKIfzcB7tv6vrtI5+qi1fm/6PHn//Hl3O87WzKHWt9bjibm8dHhmLiqeFsbg4AAABLxlLYa/qjs1/xe6s61zxeV19l/r+yveP/8ZB/PpnPRns4hI2ziZtHQjhz9vEscHds7gMjIbxmNjXRHLgkCRwO4azZxKqiqqREfyyxMgk8OZwHNiaBh2NgIgl8OgZuTwK3xMChJHBVDBxOApfGQJhuHsfPD+fjaDswEAObs414KJ6F8JPh2Fqyrb5VVAUAALBA8tlhT/Pd0rkOJ5shTi8PDbTKEM/Ars3Ql9SQzmCLaVVtDd2tauhsVUMx7n3HH36l5o5WNVdOw+hoznDpK/7w/BVfu+ELoUZl/j9+/Pl/3zwd6agc/w/hitm/MXdnHpkp4psnmjIAAAAAJ2HtG2a+9idnv+nNdfHK/H9je+f/x30iXaXM4dG4G2LbSAjjzYGs2jdXA9lR72V5AAAAAJaC4nh8cSx8Or/NTtFO59PV/BMnmD8e+N84b/5fCpOnb/vBUxvq+luZ/0+0d/7/YPNt1omHYy8+NhJCfynwSOxlIzBrZQx89+LmQD7+h+MGuC1WlZ+YUFR1WyyxOQbGk8DBuhLfKEqc2RzIn6yi8ZuLcUznJUoBAAAAeMHF3QHxuHw8///Ctd/70KaP7/1cXbnK/H/ziZ3/PzsPrpzeP7MshDXdIXSlPwx4dDBbGDAGhjryxFcHs7q60qpuGgzhosbA0qqeyNf/707XGDwykFUVA2e+9rNPn9dIfGoghDXlwGPvvWt2x8juJFA0/qsDIby6Mdq08S/0Z433pI3/QX8IryoFiqo+0B9Co7HetKoH+/LrGKRV/VlfCKeXAkVVb+wLYU8AYImK/0onyw/u2rN325aZmamdi5iI+/AHwtbpmamxq7bPTPbV9Gky6XPTMkY3VcfU2ebYj+ZLFN1z+dhIO+nid4Lj5b7k+/ErJw7m9+N3oZ7Zca7rabq7Ph3y68+pNpEO6cUY8mC5krknsVJ/zN8bloX+63ZN7Ry7Ycvu3TvXZn/bzb4u+xsPM2Xbam26rQbn61sbL492F0N/vtuq6TJXa3Zfs2PNrj17V09fs+Xqqaunrn3D+LrxdevHN7zpwjWNUY1nf1sM9fz5qk6Geuyu6hDavQbU8x3qK7tLlbwQnxoSEhJLLbHl4q/+5b1nfWJZ3cdPZf6/4/jz//ipEz/58/UZ6o7/j8bD/Nnjc4f5N8fAwXaP/4/WHc0vTgxYmQT2xcA+h/kBAAB4aYi7G+PezLhXuuem1WN//MlHnqwrV5n/72vv9/8LtP5/sXT95XXL/K+KJcbr1v9Pl/kv1v/fV7f+f7rMf7H+/8EXYf3/64pAskl+Yv1/AADgpeCFW/+/5fL+6QUCKhlaLu+fXiCgkqHlMv7tXiDghNf/f/tzr+u55iOvviXUqMz/b29v/m/hfgAAADh13HVkQ8eD//o/D9XFK/P/g+3N/1/49f9C3fn/K+sCE3ULA1r/DwAAgCWqbv2/9a/78ebP/WzFD+vKVeb/h9qb/8fTLjqbcsdanxvO1rQL6Zp2Tw0XPxkAAACApaEzjI21u6Jp08qolzz/Nh/PlwI9Xrrsr758zT8+8tb39tfVV5n/H25v/t/0u4xn73zP9WdNvuXG527dfs4Ta993wdG54/8AAADA4ml3vwQAAAAAAAAAAAAAAPDie3rv5Lv++ew7P1MXr/z+P1wx+3jd7//jdf/i7wte3pQ71tp6/b/8/pXvuHfP7JKFjw6HcE45sG3/ttNCfm3+88uBBzatOqOR2J+W+Mp3Lv1BI/H+NPC21S97ppG4KAlsjosknpUG4lUVn1meBOLyin+fBuL2OJQGevPA7y7PxtGRbqsfDWXbqiPdVo8PhTBSChTb6otDWRsd6QDvSALFAD+UBuIAfyUPdKa9undZ1qsYGIpF/2hZ1isAAE5Z8VtgT9g6PTM1Hr/Cx9tXdjffRk1Llt1UrbajzeaP5kuT3XP52Eg76a70u+jctcZ7Ql9jCGsrX1fLWTpmR7kwtbTYdC+vGXKr1d7a/XX2iW663voRDWQjGrtq+8xkT8uBr2+dZV13yyxrK5OdcpbO2U3aRi1t9KWNEbW5bdrocrzfGcbGupJcvxiDo6HJQr0iyuv81b0Kynn2Tb7xb75x7Nihuvoq8//R9ub/feVxPZNfDGBfvLLezSMhnNnmiAAAAIB2fevL/7Ru+yd+55709ort1956weCPLq4rV5n/r2xv/h93jOWHgrO9HYfj9f+L+f9oFrg7NveBkRBeM5uaiCWyC+pfHkuMZ4G74w6TVbHE5onmqvpj4FASeHI4DxxOAg/HQL6X4rMh35XzkeEQNsymrmgusSOWGE0C74yBlUlgLAbGk8DyGNiYBP59eR6YSAJfj4Ew3byt/ny5vSsAAMDzkM+zeprvhnSed6i7VYaOVhkGW2XobJWhr1WGulHE+/fFDD3JySsdpUw9aa0DSS2VDPFi+Cfcr0qG8I3mnGnBStPx/IPifIOO5gz/dtnrv33erlXtX/9/vL35/2Dzbdb6w3H+P3f9vyzwSOzex+Kp4ytj4LsXNwfyHQMPx8nubUVVE3mJfNJ+WyyxMQZWJoEdMbAxCWy+Ig8cPKM5kM+0i8ZvLhqfzkuUAgAAAPCCizsI4m6aOP//0/+++3MH/uHav64rV5n/b2xv/h/bW1Zu7Jai1uUhfLFjrjdFYPVQFoj7MYbiz+NXDIVwWmkHR1FiajAr0Zs0HB4ayH6h3ptWdf9AtsZAvH/lkQcfONBI3DEQwrmlvS9FG9/uy9oYSAPn9WaBwTSwvTsLxD0/ReBLnVkATlqxVzC+oPJTXQqj85eref29VK4Jmg6vsg90nnzz/eZqsfSlD+T7VAsn9rRVqmNRVN4eh73bluK7bdS7rfxFKv+Gcmwu1Bc6J6e2brluZnd8pPxL1opFep7Lv1JtJ70Ar8N9z7+3rfWlHRhPPj7G5y83/+uwI1b37J3vuf6sybfceOv2c55Y+74LjrbdjRrxh8Lv/uTLRsubd7H1hfw1t+Q+TyZ8nizFfwMrPW2NGexTv//V//jp4z+ri1fm/xPtzf+7k9tZz8aNuWskhNeXNu6jcfP/8kj2OVgKZJ+Sp1cD2SH37w3XfnICAADAQit2dxT7C6bz2+yE8HSeXM0/cYL54/6KjfPmb7ffW29+aP8P/+6Or9TFK/P/zcef//cn3XT83/F/Fonj//M61XdF96cP7DupXdGV6lgUjv/P61R/tzn+Py/H/x3/n4/j/y04/j+vU/1pq3xL2uFLVwjh6++/8+33bP+18+rilfn/jvbm/9b/m3/RvmL9v8116//tqFv/b5/1/wAAgEVVs9BcOs+rrN5XyZCu3lfJ0HKBwJZLDFr/74TX/3vrO//3+mOvuGRnqFGZ/+9rb/4fXw7Lyq0vlfX/Vl5RU9XtMbDDwoAAAACciup2EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDievcvPLl8029eOF0X//4ZN3x478Cl931064GjmzZtOBJClrUjC3cMrui68JsDlz22f+fnz53qv/9AX16uJ789uyl3rPW54RAOlh4Ziomnhht35gJXvuPePd2NxKPDIZxTDmzbv+20RuLTwyGcXw48sGnVGY3E/rTEV75z6Q8aifengbetftkzjcRFeaAj7e4nl2fd7Ui7e2B5CCOlQNHdX1/eXFXRxmV5oDNt4zNDWRsxMBSLfnwoayMGZmKJ6f4Q1nSH0JVW9bW+rKqutKq/6Muq6kqr+q2+EC4KIXSnVX2nN6uqOx353/ZmVcXAma/97NPnNRIHe0NYUw489t67NjQSH0oCRePv6g3h1Y2XTNr4fT1Z4z1p43f0hPCqEEJvWuI/u7MSvWmJJ7pDOL0UKBr/YHcIewIvCfHDZ7L84K49e7dtmZmZ2rmIid68rYGwdXpmauyq7TOTfUmf6nSU0sduOn78eI4+feNVjdt7Lh8baSfdnZfrme3yup6mu+sXqvftOtHex34NliuZez4q9cf8vWFZ6L9u19TOsRu27N69c232t93s67K/XXk021ZrF2pbdbYoHz3fbXV+uZI1u6/ZsWbXnr2rp6/ZcvXU1VPXvmF83fi69eMb3nThmsaoxrO/CzHUu44fX4yhvrK7VMkL8QEgISGx1BKdTZ9u46f6P73KF/25jvaEvtkP6Mq0opylY3aUCzHoS6rxrkUadGVKUhnR2srEoZJlXess6yuTibksA1mW2e91lclhuabO2U0a73eGsbHazTLafLe8eX88z+Zt1+P5pms3DQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/B87cCAAAAAAAOT/2ghVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV2IEDAQAAAAAg/9dGqKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsIOHAsAAAAACPO3DqNnAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBSAAAA//+3Rsqd") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000000340)={0x2020}, 0xcb0a) 1.272576543s ago: executing program 1 (id=1383): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=ANY=[@ANYBLOB="050000000300"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64], 0x48}, 0x300}, 0x0) 373.131295ms ago: executing program 5 (id=1384): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), r0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)={0x44, r1, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010100}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @remote}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x4000) 309.862586ms ago: executing program 4 (id=1385): mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4000004, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_buf(r0, 0x107, 0x6, 0x0, &(0x7f00000000c0)) 283.676646ms ago: executing program 2 (id=1386): r0 = socket(0x2b, 0x1, 0x1) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1ff0000aa}}, 0x44) sendto$inet6(r0, 0x0, 0x0, 0x200444e1, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) 275.503756ms ago: executing program 5 (id=1387): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) socket$unix(0x1, 0x5, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="fc11000012000102000000000000000000000000bf401db100"/56, @ANYRES32=r0, @ANYBLOB="00000000000000000000000000000000f504010007c01c00"], 0x11fc}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000000) 223.179817ms ago: executing program 2 (id=1389): socket$packet(0x11, 0x2, 0x300) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400000014000306000000000000000011"], 0x24}}, 0x0) 159.488648ms ago: executing program 5 (id=1391): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x30, r1, 0xc01, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0xbe, 0x42}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x246}]}, 0x30}, 0x1, 0x0, 0x0, 0x8040810}, 0x0) 60.558759ms ago: executing program 5 (id=1392): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x14, r1, 0x1, 0x70bd2b, 0x25dfdbfe}, 0x14}}, 0x8) 60.497849ms ago: executing program 2 (id=1393): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = syz_io_uring_setup(0x3fed, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f00000019c0)={0xf7, 0x0, 0x0, 0x0}, 0x20) 164.23µs ago: executing program 1 (id=1394): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) syz_emit_ethernet(0x7e, &(0x7f0000000240)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @rand_addr, {[@timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast2}, {@remote}, {@private=0xa010102}, {@private=0xa010101, 0x8}, {@remote, 0x1}, {@multicast2, 0x5}, {@empty, 0xb}]}, @rr={0x7, 0x3, 0xf7}]}}}}}}}, 0x0) 0s ago: executing program 2 (id=1395): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000400000002"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r0, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r0, &(0x7f0000000080), &(0x7f0000000100)=""/17, 0x2}, 0x20) kernel console output (not intermixed with test programs): y bread(block 64) failed [ 49.955710][ T4262] FAT-fs (loop0): Directory bread(block 65) failed [ 49.957710][ T4262] FAT-fs (loop0): Directory bread(block 66) failed [ 49.959516][ T4262] FAT-fs (loop0): Directory bread(block 67) failed [ 49.963577][ T4078] Bluetooth: hci1: command 0x0419 tx timeout [ 49.967376][ T4235] XFS (loop3): Ending clean mount [ 49.985541][ T4262] FAT-fs (loop0): Directory bread(block 68) failed [ 50.016898][ T4262] FAT-fs (loop0): Directory bread(block 69) failed [ 50.018923][ T4262] FAT-fs (loop0): Directory bread(block 70) failed [ 50.030499][ T4078] Bluetooth: hci0: command 0x0419 tx timeout [ 50.033330][ T4078] Bluetooth: hci4: command 0x0419 tx timeout [ 50.035042][ T4078] Bluetooth: hci3: command 0x0419 tx timeout [ 50.036768][ T4078] Bluetooth: hci2: command 0x0419 tx timeout [ 50.050679][ T4246] loop4: detected capacity change from 0 to 32768 [ 50.074389][ T4262] FAT-fs (loop0): Directory bread(block 71) failed [ 50.076348][ T4262] FAT-fs (loop0): Directory bread(block 72) failed [ 50.078109][ T4262] FAT-fs (loop0): Directory bread(block 73) failed [ 50.141396][ T4246] XFS (loop4): Mounting V5 Filesystem [ 50.146792][ T4038] XFS (loop3): Unmounting Filesystem [ 50.333008][ T4246] XFS (loop4): Ending clean mount [ 50.423723][ T4283] loop1: detected capacity change from 0 to 4096 [ 50.453532][ T4283] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 50.539898][ T4037] XFS (loop4): Unmounting Filesystem [ 50.589323][ T4027] ntfs3: loop1: ntfs_sync_fs r=1a failed, -22. [ 50.606162][ T4027] ntfs3: loop1: ntfs_evict_inode r=1a failed, -22. [ 50.608133][ T4027] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 50.884335][ T4305] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 51.221783][ T4331] loop4: detected capacity change from 0 to 256 [ 51.248107][ T4328] loop0: detected capacity change from 0 to 4096 [ 51.288947][ T4328] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 51.329336][ T4331] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 51.347670][ T4331] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 51.367360][ T4331] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 51.375808][ T4338] nbd: socks must be embedded in a SOCK_ITEM attr [ 51.406250][ T4328] ntfs3: loop0: ino=5, "/" directory corrupted [ 51.533353][ T4345] netlink: 108 bytes leftover after parsing attributes in process `syz.4.103'. [ 51.590032][ T4350] netlink: 8 bytes leftover after parsing attributes in process `syz.1.105'. [ 52.315928][ T4402] capability: warning: `syz.1.130' uses 32-bit capabilities (legacy support in use) [ 52.479106][ T4416] netlink: 12 bytes leftover after parsing attributes in process `syz.1.137'. [ 52.557648][ T4414] loop4: detected capacity change from 0 to 4096 [ 52.625696][ T4414] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 52.806009][ T4433] loop1: detected capacity change from 0 to 64 [ 52.816989][ T4432] loop0: detected capacity change from 0 to 256 [ 52.864525][ T4432] exfat: Deprecated parameter 'utf8' [ 52.866203][ T4432] exfat: Deprecated parameter 'utf8' [ 52.892093][ T4432] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x23a77120, utbl_chksum : 0xe619d30d) [ 52.986326][ T4436] loop2: detected capacity change from 0 to 4096 [ 53.018018][ T4385] loop3: detected capacity change from 0 to 40427 [ 53.034196][ T4436] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 53.061623][ T4385] F2FS-fs (loop3): Small segment_count (9 < 1 * 24) [ 53.063542][ T4385] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 53.090341][ T4443] loop1: detected capacity change from 0 to 1024 [ 53.104826][ T4444] loop0: detected capacity change from 0 to 2048 [ 53.105763][ T4436] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 53.144297][ T4385] F2FS-fs (loop3): Found nat_bits in checkpoint [ 53.185854][ T4449] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 53.189150][ T4385] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 53.192679][ T4385] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 53.267763][ T4451] netlink: 8 bytes leftover after parsing attributes in process `syz.1.153'. [ 53.277435][ T4038] attempt to access beyond end of device [ 53.277435][ T4038] loop3: rw=2049, want=45104, limit=40427 [ 53.293660][ T4444] NILFS error (device loop0): nilfs_dotdot: directory #12 missing '..' [ 53.298726][ T4444] Remounting filesystem read-only [ 53.569824][ T4455] netlink: 12 bytes leftover after parsing attributes in process `syz.4.156'. [ 54.359605][ C0] sched: RT throttling activated [ 54.440588][ T4018] Bluetooth: hci2: command 0x0c2d tx timeout [ 54.890240][ T4457] loop2: detected capacity change from 0 to 262144 [ 54.900300][ T4469] loop4: detected capacity change from 0 to 40427 [ 54.950069][ T4469] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x1ffff [ 54.954360][ T4469] F2FS-fs (loop4): invalid crc value [ 54.971577][ T4469] F2FS-fs (loop4): Found nat_bits in checkpoint [ 55.016594][ T4457] F2FS-fs (loop2): Found nat_bits in checkpoint [ 55.030713][ T4469] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 55.056937][ T4457] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 55.401540][ T4505] netlink: 16 bytes leftover after parsing attributes in process `syz.3.173'. [ 55.627183][ T4516] loop4: detected capacity change from 0 to 1024 [ 55.696679][ T4516] attempt to access beyond end of device [ 55.696679][ T4516] loop4: rw=0, want=5780, limit=1024 [ 55.729326][ T4518] mmap: syz.3.178 (4518) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 55.796830][ T4483] loop1: detected capacity change from 0 to 32768 [ 55.863962][ T4483] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.164 (4483) [ 55.920555][ T4483] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 55.923249][ T4483] BTRFS info (device loop1): enabling auto defrag [ 55.925013][ T4483] BTRFS info (device loop1): use no compression [ 55.926800][ T4483] BTRFS info (device loop1): force clearing of disk cache [ 55.928866][ T4483] BTRFS info (device loop1): max_inline at 4096 [ 55.963500][ T4483] BTRFS info (device loop1): disabling free space tree [ 55.965507][ T4483] BTRFS info (device loop1): has skinny extents [ 56.064867][ T4507] loop2: detected capacity change from 0 to 32768 [ 56.136615][ T4541] (unnamed net_device) (uninitialized): (slave ip_vti0): Device is not bonding slave [ 56.139390][ T4541] (unnamed net_device) (uninitialized): option active_slave: invalid value (ip_vti0) [ 56.161410][ T4507] XFS (loop2): Mounting V5 Filesystem [ 56.366686][ T4483] BTRFS info (device loop1): enabling ssd optimizations [ 56.386691][ T4483] BTRFS info (device loop1): clearing free space tree [ 56.388859][ T4483] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 56.396108][ T4507] XFS (loop2): Ending clean mount [ 56.431965][ T4483] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 56.641846][ T4028] XFS (loop2): Unmounting Filesystem [ 56.829304][ T4588] loop0: detected capacity change from 0 to 164 [ 56.901789][ T4588] Unable to read rock-ridge attributes [ 56.936131][ T4588] Unable to read rock-ridge attributes [ 56.948984][ T4588] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 56.959185][ T4040] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 11 /dev/loop1 scanned by udevd (4040) [ 56.986751][ T4594] netlink: 12 bytes leftover after parsing attributes in process `syz.1.199'. [ 57.157359][ T4567] loop4: detected capacity change from 0 to 32768 [ 57.197746][ T4605] loop0: detected capacity change from 0 to 16 [ 57.300471][ T4605] erofs: (device loop0): mounted with root inode @ nid 36. [ 57.539988][ T4620] netlink: 12 bytes leftover after parsing attributes in process `syz.0.212'. [ 57.693781][ T4628] loop4: detected capacity change from 0 to 512 [ 57.724016][ T4628] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 57.741152][ T4628] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002] [ 57.743506][ T4628] System zones: 1-12 [ 57.745241][ T4628] EXT4-fs (loop4): orphan cleanup on readonly fs [ 57.839758][ T4628] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.216: bg 0: block 361: padding at end of block bitmap is not set [ 57.869781][ T4628] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 57.887019][ T4628] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.216: invalid indirect mapped block 12 (level 1) [ 57.912157][ T4628] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.216: invalid indirect mapped block 2 (level 2) [ 57.938978][ T4628] EXT4-fs (loop4): 1 truncate cleaned up [ 57.940819][ T4628] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,,errors=continue. Quota mode: none. [ 57.994589][ T4628] EXT4-fs (loop4): ext4_remount: Checksum for group 0 failed (17031!