last executing test programs: 5.385579303s ago: executing program 4 (id=672): fsmount(0xffffffffffffffff, 0x0, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000180)='wg1\x00', 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) listen(r0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000100), 0x4) madvise(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x15) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x64) mlock2(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e00000000000000001000000010000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x48) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x28011, r4, 0x0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000e47000/0x2000)=nil) 4.604295269s ago: executing program 4 (id=673): syz_mount_image$hfsplus(&(0x7f0000007340), &(0x7f0000000080)='./file0\x00', 0x1400008, &(0x7f0000000a00)={[{@nodecompose}, {@umask={'umask', 0x3d, 0x1}}, {@force}, {@uid}, {@creator={'creator', 0x3d, "42629f57"}}, {@gid}, {@nls={'nls', 0x3d, 'cp866'}}]}, 0x3, 0x63f, &(0x7f0000001440)="$eJzs3UtsG2kdAPD/OI4TB9TN7qa7BVYi2koLIqLNQ1kIF8pDKIcVqsqBc9S6jVU3rRIXpRVC4SUOXDhUnMshN05IvUcqZ7igXnOsBOqlB5Sb0YzHiRPn4TxaO/T3q8bzff6++eY/f3terqIJ4J01PxHFjUhifuKL1bS+uT5T21yfGcqbaxGRlgsRxeYskqWI5Hmz+Vr68pX0zbx/ctB6nlTnbrx4vfmyWSu2Fk5KaWn44OWO0lxwLZ9iPCIG8nmnwW5H3TXezQPH289//rh/kM1A022+3Eoc9Fqjw9pxFj/xfgv0j6R53uwwGjGSnaGb1wGRHx0Kbze6s3esoxwAAACcU+9txdZao9HodRwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwnuTP/0/yqdAqj0fSev5/qa17qYehnomNXgcAAAAAAAAAACfSGGivfX0rtmI1Lmy3JlGI4fg0q4xlr1+Kh7ESlViOK7EaC1GPeizHVESMtg1UWl2o15enulhyet8lp9/oRgMAAAAAAADA/7vfxPzO//8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEA/SCIGmrNsGmuVR6NQjIjhiCil/dYi/tkqn2cbvQ4AAAAA3oL3tmIrVuNCq95Isnv+j7L7/uF4GEtRj2rUoxaVuJX9FtC86y9srs/UNtdn7qVT57h//m8j02UY2YjR/O1h/zVfynqU43ZUs3euxM24H7Vy+yiXWvHsxJW0Nf/6VTr293NdRnYrYvpreflPsXvA3hrNMjK4nZHJPLY0j+93ZqLdD16dak1TUdj+5Wfs8DWdKOcj+TzZM++9vZmYjkKW79RHh2ci4hvP/vrzxdrS3cXbKxP9s0kn1MxEo9HMxFBWa2Xi43cqE5PZtl/crs/HT+JnMRHjcT2Woxq/iIWoRyXG48dZaSH/Pqevo3syVdg99LVdtetHRVLKP5fmUfR4MX2aLXshqvHTuB+3ohKfZ/+mYyq+E7MxG3Ntn/DFLvb6wvH2+svfzAvpIf0P+bw/pHl9vy2v7cfc0ayt/Z2dLH1w9sfG4lfzQrqO30bEj85wO09nbybSs8SzLzfbPjw8E3/JrhNWakt3lxcXHnS5vs/yebof/b6vzhLp9+WD9MPKaru/HWnbh/u2TWVtY9tthY62i9ttR+2ppfwarnOk6azt433bZrK2S21tHddb6fUQAP1u5FsjpfK/y/8oPy3/rrxY/mL4h0PfHfqkFIN/H/xecXLgs8Inyd/iafxq5/4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4uZVHj+8u1GqV5SMLSfbw/4iuOrcVWo9zOrxzkj/I5zgjK9RqleHoizCOVaj9K6LtnaTX8fRDYaj15S/3Rzy13h6XgDfvav3eg6srjx5/u3pv4U7lTmVpcHZ2bnJu9vOZq7ertYFIXyuTvY4SeBN2Tvq9jgQAAAAAAAAAAADo1uF/BjCY9zrdnxP0eBMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAc25+IoobkcTU5JXJtL65PlNLp1Z5p2cxIgoRkfwyInkecS2aU4y2DZcctJ4n1bkbL15vvtwZq9jqXzhsue6s5VOMR8RAPj+r8W6eerxkewvThF0unS44ODP/CwAA///rqwiw") setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB='osx.:;'], 0x0, 0x0, 0x0) listxattr(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 4.58800103s ago: executing program 1 (id=674): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x440, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000080)={0x0, 0x4004, 0x4000}) ioctl$RTC_IRQP_READ(r0, 0x40187013, &(0x7f0000000080)) 4.537899517s ago: executing program 3 (id=675): connect$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x64) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f0000000300)=0x100000001, 0x4) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$TCSBRKP(r4, 0x5425, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TCSETSW2(r4, 0x5425, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x0, 0x0, 0xfffffffffffffd25) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x3d0, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x430) socket$nl_route(0x10, 0x3, 0x0) 4.50089698s ago: executing program 1 (id=676): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x0, 0xfffffffd, 0x1, @mcast1, @mcast2, 0x8000, 0x0, 0x2000002}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x0, 0x88, 0x0, 0x0, 0x0, @local, @rand_addr=' \x01\x00'}}) 4.433054275s ago: executing program 4 (id=677): r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000340)={0x2, 0x4e20, 0x0, @dev, 0x20}, 0x1c) sendmmsg$inet(r0, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x20}}}}], 0x50}}], 0x1, 0x0) 4.36854272s ago: executing program 1 (id=678): syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file1\x00', 0x50, &(0x7f00000001c0)={[{@jqfmt_vfsv1}, {@stripe={'stripe', 0x3d, 0x4}}, {@dioread_nolock}, {@mblk_io_submit}, {@nogrpid}, {@usrjquota}]}, 0x1, 0x3ed, &(0x7f0000001240)="$eJzs3E9PHGUYAPBnhn9CC4uJB1M9kGgUo0IXRa0xsXr1z6X6AQjQ2khLUzCxlQMaT548GG8e+gU8+AGaxjQx8Sv4BUyTxlAOesPM7MyywLCC7LIt/f2Syb7vzOw+77MzTN532HkDeGxNRMT5iOiLiJmIqBXr02KJ9caS7fdgY21+c2NtPomtrQt/JZEU68rPSorXU0VlMo1Iv414Zn1v3JUbNz+fW1pavF7Up1evXJteuXHz1ctX5i4tXlq8Wn/zXL0+O/NW/fWO5frj8y+d63v//Jmf/qjdmR0cHM7ae7rY1ppHp0zERPM72W2208F6bLDXDQAA4EDSou/fn/f/a9GXlxpqMb3W08YBAAAAHbH1bvEKAAAAnGCJsT8AAACccOXvAB5srM2XSw9/jnDs7r8XEePbzzZvNvPvjyeKfQa6+HzrRERceyGpZUt06TlkAIBWd7L+z9mq/l8aT7fsNxSR94eGOxx/Yld9b/8nvdfhkDtk/b93ImJzT/8vLXcZ7ytqo3lXcSC5eHlp8WxEjEXEZAwMZfV6mxgf/P3zx/tty/K/m4yOlUsW/26Sf3Qhvdc/tPM9C3Orc0fJudX9ryPO9FflnzT7v0lEjBwhRt9Xt97eb1t1/qNjRwh3KFu3Il6sPP7bM/ck7ecnms7Ph+nyrNjrn29++Wi/+L3OPzv+I+3zH09a52taOXyM25/9/mxeqMiqdfxTnX/1+T+YfJKXy3HZl3Orq9frEYPJh3vXz2y/t6yX+2f5Tz5X/fdfXv+SYk6r08U14LC++/7XV9rv0cg/W7L45VjwOGT5Lxzq+LcrXBiu2vTG7d8+3S9+8/gnEeuV+WfHvzEH2GSx5iDXv/9q6f8/mwEAAODRk+b3NZJ0qllO06mpxv2Op2IkXVpeWX354vIXVxca9z/GYyAt73TVWu6H1hv/Rm/WZ3bVX4uIJyPih9pwXp+aX15a6HXyAAAA8Jg4tc/4P/Pnsf0KAQAAAOi68V43AAAAAOg6438AAAA40Q42r5/CzkL2zT0EzVBQ6Fqh11cmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAR9u/AQAA//8mJ7Np") r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0\x00', 0x42, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000000)={0x0, 0x4, 0x2, 0xfff}) 3.593410849s ago: executing program 3 (id=680): syz_mount_image$exfat(&(0x7f00000009c0), &(0x7f0000000000)='./file1\x00', 0x8, &(0x7f0000000740)={[{@utf8}, {@iocharset={'iocharset', 0x3d, 'iso8859-6'}}, {}, {@iocharset={'iocharset', 0x3d, 'euc-jp'}}, {@errors_remount}, {@namecase}, {@iocharset={'iocharset', 0x3d, 'iso8859-13'}}, {@dmask={'dmask', 0x3d, 0x1}}, {@time_offset={'time_offset', 0x3d, 0x6}}, {@errors_remount}]}, 0x1, 0x152b, &(0x7f0000000a00)="$eJzs3AmYjtXbAPD7Puc8Y0zS2yTLcM65H95kOSZJsiTJkiRJkmRLSJrkLwmJIVvSkIRkGZJlCMkyMWns+74kJEmTJCHZkvNdir/66r8vvuub+3ddzzXnfs9zn+c87/0+8yyzfNN5SI1GNas2ICL4l+AvX5IBIBYABgDANQAQAEDZ+LLxF/pzSkz+1zbC/r0eSrvSM2BXEtc/e+P6Z29c/+yN65+9cf2zN65/9sb1z964/oxlZ5umFbiWl+y78PP/7IzP//+PZJUa88WaUtd3AYj5e1O4/tkb1///reDvWYnrn71x/bOr2Cs9AfZ/AB//2UGOv9jD9c/euP6MZWdX+vnzf36Rf7UfItnhPfgr+88YY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjP0XnPaXKQC41L7S82KMMcYYY4wxxti/j89xpWfAGGOMMcYYY4yx/zwEARIUBBADOSAWckIcCAC4GnLDNRCBayEeroM8cD3khXyQHwpAAhSEQqDBgAWCEApDEYjCDVAUboRiUBxKQElwUAoS4SYoDTdDGbgFysKtUA5ug/JQASpCJbgdKsMdUAXuhKpwF1SD6lADasLdUAvugdpwL9SB+6Au3A/14AGoDw9CA3gIGsLD0AgegcbwKDSBptAMmkOLfyr/BegOL0IP6AnJ0At6w0vQB/pCP+gPA+BlGAivwCB4FVJgMAyB12AovA7D4A0YDiNgJLwJo+AtGA1jYCyMg1QYDxPgbZgI78AkmAxTYCqkwTSYDu/CDJgJs+A9mA3vwxyYC/NgPqTDB7AAFkIGfAiL4CPIhMWwBJbCMlgOK2AlrILVsAbWwjpYDxtgI2yCzbAFtsI22A474GPYCZ/ALtgNe/5cv38k/9Sv8j+FvdAFAQEFClSoMAZjMBZjMQ7jMBfmwtyYGyMYwXiMxzyYB/NiXsyP+TEBE7AQFkKDBgkJC2NhjGIUi2JRLIbFsASWQIcOEzERS+PNWAbLYFksi+WwHJbHClgBK2ElrIyVsQpWwapYFathNayBNfBuvBt7YW2sjXWwDtbFupceT2EDbIANsSE2wkbYGBtjE2yCzbAZtsAW2BJbYitshW2wDbbFttgO22ESJmF7bI8dsAN2xI7YCTthZ+yMXbArds16IQfgi/gi9sRqohf2xt7YB1Ny9MP+2B9fxoH4Cr6Cr2IKDsYh+Bq+hq/jMDyJw3EEjsSRWFm8haNxDJIYh6mYihNwAk7EiTgJJ+NknIppOA2n43ScgTNxJr6Hs/F9fB/n4lycj+mYjgtwIWZgBi7CU5iJi3EJLsVluByX4UpchStxDa7FNbge1+NG3IibcTNuxa24Hbfjx6gA8BPcjbsxBffiXtyH+3A/7scDeACzMAsP4kE8hIfwMB7GI3gEj+IxPI7H8ASewJN4Ck/jaTyLZ/EcPpfwVcOPi69OAXGBEkrEiBgRK2JFnIgTuUQukVvkFhEREfEiXuQReURekVfkF/lFgkgQhUQhYYQRJMIYABBRERVFRVFRTBQTJUQJ4YQTiSJRlBalRRlRRpQVt4py4jZRXlQQrV0lUUlUFm1cFXGnqCqqimqiuqghaoqaopaoJWqL2qKOqCPqirqinnhA1Be9sB8+JC5UppEYjI3FEGwimgp58QhoKYZhK9FatBFPiBE4HNuJli5JPC3ai9HYQfxJjMFnRScxDjuL50UX0VV0Ey+I7qKV6yF6iknYS/QWU7GP6Cv6if5iBlYX7+HsnDXEqyJFDBZDxGtiPr4uhok3xHAxQowUb4pR4i0xWowRY8U4kSrGiwnibTFRvCMmicliipgq0sQ0MV28K2aImWKWeE/MFu+LOWKumCfmi3TxgVggFooM8aFYJD4SmWKxWCKWimViuVghVopVYrVYI9aKdWK92CA2ik1is9gitoptYrvYIT4WO8UnYpfYLfaIT8Ve8ZnYJz4X+8UX4oD4UmSJr8RB8bU4JL4Rh8W34oj4ThwVx8Rx8b04IX4QJ8UpcVqcEWfFj+Kc+EmcF16ARCmklEoGMkbmkLEyp4yTV8lcMrj47l4r4+V1Mo+8XuaV+WR+WUAmyIKykNTSSCtJhrKwLCKj8gZZVN4oi8nisoQsKZ0sJRPlTbK0vFmWkbfIsvJWWU7eJsvLCrKirCRvl5XlHRIiv2yjmqwua8ia8m6ZDPfI2vJeWUfeJ+vK+2U9+YCsLx+UDeRDsqF8WDaSj8jG8lHZRDaVzWRz2UI+JlvKx2Ur2Vq2kU/ItvJJ2U4+JZPk07K99Bc/Is/KTvI52Vk+L7vIrrKb/Emel172kD0l9ALZW74k+8i+sp/sLwfIl+VA+YocJF+VKXKwHCJfk0Pl63KYfEMOlyPkSPmmHCXfkqPlGDlWjpOpcrycIN+WE+U7cpKcLKfIqTJNTpP9Lo40S8q/mf/2r/MvnHrlNDno561vlJvkZrlFbpXb5Ha5Q34sd8qdcpfcJffIPXKv3Cv3yX1yv9wvD8gDMktmyYPyoDwkD8nD8rA8Io/Io/KYPCO/lyfkD/KkPCVPyTPyrDwrz118D0ChEkoqpQIVo3KoWJVTxamrVC51tcqtrlERda2KV9epPOp6lVflU/lVAZWgCqpCSiujrCIVqsKqiIqqG/DiB0aVUCWVU6VUorrpH8lXRdWNqpgq/pv8S/NL/gvza6FaqJaqpWqlWqk2qo1qq9qqdqqdSlJJqr1qrzqoDqqj6qg6qU6qs+qsuqguqpvqprqr7qqH6qGSVbLqrV5SfVRf1U/1VwPUy2qgGqgGqUEqRaWoIWqIGqqGqmFqmBquhquRaqQapUap0Wq0GqvGqlSVqiaoCWqimqgmqUlqipqi0lSamq6mqxlqhpqlZqnZaraao+aoeWqeSlfpaoFaoDJUhlqkFqlMtVgtVkvVUrVcLVcr1Uq1Wq1Wa9VatV6tV5lqk9qktqgtapvapnaoHWqn2ql2qV1qj9qj9qq9ap/ap/ar/eqAOqCyVJY6qA6qQ+qQOqwOqyPqiDqqjqrj6rg6oU6ok+qkOq1Oq7PqrDqnzqnz6ryCQIAIRKACFcQEMUFsEBvEBXFBriBXkDvIHUSCSBAfxAd5guuDvEG+IH9QIEgICgaFAh2YwAbiYtGjwQ1B0eDGoFhQPCgRlAxcUCpIDG4KSgc3B2WCW4Kywa1BueC2oHxQIagYVApuDyoHdwRVgjuDqsFdQbWgelAjqBncHdQK7glqB/cGdYL7grrB/UG94IGgfvBg0CB4KGgYPBw0Ch4JGgePBk2CpkGzoHnQ4t86vvcn8z3ueuieOln30r31S7qP7qv76f56gH5ZD9Sv6EH6VZ2iB+sh+jU9VL+uh+k39HA9Qo/Ub+pR+i09Wo/RY/U4narH6wn6bT1Rv6Mn6cl6ip6q0/Q0PV2/q2fomXqWfk/P1u/rOXqunqfn63T9gV6gF+oM/aFepD/SmXqxXqKX6mV6uV6hV+pVerVeo9fqdXq93qA36k16s96it+pterveoT/WO/UnepferffoT/Ve/Znepz/X+/UX+oD+Umfpr/RB/bU+pL/Rh/W3+oj+Th/Vx/Rx/b0+oX/QJ/UpfVqf0Wf1j/qc/kmf1/7Cxf2F07tRRpkYE2NiTayJM3Eml8llcpvcJmIiJt7Emzwmj8lr8pr8Jr9JMAmmkClkLiBDprApbKImaoqaoqaYKWZKmBLGGWcSTaIpbUqbMqaMKWvKmnKmnClvypuKpqK53dxu7jB3mDvNneYuc5epbqqbmqamqWVqmdqmtqlj6pi6pq6pZ+qZ+qa+aWAamIamoWlkGpnGprFpYpqYZqaZaWFamJampWllWpk2po1pa9qadqadSTJJpr1pbzqYDqaj6Wg6mU6ms+lsupguppvpZrqb7qaH6WGSTbLpbXqbPqaP6Wf6mQFmgBloBppBZpBJMSlmiBlihpqhZpgZZoabEWbkhQtV85YZbcaYsWacSTWpZoKZYCaaiWaSmWSmmCkmzaSZ6Wa6mWFmmFlmlpltZps5Zo6ZZ+aZdJNuFpgFJsNkmEVmkck0mWaJWWKWmWVmhVlhVplVZo1ZY9bBOrPBbDCbzCazxWwx28w2s8PsMDvNTrPL7DJ7zB6z1+w1+8w+s9/sNwfMAZNlssxBc9AcMofMYXPYHDFHzFFz1Bw3x80Jc8KcNCfNaXPanDX5Lp4vvYm1OW2cvcrmslfb3PYa+7/j/LaATbAFbSGrbV6b7zexsdYWs8VtCVvSOlvKJtqbfheXtxVsRVvJ3m4r2ztsld/Ftew9tra919ax99ma9u7fxHXt/baefcTWRwSwTW1D29w2so/YxvZR28Q2tc1sc9vWPmnb2adskn3atrfP/C5eYBfaVXa1XWPX2l12tz1tz9hD9ht71v5oe9iedoB92Q60r9hB9lWbYgf/Lh5p37Sj7Ft2tB1jx9pxv4un2Kk2zU6z0+27doad+bs43X5gZ9sMO8fOtfPs/J/jC3PKsB/aRfYjm2kDWGKX2mV2uV1hV/55rkvtervBbrQ77Sd2i91qt9ntdselC2G72+6xn9q99jN70H5t99sv7AF72GbZr36OL+zfYfutPWK/s0ftMXvcfm9P2B/UpewL+/69/cmet94CIQFJUhRQDOWgWMpJcXQV5aKrKTddQxG6luLpOspD11Neykf5qQAlUEEqRJoMWSIKqTAVoSjdQJemV4JKkqNSlEg3UWm6mcrQLVSWbqVydBuVpwpUkSrR7VSZ7qAqdCdVpbuoGlWnGlST7qZadA/VpnupDt1Hdel+qkcPUH16kBrQQ9SQHqZG9Ag1pkepCTWlZtScWtBj1JIep1bUmtrQE9SWnqR29BQl0dPUnp6hDvQn6kjPUid6jjrT89SFulI3eoG604vUg3pSMvWi3vQS9aG+1I/60wB6mQbSKzSIXqUUGkxD6DUaSq/TMHqDhtMIGklv0ih6i0bTGBpL4yiVxtMEepsm0js0iSbTFJpKaTSNptO7NINm0ix6j2bT+zSH5tI8mk/p9AEtoIWUQR/SIvqIMmkxLaGltIyW0wpaSatoNa2htbSO1tMG2kibaDNtoa20jbbTDvqYdtIntIt20x76lPbSZ7SPPqf99AUdoC8pi76ig/Q1HaJv6DB963vSd3SUjtFx+p5O0A90kk7RaTpDZ+lHOkc/0XnyBCGGIpShCoMwJswRxoY5w7jwqjBXeHWYO7wmjITXhvHhdWGe8Powb5gvzB8WCBPCgmGhUIcmtCGFYVg4LBJGwxvCouGNYbGweFgiLBm6sFSYGN4Ulg5vDsuEt4Rlw1vDcuFtYfmwQvjIfZXC28PK4R1hlfDOsGp4V1gtrB7WCGuGd4e1wnvC2uG9YZ3wvrBMeH9YL3wgrB8+GDYIHwobhg+HjcJHwsbho2GTsGnYLGwetggfC1uGj4etwtZhm/CJsG34ZNgufCpMCp8O24fP/Nx//8K/3J8c9gp7hy+FL4Xe3yvnRedH06MfRBdEF0Yzoh9GF0U/imZGF0eXRJdGl0WXR1dEV0ZXRVdH10TXRtdF10c3RDdGva+ZAxw64aRTLnAxLoeLdTldnLvK5XJXu9zuGhdx17p4d53L4653eV0+l98VcAmuoCvktDPOOnKhK+yKuKi7wRV1N7pirrgr4Uo650q5RNfctXAtXEv3uGvlWrs27gn3hHvSPemeck+5p11794zr4P7kOrpnXSf3nHvOPe+6uK6um3vBdXfjc/9yTCa73q636+P6uH6unxvgBriBbqAb5Aa5FJfihrghbqgb6oa5YW64G+5GupFulBvlRrvRbqwb61JdqpvgJriJbqKb5Ca5KW6KS3Npbrqb7ma4Ga7yzF+2MsfNcfPcPJfu0t0Cd+GaMcMtcotcpst0S9wSt8wtcyvcCrfKrXJr3Bq3zq1zG9wGt8ltclvcFrfNbXM73A630+10u/w1vwzq9rp9bp/b7/a7A+5Ll+W+cgfd1+6Q+8Yddt+6I+47d9Qdc8fd9+6E+8GddKfcaXfGnXU/unPuJ3feeZcaGR+ZEHk7MjHyTmRSZHJkSmRqJC0yLTI98m5kRmRmZFbkvcjsyPuROZG5kXmR+ZH0yAeRBZGFkYzIh5FFkY8imZHFkSWRpZFlkeUR7wtuCX1hX8RH/Q2+qL/RF/PFfQlf0jtfyif6m3xpf7Mv42/xZf2tvpy/zZf3FXxF/6hv4pv6Zr65b+Ef8y39476Vb+3b+Cd8W/+kb+ef8kn+ad/eP+M7+D/5jv5Z38k/5zv7530X39V38y/47v5F38P39Mm+l+/tX/J9fF/fz/f3A/zLfqB/xQ/yr/oUP9gP8a/5of51P8y/4Yf7EX5kzJt+1KVbZBjnU/14P8G/7Sf6d/wkP9lP8VN9mp/mp/t3/Qw/08/y7/nZ/n0/x8/18/x8n+4/8Av8Qp/hP/SL/Ec+0y++9FDSr/Ar/Sq/2q/xa/06v95v8Bv9Jr/Zb/Fb/Ta/3e/wH/ud/hO/y+/2e/ynfq//zO/zn/v9/gt/wH/ps/xX/qD/2h/y3/jD/lt/xH/nj/pj/rj/3p/wP/iT/pQ/7c/4s/5Hf87/5M/z36wxxhhjjP1dxl9uit/2/PI4v9cf5IhfrdwbAK7eWiDr1/0XrijX5f2l3VcktI0AwNM9Oz90aalWLTk5+eK6mRKCInMBLv0k6IIYuBwvhjbwJCRBayj9h/PvK7qepb8xfvRWgLhf5cTC5fjy+J8DYPIfjP/YEyMXlAtPx/+V8ecCFCtyOScnXI4XQ5ufn6+0hjJ/Yf75Wv6N+ef8IhWg1a9ycsHl+PL8E+FxeAaSfrMmY4wxxhhjjDH2i76iYsdL95+XfuPzj+7PE9TlnBxwOf5b9+eMMcYYY4wxxhi78p7t2u2px5KSWnf8xxtV/qmsv7vRGP5TI3PjDxveA1x6RQHAvzggwIWG/G/uxeb/yrZSLh46/7tr2RkfwP+NUv7zjbF/fuUKf2NijDHGGGOM/dtdvvr/7evqSk2IMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhjLhv4b/1fsSu8jY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxdqX9TwAAAP//HmP+kg==") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 3.507553436s ago: executing program 0 (id=681): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x1, 0x54f4, &(0x7f0000005600)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.empty_time\x00', 0x275a, 0x0) quotactl_fd$Q_QUOTAOFF(r0, 0xffffffff80000302, 0x0, 0x0) 3.501006457s ago: executing program 4 (id=683): fsmount(0xffffffffffffffff, 0x0, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000180)='wg1\x00', 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) listen(r0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000100), 0x4) madvise(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x15) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x64) mlock2(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e00000000000000001000000010000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x48) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x28011, r4, 0x0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000e47000/0x2000)=nil) 3.418828185s ago: executing program 1 (id=684): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000000c0)='./file0\x00', 0x800, &(0x7f0000001180)=ANY=[], 0x1, 0x18d, &(0x7f00000001c0)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 3.400494528s ago: executing program 3 (id=685): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x18, r1, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40404}, 0x100) 3.212493475s ago: executing program 2 (id=686): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001400)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_STAB={0x4}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x3c}}, 0x44090) 2.540585738s ago: executing program 3 (id=687): syz_mount_image$nilfs2(&(0x7f00000005c0), &(0x7f0000000080)='./file0\x00', 0x8, &(0x7f00000000c0)=ANY=[], 0x1, 0xad4, &(0x7f0000001540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f00000001c0)) 2.533468562s ago: executing program 4 (id=688): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x23b, &(0x7f00000005c0)="$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") ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0xc080661a, &(0x7f0000000100)={@desc={0x1, 0x0, @auto='\x00\x00\x00\x00\x00@\x00'}}) 2.456662572s ago: executing program 1 (id=689): syz_mount_image$jfs(&(0x7f0000000400), &(0x7f00000000c0)='./file1\x00', 0x10080, &(0x7f0000000000)=ANY=[], 0xfd, 0x5fcc, &(0x7f00000066c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 2.372643035s ago: executing program 2 (id=690): connect$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x64) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f0000000300)=0x100000001, 0x4) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$TCSBRKP(r4, 0x5425, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TCSETSW2(r4, 0x5425, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x0, 0x0, 0xfffffffffffffd25) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x3d0, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x430) socket$nl_route(0x10, 0x3, 0x0) 2.275487381s ago: executing program 4 (id=691): syz_mount_image$bcachefs(&(0x7f00000058c0), &(0x7f0000005900)='./file0\x00', 0x10000, &(0x7f0000000000)=ANY=[@ANYBLOB="6673636b2c696e6c696e655f646174612c6e6f636f772c64656772616465642c7374725f686173683d736970686173682c6e6f7265636f766572792c646973636172642c7265636f6e7374727563745f616c6c6f632c737572655f636f64652c61636c2c6e6f5f73706c6974627261696e5f636865636b2c686173682c7569643d7cabb186b5a0eebdb57b11a0c9800c3a6ddfe87129ec0eccbe7a8e1e21c51946b7042872004f69ee4dcb07548d613d6a830b709aab507a93", @ANYRESDEC=0x0, @ANYRESOCT], 0x1, 0x5905, &(0x7f000000b240)="$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") sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file1\x00', 0x0, 0x814008, 0x0) 2.151316897s ago: executing program 3 (id=692): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)={0x44, r1, 0x1, 0x0, 0x0, {0x2c}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x44}}, 0x0) 2.076380569s ago: executing program 0 (id=693): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'sit0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000200)={'ip_vti0\x00', 0x0, 0x10, 0x10, 0x9, 0xfffffffd, {{0x5, 0x4, 0x1, 0x27, 0x14, 0x66, 0x0, 0xc, 0x29, 0x0, @empty, @multicast2}}}}) 1.403412327s ago: executing program 2 (id=694): connect$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x64) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f0000000300)=0x100000001, 0x4) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$TCSBRKP(r4, 0x5425, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close(0xffffffffffffffff) ioctl$TCSETSW2(r4, 