last executing test programs: 6.302598771s ago: executing program 0 (id=518): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b8, 0x0, 0x12, 0x60d, 0x1d8, 0x202, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private1, @ipv4={'\x00', '\xff\xff', @empty}, [0x0, 0xff], [], 'ip_vti0\x00', 'macsec0\x00', {0xff}}, 0x0, 0x190, 0x1d8, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "000000165a8c2e0617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f672225d6147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac05a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x74, 0x2}}, @common=@icmp6={{0x28}, {0xd, "ea9c", 0x1}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff, 0x0, 0xffffff00, 0xff000000], [0xff, 0xff000000, 0x0, 0xff], 'ipvlan1\x00', 'erspan0\x00', {}, {0xff}, 0x2b, 0x5, 0x6, 0x33}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x5, 0x8001, 0xf53, 'syz0\x00', 'syz1\x00', {0xffffffffffffff7f}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) 6.093387746s ago: executing program 0 (id=520): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000140), 0x1, 0x4044880) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$eJzs3cFvG1kZAPBvnLhJs+mmC3sABGxZFgqq6iTubrTqhfYCQlUlRMWJQxsSN4pi11Hsiib0kB65V6ISJ+A/4MYBqScO3LjBjUs5IBWoQA0SB6MZT1I3sZNAnbiJfz9pMvPeTP29F/e953mR5wUwtC5ExGZEnImIOxExlecn+RbX2lt63csXDxe2XjxcSKLVuvX3JDuf5kXHv0m9k7/meER8/zsRP0r2xm2sb6zMV6uVtTw93aytTjfWNy4vF/Kc8tzs3MynVz4p962uH9R+/fzbyzd+8NvffOnZHza/+ZO0WJM/PZed66xHP7WrXozJjrzRiLhxFMEGZDT//8PJk7a2z0TEh1n7n4qR7N0EAE6zVmsqWlOdaQDgtEvv/ycjKZTyuYDJKBRKpfYc3vsxUajWG81LU/X79xYjm8M6H8XC3eVqZSafKzwfxSRNz2bHr9Ll19KPK1ci4r2IeDx2NjtfWqhXFwf5wQcAhtg7u8b/f421x/9OxUEVDgA4OuODLgAAcOyM/wAwfIz/ADB8/ofx37cDAeCUcP8PAMPH+A8Aw+fA8f/R8ZQDADgW37t5M91aW+3nX28/qfvyYqWxUqrdXygt1NdWS0v1+lK1UlpotQ56vWq9vjr78U6ysb5xu1a/f695e7k2v1S5XfEsAQAYvPc+ePqndNDfvHo226JjLQdjNZxuhUEXABiYkUEXABgY3+eB4XWIe3zTAHDKdVmity2fIEh6XfDE4q9wUl38vPl/GFZvMv9v7gBOtv9v/v9bfS8HcPyM4TC8Wq3Emv8AMGTM8QM9//6f6/mIkCf9LwsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACcFJPZlhRK2Vrgm+nPQqkUcS4izkcxubtcrcxExLsR8cex4lianh10oQGAN1T4a5Kv/3Vx6qPJ3WfPJP8ey/YR8eOf3/rZg/lmc202zf/HTn7zSZp/trlWPjOICgAAna7tzcrG73K+77iRf/ni4cL2dpxFfH69vbhoGncr39pnRmM0249HMSIm/pnk6bb088pIH+JvPoqIz23XfzwedESYzOZA2iuf7o6fxj7X9/idv//d8Quv1beQnUv3xex38dnYVTjgQE+vt/vJvO2lTTxvf4W4kO27t//xrId6c2n/lzbXrT39X2Gn/xvZEz/J2vyFnfT+JXn+8e++uyezNdU+9yjiC6Pd4ic78ZPu/W/xo0PW8c9f/PKHvc61fhFxsWv9t1ekrmXd7HSztjrdWN+4vFybX6osVe6Vy3OzczOfXvmkPJ3NUbd//r5bjL9dvfRur/hp/Sd6xB/fv/7xtUPW/5f/ufPDr+wT/xtf7f7+v79P/HRM/Poh489PXOu5fHcaf7FH/Q94/+PSIeM/+8vG4iEvBQCOQWN9Y2W+Wq2sHXCQftY86BoHhz9I7+3fgmJkB7EZ0a8XzCYlIqLrNekn6rejykd1kAws+q/6/YKD7pmAo/aq0Q+6JAAAAAAAAAAAAAAAQC+N9Y2Vse7f1urbwaDrCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwOn13wAAAP//KHnENg==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000080), 0x1, 0x40402) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000005c0)="c21cfb", 0x3}, {&(0x7f0000000000)="6e1c58a13e88c61b903c3682a5f04370358e341ce30247d2cd207f0f19aa8b", 0x1f}, {&(0x7f0000000140)="4a43a5bcff6634be212000bd7ca65a450fc107f4f06035af68e33eebfceeefcfe173b190ab3e05cbdf32840b22da95e8f3cf0d873ab7c57fba69d4e088898a", 0x3f}], 0x3) read$FUSE(r1, &(0x7f0000000600)={0x2020}, 0x2020) 5.946993491s ago: executing program 0 (id=521): syz_mount_image$exfat(&(0x7f0000000000), &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x880, &(0x7f0000001f80)=ANY=[@ANYBLOB='time_offset=0x0000000000000000,discard,umask=00000000000000000000001,fmask=00000000000000000000004,errors=continue,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c696f636861727365743d757466382c696f636861727365743d69736f383835392d312c646d61736b3d30303030303030303030303030303030303030303030302c6572726f72733d636f6e74696e75652c00128aa7b2ac35225b1fd408d9bd24fcf8f93d97439c1c5d99b229e973f07b01507704aa86f528ac360a7aa1bde5f150ec0d9e9b7630f32b534d9c2c4d8cd99d21502dada9"], 0x1, 0x1555, &(0x7f0000000840)="$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") timer_create(0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8921, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(r1, &(0x7f0000000180)='./file0\x00', r1, &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4) 4.207221273s ago: executing program 0 (id=525): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x401, 0x4) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20, 0x4000b, @ipv4={'\x00', '\xff\xff', @loopback}, 0x80ad}, 0x1c) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x1, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x8}, 0x1c) 3.14920778s ago: executing program 0 (id=527): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @main=@item_4={0x3, 0x0, 0xb, "4070f43f"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_connect(0x0, 0x34, 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0) syz_open_dev$evdev(&(0x7f0000000e00), 0x0, 0x1) ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f0000000040)={0x3, 0x100, 0x7}) syz_usb_disconnect(r0) 3.147833241s ago: executing program 1 (id=528): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0040, &(0x7f00000000c0)={[{@noblock_validity}, {@resgid={'resgid', 0x3d, 0xee00}}, {@acl}, {@noload}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@journal_async_commit}]}, 0xfe, 0x472, &(0x7f0000000940)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x10000}, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001680)) r2 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000001c0)={0x0, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000000)={0x0, r2}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000140)={@my=0x1}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/4096}) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) 2.384912409s ago: executing program 1 (id=532): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000080)='./file0\x00', 0x400, &(0x7f00000004c0)=ANY=[], 0x1, 0x5514, &(0x7f0000005d80)="$eJzs3M1rI2UYAPAn7Xa/XYt48LYDi9DCJmy67aK3qrv4gV3KqgdPmiZpyG6SKU2a1p48eBQPnv0nRMGTR/8GD569iQfFm6BkZqpbP8ClSWPb3w8mz7xv3jzzvGFZeGZKAjiz5pNffirFtbgUEbMRcTUiOy8VR2Y1D89FxPWImHnsKBXzf0ycj4jLEXFtlDzPWSre+vTm8MbKj2/8/PW3F85d+fyr76a3a2Dano+I7lZ+vtvNY9rK48NivjZsZ7G7PCxi/kb3UTFO87jb3Mgy7NYO1tWyeLuVr0+3dvqjuNmp1Uex1d7M5rd6+QX7w9ZBnuwDD2vb2bjR3Mhiu59msbWf17W3n//ftt8f5HkaRb4PsvQxGBzEfL6518z3s/Uoi/XeoJjP86aN5t4oDotYXC7qaaeR1bFxlG/6/+3Ndm9nLxk2t/vttJesVKovVKp3ytXttNEcNJfLtW7jznKy0OqMlpUHzVp3tZWmrU6zUk+7i8lCq14vV6vJwt3mRrvWS6rVyu3KrfLKYnF2M3n1/jtJp5EsjOLL7d7OoN3pJ5vpdpJ/YjFZqtx+cTG5UU3eWltP1h/cu7e2/vZ7d9+9/9La668Ui/5WVrKwdGtpqVy9VV6qLp6h/X9UFD3G/cORlJ5s+YVJ1QFwguj/gWmYXP+//SBi8v1/6P/H4kT1vxPr/z87s/uHI3nC/h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgNPj+7kvXstO5vPxlWL+qWLqmWJcioiZiPjtH8zG+UM5Z4s8c/+yfu4vNXxTiizD6BoXiuNyRKwWx69PT/pbAAAAgNPryw+vf5J36/nL/LQL4jjlN21mrr4/pnyliJib/2FM2WZGL8+OKVn27/tc7I0pW3YD6+KYkuW33M6NK9t/MnsoXHwslPIwc6zlAAAAx+JwJ3C8XQgAAADH6eNpF8B0lOLgUebBs+DsL+//fCB46dAIAAAAOIFK0y4AAAAAmLis//f7fwAAAHC65b//BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAv7NzP7lpA1EcgJ8NLvSfiqru26N0B8foEbrssuIAvQRHoFfIBTgD2eUIEUR4HBSiJIrisa2Q75PMMBb8/IzwYmakAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALp0Wa0X//9+/9c2Z7dv54WX/dG2bgAAAHgLttV6Ub+Zpf7H5vzn5tTXpl9ERBkRD43dR/HuJHPU5FSPfL66V8NFRJ1wuMakOT5ExM/muP7S9a8AAAAA52uzXM3TaD29zIYuiD6lSZvy069MeUVEVLOrTGnlIe9bprD6/z2OP5nS6gmsaaawNOU2zpX2LPXjfpy1m95pitSUT38/270DAAA9Gp00/Y5CAAAA6NPvoQtgGEXcLmUelwInqWmW996f9AAAAIBXqBi6AAAAAKBz9fjf/n8AAABw3tL+fwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHRpW60Xm+Vq3jZnt28nz90AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADADfvzjgIhEAZhsHd9ZzL3P6w0aGpqUgXCx98YDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvPndX/5PTI0zydxrY+l5JFk7NbZOjb1z4+gP4+vXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABc7M9tCoAgEIbBrezrX3j/w8YLeoYIZkB42EVBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBH7hnLOLXO2BJPVbVME3vGvaqOrBJnVokrF/p4sPUPfwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMvO/bzGUcUBAH8zs7NJq+IaZQ8RseBBLzbd1tbexIMSPPgnCCHd1titP9ocbClCLt4k515EjyKCEm/9H3puoZd662EPFTxX5lcy+XFYhZ3ZZD8fePO+Mwzzvm8WQr77XgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADsM/5wL06yQ6+I4/Law2d317P+0YE+c3/78XLWsjhqMunj4Y36SdSvnSw2nwwAAADzIanq+xDCk3RnNevjXl7/p9U9Wc3/00tFXNXzB+v+qq9q/6z9+cfT13YH6hXjZA+9ujEanjucSmd6s5xhz1+e4KZO/ubz716S/AOJP9l6dZzm7zP64cGDj7p5uDD9dAGA/+ds1ZdB9ftQ1g/aTAyAudGpFd5V/Z/02s0JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoAnjrfBCFUchhOXOXpx59Ozu+lH9/e3Hy1W7dO/edv2Z2SPSEMLVjdHwXFhscDaz7dbtO9fXRqPhzeaDN0MIbY3+QTn9659NcHMIU0rjTEtvfs6CuPywZyWf4xG0+EMJAIATKS1bVtc/SXdWs2vRUgjPf95f/79di8OE9f/Tzy89rI9Vr/8Hjc1w9q1s3vh65dbtO+9u3Fi7Nrw2/PK984P3BxcuX7x4eSX/rqQ4tp0mAAAAx1i3bPX6P146vP5/uhaHCev/b34cfFcfK1H/H2lv0a/tTAAAAObbK2f++Ts64nrU7YZv1zY3bw6K4+75+eLYQqr/2ULZ6vV/stR2VgAAAEATxlvRvvX/K7U4TLj+/+Ivr/9Wf2YSQjhVrv+fXf9qdKW56cy0qfzx8EL5cDsLAAAAKOvxUwfW/9N8/3+8u+UhDiG881YRl/8GcKL6P/n4+1/rY9X3/19oboozKe4X7yPv+yF0+m1nBAAAwEm2mLdeXv//le6sfvH76U+79v8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANO3fAAAA///FdTwZ") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) chdir(0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000300)=""/144, 0x90}], 0x1, 0x80000001, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4, 0x28011, r0, 0x0) fdatasync(r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 2.324927379s ago: executing program 4 (id=533): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, r2, 0x16, 0x0, @void}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r3, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) 2.253565811s ago: executing program 4 (id=534): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) getsockopt$sock_linger(r2, 0x1, 0xd, 0x0, &(0x7f00000000c0)) 2.097966607s ago: executing program 2 (id=535): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000001580)=[{&(0x7f0000000400)="08001efbb07d58", 0x7}, {&(0x7f0000000580)='4', 0x1}], 0x2}, 0x804) 2.005187002s ago: executing program 2 (id=536): r0 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) sendmsg$nl_route(r0, 0x0, 0x44000) utimensat(0xffffffffffffffff, 0x0, 0x0, 0x0) 1.763403523s ago: executing program 1 (id=537): bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x0) r0 = socket(0x18, 0x1, 0x2) accept4$unix(r0, 0x0, 0x0, 0x80000) 1.557958027s ago: executing program 3 (id=538): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x4}, 0x4) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x2}, 0x4) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x301880, 0x20d) write$tun(r4, &(0x7f0000000000)={@val={0x0, 0x886c}, @void, @eth={@random="000000f400", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, @val={@void, {0x8100, 0x0, 0x1, 0x2}}, {@llc_tr={0x11, {@llc={0xaa, 0xe, "d8"}}}}}}, 0x19) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'veth1_to_bridge\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000400000000000000000500150002000000080009000000000008000b0005000000080017004e214e22080001"], 0x5c}}, 0x0) 1.481139051s ago: executing program 1 (id=539): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, 0x0) 1.480663891s ago: executing program 1 (id=540): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000080)={[{@quota}, {@quota}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@orlov}, {@test_dummy_encryption_v1}, {@jqfmt_vfsv1}]}, 0x3, 0x448, &(0x7f0000000440)="$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") bind$unix(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) chdir(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x410, 0x138, 0x98, 0x138, 0x0, 0x0, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x3}}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x9, 0x0, 0x0, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private2, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x1fb, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x402, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x83, 0x2, 0x3, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0xdb, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0xe661, 0x80, 0x7, 0x20003, 0x8, 0x4c76, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x800, 0x17, 0x0, 0x7, 0x5, 0x3e, 0x18e, 0x200006, 0x6, 0x454f, 0x6, 0x80004, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x0, 0x8, 0x8000, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xffffbff3, 0x129432f6, 0xc8, 0xc9, 0xe, 0x2bf, 0x6c7, 0x1, 0xfffffffc, 0x5, 0x0, 0x0, 0x9, 0x2f, 0xe, 0x1, 0x66abcbd2, 0xea4, 0x8, 0x4, 0x7, 0x7fff, 0x6, 0x500, 0x401, 0x6, 0x1, 0xff, 0x5, 0xfffff575, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x6, 0xfffff256, 0x6, 0x1, 0xfdfffffd, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xfffffffc, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x9, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0xfffffffd, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0xb, 0x5, 0xffffffff, 0x2, 0x400003, 0xfffffffd, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x5, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0x1000, 0x5, 0xb1, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x200807ff, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x4, 0x6, 0x6, 0x80000000, 0xb9, 0xce4, 0x10001ff, 0x2, 0x4184, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x6, 0x14c, 0x60a7, 0x6, 0xa, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x0, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x80000002, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x803, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1.480582731s ago: executing program 2 (id=541): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x86) fchdir(r1) setresgid(0xee00, 0xee01, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) 1.355658802s ago: executing program 4 (id=542): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0040, &(0x7f00000000c0)={[{@noblock_validity}, {@resgid={'resgid', 0x3d, 0xee00}}, {@acl}, {@noload}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@journal_async_commit}]}, 0xfe, 0x472, &(0x7f0000000940)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x10000}, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001680)) r2 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000001c0)={0x0, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000000)={0x0, r2}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000140)={@my=0x1}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/4096}) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) 1.108495453s ago: executing program 2 (id=543): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000140), 0x1, 0x4044880) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000080), 0x1, 0x40402) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000005c0)="c21cfb", 0x3}, {&(0x7f0000000000)="6e1c58a13e88c61b903c3682a5f04370358e341ce30247d2cd207f0f19aa8b", 0x1f}, {&(0x7f0000000140)="4a43a5bcff6634be212000bd7ca65a450fc107f4f06035af68e33eebfceeefcfe173b190ab3e05cbdf32840b22da95e8f3cf0d873ab7c57fba69d4e088898a", 0x3f}], 0x3) read$FUSE(r1, &(0x7f0000000600)={0x2020}, 0x2020) 920.582425ms ago: executing program 2 (id=544): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x4, &(0x7f0000000000)=ANY=[], 0x1, 0x23d, &(0x7f0000001840)="$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") open(0x0, 0x66842, 0x29) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f00000000c0)={[{@test_dummy_encryption_v1}, {@nodioread_nolock}, {@errors_continue}, {@inlinecrypt}]}, 0x1, 0x241, &(0x7f00000002c0)="$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") syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x80143, 0x19f) close(r1) socket$inet6_udp(0xa, 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x8, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x18, 0x68, 0x1, 0xfcfd, 0x25dfdbfb, {0x2}}, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) 696.707362ms ago: executing program 4 (id=545): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 359.666829ms ago: executing program 0 (id=546): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0040, &(0x7f00000000c0)={[{@noblock_validity}, {@resgid={'resgid', 0x3d, 0xee00}}, {@acl}, {@noload}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@journal_async_commit}]}, 0xfe, 0x472, &(0x7f0000000940)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="b80000000001010400000000000000000a0000003c0001802c0001801400030000000000000000000000ffffac1414aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300ff02001300000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007400000000024000d80"], 0xb8}, 0x1, 0x0, 0x0, 0x10000}, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="fe2ecf20a9a17bd2ed7e803f830375c150a1f848f604c2c1f932d2b7163be4b2b9a5bd521d185cfbee555b27608594beba6325923aaf5db74cff01000053db92c6c5fcbba0abd975fc76bea49b00513afc856ed89d3fadeda307ca587354322803b0983cc65725ae7f45fb95e7cdb28c6b886959b7dde2c87c73f6008cf6eed7861f24b7423704b95f3d05b92d3d7ff9d392833ecd02443320b60131a350360fcc1d659e2a03cb469caf0498bacae0735a161345b3d71a55f14ef636b6f832c7a6071fce83904dfd871b6d8e03648dbaa3a039eb5673792cae80335732030f9aeabaf3bb3cc4ca5fe75271d69b2e78beb2b81fc3cf3a18a7ae93a3cdbe6599b99408275e2b4b4477c6fcf4806134e839e1bd33ec000000000000006a1c000000000000000000000000000000000000000000000000000069c3288311b7414705e975eb3f1b77a120", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)) r1 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000140)={@my=0x1}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/4096}) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 358.460069ms ago: executing program 3 (id=547): r0 = socket$packet(0x11, 0x3, 0x300) bpf$ENABLE_STATS(0x20, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000005300)=[{0x28, 0x0, 0xfb, 0xfffff034}, {0x80000006, 0x66, 0x0, 0x30}]}, 0x10) syz_emit_ethernet(0x22, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x84, 0x0, @dev, @local}}}}}, 0x0) 271.365324ms ago: executing program 4 (id=548): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) preadv(r0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/225, 0xe1}], 0x1, 0x3, 0x1) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r2], 0x20}}, 0x0) 270.167914ms ago: executing program 3 (id=549): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001740)=@updpolicy={0x1fc, 0x19, 0x1, 0xfffffffc, 0x10, {{@in=@broadcast, @in=@multicast1, 0x0, 0x0, 0xf7fb, 0x2002, 0xa, 0x80}, {0x7, 0x0, 0x0, 0x9, 0x8, 0x80000000, 0x0, 0x20000000000000}, {0x81, 0x9, 0x83}, 0x4, 0x0, 0x2, 0x1, 0x2, 0x3}, [@tmpl={0x144, 0x5, [{{@in=@multicast1, 0x4d4, 0x32}, 0x0, @in6=@rand_addr=' \x01\x00', 0x3506, 0x2, 0x0, 0x2}, {{@in=@loopback, 0x4, 0x2b}, 0x0, @in6=@remote, 0x0, 0x0, 0x0, 0x4, 0x800}, {{@in=@dev={0xac, 0x14, 0x14, 0x28}, 0x4d3, 0x32}, 0x0, @in=@loopback}, {{@in6=@remote, 0x4d5, 0x6c}, 0x0, @in6=@private1, 0x3504, 0x0, 0x0, 0x1, 0x0, 0xabf}, {{@in=@loopback, 0x4d4, 0xff}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x2d}, 0x3505, 0x4, 0x0, 0x4}]}]}, 0x1fc}}, 0x4080) 197.150766ms ago: executing program 3 (id=550): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000a00)=0x7, 0x4) 196.854116ms ago: executing program 3 (id=551): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNGETVNETLE(r0, 0x40047452, 0x0) 187.676688ms ago: executing program 3 (id=552): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) getsockopt$sock_linger(r2, 0x1, 0xd, 0x0, &(0x7f00000000c0)) 36.145023ms ago: executing program 4 (id=553): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x8) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0xa00010, &(0x7f0000000400)={[{@data_err_ignore}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@prjquota}, {@nogrpid}, {@init_itable_val={'init_itable', 0x3d, 0x5}}, {@nodelalloc}]}, 0x1, 0x47a, &(0x7f00000006c0)="$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") 1.151459ms ago: executing program 1 (id=554): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000140), 0x1, 0x4044880) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x10, 0x3, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000080), 0x1, 0x40402) writev(r3, &(0x7f00000001c0)=[{&(0x7f00000005c0)="c21cfb", 0x3}, {&(0x7f0000000000)="6e1c58a13e88c61b903c3682a5f04370358e341ce30247d2cd207f0f19aa8b", 0x1f}, {&(0x7f0000000140)="4a43a5bcff6634be212000bd7ca65a450fc107f4f06035af68e33eebfceeefcfe173b190ab3e05cbdf32840b22da95e8f3cf0d873ab7c57fba69d4e088898a", 0x3f}], 0x3) read$FUSE(r3, &(0x7f0000000600)={0x2020}, 0x2020) 0s ago: executing program 2 (id=555): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.stat\x00', 0x275a, 0x0) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x3) kernel console output (not intermixed with test programs): s ready [ 35.006692][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 35.008225][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 35.009572][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 35.011083][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 35.012882][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 35.019137][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 35.022566][ T4322] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.024213][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 35.026880][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 35.028893][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 35.032596][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 35.040778][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 35.042447][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 35.043978][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 35.045920][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 35.047404][ T1613] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.048589][ T1613] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.050142][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 35.051554][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 35.064019][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 35.065838][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 35.067216][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 35.068755][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 35.070224][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 35.071780][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 35.073214][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 35.074780][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 35.084568][ T1613] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.085781][ T1613] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.090772][ T4331] device veth0_vlan entered promiscuous mode [ 35.093736][ T4331] device veth1_vlan entered promiscuous mode [ 35.096044][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 35.097489][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.099000][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 35.100909][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 35.102205][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 35.103966][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 35.108633][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 35.114861][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 35.116715][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 35.118045][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.123431][ T4331] device veth0_macvtap entered promiscuous mode [ 35.134495][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 35.137423][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 35.141126][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 35.143137][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 35.156991][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 35.158504][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 35.160269][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 35.162540][ T4331] device veth1_macvtap entered promiscuous mode [ 35.170325][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 35.171854][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 35.173621][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 35.186308][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 35.187842][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 35.189940][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 35.197590][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 35.198889][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 35.206853][ T4321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.208073][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 35.209240][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 35.213709][ T4331] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.215274][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 35.217522][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.221495][ T4329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.230474][ T4331] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.234356][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.236755][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.242723][ T4331] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.244109][ T4331] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.248063][ T4331] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.249463][ T4331] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.258311][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 35.259630][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 35.260817][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 35.262376][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.264113][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 35.267438][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.276720][ T4320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.279577][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 35.281058][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.282854][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 35.284052][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 35.301159][ T4321] device veth0_vlan entered promiscuous mode [ 35.309863][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 35.311626][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.313241][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 35.314549][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 35.322820][ T4329] device veth0_vlan entered promiscuous mode [ 35.325169][ T4321] device veth1_vlan entered promiscuous mode [ 35.333605][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 35.335181][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 35.338106][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 35.342065][ T4329] device veth1_vlan entered promiscuous mode [ 35.348968][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 35.351396][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 35.352979][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.368950][ T4383] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.370212][ T4383] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.373203][ T4320] device veth0_vlan entered promiscuous mode [ 35.376943][ T4322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.378314][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 35.379804][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 35.381354][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 35.382713][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 35.384150][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.388585][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 35.390137][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 35.402792][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 35.404305][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.409508][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.410690][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.414566][ T4329] device veth0_macvtap entered promiscuous mode [ 35.417934][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 35.419452][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 35.420890][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 35.422403][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.424280][ T4321] device veth0_macvtap entered promiscuous mode [ 35.429697][ T4320] device veth1_vlan entered promiscuous mode [ 35.433049][ T4329] device veth1_macvtap entered promiscuous mode [ 35.436959][ T4321] device veth1_macvtap entered promiscuous mode [ 35.457321][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.458968][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.461138][ T4329] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.462345][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 35.463927][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 35.465347][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 35.469728][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 35.471166][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 35.472813][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 35.474353][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.477362][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 35.478939][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.481180][ T4320] device veth0_macvtap entered promiscuous mode [ 35.483392][ T4320] device veth1_macvtap entered promiscuous mode [ 35.490534][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.492237][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.494488][ T4329] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.498103][ T4321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.499720][ T4321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.501364][ T4321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.502997][ T4321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.508078][ T4321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.510173][ T4321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.511745][ T4321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.513512][ T4321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.515321][ T4321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.518808][ T4321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.520230][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 35.521851][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 35.523238][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.524735][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.530505][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 35.532075][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.533626][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.535070][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.538754][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.539335][ T4402] loop3: detected capacity change from 0 to 256 [ 35.540489][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.543229][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.548951][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.550407][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.551975][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.554633][ T4320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.561176][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 35.562918][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.571628][ T4402] FAT-fs (loop3): Directory bread(block 64) failed [ 35.572793][ T4402] FAT-fs (loop3): Directory bread(block 65) failed [ 35.574513][ T4321] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.576534][ T4321] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.577826][ T4321] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.579163][ T4321] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.580580][ T4402] FAT-fs (loop3): Directory bread(block 66) failed [ 35.581650][ T4402] FAT-fs (loop3): Directory bread(block 67) failed [ 35.582755][ T4402] FAT-fs (loop3): Directory bread(block 68) failed [ 35.583870][ T4402] FAT-fs (loop3): Directory bread(block 69) failed [ 35.584982][ T4402] FAT-fs (loop3): Directory bread(block 70) failed [ 35.590282][ T4329] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.591643][ T4329] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.593017][ T4329] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.594289][ T4329] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.596247][ T4402] FAT-fs (loop3): Directory bread(block 71) failed [ 35.597378][ T4402] FAT-fs (loop3): Directory bread(block 72) failed [ 35.598487][ T4402] FAT-fs (loop3): Directory bread(block 73) failed [ 35.632526][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 35.634104][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.639116][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.640708][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.642500][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.644341][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.646238][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.648089][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.650327][ T4320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.651762][ T4402] syz.3.4: attempt to access beyond end of device [ 35.651762][ T4402] loop3: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 35.657719][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.659316][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.664607][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 35.667708][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.669554][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 35.670901][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 35.676479][ T4322] device veth0_vlan entered promiscuous mode [ 35.683986][ T4322] device veth1_vlan entered promiscuous mode [ 35.693627][ T4320] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.695065][ T4320] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.697119][ T4320] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.698518][ T4320] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.735500][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 35.737028][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 35.738528][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 35.740161][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.749965][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.751226][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.752548][ T4322] device veth0_macvtap entered promiscuous mode [ 35.757829][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 35.759373][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 35.760896][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.762089][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.763469][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 35.771096][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.771581][ T4322] device veth1_macvtap entered promiscuous mode [ 35.772295][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.775082][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 35.795922][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.797111][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.806976][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 35.810201][ T4322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.811844][ T4322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.813521][ T4322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.815222][ T4322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.817817][ T4322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.819493][ T4322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.821205][ T4322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.822936][ T4322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.826717][ T4322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.828779][ T4322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.830386][ T4322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.831877][ T4322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.833579][ T4322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.835272][ T4322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.837863][ T4322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.839420][ T4322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.841095][ T4322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.843385][ T4322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.852771][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 35.854338][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.856510][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.858045][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.883275][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.884587][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.887844][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 36.258657][ T4411] loop2: detected capacity change from 0 to 512 [ 36.262078][ T4411] EXT4-fs: Ignoring removed orlov option [ 36.267823][ T4322] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.269255][ T4322] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.270631][ T4322] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.272027][ T4322] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.297305][ T4380] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.298617][ T4380] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.304137][ T4413] loop3: detected capacity change from 0 to 512 [ 36.308870][ T4411] EXT4-fs (loop2): Test dummy encryption mode enabled [ 36.310040][ T4411] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 36.312464][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 36.320936][ T4413] EXT4-fs: Ignoring removed orlov option [ 36.324201][ T4411] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 36.324419][ T4413] EXT4-fs (loop3): Test dummy encryption mode enabled [ 36.334494][ T4413] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 36.342170][ T4411] EXT4-fs (loop2): 1 truncate cleaned up [ 36.343087][ T4411] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 36.365661][ T4380] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.367053][ T4380] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.368673][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 36.373697][ T4413] EXT4-fs (loop3): 1 truncate cleaned up [ 36.374658][ T4413] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 36.396481][ T4420] loop1: detected capacity change from 0 to 256 [ 36.406944][ T4420] FAT-fs (loop1): Directory bread(block 64) failed [ 36.408049][ T4420] FAT-fs (loop1): Directory bread(block 65) failed [ 36.409129][ T4420] FAT-fs (loop1): Directory bread(block 66) failed [ 36.410233][ T4420] FAT-fs (loop1): Directory bread(block 67) failed [ 36.411527][ T4420] FAT-fs (loop1): Directory bread(block 68) failed [ 36.412489][ T4420] FAT-fs (loop1): Directory bread(block 69) failed [ 36.413589][ T4420] FAT-fs (loop1): Directory bread(block 70) failed [ 36.414706][ T4420] FAT-fs (loop1): Directory bread(block 71) failed [ 36.415846][ T4420] FAT-fs (loop1): Directory bread(block 72) failed [ 36.416894][ T4420] FAT-fs (loop1): Directory bread(block 73) failed [ 36.434777][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.436352][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.442257][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 36.855664][ T4336] Bluetooth: hci1: command 0x041b tx timeout [ 36.856693][ T4336] Bluetooth: hci2: command 0x041b tx timeout [ 36.857844][ T4336] Bluetooth: hci4: command 0x041b tx timeout [ 36.858902][ T4336] Bluetooth: hci3: command 0x041b tx timeout [ 36.859995][ T4336] Bluetooth: hci0: command 0x041b tx timeout [ 36.945919][ T4421] Zero length message leads to an empty skb [ 37.042166][ T4425] loop4: detected capacity change from 0 to 512 [ 37.141163][ T4430] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 37.158469][ T4430] ======================================================= [ 37.158469][ T4430] WARNING: The mand mount option has been deprecated and [ 37.158469][ T4430] and is ignored by this kernel. Remove the mand [ 37.158469][ T4430] option from the mount to silence this warning. [ 37.158469][ T4430] ======================================================= [ 37.194377][ T4430] EXT4-fs (loop3): re-mounted. Quota mode: writeback. [ 37.409331][ T4424] EXT4-fs (loop3): re-mounted. Quota mode: writeback. [ 37.423811][ T4425] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 37.856366][ T4331] EXT4-fs (loop3): unmounting filesystem. [ 37.895969][ T4322] EXT4-fs (loop4): unmounting filesystem. [ 37.951026][ T4434] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 37.991206][ T4444] loop1: detected capacity change from 0 to 4096 [ 38.050559][ T4449] loop3: detected capacity change from 0 to 512 [ 38.095175][ T4449] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 38.169674][ T4444] EXT4-fs: Ignoring removed orlov option [ 38.171933][ T4444] EXT4-fs (loop1): Test dummy encryption mode enabled [ 38.732327][ T4459] syz.4.14 uses obsolete (PF_INET,SOCK_PACKET) [ 38.898044][ T4328] Bluetooth: hci0: command 0x040f tx timeout [ 38.898091][ T4336] Bluetooth: hci3: command 0x040f tx timeout [ 38.900320][ T4336] Bluetooth: hci4: command 0x040f tx timeout [ 38.901344][ T4328] Bluetooth: hci2: command 0x040f tx timeout [ 38.902432][ T4336] Bluetooth: hci1: command 0x040f tx timeout [ 39.260829][ T4444] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 39.795371][ C0] sched: RT throttling activated [ 39.826544][ T4331] EXT4-fs (loop3): unmounting filesystem. [ 39.850473][ T4444] fscrypt: AES-256-XTS using implementation "xts-aes-ce" [ 40.042699][ T4320] EXT4-fs (loop1): unmounting filesystem. [ 40.503758][ T4486] loop3: detected capacity change from 0 to 1024 [ 40.531152][ T4488] tipc: Started in network mode [ 40.531981][ T4488] tipc: Node identity 9a2e3da66c8b, cluster identity 4711 [ 40.533281][ T4488] tipc: Enabled bearer , priority 0 [ 40.535153][ T4486] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 40.538145][ T4488] tipc: Resetting bearer [ 40.558512][ T4486] EXT4-fs error (device loop3): ext4_empty_dir:3166: inode #11: block 623: comm syz.3.20: Attempting to read directory block (623) that is past i_size (638464) [ 40.608763][ T4331] EXT4-fs (loop3): unmounting filesystem. [ 40.626380][ T4487] tipc: Disabling bearer [ 40.652413][ T4493] xt_hashlimit: size too large, truncated to 1048576 [ 40.757086][ T4499] loop1: detected capacity change from 0 to 256 [ 40.786571][ T4499] FAT-fs (loop1): Directory bread(block 64) failed [ 40.787668][ T4499] FAT-fs (loop1): Directory bread(block 65) failed [ 40.788926][ T4499] FAT-fs (loop1): Directory bread(block 66) failed [ 40.789978][ T4499] FAT-fs (loop1): Directory bread(block 67) failed [ 40.791119][ T4499] FAT-fs (loop1): Directory bread(block 68) failed [ 40.792182][ T4499] FAT-fs (loop1): Directory bread(block 69) failed [ 40.793302][ T4499] FAT-fs (loop1): Directory bread(block 70) failed [ 40.835665][ T4499] FAT-fs (loop1): Directory bread(block 71) failed [ 40.836892][ T4499] FAT-fs (loop1): Directory bread(block 72) failed [ 40.837974][ T4499] FAT-fs (loop1): Directory bread(block 73) failed [ 40.905580][ T4329] EXT4-fs error (device loop2): mb_free_blocks:1839: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt. [ 40.966804][ T4328] Bluetooth: hci4: command 0x0419 tx timeout [ 40.966828][ T4330] Bluetooth: hci3: command 0x0419 tx timeout [ 40.966844][ T4333] Bluetooth: hci1: command 0x0419 tx timeout [ 40.966859][ T4336] Bluetooth: hci2: command 0x0419 tx timeout [ 41.265406][ T4329] EXT4-fs (loop2): unmounting filesystem. [ 41.372679][ T4510] netlink: 24 bytes leftover after parsing attributes in process `syz.2.26'. [ 41.595098][ T4514] loop1: detected capacity change from 0 to 512 [ 41.958496][ T4514] EXT4-fs (loop1): 1 truncate cleaned up [ 41.959599][ T4514] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 42.398231][ T4517] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 465: padding at end of block bitmap is not set [ 42.520404][ T4484] loop0: detected capacity change from 0 to 131072 [ 42.542876][ T4484] F2FS-fs (loop0): invalid crc value [ 42.554023][ T4484] F2FS-fs (loop0): Found nat_bits in checkpoint [ 42.579631][ T4484] F2FS-fs (loop0): recover fsync data on readonly fs [ 42.587154][ T4484] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 42.646453][ T4320] EXT4-fs (loop1): unmounting filesystem. [ 42.685220][ T4522] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.694172][ T4522] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.864120][ T4528] bridge0: port 3(syz_tun) entered blocking state [ 42.865453][ T4528] bridge0: port 3(syz_tun) entered disabled state [ 42.867226][ T4528] device syz_tun entered promiscuous mode [ 42.868464][ T4528] bridge0: port 3(syz_tun) entered blocking state [ 42.869655][ T4528] bridge0: port 3(syz_tun) entered forwarding state [ 43.045433][ T4335] Bluetooth: hci4: command 0x0405 tx