=33349) [ 58.019466][ T4603] loop3: detected capacity change from 0 to 40427 [ 58.064235][ T4603] F2FS-fs (loop3): invalid crc value [ 58.084778][ T4641] netlink: 20 bytes leftover after parsing attributes in process `syz.2.222'. [ 58.105885][ T4603] F2FS-fs (loop3): Found nat_bits in checkpoint [ 58.190063][ T4603] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 58.328212][ T4038] attempt to access beyond end of device [ 58.328212][ T4038] loop3: rw=2049, want=45104, limit=40427 [ 58.423210][ T4658] loop2: detected capacity change from 0 to 4096 [ 58.463404][ T4658] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 58.485919][ T4658] ntfs3: loop2: Inode r=19 is not in use! [ 58.487641][ T4658] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 58.574254][ T4670] usb usb8: usbfs: interface 0 claimed by hub while 'syz.1.235' resets device [ 58.662144][ T4674] tipc: Enabling of bearer rejected, failed to enable media [ 58.804724][ T4645] loop0: detected capacity change from 0 to 32768 [ 58.852534][ T4645] BTRFS: device fsid 97240a68-9a28-4597-b04c-66b27e1182f2 devid 1 transid 8 /dev/loop0 scanned by syz.0.223 (4645) [ 58.862808][ T4645] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 58.865460][ T4645] BTRFS info (device loop0): using free space tree [ 58.867321][ T4645] BTRFS info (device loop0): has skinny extents [ 59.025064][ T4705] netlink: 8 bytes leftover after parsing attributes in process `syz.4.248'. [ 59.040074][ T4705] netlink: 4 bytes leftover after parsing attributes in process `syz.4.248'. [ 59.043152][ T4705] netlink: 'syz.4.248': attribute type 14 has an invalid length. [ 59.213354][ T4645] BTRFS info (device loop0): enabling ssd optimizations [ 59.485791][ T4687] loop3: detected capacity change from 0 to 32768 [ 59.598076][ T4744] loop2: detected capacity change from 0 to 256 [ 59.608402][ T4745] netlink: 16 bytes leftover after parsing attributes in process `syz.0.257'. [ 59.613522][ T4687] ERROR: (device loop3): dbAlloc: unable to allocate blocks [ 59.613522][ T4687] [ 59.617569][ T4687] ERROR: (device loop3): remounting filesystem as read-only [ 59.619511][ T4687] jfs_rename: dtInsert returned -EIO [ 59.718681][ T4718] loop4: detected capacity change from 0 to 32768 [ 59.725928][ T4744] netlink: 56 bytes leftover after parsing attributes in process `syz.2.259'. [ 59.788979][ T4718] XFS: ikeep mount option is deprecated. [ 59.846754][ T4718] XFS (loop4): Mounting V5 Filesystem [ 59.902983][ T4761] netlink: 256 bytes leftover after parsing attributes in process `syz.3.261'. [ 59.906899][ T4758] netlink: 8 bytes leftover after parsing attributes in process `syz.2.263'. [ 60.082769][ T4718] XFS (loop4): Ending clean mount [ 60.220612][ T4037] XFS (loop4): Unmounting Filesystem [ 60.308342][ T4776] loop2: detected capacity change from 0 to 1024 [ 60.400369][ T4776] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 60.409098][ T4763] loop3: detected capacity change from 0 to 32768 [ 60.615101][ T4791] loop1: detected capacity change from 0 to 128 [ 60.730309][ T4794] mkiss: ax0: crc mode is auto. [ 60.906872][ T4811] dccp_invalid_packet: P.Data Offset(10) too large [ 60.925632][ T4814] netlink: 20 bytes leftover after parsing attributes in process `syz.1.287'. [ 61.299490][ T4838] loop1: detected capacity change from 0 to 64 [ 61.637527][ T4845] loop4: detected capacity change from 0 to 8192 [ 61.684193][ T4820] loop0: detected capacity change from 0 to 32768 [ 61.701537][ T4845] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 61.720536][ T4820] XFS: ikeep mount option is deprecated. [ 61.810872][ T4862] loop2: detected capacity change from 0 to 1024 [ 61.815909][ T4820] XFS (loop0): Mounting V5 Filesystem [ 61.859085][ T4862] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 61.938754][ T4820] XFS (loop0): Ending clean mount [ 61.952076][ T4843] loop3: detected capacity change from 0 to 32768 [ 61.966717][ T4862] hfsplus: filesystem is marked journaled, leaving read-only. [ 61.978949][ T4820] XFS (loop0): Quotacheck needed: Please wait. [ 61.996186][ T4843] XFS (loop3): Mounting V5 Filesystem [ 62.054806][ T4820] XFS (loop0): Quotacheck: Done. [ 62.130839][ T4843] XFS (loop3): Ending clean mount [ 62.135022][ T4843] XFS (loop3): Quotacheck needed: Please wait. [ 62.137878][ T4033] XFS (loop0): Unmounting Filesystem [ 62.179342][ T4843] XFS (loop3): Quotacheck: Done. [ 62.255845][ T4038] XFS (loop3): Unmounting Filesystem [ 63.197812][ T4920] loop4: detected capacity change from 0 to 2048 [ 63.250950][ T4920] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=18576, location=18576 [ 63.267768][ T4920] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 63.304407][ T4912] loop0: detected capacity change from 0 to 32768 [ 63.664422][ T4938] netlink: 144 bytes leftover after parsing attributes in process `syz.4.340'. [ 63.826258][ T4922] loop1: detected capacity change from 0 to 32768 [ 63.879331][ T4740] kernel write not supported for file /dsp (pid: 4740 comm: kworker/0:12) [ 63.933976][ T4922] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.333 (4922) [ 63.964062][ T4948] loop2: detected capacity change from 0 to 128 [ 63.984376][ T4922] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 63.987514][ T4922] BTRFS info (device loop1): force zlib compression, level 3 [ 63.989556][ T4922] BTRFS info (device loop1): force clearing of disk cache [ 64.002538][ T4922] BTRFS info (device loop1): setting nodatasum [ 64.004440][ T4922] BTRFS info (device loop1): allowing degraded mounts [ 64.006268][ T4922] BTRFS info (device loop1): enabling disk space caching [ 64.019690][ T4922] BTRFS info (device loop1): disk space caching is enabled [ 64.021625][ T4922] BTRFS info (device loop1): has skinny extents [ 64.025456][ T4948] EXT4-fs (loop2): mounted filesystem without journal. Opts: dax=never,acl,,errors=continue. Quota mode: none. [ 64.260594][ T4922] BTRFS info (device loop1): clearing free space tree [ 64.262557][ T4922] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 64.265203][ T4922] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 64.314821][ T4932] loop0: detected capacity change from 0 to 32768 [ 64.371788][ T4944] loop4: detected capacity change from 0 to 32768 [ 64.389181][ T4936] loop3: detected capacity change from 0 to 32768 [ 64.415247][ T4944] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.343 (4944) [ 64.472533][ T4936] XFS (loop3): Mounting V5 Filesystem [ 64.491236][ T4944] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 64.493574][ T4944] BTRFS info (device loop4): enabling auto defrag [ 64.497807][ T4944] BTRFS info (device loop4): disabling tree log [ 64.499530][ T4944] BTRFS info (device loop4): use no compression [ 64.504130][ T4944] BTRFS info (device loop4): force clearing of disk cache [ 64.506028][ T4944] BTRFS info (device loop4): disabling free space tree [ 64.508116][ T4944] BTRFS info (device loop4): has skinny extents [ 64.523866][ T4969] dccp_invalid_packet: P.Data Offset(10) too large [ 64.631090][ T4936] XFS (loop3): Ending clean mount [ 64.636376][ T4944] BTRFS info (device loop4): enabling ssd optimizations [ 64.642272][ T4944] BTRFS info (device loop4): clearing free space tree [ 64.647022][ T4944] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 64.653207][ T4936] XFS (loop3): Quotacheck needed: Please wait. [ 64.660027][ T4944] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 64.702134][ T5001] netlink: 28 bytes leftover after parsing attributes in process `syz.2.349'. [ 64.728035][ T4936] XFS (loop3): Quotacheck: Done. [ 65.060124][ T4038] XFS (loop3): Unmounting Filesystem [ 65.152540][ T4881] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 10 /dev/loop1 scanned by udevd (4881) [ 65.329123][ T5018] netlink: 'syz.4.357': attribute type 3 has an invalid length. [ 65.387749][ T5020] loop0: detected capacity change from 0 to 64 [ 65.540758][ T5020] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing [ 65.620129][ T5012] loop2: detected capacity change from 0 to 32768 [ 65.683527][ T5033] capability: warning: `syz.0.362' uses deprecated v2 capabilities in a way that may be insecure [ 65.712627][ T5012] XFS (loop2): Mounting V5 Filesystem [ 65.782485][ T5012] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 65.881895][ T5012] XFS (loop2): Starting recovery (logdev: internal) [ 65.929946][ T5012] XFS (loop2): Ending recovery (logdev: internal) [ 66.062181][ T5056] netlink: 12 bytes leftover after parsing attributes in process `syz.4.370'. [ 66.167661][ T4028] XFS (loop2): Unmounting Filesystem [ 66.411582][ T5079] loop1: detected capacity change from 0 to 128 [ 66.455693][ T5079] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 66.461879][ T5079] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 66.478064][ T5031] loop3: detected capacity change from 0 to 32768 [ 66.637694][ T5031] JBD2: Ignoring recovery information on journal [ 66.739160][ T5031] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 66.759726][ T5091] netlink: 4 bytes leftover after parsing attributes in process `syz.0.387'. [ 66.958205][ T4038] ocfs2: Unmounting device (7,3) on (node local) [ 66.979475][ T5075] loop4: detected capacity change from 0 to 32768 [ 67.050983][ T5108] Injecting memory failure for pfn 0x11f1d5 at process virtual address 0x20000000 [ 67.067565][ T5108] Memory failure: 0x11f1d5: recovery action for clean LRU page: Recovered [ 67.082157][ T5108] Injecting memory failure for pfn 0x12ffd1 at process virtual address 0x20001000 [ 67.084871][ T5108] Memory failure: 0x12ffd1: recovery action for clean LRU page: Recovered [ 67.087246][ T5108] Injecting memory failure for pfn 0x12ffd2 at process virtual address 0x20002000 [ 67.114704][ T5108] Memory failure: 0x12ffd2: recovery action for already truncated LRU page: Ignored [ 67.276848][ T5121] netlink: 'syz.1.401': attribute type 2 has an invalid length. [ 67.475034][ T5137] usb usb8: usbfs: process 5137 (syz.1.408) did not claim interface 0 before use [ 67.486603][ T5140] loop0: detected capacity change from 0 to 128 [ 67.518675][ T5142] netlink: 24 bytes leftover after parsing attributes in process `syz.1.411'. [ 67.554339][ T5140] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 67.812454][ T5155] lo speed is unknown, defaulting to 1000 [ 67.814245][ T5155] lo speed is unknown, defaulting to 1000 [ 67.831835][ T5155] lo speed is unknown, defaulting to 1000 [ 67.837351][ T5155] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 67.849255][ T5155] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 67.916241][ T5155] lo speed is unknown, defaulting to 1000 [ 67.918760][ T5155] lo speed is unknown, defaulting to 1000 [ 67.935389][ T5155] lo speed is unknown, defaulting to 1000 [ 67.937765][ T5155] lo speed is unknown, defaulting to 1000 [ 67.944355][ T5112] loop2: detected capacity change from 0 to 40427 [ 67.946819][ T5155] lo speed is unknown, defaulting to 1000 [ 68.020596][ T5112] F2FS-fs (loop2): invalid crc value [ 68.022198][ T5112] F2FS-fs (loop2): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 68.035645][ T5112] F2FS-fs (loop2): Found nat_bits in checkpoint [ 68.063088][ T5112] F2FS-fs (loop2): recover fsync data on readonly fs [ 68.068699][ T5112] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0 [ 68.079312][ T5112] F2FS-fs (loop2): Cannot turn on quotas: -2 on 1 [ 68.109866][ T5112] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 68.501678][ T5196] loop2: detected capacity change from 0 to 64 [ 68.677573][ T374] attempt to access beyond end of device [ 68.677573][ T374] loop2: rw=1, want=268435470, limit=64 [ 68.688027][ T374] Buffer I/O error on dev loop2, logical block 134217734, lost async page write [ 68.745503][ T5203] loop1: detected capacity change from 0 to 512 [ 68.806232][ T5179] loop4: detected capacity change from 0 to 32768 [ 68.839840][ T5179] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 68.842415][ T5179] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 68.849855][ T5210] Soft offlining pfn 0x1310e0 at process virtual address 0x202e0000 [ 68.879074][ T5210] Memory failure: 0x1310e0: unhandlable page. [ 68.904882][ T5203] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,barrier=0x0000000000001000,grpjquota=,norecovery,dioread_lock,,errors=continue. Quota mode: writeback. [ 68.920444][ T5179] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 68.947334][ T4740] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 68.950294][ T4740] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 69.134596][ T4740] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 184ms [ 69.137420][ T4740] gfs2: fsid=syz:syz.0: jid=0: Done [ 69.139754][ T5179] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 69.154823][ T5179] gfs2: fsid=syz:syz.0: gfs2_check_dirent: gfs2_dirent too small (not first in block) [ 69.157700][ T5179] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 69.157700][ T5179] inode = 12 2341 [ 69.157700][ T5179] function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 602 [ 69.177471][ T5179] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 69.184267][ T5179] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 69.186646][ T5179] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 69.211100][ T5179] gfs2: fsid=syz:syz.0: File system withdrawn [ 69.212812][ T5179] CPU: 1 PID: 5179 Comm: syz.4.425 Not tainted 5.15.183-syzkaller #0 [ 69.215056][ T5179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 69.217792][ T5179] Call trace: [ 69.218683][ T5179] dump_backtrace+0x0/0x43c [ 69.219977][ T5179] show_stack+0x2c/0x3c [ 69.221108][ T5179] __dump_stack+0x30/0x40 [ 69.222281][ T5179] dump_stack_lvl+0xf8/0x160 [ 69.223540][ T5179] dump_stack+0x1c/0x5c [ 69.224682][ T5179] gfs2_withdraw+0xc60/0x129c [ 69.226010][ T5179] gfs2_consist_inode_i+0xcc/0xe8 [ 69.227362][ T5179] gfs2_dirent_scan+0x458/0x584 [ 69.228697][ T5179] gfs2_dir_read+0x630/0x138c [ 69.229997][ T5179] gfs2_readdir+0x134/0x194 [ 69.231260][ T5179] iterate_dir+0x1f0/0x4cc [ 69.232446][ T5179] __arm64_sys_getdents64+0x11c/0x340 [ 69.233887][ T5179] invoke_syscall+0x98/0x2b8 [ 69.235181][ T5179] el0_svc_common+0x138/0x258 [ 69.236479][ T5179] do_el0_svc+0x58/0x14c [ 69.237610][ T5179] el0_svc+0x78/0x1e0 [ 69.238732][ T5179] el0t_64_sync_handler+0xcc/0xe4 [ 69.240090][ T5179] el0t_64_sync+0x1a0/0x1a4 [ 69.281576][ T5229] loop2: detected capacity change from 0 to 256 [ 69.349067][ T5229] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011f41, chksum : 0x31e44978, utbl_chksum : 0xe619d30d) [ 69.351141][ T5230] loop3: detected capacity change from 0 to 4096 [ 69.425599][ T5230] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 69.454130][ T5236] sp0: Synchronizing with TNC [ 69.486368][ T5235] [U] è [ 69.633520][ T2058] ieee802154 phy0 wpan0: encryption failed: -22 [ 69.635603][ T2058] ieee802154 phy1 wpan1: encryption failed: -22 [ 69.716364][ T5234] loop0: detected capacity change from 