0x5425, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x0, 0x0, 0xfffffffffffffd25) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x3d0, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x430) socket$nl_route(0x10, 0x3, 0x0) 1.226601432s ago: executing program 3 (id=695): syz_mount_image$ocfs2(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], 0x1, 0x4450, &(0x7f0000003a80)="$eJzs3c9vHFcdAPDvjN3GNkmxSw9FQmIlKoEAWXZPgCvhOE5cuzFBgVaIy2ZtbxPD2hvZa8ShB3OrhDggcUAcKpC4+VT5wLX8CVw4lnMkOHBBQoow2t1ZZ2e8izfRroPTz+fg8bzf9nfm7ZvD7EszjQfb+6Xt/VJlt1TffH//zdLP6rWDnWqkF6Rn/y9dXP8MZhTXyfO+9j7L7ty49YP33oz489ZfH52cnJxE03j0NN/1+7/++cFm97EjLdRpttu7tWH5cUS8dmZcTWMR8aM/RSQRcT1LW8qOkxFxLdp5733wy3ulIY3m40+rb5Ufr394vPDG2tFHx/3/9iTid7UvfvP+zt+/Mrbwt68PqXsAAAAAAAAAAAAAAAAAAC65lbt33v3+3Hx8ksT4UXL2fd2V7Nj3/diTYflyxPTI/1wAAAAAAAAAAAAAAAAAAAD4v/Tk/f9S8mqP9/+Xs+Nin/on3x39GBmd1e/dWb45N5/t/56cyf9WlvSP62Mx02Pf9+L+79cL9Xvv/362n2fVGV+n3+lI0tnceZrOzkb8Idv4/fVkKq3V9xvfeL9+sLs1tGFcWvn4t3fvz0Un29B/0PgvFdof/f7/XzhzNTXP7w3vEnuh5eM/1rfcH3+RDBT/G4V6FxF/nl0+/uOttMnuAovtCaAZ/1+Pnx//5UL7o4r/KxFRSppjLeVmgOYappneb71CXj7+L7XSclNn9o/sd///uxD/m4X2n9f8f1j8IKKnfPxfbqVN5Eo8uf9n0vPv/1uF9p9H/JvjP/T5P5B8/K+0E8dzRVr/yUHn/5VC+6OK/7tpNs5XktwVcJS00/t+Xx05+fhPnMl/8vyXDrT+e7tQ/6Ke/zr9dp7/OtP/15L281+3X708tO4vvXz8J/uWG/T+Xy3UG/X8vxilSOJq59Ss/5Ty8Z9qpeXXzu0v5eyO/5X/Ef+1Qvujin9rVTLRjn/3/P+fK+3031v/DSQf/8+1E9PuEoetn631X3L++v+dQvvt+I/ytjy7/muO/zAdYZcvkHz8r/Yt14z/Xwb4/L9dqDf69X/EnFn/meXjf61vudb9P3F+/NcL9UYd/6+OsnEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAS2ApO05Hks7mztN0djbiRnb+ekwlG5Wt8katvvnT/YjlLL0Uryb3a/WNSq28vVvfqpYrtVp9M+Jmlv9aTCT7tXqjvFN5eOu0rcnkQbWy19ioVhoRsZKlfymuddra2G7sVB5GxNuneZ9P63sPH1R2y1vbe9+Zm5ubi9XTMcwk1Z83qruNdu/t3Ii107rTSdfgWtnvnI7lavKT+sHebqXWSr/dVadW36zUuuqsZ3m/iZmksXewu1lpVMu1+v1Of+dJDp8yOE9hsfkjjVhevfvDu7fnp4r595L2cWl0QwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgCD5Z+PZvI2K8fZZGxGLnl6RX+Y8/rb5Vfrz+4fHCG2tHHx0/6lcOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgP+yAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhV06RokYiMIA/GYsop3HsApJZxtRRAsjgifQY3gYPYqX8A4WFrYWKiwzEHYTSLNbfV/zQn5m3oN5AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA61w/jI/3XR+R4vi3iXh//vic5relvl7Mnz86wIzsz83deHnV9eXd005+Xn59DXmT/ny/PMVMrd629mS6T39N/ap9ThbnWtq3pflq39NIuY2IoeRnKee2XXcXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP/swIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQeOBQAAAACE+VtH0bcBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/AoAAP//utkgSg==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x40, 0x0, 0xffff) 484.314932ms ago: executing program 0 (id=696): syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000200)='./file0\x00', 0x3200014, &(0x7f00000000c0)=ANY=[], 0x1, 0x625, &(0x7f0000002c40)="$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") chdir(&(0x7f0000000040)='./file0\x00') lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000b80)=ANY=[@ANYBLOB="6f73782e636f6d2e6170706c652e46696e646572496e666f002a7a5a3e47207f3e6f5321c72e7b9551be8b8629359b3365847ce5c3feaa8cb4794cf9b791"], 0x0, 0x30) 482.288708ms ago: executing program 2 (id=697): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0xb, 0x0, @vifc_lcl_addr=@empty, @remote}, 0x10) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000080)={0x0, 0x4, 0x8, 0x9, @vifc_lcl_addr=@broadcast, @rand_addr=0x64010100}, 0x10) 361.284488ms ago: executing program 1 (id=698): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0xceb}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x40000c4) 339.640815ms ago: executing program 2 (id=699): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)={0x3c, r1, 0x1, 0x3, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0x6}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_IRQ={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2400c000}, 0x0) 233.59622ms ago: executing program 0 (id=700): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) connect$rose(r0, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @default, @bcast, @default]}, 0x40) 176.438007ms ago: executing program 2 (id=701): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000080)={0x5}) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r4, 0x0, 0x0, 0x20004041, 0x0, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x6, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f00000000c0), 0x3, 0x2) r5 = syz_open_dev$video(&(0x7f0000000000), 0x7ff, 0x0) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x2501, 0x0) write$snapshot(r6, &(0x7f0000000040)='\a\x00', 0x2) ioctl$SNAPSHOT_FREE(r6, 0x3305) write$snapshot(r6, 0x0, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r7, 0x800452d3, 0xffffffffffffffff) write$snapshot(r6, &(0x7f0000000240)="70fe8a0e8d5a450e6a4fca06ef1c29b4df991cbdb58af361227b6942c17e0c50b78dcf71c1868d0e977477f6c3de0c5623d038c29ccb8cbfbff9c5727c974a71e3f2b2dcf8b28fdfae513305d345917eb3ee8d034c99488a7d0bf3fd1d4235f11f573367cab9d00a183e417e5a2e37ab2540500804ec2c5e083d4170b8ebad81b01bdc25a0522cb8", 0x88) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r5, 0xc034564b, &(0x7f0000000080)={0x1, 0x35315258, 0xf00, 0x870, 0x0, @stepwise={{0x1}, {}, {0xffffffff}}}) 126.874444ms ago: executing program 0 (id=702): syz_mount_image$nilfs2(&(0x7f0000000040), &(0x7f0000000f00)='./file0\x00', 0x0, &(0x7f0000000f40)=ANY=[], 0x1, 0xec6, &(0x7f0000003d40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0xc0186e86, 0xfffffffffffffffe) 0s ago: executing program 0 (id=703): syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f00000001c0)={[{@journal_async_commit}, {@heartbeat_none}, {@usrquota}, {@inode64}, {@heartbeat_none}, {@usrquota}]}, 0x0, 0x4703, &(0x7f0000004800)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100), &(0x7f0000000240)={0x0, 0xfb, 0x51, 0x1, 0x6, "971c53ef15c27468dbb2762a78199c90", "2a533dd7a9a0f3fa04a361f62adce94c2a438bf26ff255f0d82b6170fad1d02137c1c0342ffc923f12b7aa5e0558558c6c9b0d46be4d2e29c3031be9"}, 0x51, 0x2) kernel console output (not intermixed with test programs): 530] was attempted by ""[7005] [ 81.979564][ T52] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 83.223899][ T7027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.224342][ T7027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.029118][ T7033] loop1: detected capacity change from 0 to 256 [ 84.407952][ T7022] loop3: detected capacity change from 0 to 32768 [ 84.411285][ T7022] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.86 (7022) [ 84.551166][ T7039] loop2: detected capacity change from 0 to 40427 [ 84.567844][ T7039] F2FS-fs (loop2): build fault injection rate: 690 [ 84.567911][ T7039] F2FS-fs (loop2): Image doesn't support compression [ 84.567971][ T7039] F2FS-fs (loop2): Image doesn't support compression [ 84.568002][ T7039] F2FS-fs (loop2): build fault injection type: 0x4 [ 84.571996][ T7022] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 84.572087][ T7022] BTRFS info (device loop3): using sha256 (sha256-arm64) checksum algorithm [ 84.576937][ T7039] F2FS-fs (loop2): invalid crc value [ 84.600385][ T7039] F2FS-fs (loop2): Start checkpoint disabled! [ 84.601571][ T7039] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 85.121534][ T7049] ptrace attach of "./syz-executor exec"[6534] was attempted by ""[7049] [ 85.636851][ T7066] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 87.001317][ T7022] BTRFS error (device loop3): open_ctree failed: -4 [ 87.669038][ T7082] loop4: detected capacity change from 0 to 64 [ 87.693709][ T7082] syz.4.103: attempt to access beyond end of device [ 87.693709][ T7082] loop4: rw=0, sector=1544, nr_sectors = 1 limit=64 [ 87.693786][ T7082] Buffer I/O error on dev loop4, logical block 1544, async page read [ 87.693863][ T7082] syz.4.103: attempt to access beyond end of device [ 87.693863][ T7082] loop4: rw=0, sector=1545, nr_sectors = 1 limit=64 [ 87.693898][ T7082] Buffer I/O error on dev loop4, logical block 1545, async page read [ 87.693951][ T7082] syz.4.103: attempt to access beyond end of device [ 87.693951][ T7082] loop4: rw=0, sector=1546, nr_sectors = 1 limit=64 [ 87.693985][ T7082] Buffer I/O error on dev loop4, logical block 1546, async page read [ 87.694034][ T7082] syz.4.103: attempt to access beyond end of device [ 87.694034][ T7082] loop4: rw=0, sector=1547, nr_sectors = 1 limit=64 [ 87.694067][ T7082] Buffer I/O error on dev loop4, logical block 1547, async page read [ 87.694116][ T7082] syz.4.103: attempt to access beyond end of device [ 87.694116][ T7082] loop4: rw=0, sector=1548, nr_sectors = 1 limit=64 [ 87.694159][ T7082] Buffer I/O error on dev loop4, logical block 1548, async page read [ 87.694218][ T7082] syz.4.103: attempt to access beyond end of device [ 87.694218][ T7082] loop4: rw=0, sector=1549, nr_sectors = 1 limit=64 [ 87.694252][ T7082] Buffer I/O error on dev loop4, logical block 1549, async page read [ 87.694301][ T7082] syz.4.103: attempt to access beyond end of device [ 87.694301][ T7082] loop4: rw=0, sector=1550, nr_sectors = 1 limit=64 [ 87.694334][ T7082] Buffer I/O error on dev loop4, logical block 1550, async page read [ 87.694383][ T7082] syz.4.103: attempt to access beyond end of device [ 87.694383][ T7082] loop4: rw=0, sector=1551, nr_sectors = 1 limit=64 [ 87.694415][ T7082] Buffer I/O error on dev loop4, logical block 1551, async page read [ 87.695248][ T7082] hfs: unable to open catalog tree [ 87.695426][ T7082] hfs: can't find a HFS filesystem on dev loop4 [ 88.956846][ T7099] loop3: detected capacity change from 0 to 2048 [ 89.083237][ T7101] random: crng reseeded on system resumption [ 89.157002][ T7101] Restarting kernel threads ... [ 89.157809][ T7101] Done restarting kernel threads. [ 89.670765][ T7099] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 89.671033][ T7099] NILFS (loop3): mounting unchecked fs [ 89.671946][ T7099] NILFS (loop3): invalid segment: Checksum error in segment payload [ 89.671977][ T7099] NILFS (loop3): unable to fall back to spare super block [ 89.671998][ T7099] NILFS (loop3): error -22 while searching super root [ 89.822793][ T7104] ptrace attach of "./syz-executor exec"[6534] was attempted by "\x22"[7104] [ 91.485543][ T7112] [U] P:¼•[[*Ï>ÿ [ 91.487134][ T7112] [U] /7t So ¬ [ 91.487202][ T7112] [U] #º8¸U€|Ü„wYdw׉þb¬Üñ-G™th¶ctÍ­_›Kf)ó¸ÚO‘dÔ{<1‘‹ëΉÀì¤ß»¤“¼_Q¥ŽìàÝãe¸ÏÕ ÍHn [ 91.487282][ T7112] [U] à‚u1!+°&€-F‘)¨º§íD_ð ^ÔP%ëIÔöGú1ÒŒ¦kôÒÈÏ¢5˃± [ 91.487301][ T7112] [U] Bú…åË<ÿãÊ椹”Û‘i_¡$…œèI]Í6¨‘gŽÈ¨aNí(;C·t«üDtEÅ#¨Œ¡­†|Z%0¡-Ó$ÚJLÂö¯–Ò‡Âû)é#«ºK «‚]ïKçl [ 91.487327][ T7112] [U] ðx=·þ>*ì›®"çk)ýŸÇv_å5`›ÜyïÔl!0¡+DñxšU£ŸïJcá$ß6ÇÆç%é5ðç/7¼å¥I§KOžY0åÖ蘒Tôv„©fTH¿:Þ¢ÿÉZIà¼ÿ2[&“/‹¬Œ•ƒjÒà<.gaíVÄóÖÝ{“>Ž_Y%}3¿Y™­Ãú…?0îl¢µ/ w`Öäyë8c†þ˜GOØËU'eÄó^vº@ï”}tÕ'ØׂÿÌQ€~ ¡Æ õsS®Ç_”Ì£gEŒHÔŽ¥R‘ÑnTärqà­hCaZ}fQ3–ff"¼a)M‘d÷™iCƒ¥/¥u’Rbž™5>éL„Ç÷F®\R9K•!V [ 91.487579][ T7112] [U] åÍ·õ­÷§ [ 91.618976][ T7112] [U] ]p?X§ b'` [ 91.619057][ T7112] [U] ï·ÅÚ bI‡…ÁÙZ-€?i„_•A,ž/&Úˆã|/=¬M0X^NfÙ°4”õ¤ül®6‚ûÕR'?¥ˆëöO8ßÜšv­Ô(1ÏÀBÉFpúIqÞk üGWöo¤D颢9¢Ïôá’¾-ξßxH•íéfsÙ A­m ŸîïÂü¡ü•üɳ¨º$«@Öðmˆ5]© ^1epx"á†Er™Œ¼ [ 91.619078][ T7112] [U] 4$¹6<ËÕB¼4Õðì‹ËCgÂr‚ÚäÐZ úäþØ}.y‹ xZ\!)ýÉ͉(ø^7§1ö×3§1Z†4c [ 91.619107][ T7112] [U] uÔð/£”B¦HÁZ÷ËS`È4ôlÏüÒ¡ÚFÖ×*F¨@@§”›8©Ôë†k¿B”ÕÍii};÷$@)IO\Ó±„u|Æ“YíG/ÛKôfZÍ$ÛV ÛñßÎN§ÖÿÓ\¶oj¾ÆÍŽ1ã_ª¤Eþ…}ØùþçM-áðÕ`Qð}x›šfÆŸ…ê]]6€+ƒ…ã*¨¦: [ 91.619153][ T7112] [U] àjÈ·k¦1ÏÖ,bû`¥%FkkÆí+l›+F7Ж€M–~7œé Ù#›÷¬N´R*—&iguDÿ7vœr²mbZèp¡Ät}3|7b@ß( [ 91.619176][ T7112] [U] Æ-UØ4£½p²¬—‹jyîN²­Óð0C50ŒÑ‚ê [ 92.153084][ T52] Bluetooth: hci2: adv larger than maximum supported [ 92.355054][ T7126] loop3: detected capacity change from 0 to 256 [ 92.362982][ T7126] vfat: Unknown parameter 'uniWxlate' [ 93.081513][ T7112] loop2: detected capacity change from 0 to 262144 [ 93.085742][ T7112] F2FS-fs (loop2): invalid crc value [ 93.300830][ T7133] bond0: (slave bond_slave_0): Releasing backup interface [ 93.339097][ T7112] F2FS-fs (loop2): Start checkpoint disabled! [ 93.372848][ T7112] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 93.412915][ T7108] [U] pø¸Bj¹p`*C'ؼ~m˜Ùê ,B¤ñeЂék×b:tÞÚX!C‡‰°Ï@( [ 93.761765][ T7140] Injecting memory failure for pfn 0x122aea at process virtual address 0x20ffa000 [ 93.954478][ T7145] loop1: detected capacity change from 0 to 8 [ 93.969694][ T7145] SQUASHFS error: lzo decompression failed, data probably corrupt [ 93.972126][ T7145] SQUASHFS error: Failed to read block 0x91: -5 [ 93.974356][ T7145] SQUASHFS error: Unable to read metadata cache entry [8f] [ 93.976642][ T7145] SQUASHFS error: Unable to read inode 0x11f [ 94.060961][ T7148] [U] P:¼•[[*Ï>ÿ [ 94.062430][ T7148] [U] /7t So ¬ [ 94.064109][ T7148] [U] #º8¸U€|Ü„wYdw׉þb¬Üñ-G™th¶ctÍ­_›Kf)ó¸ÚO‘dÔ{<1‘‹ëΉÀì¤ß»¤“¼_Q¥ŽìàÝãe¸ÏÕ ÍHn [ 94.067243][ T7148] [U] à‚u1!+°&€-F‘)¨º§íD_ð ^ÔP%ëIÔöGú1ÒŒ¦kôÒÈÏ¢5˃± [ 94.067271][ T7148] [U] Bú…åË<ÿãÊ椹”Û‘i_¡$…œèI]Í6¨‘gŽÈ¨aNí(;C·t«üDtEÅ#¨Œ¡­†|Z%0¡-Ó$ÚJLÂö¯–Ò‡Âû)é#«ºK «‚]ïKçl [ 94.072962][ T7148] [U] ðx=·þ>*ì›®"çk)ýŸÇv_å5`›ÜyïÔl!0¡+DñxšU£ŸïJcá$ß6ÇÆç%é5ðç/7¼å¥I§KOžY0åÖ蘒Tôv„©fTH¿:Þ¢ÿÉZIà¼ÿ2[&“/‹¬Œ•ƒjÒà<.gaíVÄóÖÝ{“>Ž_Y%}3¿Y™­Ãú…?0îl¢µ/ w`Öäyë8c†þ˜GOØËU'eÄó^vº@ï”}tÕ'ØׂÿÌQ€~ ¡Æ õsS®Ç_”Ì£gEŒHÔŽ¥R‘ÑnTärqà­hCaZ}fQ3–ff"¼a)M‘d÷™iCƒ¥/¥u’Rbž™5>éL„Ç÷F®\R9K•!V [ 94.123558][ T7148] [U] åÍ·õ­÷§ [ 94.123593][ T7148] [U] ]p?X§ b'` [ 94.123625][ T7148] [U] ï·ÅÚ bI‡…ÁÙZ-€?i„_•A,ž/&Úˆã|/=¬M0X^NfÙ°4”õ¤ül®6‚ûÕR'?¥ˆëöO8ßÜšv­Ô(1ÏÀBÉFpúIqÞk üGWöo¤D颢9¢Ïôá’¾-ξßxH•íéfsÙ A­m ŸîïÂü¡ü•üɳ¨º$«@Öðmˆ5]© ^1epx"á†Er™Œ¼ [ 94.123644][ T7148] [U] 4$¹6<ËÕB¼4Õðì‹ËCgÂr‚ÚäÐZ úäþØ}.y‹ xZ\!)ýÉ͉(ø^7§1ö×3§1Z†4c [ 94.123672][ T7148] [U] uÔð/£”B¦HÁZ÷ËS`È4ôlÏüÒ¡ÚFÖ×*F¨@@§”›8©Ôë†k¿B”ÕÍii};÷$@)IO\Ó±„u|Æ“YíG/ÛKôfZÍ$ÛV ÛñßÎN§ÖÿÓ\¶oj¾ÆÍŽ1ã_ª¤Eþ…}ØùþçM-áðÕ`Qð}x›šfÆŸ…ê]]6€+ƒ…ã*¨¦: [ 94.123704][ T7148] [U] àjÈ·k¦1ÏÖ,bû`¥%FkkÆí+l›+F7Ж€M–~7œé Ù#›÷¬N´R*—&iguDÿ7vœr²mbZèp¡Ät}3|7b@ß( [ 94.123726][ T7148] [U] Æ-UØ4£½p²¬—‹jyîN²­Óð0C50ŒÑ‚ê [ 94.798524][ T7155] overlayfs: failed to resolve './file0/../file0': -2 [ 95.194815][ T7153] loop1: detected capacity change from 0 to 1024 [ 95.273883][ T7153] EXT4-fs (loop1): Invalid log cluster size: 4294967295 [ 95.875152][ T7165] ptrace attach of "./syz-executor exec"[6527] was attempted by ""[7165] [ 96.523446][ T7169] [U] pø¸Bj¹p`*C'ؼ~m˜Ùê ,B¤ñeЂék×b:tÞÚX!C‡‰°Ï@(P:¼•[[*Ï>ÿ [ 96.526140][ T7169] [U] /7t So ¬ [ 96.527262][ T7169] [U] #º8¸U€|Ü„wYdw׉þb¬Üñ-G™th¶ctÍ­_›Kf)ó¸ÚO‘dÔ{<1‘‹ëΉÀì¤ß»¤“¼_Q¥ŽìàÝãe¸ÏÕ ÍHn [ 96.530455][ T7169] [U] à‚u1!+°&€-F‘)¨º§íD_ð ^ÔP%ëIÔöGú1ÒŒ¦kôÒÈÏ¢5˃± [ 96.530484][ T7169] [U] Bú…åË<ÿãÊ椹”Û‘i_¡$…œèI]Í6¨‘gŽÈ¨aNí(;C·t«üDtEÅ#¨Œ¡­†|Z%0¡-Ó$ÚJLÂö¯–Ò‡Âû)é#«ºK «‚]ïKçl [ 96.530529][ T7169] [U] ðx=·þ>*ì›®"çk)ýŸÇv_å5`›ÜyïÔl!0¡+DñxšU£ŸïJcá$ß6ÇÆç%é5ðç/7¼å¥I§KOžY0åÖ蘒Tôv„©fTH¿:Þ¢ÿÉZIà¼ÿ2[&“/‹¬Œ•ƒjÒà<.gaíVÄóÖÝ{“>Ž_Y%}3¿Y™­Ãú…?0îl¢µ/ w`Öäyë8c†þ˜GOØËU'eÄó^vº@ï”}tÕ'ØׂÿÌQ€~ ¡Æ õsS®Ç_”Ì£gEŒHÔŽ¥R‘ÑnTärqà­hCaZ}fQ3–ff"¼a)M‘d÷™iCƒ¥/¥u’Rbž™5>éL„Ç÷F®\R9K•!V [ 96.530795][ T7169] [U] åÍ·õ­÷§ [ 96.530837][ T7169] [U] ]p?X§ b'` [ 96.530875][ T7169] [U] ï·ÅÚ bI‡…ÁÙZ-€?i„_•A,ž/&Úˆã|/=¬M0X^NfÙ°4”õ¤ül®6‚ûÕR'?¥ˆëöO8ßÜšv­Ô(1ÏÀBÉFpúIqÞk üGWöo¤D颢9¢Ïôá’¾-ξßxH•íéfsÙ A­m ŸîïÂü¡ü•üɳ¨º$«@Öðmˆ5]© ^1epx"á†Er™Œ¼ [ 96.530895][ T7169] [U] 4$¹6<ËÕB¼4Õðì‹ËCgÂr‚ÚäÐZ úäþØ}.y‹ xZ\!)ýÉ͉(ø^7§1ö×3§1Z†4c [ 96.530927][ T7169] [U] uÔð/£”B¦HÁZ÷ËS`È4ôlÏüÒ¡ÚFÖ×*F¨@@§”›8©Ôë†k¿B”ÕÍii};÷$@)IO\Ó±„u|Æ“YíG/ÛKôfZÍ$ÛV ÛñßÎN§ÖÿÓ\¶oj¾ÆÍŽ1ã_ª¤Eþ…}ØùþçM-áðÕ`Qð}x›šfÆŸ…ê]]6€+ƒ…ã*¨¦: [ 96.530964][ T7169] [U] àjÈ·k¦1ÏÖ,bû`¥%FkkÆí+l›+F7Ж€M–~7œé Ù#›÷¬N´R*—&iguDÿ7vœr²mbZèp¡Ät}3|7b@ß( [ 96.530992][ T7169] [U] Æ-UØ4£½p²¬—‹jyîN²­Óð0C50ŒÑ‚ê [ 96.734346][ T7151] loop3: detected capacity change from 0 to 262144 [ 96.776384][ T7151] F2FS-fs (loop3): invalid crc value [ 96.810672][ T7151] F2FS-fs (loop3): Start checkpoint disabled! [ 96.828966][ T7151] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 97.140437][ T7176] loop4: detected capacity change from 0 to 256 [ 97.141055][ T7176] vfat: Unknown parameter 'uniWxlate' [ 97.753506][ T7169] loop1: detected capacity change from 0 to 262144 [ 97.919861][ T7169] F2FS-fs (loop1): invalid crc value [ 97.963285][ T7179] bond0: (slave bond_slave_0): Releasing backup interface [ 98.020952][ T7169] F2FS-fs (loop1): Start checkpoint disabled! [ 98.133131][ T7169] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 98.138162][ T7168] [U] pø¸Bj¹p`*C'ؼ~m˜Ùê ,B¤ñeЂék×b:tÞÚX!C‡‰°Ï@( [ 98.433424][ T7187] [U] P:¼•[[*Ï>ÿ [ 98.433505][ T7187] [U] /7t So ¬ [ 98.433534][ T7187] [U] #º8¸U€|Ü„wYdw׉þb¬Üñ-G™th¶ctÍ­_›Kf)ó¸ÚO‘dÔ{<1‘‹ëΉÀì¤ß»¤“¼_Q¥ŽìàÝãe¸ÏÕ ÍHn [ 98.433578][ T7187] [U] à‚u1!+°&€-F‘)¨º§íD_ð ^ÔP%ëIÔöGú1ÒŒ¦kôÒÈÏ¢5˃± [ 98.433594][ T7187] [U] Bú…åË<ÿãÊ椹”Û‘i_¡$…œèI]Í6¨‘gŽÈ¨aNí(;C·t«üDtEÅ#¨Œ¡­†|Z%0¡-Ó$ÚJLÂö¯–Ò‡Âû)é#«ºK «‚]ïKçl [ 98.433643][ T7187] [U] ðx=·þ>*ì›®"çk)ýŸÇv_å5`›ÜyïÔl!0¡+DñxšU£ŸïJcá$ß6ÇÆç%é5ðç/7¼å¥I§KOžY0åÖ蘒Tôv„©fTH¿:Þ¢ÿÉZIà¼ÿ2[&“/‹¬Œ•ƒjÒà<.gaíVÄóÖÝ{“>Ž_Y%}3¿Y™­Ãú…?0îl¢µ/ w`Öäyë8c†þ˜GOØËU'eÄó^vº@ï”}tÕ'ØׂÿÌQ€~ ¡Æ õsS®Ç_”Ì£gEŒHÔŽ¥R‘ÑnTärqà­hCaZ}fQ3–ff"¼a)M‘d÷™iCƒ¥/¥u’Rbž™5>éL„Ç÷F®\R9K•!V [ 98.433856][ T7187] [U] åÍ·õ­÷§ [ 98.433891][ T7187] [U] ]p?X§ b'` [ 98.433923][ T7187] [U] ï·ÅÚ bI‡…ÁÙZ-€?i„_•A,ž/&Úˆã|/=¬M0X^NfÙ°4”õ¤ül®6‚ûÕR'?¥ˆëöO8ßÜšv­Ô(1ÏÀBÉFpúIqÞk üGWöo¤D颢9¢Ïôá’¾-ξßxH•íéfsÙ A­m ŸîïÂü¡ü•üɳ¨º$«@Öðmˆ5]© ^1epx"á†Er™Œ¼ [ 98.433942][ T7187] [U] 4$¹6<ËÕB¼4Õðì‹ËCgÂr‚ÚäÐZ úäþØ}.y‹ xZ\!)