timeout [ 43.096395][ T4530] xt_hashlimit: size too large, truncated to 1048576 [ 43.364620][ T4536] tipc: Started in network mode [ 43.367868][ T4536] tipc: Node identity 5ed0a45b3d2e, cluster identity 4711 [ 43.371385][ T4536] tipc: Enabled bearer , priority 0 [ 43.381413][ T4536] tipc: Resetting bearer [ 43.419435][ T4524] loop1: detected capacity change from 0 to 131072 [ 43.429002][ T4524] F2FS-fs (loop1): Wrong CP boundary, start(512) end(1536) blocks(0) [ 43.432830][ T4524] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 43.440656][ T4524] F2FS-fs (loop1): invalid crc value [ 43.466503][ T4535] tipc: Disabling bearer [ 43.468139][ T4524] F2FS-fs (loop1): Found nat_bits in checkpoint [ 43.490135][ T4524] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 43.491414][ T4524] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 43.753597][ T4548] loop2: detected capacity change from 0 to 4096 [ 43.805634][ T4548] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 43.875163][ T4329] EXT4-fs (loop2): unmounting filesystem. [ 44.121833][ T4559] loop2: detected capacity change from 0 to 512 [ 44.434259][ T4544] loop4: detected capacity change from 0 to 131072 [ 44.440419][ T4544] F2FS-fs (loop4): invalid crc value [ 44.451548][ T4544] F2FS-fs (loop4): Found nat_bits in checkpoint [ 44.475532][ T4544] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 45.097049][ T4563] loop2: detected capacity change from 0 to 131072 [ 45.105886][ T4563] F2FS-fs (loop2): Wrong CP boundary, start(512) end(1536) blocks(0) [ 45.107193][ T4563] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 45.114612][ T4563] F2FS-fs (loop2): invalid crc value [ 45.124024][ T4572] netlink: 'syz.1.44': attribute type 4 has an invalid length. [ 45.131713][ T4574] loop3: detected capacity change from 0 to 512 [ 45.133027][ T4574] EXT4-fs: Ignoring removed i_version option [ 45.152562][ T4572] netlink: 'syz.1.44': attribute type 4 has an invalid length. [ 45.155190][ T4563] F2FS-fs (loop2): Found nat_bits in checkpoint [ 45.183167][ T4563] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 45.184350][ T4563] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 45.207358][ T4574] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 45.278372][ T4331] EXT4-fs (loop3): unmounting filesystem. [ 45.450398][ T4572] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.452048][ T4572] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.907588][ T4572] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 45.922718][ T4572] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 46.192295][ T4572] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.193907][ T4572] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.195352][ T4572] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.196971][ T4572] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.531933][ T4611] capability: warning: `syz.2.54' uses deprecated v2 capabilities in a way that may be insecure [ 46.586820][ T4609] device syzkaller0 entered promiscuous mode [ 46.609006][ T4617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.611356][ T4617] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.754422][ T4630] loop0: detected capacity change from 0 to 256 [ 46.775787][ T4630] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36a12e94, utbl_chksum : 0xe619d30d) [ 47.027789][ T4607] loop3: detected capacity change from 0 to 131072 [ 47.038364][ T4607] F2FS-fs (loop3): inline encryption not supported [ 47.042337][ T4607] F2FS-fs (loop3): Test dummy encryption mode enabled [ 47.049447][ T4607] F2FS-fs (loop3): invalid crc value [ 47.058002][ T4607] F2FS-fs (loop3): Found nat_bits in checkpoint [ 47.073001][ T4607] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 47.147685][ T4649] loop2: detected capacity change from 0 to 256 [ 47.161044][ T4649] FAT-fs (loop2): Directory bread(block 64) failed [ 47.163722][ T4649] FAT-fs (loop2): Directory bread(block 65) failed [ 47.172025][ T4649] FAT-fs (loop2): Directory bread(block 66) failed [ 47.174271][ T4649] FAT-fs (loop2): Directory bread(block 67) failed [ 47.176192][ T4649] FAT-fs (loop2): Directory bread(block 68) failed [ 47.177372][ T4649] FAT-fs (loop2): Directory bread(block 69) failed [ 47.178507][ T4649] FAT-fs (loop2): Directory bread(block 70) failed [ 47.179866][ T4649] FAT-fs (loop2): Directory bread(block 71) failed [ 47.180979][ T4649] FAT-fs (loop2): Directory bread(block 72) failed [ 47.182107][ T4649] FAT-fs (loop2): Directory bread(block 73) failed [ 48.184204][ T4657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.188256][ T4657] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.079120][ T4636] device syzkaller0 entered promiscuous mode [ 57.238915][ T4678] loop1: detected capacity change from 0 to 128 [ 57.240421][ T4678] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 57.266393][ T4679] futex_wake_op: syz.4.76 tries to shift op by -1; fix this program [ 57.268149][ T4678] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 57.369675][ T4691] device syzkaller0 entered promiscuous mode [ 57.439340][ T4693] netlink: 24 bytes leftover after parsing attributes in process `syz.0.79'. [ 57.460010][ T4696] netlink: 104 bytes leftover after parsing attributes in process `syz.3.82'. [ 57.524663][ T4698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.526862][ T4698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.582841][ T4704] loop3: detected capacity change from 0 to 256 [ 58.085216][ T4726] loop4: detected capacity change from 0 to 512 [ 58.090495][ T4726] EXT4-fs: Ignoring removed orlov option [ 58.092112][ T4726] EXT4-fs (loop4): Test dummy encryption mode enabled [ 58.093499][ T4726] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 58.145237][ T4726] EXT4-fs (loop4): 1 truncate cleaned up [ 58.150144][ T4726] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 58.458985][ T4732] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 58.513142][ T4733] EXT4-fs (loop4): re-mounted. Quota mode: writeback. [ 58.515154][ T4733] EXT4-fs (loop4): re-mounted. Quota mode: writeback. [ 58.658853][ T4741] loop0: detected capacity change from 0 to 512 [ 59.046727][ T4322] EXT4-fs (loop4): unmounting filesystem. [ 59.074246][ T4745] loop4: detected capacity change from 0 to 512 [ 59.096727][ T4745] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 59.934674][ T4322] EXT4-fs (loop4): unmounting filesystem. [ 59.955260][ T4751] loop4: detected capacity change from 0 to 16 [ 59.959585][ T4751] erofs: (device loop4): mounted with root inode @ nid 36. [ 59.964191][ T4751] syz.4.97: attempt to access beyond end of device [ 59.964191][ T4751] loop4: rw=0, sector=576, nr_sectors = 8 limit=16 [ 60.188997][ T4755] usb usb1: usbfs: process 4755 (syz.4.98) did not claim interface 0 before use [ 64.488838][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.490074][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 69.404498][ T4740] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 69.436577][ T4740] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 69.469244][ T4761] loop1: detected capacity change from 0 to 1024 [ 69.523743][ T4761] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 69.628330][ T3774] cfg80211: failed to load regulatory.db [ 69.651900][ T4320] EXT4-fs (loop1): unmounting filesystem. [ 69.695747][ T4743] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.697181][ T4743] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.168083][ T4743] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 70.181171][ T4743] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 70.454209][ T4783] 9pnet_fd: Insufficient options for proto=fd [ 70.605063][ T4743] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.606747][ T4743] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.608197][ T4743] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.609829][ T4743] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.729262][ T4788] loop1: detected capacity change from 0 to 1024 [ 70.730632][ T4788] EXT4-fs: inline encryption not supported [ 70.755018][ T4788] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 70.775195][ T4320] EXT4-fs (loop1): unmounting filesystem. [ 70.817256][ T4757] tipc: Started in network mode [ 70.818161][ T4757] tipc: Node identity ac14140f, cluster identity 4711 [ 70.819904][ T4757] tipc: Enabled bearer , priority 10 [ 70.821224][ T4774] netlink: 24 bytes leftover after parsing attributes in process `syz.3.102'. [ 70.838447][ T4783] netlink: 12 bytes leftover after parsing attributes in process `syz.0.105'. [ 70.880294][ T4797] loop2: detected capacity change from 0 to 256 [ 70.911813][ T4798] loop3: detected capacity change from 0 to 4096 [ 70.913186][ T4798] EXT4-fs: inline encryption not supported [ 70.937832][ T4797] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001053e, chksum : 0x9ba9f90d, utbl_chksum : 0xe619d30d) [ 70.959901][ T4801] loop4: detected capacity change from 0 to 4096 [ 70.962453][ T4801] EXT4-fs: inline encryption not supported [ 70.964909][ T4801] EXT4-fs (loop4): Test dummy encryption mode enabled [ 70.973773][ T4798] EXT4-fs (loop3): Test dummy encryption mode enabled [ 70.974942][ T4798] EXT4-fs (loop3): can't mount with both data=journal and delalloc [ 70.988524][ T4801] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=8843c018, mo2=0003] [ 70.990544][ T4801] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 71.322757][ T4801] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-ce" [ 71.346331][ T4810] loop1: detected capacity change from 0 to 16 [ 71.358444][ T4810] erofs: (device loop1): erofs_read_inode: unsupported datalayout 6 of nid 36 [ 71.379181][ T4766] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 71.422127][ T4322] EXT4-fs (loop4): unmounting filesystem. [ 71.852982][ T4826] loop0: detected capacity change from 0 to 512 [ 71.854791][ T4826] EXT4-fs: Ignoring removed orlov option [ 71.863646][ T4826] EXT4-fs (loop0): Test dummy encryption mode enabled [ 71.864850][ T4826] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 71.888977][ T4826] EXT4-fs (loop0): 1 truncate cleaned up [ 71.889984][ T4826] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 71.906627][ T4831] loop3: detected capacity change from 0 to 1024 [ 71.910816][ T4831] EXT4-fs: inline encryption not supported [ 71.950539][ T4831] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 71.956797][ T3774] tipc: Node number set to 2886997007 [ 71.983472][ T4331] EXT4-fs (loop3): unmounting filesystem. [ 72.119768][ T4840] netlink: 24 bytes leftover after parsing attributes in process `syz.3.121'. [ 72.280726][ T4843] netlink: 12 bytes leftover after parsing attributes in process `syz.1.122'. [ 72.470671][ T4849] loop4: detected capacity change from 0 to 4096 [ 72.476671][ T4849] EXT4-fs: inline encryption not supported [ 72.494114][ T4849] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 72.501443][ T4849] EXT4-fs (loop4): Test dummy encryption mode enabled [ 72.517573][ T4849] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a856c019, mo2=0003] [ 72.520284][ T4849] System zones: 0-5 [ 72.535172][ T4849] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 72.802527][ T4321] EXT4-fs error (device loop0): mb_free_blocks:1839: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt. [ 72.818255][ T4321] EXT4-fs (loop0): unmounting filesystem. [ 72.841293][ T4856] netlink: 'syz.2.126': attribute type 4 has an invalid length. [ 72.843878][ T4856] netlink: 17 bytes leftover after parsing attributes in process `syz.2.126'. [ 72.870824][ T4322] EXT4-fs (loop4): unmounting filesystem. [ 72.953162][ T4866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.955062][ T4866] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.794791][ T4878] tun0: tun_chr_ioctl cmd 1074025672 [ 73.795821][ T4878] tun0: ignored: set checksum enabled [ 73.810241][ T4881] loop2: detected capacity change from 0 to 512 [ 73.821158][ T4881] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 73.837756][ T4329] EXT4-fs (loop2): unmounting filesystem. [ 73.914521][ T4889] EXT4-fs: Ignoring removed orlov option [ 73.932418][ T4889] EXT4-fs (loop4): Test dummy encryption mode enabled [ 73.933594][ T4889] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 73.942678][ T4889] EXT4-fs (loop4): 1 truncate cleaned up [ 73.943785][ T4889] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 74.359701][ T4890] netlink: 104 bytes leftover after parsing attributes in process `syz.2.136'. [ 74.390771][ T4890] xt_CT: No such helper "pptp" [ 74.399863][ T4897] netlink: 24 bytes leftover after parsing attributes in process `syz.3.139'. [ 74.659466][ T4910] set_capacity_and_notify: 1 callbacks suppressed [ 74.659475][ T4910] loop0: detected capacity change from 0 to 256 [ 74.682430][ T4910] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 74.735605][ T4912] hub 8-0:1.0: USB hub found [ 74.737209][ T4912] hub 8-0:1.0: 8 ports detected [ 75.683750][ T4322] EXT4-fs error (device loop4): mb_free_blocks:1839: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt. [ 75.690991][ T4933] netlink: 24 bytes leftover after parsing attributes in process `syz.1.150'. [ 75.694304][ T4322] EXT4-fs (loop4): unmounting filesystem. [ 75.945818][ T4929] loop2: detected capacity change from 0 to 40427 [ 75.963958][ T4929] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 75.969979][ T4929] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 75.980517][ T4929] F2FS-fs (loop2): invalid crc value [ 76.282546][ T4929] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 76.328521][ T4929] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 76.330125][ T4929] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 76.387081][ T4329] syz-executor: attempt to access beyond end of device [ 76.387081][ T4329] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 76.400581][ T4963] loop4: detected capacity change from 0 to 2048 [ 76.822325][ T4963] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 76.890567][ T4973] netlink: 24 bytes leftover after parsing attributes in process `syz.0.165'. [ 77.286610][ T4963] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 77.289862][ T4963] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 77.292328][ T4963] EXT4-fs (loop4): This should not happen!! Data will be lost [ 77.292328][ T4963] [ 77.293944][ T4963] EXT4-fs (loop4): Total free blocks count 0 [ 77.294999][ T4963] EXT4-fs (loop4): Free/Dirty block details [ 77.296158][ T4963] EXT4-fs (loop4): free_blocks=4096 [ 77.297019][ T4963] EXT4-fs (loop4): dirty_blocks=560 [ 77.297947][ T4963] EXT4-fs (loop4): Block reservation details [ 77.299034][ T4963] EXT4-fs (loop4): i_reserved_data_blocks=35 [ 77.316644][ T4962] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 514 with error 28 [ 77.326736][ T4981] futex_wake_op: syz.0.166 tries to shift op by 32; fix this program [ 77.329092][ T4982] loop2: detected capacity change from 0 to 512 [ 77.330663][ T4982] EXT4-fs: Ignoring removed orlov option [ 