0 to 40427 [ 69.777297][ T5234] F2FS-fs (loop0): build fault injection attr: rate: 771, type: 0x1ffff [ 69.785995][ T5234] F2FS-fs (loop0): invalid crc value [ 69.833027][ T5234] F2FS-fs (loop0): Found nat_bits in checkpoint [ 69.879795][ T5234] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 69.923432][ T4033] attempt to access beyond end of device [ 69.923432][ T4033] loop0: rw=2049, want=45104, limit=40427 [ 69.933534][ T5257] netlink: 'syz.3.460': attribute type 11 has an invalid length. [ 69.974203][ T5259] loop1: detected capacity change from 0 to 1024 [ 70.078851][ T5259] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv1,bsddf,mb_optimize_scan=0x0000000000000001,journal_ioprio=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,resuid=0x0000000000000000,usrquota,acl,noinit_itable,,errors=continue. Quota mode: writeback. [ 70.202120][ T5271] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2825: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 70.313417][ T5242] loop2: detected capacity change from 0 to 32768 [ 70.431634][ T5242] XFS (loop2): Mounting V5 Filesystem [ 70.510735][ T5242] XFS (loop2): Ending clean mount [ 70.522803][ T5242] XFS (loop2): Quotacheck needed: Please wait. [ 70.601735][ T5242] XFS (loop2): Quotacheck: Done. [ 70.611432][ T5240] loop4: detected capacity change from 0 to 40427 [ 70.630089][ T4028] XFS (loop2): Unmounting Filesystem [ 70.677872][ T5240] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x1ffff [ 70.682426][ T5240] F2FS-fs (loop4): invalid crc value [ 70.710351][ T5240] F2FS-fs (loop4): Found nat_bits in checkpoint [ 70.765573][ T5240] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 70.795893][ T5308] loop1: detected capacity change from 0 to 1024 [ 70.806490][ T5308] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 70.817017][ T4037] attempt to access beyond end of device [ 70.817017][ T4037] loop4: rw=2049, want=45104, limit=40427 [ 70.837687][ T5308] EXT4-fs (loop1): mounted filesystem without journal. Opts: acl,data_err=abort,dioread_nolock,dioread_lock,data_err=ignore,resgid=0x0000000000000000,data_err=ignore,grpquota,usrquota,noblock_validity,journal_ioprio=0x0000000000000005,dioread_nolock,,errors=continue. Quota mode: writeback. [ 71.231736][ T5327] loop2: detected capacity change from 0 to 4096 [ 71.293801][ T5330] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 71.630332][ T5342] loop3: detected capacity change from 0 to 16 [ 71.649544][ T5344] loop4: detected capacity change from 0 to 256 [ 71.674625][ T5342] erofs: (device loop3): mounted with root inode @ nid 36. [ 71.746274][ T5344] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 71.753564][ T5344] FAT-fs (loop4): Filesystem has been set read-only [ 71.774462][ T5344] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 71.804770][ T5329] loop0: detected capacity change from 0 to 32768 [ 71.920759][ T5329] JBD2: Ignoring recovery information on journal [ 72.008131][ T5329] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 72.186526][ T5346] loop3: detected capacity change from 0 to 32768 [ 72.237451][ T5357] loop4: detected capacity change from 0 to 2048 [ 72.243209][ T4033] ocfs2: Unmounting device (7,0) on (node local) [ 72.301077][ T5357] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 72.326055][ T5346] XFS (loop3): Mounting V5 Filesystem [ 72.430705][ T5346] XFS (loop3): Ending clean mount [ 72.473380][ T4038] XFS (loop3): Unmounting Filesystem [ 72.608530][ T5389] netlink: 8 bytes leftover after parsing attributes in process `syz.1.511'. [ 72.612749][ T5389] netlink: 4 bytes leftover after parsing attributes in process `syz.1.511'. [ 72.621643][ T5389] netlink: 'syz.1.511': attribute type 12 has an invalid length. [ 72.623726][ T5389] netlink: 'syz.1.511': attribute type 13 has an invalid length. [ 72.898195][ T5413] loop2: detected capacity change from 0 to 1024 [ 72.970968][ T5413] hfsplus: bad catalog entry type [ 73.009094][ T148] hfsplus: b-tree write err: -5, ino 4 [ 73.498742][ T5407] loop1: detected capacity change from 0 to 32768 [ 73.506090][ T5434] loop3: detected capacity change from 0 to 4096 [ 73.545862][ T5434] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 73.572456][ T5434] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 73.608783][ T5442] loop0: detected capacity change from 0 to 512 [ 73.640625][ T5434] ntfs3: loop3: failed to convert name for inode 20. [ 73.665451][ T5442] EXT4-fs (loop0): Ignoring removed nobh option [ 73.667261][ T5442] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 73.704520][ T4038] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 73.718531][ T5442] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.535: invalid indirect mapped block 256 (level 2) [ 73.770950][ T5442] EXT4-fs (loop0): 2 truncates cleaned up [ 73.772574][ T5442] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,nojournal_checksum,dioread_nolock,bsdgroups,,errors=continue. Quota mode: writeback. [ 73.857978][ T5451] binder: 5449:5451 ioctl c0306201 200001c0 returned -14 [ 73.899106][ T5442] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.535: bg 0: block 5: invalid block bitmap [ 73.934610][ T5442] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 5 with error 28 [ 73.959554][ T5442] EXT4-fs (loop0): This should not happen!! Data will be lost [ 73.959554][ T5442] [ 73.971200][ T5459] [U] v [ 73.972615][ T5442] EXT4-fs (loop0): Total free blocks count 0 [ 73.974279][ T5442] EXT4-fs (loop0): Free/Dirty block details [ 73.975915][ T5442] EXT4-fs (loop0): free_blocks=0 [ 73.977328][ T5442] EXT4-fs (loop0): dirty_blocks=5 [ 73.978708][ T5442] EXT4-fs (loop0): Block reservation details [ 74.008760][ T5442] EXT4-fs (loop0): i_reserved_data_blocks=5 [ 74.102881][ T5466] netlink: 144 bytes leftover after parsing attributes in process `syz.4.547'. [ 74.757105][ T21] cfg80211: failed to load regulatory.db [ 74.848460][ T5472] loop3: detected capacity change from 0 to 32768 [ 74.952867][ T5472] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.548 (5472) [ 74.984344][ T5472] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 74.996015][ T5472] BTRFS info (device loop3): turning on flush-on-commit [ 75.003577][ T5472] BTRFS info (device loop3): doing ref verification [ 75.008832][ T5472] BTRFS info (device loop3): turning off barriers [ 75.014222][ T5472] BTRFS info (device loop3): force clearing of disk cache [ 75.016552][ T5472] BTRFS info (device loop3): enabling disk space caching [ 75.018553][ T5472] BTRFS info (device loop3): turning on sync discard [ 75.033670][ T5472] BTRFS info (device loop3): using default commit interval 30s [ 75.036051][ T5472] BTRFS info (device loop3): disk space caching is enabled [ 75.038145][ T5472] BTRFS info (device loop3): has skinny extents [ 75.336589][ T5472] BTRFS info (device loop3): enabling ssd optimizations [ 75.343066][ T5472] BTRFS info (device loop3): clearing free space tree [ 75.345239][ T5472] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 75.348138][ T5472] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 75.478851][ T5531] netlink: 'syz.2.568': attribute type 29 has an invalid length. [ 75.910052][ T5495] loop0: detected capacity change from 0 to 40427 [ 75.978650][ T5495] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 75.980982][ T5495] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 75.991675][ T5495] F2FS-fs (loop0): invalid crc value [ 76.012264][ T5555] loop2: detected capacity change from 0 to 1024 [ 76.052284][ T5495] F2FS-fs (loop0): Found nat_bits in checkpoint [ 76.073323][ T5555] EXT4-fs (loop2): Ignoring removed nobh option [ 76.075160][ T5555] EXT4-fs (loop2): Ignoring removed bh option [ 76.114005][ T5555] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,nobarrier,data_err=ignore,resgid=0x0000000000000000,data_err=ignore,jqfmt=vfsv0,nobh,user_xattr,bh,usrquota,,errors=continue. Quota mode: writeback. [ 76.200352][ T5495] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 76.202326][ T5495] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 76.385671][ T5527] loop4: detected capacity change from 0 to 40427 [ 76.471541][ T5527] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x1ffff [ 76.475252][ T5527] F2FS-fs (loop4): invalid crc value [ 76.485163][ T5527] F2FS-fs (loop4): Found nat_bits in checkpoint [ 76.560078][ T5527] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 76.597049][ T4591] Bluetooth: hci0: command 0x0c20 tx timeout [ 76.600898][ T5576] attempt to access beyond end of device [ 76.600898][ T5576] loop4: rw=2049, want=45104, limit=40427 [ 76.950130][ T5586] loop0: detected capacity change from 0 to 64 [ 77.069544][ T5573] loop1: detected capacity change from 0 to 32768 [ 77.123580][ T5590] loop4: detected capacity change from 0 to 256 [ 77.194395][ T5590] FAT-fs (loop4): Directory bread(block 64) failed [ 77.196203][ T5590] FAT-fs (loop4): Directory bread(block 65) failed [ 77.198036][ T5590] FAT-fs (loop4): Directory bread(block 66) failed [ 77.214728][ T5573] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 77.219710][ T5571] loop3: detected capacity change from 0 to 32768 [ 77.220066][ T5594] loop0: detected capacity change from 0 to 512 [ 77.221908][ T5590] FAT-fs (loop4): Directory bread(block 67) failed [ 77.225379][ T5590] FAT-fs (loop4): Directory bread(block 68) failed [ 77.227183][ T5590] FAT-fs (loop4): Directory bread(block 69) failed [ 77.229144][ T5590] FAT-fs (loop4): Directory bread(block 70) failed [ 77.231337][ T5590] FAT-fs (loop4): Directory bread(block 71) failed [ 77.233135][ T5590] FAT-fs (loop4): Directory bread(block 72) failed [ 77.234870][ T5590] FAT-fs (loop4): Directory bread(block 73) failed [ 77.270207][ T5571] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 77.272613][ T5571] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 77.292517][ T5594] EXT4-fs (loop0): Mount option "nouser_xattr" will be removed by 3.5 [ 77.292517][ T5594] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 77.292517][ T5594] [ 77.297668][ T5594] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 77.318873][ T4027] ocfs2: Unmounting device (7,1) on (node local) [ 77.322125][ T5571] gfs2: fsid=syz:syz.0: fatal: invalid metadata block [ 77.322125][ T5571] bh = 20 (type: exp=5, found=1) [ 77.322125][ T5571] function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 493 [ 77.327954][ T5571] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 77.354404][ T5571] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 77.356842][ T5571] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 77.359159][ T5571] gfs2: fsid=syz:syz.0: File system withdrawn [ 77.376066][ T5571] CPU: 0 PID: 5571 Comm: syz.3.583 Not tainted 5.15.183-syzkaller #0 [ 77.378390][ T5571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 77.381195][ T5571] Call trace: [ 77.382115][ T5571] dump_backtrace+0x0/0x43c [ 77.383360][ T5571] show_stack+0x2c/0x3c [ 77.384548][ T5571] __dump_stack+0x30/0x40 [ 77.385789][ T5571] dump_stack_lvl+0xf8/0x160 [ 77.387005][ T5571] dump_stack+0x1c/0x5c [ 77.388095][ T5571] gfs2_withdraw+0xc60/0x129c [ 77.389390][ T5571] gfs2_metatype_check_ii+0x8c/0xac [ 77.390874][ T5571] gfs2_meta_buffer+0x258/0x2ec [ 77.392222][ T5571] __fillup_metapath+0x138/0x2e0 [ 77.393679][ T5571] __gfs2_iomap_get+0x4e8/0x100c [ 77.395004][ T5571] gfs2_block_map+0x2b4/0xbc8 [ 77.396313][ T5571] gfs2_write_alloc_required+0x298/0x4dc [ 77.397842][ T5571] gfs2_jdesc_check+0x19c/0x264 [ 77.399130][ T5571] init_journal+0xa5c/0x1d7c [ 77.400383][ T5571] init_inodes+0xe0/0x2d4 [ 77.401581][ T5571] gfs2_fill_super+0x121c/0x19e0 [ 77.402930][ T5571] get_tree_bdev+0x358/0x544 [ 77.404211][ T5571] gfs2_get_tree+0x54/0x1b4 [ 77.405491][ T5571] vfs_get_tree+0x90/0x274 [ 77.406675][ T5571] do_new_mount+0x228/0x810 [ 77.407945][ T5571] path_mount+0x5b4/0x1000 [ 77.409134][ T5571] __arm64_sys_mount+0x514/0x5e4 [ 77.410530][ T5571] invoke_syscall+0x98/0x2b8 [ 77.411784][ T5571] el0_svc_common+0x138/0x258 [ 77.413075][ T5571] do_el0_svc+0x58/0x14c [ 77.414311][ T5571] el0_svc+0x78/0x1e0 [ 77.415423][ T5571] el0t_64_sync_handler+0xcc/0xe4 [ 77.416885][ T5571] el0t_64_sync+0x1a0/0x1a4 [ 77.427110][ T5571] gfs2: fsid=syz:syz.0: my journal (0) is bad: -5 [ 77.447797][ T5594] EXT4-fs error (device loop0): ext4_do_update_inode:5203: inode #3: comm syz.0.592: corrupted inode contents [ 77.459927][ T5594] EXT4-fs (loop0): Remounting filesystem read-only [ 77.461766][ T5594] EXT4-fs error (device loop0): ext4_dirty_inode:6039: inode #3: comm syz.0.592: mark_inode_dirty error [ 77.466239][ T5594] EXT4-fs (loop0): Remounting filesystem read-only [ 77.501208][ T5594] EXT4-fs error (device loop0): ext4_do_update_inode:5203: inode #3: comm syz.0.592: corrupted inode contents [ 77.551189][ T5594] EXT4-fs (loop0): Remounting filesystem read-only [ 77.553164][ T5594] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #3: comm syz.0.592: mark_inode_dirty error [ 77.576266][ T5594] EXT4-fs (loop0): Remounting filesystem read-only [ 77.613511][ T5594] Quota error (device loop0): write_blk: dquota write failed [ 77.630939][ T5594] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 77.657278][ T5594] EXT4-fs error (device loop0): ext4_acquire_dquot:6204: comm syz.0.592: Failed to acquire dquot type 0 [ 77.671316][ T5594] EXT4-fs (loop0): Remounting filesystem read-only [ 77.691157][ T5594] EXT4-fs error (device loop0): ext4_do_update_inode:5203: inode #16: comm syz.0.592: corrupted inode contents [ 77.707588][ T5594] EXT4-fs (loop0): Remounting filesystem read-only [ 77.714378][ T5594] EXT4-fs error (device loop0): ext4_dirty_inode:6039: inode #16: comm syz.0.592: mark_inode_dirty error [ 77.720004][ T5594] EXT4-fs (loop0): Remounting filesystem read-only [ 77.721911][ T5594] EXT4-fs error (device loop0): ext4_do_update_inode:5203: inode #16: comm syz.0.592: corrupted inode contents [ 77.737419][ T5594] EXT4-fs (loop0): Remounting filesystem read-only [ 77.739486][ T5594] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #16: comm syz.0.592: mark_inode_dirty error [ 77.746937][ T5594] EXT4-fs (loop0): Remounting filesystem read-only [ 77.748997][ T5594] EXT4-fs error (device loop0): ext4_do_update_inode:5203: inode #16: comm syz.0.592: corrupted inode contents [ 77.773959][ T5594] EXT4-fs (loop0): Remounting filesystem read-only [ 77.775728][ T5594] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 77.785971][ T5594] EXT4-fs (loop0): Remounting filesystem read-only [ 77.787836][ T5594] EXT4-fs error (device loop0): ext4_do_update_inode:5203: inode #16: comm syz.0.592: corrupted inode contents [ 77.794153][ T5622] netlink: 8 bytes leftover after parsing attributes in process `syz.3.605'. [ 77.800768][ T5594] EXT4-fs (loop0): Remounting filesystem read-only [ 77.802561][ T5594] EXT4-fs error (device loop0): ext4_truncate:4273: inode #16: comm syz.0.592: mark_inode_dirty error [ 77.805810][ T5622] netlink: 4 bytes leftover after parsing attributes in process `syz.3.605'. [ 77.811187][ T5624] loop1: detected capacity change from 0 to 64 [ 77.814776][ T5622] netlink: 'syz.3.605': attribute type 14 has an invalid length. [ 77.817096][ T5622] netlink: 'syz.3.605': attribute type 11 has an invalid length. [ 77.830211][ T5594] EXT4-fs (loop0): Remounting filesystem read-only [ 77.832034][ T5594] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 77.838340][ T5617] loop2: detected capacity change from 0 to 4096 [ 77.840126][ T5594] EXT4-fs (loop0): Remounting filesystem read-only [ 77.843561][ T5594] EXT4-fs (loop0): 1 truncate cleaned up [ 77.845148][ T5594] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,nouser_xattr,. Quota