ýÉ͉(ø^7§1ö×3§1Z†4c [ 98.433970][ T7187] [U] uÔð/£”B¦HÁZ÷ËS`È4ôlÏüÒ¡ÚFÖ×*F¨@@§”›8©Ôë†k¿B”ÕÍii};÷$@)IO\Ó±„u|Æ“YíG/ÛKôfZÍ$ÛV ÛñßÎN§ÖÿÓ\¶oj¾ÆÍŽ1ã_ª¤Eþ…}ØùþçM-áðÕ`Qð}x›šfÆŸ…ê]]6€+ƒ…ã*¨¦: [ 98.434002][ T7187] [U] àjÈ·k¦1ÏÖ,bû`¥%FkkÆí+l›+F7Ж€M–~7œé Ù#›÷¬N´R*—&iguDÿ7vœr²mbZèp¡Ät}3|7b@ß( [ 98.434024][ T7187] [U] Æ-UØ4£½p²¬—‹jyîN²­Óð0C50ŒÑ‚ê [ 98.578660][ T52] Bluetooth: hci4: unexpected event for opcode 0x2003 [ 99.336058][ T7199] Injecting memory failure for pfn 0x13976a at process virtual address 0x20ffa000 [ 99.678614][ T7199] Memory failure: 0x13976a: Sending SIGBUS to syz.1.138:7199 due to hardware memory corruption [ 99.678721][ T7199] Memory failure: 0x13976a: recovery action for dirty LRU page: Recovered [ 99.678771][ T7199] Injecting memory failure for pfn 0x14dd87 at process virtual address 0x20ffb000 [ 99.886800][ T7199] Memory failure: 0x14dd87: Sending SIGBUS to syz.1.138:7199 due to hardware memory corruption [ 99.886901][ T7199] Memory failure: 0x14dd87: recovery action for dirty LRU page: Recovered [ 99.886954][ T7199] Injecting memory failure for pfn 0x139768 at process virtual address 0x20ffc000 [ 99.913635][ T7193] loop4: detected capacity change from 0 to 262144 [ 99.915622][ T7199] Memory failure: 0x139768: recovery action for dirty LRU page: Recovered [ 99.921430][ T7193] F2FS-fs (loop4): invalid crc value [ 99.939991][ T7193] F2FS-fs (loop4): Start checkpoint disabled! [ 99.968020][ T7193] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 100.085942][ T7186] [U] pø¸Bj¹p`*C'ؼ~m˜Ùê ,B¤ñeЂék×b:tÞÚX!C‡‰°Ï@( [ 100.144423][ T7209] random: crng reseeded on system resumption [ 100.195843][ T7209] Restarting kernel threads ... [ 100.199923][ T7209] Done restarting kernel threads. [ 100.249624][ T7211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.254217][ T7211] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.713227][ T7197] loop3: detected capacity change from 0 to 32768 [ 100.715975][ T7197] Smack: duplicate mount options [ 101.530560][ T7221] [U] P:¼•[[*Ï>ÿ [ 101.530650][ T7221] [U] /7t So ¬ [ 101.530687][ T7221] [U] #º8¸U€|Ü„wYdw׉þb¬Üñ-G™th¶ctÍ­_›Kf)ó¸ÚO‘dÔ{<1‘‹ëΉÀì¤ß»¤“¼_Q¥ŽìàÝãe¸ÏÕ ÍHn [ 101.530740][ T7221] [U] à‚u1!+°&€-F‘)¨º§íD_ð ^ÔP%ëIÔöGú1ÒŒ¦kôÒÈÏ¢5˃± [ 101.530758][ T7221] [U] Bú…åË<ÿãÊ椹”Û‘i_¡$…œèI]Í6¨‘gŽÈ¨aNí(;C·t«üDtEÅ#¨Œ¡­†|Z%0¡-Ó$ÚJLÂö¯–Ò‡Âû)é#«ºK «‚]ïKçl [ 101.530784][ T7221] [U] ðx=·þ>*ì›®"çk)ýŸÇv_å5`›ÜyïÔl!0¡+DñxšU£ŸïJcá$ß6ÇÆç%é5ðç/7¼å¥I§KOžY0åÖ蘒Tôv„©fTH¿:Þ¢ÿÉZIà¼ÿ2[&“/‹¬Œ•ƒjÒà<.gaíVÄóÖÝ{“>Ž_Y%}3¿Y™­Ãú…?0îl¢µ/ w`Öäyë8c†þ˜GOØËU'eÄó^vº@ï”}tÕ'ØׂÿÌQ€~ ¡Æ õsS®Ç_”Ì£gEŒHÔŽ¥R‘ÑnTärqà­hCaZ}fQ3–ff"¼a)M‘d÷™iCƒ¥/¥u’Rbž™5>éL„Ç÷F®\R9K•!V [ 101.531036][ T7221] [U] åÍ·õ­÷§ [ 101.531078][ T7221] [U] ]p?X§ b'` [ 101.531116][ T7221] [U] ï·ÅÚ bI‡…ÁÙZ-€?i„_•A,ž/&Úˆã|/=¬M0X^NfÙ°4”õ¤ül®6‚ûÕR'?¥ˆëöO8ßÜšv­Ô(1ÏÀBÉFpúIqÞk üGWöo¤D颢9¢Ïôá’¾-ξßxH•íéfsÙ A­m ŸîïÂü¡ü•üɳ¨º$«@Öðmˆ5]© ^1epx"á†Er™Œ¼ [ 101.531136][ T7221] [U] 4$¹6<ËÕB¼4Õðì‹ËCgÂr‚ÚäÐZ úäþØ}.y‹ xZ\!)ýÉ͉(ø^7§1ö×3§1Z†4c [ 101.531180][ T7221] [U] uÔð/£”B¦HÁZ÷ËS`È4ôlÏüÒ¡ÚFÖ×*F¨@@§”›8©Ôë†k¿B”ÕÍii};÷$@)IO\Ó±„u|Æ“YíG/ÛKôfZÍ$ÛV ÛñßÎN§ÖÿÓ\¶oj¾ÆÍŽ1ã_ª¤Eþ…}ØùþçM-áðÕ`Qð}x›šfÆŸ…ê]]6€+ƒ…ã*¨¦: [ 101.531218][ T7221] [U] àjÈ·k¦1ÏÖ,bû`¥%FkkÆí+l›+F7Ж€M–~7œé Ù#›÷¬N´R*—&iguDÿ7vœr²mbZèp¡Ät}3|7b@ß( [ 101.531253][ T7221] [U] Æ-UØ4£½p²¬—‹jyîN²­Óð0C50ŒÑ‚ê [ 101.888976][ T7225] loop3: detected capacity change from 0 to 8 [ 101.917158][ T7225] SQUASHFS error: xz decompression failed, data probably corrupt [ 101.919540][ T7225] SQUASHFS error: Failed to read block 0x108: -5 [ 101.921704][ T7225] SQUASHFS error: Unable to read metadata cache entry [106] [ 101.924282][ T7225] SQUASHFS error: Unable to read inode 0x11f [ 102.341705][ T7234] [U] pø¸Bj¹p`*C'ؼ~m˜Ùê ,B¤ñeЂék×b:tÞÚX!C‡‰°Ï@(P:¼•[[*Ï>ÿ [ 102.341794][ T7234] [U] /7t So ¬ [ 102.341830][ T7234] [U] #º8¸U€|Ü„wYdw׉þb¬Üñ-G™th¶ctÍ­_›Kf)ó¸ÚO‘dÔ{<1‘‹ëΉÀì¤ß»¤“¼_Q¥ŽìàÝãe¸ÏÕ ÍHn [ 102.341880][ T7234] [U] à‚u1!+°&€-F‘)¨º§íD_ð ^ÔP%ëIÔöGú1ÒŒ¦kôÒÈÏ¢5˃± [ 102.341898][ T7234] [U] Bú…åË<ÿãÊ椹”Û‘i_¡$…œèI]Í6¨‘gŽÈ¨aNí(;C·t«üDtEÅ#¨Œ¡­†|Z%0¡-Ó$ÚJLÂö¯–Ò‡Âû)é#«ºK «‚]ïKçl [ 102.341925][ T7234] [U] ðx=·þ>*ì›®"çk)ýŸÇv_å5`›ÜyïÔl!0¡+DñxšU£ŸïJcá$ß6ÇÆç%é5ðç/7¼å¥I§KOžY0åÖ蘒Tôv„©fTH¿:Þ¢ÿÉZIà¼ÿ2[&“/‹¬Œ•ƒjÒà<.gaíVÄóÖÝ{“>Ž_Y%}3¿Y™­Ãú…?0îl¢µ/ w`Öäyë8c†þ˜GOØËU'eÄó^vº@ï”}tÕ'ØׂÿÌQ€~ ¡Æ õsS®Ç_”Ì£gEŒHÔŽ¥R‘ÑnTärqà­hCaZ}fQ3–ff"¼a)M‘d÷™iCƒ¥/¥u’Rbž™5>éL„Ç÷F®\R9K•!V [ 102.342190][ T7234] [U] åÍ·õ­÷§ [ 102.342412][ T7234] [U] ]p?X§ b'` [ 102.342457][ T7234] [U] ï·ÅÚ bI‡…ÁÙZ-€?i„_•A,ž/&Úˆã|/=¬M0X^NfÙ°4”õ¤ül®6‚ûÕR'?¥ˆëöO8ßÜšv­Ô(1ÏÀBÉFpúIqÞk üGWöo¤D颢9¢Ïôá’¾-ξßxH•íéfsÙ A­m ŸîïÂü¡ü•üɳ¨º$«@Öðmˆ5]© ^1epx"á†Er™Œ¼ [ 102.342478][ T7234] [U] 4$¹6<ËÕB¼4Õðì‹ËCgÂr‚ÚäÐZ úäþØ}.y‹ xZ\!)ýÉ͉(ø^7§1ö×3§1Z†4c [ 102.342510][ T7234] [U] uÔð/£”B¦HÁZ÷ËS`È4ôlÏüÒ¡ÚFÖ×*F¨@@§”›8©Ôë†k¿B”ÕÍii};÷$@)IO\Ó±„u|Æ“YíG/ÛKôfZÍ$ÛV ÛñßÎN§ÖÿÓ\¶oj¾ÆÍŽ1ã_ª¤Eþ…}ØùþçM-áðÕ`Qð}x›šfÆŸ…ê]]6€+ƒ…ã*¨¦: [ 102.342547][ T7234] [U] àjÈ·k¦1ÏÖ,bû`¥%FkkÆí+l›+F7Ж€M–~7œé Ù#›÷¬N´R*—&iguDÿ7vœr²mbZèp¡Ät}3|7b@ß( [ 102.342574][ T7234] [U] Æ-UØ4£½p²¬—‹jyîN²­Óð0C50ŒÑ‚ê [ 102.594001][ T7237] loop4: detected capacity change from 0 to 512 [ 102.602838][ T7237] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 102.605541][ T7237] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz.4.153: bad orphan inode 17 [ 102.606497][ T7237] EXT4-fs (loop4): Remounting filesystem read-only [ 102.606528][ T7237] ext4_test_bit(bit=16, block=4) = 1 [ 102.606549][ T7237] is_bad_inode(inode)=0 [ 102.606566][ T7237] NEXT_ORPHAN(inode)=2147418128 [ 102.606585][ T7237] max_ino=32 [ 102.606602][ T7237] i_nlink=0 [ 102.607526][ T7237] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.001810][ T7219] loop1: detected capacity change from 0 to 32768 [ 103.031702][ T7219] (syz.1.145,7219,0):ocfs2_verify_volume:2303 ERROR: found superblock with bad version: found 1280.0, should be 0.90 [ 103.031768][ T7219] (syz.1.145,7219,0):ocfs2_verify_volume:2331 ERROR: status = -22 [ 103.031801][ T7219] (syz.1.145,7219,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 103.031832][ T7219] (syz.1.145,7219,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 103.059358][ T6533] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.434678][ T7241] loop3: detected capacity change from 0 to 262144 [ 104.446652][ T7241] F2FS-fs (loop3): invalid crc value [ 104.475878][ T7241] F2FS-fs (loop3): Start checkpoint disabled! [ 104.586736][ T7241] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 104.850728][ T7232] [U] pø¸Bj¹p`*C'ؼ~m˜Ùê ,B¤ñeЂék×b:tÞÚX!C‡‰°Ï@( [ 104.896869][ T7256] random: crng reseeded on system resumption [ 105.083564][ T7256] Restarting kernel threads ... [ 105.084337][ T7256] Done restarting kernel threads. [ 105.507407][ T7259] loop2: detected capacity change from 0 to 8 [ 105.552159][ T7259] SQUASHFS error: xz decompression failed, data probably corrupt [ 105.554681][ T7259] SQUASHFS error: Failed to read block 0x10d: -5 [ 105.556717][ T7259] SQUASHFS error: Unable to read metadata cache entry [10b] [ 105.558983][ T7259] SQUASHFS error: Unable to read inode 0x5011f [ 105.731222][ T7262] loop2: detected capacity change from 0 to 8 [ 105.747611][ T7262] squashfs image failed sanity check [ 105.971586][ T7269] loop2: detected capacity change from 0 to 256 [ 105.974174][ T7269] vfat: Unknown parameter 'uniWxlate' [ 106.754444][ T7275] bond0: (slave bond_slave_0): Releasing backup interface [ 107.107733][ T7260] loop1: detected capacity change from 0 to 40427 [ 107.149244][ T7260] F2FS-fs (loop1): invalid crc value [ 107.905553][ T7260] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 108.145226][ T7304] loop2: detected capacity change from 0 to 2 [ 108.146065][ T7304] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 108.858302][ T7311] [U] P:¼•[[*Ï>ÿ [ 108.859553][ T7311] [U] /7t So ¬ [ 108.860676][ T7311] [U] #º8¸U€|Ü„wYdw׉þb¬Üñ-G™th¶ctÍ­_›Kf)ó¸ÚO‘dÔ{<1‘‹ëΉÀì¤ß»¤“¼_Q¥ŽìàÝãe¸ÏÕ ÍHn [ 108.865456][ T7311] [U] à‚u1!+°&€-F‘)¨º§íD_ð ^ÔP%ëIÔöGú1ÒŒ¦kôÒÈÏ¢5˃± [ 108.865487][ T7311] [U] Bú…åË<ÿãÊ椹”Û‘i_¡$…œèI]Í6¨‘gŽÈ¨aNí(;C·t«üDtEÅ#¨Œ¡­†|Z%0¡-Ó$ÚJLÂö¯–Ò‡Âû)é#«ºK «‚]ïKçl [ 108.870520][ T7311] [U] ðx=·þ>*ì›®"çk)ýŸÇv_å5`›ÜyïÔl!0¡+DñxšU£ŸïJcá$ß6ÇÆç%é5ðç/7¼å¥I§KOžY0åÖ蘒Tôv„©fTH¿:Þ¢ÿÉZIà¼ÿ2[&“/‹¬Œ•ƒjÒà<.gaíVÄóÖÝ{“>Ž_Y%}3¿Y™­Ãú…?0îl¢µ/ w`Öäyë8c†þ˜GOØËU'eÄó^vº@ï”}tÕ'ØׂÿÌQ€~ ¡Æ õsS®Ç_”Ì£gEŒHÔŽ¥R‘ÑnTärqà­hCaZ}fQ3–ff"¼a)M‘d÷™iCƒ¥/¥u’Rbž™5>éL„Ç÷F®\R9K•!V [ 108.873582][ T7311] [U] åÍ·õ­÷§ [ 108.873618][ T7311] [U] ]p?X§ b'` [ 108.873650][ T7311] [U] ï·ÅÚ bI‡…ÁÙZ-€?i„_•A,ž/&Úˆã|/=¬M0X^NfÙ°4”õ¤ül®6‚ûÕR'?¥ˆëöO8ßÜšv­Ô(1ÏÀBÉFpúIqÞk üGWöo¤D颢9¢Ïôá’¾-ξßxH•íéfsÙ A­m ŸîïÂü¡ü•üɳ¨º$«@Öðmˆ5]© ^1epx"á†Er™Œ¼ [ 108.873669][ T7311] [U] 4$¹6<ËÕB¼4Õðì‹ËCgÂr‚ÚäÐZ úäþØ}.y‹ xZ\!)ýÉ͉(ø^7§1ö×3§1Z†4c [ 108.873697][ T7311] [U] uÔð/£”B¦HÁZ÷ËS`È4ôlÏüÒ¡ÚFÖ×*F¨@@§”›8©Ôë†k¿B”ÕÍii};÷$@)IO\Ó±„u|Æ“YíG/ÛKôfZÍ$ÛV ÛñßÎN§ÖÿÓ\¶oj¾ÆÍŽ1ã_ª¤Eþ…}ØùþçM-áðÕ`Qð}x›šfÆŸ…ê]]6€+ƒ…ã*¨¦: [ 108.873729][ T7311] [U] àjÈ·k¦1ÏÖ,bû`¥%FkkÆí+l›+F7Ж€M–~7œé Ù#›÷¬N´R*—&iguDÿ7vœr²mbZèp¡Ät}3|7b@ß( [ 108.873751][ T7311] [U] Æ-UØ4£½p²¬—‹jyîN²­Óð0C50ŒÑ‚ê [ 108.877043][ T6536] syz-executor: attempt to access beyond end of device [ 108.877043][ T6536] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 108.878023][ T6536] CPU: 0 UID: 0 PID: 6536 Comm: syz-executor Not tainted 6.16.0-rc5-syzkaller-gec4801305969 #0 PREEMPT [ 108.878042][ T6536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 108.878049][ T6536] Call trace: [ 108.878053][ T6536] show_stack+0x2c/0x3c (C) [ 108.878071][ T6536] __dump_stack+0x30/0x40 [ 108.878086][ T6536] dump_stack_lvl+0xd8/0x12c [ 108.878100][ T6536] dump_stack+0x1c/0x28 [ 108.878113][ T6536] f2fs_handle_critical_error+0x34c/0x4b8 [ 108.878126][ T6536] f2fs_stop_checkpoint+0x5c/0x70 [ 108.878140][ T6536] f2fs_write_end_io+0x58c/0x818 [ 108.878167][ T6536] bio_endio+0x804/0x840 [ 108.878179][ T6536] submit_bio_noacct+0x158/0x176c [ 108.878193][ T6536] submit_bio+0x354/0x4d4 [ 108.878206][ T6536] f2fs_submit_write_bio+0x13c/0x324 [ 108.878218][ T6536] __submit_merged_bio+0x254/0x704 [ 108.878235][ T6536] __submit_merged_write_cond+0x23c/0x4ac [ 108.878246][ T6536] f2fs_write_data_pages+0x1d28/0x2634 [ 108.878258][ T6536] do_writepages+0x270/0x468 [ 108.878274][ T6536] filemap_fdatawrite+0x144/0x1e8 [ 108.878285][ T6536] f2fs_sync_dirty_inodes+0x2b8/0x788 [ 108.878299][ T6536] f2fs_write_checkpoint+0x684/0x1694 [ 108.878313][ T6536] kill_f2fs_super+0x21c/0x584 [ 108.878325][ T6536] deactivate_locked_super+0xc4/0x12c [ 108.878337][ T6536] deactivate_super+0xe0/0x100 [ 108.878348][ T6536] cleanup_mnt+0x31c/0x3ac [ 108.878360][ T6536] __cleanup_mnt+0x20/0x30 [ 108.878371][ T6536] task_work_run+0x1dc/0x260 [ 108.878383][ T6536] do_notify_resume+0x174/0x1f4 [ 108.878395][ T6536] el0_svc+0xb8/0x180 [ 108.878407][ T6536] el0t_64_sync_handler+0x84/0x12c [ 108.878418][ T6536] el0t_64_sync+0x198/0x19c [ 108.878433][ T6536] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 109.077044][ T7316] loop2: detected capacity change from 0 to 64 [ 109.365858][ T7319] random: crng reseeded on system resumption [ 109.374430][ T7319] Restarting kernel threads ... [ 109.374943][ T7319] Done restarting kernel threads. [ 109.636883][ T7321] netlink: 'syz.0.180': attribute type 21 has an invalid length. [ 109.799073][ T52] Bluetooth: unknown link type 199 [ 109.799175][ T52] Bluetooth: hci0: connection err: -111 [ 110.302372][ T7314] loop3: detected capacity change from 0 to 262144 [ 110.354901][ T7314] F2FS-fs (loop3): invalid crc value [ 110.378511][ T7314] F2FS-fs (loop3): Start checkpoint disabled! [ 110.386054][ T7314] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 110.602783][ T7309] [U] pø¸Bj¹p`*C'ؼ~m˜Ùê ,B¤ñeЂék×b:tÞÚX!C‡‰°Ï@( [ 111.552826][ T7346] loop2: detected capacity change from 0 to 2048 [ 112.115036][ T7346] UDF-fs: warning (device loop2): udf_verify_domain_identifier: Not OSTA UDF compliant logical volume descriptor. [ 112.115182][ T7346] UDF-fs: warning (device loop2): udf_fill_super: No fileset found [ 112.176697][ T7349] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.177010][ T7349] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.708769][ T7343] nfs: Unknown parameter 'a' [ 112.720253][ T7354] loop4: detected capacity change from 0 to 256 [ 112.946471][ T7360] loop1: detected capacity change from 0 to 256 [ 113.672712][ T7360] FAT-fs (loop1): Directory bread(block 64) failed [ 113.679163][ T7360] FAT-fs (loop1): Directory bread(block 65) failed [ 113.681197][ T7360] FAT-fs (loop1): Directory bread(block 66) failed [ 113.685780][ T7360] FAT-fs (loop1): Directory bread(block 67) failed [ 113.685884][ T7360] FAT-fs (loop1): Directory bread(block 68) failed [ 113.685920][ T7360] FAT-fs (loop1): Directory bread(block 69) failed [ 113.685972][ T7360] FAT-fs (loop1): Directory bread(block 70) failed [ 113.686004][ T7360] FAT-fs (loop1): Directory bread(block 71) failed [ 113.686055][ T7360] FAT-fs (loop1): Directory bread(block 72) failed [ 113.686087][ T7360] FAT-fs (loop1): Directory bread(block 73) failed [ 113.876672][ T7363] loop2: detected capacity change from 0 to 40427 [ 113.886968][ T7363] F2FS-fs (loop2): build fault injection rate: 690 [ 113.887031][ T7363] F2FS-fs (loop2): Image doesn't support compression [ 113.887067][ T7363] F2FS-fs (loop2): Image doesn't support compression [ 113.887090][ T7363] F2FS-fs (loop2): build fault injection type: 0x4 [ 113.889745][ T7363] F2FS-fs (loop2): invalid crc value [ 113.907604][ T7363] F2FS-fs (loop2): Start checkpoint disabled! [ 113.910530][ T7363] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 114.130214][ T7375] [U] P:¼•[[*Ï>ÿ [ 114.130294][ T7375] [U] /7t So ¬ [ 114.130323][ T7375] [U] #º8¸U€|Ü„wYdw׉þb¬Üñ-G™th¶ctÍ­_›Kf)ó¸ÚO‘dÔ{<1‘‹ëΉÀì¤ß»¤“¼_Q¥ŽìàÝãe¸ÏÕ ÍHn [ 114.130367][ T7375] [U] à‚u1!+°&€-F‘)¨º§íD_ð ^ÔP%ëIÔöGú1ÒŒ¦kôÒÈÏ¢5˃± [ 114.130383][ T7375] [U] Bú…åË<ÿãÊ椹”Û‘i_¡$…œèI]Í6¨‘gŽÈ¨aNí(;C·t«üDtEÅ#¨Œ¡­†|Z%0¡-Ó$ÚJLÂö¯–Ò‡Âû)é#«ºK «‚]ïKçl [ 114.130405][ T7375] [U] ðx=·þ>*ì›®"çk)ýŸÇv_å5`›ÜyïÔl!0¡+DñxšU£ŸïJcá$ß6ÇÆç%é5ðç/7¼å¥I§KOžY0åÖ蘒Tôv„©fTH¿:Þ¢ÿÉZIà¼ÿ2[&“/‹¬Œ•ƒjÒà<.gaíVÄóÖÝ{“>Ž_Y%}3¿Y™­Ãú…?0îl¢µ/ w`Öäyë8c†þ˜GOØËU'eÄó^vº@ï”}tÕ'ØׂÿÌQ€~ ¡Æ õsS®Ç_”Ì£gEŒHÔŽ¥R‘ÑnTärqà­hCaZ}fQ3–ff"¼a)M‘d÷™iCƒ¥/¥u’Rbž™5>éL„Ç÷F®\R9K•!V [ 114.130620][ T7375] [U] åÍ·õ­÷§ [ 114.130655][ T7375] [U] ]p?X§ b'` [ 114.130688][ T7375] [U] ï·ÅÚ bI‡…ÁÙZ-€?i„_•A,ž/&Úˆã|/=¬M0X^NfÙ°4”õ¤ül®6‚ûÕR'?¥ˆëöO8ßÜšv­Ô(1ÏÀBÉFpúIqÞk üGWöo¤D颢9¢Ïôá’¾-ξßxH•íéfsÙ A­m ŸîïÂü¡ü•üɳ¨º$«@Öðmˆ5]© ^1epx"á†Er™Œ¼ [ 114.130706][ T7375] [U] 4$¹6<ËÕB¼4Õðì‹ËCgÂr‚ÚäÐZ úäþØ}.y‹ xZ\!)ýÉ͉(ø^7§1ö×3§1Z†4c [ 114.130734][ T7375] [U] uÔð/£”B¦HÁZ÷ËS`È4ôlÏüÒ¡ÚFÖ×*F¨@@§”›8©Ôë†k¿B”ÕÍii};÷$@)IO\Ó±„u|Æ“YíG/ÛKôfZÍ$ÛV ÛñßÎN§ÖÿÓ\¶oj¾ÆÍŽ1ã_ª¤Eþ…}ØùþçM-áðÕ`Qð}x›šfÆŸ…ê]]6€+ƒ…ã*¨¦: [ 114.130766][ T7375] [U] àjÈ·k¦1ÏÖ,bû`¥%FkkÆí+l›+F7Ж€M–~7œé Ù#›÷¬N´R*—&iguDÿ7vœr²mbZèp¡Ät}3|7b@ß( [ 114.130788][ T7375] [U] Æ-UØ4£½p²¬—‹jyîN²­Óð0C50ŒÑ‚ê [ 114.750989][ T7359] loop4: detected capacity change from 0 to 40427 [ 114.771141][ T7359] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 114.771210][ T7359] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 114.779689][ T7372] loop3: detected capacity change from 0 to 32768 [ 114.821683][ T7372] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 114.881349][ T7372] XFS (loop3): Metadata corruption detected at xfs_inode_buf_verify+0x3a0/0x4c8, xfs_inode block 0x3000 xfs_inode_buf_verify [ 114.886130][ T7372] XFS (loop3): Unmount and run xfs_repair [ 114.887839][ T7372] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 114.887866][ T7372] 00000000: 49 4e 81 ed 03 02 00 00 00 00 00 00 00 00 00 00 IN.............. [ 114.887888][ T7372] 00000010: 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 114.887922][ T7372] 00000020: 34 f7 58 68 a5 e2 bf 3d 34 f7 58 68 a5 e2 bf 3d 4.Xh...=4.Xh...= [ 114.887944][ T7372] 00000030: 34 f7 58 68 a5 e2 bf 3d 00 00 00 00 00 00 04 1a 4.Xh...=........ [ 114.887966][ T7372] 00000040: 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 01 ................ [ 114.887987][ T7372] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 f1 52 a5 03 .............R.. [ 114.888008][ T7372] 00000060: ff ff 05 00 df 92 a9 47 00 00 00 00 00 00 00 05 .......G........ [ 114.888029][ T7372] 00000070: 00 00 00 01 00 00 00 10 00 00 00 00 00 00 00 08 ................ [ 114.888207][ T7372] XFS (loop3): metadata I/O error in "xfs_imap_to_bp+0x100/0x268" at daddr 0x3000 len 64 error 117 [ 114.888350][ T7372] XFS (loop3): Failed to read root inode 0x1800, error 117 [ 114.888576][ T7372] XFS (loop3): Uncorrected metadata errors detected; please run xfs_repair. [ 114.931035][ T7359] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 114.931107][ T7359] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 114.954194][ T7373] [U] pø¸Bj¹p`*C'ؼ~m˜Ùê ,B¤ñeЂék×b:tÞÚX!C‡‰°Ï@( [ 115.064808][ T7396] loop1: detected capacity change from 0 to 2048 [ 115.101054][ T7396] EXT4-fs error (device loop1): __ext4_fill_super:5500: inode #2: comm syz.1.202: iget: bad extended attribute block 281474976710655 [ 115.108660][ T7396] EXT4-fs (loop1): get root inode failed [ 115.108716][ T7396] EXT4-fs (loop1): mount failed [ 115.509546][ T7425] loop2: detected capacity change from 0 to 512 [ 115.548480][ T7425] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.214: bg 0: block 5: invalid block bitmap [ 115.550817][ T7428] loop4: detected capacity change from 0 to 8 [ 115.559305][ T7425] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 115.581668][ T7428] SQUASHFS error: Unable to read inode 0x87 [ 115.586279][ T7425] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.214: invalid indirect mapped block 3 (level 2) [ 115.597198][ T7425] EXT4-fs (loop2): 2 truncates cleaned up [ 115.598086][ T7425] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.756117][ T7436] loop3: detected capacity change from 0 to 2048 [ 115.799728][ T7436] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 115.826132][ T6534] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.844427][ T7436] syz.3.219: attempt to access beyond end of device [ 115.844427][ T7436] loop3: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 115.849082][ T7439] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 115.905583][ T7436] syz.3.219: attempt to access beyond end of device [ 115.905583][ T7436] loop3: rw=0, sector=33554430, nr_sectors = 2 limit=2048 [ 115.918983][ T7436] NILFS (loop3): I/O error reading meta-data file (ino=6, block-offset=3) [ 115.921929][ T7436] NILFS (loop3): error -5 reading inode: ino=15 [ 116.074068][ T7444] loop4: detected capacity change from 0 to 512 [ 116.086962][ T7444] EXT4-fs: Ignoring removed i_version option [ 116.087051][ T7444] EXT4-fs: Ignoring removed mblk_io_submit option [ 116.157709][ T7446] ptrace attach of "./syz-executor exec"[6527] was attempted by "\x22"[7446] [ 116.623212][ T7450] loop1: detected capacity change from 0 to 1024 [ 116.627971][ T7448] loop3: detected capacity change from 0 to 2048 [ 116.678806][ T7444] EXT4-fs error (device loop4): ext4_orphan_get:1393: comm syz.4.222: inode #13: comm syz.4.222: iget: illegal inode # [ 116.684183][ T7444] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.222: couldn't read orphan inode 13 (err -117) [ 116.689403][ T7444] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.699377][ T7448] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 116.814580][ T7443] loop2: detected capacity change from 0 to 32768 [ 116.827945][ T6533] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.837549][ T7443] (syz.2.221,7443,0):ocfs2_find_slot:468 ERROR: no free slots available! [ 116.837616][ T7443] (syz.2.221,7443,0):ocfs2_mount_volume:1751 ERROR: status = -22 [ 116.853656][ T7443] (syz.2.221,7443,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 117.060976][ T7460] loop4: detected capacity change from 0 to 2048 [ 117.121340][ T7460] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 117.618328][ T7480] loop3: detected capacity change from 0 to 1024 [ 117.636275][ T7478] ptrace attach of "./syz-executor exec"[6527] was attempted by ""[7478] [ 117.706267][ T7477] loop4: detected capacity change from 0 to 40427 [ 117.710244][ T7477] F2FS-fs (loop4): build fault injection rate: 690 [ 117.710322][ T7477] F2FS-fs (loop4): Image doesn't support compression [ 117.710364][ T7477] F2FS-fs (loop4): Image doesn't support compression [ 117.710394][ T7477] F2FS-fs (loop4): build fault injection type: 0x4 [ 117.711599][ T7477] F2FS-fs (loop4): invalid crc value [ 117.751753][ T7477] F2FS-fs (loop4): Start checkpoint disabled! [ 117.755745][ T7477] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 118.024863][ T7486] ptrace attach of "./syz-executor exec"[6533] was attempted by "\x22"[7486] [ 118.811485][ T7490] loop1: detected capacity change from 0 to 1024 [ 118.847836][ T7492] Cannot find add_set index 0 as target [ 119.199127][ T42] hfsplus: b-tree write err: -5, ino 4 [ 119.358658][ T7500] loop2: detected capacity change from 0 to 40427 [ 119.477500][ T7500] F2FS-fs (loop2): build fault injection rate: 690 [ 119.478159][ T7500] F2FS-fs (loop2): Image doesn't support compression [ 119.478714][ T7500] F2FS-fs (loop2): Image doesn't support compression [ 119.478950][ T7500] F2FS-fs (loop2): build fault injection type: 0x4 [ 119.541790][ T7500] F2FS-fs (loop2): invalid crc value [ 119.933974][ T7500] F2FS-fs (loop2): Start checkpoint disabled! [ 119.977752][ T7500] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 120.372109][ T7515] ptrace attach of "./syz-executor exec"[6534] was attempted by "\x22"[7515] [ 121.022721][ T52] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 121.478684][ T7530] loop1: detected capacity change from 0 to 40427 [ 121.482895][ T7530] F2FS-fs (loop1): build fault injection rate: 690 [ 121.482955][ T7530] F2FS-fs (loop1): Image doesn't support compression [ 121.483004][ T7530] F2FS-fs (loop1): Image doesn't support compression [ 121.483034][ T7530] F2FS-fs (loop1): build fault injection type: 0x4 [ 121.492211][ T7530] F2FS-fs (loop1): invalid crc value [ 121.509321][ T7530] F2FS-fs (loop1): Start checkpoint disabled! [ 121.512943][ T7530] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 121.727797][ T7546] ptrace attach of "./syz-executor exec"[6536] was attempted by ""[7546] [ 121.854982][ T7548] loop3: detected capacity change from 0 to 40427 [ 121.859194][ T7548] F2FS-fs (loop3): build fault injection rate: 690 [ 121.859292][ T7548] F2FS-fs (loop3): Image doesn't support compression [ 121.859329][ T7548] F2FS-fs (loop3): Image doesn't support compression [ 121.859353][ T7548] F2FS-fs (loop3): build fault injection type: 0x4 [ 121.869923][ T7548] F2FS-fs (loop3): invalid crc value [ 121.889354][ T7548] F2FS-fs (loop3): Start checkpoint disabled! [ 121.894698][ T7548] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 122.164674][ T7560] ptrace attach of "./syz-executor exec"[6530] was attempted by "\x22"[7560] [ 122.847725][ T7565] loop2: detected capacity change from 0 to 512 [ 122.868492][ T7565] EXT4-fs error (device loop2): ext4_orphan_get:1419: comm syz.2.268: bad orphan inode 11 [ 122.872086][ T7565] ext4_test_bit(bit=10, block=4) = 1 [ 122.872156][ T7565] is_bad_inode(inode)=0 [ 122.872183][ T7565] NEXT_ORPHAN(inode)=2080374784 [ 122.872204][ T7565] max_ino=32 [ 122.872221][ T7565] i_nlink=0 [ 122.872363][ T7565] EXT4-fs (loop2): 1 truncate cleaned up [ 122.923104][ T7565] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.940413][ T7571] loop1: detected capacity change from 0 to 256 [ 122.941243][ T7571] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 123.021506][ T6534] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.373412][ T7582] openvswitch: netlink: Port 808464432 exceeds max allowable 65535 [ 123.841671][ T7587] tmpfs: Bad value for 'mpol' [ 124.130999][ T7592] loop2: detected capacity change from 0 to 40427 [ 124.133518][ T7592] F2FS-fs (loop2): build fault injection rate: 690 [ 124.133578][ T7592] F2FS-fs (loop2): Image doesn't support compression [ 124.133622][ T7592] F2FS-fs (loop2): Image doesn't support compression [ 124.133656][ T7592] F2FS-fs (loop2): build fault injection type: 0x4 [ 124.134861][ T7592] F2FS-fs (loop2): invalid crc value [ 124.212732][ T7588] loop3: detected capacity change from 0 to 32768 [ 124.262891][ T7592] F2FS-fs (loop2): Start checkpoint disabled! [ 124.280177][ T7592] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 124.424778][ T7606] Injecting memory failure for pfn 0x1275fe at process virtual address 0x20ffe000 [ 124.583566][ T7607] ptrace attach of "./syz-executor exec"[6534] was attempted by "\x22"[7607] [ 125.295911][ T7588] JBD2: Ignoring recovery information on journal [ 125.431580][ T7606] Memory failure: 0x1275fe: Sending SIGBUS to syz.4.280:7606 due to hardware memory corruption [ 125.431687][ T7606] Memory failure: 0x1275fe: recovery action for dirty LRU page: Recovered [ 125.783836][ T7588] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 125.925724][ T2408] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.925806][ T2408] ieee802154 phy1 wpan1: encryption failed: -22 [ 125.958234][ T6530] ocfs2: Unmounting device (7,3) on (node local) [ 126.083047][ T52] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 126.083375][ T52] Bluetooth: hci0: Injecting HCI hardware error event [ 126.084640][ T6529] Bluetooth: hci0: hardware error 0x00 [ 126.128826][ T7601] loop1: detected capacity change from 0 to 32768 [ 126.413042][ T7621] loop4: detected capacity change from 0 to 40427 [ 126.419639][ T7623] Injecting memory failure for pfn 0x13f5fe at process virtual address 0x20ffe000 [ 126.440958][ T7601] BTRFS: device fsid 5ac8a51e-da3a-4998-8e66-e1df06b87bc8 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.281 (7601) [ 126.576653][ T7621] F2FS-fs (loop4): build fault injection rate: 690 [ 126.577950][ T7621] F2FS-fs (loop4): Image doesn't support compression [ 126.578035][ T7621] F2FS-fs (loop4): Image doesn't support compression [ 126.578077][ T7621] F2FS-fs (loop4): build fault injection type: 0x4 [ 126.651039][ T7621] F2FS-fs (loop4): invalid crc value [ 126.853278][ T7621] F2FS-fs (loop4): Start checkpoint disabled! [ 127.020229][ T7623] Memory failure: 0x13f5fe: Sending SIGBUS to syz.3.289:7623 due to hardware memory corruption [ 127.020343][ T7623] Memory failure: 0x13f5fe: recovery action for dirty LRU page: Recovered [ 127.048906][ T7621] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 127.059877][ T7601] BTRFS info (device loop1): first mount of filesystem 5ac8a51e-da3a-4998-8e66-e1df06b87bc8 [ 127.059969][ T7601] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 127.060025][ T7601] BTRFS info (device loop1): using free-space-tree [ 127.404468][ T7601] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 127.404719][ T7601] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 128.119718][ T7601] BTRFS error (device loop1): open_ctree failed: -12 [ 128.233416][ T7659] netlink: 48 bytes leftover after parsing attributes in process `syz.3.295'. [ 128.284216][ T7664] netlink: 20 bytes leftover after parsing attributes in process `syz.1.297'. [ 128.447093][ T7661] loop2: detected capacity change from 0 to 4096 [ 128.861921][ T6529] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 129.575621][ T7677] loop3: detected capacity change from 0 to 2048 [ 129.576247][ T7677] EXT4-fs: Ignoring removed mblk_io_submit option [ 129.576306][ T7677] EXT4-fs: Ignoring removed i_version option [ 129.617420][ T7677] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.652898][ T7682] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set [ 129.655981][ T7682] EXT4-fs (loop3): Remounting filesystem read-only [ 129.860213][ T6530] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.645687][ T7698] netlink: 48 bytes leftover after parsing attributes in process `syz.2.309'. [ 130.802261][ T6529] Bluetooth: hci4: unexpected event for opcode 0x0407 [ 130.869614][ T7708] [U] P:¼•[[*Ï>ÿ [ 130.870839][ T7708] [U] /7t So ¬ [ 130.871982][ T7708] [U] #º8¸U€|Ü„wYdw׉þb¬Üñ-G™th¶ctÍ­_›Kf)ó¸ÚO‘dÔ{<1‘‹ëΉÀì¤ß»¤“¼_Q¥ŽìàÝãe¸ÏÕ ÍHn [ 130.877084][ T7708] [U] à‚u1!+°&€-F‘)¨º§íD_ð ^ÔP%ëIÔöGú1ÒŒ¦kôÒÈÏ¢5˃± [ 130.877120][ T7708] [U] Bú…åË<ÿãÊ椹”Û‘i_¡$…œèI]Í6¨‘gŽÈ¨aNí(;C·t«üDtEÅ#¨Œ¡­†|Z%0¡-Ó$ÚJLÂö¯–Ò‡Âû)é#«ºK «‚]ïKçl [ 130.883003][ T7708] [U] ðx=·þ>*ì›®"çk)ýŸÇv_å5`›ÜyïÔl!0¡+DñxšU£ŸïJcá$ß6ÇÆç%é5ðç/7¼å¥I§KOžY0åÖ蘒Tôv„©fTH¿:Þ¢ÿÉZIà¼ÿ2[&“/‹¬Œ•ƒjÒà<.gaíVÄóÖÝ{“>Ž_Y%}3¿Y™­Ãú…?0îl¢µ/ w`Öäyë8c†þ˜GOØËU'eÄó^vº@ï”}tÕ'ØׂÿÌQ€~ ¡Æ õsS®Ç_”Ì£gEŒHÔŽ¥R‘ÑnTärqà­hCaZ}fQ3–ff"¼a)M‘d÷™iCƒ¥/¥u’Rbž™5>éL„Ç÷F®\R9K•!V [ 130.912846][ T7708] [U] åÍ·õ­÷§ [ 130.912893][ T7708] [U] ]p?X§ b'` [ 130.912927][ T7708] [U] ï·ÅÚ bI‡…ÁÙZ-€?i„_•A,ž/&Úˆã|/=¬M0X^NfÙ°4”õ¤ül®6‚ûÕR'?¥ˆëöO8ßÜšv­Ô(1ÏÀBÉFpúIqÞk üGWöo¤D颢9¢Ïôá’¾-ξßxH•íéfsÙ A­m ŸîïÂü¡ü•üɳ¨º$«@Öðmˆ5]© ^1epx"á†Er™Œ¼ [ 130.912946][ T7708] [U] 4$¹6<ËÕB¼4Õðì‹ËCgÂr‚ÚäÐZ úäþØ}.y‹ xZ\!)ýÉ͉(ø^7§1ö×3§1Z†4c [ 130.912975][ T7708] [U] uÔð/£”B¦HÁZ÷ËS`È4ôlÏüÒ¡ÚFÖ×*F¨@@§”›8©Ôë†k¿B”ÕÍii};÷$@)IO\Ó±„u|Æ“YíG/ÛKôfZÍ$ÛV ÛñßÎN§ÖÿÓ\¶oj¾ÆÍŽ1ã_ª¤Eþ…}ØùþçM-áðÕ`Qð}x›šfÆŸ…ê]]6€+ƒ…ã*¨¦: [ 130.913007][ T7708] [U] àjÈ·k¦1ÏÖ,bû`¥%FkkÆí+l›+F7Ж€M–~7œé Ù#›÷¬N´R*—&iguDÿ7vœr²mbZèp¡Ät}3|7b@ß( [ 130.913029][ T7708] [U] Æ-UØ4£½p²¬—‹jyîN²­Óð0C50ŒÑ‚ê [ 131.280576][ T7713] Injecting memory failure for pfn 0x14c9fe at process virtual address 0x20ffe000 [ 131.302716][ T7713] Memory failure: 0x14c9fe: Sending SIGBUS to syz.1.316:7713 due to hardware memory corruption [ 131.303077][ T7713] Memory failure: 0x14c9fe: recovery action for dirty LRU page: Recovered [ 131.890905][ T7720] loop2: detected capacity change from 0 to 128 [ 131.917361][ T7720] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 132.030266][ T7720] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #2: comm syz.2.317: No space for directory leaf checksum. Please run e2fsck -D. [ 132.030425][ T7720] EXT4-fs error (device loop2): __ext4_find_entry:1626: inode #2: comm syz.2.317: checksumming directory block 0 [ 132.128321][ T6534] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 132.339057][ T7734] netlink: 48 bytes leftover after parsing attributes in process `syz.0.323'. [ 132.356738][ T7729] loop4: detected capacity change from 0 to 40427 [ 132.362364][ T7729] F2FS-fs (loop4): build fault injection rate: 690 [ 132.362403][ T7729] F2FS-fs (loop4): Image doesn't support compression [ 132.362438][ T7729] F2FS-fs (loop4): Image doesn't support compression [ 132.362462][ T7729] F2FS-fs (loop4): build fault injection type: 0x4 [ 132.369410][ T7729] F2FS-fs (loop4): invalid crc value [ 132.391258][ T7729] F2FS-fs (loop4): Start checkpoint disabled! [ 132.394646][ T7729] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 132.648464][ T7741] ptrace attach of "./syz-executor exec"[6533] was attempted by ""[7741] [ 133.040376][ T7730] loop1: detected capacity change from 0 to 32768 [ 133.069407][ T7730] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.322 (7730) [ 133.104195][ T7730] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 133.104302][ T7730] BTRFS info (device loop1): using sha256 (sha256-arm64) checksum algorithm [ 133.302324][ T7745] loop2: detected capacity change from 0 to 40427 [ 133.303783][ T7745] F2FS-fs (loop2): build fault injection rate: 690 [ 133.303821][ T7745] F2FS-fs (loop2): Image doesn't support compression [ 133.303855][ T7745] F2FS-fs (loop2): Image doesn't support compression [ 133.303879][ T7745] F2FS-fs (loop2): build fault injection type: 0x4 [ 133.305090][ T7745] F2FS-fs (loop2): invalid crc value [ 133.327839][ T7745] F2FS-fs (loop2): Start checkpoint disabled! [ 133.330737][ T7745] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 133.488937][ T7730] BTRFS info (device loop1): rebuilding free space tree [ 133.519739][ T7730] BTRFS info (device loop1): disabling free space tree [ 133.519832][ T7730] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 133.519879][ T7730] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 133.748353][ T7769] comedi comedi0: bad chanlist[0]=0x000001ff chan=511 range length=2 [ 134.769450][ T7716] [U] pø¸Bj¹p`*C'ؼ~m˜Ùê ,B¤ñeЂék×b:tÞÚX!C‡‰°Ï@( [ 134.855970][ T7778] loop3: detected capacity change from 0 to 8 [ 136.935087][ T7809] Injecting memory failure for pfn 0x146832 at process virtual address 0x20ffa000 [ 136.945828][ T7809] Memory failure: 0x146832: Sending SIGBUS to syz.0.340:7809 due to hardware memory corruption [ 136.945918][ T7809] Memory failure: 0x146832: recovery action for dirty LRU page: Recovered [ 136.946035][ T7809] Injecting memory failure for pfn 0x1405df at process virtual address 0x20ffb000 [ 136.946100][ T7809] Memory failure: 0x1405df: keeping poisoned page in swap cache [ 136.946389][ T7809] Memory failure: 0x1405df: Sending SIGBUS to syz.0.340:7809 due to hardware memory corruption [ 136.946437][ T7809] Memory failure: 0x1405df: recovery action for dirty swapcache page: Delayed [ 136.946465][ T7809] Injecting memory failure for pfn 0x146834 at process virtual address 0x20ffc000 [ 136.946534][ T7809] Memory failure: 0x146834: Sending SIGBUS to syz.0.340:7809 due to hardware memory corruption [ 136.946573][ T7809] Memory failure: 0x146834: recovery action for dirty LRU page: Recovered [ 137.049118][ T6536] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 137.208927][ T7806] loop4: detected capacity change from 0 to 32768 [ 137.242273][ T7806] BTRFS: device fsid 5ac8a51e-da3a-4998-8e66-e1df06b87bc8 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.341 (7806) [ 137.262752][ T7806] BTRFS info (device loop4): first mount of filesystem 5ac8a51e-da3a-4998-8e66-e1df06b87bc8 [ 137.262861][ T7806] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 137.262898][ T7806] BTRFS info (device loop4): using free-space-tree [ 137.547016][ T6533] BTRFS info (device loop4): last unmount of filesystem 5ac8a51e-da3a-4998-8e66-e1df06b87bc8 [ 137.927011][ T7839] loop2: detected capacity change from 0 to 16 [ 137.940648][ T7839] erofs (device loop2): mounted with root inode @ nid 36. [ 138.024745][ T7841] loop3: detected capacity change from 0 to 256 [ 138.025321][ T7841] exfat: Deprecated parameter 'utf8' [ 138.025360][ T7841] exfat: Deprecated parameter 'utf8' [ 138.025396][ T7841] exfat: Deprecated parameter 'utf8' [ 138.025418][ T7841] exfat: Deprecated parameter 'utf8' [ 138.061413][ T7841] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xac5c0b1f, utbl_chksum : 0xe619d30d) [ 138.215171][ T7833] loop4: detected capacity change from 0 to 32768 [ 138.289426][ T7833] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.344 (7833) [ 138.405709][ T7847] netlink: 48 bytes leftover after parsing attributes in process `syz.0.352'. [ 138.907364][ T7832] loop1: detected capacity change from 0 to 40427 [ 138.916227][ T7832] F2FS-fs (loop1): invalid crc value [ 139.009658][ T7832] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 139.198936][ T7833] BTRFS info (device loop4): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 139.202208][ T7833] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 139.209006][ T7833] BTRFS info (device loop4): disk space caching is enabled [ 139.211626][ T7833] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 139.359890][ T7843] loop2: detected capacity change from 0 to 262144 [ 139.414411][ T7843] F2FS-fs (loop2): invalid crc value [ 139.436649][ T7843] F2FS-fs (loop2): Start checkpoint disabled! [ 139.440068][ T7843] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 139.536640][ T7874] Injecting memory failure for pfn 0x1461fe at process virtual address 0x20ffe000 [ 140.067322][ T7874] Memory failure: 0x1461fe: Sending SIGBUS to syz.0.354:7874 due to hardware memory corruption [ 140.067428][ T7874] Memory failure: 0x1461fe: recovery action for dirty LRU page: Recovered [ 140.166308][ T7833] BTRFS info (device loop4): rebuilding free space tree [ 140.210054][ T7833] BTRFS info (device loop4): disabling free space tree [ 140.212129][ T7833] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 140.215290][ T7833] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 140.451594][ T6533] BTRFS info (device loop4): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 141.993873][ T7905] netlink: 'syz.1.362': attribute type 10 has an invalid length. [ 142.129296][ T7905] veth0_macvtap: left promiscuous mode [ 142.266685][ T7914] Injecting memory failure for pfn 0x146ffe at process virtual address 0x20ffe000 [ 142.800749][ T7914] Memory failure: 0x146ffe: Sending SIGBUS to syz.0.364:7914 due to hardware memory corruption [ 142.800851][ T7914] Memory failure: 0x146ffe: recovery action for dirty LRU page: Recovered [ 142.884410][ T7905] batman_adv: batadv0: Adding interface: macvtap0 [ 142.884478][ T7905] batman_adv: batadv0: The MTU of interface macvtap0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.884538][ T7905] batman_adv: batadv0: Not using interface macvtap0 (retrying later): interface not active [ 143.061129][ T7921] [U] P:¼•[[*Ï>ÿ [ 143.061217][ T7921] [U] /7t So ¬ [ 143.061247][ T7921] [U] #º8¸U€|Ü„wYdw׉þb¬Üñ-G™th¶ctÍ­_›Kf)ó¸ÚO‘dÔ{<1‘‹ëΉÀì¤ß»¤“¼_Q¥ŽìàÝãe¸ÏÕ ÍHn [ 143.061297][ T7921] [U] à‚u1!