77.337458][ T4982] EXT4-fs (loop2): Test dummy encryption mode enabled [ 77.340863][ T4982] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 77.342417][ T4979] loop3: detected capacity change from 0 to 2048 [ 77.346597][ T4982] EXT4-fs (loop2): 1 truncate cleaned up [ 77.348678][ T4982] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 77.426507][ T4979] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 77.461680][ T4988] loop4: detected capacity change from 0 to 512 [ 77.473757][ T4988] EXT4-fs (loop4): can't mount with journal_async_commit, fs mounted w/o journal [ 77.487598][ T4988] loop4: detected capacity change from 0 to 128 [ 77.611279][ T4331] EXT4-fs (loop3): unmounting filesystem. [ 77.735089][ T5005] loop0: detected capacity change from 0 to 512 [ 77.755826][ T5008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.760320][ T5008] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.772579][ T5005] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 77.943147][ T5014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.944683][ T5014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.498948][ T5011] syz.4.169: attempt to access beyond end of device [ 78.498948][ T5011] loop4: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 78.557573][ T4993] vhost-4988: attempt to access beyond end of device [ 78.557573][ T4993] loop4: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 78.708278][ T4329] EXT4-fs error (device loop2): mb_free_blocks:1839: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt. [ 78.719710][ T4329] EXT4-fs (loop2): unmounting filesystem. [ 78.738672][ T5021] loop1: detected capacity change from 0 to 4096 [ 78.760516][ T5021] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 78.848756][ T5027] loop2: detected capacity change from 0 to 512 [ 78.850663][ T5027] EXT4-fs: Ignoring removed orlov option [ 78.852061][ T5027] EXT4-fs (loop2): Test dummy encryption mode enabled [ 78.853281][ T5027] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 78.861779][ T4321] EXT4-fs (loop0): unmounting filesystem. [ 78.891864][ T5027] EXT4-fs (loop2): 1 truncate cleaned up [ 78.892800][ T5027] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 79.441758][ T4874] EXT4-fs error (device loop1): __ext4_get_inode_loc:4520: comm kworker/u4:14: Invalid inode table block 13833624164976730364 in block_group 0 [ 79.450159][ T4320] EXT4-fs (loop1): unmounting filesystem. [ 79.782558][ T4329] EXT4-fs (loop2): unmounting filesystem. [ 79.990532][ T5049] loop4: detected capacity change from 0 to 128 [ 80.006697][ T5052] loop2: detected capacity change from 0 to 512 [ 80.010109][ T5049] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 80.018182][ T5052] EXT4-fs: Ignoring removed orlov option [ 80.022527][ T5049] fscrypt (loop4, inode 12): Unsupported encryption flags (0x08) [ 80.044436][ T5052] EXT4-fs (loop2): Test dummy encryption mode enabled [ 80.046208][ T5052] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 80.053694][ T5052] EXT4-fs (loop2): 1 truncate cleaned up [ 80.061661][ T4322] EXT4-fs (loop4): unmounting filesystem. [ 80.063670][ T5052] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 80.184169][ T5057] loop4: detected capacity change from 0 to 512 [ 80.710154][ T5068] loop1: detected capacity change from 0 to 256 [ 81.035247][ T4329] EXT4-fs error (device loop2): mb_free_blocks:1839: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt. [ 81.040147][ T4329] EXT4-fs (loop2): unmounting filesystem. [ 81.067636][ T5070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.069577][ T5070] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.149208][ T5083] loop2: detected capacity change from 0 to 512 [ 81.150663][ T5083] EXT4-fs: Ignoring removed orlov option [ 81.155009][ T5083] EXT4-fs (loop2): Test dummy encryption mode enabled [ 81.156562][ T5083] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 81.163706][ T5083] EXT4-fs (loop2): 1 truncate cleaned up [ 81.164643][ T5083] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 81.228729][ T3897] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 81.271190][ T5087] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 81.557577][ T3897] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.559587][ T3897] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 81.561187][ T3897] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 81.562755][ T3897] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.571649][ T3897] usb 1-1: config 0 descriptor?? [ 81.900052][ T5090] loop1: detected capacity change from 0 to 1024 [ 81.901925][ T5090] EXT4-fs: Ignoring removed oldalloc option [ 81.904186][ T5090] EXT4-fs: Ignoring removed bh option [ 81.905131][ T5090] ext4: Unknown parameter 'rootcontext' [ 81.934878][ T5092] netlink: 20 bytes leftover after parsing attributes in process `syz.3.202'. [ 82.010192][ T3897] hid-steam 0003:28DE:1142.0001: unknown main item tag 0x0 [ 82.011087][ T4329] EXT4-fs (loop2): unmounting filesystem. [ 82.011808][ T3897] hid-steam 0003:28DE:1142.0001: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0 [ 82.021831][ T3897] hid-steam 0003:28DE:1142.0002: unknown main item tag 0x0 [ 82.028984][ T3897] hid-steam 0003:28DE:1142.0002: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0 [ 82.095721][ T3897] hid-steam 0003:28DE:1142.0001: Steam wireless receiver connected [ 82.097632][ T3897] hid-steam 0003:28DE:1142.0001: No HID_FEATURE_REPORT submitted - nothing to read [ 82.769361][ T5102] netlink: 64 bytes leftover after parsing attributes in process `syz.2.207'. [ 82.793659][ T3897] usb 1-1: USB disconnect, device number 3 [ 82.815748][ T3897] hid-steam 0003:28DE:1142.0001: Steam wireless receiver disconnected [ 82.823405][ T5109] loop2: detected capacity change from 0 to 512 [ 82.824872][ T5109] EXT4-fs: Ignoring removed orlov option [ 82.827860][ T5109] EXT4-fs (loop2): Test dummy encryption mode enabled [ 82.828896][ T5109] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 82.833237][ T5109] EXT4-fs (loop2): 1 truncate cleaned up [ 82.834199][ T5109] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 82.929963][ T5113] fido_id[5113]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 83.019521][ T55] nci: nci_rx_work: unknown MT 0x7 [ 83.623800][ T5139] ipt_CLUSTERIP: Please specify destination IP [ 83.778098][ T4329] EXT4-fs error (device loop2): mb_free_blocks:1839: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt. [ 83.782670][ T4329] EXT4-fs (loop2): unmounting filesystem. [ 83.797417][ T5145] netlink: 24 bytes leftover after parsing attributes in process `syz.3.217'. [ 83.820354][ T5147] loop2: detected capacity change from 0 to 512 [ 83.821727][ T5147] EXT4-fs: Ignoring removed orlov option [ 83.832734][ T5147] EXT4-fs (loop2): Test dummy encryption mode enabled [ 83.833793][ T5147] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 83.839396][ T5147] EXT4-fs (loop2): 1 truncate cleaned up [ 83.840550][ T5147] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 84.664341][ T5157] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 84.688055][ T4329] EXT4-fs (loop2): unmounting filesystem. [ 85.373982][ T5166] loop0: detected capacity change from 0 to 256 [ 85.378053][ T5166] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x395e47cf, utbl_chksum : 0xe619d30d) [ 85.751649][ T5175] loop2: detected capacity change from 0 to 1024 [ 85.753084][ T5175] EXT4-fs: Ignoring removed bh option [ 85.763964][ T5175] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 85.782179][ T5175] EXT4-fs error (device loop2): ext4_map_blocks:747: inode #15: block 8: comm syz.2.225: lblock 8 mapped to illegal pblock 8 (length 8) [ 85.788062][ T5175] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 85.788562][ T5179] device syzkaller0 entered promiscuous mode [ 85.790291][ T5175] EXT4-fs (loop2): This should not happen!! Data will be lost [ 85.790291][ T5175] [ 85.802618][ T5175] EXT4-fs error (device loop2): ext4_ext_remove_space:2930: inode #15: comm syz.2.225: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 85.810000][ T5175] EXT4-fs error (device loop2) in ext4_setattr:5695: Corrupt filesystem [ 85.822575][ T4329] EXT4-fs (loop2): unmounting filesystem. [ 85.919233][ T5118] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 85.975449][ T5188] loop3: detected capacity change from 0 to 1024 [ 85.986735][ T5188] EXT4-fs: Ignoring removed mblk_io_submit option [ 85.987943][ T5188] EXT4-fs: Ignoring removed bh option [ 85.995489][ T5188] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 85.997573][ T5188] EXT4-fs (loop3): bad geometry: bigalloc file system with non-zero first_data_block [ 85.997573][ T5188] [ 86.022921][ T5188] loop3: detected capacity change from 0 to 512 [ 86.023158][ T5192] loop4: detected capacity change from 0 to 512 [ 86.028645][ T5192] EXT4-fs: Ignoring removed orlov option [ 86.029949][ T5192] EXT4-fs (loop4): Test dummy encryption mode enabled [ 86.031087][ T5192] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 86.034819][ T5188] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 86.043922][ T5188] EXT4-fs (loop3): 1 truncate cleaned up [ 86.044863][ T5188] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 86.045244][ T5196] loop1: detected capacity change from 0 to 256 [ 86.052205][ T5188] EXT4-fs (loop3): re-mounted. Quota mode: writeback. [ 86.056206][ T5192] EXT4-fs (loop4): 1 truncate cleaned up [ 86.057242][ T5192] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 86.162987][ T4331] EXT4-fs (loop3): unmounting filesystem. [ 86.907338][ T4322] EXT4-fs (loop4): unmounting filesystem. [ 87.929243][ T4465] nci: nci_rx_work: unknown MT 0x7 [ 90.838288][ T5230] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 90.881158][ T5240] loop3: detected capacity change from 0 to 1024 [ 90.902246][ T5240] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 91.738615][ T4331] EXT4-fs (loop3): unmounting filesystem. [ 91.754049][ T5247] netlink: 440 bytes leftover after parsing attributes in process `syz.3.242'. [ 91.758022][ T5247] netlink: 32 bytes leftover after parsing attributes in process `syz.3.242'. [ 92.788993][ T5258] loop3: detected capacity change from 0 to 512 [ 92.794950][ T5258] EXT4-fs: Ignoring removed orlov option [ 92.799456][ T5258] EXT4-fs (loop3): Test dummy encryption mode enabled [ 92.800490][ T5258] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 92.802995][ T5258] EXT4-fs (loop3): 1 truncate cleaned up [ 92.803828][ T5258] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 93.650462][ T4331] EXT4-fs (loop3): unmounting filesystem. [ 93.664197][ T5264] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.665880][ T5264] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.189622][ T5266] netlink: 277 bytes leftover after parsing attributes in process `syz.3.249'. [ 98.208389][ T5238] device xfrm1 entered promiscuous mode [ 98.235636][ T5270] netlink: 24 bytes leftover after parsing attributes in process `syz.3.250'. [ 98.281255][ T5278] loop0: detected capacity change from 0 to 512 [ 98.332073][ T5276] loop3: detected capacity change from 0 to 4096 [ 98.334876][ T5278] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 98.341570][ T5276] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 99.040929][ T4369] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 99.045206][ T4466] nci: nci_rx_work: unknown MT 0x7 [ 99.190634][ T5276] EXT4-fs error (device loop3): __ext4_get_inode_loc:4520: comm syz.3.252: Invalid inode table block 13833624164976730364 in block_group 0 [ 99.194685][ T5276] EXT4-fs error (device loop3): __ext4_get_inode_loc:4520: comm syz.3.252: Invalid inode table block 13833624164976730364 in block_group 0 [ 99.211591][ T5303] loop4: detected capacity change from 0 to 512 [ 99.212988][ T5303] EXT4-fs: Ignoring removed orlov option [ 99.215190][ T5276] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 99.215235][ T5303] EXT4-fs (loop4): Test dummy encryption mode enabled [ 99.219747][ T5303] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 99.223866][ T5276] EXT4-fs error (device loop3): ext4_dirty_inode:6156: inode #15: comm syz.3.252: mark_inode_dirty error [ 99.236881][ T5303] EXT4-fs (loop4): 1 truncate cleaned up [ 99.237762][ T5303] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 99.256028][ T5276] EXT4-fs error (device loop3): __ext4_get_inode_loc:4520: comm syz.3.252: Invalid inode table block 13833624164976730364 in block_group 0 [ 99.270099][ T5276] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 99.273936][ T5276] EXT4-fs error (device loop3): ext4_dirty_inode:6156: inode #15: comm syz.3.252: mark_inode_dirty error [ 99.284759][ T5276] EXT4-fs warning (device loop3): ext4_read_block_bitmap_nowait:486: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 8507075309290213947 [ 99.290089][ T5276] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5952: Out of memory [ 99.291868][ T5276] EXT4-fs error (device loop3): ext4_dirty_inode:6156: inode #15: comm syz.3.252: mark_inode_dirty error [ 99.294822][ T5276] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #15: block 112: comm syz.3.252: lblock 0 mapped to illegal pblock 112 (length 1) [ 99.298540][ T5276] EXT4-fs warning (device loop3): ext4_read_block_bitmap_nowait:486: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 8507075309290213947 [ 99.305643][ T4369] usb 1-1: Using ep0 maxpacket: 8 [ 99.308352][ T4369] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 99.309707][ T4369] usb 1-1: config 179 has no interface number 0 [ 99.310736][ T4369] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 99.310824][ T5309] loop2: detected capacity change from 0 to 512 [ 99.312786][ T4369] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 99.317627][ T4369] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 99.319469][ T4369] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 99.321355][ T4369] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 99.332015][ T4369] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 99.333548][ T4369] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.333585][ T5309] EXT4-fs (loop2): can't mount with journal_async_commit, fs mounted w/o journal [ 99.339168][ T5278] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 99.349013][ T5309] loop2: detected capacity change from 0 to 128 [ 99.574477][ T4369] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input4 [ 99.787957][ T5278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.790982][ T5278] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.851464][ T4331] EXT4-fs (loop3): unmounting filesystem. [ 99.863821][ T4465] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 99.876307][ T4465] Quota error (device loop3): dquot_write_dquot: Can't write quota structure (error -117). Quota may get out of sync! [ 99.880697][ T4465] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 99.883396][ T4465] Quota error (device loop3): dquot_write_dquot: Can't write quota structure (error -117). Quota may get out of sync! [ 