mode: writeback. [ 77.908587][ T5594] EXT4-fs error (device loop0): ext4_empty_dir:3177: inode #12: block 13: comm syz.0.592: bad entry in directory: inode out of bounds - offset=24, inode=33554445, rec_len=16, size=4096 fake=0 [ 77.926772][ T5628] loop3: detected capacity change from 0 to 1024 [ 77.933658][ T5594] EXT4-fs (loop0): Remounting filesystem read-only [ 77.967122][ T5631] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 77.997515][ T5617] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 78.017061][ T5617] Remounting filesystem read-only [ 78.025147][ T5628] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,lazytime,noblock_validity,,errors=continue. Quota mode: none. [ 78.066514][ T5635] loop4: detected capacity change from 0 to 4096 [ 78.139162][ T5635] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 78.198019][ T5635] ntfs: (device loop4): parse_options(): NLS character set macgreÿ not found. Using previous one utf8. [ 78.204039][ T5635] ntfs: (device loop4): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 78.208748][ T5635] ntfs: (device loop4): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 78.256753][ T5635] ntfs: volume version 3.1. [ 78.284939][ T5635] ntfs: (device loop4): ntfs_lookup_inode_by_name(): Corrupt directory. Aborting lookup. [ 78.287770][ T5635] ntfs: (device loop4): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 78.309405][ T5635] ntfs: (device loop4): load_system_files(): Failed to determine if Windows is hibernated. Mounting read-only. Run chkdsk. [ 78.363887][ T5656] loop3: detected capacity change from 0 to 64 [ 78.402606][ T5656] hfs: unable to locate alternate MDB [ 78.404285][ T5656] hfs: continuing without an alternate MDB [ 78.752671][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 78.755049][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 78.757197][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 78.759241][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 78.784204][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 78.786411][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 78.788524][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 78.806058][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 78.808209][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 78.816188][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 78.818327][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 78.826328][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 78.828363][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 78.845517][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 78.848552][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 78.856647][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 78.858911][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 78.861098][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 78.863148][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 78.865219][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 78.879186][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 78.881560][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 78.883703][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 78.885847][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 78.887932][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 78.915633][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 78.917946][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 78.931062][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 78.945728][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 78.947937][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 78.950112][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 78.952236][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 78.974681][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 78.976886][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 78.978974][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 78.990621][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 78.992763][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 79.009360][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 79.015269][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 79.017461][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 79.019563][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 79.035532][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 79.037883][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 79.045673][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 79.047828][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 79.055796][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 79.057919][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 79.075399][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 79.077746][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 79.087886][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 79.096603][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 79.098908][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 79.109051][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 79.112788][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 79.114877][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 79.127211][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 79.129574][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 79.131292][ T5697] netlink: 'syz.4.640': attribute type 39 has an invalid length. [ 79.135710][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 79.137797][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 79.139173][ T5697] netlink: 'syz.4.640': attribute type 4 has an invalid length. [ 79.142789][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 79.143776][ T5697] netlink: 152 bytes leftover after parsing attributes in process `syz.4.640'. [ 79.145063][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 79.158567][ T5674] loop1: detected capacity change from 0 to 32768 [ 79.160784][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 79.162913][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 79.165123][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 79.167396][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 79.169498][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 79.177619][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 79.179818][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 79.181883][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 79.184103][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 79.188046][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 79.202214][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 79.204417][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 79.206552][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 79.208674][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 79.219896][ T5674] JBD2: Ignoring recovery information on journal [ 79.220863][ T5697] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 79.248551][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 79.250892][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 79.253352][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 79.256464][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 79.258548][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 79.261010][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 79.263160][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 79.265400][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 79.267511][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 79.269707][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 79.270967][ T5674] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode. [ 79.271750][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 79.271771][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 79.278435][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 79.280719][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 79.282838][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 79.284939][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 79.287095][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 79.290277][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 79.292419][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 79.294538][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 79.296671][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 79.298807][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 79.301161][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 79.303301][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 79.305314][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 79.307507][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 79.309515][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 79.312191][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 79.314376][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 79.316406][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 79.318427][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 79.321372][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 79.322966][ T5674] (syz.1.630,5674,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #17: directory entry overrun - offset=312, inode=13845347915746889, rec_len=54648, name_len=18 [ 79.323613][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 79.330542][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 79.332594][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 79.334808][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 79.336941][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 79.338971][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 79.341220][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 79.343324][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 79.345527][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 79.347606][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 79.353613][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 79.355848][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 79.357983][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 79.360121][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 79.362383][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 79.364414][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 79.366629][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 79.368697][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 79.370870][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 79.372944][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 79.375009][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 79.377156][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 79.379272][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 79.381515][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 79.383577][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 79.385615][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 79.387757][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 79.390760][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 79.392907][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 79.395002][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 79.397056][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 79.399273][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 79.401632][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 79.403775][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 79.405815][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 79.407857][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 79.410067][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 79.412278][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 79.414412][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 79.416493][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 79.418583][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 79.420900][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 79.423021][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 79.425124][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 79.427191][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 79.429311][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 79.431662][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 79.433836][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 79.435998][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 79.438052][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 79.452198][ T4027] (syz-executor,4027,0):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 22 [ 79.453970][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 79.456337][ T4027] ocfs2: Unmounting device (7,1) on (node local) [ 79.457600][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 79.474252][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 79.476323][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 79.478355][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 79.492981][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 79.499763][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 79.501897][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 79.504018][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 79.506482][ T5704] loop0: detected capacity change from 0 to 2048 [ 79.511571][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 79.513748][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 79.515987][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: unknown main item tag 0x0 [ 79.522906][ T5013] hid-generic 0008:0000:FFFFFBFF.0001: hidraw0: HID v9.86 Device [syz0] on syz1 [ 79.588509][ T5704] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 79.592189][ T5691] loop3: detected capacity change from 0 to 32768 [ 79.691866][ T5691] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 79.758372][ T5691] (syz.3.637,5691,0):ocfs2_verify_group_and_input:425 ERROR: the add group should be in chain 1 [ 79.765783][ T5691] (syz.3.637,5691,0):ocfs2_group_add:503 ERROR: status = -22 [ 79.787944][ T5721] loop4: detected capacity change from 0 to 8 [ 79.795662][ T5723] loop1: detected capacity change from 0 to 256 [ 79.818113][ T5716] fido_id[5716]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 79.828952][ T4038] ocfs2: Unmounting device (7,3) on (node local) [ 79.886321][ T5723] FAT-fs (loop1): Directory bread(block 64) failed [ 79.888304][ T5723] FAT-fs (loop1): Directory bread(block 65) failed [ 79.914332][ T5723] FAT-fs (loop1): Directory bread(block 66) failed [ 79.921425][ T5723] FAT-fs (loop1): Directory bread(block 67) failed [ 79.923359][ T5723] FAT-fs (loop1): Directory bread(block 68) failed [ 79.925135][ T5723] FAT-fs (loop1): Directory bread(block 69) failed [ 79.949158][ T5729] lo speed is unknown, defaulting to 1000 [ 79.966449][ T5723] FAT-fs (loop1): Directory bread(block 70) failed [ 79.970973][ T5723] FAT-fs (loop1): Directory bread(block 71) failed [ 79.972853][ T5723] FAT-fs (loop1): Directory bread(block 72) failed [ 79.974655][ T5723] FAT-fs (loop1): Directory bread(block 73) failed [ 80.075150][ T5734] netlink: 12 bytes leftover after parsing attributes in process `syz.4.654'. [ 80.458993][ T5762] netlink: 8 bytes leftover after parsing attributes in process `syz.0.668'. [ 80.474836][ T5762] netlink: 12 bytes leftover after parsing attributes in process `syz.0.668'. [ 80.581296][ T5772] process 'syz.0.674' launched '/dev/fd/3' with NULL argv: empty string