+°&€-F‘)¨º§íD_ð ^ÔP%ëIÔöGú1ÒŒ¦kôÒÈÏ¢5˃± [ 143.061314][ T7921] [U] Bú…åË<ÿãÊ椹”Û‘i_¡$…œèI]Í6¨‘gŽÈ¨aNí(;C·t«üDtEÅ#¨Œ¡­†|Z%0¡-Ó$ÚJLÂö¯–Ò‡Âû)é#«ºK «‚]ïKçl [ 143.061336][ T7921] [U] ðx=·þ>*ì›®"çk)ýŸÇv_å5`›ÜyïÔl!0¡+DñxšU£ŸïJcá$ß6ÇÆç%é5ðç/7¼å¥I§KOžY0åÖ蘒Tôv„©fTH¿:Þ¢ÿÉZIà¼ÿ2[&“/‹¬Œ•ƒjÒà<.gaíVÄóÖÝ{“>Ž_Y%}3¿Y™­Ãú…?0îl¢µ/ w`Öäyë8c†þ˜GOØËU'eÄó^vº@ï”}tÕ'ØׂÿÌQ€~ ¡Æ õsS®Ç_”Ì£gEŒHÔŽ¥R‘ÑnTärqà­hCaZ}fQ3–ff"¼a)M‘d÷™iCƒ¥/¥u’Rbž™5>éL„Ç÷F®\R9K•!V [ 143.061550][ T7921] [U] åÍ·õ­÷§ [ 143.061587][ T7921] [U] ]p?X§ b'` [ 143.061619][ T7921] [U] ï·ÅÚ bI‡…ÁÙZ-€?i„_•A,ž/&Úˆã|/=¬M0X^NfÙ°4”õ¤ül®6‚ûÕR'?¥ˆëöO8ßÜšv­Ô(1ÏÀBÉFpúIqÞk üGWöo¤D颢9¢Ïôá’¾-ξßxH•íéfsÙ A­m ŸîïÂü¡ü•üɳ¨º$«@Öðmˆ5]© ^1epx"á†Er™Œ¼ [ 143.061638][ T7921] [U] 4$¹6<ËÕB¼4Õðì‹ËCgÂr‚ÚäÐZ úäþØ}.y‹ xZ\!)ýÉ͉(ø^7§1ö×3§1Z†4c [ 143.061666][ T7921] [U] uÔð/£”B¦HÁZ÷ËS`È4ôlÏüÒ¡ÚFÖ×*F¨@@§”›8©Ôë†k¿B”ÕÍii};÷$@)IO\Ó±„u|Æ“YíG/ÛKôfZÍ$ÛV ÛñßÎN§ÖÿÓ\¶oj¾ÆÍŽ1ã_ª¤Eþ…}ØùþçM-áðÕ`Qð}x›šfÆŸ…ê]]6€+ƒ…ã*¨¦: [ 143.061698][ T7921] [U] àjÈ·k¦1ÏÖ,bû`¥%FkkÆí+l›+F7Ж€M–~7œé Ù#›÷¬N´R*—&iguDÿ7vœr²mbZèp¡Ät}3|7b@ß( [ 143.061721][ T7921] [U] Æ-UØ4£½p²¬—‹jyîN²­Óð0C50ŒÑ‚ê [ 143.222036][ T7926] Injecting memory failure for pfn 0x1467fe at process virtual address 0x20ffe000 [ 143.920384][ T7926] Memory failure: 0x1467fe: Sending SIGBUS to syz.0.367:7926 due to hardware memory corruption [ 143.920469][ T7926] Memory failure: 0x1467fe: recovery action for dirty LRU page: Recovered [ 143.999528][ T7920] [U] pø¸Bj¹p`*C'ؼ~m˜Ùê ,B¤ñeЂék×b:tÞÚX!C‡‰°Ï@( [ 144.402974][ T7935] loop4: detected capacity change from 0 to 1024 [ 145.089220][ T7910] loop2: detected capacity change from 0 to 40427 [ 145.131241][ T7910] F2FS-fs (loop2): invalid crc value [ 146.055258][ T7953] loop3: detected capacity change from 0 to 256 [ 146.141611][ T60] hfsplus: b-tree write err: -5, ino 4 [ 146.200809][ T7961] loop1: detected capacity change from 0 to 512 [ 146.288909][ T7961] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.327211][ T7961] EXT4-fs error (device loop1): ext4_empty_dir:3078: inode #12: comm syz.1.382: Directory hole found for htree leaf block 0 [ 146.485099][ T6536] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.803934][ T8000] loop1: detected capacity change from 0 to 256 [ 148.089786][ T8004] Injecting memory failure for pfn 0x14ebfe at process virtual address 0x20ffe000 [ 148.114024][ T8004] Memory failure: 0x14ebfe: Sending SIGBUS to syz.3.383:8004 due to hardware memory corruption [ 148.114394][ T8004] Memory failure: 0x14ebfe: recovery action for dirty LRU page: Recovered [ 148.638209][ T8011] netlink: 16 bytes leftover after parsing attributes in process `syz.4.395'. [ 148.750050][ T8017] loop1: detected capacity change from 0 to 4096 [ 148.959214][ T8021] Injecting memory failure for pfn 0x1453fe at process virtual address 0x20ffe000 [ 149.505412][ T8021] Memory failure: 0x1453fe: Sending SIGBUS to syz.2.396:8021 due to hardware memory corruption [ 149.505497][ T8021] Memory failure: 0x1453fe: recovery action for dirty LRU page: Recovered [ 149.636889][ T8029] loop4: detected capacity change from 0 to 256 [ 149.842178][ T8017] ntfs3(loop1): ino=9, attr_set_size [ 150.587437][ T8040] loop2: detected capacity change from 0 to 256 [ 150.708161][ T8042] loop3: detected capacity change from 0 to 4096 [ 150.714185][ T8044] loop4: detected capacity change from 0 to 2048 [ 150.735039][ T8046] loop1: detected capacity change from 0 to 512 [ 150.788339][ T8044] NILFS (loop4): invalid segment: Inconsistency found [ 150.790323][ T8044] NILFS (loop4): trying rollback from an earlier position [ 150.804608][ T8046] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 150.833180][ T8046] EXT4-fs (loop1): 1 truncate cleaned up [ 150.835697][ T8046] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.840014][ T8044] NILFS (loop4): recovery complete [ 150.856424][ T8050] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 151.208080][ T6536] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.214633][ T8053] loop2: detected capacity change from 0 to 2048 [ 151.234720][ T8054] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 151.268408][ T8053] NILFS error (device loop2): nilfs_check_folio: bad entry in directory #2: disallowed inode number - offset=56, inode=6, rec_len=24, name_len=5 [ 151.289906][ T8053] Remounting filesystem read-only [ 151.793809][ T8066] Injecting memory failure for pfn 0x13f9fe at process virtual address 0x20ffe000 [ 151.953375][ T8068] ptrace attach of "./syz-executor exec"[6534] was attempted by "\x22"[8068] [ 152.783413][ T8066] Memory failure: 0x13f9fe: Sending SIGBUS to syz.4.413:8066 due to hardware memory corruption [ 152.783496][ T8066] Memory failure: 0x13f9fe: recovery action for dirty LRU page: Recovered [ 153.136085][ T8080] Injecting memory failure for pfn 0x14d9fe at process virtual address 0x20ffe000 [ 153.241382][ T8080] Memory failure: 0x14d9fe: Sending SIGBUS to syz.1.410:8080 due to hardware memory corruption [ 153.241492][ T8080] Memory failure: 0x14d9fe: recovery action for dirty LRU page: Recovered [ 153.758764][ T8086] ieee802154 phy0 wpan0: encryption failed: -22 [ 153.898403][ T8093] loop1: detected capacity change from 0 to 256 [ 154.288470][ T8100] loop1: detected capacity change from 0 to 40427 [ 154.299704][ T8100] F2FS-fs (loop1): build fault injection rate: 690 [ 154.299766][ T8100] F2FS-fs (loop1): Image doesn't support compression [ 154.299812][ T8100] F2FS-fs (loop1): Image doesn't support compression [ 154.299842][ T8100] F2FS-fs (loop1): build fault injection type: 0x4 [ 154.312910][ T8100] F2FS-fs (loop1): invalid crc value [ 154.365180][ T8100] F2FS-fs (loop1): Start checkpoint disabled! [ 154.371243][ T8091] loop4: detected capacity change from 0 to 32768 [ 154.373471][ T8100] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 154.482898][ T8078] loop3: detected capacity change from 0 to 32768 [ 154.530808][ T8094] loop2: detected capacity change from 0 to 32768 [ 154.695684][ T8116] ptrace attach of "./syz-executor exec"[6536] was attempted by ""[8116] [ 154.867278][ T8094] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,no_data_io [ 154.889332][ T8094] allowing incompatible features above 0.0: (unknown version) [ 154.889393][ T8094] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 154.889452][ T8094] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0 [ 154.889591][ T8094] bcachefs (loop2): recovering from clean shutdown, journal seq 10 [ 154.889670][ T8094] bcachefs (loop2): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.28: inode_has_case_insensitive [ 154.889670][ T8094] running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes [ 154.890173][ T8094] bcachefs (loop2): dropping and reconstructing all alloc info [ 155.023014][ T8078] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,fsck,recovery_pass_last=scan_for_btree_nodes,nojournal_transaction_names,reconstruct_alloc [ 155.023063][ T8078] allowing incompatible features above 0.0: (unknown version) [ 155.023099][ T8078] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 155.023166][ T8078] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0 [ 155.023279][ T8078] bcachefs (loop3): recovering from clean shutdown, journal seq 10 [ 155.023422][ T8078] bcachefs (loop3): Version upgrade required: [ 155.023422][ T8078] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 155.023422][ T8078] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 155.023422][ T8078] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 155.109335][ T8078] bcachefs (loop3): dropping and reconstructing all alloc info [ 155.503838][ T8078] bcachefs (loop3): btree node read error at btree extents level 0/0 [ 155.507066][ T8078] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c6c25c03258c59c5 written 65535 min_key R POS_MIN durability: 1 ptr: 0:27:0 gen 0 [ 155.511389][ T8078] loop3 node offset 16/65535: btree node data missing: expected 65535 sectors, found 16 [ 155.514627][ T8078] flagging btree extents lost data [ 155.516374][ T8078] running recovery pass check_topology (2), currently at recovery_pass_empty (0) [ 155.516412][ T8078] running recovery pass check_topology (2), currently at recovery_pass_empty (0) [ 155.516430][ T8078] running recovery pass scan_for_btree_nodes (1), currently at recovery_pass_empty (0) [ 155.516446][ T8078] ret fsck_errors_not_fixed [ 155.533820][ T8078] bcachefs (loop3): error reading btree root btree=extents level=0: btree_node_read_error, fixing [ 155.538773][ T8094] bcachefs (loop2): accounting_read... [ 155.635697][ T8128] Injecting memory failure for pfn 0x1449fe at process virtual address 0x20ffe000 [ 155.778048][ T8078] bcachefs (loop3): btree node read error at btree dirents level 0/0 [ 155.780747][ T8078] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0 [ 155.787176][ T8078] loop3 node offset 8/24: btree node data missing: expected 24 sectors, found 8 [ 155.790539][ T8078] flagging btree dirents lost data [ 155.792490][ T8078] ret fsck_errors_not_fixed [ 155.868809][ T8078] bcachefs (loop3): error reading btree root btree=dirents level=0: btree_node_read_error, fixing [ 156.222526][ T8128] Memory failure: 0x1449fe: Sending SIGBUS to syz.4.428:8128 due to hardware memory corruption [ 156.222934][ T8128] Memory failure: 0x1449fe: recovery action for dirty LRU page: Recovered [ 156.268954][ T8078] bcachefs (loop3): btree node read error at btree xattrs level 0/0 [ 156.268998][ T8078] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 2285c34bed0abe32 written 16 min_key POS_MIN durability: 1 ptr: 0:31:0 gen 0 [ 156.269012][ T8078] loop3 node offset 0/16: incorrect min_key: got 0:0:458752 should be POS_MIN [ 156.269023][ T8078] flagging btree xattrs lost data [ 156.269032][ T8078] ret btree_node_read_validate_error [ 156.269184][ T8078] bcachefs (loop3): error reading btree root btree=xattrs level=0: btree_node_read_error, fixing [ 156.303364][ T8078] bcachefs (loop3): Fixed errors, running fsck a second time to verify fs is clean [ 156.380247][ T8078] bcachefs (loop3): scanning for old btree nodes: min_version 0.24: unwritten_extents [ 156.380311][ T8078] bcachefs (loop3): going read-write [ 156.388189][ T8078] bcachefs (loop3): bch2_journal_reclaim_start(): error creating journal reclaim thread EINTR [ 156.392514][ T8078] bcachefs (loop3): flushing journal and stopping allocators, journal seq 10 [ 156.396424][ T8078] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 10 [ 156.406078][ T8094] done [ 156.409797][ T8094] bcachefs (loop2): alloc_read... done [ 156.413859][ T8094] bcachefs (loop2): snapshots_read... done [ 156.416279][ T8094] bcachefs (loop2): done starting filesystem [ 156.424132][ T8078] bcachefs (loop3): unclean shutdown complete, journal seq 11 [ 156.425583][ T8078] bcachefs (loop3): error in recovery: EINTR [ 156.425600][ T8078] emergency read only at seq 11 [ 156.425648][ T8078] bcachefs (loop3): bch2_fs_start(): error starting filesystem EINTR [ 156.425669][ T8078] bcachefs (loop3): shutting down [ 156.468941][ T8078] bcachefs (loop3): shutdown complete [ 156.580964][ T6534] bcachefs (loop2): shutting down [ 156.734044][ T6534] bcachefs (loop2): shutdown complete [ 156.744065][ T8078] bcachefs: bch2_fs_get_tree() error: EINTR [ 156.868980][ T8142] Injecting memory failure for pfn 0x143ffe at process virtual address 0x20ffe000 [ 157.392292][ T8142] Memory failure: 0x143ffe: Sending SIGBUS to syz.0.431:8142 due to hardware memory corruption [ 157.392733][ T8142] Memory failure: 0x143ffe: recovery action for dirty LRU page: Recovered [ 157.468449][ T8145] loop4: detected capacity change from 0 to 1024 [ 158.008966][ T8163] Injecting memory failure for pfn 0x145dfe at process virtual address 0x20ffe000 [ 158.539545][ T8163] Memory failure: 0x145dfe: Sending SIGBUS to syz.0.441:8163 due to hardware memory corruption [ 158.539649][ T8163] Memory failure: 0x145dfe: recovery action for dirty LRU page: Recovered [ 158.839876][ T8158] loop3: detected capacity change from 0 to 40427 [ 158.866567][ T8158] F2FS-fs (loop3): invalid crc value [ 158.972772][ T8171] Injecting memory failure for pfn 0x13fffe at process virtual address 0x20ffe000 [ 159.507660][ T8171] Memory failure: 0x13fffe: Sending SIGBUS to syz.0.442:8171 due to hardware memory corruption [ 159.507757][ T8171] Memory failure: 0x13fffe: recovery action for dirty LRU page: Recovered [ 159.638218][ T8159] loop4: detected capacity change from 0 to 32768 [ 159.638219][ T8176] loop1: detected capacity change from 0 to 1024 [ 159.657830][ T8159] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.439 (8159) [ 159.668713][ T8158] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 159.692726][ T8159] BTRFS info (device loop4): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 159.692823][ T8159] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 159.692861][ T8159] BTRFS info (device loop4): disk space caching is enabled [ 159.692885][ T8159] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 159.878359][ T8159] BTRFS info (device loop4): rebuilding free space tree [ 160.041323][ T7009] hfsplus: b-tree write err: -5, ino 4 [ 160.187815][ T8159] BTRFS info (device loop4): disabling free space tree [ 160.187900][ T8159] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 160.187947][ T8159] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 160.421688][ T8204] loop1: detected capacity change from 0 to 64 [ 160.431390][ T8159] BTRFS info (device loop4): balance: start -f -svrange=5..1,limit=1081919441731584,stripes=1831..0 [ 160.431796][ T8159] BTRFS info (device loop4): balance: ended with status: 0 [ 160.544049][ T6533] BTRFS info (device loop4): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 160.629410][ T8207] loop1: detected capacity change from 0 to 164 [ 160.690734][ T8207] Unable to read rock-ridge attributes [ 160.697541][ T8207] Unable to read rock-ridge attributes [ 160.722181][ T8207] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 160.751490][ T8211] loop3: detected capacity change from 0 to 1024 [ 160.988649][ T8213] loop4: detected capacity change from 0 to 40427 [ 160.993526][ T8213] F2FS-fs (loop4): build fault injection rate: 690 [ 160.993591][ T8213] F2FS-fs (loop4): Image doesn't support compression [ 160.993642][ T8213] F2FS-fs (loop4): Image doesn't support compression [ 160.993672][ T8213] F2FS-fs (loop4): build fault injection type: 0x4 [ 160.995138][ T8213] F2FS-fs (loop4): invalid crc value [ 161.035787][ T8213] F2FS-fs (loop4): Start checkpoint disabled! [ 161.047758][ T8213] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 161.433313][ T8231] ptrace attach of "./syz-executor exec"[6533] was attempted by ""[8231] [ 161.501716][ T8232] ptrace attach of "./syz-executor exec"[6530] was attempted by "\x22"[8232] [ 161.691139][ T8238] loop2: detected capacity change from 0 to 256 [ 161.840027][ T8242] loop2: detected capacity change from 0 to 64 [ 161.976587][ T8229] loop1: detected capacity change from 0 to 40427 [ 162.001244][ T8229] F2FS-fs (loop1): invalid crc value [ 162.025575][ T8247] loop3: detected capacity change from 0 to 256 [ 162.138819][ T8229] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 162.956734][ T8259] loop3: detected capacity change from 0 to 64 [ 163.112533][ T8253] loop2: detected capacity change from 0 to 32768 [ 163.116771][ T8253] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.466 (8253) [ 163.122110][ T8253] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 163.125360][ T8253] BTRFS info (device loop2): using sha256 (sha256-arm64) checksum algorithm [ 163.127968][ T8253] BTRFS info (device loop2): using free-space-tree [ 163.202281][ T8267] loop3: detected capacity change from 0 to 1764 [ 163.295297][ T8267] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 163.409628][ T6534] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 163.484660][ T8282] loop1: detected capacity change from 0 to 128 [ 163.761813][ T8291] 8021q: adding VLAN 0 to HW filter on device bond1 [ 163.840823][ T8297] Driver unsupported XDP return value 0 on prog (id 11) dev N/A, expect packet loss! [ 163.843789][ T6538] Bluetooth: hci2: command 0x0406 tx timeout [ 163.843864][ T6538] Bluetooth: hci3: command 0x0406 tx timeout [ 163.843900][ T6538] Bluetooth: hci4: command 0x0406 tx timeout [ 164.162202][ T8278] loop3: detected capacity change from 0 to 32768 [ 164.181001][ T8278] (syz.3.471,8278,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 164.181364][ T8278] (syz.3.471,8278,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 164.186051][ T8278] JBD2: Ignoring recovery information on journal [ 164.270729][ T8278] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 164.275038][ T8303] loop4: detected capacity change from 0 to 32768 [ 164.366736][ T8289] loop1: detected capacity change from 0 to 32768 [ 164.388887][ T8301] loop2: detected capacity change from 0 to 32768 [ 164.397897][ T8301] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.480 (8301) [ 164.405479][ T8301] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 164.405579][ T8301] BTRFS info (device loop2): using sha256 (sha256-arm64) checksum algorithm [ 164.405619][ T8301] BTRFS info (device loop2): using free-space-tree [ 164.456446][ T8303] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,erasure_code,no_splitbrain_check,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,nocow [ 164.456504][ T8303] allowing incompatible features above 0.0: (unknown version) [ 164.456532][ T8303] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 164.456584][ T8303] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0 [ 164.456673][ T8303] bcachefs (loop4): recovering from clean shutdown, journal seq 10 [ 164.456799][ T8303] bcachefs (loop4): Version upgrade required: [ 164.456799][ T8303] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 164.456799][ T8303] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 164.456799][ T8303] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 164.456984][ T8303] bcachefs (loop4): dropping and reconstructing all alloc info [ 164.509204][ T8303] bcachefs (loop4): accounting_read... [ 164.607220][ T6530] ocfs2: Unmounting device (7,3) on (node local) [ 164.630512][ T8289] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,fsck,recovery_pass_last=scan_for_btree_nodes,nojournal_transaction_names,reconstruct_alloc [ 164.639301][ T8289] allowing incompatible features above 0.0: (unknown version) [ 164.641692][ T8289] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 164.646172][ T8289] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0 [ 164.660713][ T8289] bcachefs (loop1): recovering from clean shutdown, journal seq 10 [ 164.663280][ T8303] done [ 164.663318][ T8303] bcachefs (loop4): alloc_read... done [ 164.663500][ T8303] bcachefs (loop4): snapshots_read... done [ 164.663972][ T8303] bcachefs (loop4): done starting filesystem [ 164.674223][ T8289] bcachefs (loop1): Version upgrade required: [ 164.674223][ T8289] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 164.674223][ T8289] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 164.674223][ T8289] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 164.999383][ T8289] bcachefs (loop1): dropping and reconstructing all alloc info [ 165.020547][ T8289] bcachefs (loop1): btree node read error at btree extents level 0/0 [ 165.020583][ T8289] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c6c25c03258c59c5 written 65535 min_key R POS_MIN durability: 1 ptr: 0:27:0 gen 0 [ 165.020603][ T8289] loop1 node offset 16/65535: btree node data missing: expected 65535 sectors, found 16 [ 165.020619][ T8289] flagging btree extents lost data [ 165.020634][ T8289] running recovery pass check_topology (2), currently at recovery_pass_empty (0) [ 165.020650][ T8289] running recovery pass check_topology (2), currently at recovery_pass_empty (0) [ 165.020666][ T8289] running recovery pass scan_for_btree_nodes (1), currently at recovery_pass_empty (0) [ 165.020682][ T8289] ret fsck_errors_not_fixed [ 165.020860][ T8289] bcachefs (loop1): error reading btree root btree=extents level=0: btree_node_read_error, fixing [ 165.199122][ T8289] bcachefs (loop1): btree node read error at btree dirents level 0/0 [ 165.199177][ T8289] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0 [ 165.199214][ T8289] loop1 node offset 8/24: btree node data missing: expected 24 sectors, found 8 [ 165.199231][ T8289] flagging btree dirents lost data [ 165.199246][ T8289] ret fsck_errors_not_fixed [ 165.200205][ T8289] bcachefs (loop1): error reading btree root btree=dirents level=0: btree_node_read_error, fixing [ 165.301674][ T8340] Injecting memory failure for pfn 0x1491fe at process virtual address 0x20ffe000 [ 165.330605][ T8340] Memory failure: 0x1491fe: Sending SIGBUS to syz.3.482:8340 due to hardware memory corruption [ 165.330959][ T8340] Memory failure: 0x1491fe: recovery action for dirty LRU page: Recovered [ 165.880637][ T8289] bcachefs (loop1): btree node read error at btree xattrs level 0/0 [ 165.880682][ T8289] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 2285c34bed0abe32 written 16 min_key POS_MIN durability: 1 ptr: 0:31:0 gen 0 [ 165.880712][ T8289] loop1 node offset 0/16: incorrect min_key: got 0:0:458752 should be POS_MIN [ 165.880729][ T8289] flagging btree xattrs lost data [ 165.880743][ T8289] ret btree_node_read_validate_error [ 165.880895][ T8289] bcachefs (loop1): error reading btree root btree=xattrs level=0: btree_node_read_error, fixing [ 165.962576][ T8289] bcachefs (loop1): Fixed errors, running fsck a second time to verify fs is clean [ 165.967020][ T8289] bcachefs (loop1): scanning for old btree nodes: min_version 0.24: unwritten_extents [ 165.967059][ T8289] bcachefs (loop1): going read-write [ 166.040840][ T6534] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 166.045243][ T6533] bcachefs (loop4): shutting down [ 166.145601][ T6533] bcachefs (loop4): shutdown complete [ 166.201676][ T8350] loop3: detected capacity change from 0 to 256 [ 166.220805][ T8350] exfat: Deprecated parameter 'utf8' [ 166.220877][ T8350] exfat: Deprecated parameter 'namecase' [ 166.265467][ T14] bcachefs (loop1): bucket 0:38 gen 0 data type btree sector count overflow: 0 + -256 > U32_MAX [ 166.265528][ T14] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0 [ 166.267396][ T14] bcachefs (loop1): bucket incorrectly unset in freespace btree [ 166.267437][ T14] u64s 5 type deleted 0:25:0 len 0 ver 0, , continuing [ 166.319901][ T8350] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xdf1ac56c, utbl_chksum : 0xe619d30d) [ 166.476467][ T14] bcachefs (loop1): bucket incorrectly unset in freespace btree [ 166.476526][ T14] u64s 5 type deleted 0:26:0 len 0 ver 0, , continuing [ 166.477583][ T14] bcachefs (loop1): bucket incorrectly unset in freespace btree [ 166.477615][ T14] u64s 5 type deleted 0:28:0 len 0 ver 0, , continuing [ 166.537938][ T14] bcachefs (loop1): bucket incorrectly unset in freespace btree [ 166.537981][ T14] u64s 5 type deleted 0:30:0 len 0 ver 0, , continuing [ 166.574362][ T14] bcachefs (loop1): bucket incorrectly unset in freespace btree [ 166.574652][ T14] u64s 5 type deleted 0:31:0 len 0 ver 0, , continuing [ 166.585793][ T14] bcachefs (loop1): bucket incorrectly unset in freespace btree [ 166.585834][ T14] u64s 5 type deleted 0:32:0 len 0 ver 0, , continuing [ 166.612891][ T14] bcachefs (loop1): bucket 0:35 gen 0 data type btree sector count overflow: 0 + -256 > U32_MAX [ 166.612936][ T14] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c0bef60d07ceb940 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0 [ 166.613905][ T14] bcachefs (loop1): bucket incorrectly unset in freespace btree [ 166.613921][ T14] u64s 5 type deleted 0:33:0 len 0 ver 0, , continuing [ 166.621045][ T8357] ptrace attach of "./syz-executor exec"[6527] was attempted by ""[8357] [ 166.621640][ T14] bcachefs (loop1): bucket incorrectly unset in freespace btree [ 166.621655][ T14] u64s 5 type deleted 0:34:0 len 0 ver 0, , continuing [ 166.636429][ T14] bcachefs (loop1): bucket incorrectly unset in freespace btree [ 166.636474][ T14] u64s 13 type alloc_v4 0:35:0 len 0 ver 0: [ 166.636500][ T14] gen 0 oldest_gen 0 data_type free [ 166.636510][ T14] journal_seq_nonempty 0 [ 166.636519][ T14] journal_seq_empty 0 [ 166.636528][ T14] need_discard 0 [ 166.636537][ T14] need_inc_gen 0 [ 166.636546][ T14] dirty_sectors 0 [ 166.636555][ T14] stripe_sectors 0 [ 166.636564][ T14] cached_sectors 0 [ 166.636573][ T14] stripe 0 [ 166.636582][ T14] stripe_redundancy 0 [ 166.636591][ T14] io_time[READ] 0 [ 166.636600][ T14] io_time[WRITE] 0 [ 166.636609][ T14] fragmentation 0 [ 166.636617][ T14] bp_start 8 [ 166.636626][ T14] , , continuing [ 166.638342][ T14] bcachefs (loop1): bucket incorrectly unset in freespace btree [ 166.638356][ T14] u64s 5 type deleted 0:36:0 len 0 ver 0, , continuing [ 166.638680][ T14] bcachefs (loop1): bucket incorrectly unset in freespace btree [ 166.638692][ T14] u64s 5 type deleted 0:37:0 len 0 ver 0, , continuing [ 166.638706][ T14] Ratelimiting new instances of previous error [ 166.650017][ T14] bcachefs (loop1): bucket 0:42 gen 0 data type btree sector count overflow: 0 + -256 > U32_MAX [ 166.650035][ T14] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 1db8f60c84bb244c written 8 min_key POS_MIN durability: 1 ptr: 0:42:0 gen 0 [ 166.705348][ T8289] bcachefs (loop1): scanning for old btree nodes done [ 166.705466][ T8289] bcachefs (loop1): done starting filesystem [ 166.731200][ T8365] loop2: detected capacity change from 0 to 512 [ 166.735326][ T8363] loop4: detected capacity change from 0 to 256 [ 166.739531][ T8365] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 166.743489][ T8365] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 166.766903][ T6536] bcachefs (loop1): shutting down [ 166.768858][ T6536] bcachefs (loop1): going read-only [ 166.771108][ T6536] bcachefs (loop1): finished waiting for writes to stop [ 166.814367][ T8365] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 166.814702][ T8365] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 166.814778][ T8365] System zones: 0-2, 18-18, 34-35 [ 166.828737][ T8363] FAT-fs (loop4): Directory bread(block 64) failed [ 166.828807][ T8363] FAT-fs (loop4): Directory bread(block 65) failed [ 166.828911][ T8363] FAT-fs (loop4): Directory bread(block 66) failed [ 166.828952][ T8363] FAT-fs (loop4): Directory bread(block 67) failed [ 166.829009][ T8363] FAT-fs (loop4): Directory bread(block 68) failed [ 166.829048][ T8363] FAT-fs (loop4): Directory bread(block 69) failed [ 166.829107][ T8363] FAT-fs (loop4): Directory bread(block 70) failed [ 166.829146][ T8363] FAT-fs (loop4): Directory bread(block 71) failed [ 166.829217][ T8363] FAT-fs (loop4): Directory bread(block 72) failed [ 166.829256][ T8363] FAT-fs (loop4): Directory bread(block 73) failed [ 166.838730][ T8365] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.855130][ T6536] bcachefs (loop1): flushing journal and stopping allocators, journal seq 12 [ 166.894093][ T8369] loop3: detected capacity change from 0 to 256 [ 166.911751][ T6536] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 12 [ 166.923391][ T6536] bcachefs (loop1): unclean shutdown complete, journal seq 13 [ 166.958478][ T8369] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 0, start 00000001) [ 166.960770][ T6536] bcachefs (loop1): done going read-only, filesystem not clean [ 167.018016][ T6534] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.146608][ T6536] bcachefs (loop1): shutdown complete [ 167.335094][ T8378] Injecting memory failure for pfn 0x1487fe at process virtual address 0x20ffe000 [ 167.884530][ T8378] Memory failure: 0x1487fe: Sending SIGBUS to syz.3.494:8378 due to hardware memory corruption [ 167.884623][ T8378] Memory failure: 0x1487fe: recovery action for dirty LRU page: Recovered [ 167.990827][ T8385] netlink: 'syz.3.497': attribute type 9 has an invalid length. [ 167.998176][ T8385] netlink: 'syz.3.497': attribute type 6 has an invalid length. [ 168.000716][ T8385] netlink: 'syz.3.497': attribute type 7 has an invalid length. [ 168.012785][ T8385] netlink: 'syz.3.497': attribute type 8 has an invalid length. [ 168.280217][ T8388] loop4: detected capacity change from 0 to 40427 [ 168.282803][ T8388] F2FS-fs (loop4): build fault injection rate: 690 [ 168.282871][ T8388] F2FS-fs (loop4): Image doesn't support compression [ 168.282913][ T8388] F2FS-fs (loop4): Image doesn't support compression [ 168.282943][ T8388] F2FS-fs (loop4): build fault injection type: 0x4 [ 168.371802][ T8391] Injecting memory failure for pfn 0x1479fe at process virtual address 0x20ffe000 [ 168.891392][ T8391] Memory failure: 0x1479fe: Sending SIGBUS to syz.3.499:8391 due to hardware memory corruption [ 168.891491][ T8391] Memory failure: 0x1479fe: recovery action for dirty LRU page: Recovered [ 168.911836][ T8388] F2FS-fs (loop4): invalid crc value [ 168.968889][ T8388] F2FS-fs (loop4): Start checkpoint disabled! [ 168.987166][ T8388] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 169.024338][ T8398] netlink: 'syz.3.500': attribute type 9 has an invalid length. [ 169.026696][ T8398] netlink: 'syz.3.500': attribute type 6 has an invalid length. [ 169.131784][ T8376] loop2: detected capacity change from 0 to 40427 [ 169.145385][ T8400] loop3: detected capacity change from 0 to 64 [ 169.197547][ T8401] ptrace attach of "./syz-executor exec"[6533] was attempted by "\x22"[8401] [ 169.202511][ T8376] F2FS-fs (loop2): invalid crc value [ 169.256909][ T8376] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 170.051612][ T8407] infiniband syz1: set active [ 170.052853][ T8407] infiniband syz1: added syz_tun [ 170.077414][ T8407] RDS/IB: syz1: added [ 170.077745][ T8407] smc: adding ib device syz1 with port count 1 [ 170.077832][ T8407] smc: ib device syz1 port 1 has pnetid [ 170.505384][ T8427] Injecting memory failure for pfn 0x121bfe at process virtual address 0x20ffe000 [ 170.526744][ T8427] Memory failure: 0x121bfe: Sending SIGBUS to syz.4.508:8427 due to hardware memory corruption [ 170.527133][ T8427] Memory failure: 0x121bfe: recovery action for dirty LRU page: Recovered [ 171.221631][ T8435] loop2: detected capacity change from 0 to 4096 [ 171.259593][ T8435] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 172.326307][ T8435] ntfs3(loop2): Failed to initialize $Extend/$Reparse. [ 172.541825][ T8444] Injecting memory failure for pfn 0x141dfe at process virtual address 0x20ffe000 [ 173.067891][ T8444] Memory failure: 0x141dfe: recovery action for dirty LRU page: Recovered [ 173.210172][ T8451] Injecting memory failure for pfn 0x1283fe at process virtual address 0x20ffe000 [ 173.229886][ T8451] Memory failure: 0x1283fe: Sending SIGBUS to syz.4.514:8451 due to hardware memory corruption [ 173.230206][ T8451] Memory failure: 0x1283fe: recovery action for dirty LRU page: Recovered [ 174.017511][ T8466] loop2: detected capacity change from 0 to 64 [ 174.127843][ T8463] loop4: detected capacity change from 0 to 40427 [ 174.168585][ T8463] F2FS-fs (loop4): build fault injection rate: 690 [ 174.168656][ T8463] F2FS-fs (loop4): Image doesn't support compression [ 174.168710][ T8463] F2FS-fs (loop4): Image doesn't support compression [ 174.168740][ T8463] F2FS-fs (loop4): build fault injection type: 0x4 [ 174.181137][ T8463] F2FS-fs (loop4): invalid crc value [ 174.207848][ T8463] F2FS-fs (loop4): Start checkpoint disabled! [ 174.225270][ T8463] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 174.685603][ T8474] Injecting memory failure for pfn 0x13dbfe at process virtual address 0x20ffe000 [ 175.206837][ T8474] Memory failure: 0x13dbfe: Sending SIGBUS to syz.0.519:8474 due to hardware memory corruption [ 175.207230][ T8474] Memory failure: 0x13dbfe: recovery action for dirty LRU page: Recovered [ 175.549127][ T8483] ptrace attach of "./syz-executor exec"[6533] was attempted by ""[8483] [ 175.599078][ T8485] loop2: detected capacity change from 0 to 64 [ 176.093715][ T8494] loop2: detected capacity change from 0 to 64 [ 176.171604][ T8497] ptrace attach of "./syz-executor exec"[6527] was attempted by "\x22"[8497] [ 176.370270][ T8481] loop3: detected capacity change from 0 to 32768 [ 176.377744][ T8481] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.523 (8481) [ 176.491837][ T8481] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 176.495310][ T8481] BTRFS info (device loop3): using sha256 (sha256-arm64) checksum algorithm [ 176.498346][ T8481] BTRFS info (device loop3): using free-space-tree [ 176.825174][ T6530] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 176.906025][ T8529] Injecting memory failure for pfn 0x140db6 at process virtual address 0x20ffa000 [ 176.909606][ T8529] Memory failure: 0x140db6: Sending SIGBUS to syz.2.529:8529 due to hardware memory corruption [ 176.909707][ T8529] Memory failure: 0x140db6: recovery action for dirty LRU page: Recovered [ 176.909841][ T8529] Injecting memory failure for pfn 0x140db5 at process virtual address 0x20ffb000 [ 176.909908][ T8529] Memory failure: 0x140db5: keeping poisoned page in swap cache [ 176.909949][ T8529] Memory failure: 0x140db5: Sending SIGBUS to syz.2.529:8529 due to hardware memory corruption [ 176.909994][ T8529] Memory failure: 0x140db5: recovery action for dirty swapcache page: Delayed [ 176.910027][ T8529] Injecting memory failure for pfn 0x140db4 at process virtual address 0x20ffc000 [ 176.910090][ T8529] Memory failure: 0x140db4: Sending SIGBUS to syz.2.529:8529 due to hardware memory corruption [ 176.910136][ T8529] Memory failure: 0x140db4: recovery action for dirty LRU page: Recovered [ 177.367646][ T8533] Injecting memory failure for pfn 0x1221fe at process virtual address 0x20ffe000 [ 177.886345][ T8533] Memory failure: 0x1221fe: Sending SIGBUS to syz.3.536:8533 due to hardware memory corruption [ 177.886448][ T8533] Memory failure: 0x1221fe: recovery action for dirty LRU page: Recovered [ 178.301571][ T8523] loop1: detected capacity change from 0 to 40427 [ 178.328480][ T8523] F2FS-fs (loop1): build fault injection rate: 690 [ 178.328551][ T8523] F2FS-fs (loop1): Image doesn't support compression [ 178.328605][ T8523] F2FS-fs (loop1): Image doesn't support compression [ 178.328636][ T8523] F2FS-fs (loop1): build fault injection type: 0x4 [ 178.329849][ T8523] F2FS-fs (loop1): invalid crc value [ 178.423490][ T8523] F2FS-fs (loop1): Start checkpoint disabled! [ 178.425460][ T8523] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 178.462874][ T8546] loop3: detected capacity change from 0 to 32768 [ 178.499853][ T8546] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 178.543117][ T8546] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 179.401624][ T6530] ocfs2: Unmounting device (7,3) on (node local) [ 179.656641][ T8556] loop3: detected capacity change from 0 to 40427 [ 179.658907][ T8556] F2FS-fs (loop3): build fault injection rate: 690 [ 179.658978][ T8556] F2FS-fs (loop3): Image doesn't support compression [ 179.659016][ T8556] F2FS-fs (loop3): Image doesn't support compression [ 179.659041][ T8556] F2FS-fs (loop3): build fault injection type: 0x4 [ 179.667096][ T8556] F2FS-fs (loop3): invalid crc value [ 179.687796][ T8556] F2FS-fs (loop3): Start checkpoint disabled! [ 179.690058][ T8556] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 179.937699][ T8575] ptrace attach of "./syz-executor exec"[6530] was attempted by "\x22"[8575] [ 180.258214][ T8576] Injecting memory failure for pfn 0x14b1fe at process virtual address 0x20ffe000 [ 180.960272][ T8574] loop2: detected capacity change from 0 to 40427 [ 180.962133][ T8574] F2FS-fs (loop2): build fault injection rate: 690 [ 180.962186][ T8574] F2FS-fs (loop2): Image doesn't support compression [ 180.962223][ T8574] F2FS-fs (loop2): Image doesn't support compression [ 180.962247][ T8574] F2FS-fs (loop2): build fault injection type: 0x4 [ 180.962246][ T8576] Memory failure: 0x14b1fe: recovery action for dirty LRU page: Recovered [ 180.965735][ T8574] F2FS-fs (loop2): invalid crc value [ 181.010048][ T8574] F2FS-fs (loop2): Start checkpoint disabled! [ 181.040765][ T8574] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 181.047336][ T8583] usb usb8: usbfs: process 8583 (syz.4.551) did not claim interface 0 before use [ 181.350120][ T8591] ptrace attach of "./syz-executor exec"[6534] was attempted by ""[8591] [ 