100.020295][ T4370] usb 1-1: USB disconnect, device number 4 [ 100.022312][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 100.023741][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 100.025230][ T4370] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 100.067441][ T4322] EXT4-fs (loop4): unmounting filesystem. [ 100.460690][ T4515] kworker/u4:12: attempt to access beyond end of device [ 100.460690][ T4515] loop2: rw=1, sector=145, nr_sectors = 896 limit=128 [ 100.595452][ T5321] hub 8-0:1.0: USB hub found [ 100.596801][ T5321] hub 8-0:1.0: 8 ports detected [ 100.673149][ T5287] EXT4-fs error (device loop0): ext4_validate_block_bitmap:420: comm ext4lazyinit: bg 0: bad block bitmap checksum [ 100.891114][ T5323] loop2: detected capacity change from 0 to 128 [ 100.903951][ T5325] loop3: detected capacity change from 0 to 256 [ 100.922165][ T5325] FAT-fs (loop3): Directory bread(block 64) failed [ 100.924432][ T5325] FAT-fs (loop3): Directory bread(block 65) failed [ 100.925688][ T5325] FAT-fs (loop3): Directory bread(block 66) failed [ 100.930058][ T5325] FAT-fs (loop3): Directory bread(block 67) failed [ 100.931165][ T5325] FAT-fs (loop3): Directory bread(block 68) failed [ 100.934288][ T5325] FAT-fs (loop3): Directory bread(block 69) failed [ 100.939604][ T5325] FAT-fs (loop3): Directory bread(block 70) failed [ 100.940762][ T5325] FAT-fs (loop3): Directory bread(block 71) failed [ 100.941994][ T5325] FAT-fs (loop3): Directory bread(block 72) failed [ 100.945240][ T5325] FAT-fs (loop3): Directory bread(block 73) failed [ 101.026729][ T4321] EXT4-fs (loop0): unmounting filesystem. [ 101.055284][ T5330] loop0: detected capacity change from 0 to 128 [ 101.185776][ T5330] syz.0.266: attempt to access beyond end of device [ 101.185776][ T5330] loop0: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 101.223212][ T5342] loop3: detected capacity change from 0 to 512 [ 101.569527][ T5281] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 101.611263][ T5349] loop4: detected capacity change from 0 to 512 [ 101.614034][ T5349] EXT4-fs: Ignoring removed orlov option [ 101.614792][ T5349] EXT4-fs (loop4): Test dummy encryption mode enabled [ 101.614808][ T5349] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 101.629466][ T5349] EXT4-fs (loop4): 1 truncate cleaned up [ 101.629484][ T5349] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 101.726680][ T5330] syz.0.266: attempt to access beyond end of device [ 101.726680][ T5330] loop0: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 101.727987][ T5354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.731955][ T5330] syz.0.266: attempt to access beyond end of device [ 101.731955][ T5330] loop0: rw=0, sector=145, nr_sectors = 8 limit=128 [ 101.734312][ T5330] syz.0.266: attempt to access beyond end of device [ 101.734312][ T5330] loop0: rw=0, sector=145, nr_sectors = 8 limit=128 [ 101.735117][ T5354] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.777531][ T5330] syz.0.266: attempt to access beyond end of device [ 101.777531][ T5330] loop0: rw=0, sector=145, nr_sectors = 8 limit=128 [ 101.784158][ T5330] syz.0.266: attempt to access beyond end of device [ 101.784158][ T5330] loop0: rw=0, sector=145, nr_sectors = 8 limit=128 [ 101.790278][ T5330] syz.0.266: attempt to access beyond end of device [ 101.790278][ T5330] loop0: rw=0, sector=145, nr_sectors = 8 limit=128 [ 101.792686][ T5330] syz.0.266: attempt to access beyond end of device [ 101.792686][ T5330] loop0: rw=0, sector=145, nr_sectors = 8 limit=128 [ 101.795346][ T5330] syz.0.266: attempt to access beyond end of device [ 101.795346][ T5330] loop0: rw=0, sector=145, nr_sectors = 8 limit=128 [ 102.364876][ T5370] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x3ffff [ 102.370283][ T5370] F2FS-fs (loop2): invalid crc value [ 102.400130][ T4475] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 102.677700][ T5370] F2FS-fs (loop2): Found nat_bits in checkpoint [ 102.775467][ T5370] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 103.180000][ T4322] EXT4-fs (loop4): unmounting filesystem. [ 103.285460][ T4475] usb 1-1: Using ep0 maxpacket: 32 [ 103.288312][ T4475] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.290031][ T4475] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.292836][ T4475] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 103.294369][ T4475] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 103.299648][ T4475] usb 1-1: Product: syz [ 103.300390][ T4475] usb 1-1: Manufacturer: syz [ 103.306031][ T4475] hub 1-1:4.0: USB hub found [ 103.519562][ T4475] hub 1-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 103.536422][ T4515] nci: nci_rx_work: unknown MT 0x7 [ 104.035669][ T4475] usb 1-1: USB disconnect, device number 5 [ 104.061853][ T27] audit: type=1326 audit(105.031:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5392 comm="syz.3.285" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa37771a8 code=0x7ffc0000 [ 104.065983][ T27] audit: type=1326 audit(105.031:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5392 comm="syz.3.285" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa37771a8 code=0x7ffc0000 [ 104.070992][ T27] audit: type=1326 audit(105.041:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5392 comm="syz.3.285" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=25 compat=0 ip=0xffffa37771a8 code=0x7ffc0000 [ 104.074749][ T27] audit: type=1326 audit(105.041:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5392 comm="syz.3.285" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa37771a8 code=0x7ffc0000 [ 104.084101][ T27] audit: type=1326 audit(105.041:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5392 comm="syz.3.285" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa37771a8 code=0x7ffc0000 [ 104.090674][ T27] audit: type=1326 audit(105.041:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5392 comm="syz.3.285" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=78 compat=0 ip=0xffffa37771a8 code=0x7ffc0000 [ 104.100295][ T5375] set_capacity_and_notify: 1 callbacks suppressed [ 104.100305][ T5375] loop1: detected capacity change from 0 to 131072 [ 104.110478][ T5395] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.111263][ T5375] F2FS-fs (loop1): invalid crc value [ 104.112093][ T5395] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.119555][ T5375] F2FS-fs (loop1): Found nat_bits in checkpoint [ 104.131233][ T5375] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 104.320281][ T5401] loop1: detected capacity change from 0 to 1024 [ 104.327001][ T5401] EXT4-fs: Ignoring removed oldalloc option [ 104.328031][ T5401] EXT4-fs: Ignoring removed bh option [ 104.329246][ T5401] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 104.331124][ T5401] EXT4-fs (loop1): bad geometry: bigalloc file system with non-zero first_data_block [ 104.331124][ T5401] [ 104.396703][ T5406] loop2: detected capacity change from 0 to 512 [ 104.398043][ T5406] EXT4-fs: Ignoring removed orlov option [ 104.457676][ T5406] EXT4-fs (loop2): Test dummy encryption mode enabled [ 104.460892][ T5406] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 104.464326][ T5406] EXT4-fs (loop2): 1 truncate cleaned up [ 104.465282][ T5406] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 105.035305][ T5413] loop3: detected capacity change from 0 to 512 [ 105.046820][ T5413] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 105.055135][ T5413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.060158][ T5413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.064667][ T5413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.068855][ T5413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.638686][ T4329] EXT4-fs (loop2): unmounting filesystem. [ 105.659149][ T5421] loop2: detected capacity change from 0 to 1024 [ 105.660795][ T5421] EXT4-fs: inline encryption not supported [ 105.667841][ T5421] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 105.682008][ T4329] EXT4-fs (loop2): unmounting filesystem. [ 105.939053][ T4331] EXT4-fs (loop3): unmounting filesystem. [ 105.984773][ T5431] loop0: detected capacity change from 0 to 4096 [ 105.995208][ T5431] EXT4-fs: inline encryption not supported [ 105.998050][ T5431] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a84ec019, mo2=0003] [ 105.999984][ T5431] System zones: 0-5 [ 106.001584][ T5431] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 106.001949][ T5433] loop3: detected capacity change from 0 to 512 [ 106.030999][ T5433] EXT4-fs: Ignoring removed mblk_io_submit option [ 106.031607][ T5431] overlayfs: invalid redirect ((null)) [ 106.032257][ T5433] EXT4-fs: inline encryption not supported [ 106.034170][ T5433] EXT4-fs: Ignoring removed mblk_io_submit option [ 106.036209][ T5433] EXT4-fs (loop3): unable to read superblock [ 106.116326][ T4321] EXT4-fs (loop0): unmounting filesystem. [ 106.119110][ T5436] loop3: detected capacity change from 0 to 512 [ 106.164820][ T5436] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 106.571407][ T5379] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 106.640566][ T5448] cgroup: fork rejected by pids controller in /syz0 [ 106.777570][ T5454] loop2: detected capacity change from 0 to 512 [ 106.788956][ T5454] EXT4-fs: Ignoring removed orlov option [ 106.793583][ T5454] EXT4-fs (loop2): Test dummy encryption mode enabled [ 106.794761][ T5454] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 106.810669][ T5454] EXT4-fs (loop2): 1 truncate cleaned up [ 106.811814][ T5454] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 106.958600][ T4331] EXT4-fs (loop3): unmounting filesystem. [ 107.073855][ T5459] loop4: detected capacity change from 0 to 40427 [ 107.080105][ T5459] F2FS-fs (loop4): Corrupted extension count (64 + 1 > 64) [ 107.081849][ T5459] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 107.094358][ T5459] F2FS-fs (loop4): invalid crc value [ 107.118681][ T5459] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 107.122942][ T5459] F2FS-fs (loop4): NAT is corrupt, run fsck to fix it [ 107.124146][ T5459] F2FS-fs (loop4): Failed to initialize F2FS node manager (-22) [ 107.246314][ T5465] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 107.248066][ T5465] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 107.250968][ T5465] F2FS-fs (loop3): invalid crc value [ 107.303771][ T4328] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 107.307699][ T4328] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 107.309443][ T4328] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 107.311491][ T4328] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 107.312840][ T4328] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 107.314184][ T4328] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 107.324751][ T5465] F2FS-fs (loop3): Found nat_bits in checkpoint [ 107.337402][ T5465] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 107.338676][ T5465] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 107.429265][ T5481] usb usb1: usbfs: process 5481 (syz.4.311) did not claim interface 0 before use [ 107.491603][ T5483] EXT4-fs (loop1): bad geometry: bigalloc file system with non-zero first_data_block [ 107.491603][ T5483] [ 107.645942][ T4431] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.646417][ T4329] EXT4-fs (loop2): unmounting filesystem. [ 107.693183][ T5491] exfat: Deprecated parameter 'namecase' [ 107.694230][ T5491] exfat: Deprecated parameter 'namecase' [ 107.709822][ T5491] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 107.717072][ T4431] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.778435][ T4515] nci: nci_rx_work: unknown MT 0x7 [ 107.807339][ T4431] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.828852][ T5473] chnl_net:caif_netlink_parms(): no params data found [ 107.839303][ T5499] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 108.396339][ T4431] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.449877][ T5473] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.451130][ T5473] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.452852][ T5473] device bridge_slave_0 entered promiscuous mode [ 108.455266][ T5473] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.460508][ T5473] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.461926][ T5473] device bridge_slave_1 entered promiscuous mode [ 108.471873][ T5473] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.474617][ T5473] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.498298][ T5473] team0: Port device team_slave_0 added [ 108.503688][ T5473] team0: Port device team_slave_1 added [ 108.513391][ T5473] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.514723][ T5473] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.519599][ T5473] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.522134][ T5473] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.523417][ T5473] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.528051][ T5473] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.540584][ T5509] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 108.747001][ T5515] hub 8-0:1.0: USB hub found [ 108.748307][ T5515] hub 8-0:1.0: 8 ports detected [ 108.887206][ T5473] device hsr_slave_0 entered promiscuous mode [ 108.905090][ T4329] EXT4-fs (loop2): unmounting filesystem. [ 108.940747][ T5517] EXT4-fs: Ignoring removed oldalloc option [ 108.955161][ T5517] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.319: invalid indirect mapped block 4294967295 (level 1) [ 108.959674][ T5517] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.319: invalid indirect mapped block 4294967295 (level 1) [ 108.964561][ T5517] EXT4-fs (loop2): 2 truncates cleaned up [ 108.965756][ T5473] device hsr_slave_1 entered promiscuous mode [ 108.966426][ T5517] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 108.985462][ T5473] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 108.986676][ T5473] Cannot create hsr debugfs directory [ 109.318585][ T4329] EXT4-fs (loop2): unmounting filesystem. [ 109.365547][ T4328] Bluetooth: hci0: command 0x0409 tx timeout [ 109.437107][ T4322] EXT4-fs (loop4): unmounting filesystem. [ 109.473646][ T5535] set_capacity_and_notify: 6 callbacks suppressed [ 109.473654][ T5535] loop4: detected capacity change from 0 to 512 [ 109.476863][ T5535] EXT4-fs: Ignoring removed orlov option [ 109.478920][ T5535] EXT4-fs (loop4): Test dummy encryption mode enabled [ 109.480187][ T5535] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 109.484092][ T5535] EXT4-fs (loop4): 1 truncate cleaned up [ 109.484980][ T5535] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 110.388712][ T4322] EXT4-fs (loop4): unmounting filesystem. [ 110.594679][ T5548] usb usb1: usbfs: process 5548 (syz.4.328) did not claim interface 0 before use [ 110.710376][ T5488] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 110.794474][ T5473] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 110.905224][ T5552] loop3: detected capacity