added [ 80.603120][ T5718] loop2: detected capacity change from 0 to 40427 [ 80.689874][ T5718] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x1ffff [ 80.698590][ T5718] F2FS-fs (loop2): invalid crc value [ 80.731941][ T5718] F2FS-fs (loop2): Found nat_bits in checkpoint [ 80.756339][ T5779] loop3: detected capacity change from 0 to 4096 [ 80.796589][ T5718] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 80.858254][ T5779] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 80.867999][ T5794] netlink: 8 bytes leftover after parsing attributes in process `syz.1.682'. [ 80.876203][ T5794] netlink: 4 bytes leftover after parsing attributes in process `syz.1.682'. [ 80.884872][ T5794] netlink: 'syz.1.682': attribute type 14 has an invalid length. [ 80.887046][ T5794] netlink: 'syz.1.682': attribute type 12 has an invalid length. [ 81.147581][ T5813] loop0: detected capacity change from 0 to 512 [ 81.244823][ T5813] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 81.416421][ T5838] netlink: 20 bytes leftover after parsing attributes in process `syz.4.697'. [ 81.845966][ T5837] loop3: detected capacity change from 0 to 32768 [ 82.067886][ T5864] ptrace attach of "./syz-executor exec"[4027] was attempted by ""[5864] [ 82.460271][ T5850] loop2: detected capacity change from 0 to 32768 [ 82.513156][ T4273] udevd[4273]: symlink '../../loop0' '/dev/disk/by-diskseq/252.tmp-b7:0' failed: Read-only file system [ 82.556721][ T5856] loop4: detected capacity change from 0 to 32768 [ 82.570716][ T5890] netlink: 'syz.0.722': attribute type 1 has an invalid length. [ 82.593903][ T5856] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop4 scanned by syz.4.707 (5856) [ 82.613451][ T5850] XFS (loop2): Mounting V5 Filesystem [ 82.622381][ T5856] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 82.625384][ T5856] BTRFS info (device loop4): using free space tree [ 82.627386][ T5856] BTRFS info (device loop4): has skinny extents [ 82.697616][ T4881] udevd[4881]: symlink '../../loop0' '/dev/disk/by-diskseq/252.tmp-b7:0' failed: Read-only file system [ 82.723778][ T5850] XFS (loop2): Ending clean mount [ 82.727856][ T5850] XFS (loop2): Quotacheck needed: Please wait. [ 82.753315][ T4019] udevd[4019]: symlink '../../loop3' '/dev/disk/by-diskseq/235.tmp-b7:3' failed: Read-only file system [ 82.760104][ T5850] XFS (loop2): Quotacheck: Done. [ 82.811946][ T4881] udevd[4881]: symlink '../../loop0' '/dev/disk/by-diskseq/252.tmp-b7:0' failed: Read-only file system [ 82.824287][ T4019] udevd[4019]: symlink '../../loop3' '/dev/disk/by-diskseq/235.tmp-b7:3' failed: Read-only file system [ 82.868802][ T4040] udevd[4040]: symlink '../../loop0' '/dev/disk/by-diskseq/252.tmp-b7:0' failed: Read-only file system [ 82.875740][ T4028] XFS (loop2): Unmounting Filesystem [ 82.881281][ T4881] udevd[4881]: symlink '../../loop0' '/dev/disk/by-diskseq/252.tmp-b7:0' failed: Read-only file system [ 82.894491][ T5856] BTRFS info (device loop4): enabling ssd optimizations [ 82.944842][ T4881] udevd[4881]: symlink '../../loop0' '/dev/disk/by-diskseq/252.tmp-b7:0' failed: Read-only file system [ 82.974903][ T4019] udevd[4019]: symlink '../../loop3' '/dev/disk/by-diskseq/240.tmp-b7:3' failed: Read-only file system [ 82.989261][ T4019] udevd[4019]: symlink '../../loop3' '/dev/disk/by-diskseq/240.tmp-b7:3' failed: Read-only file system [ 83.257096][ T5941] usb usb8: usbfs: process 5941 (syz.4.735) did not claim interface 0 before use [ 83.321491][ T5945] loop0: detected capacity change from 0 to 256 [ 83.355992][ T5945] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84977, utbl_chksum : 0xe619d30d) [ 83.427259][ T5953] loop1: detected capacity change from 0 to 512 [ 83.451735][ T4273] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 9 /dev/loop4 scanned by udevd (4273) [ 83.685925][ T5953] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,max_batch_time=0x00000000000000b1,grpjquota=,norecovery,dioread_lock,,errors=continue. Quota mode: writeback. [ 83.857330][ T5951] loop3: detected capacity change from 0 to 40427 [ 83.885110][ T5951] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x1ffff [ 83.916717][ T5951] F2FS-fs (loop3): invalid crc value [ 83.935514][ T5951] F2FS-fs (loop3): Found nat_bits in checkpoint [ 84.043869][ T5951] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 84.128752][ T4038] attempt to access beyond end of device [ 84.128752][ T4038] loop3: rw=2049, want=45104, limit=40427 [ 84.243494][ T6000] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 84.338133][ T6005] netlink: 16 bytes leftover after parsing attributes in process `syz.1.764'. [ 84.468504][ T6020] loop1: detected capacity change from 0 to 256 [ 84.509950][ T5935] Bluetooth: hci4: command 0x0405 tx timeout [ 84.524022][ T6026] loop0: detected capacity change from 0 to 512 [ 84.534606][ T6025] loop4: detected capacity change from 0 to 512 [ 84.557222][ T6028] loop2: detected capacity change from 0 to 764 [ 84.601082][ T6026] EXT4-fs (loop0): corrupt root inode, run e2fsck [ 84.602993][ T6026] EXT4-fs (loop0): mount failed [ 84.632693][ T6028] rock: directory entry would overflow storage [ 84.634508][ T6028] rock: sig=0x4654, size=5, remaining=4 [ 84.636916][ T6025] EXT2-fs (loop4): warning: mounting ext3 filesystem as ext2 [ 84.828831][ T6041] loop1: detected capacity change from 0 to 256 [ 84.946260][ T6041] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1d0c1f25, utbl_chksum : 0xe619d30d) [ 85.382407][ T6080] loop2: detected capacity change from 0 to 256 [ 85.399402][ T6084] netlink: 184 bytes leftover after parsing attributes in process `syz.1.801'. [ 85.410187][ T6084] netem: unknown loss type 5 [ 85.411807][ T6084] netem: change failed [ 85.548563][ T6090] loop4: detected capacity change from 0 to 1024 [ 85.611724][ T6044] loop3: detected capacity change from 0 to 32768 [ 85.667564][ T148] hfsplus: b-tree write err: -5, ino 4 [ 85.800727][ T6057] loop0: detected capacity change from 0 to 32768 [ 85.867021][ T6057] ERROR: (device loop0): dtReadFirst: DT_GETPAGE: dtree page corrupt [ 85.867021][ T6057] [ 85.882506][ T6057] ERROR: (device loop0): remounting filesystem as read-only [ 85.884645][ T6057] jfs_readdir: unexpected rc = -5 from dtReadNext [ 86.002589][ T6113] device bridge1 entered promiscuous mode [ 86.032596][ T6113] team0: Port device bridge1 added [ 86.074868][ T6115] autofs4:pid:6115:autofs_fill_super: called with bogus options [ 86.267858][ T6100] loop1: detected capacity change from 0 to 32768 [ 86.363904][ T6100] XFS (loop1): Mounting V5 Filesystem [ 86.543037][ T6140] loop0: detected capacity change from 0 to 4096 [ 86.587173][ T6100] XFS (loop1): Ending clean mount [ 86.595697][ T6146] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 86.694748][ T6150] loop4: detected capacity change from 0 to 64 [ 86.700007][ T4027] XFS (loop1): Unmounting Filesystem [ 86.878112][ T4032] Bluetooth: hci4: link tx timeout [ 86.879254][ T6123] loop2: detected capacity change from 0 to 40427 [ 86.879926][ T4032] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 86.914152][ T6123] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 86.916149][ T6123] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 86.940155][ T6123] F2FS-fs (loop2): invalid crc value [ 87.021287][ T6123] F2FS-fs (loop2): Found nat_bits in checkpoint [ 87.073218][ T6123] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 87.075209][ T6123] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 87.237547][ T4028] attempt to access beyond end of device [ 87.237547][ T4028] loop2: rw=2049, want=40976, limit=40427 [ 87.430526][ T6181] loop1: detected capacity change from 0 to 1024 [ 87.534509][ T6162] loop0: detected capacity change from 0 to 32768 [ 87.558569][ T6181] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 87.562801][ T6181] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 87.574718][ T4272] udevd[4272]: symlink '../../loop4' '/dev/disk/by-diskseq/273.tmp-b7:4' failed: Read-only file system [ 87.601569][ T374] hfsplus: b-tree write err: -5, ino 4 [ 87.726729][ T4040] udevd[4040]: symlink '../../loop3' '/dev/disk/by-diskseq/271.tmp-b7:3' failed: Read-only file system [ 87.733897][ T6156] loop3: detected capacity change from 0 to 40427 [ 87.804373][ T6156] F2FS-fs (loop3): Found nat_bits in checkpoint [ 87.825561][ T6200] loop4: detected capacity change from 0 to 1024 [ 87.843377][ T4019] udevd[4019]: symlink '../../loop1' '/dev/disk/by-diskseq/264.tmp-b7:1' failed: Read-only file system [ 87.880170][ T6156] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 87.904666][ T6200] attempt to access beyond end of device [ 87.904666][ T6200] loop4: rw=0, want=5780, limit=1024 [ 87.911312][ T6200] attempt to access beyond end of device [ 87.911312][ T6200] loop4: rw=0, want=5780, limit=1024 [ 87.947584][ T4019] udevd[4019]: symlink '../../loop1' '/dev/disk/by-label/untitled.tmp-b7:1' failed: Read-only file system [ 88.023049][ T4272] udevd[4272]: symlink '../../loop4' '/dev/disk/by-diskseq/273.tmp-b7:4' failed: Read-only file system [ 88.055880][ T4019] udevd[4019]: symlink '../../loop1' '/dev/disk/by-uuid/ba2f0001-879f-3637-907a-ce8b5cb07bf2.tmp-b7:1' failed: Read-only file system [ 88.079433][ T4881] udevd[4881]: symlink '../../loop2' '/dev/disk/by-diskseq/267.tmp-b7:2' failed: Read-only file system [ 88.124255][ T4272] udevd[4272]: symlink '../../loop4' '/dev/disk/by-label/untitled.tmp-b7:4' failed: Read-only file system [ 88.140919][ T4273] udevd[4273]: symlink '../../loop0' '/dev/disk/by-diskseq/269.tmp-b7:0' failed: Read-only file system [ 88.166966][ T4272] udevd[4272]: symlink '../../loop4' '/dev/disk/by-uuid/06db47fa-2d76-30cf-a5fe-21149ac7af4a.tmp-b7:4' failed: Read-only file system [ 88.208957][ T26] audit: type=1326 audit(88.170:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6216 comm="syz.3.850" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8eb9a768 code=0x0 [ 88.334459][ T6184] loop2: detected capacity change from 0 to 40427 [ 88.390828][ T6184] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x1ffff [ 88.413210][ T6184] F2FS-fs (loop2): invalid crc value [ 88.432055][ T6184] F2FS-fs (loop2): Found nat_bits in checkpoint [ 88.485205][ T6226] netlink: 8 bytes leftover after parsing attributes in process `syz.0.854'. [ 88.489744][ T6226] netlink: 4 bytes leftover after parsing attributes in process `syz.0.854'. [ 88.493845][ T6184] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 88.555470][ T4028] attempt to access beyond end of device [ 88.555470][ T4028] loop2: rw=2049, want=45104, limit=40427 [ 88.744798][ T6206] loop1: detected capacity change from 0 to 32768 [ 88.747011][ T6219] loop4: detected capacity change from 0 to 32768 [ 88.910140][ T4018] Bluetooth: hci4: command 0x0406 tx timeout [ 89.161808][ T6248] loop4: detected capacity change from 0 to 4096 [ 89.204309][ T6248] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 89.272066][ T6248] ntfs3: loop4: ino=5, "/" directory corrupted [ 89.276521][ T6248] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 89.293553][ T6248] ntfs3: loop4: ino=5, "/" directory corrupted [ 89.327539][ T4037] ntfs3: loop4: ntfs_sync_fs r=1a failed, -22. [ 89.338865][ T4037] ntfs3: loop4: ntfs_evict_inode r=1a failed, -22. [ 89.585032][ T6275] device veth1_macvtap left promiscuous mode [ 89.590286][ T6275] device macsec0 entered promiscuous mode [ 89.636766][ T6278] device veth1_macvtap entered promiscuous mode [ 89.638691][ T6278] device macsec0 left promiscuous mode [ 89.877214][ T6268] loop3: detected capacity change from 0 to 32768 [ 89.918646][ T6268] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.874 (6268) [ 89.920670][ T6263] loop0: detected capacity change from 0 to 32768 [ 89.991464][ T6268] BTRFS info (device loop3): using crc32c (crc32c-generic) checksum algorithm [ 89.994000][ T6268] BTRFS info (device loop3): turning on async discard [ 89.995918][ T6268] BTRFS info (device loop3): using free space tree [ 89.997733][ T6268] BTRFS info (device loop3): has skinny extents [ 90.013390][ T6263] [ 90.013390][ T6263] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 90.013390][ T6263] [ 90.070384][ T6263] __jfs_setxattr: xattr_size = 77, new_size = 171 [ 90.184081][ T9] [ 90.184081][ T9] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 90.184081][ T9] [ 90.187321][ T9] [ 90.187321][ T9] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 90.187321][ T9] [ 90.219984][ T4033] [ 90.219984][ T4033] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 90.219984][ T4033] [ 90.231937][ T241] [ 90.231937][ T241] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 90.231937][ T241] [ 90.235186][ T4033] [ 90.235186][ T4033] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 90.235186][ T4033] [ 90.376928][ T6300] loop1: detected capacity change from 0 to 32768 [ 90.380907][ T6268] BTRFS info (device loop3): enabling ssd optimizations [ 90.428078][ T6287] loop4: detected capacity change from 0 to 32768 [ 90.439540][ T6287] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.883 (6287) [ 90.445422][ T6300] XFS (loop1): Mounting V5 Filesystem [ 90.496123][ T6287] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 90.499083][ T6287] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8) [ 90.536142][ T6287] BTRFS info (device loop4): use lzo compression, level 0 [ 90.538260][ T6287] BTRFS info (device loop4): using free space tree [ 90.540137][ T6287] BTRFS info (device loop4): has skinny extents [ 90.559499][ T6300] XFS (loop1): Ending clean mount [ 90.590875][ T6288] loop2: detected capacity change from 0 to 32768 [ 90.648797][ T4027] XFS (loop1): Unmounting Filesystem [ 90.675811][ T6288] (syz.2.882,6288,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 90.705187][ T6287] BTRFS info (device loop4): enabling ssd optimizations [ 90.710359][ T6288] (syz.2.882,6288,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 90.904489][ T6288] JBD2: Ignoring recovery information on journal [ 91.095788][ T6288] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 91.318184][ T4028] ocfs2: Unmounting device (7,2) on (node local) [ 91.547210][ T6374] loop1: detected capacity change from 0 to 512 [ 91.608074][ T4272] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 10 /dev/loop4 scanned by udevd (4272) [ 91.653256][ T6374] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 91.701655][ T6374] EXT4-fs (loop1): 1 truncate cleaned up [ 91.703326][ T6374] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,min_batch_time=0x0000000000000004,debug_want_extra_isize=0x0000000000000068,nobarrier,nodiscard,quota,. Quota mode: writeback. [ 91.713769][ T6348] loop3: detected capacity change from 0 to 32768 [ 91.751469][ T6348] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.892 (6348) [ 91.784706][ T6374] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #16: comm syz.1.903: invalid indirect mapped block 6 (level 1) [ 91.802125][ T6348] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 91.804636][ T6348] BTRFS info (device loop3): enabling disk space caching [ 91.806511][ T6348] BTRFS info (device loop3): enabling auto defrag [ 91.808351][ T6348] BTRFS info (device loop3): doing ref verification [ 91.857660][ T6386] loop0: detected capacity change from 0 to 512 [ 91.861711][ T6374] EXT4-fs (loop1): Remounting filesystem read-only [ 91.877666][ T6348] BTRFS info (device loop3): use no compression [ 91.879449][ T6348] BTRFS info (device loop3): force clearing of disk cache [ 91.887794][ T6348] BTRFS info (device loop3): disabling disk space caching [ 91.890097][ T6348] BTRFS info (device loop3): has skinny extents [ 91.916667][ T6386] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 92.061044][ T4033] EXT4-fs error (device loop0): ext4_ext_check_inode:501: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 92.069052][ T4033] EXT4-fs error (device loop0): ext4_ext_check_inode:501: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 92.149088][ T6396] loop1: detected capacity change from 0 to 8 [ 92.179541][ T6348] BTRFS info (device loop3): enabling ssd optimizations [ 92.225801][ T6348] BTRFS info (device loop3): clearing free space tree [ 92.227825][ T6348] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 92.238743][ T6348] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 92.281638][ T6369] loop4: detected capacity change from 0 to 32768 [ 92.305293][ T6348] BTRFS info (device loop3): enabling disk space caching [ 92.341383][ T6369] gfs2: fsid=(œ[{{{+: Trying to join cluster "lock_nolock", "(œ[{{{+" [ 92.343654][ T6369] gfs2: fsid=(œ[{{{+: Now mounting FS (format 0)... [ 92.363848][ T6369] gfs2: fsid=(œ[{{{+.0: journal 0 mapped with 22 extents in 0ms [ 92.371037][ T4735] gfs2: fsid=(œ[{{{+.0: jid=0, already locked for use [ 92.372950][ T4735] gfs2: fsid=(œ[{{{+.0: jid=0: Looking at journal... [ 92.392037][ T6410] loop1: detected capacity change from 0 to 4096 [ 92.418744][ T6410] NILFS (loop1): invalid segment: Checksum error in segment payload [ 92.436062][ T6410] NILFS (loop1): trying rollback from an earlier position [ 92.476876][ T4735] gfs2: fsid=(œ[{{{+.0: jid=0: Journal head lookup took 103ms [ 92.479160][ T4735] gfs2: fsid=(œ[{{{+.0: jid=0: Done [ 92.484626][ T6369] gfs2: fsid=(œ[{{{+.0: first mount done, others may mount [ 92.487041][ T6410] NILFS (loop1): recovery complete [ 92.507423][ T6384] loop2: detected capacity change from 0 to 32768 [ 92.510791][ T6411] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 92.542623][ T6384] XFS: ikeep mount option is deprecated. [ 92.544239][ T6384] XFS: noikeep mount option is deprecated. [ 92.614829][ T4040] udevd[4040]: symlink '../../loop3' '/dev/disk/by-diskseq/299.tmp-b7:3' failed: Read-only file system [ 92.619190][ T4040] udevd[4040]: symlink '../../loop3' '/dev/disk/by-uuid/ed167579-eb65-4e76-9a50-61ac97e9b59d.tmp-b7:3' failed: Read-only file system [ 92.678442][ T6384] XFS (loop2): Mounting V5 Filesystem [ 92.808897][ T4881] udevd[4881]: symlink '../../loop0' '/dev/disk/by-diskseq/298.tmp-b7:0' failed: Read-only file system [ 92.863361][ T6384] XFS (loop2): Ending clean mount [ 92.896260][ T6384] XFS (loop2): Quotacheck needed: Please wait. [ 92.971347][ T6384] XFS (loop2): Quotacheck: Done. [ 93.095972][ T4028] XFS (loop2): Unmounting Filesystem [ 93.148171][ T4273] udevd[4273]: symlink '../../loop4' '/dev/disk/by-diskseq/285.tmp-b7:4' failed: Read-only file system [ 93.165445][ T4881] udevd[4881]: symlink '../../loop0' '/dev/disk/by-diskseq/298.tmp-b7:0' failed: Read-only file system [ 93.179011][ T4021] udevd[4021]: symlink '../../loop2' '/dev/disk/by-diskseq/325.tmp-b7:2' failed: Read-only file system [ 93.192435][ T1857] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.206791][ T4021] udevd[4021]: symlink '../../loop2' '/dev/disk/by-uuid/a2f82aab-77f8-4286-afd4-a8f747a74bab.tmp-b7:2' failed: Read-only file system [ 93.216056][ T4019] udevd[4019]: symlink '../../loop1' '/dev/disk/by-diskseq/274.tmp-b7:1' failed: Read-only file system [ 93.218408][ T4881] udevd[4881]: symlink '../../loop0' '/dev/disk/by-diskseq/308.tmp-b7:0' failed: Read-only file system [ 93.225082][ T4019] udevd[4019]: symlink '../../loop1' '/dev/disk/by-uuid/53ef1790-6acb-496c-bd13-8113447d28c8.tmp-b7:1' failed: Read-only file system [ 93.339348][ T1857] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.396776][ T6430] lo speed is unknown, defaulting to 1000 [ 93.495021][ T1857] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.617690][ T1857] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.698500][ T6430] chnl_net:caif_netlink_parms(): no params data found [ 93.876440][ T6481] sp0: Synchronizing with TNC [ 93.891999][ T6430] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.911616][ T6430] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.918991][ T6430] device bridge_slave_0 entered promiscuous mode [ 93.965164][ T6430] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.984495][ T6430] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.999216][ T6430] device bridge_slave_1 entered promiscuous mode [ 94.106925][ T6430] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.134027][ T6430] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.213995][ T6430] team0: Port device team_slave_0 added [ 94.233637][ T6430] team0: Port device team_slave_1 added [ 94.416911][ T6430] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.419095][ T6430] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.438954][ T6430] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.465059][ T6430] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.475078][ T6430] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.502114][ T6430] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.611651][ T6430] device hsr_slave_0 entered promiscuous mode [ 94.650139][ T6430] device hsr_slave_1 entered promiscuous mode [ 94.670657][ T6430] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.672909][ T6430] Cannot create hsr debugfs directory [ 94.733947][ T6538] usb usb1: usbfs: process 6538 (syz.4.956) did not claim interface 0 before use [ 94.753800][ T6538] usb usb1: selecting invalid altsetting 15 [ 94.891530][ T26] audit: type=1326 audit(94.860:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6489 comm="syz.1.939" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff81a3c768 code=0x7fc00000 [ 94.908179][ T26] audit: type=1326 audit(94.860:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6489 comm="syz.1.939" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff81a3c768 code=0x7fc00000 [ 94.933566][ T26] audit: type=1326 audit(94.860:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6489 comm="syz.1.939" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff81a3c768 code=0x7fc00000 [ 94.955788][ T26] audit: type=1326 audit(94.860:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6489 comm="syz.1.939" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff81a3c768 code=0x7fc00000 [ 94.989725][ T4590] Bluetooth: hci2: command 0x0409 tx timeout [ 95.010631][ T26] audit: type=1326 audit(94.860:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6489 comm="syz.1.939" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff81a3c768 code=0x7fc00000 [ 95.016386][ T26] audit: type=1326 audit(94.860:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6489 comm="syz.1.939" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff81a3c768 code=0x7fc00000 [ 95.064438][ T6554] loop4: detected capacity change from 0 to 2048 [ 95.066445][ T26] audit: type=1326 audit(94.860:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6489 comm="syz.1.939" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff81a3c768 code=0x7fc00000 [ 95.087218][ T6430] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 95.097355][ T26] audit: type=1326 audit(94.860:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6489 comm="syz.1.939" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff81a3c768 code=0x7fc00000 [ 95.104613][ T6562] loop1: detected capacity change from 0 to 512 [ 95.116269][ T26] audit: type=1326 audit(94.860:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6489 comm="syz.1.939" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff81a3c768 code=0x7fc00000 [ 95.139097][ T26] audit: type=1326 audit(94.860:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6489 comm="syz.1.939" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff81a3c768 code=0x7fc00000 [ 95.141540][ T6564] loop2: detected capacity change from 0 to 512 [ 95.146823][ T6554] EXT4-fs (loop4): Mount option "noacl" will be removed by 3.5 [ 95.146823][ T6554] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 95.146823][ T6554] [ 95.178649][ T6430] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 95.179510][ T6562] EXT2-fs (loop1): warning: mounting ext3 filesystem as ext2 [ 95.226289][ T6554] EXT4-fs (loop4): mounted filesystem without journal. Opts: noacl,,errors=continue. Quota mode: none. [ 95.237813][ T6430] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 95.249139][ T6562] EXT2-fs (loop1): error: ext2_valid_block_bitmap: Invalid block bitmap - block_group = 0, block = 252 [ 95.254063][ T6554] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 95.269200][ T6570] netlink: 24 bytes leftover after parsing attributes in process `syz.2.970'. [ 95.271865][ T6430] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 95.274501][ T6562] EXT2-fs (loop1): error: ext2_new_blocks: Allocating block in system zone - blocks from 1, length 254 [ 95.496111][ T6580] loop2: detected capacity change from 0 to 256 [ 95.522216][ T6580] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 95.586044][ T6582] netlink: 16 bytes leftover after parsing attributes in process `syz.4.976'. [ 95.658210][ T6589] loop1: detected capacity change from 0 to 512 [ 95.678354][ T6589] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 95.681605][ T6430] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.707165][ T6589] EXT4-fs (loop1): 1 truncate cleaned up [ 95.711250][ T6589] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 95.715238][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 95.717762][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 95.732220][ T6589] EXT4-fs error (device loop1): ext4_generic_delete_entry:2729: inode #2: block 13: comm syz.1.978: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 95.753408][ T6430] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.760303][ T6589] EXT4-fs error (device loop1) in ext4_delete_entry:2800: Corrupt filesystem [ 95.779379][ T6597] hugetlbfs: Bad value for 'nr_inodes' [ 95.788223][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 95.791631][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 95.794453][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.796490][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.837882][ T6430] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 95.840989][ T6430] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 95.849094][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 95.870444][ T6606] loop2: detected capacity change from 0 to 512 [ 95.878406][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 95.888527][ T6606] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:476: comm syz.2.981: Invalid block bitmap block 0 in block_group 0 [ 95.894016][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 95.898815][ T6606] EXT4-fs (loop2): Remounting filesystem read-only [ 95.907433][ T6606] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 95.919868][ T6606] EXT4-fs (loop2): Remounting filesystem read-only [ 95.921700][ T6606] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.981: attempt to clear invalid blocks 983261 len 1 [ 95.930383][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.932450][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.949163][ T6606] EXT4-fs (loop2): Remounting filesystem read-only [ 95.963766][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 95.966562][ T6606] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.981: invalid indirect mapped block 2683928664 (level 0) [ 95.972459][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 95.998102][ T6606] EXT4-fs (loop2): Remounting filesystem read-only [ 96.000096][ T6606] EXT4-fs error (device loop2): __ext4_get_inode_loc:4321: comm syz.2.981: Invalid inode table block 0 in block_group 0 [ 96.004098][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 96.006726][ T6606] EXT4-fs (loop2): Remounting filesystem read-only [ 96.008453][ T6606] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5835: Corrupt filesystem [ 96.017811][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 96.020858][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 96.021817][ T6606] EXT4-fs (loop2): Remounting filesystem read-only [ 96.023729][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 96.027457][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 96.031901][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 96.032630][ T6606] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 96.035302][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 96.051993][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 96.059763][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 96.062410][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 96.062413][ T6606] EXT4-fs (loop2): Remounting filesystem read-only [ 96.062436][ T6606] EXT4-fs error (device loop2): __ext4_get_inode_loc:4321: comm syz.2.981: Invalid inode table block 0 in block_group 0 [ 96.104040][ T6606] EXT4-fs (loop2): Remounting filesystem read-only [ 96.105941][ T6606] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5835: Corrupt filesystem [ 96.121193][ T6606] EXT4-fs (loop2): Remounting filesystem read-only [ 96.122970][ T6606] EXT4-fs error (device loop2): ext4_truncate:4273: inode #13: comm syz.2.981: mark_inode_dirty error [ 96.129291][ T6606] EXT4-fs (loop2): Remounting filesystem read-only [ 96.131645][ T6606] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 96.138550][ T6606] EXT4-fs (loop2): Remounting filesystem read-only [ 96.146773][ T6606] EXT4-fs error (device loop2): __ext4_get_inode_loc:4321: comm syz.2.981: Invalid inode table block 0 in block_group 0 [ 96.158509][ T6606] EXT4-fs (loop2): Remounting filesystem read-only [ 96.161016][ T6606] EXT4-fs (loop2): 1 truncate cleaned up [ 96.167082][ T6606] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,nolazytime,journal_dev=0x0000000000007fff,errors=remount-ro,noblock_validity,. Quota mode: none. [ 96.169045][ T6610] loop4: detected capacity change from 0 to 4096 [ 96.203528][ T6606] EXT4-fs error (device loop2): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.2.981: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=2, rec_len=9, size=1024 fake=1 [ 96.243334][ T6606] EXT4-fs (loop2): Remounting filesystem read-only [ 96.248647][ T6606] EXT4-fs error (device loop2): __ext4_get_inode_loc:4321: comm syz.2.981: Invalid inode table block 0 in block_group 0 [ 96.270039][ T6621] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 96.287515][ T6606] EXT4-fs (loop2): Remounting filesystem read-only [ 96.289549][ T6606] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5835: Corrupt filesystem [ 96.311079][ T6606] EXT4-fs (loop2): Remounting filesystem read-only [ 96.313167][ T6606] EXT4-fs error (device loop2): ext4_dirty_inode:6039: inode #2: comm syz.2.981: mark_inode_dirty error [ 96.327169][ T6606] EXT4-fs (loop2): Remounting filesystem read-only [ 96.367279][ T645] EXT4-fs error (device loop2): __ext4_get_inode_loc:4321: comm kworker/u4:6: Invalid inode table block 0 in block_group 0 [ 96.373587][ T645] EXT4-fs (loop2): Remounting filesystem read-only [ 96.456423][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 96.458756][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 96.476029][ T6430] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.623056][ T1857] device hsr_slave_0 left promiscuous mode [ 96.641540][ T6645] netlink: 12 bytes leftover after parsing attributes in process `syz.2.991'. [ 96.676589][ T1857] device hsr_slave_1 left promiscuous mode [ 96.736263][ T1857] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.738383][ T1857] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 96.744562][ T1857] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.747503][ T1857] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 96.777676][ T1857] device bridge_slave_1 left promiscuous mode [ 96.783021][ T1857] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.834632][ T1857] device bridge_slave_0 left promiscuous mode [ 96.836498][ T1857] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.011341][ T1857] device veth1_vlan left promiscuous mode [ 97.013601][ T1857] device veth0_vlan left promiscuous mode [ 97.080114][ T4018] Bluetooth: hci2: command 0x041b tx timeout [ 97.404175][ T1857] team0 (unregistering): Port device team_slave_1 removed [ 97.421945][ T1857] team0 (unregistering): Port device team_slave_0 removed [ 97.434130][ T1857] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 97.495863][ T1857] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 97.682755][ T1857] bond0 (unregistering): Released all slaves [ 97.811107][ T6661] netlink: 8 bytes leftover after parsing attributes in process `syz.2.997'. [ 97.813647][ T6661] netlink: 4 bytes leftover after parsing attributes in process `syz.2.997'. [ 97.816154][ T6661] netlink: 'syz.2.997': attribute type 6 has an invalid length. [ 97.975641][ T4019] udevd[4019]: symlink '../../loop4' '/dev/disk/by-diskseq/344.tmp-b7:4' failed: Read-only file system [ 98.034630][ T4019] udevd[4019]: symlink '../../loop3' '/dev/disk/by-diskseq/329.tmp-b7:3' failed: Read-only file system [ 98.070177][ T4273] udevd[4273]: symlink '../../loop2' '/dev/disk/by-diskseq/343.tmp-b7:2' failed: Read-only file system [ 98.081486][ T6690] loop4: detected capacity change from 0 to 8 [ 98.120745][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 98.123734][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 98.131556][ T6690] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 98.177471][ T4019] udevd[4019]: symlink '../../loop2' '/dev/disk/by-diskseq/343.tmp-b7:2' failed: Read-only file system [ 98.192079][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 98.195001][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 98.198191][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 98.210339][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 98.221662][ T6430] device veth0_vlan entered promiscuous mode [ 98.247240][ T6430] device veth1_vlan entered promiscuous mode [ 98.318955][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 98.322260][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 98.325101][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 98.339085][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 98.351020][ T4019] udevd[4019]: symlink '../../loop4' '/dev/disk/by-diskseq/345.tmp-b7:4' failed: Read-only file system [ 98.358562][ T6430] device veth0_macvtap entered promiscuous mode [ 98.371798][ T6430] device veth1_macvtap entered promiscuous mode [ 98.403502][ T6430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.406761][ T6430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.429468][ T4019] udevd[4019]: symlink '../../loop4' '/dev/disk/by-diskseq/345.tmp-b7:4' failed: Read-only file system [ 98.443977][ T6713] loop2: detected capacity change from 0 to 256 [ 98.444306][ T6430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.464242][ T6430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.474657][ T6430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.477729][ T6430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.486557][ T6430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.492223][ T6430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.549777][ T6430] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.559399][ T6713] FAT-fs (loop2): Directory bread(block 64) failed [ 98.568003][ T6713] FAT-fs (loop2): Directory bread(block 65) failed [ 98.576784][ T6430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.582421][ T4019] udevd[4019]: symlink '../../loop4' '/dev/disk/by-diskseq/345.tmp-b7:4' failed: Read-only file system [ 98.583741][ T6430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.589134][ T6713] FAT-fs (loop2): Directory bread(block 66) failed [ 98.591913][ T6430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.596643][ T6713] FAT-fs (loop2): Directory bread(block 67) failed [ 98.601745][ T6430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.610101][ T6713] FAT-fs (loop2): Directory bread(block 68) failed [ 98.610234][ T6430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.616521][ T4881] udevd[4881]: symlink '../../loop1' '/dev/disk/by-diskseq/341.tmp-b7:1' failed: Read-only file system [ 98.616560][ T6713] FAT-fs (loop2): Directory bread(block 69) failed [ 98.624545][ T6430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.630028][ T6713] FAT-fs (loop2): Directory bread(block 70) failed [ 98.633184][ T6430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.636434][ T6713] FAT-fs (loop2): Directory bread(block 71) failed [ 98.643323][ T6713] FAT-fs (loop2): Directory bread(block 72) failed [ 98.648137][ T6430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.651115][ T6713] FAT-fs (loop2): Directory bread(block 73) failed [ 98.653481][ T6721] loop4: detected capacity change from 0 to 1024 [ 98.659024][ T6430] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.665906][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 98.669006][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 98.672355][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 98.675528][ T4019] udevd[4019]: symlink '../../loop4' '/dev/disk/by-diskseq/345.tmp-b7:4' failed: Read-only file system [ 98.685770][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 98.690885][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 98.694444][ T4273] udevd[4273]: symlink '../../loop2' '/dev/disk/by-diskseq/343.tmp-b7:2' failed: Read-only file system [ 98.698354][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 98.702643][ T6721] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=f01cc01c, mo2=0002] [ 98.705160][ T6721] System zones: 0-1, 3-36 [ 98.720221][ T6430] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.722852][ T6430] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.782332][ T6430] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.784920][ T6430] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.787617][ T6721] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,usrquota,debug,data_err=abort,,errors=continue. Quota mode: writeback. [ 98.946861][ T6734] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1020'. [ 99.081748][ T645] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.084114][ T645] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.096479][ T645] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 99.116728][ T6742] loop1: detected capacity change from 0 to 512 [ 99.120714][ T645] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.122974][ T645] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.127933][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 99.178744][ T6742] EXT2-fs (loop1): warning: mounting ext3 filesystem as ext2 [ 99.180485][ T21] Bluetooth: hci2: command 0x040f tx timeout [ 99.417576][ T6762] loop2: detected capacity change from 0 to 128 [ 99.577484][ T6766] loop1: detected capacity change from 0 to 8192 [ 99.686191][ T6766] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 99.689446][ T6766] REISERFS (device loop1): using journaled data mode [ 99.698751][ T6766] reiserfs: using flush barriers [ 99.769513][ T6766] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 99.810217][ T6766] REISERFS (device loop1): checking transaction log (loop1) [ 99.850180][ T6766] REISERFS (device loop1): Using r5 hash to sort names [ 99.864177][ T6766] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 99.868395][ T6766] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 100.013685][ T6808] loop3: detected capacity change from 0 to 1024 [ 100.015691][ T6807] netlink: 368 bytes leftover after parsing attributes in process `syz.5.1047'. [ 100.018249][ T6807] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1047'. [ 100.156158][ T148] hfsplus: b-tree write err: -5, ino 4 [ 100.248159][ T6811] loop2: detected capacity change from 0 to 4096 [ 100.251379][ T6819] udc-core: couldn't find an available UDC or it's busy [ 100.253343][ T6819] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 100.313288][ T6811] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 100.516644][ T6824] loop3: detected capacity change from 0 to 4096 [ 100.588438][ T6824] ntfs: volume version 3.1. [ 100.625910][ T6831] loop1: detected capacity change from 0 to 4096 [ 100.648920][ T6839] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1059'. [ 100.656965][ T6824] __ntfs_warning: 46 callbacks suppressed [ 100.656977][ T6824] ntfs: (device loop3): ntfs_setattr(): Changes in user/group/mode are not supported yet, ignoring. [ 100.678435][ T6831] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 2) do not match. Run ntfsfix or chkdsk. [ 100.685029][ T6831] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 100.685733][ T6839] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1059'. [ 100.699948][ T6831] ntfs: (device loop1): ntfs_read_locked_inode(): $DATA attribute is missing. [ 100.702487][ T6831] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 100.722096][ T6839] netlink: 'syz.2.1059': attribute type 15 has an invalid length. [ 100.729506][ T6831] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 100.775559][ T6831] ntfs: volume version 3.1. [ 100.777053][ T6831] ntfs: (device loop1): ntfs_read_locked_inode(): Inode is not in use! [ 100.779405][ T6831] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x2 as bad. Run chkdsk. [ 100.821601][ T6831] ntfs: (device loop1): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 101.016455][ T6860] loop2: detected capacity change from 0 to 256 [ 101.071224][ T6868] loop5: detected capacity change from 0 to 512 [ 101.113790][ T6868] EXT2-fs (loop5): warning: mounting ext3 filesystem as ext2 [ 101.240015][ T5932] Bluetooth: hci2: command 0x0419 tx timeout [ 101.381287][ T6888] loop1: detected capacity change from 0 to 1024 [ 101.493440][ T148] hfsplus: b-tree write err: -5, ino 4 [ 101.506472][ T6899] loop3: detected capacity change from 0 to 8 [ 101.585172][ T6899] SQUASHFS error: lzo decompression failed, data probably corrupt [ 101.587610][ T6899] SQUASHFS error: Failed to read block 0x28d: -5 [ 101.589469][ T6899] SQUASHFS error: Unable to read metadata cache entry [28b] [ 101.604299][ T6899] SQUASHFS error: Unable to read inode 0x11f [ 101.618708][ T6908] loop5: detected capacity change from 0 to 512 [ 101.694515][ T6908] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 101.765561][ T6908] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 101.830386][ T6908] EXT4-fs (loop5): 1 truncate cleaned up [ 101.846095][ T6908] EXT4-fs (loop5): mounted filesystem without journal. Opts: noinit_itable,block_validity,sysvgroups,,errors=continue. Quota mode: writeback. [ 101.957642][ T6908] EXT4-fs error (device loop5): ext4_xattr_block_get:546: inode #15: comm syz.5.1088: corrupted xattr block 19 [ 102.017925][ T6908] EXT4-fs error (device loop5): ext4_get_inode_usage:852: inode #15: comm syz.5.1088: corrupted xattr block 19 [ 102.186033][ T6953] loop4: detected capacity change from 0 to 2048 [ 102.240169][ T6953] loop4: p1 < > p4 < > [ 102.310264][ T6967] loop1: detected capacity change from 0 to 128 [ 102.341939][ T3645] loop4: p1 < > p4 < > [ 102.445025][ T6953] loop4: detected capacity change from 0 to 2048 [ 102.504399][ T6984] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 102.713922][ T6999] loop1: detected capacity change from 0 to 256 [ 102.785666][ T6999] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 102.786729][ T6999] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 102.787211][ T6999] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 102.787234][ T6999] UDF-fs: Scanning with blocksize 512 failed [ 102.790250][ T6999] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 102.795313][ T6999] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 103.056392][ T4019] udevd[4019]: symlink '../../loop1' '/dev/disk/by-diskseq/352.tmp-b7:1' failed: Read-only file system [ 103.093752][ T7029] tipc: Enabling of bearer rejected, failed to enable media [ 103.352568][ T7059] loop4: detected capacity change from 0 to 1024 [ 103.452723][ T4019] udevd[4019]: symlink '../../loop3' '/dev/disk/by-diskseq/329.tmp-b7:3' failed: Read-only file system [ 103.590110][ T7087] loop5: detected capacity change from 0 to 16 [ 103.709104][ T7087] erofs: (device loop5): mounted with root inode @ nid 36. [ 103.929824][ T7109] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1169'. [ 104.016030][ T4019] udevd[4019]: symlink '../../loop2' '/dev/disk/by-diskseq/353.tmp-b7:2' failed: Read-only file system [ 104.352549][ T4019] udevd[4019]: symlink '../../loop1' '/dev/disk/by-diskseq/352.tmp-b7:1' failed: Read-only file system [ 104.421210][ T7084] loop3: detected capacity change from 0 to 32768 [ 104.538934][ T7084] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 104.553794][ T4273] udevd[4273]: symlink '../../loop1' '/dev/disk/by-diskseq/354.tmp-b7:1' failed: Read-only file system [ 104.565987][ T4881] udevd[4881]: symlink '../../loop2' '/dev/disk/by-diskseq/353.tmp-b7:2' failed: Read-only file system [ 104.592216][ T7103] loop1: detected capacity change from 0 to 32768 [ 104.604332][ T4272] udevd[4272]: symlink '../../loop4' '/dev/disk/by-diskseq/350.tmp-b7:4' failed: Read-only file system [ 104.679581][ T4881] udevd[4881]: symlink '../../loop2' '/dev/disk/by-diskseq/353.tmp-b7:2' failed: Read-only file system [ 104.688652][ T4272] udevd[4272]: symlink '../../loop4' '/dev/disk/by-diskseq/350.tmp-b7:4' failed: Read-only file system [ 104.693486][ T7103] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 104.719164][ T4038] ocfs2: Unmounting device (7,3) on (node local) [ 104.739212][ T6608] udevd[6608]: symlink '../../loop5' '/dev/disk/by-diskseq/365.tmp-b7:5' failed: Read-only file system [ 104.739444][ T7103] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode. [ 104.786183][ T7115] loop4: detected capacity change from 0 to 32768 [ 104.803904][ T7142] binder_alloc: binder_alloc_mmap_handler: 7141 20735000-20736000 already mapped failed -16 [ 104.893963][ T4027] ocfs2: Unmounting device (7,1) on (node local) [ 105.217639][ T7170] loop5: detected capacity change from 0 to 1024 [ 105.839578][ T7170] EXT4-fs (loop5): Ignoring removed orlov option [ 105.843719][ T7170] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 105.922081][ T7180] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.1194'. [ 105.939037][ T7170] EXT4-fs (loop5): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 105.954446][ T7180] netlink: zone id is out of range [ 105.976380][ T7180] netlink: zone id is out of range [ 106.013170][ T7180] netlink: del zone limit has 4 unknown bytes [ 106.077891][ T7187] loop3: detected capacity change from 0 to 256 [ 106.103681][ T7184] netlink: 304 bytes leftover after parsing attributes in process `syz.1.1196'. [ 106.329172][ T7194] loop4: detected capacity change from 0 to 4096 [ 106.360970][ T7194] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 106.371878][ T7194] ntfs: (device loop4): check_mft_mirror(): $MFTMirr location mismatch. Run chkdsk. [ 106.371899][ T7194] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT. Will not be able to remount read-write. Run ntfsfix and/or