181.941857][ T8593] loop3: detected capacity change from 0 to 32768 [ 181.944981][ T8593] XFS: attr2 mount option is deprecated. [ 181.995847][ T8593] XFS (loop3): DAX unsupported by block device. Turning off DAX. [ 181.999662][ T8593] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 182.067998][ T8593] XFS (loop3): Ending clean mount [ 182.091413][ T8593] XFS (loop3): Quotacheck needed: Please wait. [ 182.143105][ T8593] XFS (loop3): Quotacheck: Done. [ 182.339539][ T6530] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 182.520999][ T8619] Injecting memory failure for pfn 0x13f3fe at process virtual address 0x20ffe000 [ 182.540994][ T8619] Memory failure: 0x13f3fe: Sending SIGBUS to syz.0.560:8619 due to hardware memory corruption [ 182.541345][ T8619] Memory failure: 0x13f3fe: recovery action for dirty LRU page: Recovered [ 183.130588][ T8605] loop4: detected capacity change from 0 to 32768 [ 183.194143][ T8605] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 183.258399][ T8605] (syz.4.558,8605,1):ocfs2_find_entry:1075 ERROR: status = -117 [ 183.262540][ T8605] (syz.4.558,8605,1):ocfs2_find_entry:1075 ERROR: status = -117 [ 183.265711][ T8605] (syz.4.558,8605,1):ocfs2_symlink:2077 ERROR: status = -117 [ 183.360312][ T6533] ocfs2: Unmounting device (7,4) on (node local) [ 183.954826][ T8644] Injecting memory failure for pfn 0x13c5fe at process virtual address 0x20ffe000 [ 184.498932][ T8644] Memory failure: 0x13c5fe: Sending SIGBUS to syz.1.567:8644 due to hardware memory corruption [ 184.499041][ T8644] Memory failure: 0x13c5fe: recovery action for dirty LRU page: Recovered [ 184.558882][ T8625] loop3: detected capacity change from 0 to 32768 [ 184.606328][ T8625] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 184.630555][ T8655] netlink: 'syz.1.572': attribute type 10 has an invalid length. [ 184.642540][ T8655] team0: Device ipvlan1 failed to register rx_handler [ 184.660106][ T8648] loop2: detected capacity change from 0 to 4096 [ 184.719255][ T8625] XFS (loop3): Ending clean mount [ 184.815432][ T6530] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 184.826620][ T8648] ntfs3(loop2): ino=1a, mi_enum_attr [ 184.828263][ T8648] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 185.051819][ T8666] Injecting memory failure for pfn 0x1477fe at process virtual address 0x20ffe000 [ 185.604329][ T8666] Memory failure: 0x1477fe: recovery action for dirty LRU page: Recovered [ 185.616842][ T8671] loop1: detected capacity change from 0 to 4096 [ 185.802442][ T8671] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 185.844370][ T8671] ntfs3(loop1): Failed to load $Extend (-22). [ 185.844434][ T8671] ntfs3(loop1): Failed to initialize $Extend. [ 185.942874][ T8679] ptrace attach of "./syz-executor exec"[6527] was attempted by ""[8679] [ 185.977367][ T8683] loop4: detected capacity change from 0 to 512 [ 186.014210][ T8683] EXT4-fs error (device loop4): ext4_expand_extra_isize_ea:2798: inode #11: comm syz.4.583: corrupted xattr block 95: invalid header [ 186.020572][ T8683] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2848: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 186.021051][ T8683] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.583: bg 0: block 7: invalid block bitmap [ 186.031133][ T8683] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 186.035128][ T8683] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2962: inode #11: comm syz.4.583: corrupted xattr block 95: invalid header [ 186.058416][ T8683] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -117) [ 186.061223][ T8683] EXT4-fs (loop4): 1 orphan inode deleted [ 186.064121][ T8683] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 186.102868][ T6529] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 186.159078][ T6533] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.244141][ T8693] loop4: detected capacity change from 0 to 1024 [ 186.246579][ T8693] EXT4-fs: Ignoring removed bh option [ 186.248580][ T8693] EXT4-fs: inline encryption not supported [ 186.359662][ T8696] loop2: detected capacity change from 0 to 512 [ 186.377867][ T8693] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 186.390138][ T8696] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 186.390383][ T8696] EXT4-fs (loop2): orphan cleanup on readonly fs [ 186.402424][ T8696] Quota error (device loop2): find_block_dqentry: Quota for id 0 referenced but not present [ 186.402600][ T8696] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 186.411804][ T8696] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.587: Failed to acquire dquot type 1 [ 186.415716][ T8696] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.587: bg 0: block 40: padding at end of block bitmap is not set [ 186.416593][ T8696] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 186.417235][ T8696] EXT4-fs (loop2): 1 truncate cleaned up [ 186.518980][ T8703] Injecting memory failure for pfn 0x13d5fe at process virtual address 0x20ffe000 [ 187.049832][ T8696] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 187.059179][ T8703] Memory failure: 0x13d5fe: Sending SIGBUS to syz.1.584:8703 due to hardware memory corruption [ 187.059299][ T8703] Memory failure: 0x13d5fe: recovery action for dirty LRU page: Recovered [ 187.127802][ T8693] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 2: comm syz.4.585: lblock 2 mapped to illegal pblock 2 (length 1) [ 187.149459][ T8709] netlink: 60 bytes leftover after parsing attributes in process `syz.3.588'. [ 187.153202][ T8702] netlink: 60 bytes leftover after parsing attributes in process `syz.3.588'. [ 187.163885][ T8693] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 187.163963][ T8693] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 48: comm syz.4.585: lblock 0 mapped to illegal pblock 48 (length 1) [ 187.167766][ T8693] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 187.167903][ T8693] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.585: Failed to acquire dquot type 0 [ 187.168208][ T8693] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 187.175016][ T8693] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.585: mark_inode_dirty error [ 187.175965][ T8693] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 187.176037][ T8693] EXT4-fs (loop4): 1 orphan inode deleted [ 187.176912][ T8693] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.192784][ T8696] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #16: comm syz.2.587: corrupted xattr block 31: invalid header [ 187.206615][ T613] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:10: lblock 1 mapped to illegal pblock 1 (length 1) [ 187.211679][ T613] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 187.211765][ T613] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:10: Failed to release dquot type 0 [ 187.218503][ T8696] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #16: comm syz.2.587: corrupted xattr block 31: invalid header [ 187.220019][ T8696] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #16: comm syz.2.587: corrupted xattr block 31: invalid header [ 187.221270][ T8696] EXT4-fs error (device loop2): ext4_get_link:106: inode #16: comm syz.2.587: bad symlink. [ 187.255372][ T8693] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 1: comm syz.4.585: lblock 1 mapped to illegal pblock 1 (length 1) [ 187.264603][ T8693] Quota error (device loop4): find_next_id: Can't read quota tree block 1 [ 187.283933][ T6534] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.352343][ T6533] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.352549][ T6533] EXT4-fs error (device loop4): __ext4_get_inode_loc:4792: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 187.359889][ T6533] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 187.360098][ T6533] EXT4-fs error (device loop4): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error [ 187.367805][ T2408] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.367855][ T2408] ieee802154 phy1 wpan1: encryption failed: -22 [ 187.390204][ T8716] loop1: detected capacity change from 0 to 512 [ 187.424603][ T8716] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 187.455641][ T8716] EXT4-fs (loop1): 1 truncate cleaned up [ 187.461976][ T8716] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.487424][ T8722] loop3: detected capacity change from 0 to 1024 [ 187.538684][ T6536] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.578757][ T8722] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 187.678943][ T6530] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.766096][ T8734] loop4: detected capacity change from 0 to 256 [ 187.837328][ T8734] FAT-fs (loop4): Directory bread(block 64) failed [ 187.837410][ T8734] FAT-fs (loop4): Directory bread(block 65) failed [ 187.837469][ T8734] FAT-fs (loop4): Directory bread(block 66) failed [ 187.837501][ T8734] FAT-fs (loop4): Directory bread(block 67) failed [ 187.837550][ T8734] FAT-fs (loop4): Directory bread(block 68) failed [ 187.837582][ T8734] FAT-fs (loop4): Directory bread(block 69) failed [ 187.837629][ T8734] FAT-fs (loop4): Directory bread(block 70) failed [ 187.837660][ T8734] FAT-fs (loop4): Directory bread(block 71) failed [ 187.837722][ T8734] FAT-fs (loop4): Directory bread(block 72) failed [ 187.837754][ T8734] FAT-fs (loop4): Directory bread(block 73) failed [ 189.316798][ T8753] Injecting memory failure for pfn 0x14affe at process virtual address 0x20ffe000 [ 189.327552][ T8753] Memory failure: 0x14affe: Sending SIGBUS to syz.0.606:8753 due to hardware memory corruption [ 189.327630][ T8753] Memory failure: 0x14affe: recovery action for dirty LRU page: Recovered [ 189.651498][ T8757] loop2: detected capacity change from 0 to 4096 [ 189.684656][ T8732] loop1: detected capacity change from 0 to 40427 [ 189.699255][ T8732] F2FS-fs (loop1): invalid crc value [ 189.889599][ T8732] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 190.002828][ T8770] ptrace attach of "./syz-executor exec"[6533] was attempted by ""[8770] [ 191.211370][ T8782] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 192.336635][ T8803] loop1: detected capacity change from 0 to 256 [ 192.337231][ T8803] exfat: Deprecated parameter 'utf8' [ 192.337301][ T8803] exfat: Deprecated parameter 'namecase' [ 192.337368][ T8803] exfat: Deprecated parameter 'namecase' [ 192.337402][ T8803] exfat: Deprecated parameter 'utf8' [ 192.362294][ T8798] loop3: detected capacity change from 0 to 256 [ 192.450522][ T8804] loop4: detected capacity change from 0 to 4096 [ 192.468007][ T8803] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d) [ 192.687344][ T8806] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 193.348539][ T8790] loop2: detected capacity change from 0 to 32768 [ 193.361727][ T8790] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.620 (8790) [ 193.462572][ T8815] Injecting memory failure for pfn 0x13c3fe at process virtual address 0x20ffe000 [ 194.004970][ T8815] Memory failure: 0x13c3fe: Sending SIGBUS to syz.0.626:8815 due to hardware memory corruption [ 194.005078][ T8815] Memory failure: 0x13c3fe: recovery action for dirty LRU page: Recovered [ 194.127244][ T8790] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 194.127349][ T8790] BTRFS info (device loop2): using sha256 (sha256-arm64) checksum algorithm [ 194.127410][ T8790] BTRFS info (device loop2): using free-space-tree [ 194.431813][ T6534] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 194.524242][ T8845] Injecting memory failure for pfn 0x14c5fe at process virtual address 0x20ffe000 [ 195.046014][ T8845] Memory failure: 0x14c5fe: Sending SIGBUS to syz.4.633:8845 due to hardware memory corruption [ 195.046116][ T8845] Memory failure: 0x14c5fe: recovery action for dirty LRU page: Recovered [ 195.260852][ T8814] loop1: detected capacity change from 0 to 40427 [ 195.484289][ T8861] random: crng reseeded on system resumption [ 195.559786][ T8861] Restarting kernel threads ... [ 195.560472][ T8861] Done restarting kernel threads. [ 196.018605][ T8814] F2FS-fs (loop1): invalid crc value [ 196.021023][ T8860] loop4: detected capacity change from 0 to 256 [ 196.021616][ T8860] exfat: Deprecated parameter 'namecase' [ 196.136200][ T8860] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d) [ 196.150188][ T8868] loop3: detected capacity change from 0 to 512 [ 196.154148][ T8868] EXT4-fs (loop3): orphan cleanup on readonly fs [ 196.156151][ T8814] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 196.158354][ T8868] EXT4-fs error (device loop3): ext4_orphan_get:1419: comm syz.3.640: bad orphan inode 13 [ 196.184401][ T8868] ext4_test_bit(bit=12, block=18) = 1 [ 196.184464][ T8868] is_bad_inode(inode)=0 [ 196.184499][ T8868] NEXT_ORPHAN(inode)=2130706432 [ 196.184523][ T8868] max_ino=32 [ 196.184546][ T8868] i_nlink=1 [ 196.186256][ T8868] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 196.533751][ T8868] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 196.973655][ T8868] EXT4-fs warning (device loop3): ext4_multi_mount_protect:332: MMP startup interrupted, failing mount [ 196.973655][ T8868] [ 197.038531][ T8880] loop4: detected capacity change from 0 to 2048 [ 197.080346][ T6530] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.103228][ T8880] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.148390][ T6533] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.356258][ T8857] loop2: detected capacity change from 0 to 32768 [ 197.381872][ T8888] loop4: detected capacity change from 0 to 40427 [ 197.601307][ T8888] F2FS-fs (loop4): build fault injection rate: 690 [ 197.601371][ T8888] F2FS-fs (loop4): Image doesn't support compression [ 197.601413][ T8888] F2FS-fs (loop4): Image doesn't support compression [ 197.601444][ T8888] F2FS-fs (loop4): build fault injection type: 0x4 [ 197.616312][ T8888] F2FS-fs (loop4): invalid crc value [ 198.043981][ T8888] F2FS-fs (loop4): Start checkpoint disabled! [ 198.063039][ T8857] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 198.084141][ T8888] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 198.290325][ T8857] XFS (loop2): Ending clean mount [ 198.357784][ T8905] ptrace attach of "./syz-executor exec"[6533] was attempted by "\x22"[8905] [ 198.681707][ T8906] Injecting memory failure for pfn 0x1443fe at process virtual address 0x20ffe000 [ 199.203644][ T8906] Memory failure: 0x1443fe: recovery action for dirty LRU page: Recovered [ 199.268381][ T8857] XFS (loop2): Quotacheck needed: Please wait. [ 199.325836][ T8911] trusted_key: encrypted_key: master key parameter 'trusted:' is invalid [ 199.351399][ T8857] XFS (loop2): Quotacheck: Done. [ 199.453145][ T6534] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 199.578839][ T8921] loop4: detected capacity change from 0 to 8 [ 200.009587][ T8937] Injecting memory failure for pfn 0x13c158 at process virtual address 0x20ffa000 [ 200.048683][ T8937] Memory failure: 0x13c158: Sending SIGBUS to syz.0.659:8937 due to hardware memory corruption [ 200.049071][ T8937] Memory failure: 0x13c158: recovery action for dirty LRU page: Recovered [ 200.050233][ T8937] Injecting memory failure for pfn 0x14da63 at process virtual address 0x20ffb000 [ 200.051029][ T8937] Memory failure: 0x14da63: keeping poisoned page in swap cache [ 200.051226][ T8937] Memory failure: 0x14da63: Sending SIGBUS to syz.0.659:8937 due to hardware memory corruption [ 200.051505][ T8937] Memory failure: 0x14da63: recovery action for dirty swapcache page: Delayed [ 200.051631][ T8937] Injecting memory failure for pfn 0x13c156 at process virtual address 0x20ffc000 [ 200.052387][ T8937] Memory failure: 0x13c156: Sending SIGBUS to syz.0.659:8937 due to hardware memory corruption [ 200.052764][ T8937] Memory failure: 0x13c156: recovery action for dirty LRU page: Recovered [ 200.784663][ T8919] loop3: detected capacity change from 0 to 40427 [ 200.860815][ T8929] loop2: detected capacity change from 0 to 32768 [ 200.867318][ T8919] F2FS-fs (loop3): invalid crc value [ 200.872089][ T8942] loop4: detected capacity change from 0 to 256 [ 200.876788][ T8929] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.657 (8929) [ 200.884432][ T8942] exfat: Deprecated parameter 'utf8' [ 200.906459][ T8929] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 200.906564][ T8929] BTRFS info (device loop2): using sha256 (sha256-arm64) checksum algorithm [ 200.906606][ T8929] BTRFS info (device loop2): using free-space-tree [ 200.995901][ T8949] Injecting memory failure for pfn 0x1277fe at process virtual address 0x20ffe000 [ 201.132250][ T8919] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 201.528696][ T8949] Memory failure: 0x1277fe: Sending SIGBUS to syz.0.661:8949 due to hardware memory corruption [ 201.528806][ T8949] Memory failure: 0x1277fe: recovery action for dirty LRU page: Recovered [ 201.607750][ T8942] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011ded, chksum : 0x9858084d, utbl_chksum : 0xe619d30d) [ 201.637993][ T8926] loop1: detected capacity change from 0 to 40427 [ 201.657402][ T8926] F2FS-fs (loop1): invalid crc value [ 201.764043][ T8926] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 202.144975][ T6534] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 202.273290][ T6536] syz-executor: attempt to access beyond end of device [ 202.273290][ T6536] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 202.273385][ T6536] CPU: 0 UID: 0 PID: 6536 Comm: syz-executor Not tainted 6.16.0-rc5-syzkaller-gec4801305969 #0 PREEMPT [ 202.273402][ T6536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 202.273409][ T6536] Call trace: [ 202.273414][ T6536] show_stack+0x2c/0x3c (C) [ 202.273431][ T6536] __dump_stack+0x30/0x40 [ 202.273445][ T6536] dump_stack_lvl+0xd8/0x12c [ 202.273459][ T6536] dump_stack+0x1c/0x28 [ 202.273472][ T6536] f2fs_handle_critical_error+0x34c/0x4b8 [ 202.273486][ T6536] f2fs_stop_checkpoint+0x5c/0x70 [ 202.273500][ T6536] f2fs_write_end_io+0x58c/0x818 [ 202.273512][ T6536] bio_endio+0x804/0x840 [ 202.273524][ T6536] submit_bio_noacct+0x158/0x176c [ 202.273538][ T6536] submit_bio+0x354/0x4d4 [ 202.273550][ T6536] f2fs_submit_write_bio+0x13c/0x324 [ 202.273562][ T6536] __submit_merged_bio+0x254/0x704 [ 202.273574][ T6536] __submit_merged_write_cond+0x23c/0x4ac [ 202.273586][ T6536] f2fs_write_data_pages+0x1d28/0x2634 [ 202.273598][ T6536] do_writepages+0x270/0x468 [ 202.273614][ T6536] filemap_fdatawrite+0x144/0x1e8 [ 202.273625][ T6536] f2fs_sync_dirty_inodes+0x2b8/0x788 [ 202.273639][ T6536] f2fs_write_checkpoint+0x684/0x1694 [ 202.273653][ T6536] kill_f2fs_super+0x21c/0x584 [ 202.273665][ T6536] deactivate_locked_super+0xc4/0x12c [ 202.273677][ T6536] deactivate_super+0xe0/0x100 [ 202.273688][ T6536] cleanup_mnt+0x31c/0x3ac [ 202.273700][ T6536] __cleanup_mnt+0x20/0x30 [ 202.273711][ T6536] task_work_run+0x1dc/0x260 [ 202.273723][ T6536] do_notify_resume+0x174/0x1f4 [ 202.273736][ T6536] el0_svc+0xb8/0x180 [ 202.273748][ T6536] el0t_64_sync_handler+0x84/0x12c [ 202.273759][ T6536] el0t_64_sync+0x198/0x19c [ 202.273944][ T6536] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 202.360780][ T8979] loop4: detected capacity change from 0 to 65 [ 202.370747][ T8979] BFS-fs: bfs_fill_super(): NOTE: filesystem loop4 was created with 512 inodes, the real maximum is 511, mounting anyway [ 202.820985][ T8988] Injecting memory failure for pfn 0x20aeba at process virtual address 0x20ffa000 [ 203.358803][ T8988] Memory failure: 0x20aeba: recovery action for reserved kernel page: Ignored [ 203.496552][ T8996] loop4: detected capacity change from 0 to 1024 [ 203.737415][ T9004] loop1: detected capacity change from 0 to 512 [ 203.737966][ T9004] EXT4-fs: Ignoring removed mblk_io_submit option [ 203.860044][ T9008] Injecting memory failure for pfn 0x1475fe at process virtual address 0x20ffe000 [ 204.388657][ T9008] Memory failure: 0x1475fe: Sending SIGBUS to syz.3.675:9008 due to hardware memory corruption [ 204.388769][ T9008] Memory failure: 0x1475fe: recovery action for dirty LRU page: Recovered [ 204.492079][ T9004] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.561766][ T9017] loop3: detected capacity change from 0 to 256 [ 204.565560][ T9017] exfat: Deprecated parameter 'utf8' [ 204.567518][ T9017] exfat: Deprecated parameter 'namecase' [ 204.609376][ T9017] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 204.646968][ T9021] loop2: detected capacity change from 0 to 8 [ 204.647568][ T9021] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 204.681395][ T6779] udevd[6779]: incorrect cramfs checksum on /dev/loop2 [ 204.819636][ T6536] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.912127][ T9027] Injecting memory failure for pfn 0x20aeba at process virtual address 0x20ffa000 [ 204.912319][ T9027] Memory failure: 0x20aeba: already hardware poisoned [ 204.913285][ T9027] Memory failure: 0x20aeba: Sending SIGBUS to syz.4.683:9027 due to hardware memory corruption [ 204.913659][ T9027] Memory failure: 0x20aeba: recovery action for already poisoned: Failed [ 205.504520][ T9029] loop1: detected capacity change from 0 to 8 [ 205.567855][ T9029] SQUASHFS error: Unable to read directory block [1d0:62] [ 205.617246][ T9037] loop4: detected capacity change from 0 to 128 [ 205.629647][ T9034] loop3: detected capacity change from 0 to 2048 [ 205.694103][ T9037] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 205.720835][ T9041] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 205.932330][ T6533] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 206.053002][ T9046] Injecting memory failure for pfn 0x143bfe at process virtual address 0x20ffe000 [ 206.073344][ T9046] Memory failure: 0x143bfe: Sending SIGBUS to syz.2.690:9046 due to hardware memory corruption [ 206.073701][ T9046] Memory failure: 0x143bfe: recovery action for dirty LRU page: Recovered [ 206.888637][ T9040] loop1: detected capacity change from 0 to 32768 [ 206.973173][ T9063] Injecting memory failure for pfn 0x147bfe at process virtual address 0x20ffe000 [ 207.515716][ T9063] Memory failure: 0x147bfe: Sending SIGBUS to syz.2.694:9063 due to hardware memory corruption [ 207.515818][ T9063] Memory failure: 0x147bfe: recovery action for dirty LRU page: Recovered [ 207.655893][ T101] blkno = 8ed2c, nblocks = 1 [ 207.655962][ T101] ERROR: (device loop1): dbFree: block to be freed is outside the map [ 207.655962][ T101] [ 207.660393][ T101] ERROR: (device loop1): remounting filesystem as read-only [ 207.663226][ T9040] ERROR: (device loop1): dbAlloc: the hint is outside the map [ 207.663226][ T9040] [ 207.663519][ T9071] pimreg: entered allmulticast mode [ 207.716768][ T100] blkno = 8ed2c, nblocks = 1 [ 207.716828][ T100] ERROR: (device loop1): dbUpdatePMap: blocks are outside the map [ 207.716828][ T100] [ 207.840512][ T9053] loop4: detected capacity change from 0 to 32768 [ 207.936212][ T9062] loop3: detected capacity change from 0 to 32768 [ 207.982939][ T9062] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 207.999811][ T9053] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,degraded=yes,no_splitbrain_check,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,nocow [ 208.060830][ T9053] allowing incompatible features above 0.0: (unknown version) [ 208.066967][ T9053] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 208.071652][ T9053] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0 [ 208.074569][ T9053] bcachefs (loop4): recovering from clean shutdown, journal seq 10 [ 208.077515][ T9053] bcachefs (loop4): Version upgrade required: [ 208.077515][ T9053] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 208.077515][ T9053] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 208.077515][ T9053] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 208.101494][ T9053] bcachefs (loop4): dropping and reconstructing all alloc info [ 208.107876][ T9062] [ 208.108585][ T9062] ====================================================== [ 208.110517][ T9062] WARNING: possible circular locking dependency detected [ 208.112514][ T9062] 6.16.0-rc5-syzkaller-gec4801305969 #0 Not tainted [ 208.113019][ T9053] bcachefs (loop4): btree node read error at btree extents level 0/0 [ 208.113053][ T9053] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c6c25c03258c59c5 written 1 min_key POS_MIN durability: 1 ptr: 0:27:0 gen 0 [ 208.113076][ T9053] loop4 node offset 0/1 bset u64s 0: bset past end of btree node (offset 0 len 8 but written 1) [ 208.113091][ T9053] flagging btree extents lost data [ 208.113103][ T9053] running recovery pass check_topology (2), currently at recovery_pass_empty (0) [ 208.113116][ T9053] running recovery pass check_topology (2), currently at recovery_pass_empty (0) [ 208.113130][ T9053] running recovery pass scan_for_btree_nodes (1), currently at recovery_pass_empty (0) [ 208.113143][ T9053] ret fsck_errors_not_fixed [ 208.113306][ T9053] bcachefs (loop4): error reading btree root btree=extents level=0: btree_node_read_error, fixing [ 208.136916][ T9062] ------------------------------------------------------ [ 208.138880][ T9062] syz.3.695/9062 is trying to acquire lock: [ 208.140529][ T9062] ffff0000f8cece38 (&oi->ip_xattr_sem){+.+.}-{4:4}, at: ocfs2_xattr_set_handle+0x2a8/0x5e4 [ 208.143073][ T9053] bcachefs (loop4): invalid bkey in btree_node btree=inodes level=0: u64s 18 type inode_v3 0:4100:U32_MAX len 0 ver 0: (unpack error) [ 208.143105][ T9053] invalid variable length fields, deleting [ 208.145994][ T9053] bcachefs (loop4): check_topology... [ 208.146061][ T9053] bcachefs (loop4): btree root extents unreadable, must recover from scan [ 208.146121][ T9053] bcachefs (loop4): running recovery pass scan_for_btree_nodes (1), currently at check_topology (2) - rewinding [ 208.146172][ T9053] bcachefs (loop4): bch2_check_root(): error restart_recovery [ 208.146199][ T9053] bcachefs (loop4): scan_for_btree_nodes... [ 208.158232][ T9062] [ 208.158232][ T9062] but task is already holding lock: [ 208.161924][ T9062] ffff0000f7ee2950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xe4c/0x10dc [ 208.164528][ T9062] [ 208.164528][ T9062] which lock already depends on the new lock. [ 208.164528][ T9062] [ 208.167444][ T9062] [ 208.167444][ T9062] the existing dependency chain (in reverse order) is: [ 208.169979][ T9062] [ 208.169979][ T9062] -> #4 (jbd2_handle){++++}-{0:0}: [ 208.172093][ T9062] start_this_handle+0xe74/0x10dc [ 208.173668][ T9062] jbd2__journal_start+0x288/0x51c [ 208.175298][ T9062] jbd2_journal_start+0x3c/0x4c [ 208.176788][ T9062] ocfs2_start_trans+0x368/0x6b0 [ 208.178373][ T9062] ocfs2_modify_bh+0xe4/0x43c [ 208.179848][ T9062] ocfs2_local_read_info+0x104c/0x1364 [ 208.181554][ T9062] dquot_load_quota_sb+0x6bc/0xa90 [ 208.183116][ T9062] dquot_load_quota_inode+0x274/0x4e4 [ 208.185045][ T9062] ocfs2_enable_quotas+0x17c/0x3b4 [ 208.186863][ T9062] ocfs2_fill_super+0x4018/0x5340 [ 208.188511][ T9062] get_tree_bdev_flags+0x360/0x414 [ 208.190125][ T9062] get_tree_bdev+0x2c/0x3c [ 208.191469][ T9062] ocfs2_get_tree+0x28/0x38 [ 208.192885][ T9062] vfs_get_tree+0x90/0x28c [ 208.194361][ T9062] do_new_mount+0x228/0x814 [ 208.195730][ T9062] path_mount+0x5b4/0xde0 [ 208.197115][ T9062] __arm64_sys_mount+0x3e8/0x468 [ 208.198627][ T9062] invoke_syscall+0x98/0x2b8 [ 208.200023][ T9062] el0_svc_common+0x130/0x23c [ 208.201449][ T9062] do_el0_svc+0x48/0x58 [ 208.202722][ T9062] el0_svc+0x58/0x180 [ 208.204033][ T9062] el0t_64_sync_handler+0x84/0x12c [ 208.205631][ T9062] el0t_64_sync+0x198/0x19c [ 208.207026][ T9062] [ 208.207026][ T9062] -> #3 (&journal->j_trans_barrier){.+.+}-{4:4}: [ 208.209467][ T9062] down_read+0x58/0x2f8 [ 208.210753][ T9062] ocfs2_start_trans+0x35c/0x6b0 [ 208.212305][ T9062] ocfs2_modify_bh+0xe4/0x43c [ 208.213773][ T9062] ocfs2_local_read_info+0x104c/0x1364 [ 208.215493][ T9062] dquot_load_quota_sb+0x6bc/0xa90 [ 208.217125][ T9062] dquot_load_quota_inode+0x274/0x4e4 [ 208.218786][ T9062] ocfs2_enable_quotas+0x17c/0x3b4 [ 208.220440][ T9062] ocfs2_fill_super+0x4018/0x5340 [ 208.222073][ T9062] get_tree_bdev_flags+0x360/0x414 [ 208.223717][ T9062] get_tree_bdev+0x2c/0x3c [ 208.225124][ T9062] ocfs2_get_tree+0x28/0x38 [ 208.226520][ T9062] vfs_get_tree+0x90/0x28c [ 208.227856][ T9062] do_new_mount+0x228/0x814 [ 208.229379][ T9062] path_mount+0x5b4/0xde0 [ 208.230784][ T9062] __arm64_sys_mount+0x3e8/0x468 [ 208.232385][ T9062] invoke_syscall+0x98/0x2b8 [ 208.233782][ T9062] el0_svc_common+0x130/0x23c [ 208.235229][ T9062] do_el0_svc+0x48/0x58 [ 208.236558][ T9062] el0_svc+0x58/0x180 [ 208.237809][ T9062] el0t_64_sync_handler+0x84/0x12c [ 208.239424][ T9062] el0t_64_sync+0x198/0x19c [ 208.240837][ T9062] [ 208.240837][ T9062] -> #2 (sb_internal#3){.+.+}-{0:0}: [ 208.243026][ T9062] ocfs2_start_trans+0x1f4/0x6b0 [ 208.244535][ T9062] ocfs2_xattr_set+0xac4/0xe9c [ 208.246011][ T9062] ocfs2_xattr_trusted_set+0x4c/0x64 [ 208.247697][ T9062] __vfs_setxattr+0x3d8/0x400 [ 208.249297][ T9062] __vfs_setxattr_noperm+0x120/0x5c4 [ 208.251013][ T9062] __vfs_setxattr_locked+0x1ec/0x218 [ 208.252738][ T9062] vfs_setxattr+0x158/0x2ac [ 208.254205][ T9062] filename_setxattr+0x20c/0x4f8 [ 208.255813][ T9062] path_setxattrat+0x2e8/0x320 [ 208.257389][ T9062] __arm64_sys_setxattr+0xc0/0xdc [ 208.259056][ T9062] invoke_syscall+0x98/0x2b8 [ 208.260556][ T9062] el0_svc_common+0x130/0x23c [ 208.262051][ T9062] do_el0_svc+0x48/0x58 [ 208.263461][ T9062] el0_svc+0x58/0x180 [ 208.264673][ T9062] el0t_64_sync_handler+0x84/0x12c [ 208.266276][ T9062] el0t_64_sync+0x198/0x19c [ 208.267697][ T9062] [ 208.267697][ T9062] -> #1 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#4){+.+.}-{4:4}: [ 208.270732][ T9062] down_write+0x50/0xc0 [ 208.272058][ T9062] ocfs2_reserve_suballoc_bits+0x12c/0x3b9c [ 208.273874][ T9062] ocfs2_reserve_new_metadata_blocks+0x368/0x810 [ 208.275820][ T9062] ocfs2_init_xattr_set_ctxt+0x318/0x774 [ 208.277574][ T9062] ocfs2_xattr_set+0x920/0xe9c [ 208.279062][ T9062] ocfs2_xattr_trusted_set+0x4c/0x64 [ 208.280745][ T9062] __vfs_setxattr+0x3d8/0x400 [ 208.282195][ T9062] __vfs_setxattr_noperm+0x120/0x5c4 [ 208.283847][ T9062] __vfs_setxattr_locked+0x1ec/0x218 [ 208.285454][ T9062] vfs_setxattr+0x158/0x2ac [ 208.286838][ T9062] filename_setxattr+0x20c/0x4f8 [ 208.288402][ T9062] path_setxattrat+0x2e8/0x320 [ 208.289877][ T9062] __arm64_sys_setxattr+0xc0/0xdc [ 208.291482][ T9062] invoke_syscall+0x98/0x2b8 [ 208.292939][ T9062] el0_svc_common+0x130/0x23c [ 208.294385][ T9062] do_el0_svc+0x48/0x58 [ 208.295716][ T9062] el0_svc+0x58/0x180 [ 208.297007][ T9062] el0t_64_sync_handler+0x84/0x12c [ 208.298568][ T9062] el0t_64_sync+0x198/0x19c [ 208.299971][ T9062] [ 208.299971][ T9062] -> #0 (&oi->ip_xattr_sem){+.+.}-{4:4}: [ 208.302228][ T9062] __lock_acquire+0x1774/0x30a4 [ 208.303745][ T9062] lock_acquire+0x14c/0x2e0 [ 208.305177][ T9062] down_write+0x50/0xc0 [ 208.306501][ T9062] ocfs2_xattr_set_handle+0x2a8/0x5e4 [ 208.308165][ T9062] ocfs2_init_security_set+0xb4/0xd8 [ 208.309839][ T9062] ocfs2_mknod+0x106c/0x1cf0 [ 208.311373][ T9062] ocfs2_create+0x190/0x474 [ 208.312803][ T9062] path_openat+0x12d8/0x2c40 [ 208.314259][ T9062] do_filp_open+0x18c/0x36c [ 208.315630][ T9062] do_sys_openat2+0x11c/0x1b4 [ 208.317119][ T9062] __arm64_sys_openat+0x120/0x158 [ 208.318688][ T9062] invoke_syscall+0x98/0x2b8 [ 208.320070][ T9062] el0_svc_common+0x130/0x23c [ 208.321521][ T9062] do_el0_svc+0x48/0x58 [ 208.322808][ T9062] el0_svc+0x58/0x180 [ 208.324057][ T9062] el0t_64_sync_handler+0x84/0x12c [ 208.325637][ T9062] el0t_64_sync+0x198/0x19c [ 208.327114][ T9062] [ 208.327114][ T9062] other info that might help us debug this: [ 208.327114][ T9062] [ 208.329945][ T9062] Chain exists of: [ 208.329945][ T9062] &oi->ip_xattr_sem --> &journal->j_trans_barrier --> jbd2_handle [ 208.329945][ T9062] [ 208.333755][ T9062] Possible unsafe locking scenario: [ 208.333755][ T9062] [ 208.335830][ T9062] CPU0 CPU1 [ 208.337329][ T9062] ---- ---- [ 208.338837][ T9062] rlock(jbd2_handle); [ 208.339983][ T9062] lock(&journal->j_trans_barrier); [ 208.342265][ T9062] lock(jbd2_handle); [ 208.344136][ T9062] lock(&oi->ip_xattr_sem); [ 208.345390][ T9062] [ 208.345390][ T9062] *** DEADLOCK *** [ 208.345390][ T9062] [ 208.347724][ T9062] 8 locks held by syz.3.695/9062: [ 208.349147][ T9062] #0: ffff0000cd5ec428 (sb_writers#28){.+.+}-{0:0}, at: mnt_want_write+0x44/0x9c [ 208.351791][ T9062] #1: ffff0000ddd45f40 (&type->i_mutex_dir_key#10){++++}-{4:4}, at: path_openat+0x638/0x2c40 [ 208.354685][ T9062] #2: ffff0000f8ceb480 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6){+.+.}-{4:4}, at: ocfs2_reserve_suballoc_bits+0x12c/0x3b9c [ 208.358631][ T9062] #3: ffff0000f8ce9800 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#4){+.+.}-{4:4}, at: ocfs2_reserve_suballoc_bits+0x12c/0x3b9c [ 208.362520][ T9062] #4: ffff0000ddd42640 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3){+.+.}-{4:4}, at: ocfs2_reserve_suballoc_bits+0x12c/0x3b9c [ 208.366356][ T9062] #5: ffff0000cd5ec618 (sb_internal#3){.+.+}-{0:0}, at: ocfs2_mknod+0xc50/0x1cf0 [ 208.369000][ T9062] #6: ffff0000f69218e8 (&journal->j_trans_barrier){.+.+}-{4:4}, at: ocfs2_start_trans+0x35c/0x6b0 [ 208.371971][ T9062] #7: ffff0000f7ee2950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xe4c/0x10dc [ 208.374686][ T9062] [ 208.374686][ T9062] stack backtrace: [ 208.376329][ T9062] CPU: 0 UID: 0 PID: 9062 Comm: syz.3.695 Not tainted 6.16.0-rc5-syzkaller-gec4801305969 #0 PREEMPT [ 208.379396][ T9062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 208.382245][ T9062] Call trace: [ 208.383217][ T9062] show_stack+0x2c/0x3c (C) [ 208.384460][ T9062] __dump_stack+0x30/0x40 [ 208.385656][ T9062] dump_stack_lvl+0xd8/0x12c [ 208.387010][ T9062] dump_stack+0x1c/0x28 [ 208.388195][ T9062] print_circular_bug+0x324/0x32c [ 208.389589][ T9062] check_noncircular+0x154/0x174 [ 208.390989][ T9062] __lock_acquire+0x1774/0x30a4 [ 208.392329][ T9062] lock_acquire+0x14c/0x2e0 [ 208.393583][ T9062] down_write+0x50/0xc0 [ 208.394721][ T9062] ocfs2_xattr_set_handle+0x2a8/0x5e4 [ 208.396255][ T9062] ocfs2_init_security_set+0xb4/0xd8 [ 208.397690][ T9062] ocfs2_mknod+0x106c/0x1cf0 [ 208.399005][ T9062] ocfs2_create+0x190/0x474 [ 208.400253][ T9062] path_openat+0x12d8/0x2c40 [ 208.401576][ T9062] do_filp_open+0x18c/0x36c [ 208.402853][ T9062] do_sys_openat2+0x11c/0x1b4 [ 208.404185][ T9062] __arm64_sys_openat+0x120/0x158 [ 208.405626][ T9062] invoke_syscall+0x98/0x2b8 [ 208.406954][ T9062] el0_svc_common+0x130/0x23c [ 208.408276][ T9062] do_el0_svc+0x48/0x58 [ 208.409403][ T9062] el0_svc+0x58/0x180 [ 208.410494][ T9062] el0t_64_sync_handler+0x84/0x12c [ 208.411988][ T9062] el0t_64_sync+0x198/0x19c [ 208.455214][ T9053] bcachefs (loop4): btree node scan found 7 nodes after overwrites [ 208.455403][ T9053] done [ 208.455437][ T9053] bcachefs (loop4): check_topology... [ 208.455468][ T9053] bcachefs (loop4): btree root extents unreadable, must recover from scan [ 208.455552][ T9053] bcachefs (loop4): bch2_get_scanned_nodes(): recovery btree=extents level=0 POS_MIN - SPOS_MAX [ 208.455636][ T9053] bcachefs (loop4): bch2_get_scanned_nodes(): recovering u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c6c25c03258c59c5 written 16 min_key POS_MIN durability: 1 ptr: 0:27:0 gen 0 [ 208.458470][ T9053] done [ 208.458494][ T9053] bcachefs (loop4): accounting_read... [ 208.489936][ T6530] ocfs2: Unmounting device (7,3) on (node local) [ 208.502881][ T9053] done [ 208.503774][ T9053] bcachefs (loop4): alloc_read... done [ 208.505781][ T9053] bcachefs (loop4): snapshots_read... done [ 208.507880][ T9053] bcachefs (loop4): Fixed errors, running fsck a second time to verify fs is clean [ 208.510784][ T9053] bcachefs (loop4): done starting filesystem [ 208.648288][ T9096] random: crng reseeded on system resumption [ 208.652072][ T9096] PM: hibernation: Basic memory bitmaps created [ 208.654786][ T9096] Restarting kernel threads ... [ 208.655256][ T9096] Done restarting kernel threads. [ 208.728406][ T6533] bcachefs (loop4): shutting down [ 208.761371][ T9074] PM: hibernation: Basic memory bitmaps freed [ 208.799867][ T6533] bcachefs (loop4): shutdown complete