change from 0 to 512 [ 110.940924][ T5552] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 111.393552][ T5570] loop4: detected capacity change from 0 to 512 [ 111.399616][ T5570] EXT4-fs (loop4): can't mount with journal_async_commit, fs mounted w/o journal [ 111.437866][ T5473] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 111.452113][ T4335] Bluetooth: hci0: command 0x041b tx timeout [ 111.468190][ T5473] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 111.556948][ T5473] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 111.610812][ T4431] device hsr_slave_0 left promiscuous mode [ 111.645793][ T4431] device hsr_slave_1 left promiscuous mode [ 111.726259][ T4431] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.727695][ T4431] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 111.732158][ T4431] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.733319][ T4431] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 111.739089][ T4431] device bridge_slave_1 left promiscuous mode [ 111.740753][ T4431] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.761564][ T4331] EXT4-fs (loop3): unmounting filesystem. [ 111.783661][ T5580] loop3: detected capacity change from 0 to 512 [ 111.797192][ T4431] device bridge_slave_0 left promiscuous mode [ 111.798335][ T4431] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.806851][ T5580] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 111.915679][ T4431] device veth1_macvtap left promiscuous mode [ 111.916908][ T4431] device veth0_macvtap left promiscuous mode [ 111.917993][ T4431] device veth1_vlan left promiscuous mode [ 111.918959][ T4431] device veth0_vlan left promiscuous mode [ 112.477608][ T4331] EXT4-fs (loop3): unmounting filesystem. [ 112.508560][ T5645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.510013][ T5645] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.514744][ T5645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.517738][ T5645] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.558274][ T5647] loop4: detected capacity change from 0 to 512 [ 112.559701][ T5647] EXT4-fs: Ignoring removed orlov option [ 112.561409][ T5647] EXT4-fs (loop4): Test dummy encryption mode enabled [ 112.562429][ T5647] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 112.569446][ T5647] EXT4-fs (loop4): 1 truncate cleaned up [ 112.570462][ T5647] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 113.112693][ T5657] usb usb1: usbfs: process 5657 (syz.3.340) did not claim interface 0 before use [ 113.427596][ T4322] EXT4-fs (loop4): unmounting filesystem. [ 113.518380][ T5666] loop4: detected capacity change from 0 to 512 [ 113.525876][ T4328] Bluetooth: hci0: command 0x040f tx timeout [ 113.571937][ T5666] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 114.100066][ T5673] loop3: detected capacity change from 0 to 512 [ 114.110117][ T5673] EXT4-fs (loop3): can't mount with journal_async_commit, fs mounted w/o journal [ 114.367843][ T4322] EXT4-fs (loop4): unmounting filesystem. [ 114.409867][ T5677] loop4: detected capacity change from 0 to 256 [ 114.412844][ T5677] exfat: Deprecated parameter 'utf8' [ 114.431227][ T5677] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x47dfe6af, utbl_chksum : 0xe619d30d) [ 114.457596][ T4431] team0 (unregistering): Port device team_slave_1 removed [ 114.606943][ T4431] team0 (unregistering): Port device team_slave_0 removed [ 114.611221][ T5679] loop4: detected capacity change from 0 to 40427 [ 114.623312][ T5679] F2FS-fs (loop4): Unrecognized mount option "whint_mode=user-based" or missing value [ 114.726146][ T4431] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 114.801643][ T5679] loop4: detected capacity change from 0 to 40427 [ 114.818620][ T5679] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 114.820151][ T5679] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 114.822051][ T5679] F2FS-fs (loop4): invalid crc value [ 114.834823][ T5679] F2FS-fs (loop4): Found nat_bits in checkpoint [ 114.854873][ T5679] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 114.859197][ T5679] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 114.944989][ T4431] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 115.605568][ T4335] Bluetooth: hci0: command 0x0419 tx timeout [ 115.875818][ T5692] loop3: detected capacity change from 0 to 512 [ 115.896113][ T5692] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 115.907239][ T5692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.908846][ T5692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.918661][ T5692] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 115.921129][ T5692] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 115.923047][ T5692] EXT4-fs (loop3): This should not happen!! Data will be lost [ 115.923047][ T5692] [ 115.924653][ T5692] EXT4-fs (loop3): Total free blocks count 0 [ 115.926292][ T5692] EXT4-fs (loop3): Free/Dirty block details [ 115.927215][ T5692] EXT4-fs (loop3): free_blocks=65280 [ 115.928089][ T5692] EXT4-fs (loop3): dirty_blocks=23 [ 115.929008][ T5692] EXT4-fs (loop3): Block reservation details [ 115.930009][ T5692] EXT4-fs (loop3): i_reserved_data_blocks=23 [ 116.440262][ T4331] EXT4-fs (loop3): unmounting filesystem. [ 116.676510][ T4431] bond0 (unregistering): Released all slaves [ 117.061537][ T5711] loop4: detected capacity change from 0 to 512 [ 117.084142][ T5473] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.085183][ T5711] EXT4-fs: Ignoring removed orlov option [ 117.112139][ T5711] EXT4-fs (loop4): Test dummy encryption mode enabled [ 117.113240][ T5711] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 117.132876][ T5711] EXT4-fs (loop4): 1 truncate cleaned up [ 117.133802][ T5711] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 117.835283][ T4322] EXT4-fs (loop4): unmounting filesystem. [ 125.925738][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.926793][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 129.153311][ T5719] netlink: 24 bytes leftover after parsing attributes in process `syz.1.353'. [ 129.155238][ T5724] netlink: 24 bytes leftover after parsing attributes in process `syz.1.353'. [ 129.159973][ T5728] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 129.161713][ T5728] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 129.177441][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 129.179056][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 129.206738][ T5473] 8021q: adding VLAN 0 to HW filter on device team0 [ 129.210272][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 129.211848][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 129.213229][ T4383] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.214469][ T4383] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.216432][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 129.217987][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 129.219472][ T4383] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.220582][ T4383] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.221912][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 129.254212][ T5750] loop3: detected capacity change from 0 to 512 [ 129.259058][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 129.260960][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 129.263639][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 129.266971][ T5750] EXT4-fs (loop3): can't mount with journal_async_commit, fs mounted w/o journal [ 129.268811][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 129.279083][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 129.287555][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 129.289267][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 129.293947][ T5473] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 129.302831][ T5752] loop4: detected capacity change from 0 to 512 [ 129.303312][ T5750] loop3: detected capacity change from 0 to 128 [ 129.305001][ T5745] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 129.309663][ T5473] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 129.616894][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 129.618728][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 129.621627][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 129.623242][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 129.625134][ T5755] netlink: 24 bytes leftover after parsing attributes in process `syz.1.355'. [ 129.628573][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 129.634532][ T5752] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 129.750077][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 129.751416][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 130.049363][ T5473] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 130.078387][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 130.080173][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 130.175780][ T4322] EXT4-fs (loop4): unmounting filesystem. [ 130.183759][ T4465] nci: nci_rsp_packet: unknown rsp opcode 0x3f [ 130.224336][ T5473] device veth0_vlan entered promiscuous mode [ 130.226337][ T5782] loop4: detected capacity change from 0 to 4096 [ 130.227696][ T5782] EXT4-fs: inline encryption not supported [ 130.233141][ T5782] EXT4-fs (loop4): Test dummy encryption mode enabled [ 130.242716][ T5473] device veth1_vlan entered promiscuous mode [ 130.246659][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 130.248343][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 130.249875][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 130.251261][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 130.253603][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 130.254983][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 130.279157][ T5782] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c019, mo2=0023] [ 130.280575][ T5782] System zones: 0-5 [ 130.287183][ T5782] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 130.289771][ T5785] loop1: detected capacity change from 0 to 512 [ 130.292126][ T5785] EXT4-fs: Ignoring removed orlov option [ 130.298811][ T5785] EXT4-fs (loop1): Test dummy encryption mode enabled [ 130.299892][ T5785] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 130.309798][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 130.311455][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 130.313662][ T5473] device veth0_macvtap entered promiscuous mode [ 130.321355][ T5782] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.362: bg 0: block 80: padding at end of block bitmap is not set [ 130.418535][ T5473] device veth1_macvtap entered promiscuous mode [ 130.420872][ T5785] EXT4-fs (loop1): 1 truncate cleaned up [ 130.421800][ T5785] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 130.471761][ T5473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.473773][ T5473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.475821][ T5473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.478492][ T5473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.480944][ T5473] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 130.483096][ T5473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.490512][ T5473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.492187][ T5473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.494013][ T5473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.509278][ T5473] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 130.514314][ T5473] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.518066][ T5473] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.521838][ T5473] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.523989][ T5473] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.537566][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 130.540410][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 130.542211][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 130.543932][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 130.549138][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 130.554834][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 130.699230][ T4320] EXT4-fs (loop1): unmounting filesystem. [ 130.782013][ T5797] Bluetooth: MGMT ver 1.22 [ 130.842925][ T5794] loop3: detected capacity change from 0 to 40427 [ 130.846244][ T5794] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 130.847522][ T5794] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 130.849662][ T5794] F2FS-fs (loop3): invalid crc value [ 130.862006][ T5794] F2FS-fs (loop3): Found nat_bits in checkpoint [ 130.873975][ T5794] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 130.875139][ T5794] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 131.100180][ T4322] EXT4-fs (loop4): unmounting filesystem. [ 131.158851][ T5805] loop4: detected capacity change from 0 to 256 [ 131.530365][ T5809] can0: slcan on ttyS3. [ 131.742796][ T5809] can0 (unregistered): slcan off ttyS3. [ 132.248254][ T5812] loop4: detected capacity change from 0 to 512 [ 132.266991][ T5812] EXT4-fs (loop4): can't mount with journal_async_commit, fs mounted w/o journal [ 132.333608][ T5812] loop4: detected capacity change from 0 to 128 [ 132.826320][ T4328] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 132.826349][ T4335] Bluetooth: hci5: command 0x1003 tx timeout [ 132.899967][ T5824] netlink: 24 bytes leftover after parsing attributes in process `syz.3.371'. [ 132.922999][ T5829] loop1: detected capacity change from 0 to 128 [ 132.935767][ T5829] FAT-fs (loop1): Unrecognized mount option "017777777777777777777770x0000000000000000ÿÿ" or missing value [ 133.241183][ T5776] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 133.400833][ T1613] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.407372][ T1613] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.414830][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 133.438537][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.440097][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.441441][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 133.467827][ T5838] exfat: Deprecated parameter 'utf8' [ 133.471392][ T5838] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x47dfe6af, utbl_chksum : 0xe619d30d) [ 133.481860][ T5836] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802c018, mo2=0002] [ 133.483220][ T5836] System zones: 1-20 [ 133.484534][ T5836] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 133.619637][ T4331] EXT4-fs (loop3): unmounting filesystem. [ 133.706670][ T5846] xt_hashlimit: size too large, truncated to 1048576 [ 133.707905][ T5846] x_tables: ip6_tables: SYNPROXY target: used from hooks OUTPUT, but only usable from INPUT/FORWARD [ 134.054617][ T5852] EXT4-fs (loop1): can't mount with journal_async_commit, fs mounted w/o journal [ 134.153673][ T5856] usb usb1: usbfs: process 5856 (syz.2.380) did not claim interface 0 before use [ 134.566192][ T5861] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 