chkdsk. [ 106.391490][ T7194] ntfs: volume version 3.1. [ 106.974920][ T7220] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1214'. [ 107.579038][ T7202] loop3: detected capacity change from 0 to 40427 [ 107.618999][ T7202] F2FS-fs (loop3): Wrong secs_per_zone / total_sections (4285726721, 24) [ 107.639725][ T7202] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 107.670197][ T7202] F2FS-fs (loop3): invalid crc value [ 107.705399][ T7202] F2FS-fs (loop3): Found nat_bits in checkpoint [ 107.712875][ T7233] loop4: detected capacity change from 0 to 8 [ 107.750959][ T7202] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 107.752994][ T7202] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 107.898268][ T7217] loop5: detected capacity change from 0 to 40427 [ 108.016634][ T7217] F2FS-fs (loop5): Found nat_bits in checkpoint [ 108.057838][ T7222] loop2: detected capacity change from 0 to 32768 [ 108.066167][ T4272] udevd[4272]: symlink '../../loop4' '/dev/disk/by-diskseq/375.tmp-b7:4' failed: Read-only file system [ 108.090182][ T7217] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 108.150470][ T4019] udevd[4019]: symlink '../../loop3' '/dev/disk/by-diskseq/361.tmp-b7:3' failed: Read-only file system [ 108.157554][ T7246] netlink: 'syz.3.1220': attribute type 3 has an invalid length. [ 108.171415][ T7246] netlink: 'syz.3.1220': attribute type 3 has an invalid length. [ 108.173573][ T7246] netlink: 'syz.3.1220': attribute type 3 has an invalid length. [ 108.175693][ T7246] netlink: 'syz.3.1220': attribute type 3 has an invalid length. [ 108.178149][ T6430] attempt to access beyond end of device [ 108.178149][ T6430] loop5: rw=2049, want=45104, limit=40427 [ 108.189094][ T4019] udevd[4019]: symlink '../../loop3' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:3' failed: Read-only file system [ 108.205460][ T7228] loop1: detected capacity change from 0 to 40427 [ 108.213040][ T4272] udevd[4272]: symlink '../../loop4' '/dev/disk/by-diskseq/375.tmp-b7:4' failed: Read-only file system [ 108.218156][ T7246] netlink: 'syz.3.1220': attribute type 3 has an invalid length. [ 108.227994][ T7246] netlink: 'syz.3.1220': attribute type 3 has an invalid length. [ 108.238437][ T7222] XFS (loop2): Mounting V5 Filesystem [ 108.246204][ T7228] F2FS-fs (loop1): invalid crc value [ 108.255099][ T7246] netlink: 'syz.3.1220': attribute type 3 has an invalid length. [ 108.257806][ T7246] netlink: 'syz.3.1220': attribute type 3 has an invalid length. [ 108.259435][ T7228] F2FS-fs (loop1): Found nat_bits in checkpoint [ 108.260703][ T7246] netlink: 'syz.3.1220': attribute type 3 has an invalid length. [ 108.264288][ T7246] netlink: 'syz.3.1220': attribute type 3 has an invalid length. [ 108.310065][ T7228] F2FS-fs (loop1): Start checkpoint disabled! [ 108.323849][ T4272] udevd[4272]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 108.331218][ T4040] udevd[4040]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 108.379267][ T4272] udevd[4272]: symlink '../../loop4' '/dev/disk/by-diskseq/375.tmp-b7:4' failed: Read-only file system [ 108.386548][ T7228] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 108.443103][ T4272] udevd[4272]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 108.464370][ T7263] IPVS: Scheduler module ip_vs_sip not found [ 108.492446][ T7222] XFS (loop2): Ending clean mount [ 108.495871][ T7222] XFS (loop2): Quotacheck needed: Please wait. [ 108.542380][ T4040] udevd[4040]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 108.552005][ T7222] XFS (loop2): Quotacheck: Done. [ 108.608901][ T6608] udevd[6608]: symlink '../../loop5' '/dev/disk/by-diskseq/374.tmp-b7:5' failed: Read-only file system [ 108.698212][ T4028] XFS (loop2): Unmounting Filesystem [ 109.148223][ T7271] loop4: detected capacity change from 0 to 32768 [ 109.399987][ T7271] XFS (loop4): Mounting V5 Filesystem [ 109.549537][ T7271] XFS (loop4): Ending clean mount [ 109.563650][ T7320] loop3: detected capacity change from 0 to 1024 [ 109.569258][ T7271] XFS (loop4): Quotacheck needed: Please wait. [ 109.601514][ T7320] EXT4-fs (loop3): Ignoring removed oldalloc option [ 109.603415][ T7320] EXT4-fs (loop3): Ignoring removed orlov option [ 109.660504][ T7320] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug_want_extra_isize=0x0000000000000080,grpjquota=,oldalloc,errors=remount-ro,orlov,usrquota,stripe=0x0000000000000622,. Quota mode: writeback. [ 109.668858][ T7271] XFS (loop4): Quotacheck: Done. [ 109.799151][ T7298] loop1: detected capacity change from 0 to 32768 [ 109.807123][ T4037] XFS (loop4): Unmounting Filesystem [ 109.849891][ T7283] loop5: detected capacity change from 0 to 32768 [ 109.949137][ T7298] XFS (loop1): Mounting V5 Filesystem [ 110.066926][ T7283] XFS (loop5): Mounting V5 Filesystem [ 110.208355][ T7298] XFS (loop1): Ending clean mount [ 110.219429][ T7298] XFS (loop1): Quotacheck needed: Please wait. [ 110.355697][ T7283] XFS (loop5): Ending clean mount [ 110.377068][ T7298] XFS (loop1): Quotacheck: Done. [ 110.390364][ T7283] XFS (loop5): Quotacheck needed: Please wait. [ 110.429528][ T7283] XFS (loop5): Quotacheck: Done. [ 110.468938][ T4027] XFS (loop1): Unmounting Filesystem [ 110.490778][ T6430] XFS (loop5): Unmounting Filesystem [ 110.514053][ T7355] loop2: detected capacity change from 0 to 32768 [ 110.614012][ T7355] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 110.664522][ T7355] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 110.840759][ T4028] ocfs2: Unmounting device (7,2) on (node local) [ 110.852321][ T7386] vhci_hcd: invalid port number 15 [ 110.856599][ T7386] vhci_hcd: invalid port number 15 [ 111.076279][ T7396] loop1: detected capacity change from 0 to 2048 [ 111.123729][ T7396] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 111.131032][ T7396] UDF-fs: warning (device loop1): udf_load_logicalvol: Damaged or missing LVID, forcing readonly mount [ 111.245508][ T7396] loop1: detected capacity change from 0 to 128 [ 111.312335][ T7396] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 111.370470][ T7421] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1277'. [ 111.530891][ T7435] loop2: detected capacity change from 0 to 2048 [ 111.561764][ T4740] kernel write not supported for file /dsp (pid: 4740 comm: kworker/0:12) [ 111.607873][ T7435] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 111.695804][ T7454] loop3: detected capacity change from 0 to 128 [ 111.768921][ T7454] EXT4-fs (loop3): mounted filesystem without journal. Opts: dax=never,acl,,errors=continue. Quota mode: none. [ 112.035457][ T7469] netlink: 264 bytes leftover after parsing attributes in process `syz.5.1300'. [ 112.040802][ T7469] netlink: 168 bytes leftover after parsing attributes in process `syz.5.1300'. [ 112.303878][ T7493] loop1: detected capacity change from 0 to 128 [ 112.406805][ T7493] EXT4-fs (loop1): mounted filesystem without journal. Opts: dax=never,acl,,errors=continue. Quota mode: none. [ 112.419041][ T7500] syz.3.1313 (7500) used obsolete PPPIOCDETACH ioctl [ 112.743123][ T7514] loop5: detected capacity change from 0 to 16 [ 112.855593][ T7519] loop4: detected capacity change from 0 to 4096 [ 113.081907][ T7538] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1326'. [ 113.098025][ T7536] loop2: detected capacity change from 0 to 4096 [ 113.156261][ T7536] ntfs3: loop2: try to read out of volume at offset 0x3fffffc0c00 [ 113.158927][ T7536] ntfs3: loop2: try to read out of volume at offset 0x3fffffc0c00 [ 113.169261][ T7536] ntfs3: loop2: try to read out of volume at offset 0x3fffffc0c00 [ 113.198192][ T7536] ntfs3: loop2: try to read out of volume at offset 0x3fffffc0c00 [ 113.207327][ T7536] ntfs3: loop2: try to read out of volume at offset 0x3fffffc1c00 [ 113.224808][ T7536] ntfs3: loop2: try to read out of volume at offset 0x3fffffc2c00 [ 113.237847][ T7536] ntfs3: loop2: try to read out of volume at offset 0x3fffffc4c00 [ 113.251540][ T7536] ntfs3: loop2: try to read out of volume at offset 0x3fffffc8c00 [ 113.254001][ T7536] ntfs3: loop2: try to read out of volume at offset 0x3fffffd0c00 [ 113.256266][ T7536] ntfs3: loop2: try to read out of volume at offset 0x3fffffe0c00 [ 113.483694][ T7557] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1334'. [ 113.542827][ T7514] erofs: (device loop5): check_layout_compatibility: unidentified incompatible feature 38, please upgrade kernel version [ 113.573843][ T4273] udevd[4273]: symlink '../../loop5' '/dev/disk/by-diskseq/386.tmp-b7:5' failed: Read-only file system [ 113.578048][ T4273] udevd[4273]: symlink '../../loop5' '/dev/disk/by-uuid/dc99752b-953d-459c-b2db-a5c46e0e7dba.tmp-b7:5' failed: Read-only file system [ 113.579285][ T7561] validate_nla: 44 callbacks suppressed [ 113.579297][ T7561] netlink: 'syz.3.1335': attribute type 3 has an invalid length. [ 113.585178][ T7560] loop2: detected capacity change from 0 to 256 [ 113.626320][ T4881] udevd[4881]: symlink '../../loop1' '/dev/disk/by-diskseq/388.tmp-b7:1' failed: Read-only file system [ 113.660514][ T7519] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 113.849338][ T4019] udevd[4019]: symlink '../../loop4' '/dev/disk/by-diskseq/384.tmp-b7:4' failed: Read-only file system [ 113.861760][ T7570] netlink: 172 bytes leftover after parsing attributes in process `syz.4.1341'. [ 113.865943][ T4019] udevd[4019]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 113.876408][ T4019] udevd[4019]: symlink '../../loop4' '/dev/disk/by-uuid/7A12269445CA348F.tmp-b7:4' failed: Read-only file system [ 114.372507][ T7584] loop4: detected capacity change from 0 to 64 [ 114.679442][ T7597] loop5: detected capacity change from 0 to 4096 [ 115.225730][ T7603] loop3: detected capacity change from 0 to 32768 [ 115.421960][ T7584] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing [ 115.716139][ T7640] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1359'. [ 115.892326][ T4272] udevd[4272]: symlink '../../loop2' '/dev/disk/by-diskseq/414.tmp-b7:2' failed: Read-only file system [ 115.896575][ T7597] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) [ 115.918362][ T4881] udevd[4881]: symlink '../../loop1' '/dev/disk/by-diskseq/388.tmp-b7:1' failed: Read-only file system [ 116.154923][ T4273] udevd[4273]: symlink '../../loop5' '/dev/disk/by-diskseq/386.tmp-b7:5' failed: Read-only file system [ 116.198589][ T4273] udevd[4273]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 116.286288][ T7637] loop3: detected capacity change from 0 to 32768 [ 116.383044][ T7637] XFS (loop3): Mounting V5 Filesystem [ 116.468888][ T7637] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 116.736242][ T7637] XFS (loop3): Starting recovery (logdev: internal) [ 116.753883][ T7637] XFS (loop3): Ending recovery (logdev: internal) [ 116.887620][ T7680] loop5: detected capacity change from 0 to 32768 [ 116.908141][ T4038] XFS (loop3): Unmounting Filesystem [ 117.080903][ T7698] loop1: detected capacity change from 0 to 64 [ 117.224691][ T7698] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing [ 117.444409][ T7708] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1369'. [ 118.591241][ T4273] udevd[4273]: symlink '../../loop5' '/dev/disk/by-diskseq/420.tmp-b7:5' failed: Read-only file system [ 118.613137][ T6608] udevd[6608]: symlink '../../loop2' '/dev/disk/by-diskseq/431.tmp-b7:2' failed: Read-only file system [ 118.628436][ T4881] udevd[4881]: symlink '../../loop5' '/dev/disk/by-diskseq/420.tmp-b7:5' failed: Read-only file system [ 118.647181][ T4019] udevd[4019]: symlink '../../loop4' '/dev/disk/by-diskseq/400.tmp-b7:4' failed: Read-only file system [ 118.674489][ T4273] udevd[4273]: symlink '../../loop1' '/dev/disk/by-diskseq/411.tmp-b7:1' failed: Read-only file system [ 118.677483][ T4272] udevd[4272]: symlink '../../loop3' '/dev/disk/by-diskseq/426.tmp-b7:3' failed: Read-only file system [ 118.694246][ T6608] udevd[6608]: symlink '../../loop2' '/dev/disk/by-diskseq/433.tmp-b7:2' failed: Read-only file system [ 118.697275][ T4019] udevd[4019]: symlink '../../loop4' '/dev/disk/by-diskseq/402.tmp-b7:4' failed: Read-only file system [ 118.708397][ T4272] udevd[4272]: symlink '../../loop3' '/dev/disk/by-uuid/c496e05e-540d-4c72-b591-04d79d8b4eeb.tmp-b7:3' failed: Read-only file system [ 118.723752][ T4019] udevd[4019]: symlink '../../loop4' '/dev/disk/by-diskseq/402.tmp-b7:4' failed: Read-only file system [ 118.971520][ T7741] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1377'. [ 119.698191][ T7755] loop5: detected capacity change from 0 to 32768 [ 120.488369][ T7774] ------------[ cut here ]------------ [ 120.490447][ T7774] kernel BUG at net/netfilter/nf_conntrack_core.c:570! [ 120.492696][ T7774] Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP [ 120.495017][ T7774] Modules linked in: [ 120.496128][ T7774] CPU: 1 PID: 7774 Comm: syz.1.1394 Not tainted 5.15.183-syzkaller #0 [ 120.498604][ T7774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 120.501541][ T7774] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 120.503920][ T7774] pc : __nf_conntrack_confirm+0xd7c/0xde8 [ 120.505640][ T7774] lr : __nf_conntrack_confirm+0xd7c/0xde8 [ 120.507287][ T7774] sp : ffff80001ff270f0 [ 120.508500][ T7774] x29: ffff80001ff27170 x28: 0000000000000000 x27: dfff800000000000 [ 120.510900][ T7774] x26: ffff0000ea7440c8 x25: ffff0000ea7440c0 x24: ffff0000ea7440d0 [ 120.513325][ T7774] x23: ffff0000ea744000 x22: 0000000000028bb2 x21: 0000000000000000 [ 120.515736][ T7774] x20: ffff80018d058000 x19: 0000000000000000 x18: 0000000000000200 [ 120.518165][ T7774] x17: 0000000000000002 x16: ffff8000082d465c x15: 0000000000000003 [ 120.520460][ T7774] x14: 0000000000ff0100 x13: 1ffff0000282a06b x12: 0000000000080000 [ 120.522820][ T7774] x11: 000000000000162e x10: ffff8000206e9000 x9 : ffff80000fa867f0 [ 120.525138][ T7774] x8 : 000000000000162f x7 : ffff80000fa85d38 x6 : 0000000000000000 [ 120.527456][ T7774] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000082d477c [ 120.529879][ T7774] x2 : 0000000000000001 x1 : 0000000000000000 x0 : 0000000000000000 [ 120.532208][ T7774] Call trace: [ 120.533138][ T7774] __nf_conntrack_confirm+0xd7c/0xde8 [ 120.534765][ T7774] nf_confirm+0x364/0x4cc [ 120.535996][ T7774] ipv4_confirm+0xec/0x1d0 [ 120.537319][ T7774] nf_hook_slow+0xb4/0x1f4 [ 120.538597][ T7774] NF_HOOK+0x1c4/0x354 [ 120.539814][ T7774] ip_local_deliver+0x120/0x194 [ 120.541288][ T7774] ip_rcv_finish+0x228/0x260 [ 120.542623][ T7774] NF_HOOK+0x2c0/0x354 [ 120.543860][ T7774] ip_rcv+0x7c/0x9c [ 120.545072][ T7774] __netif_receive_skb+0xcc/0x2ac [ 120.546585][ T7774] netif_receive_skb+0x1cc/0x7e0 [ 120.548035][ T7774] tun_rx_batched+0x478/0x5b4 [ 120.549410][ T7774] tun_get_user+0x1f48/0x31c4 [ 120.550771][ T7774] tun_chr_write_iter+0xfc/0x20c [ 120.552327][ T7774] vfs_write+0x7c8/0xa2c [ 120.553493][ T7774] ksys_write+0x120/0x210 [ 120.554741][ T7774] __arm64_sys_write+0x7c/0x90 [ 120.556086][ T7774] invoke_syscall+0x98/0x2b8 [ 120.557298][ T7774] el0_svc_common+0x138/0x258 [ 120.558650][ T7774] do_el0_svc+0x58/0x14c [ 120.559971][ T7774] el0_svc+0x78/0x1e0 [ 120.561288][ T7774] el0t_64_sync_handler+0xcc/0xe4 [ 120.562753][ T7774] el0t_64_sync+0x1a0/0x1a4 [ 120.563978][ T7774] Code: aa1703e2 96b8acdb 17fffd2c 9627c845 (d4210000) [ 120.565998][ T7774] ---[ end trace 23985822e5950a10 ]--- [ 121.080557][ T7774] Kernel panic - not syncing: Oops - BUG: Fatal exception in interrupt [ 121.082799][ T7774] SMP: stopping secondary CPUs [ 121.084096][ T7774] Kernel Offset: disabled [ 121.085284][ T7774] CPU features: 0x8,000081c1,21302e40 [ 121.086715][ T7774] Memory Limit: none [ 121.574781][ T7774] Rebooting in 86400 seconds..