134.587823][ T5861] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 134.590304][ T5861] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 134.594067][ T5861] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 134.599474][ T5861] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 134.601130][ T5861] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 134.602728][ T5861] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 134.606740][ T5861] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 134.638567][ T5861] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 134.787235][ T5870] netlink: 24 bytes leftover after parsing attributes in process `syz.4.387'. [ 135.165414][ T7] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 135.172509][ T39] nci: nci_rsp_packet: unknown rsp opcode 0x3f [ 135.348381][ T7] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.350359][ T7] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 135.353646][ T7] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 135.354954][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.356455][ T7] usb 1-1: Product: syz [ 135.357163][ T7] usb 1-1: Manufacturer: syz [ 135.357939][ T7] usb 1-1: SerialNumber: syz [ 135.361802][ T7] cdc_mbim 1-1:1.0: skipping garbage [ 135.563292][ T5865] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 135.627065][ T5890] set_capacity_and_notify: 3 callbacks suppressed [ 135.627074][ T5890] loop4: detected capacity change from 0 to 256 [ 135.646828][ T5742] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 135.682731][ T5896] loop1: detected capacity change from 0 to 512 [ 135.691060][ T5896] EXT4-fs (loop1): can't mount with journal_async_commit, fs mounted w/o journal [ 136.090982][ T5902] loop4: detected capacity change from 0 to 131072 [ 136.095273][ T5902] F2FS-fs (loop4): Test dummy encryption mode enabled [ 136.097175][ T5902] F2FS-fs (loop4): invalid crc value [ 136.109767][ T5902] F2FS-fs (loop4): Found nat_bits in checkpoint [ 136.118178][ T5902] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 136.171159][ T5865] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 136.172630][ T7] cdc_mbim 1-1:1.0: setting rx_max = 16384 [ 136.374316][ T7] cdc_mbim 1-1:1.0: setting tx_max = 16384 [ 136.383184][ T7] cdc_mbim 1-1:1.0: cdc-wdm0: USB WDM device [ 136.399973][ T7] cdc_mbim 1-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.0-1, CDC MBIM, ea:59:d1:22:fd:5c [ 136.402015][ T5914] loop4: detected capacity change from 0 to 512 [ 136.410844][ T5914] FAT-fs (loop4): Directory bread(block 199916) failed [ 136.412048][ T5914] FAT-fs (loop4): Directory bread(block 199917) failed [ 136.413484][ T5914] FAT-fs (loop4): Directory bread(block 199918) failed [ 136.414705][ T5914] FAT-fs (loop4): Directory bread(block 199919) failed [ 136.419196][ T5914] FAT-fs (loop4): Directory bread(block 199920) failed [ 136.421034][ T5914] FAT-fs (loop4): Directory bread(block 199921) failed [ 136.428366][ T5914] FAT-fs (loop4): Directory bread(block 199922) failed [ 136.431934][ T5914] FAT-fs (loop4): Directory bread(block 199923) failed [ 136.446366][ T5914] FAT-fs (loop4): Directory bread(block 199916) failed [ 136.447668][ T5914] FAT-fs (loop4): Directory bread(block 199917) failed [ 136.471153][ T5920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.472765][ T5920] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.550459][ T5922] netlink: 24 bytes leftover after parsing attributes in process `syz.2.402'. [ 137.163718][ T5929] loop4: detected capacity change from 0 to 4096 [ 137.170024][ T5929] EXT4-fs: quotafile must be on filesystem root [ 137.174190][ T5929] devtmpfs: Unknown parameter 'gidile0' [ 137.406246][ T5933] loop4: detected capacity change from 0 to 40427 [ 137.414948][ T5933] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x3ffff [ 137.418668][ T5933] F2FS-fs (loop4): invalid crc value [ 137.799603][ T5933] F2FS-fs (loop4): Found nat_bits in checkpoint [ 137.891476][ T5933] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 138.063620][ T7] usb 1-1: USB disconnect, device number 6 [ 138.064803][ T7] cdc_mbim 1-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.0-1, CDC MBIM [ 138.100875][ T5938] loop2: detected capacity change from 0 to 256 [ 138.117377][ T5872] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 138.162865][ T5938] FAT-fs (loop2): Directory bread(block 64) failed [ 138.164022][ T5938] FAT-fs (loop2): Directory bread(block 65) failed [ 138.165098][ T5938] FAT-fs (loop2): Directory bread(block 66) failed [ 138.207484][ T5938] FAT-fs (loop2): Directory bread(block 67) failed [ 138.208638][ T5938] FAT-fs (loop2): Directory bread(block 68) failed [ 138.209766][ T5938] FAT-fs (loop2): Directory bread(block 69) failed [ 138.210878][ T5938] FAT-fs (loop2): Directory bread(block 70) failed [ 138.242682][ T5938] FAT-fs (loop2): Directory bread(block 71) failed [ 138.243813][ T5938] FAT-fs (loop2): Directory bread(block 72) failed [ 138.244873][ T5938] FAT-fs (loop2): Directory bread(block 73) failed [ 138.251008][ T5943] loop3: detected capacity change from 0 to 512 [ 138.283365][ T5943] EXT4-fs (loop3): can't mount with journal_async_commit, fs mounted w/o journal [ 138.423872][ T5943] loop3: detected capacity change from 0 to 128 [ 138.539251][ T5957] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 138.747805][ T5964] usb usb1: usbfs: process 5964 (syz.2.412) did not claim interface 0 before use [ 138.891590][ T5973] binder: 5971:5973 tried to acquire reference to desc 0, got 1 instead [ 138.981186][ T5984] binder_alloc: 5971: binder_alloc_buf size 16777216 failed, no address space [ 138.982788][ T5984] binder_alloc: allocated: 8 (num: 1 largest: 8), free: 12280 (num: 1 largest: 12280) [ 138.984363][ T5984] binder: cannot allocate buffer: no space left [ 138.984396][ T5984] binder: 5971:5984 transaction call to 5971:0 failed 6/29201/-28, size 0-0 line 3230 [ 139.109089][ T4475] binder: release 5971:5973 transaction 5 out, still active [ 139.110508][ T4475] binder: undelivered TRANSACTION_COMPLETE [ 139.111567][ T4475] binder: undelivered TRANSACTION_ERROR: 29201 [ 139.132116][ T4475] binder: send failed reply for transaction 5, target dead [ 139.242179][ T5998] netlink: 24 bytes leftover after parsing attributes in process `syz.0.418'. [ 139.625226][ T6010] loop3: detected capacity change from 0 to 512 [ 139.648799][ T6010] EXT4-fs (loop3): can't mount with journal_async_commit, fs mounted w/o journal [ 139.667657][ T6013] EXT4-fs: Ignoring removed mblk_io_submit option [ 139.669633][ T6013] EXT4-fs (loop1): bad geometry: bigalloc file system with non-zero first_data_block [ 139.669633][ T6013] [ 139.834114][ T6018] EXT4-fs (loop2): can't mount with journal_async_commit, fs mounted w/o journal [ 139.915516][ T39] bio_check_eod: 3744 callbacks suppressed [ 139.915526][ T39] kworker/u4:2: attempt to access beyond end of device [ 139.915526][ T39] loop3: rw=1, sector=145, nr_sectors = 896 limit=128 [ 140.001305][ T6030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.020700][ T6030] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.020722][ T6028] device syzkaller0 entered promiscuous mode [ 140.061435][ T6032] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 140.196567][ T6043] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 140.934540][ T6056] usb usb1: usbfs: process 6056 (syz.2.435) did not claim interface 0 before use [ 140.963420][ T6058] set_capacity_and_notify: 4 callbacks suppressed [ 140.963430][ T6058] loop0: detected capacity change from 0 to 128 [ 141.103310][ T6064] netlink: 24 bytes leftover after parsing attributes in process `syz.1.439'. [ 141.420512][ T6066] loop3: detected capacity change from 0 to 512 [ 141.423602][ T6066] EXT4-fs (loop3): can't mount with journal_async_commit, fs mounted w/o journal [ 141.479813][ T6066] loop3: detected capacity change from 0 to 128 [ 141.854656][ T6073] loop1: detected capacity change from 0 to 512 [ 141.857686][ T6073] EXT4-fs (loop1): can't mount with journal_async_commit, fs mounted w/o journal [ 141.943774][ T6073] loop1: detected capacity change from 0 to 128 [ 141.949436][ T6081] device syzkaller0 entered promiscuous mode [ 142.064576][ T6083] loop0: detected capacity change from 0 to 512 [ 142.426712][ T6083] EXT4-fs (loop0): 1 truncate cleaned up [ 142.427636][ T6083] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 142.881253][ T4429] kworker/u4:7: attempt to access beyond end of device [ 142.881253][ T4429] loop1: rw=1, sector=145, nr_sectors = 896 limit=128 [ 142.923912][ T6085] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 465: padding at end of block bitmap is not set [ 143.029363][ T5473] EXT4-fs (loop0): unmounting filesystem. [ 143.055447][ T6034] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 143.093865][ T6093] fuse: Bad value for 'fd' [ 143.203722][ T6102] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 143.377040][ T6095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.379413][ T6095] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.386717][ T6104] usb usb1: usbfs: process 6104 (syz.2.451) did not claim interface 0 before use [ 143.572059][ T6109] netlink: 24 bytes leftover after parsing attributes in process `syz.0.452'. [ 143.927496][ T6111] loop3: detected capacity change from 0 to 512 [ 143.929379][ T6111] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 143.931293][ T6111] EXT4-fs (loop3): SIPHASH is not a valid default hash value [ 143.963756][ T5917] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 144.033499][ T6115] loop4: detected capacity change from 0 to 4096 [ 144.059824][ T6115] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 144.097003][ T4322] EXT4-fs (loop4): unmounting filesystem. [ 144.323149][ T6124] loop0: detected capacity change from 0 to 512 [ 144.332605][ T6124] EXT4-fs (loop0): can't mount with journal_async_commit, fs mounted w/o journal [ 144.339519][ T6114] loop3: detected capacity change from 0 to 40427 [ 144.351121][ T6114] F2FS-fs (loop3): build fault injection attr: rate: 684, type: 0x3ffff [ 144.352550][ T6114] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x35f7 [ 144.352952][ T6126] EXT4-fs (loop1): can't mount with journal_async_commit, fs mounted w/o journal [ 144.363021][ T6114] F2FS-fs (loop3): invalid crc value [ 144.372745][ T6114] F2FS-fs (loop3): Found nat_bits in checkpoint [ 144.387142][ T6114] F2FS-fs (loop3): Start checkpoint disabled! [ 144.399150][ T5745] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 144.403156][ T5917] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 144.420037][ T6114] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 144.439028][ T4429] kworker/u4:7: attempt to access beyond end of device [ 144.439028][ T4429] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 144.528486][ T6136] device syzkaller0 entered promiscuous mode [ 144.837104][ T6146] EXT4-fs: Ignoring removed nomblk_io_submit option [ 144.869323][ T6146] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 144.898221][ T6146] EXT4-fs error (device loop4): ext4_find_inline_data_nolock:164: inode #15: comm syz.4.464: inline data xattr refers to an external xattr inode [ 144.911225][ T6146] EXT4-fs (loop4): Remounting filesystem read-only [ 144.920642][ T6146] EXT4-fs error (device loop4): ext4_find_inline_data_nolock:164: inode #15: comm syz.4.464: inline data xattr refers to an external xattr inode [ 144.930572][ T6146] EXT4-fs (loop4): Remounting filesystem read-only [ 144.952719][ T4322] EXT4-fs (loop4): unmounting filesystem. [ 145.046051][ T6152] EXT4-fs: Ignoring removed mblk_io_submit option [ 145.053823][ T6152] EXT4-fs: inline encryption not supported [ 145.057153][ T6152] EXT4-fs: Ignoring removed mblk_io_submit option [ 145.061601][ T6152] EXT4-fs (loop4): Test dummy encryption mode enabled [ 145.063954][ T6152] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 145.076014][ T6152] EXT4-fs (loop4): 1 truncate cleaned up [ 145.077038][ T6152] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 145.120849][ T4322] EXT4-fs (loop4): unmounting filesystem. [ 145.218593][ T4431] kworker/u4:8: attempt to access beyond end of device [ 145.218593][ T4431] loop1: rw=1, sector=145, nr_sectors = 896 limit=128 [ 145.304950][ T6162] netlink: 24 bytes leftover after parsing attributes in process `syz.4.468'. [ 145.315921][ T6163] FAT-fs (loop1): Unrecognized mount option "fowner<00000000000000000000" or missing value [ 145.377918][ T5917] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 145.448934][ T6165] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 146.303357][ T6171] set_capacity_and_notify: 6 callbacks suppressed [ 146.303366][ T6171] loop2: detected capacity change from 0 to 512 [ 146.394980][ T6171] __quota_error: 2 callbacks suppressed [ 146.394991][ T6171] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 146.400766][ T6171] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 146.402432][ T6171] EXT4-fs error (device loop2): ext4_acquire_dquot:6841: comm syz.2.472: Failed to acquire dquot type 1 [ 146.405314][ T6171] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 146.417902][ T6171] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 146.419581][ T6171] EXT4-fs error (device loop2): ext4_acquire_dquot:6841: comm syz.2.472: Failed to acquire dquot type 1 [ 146.466026][ T6171] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.472: bg 0: block 248: padding at end of block bitmap is not set [ 146.472416][ T6171] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 146.478125][ T6171] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 146.508451][ T6171] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 146.509993][ T6171] EXT4-fs error (device loop2): ext4_acquire_dquot:6841: comm syz.2.472: Failed to acquire dquot type 1 [ 146.524732][ T6178] device syzkaller0 entered promiscuous mode [ 146.525936][ T6171] EXT4-fs (loop2): 1 orphan inode deleted [ 146.526942][ T6171] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 146.589004][ T4329] EXT4-fs (loop2): unmounting filesystem. [ 146.644334][ T6181] loop2: detected capacity change from 0 to 512 [ 146.655827][ T6181] EXT4-fs: Ignoring removed orlov option [ 146.665455][ T6181] EXT4-fs (loop2): Test dummy encryption mode enabled [ 146.666564][ T6181] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 146.698663][ T6181] EXT4-fs (loop2): 1 truncate cleaned up [ 146.699650][ T6181] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 146.753438][ T4329] EXT4-fs (loop2): unmounting filesystem. [ 146.782131][ T6184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.783743][ T6184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.869056][ T6187] loop1: detected capacity change from 0 to 512 [ 146.872631][ T6187] EXT4-fs (loop1): can't mount with journal_async_commit, fs mounted w/o journal [ 147.283775][ T6194] loop0: detected capacity change from 0 to 512 [ 147.324166][ T6194] EXT4-fs (loop0): can't mount with journal_async_commit, fs mounted w/o journal [ 147.681354][ T6205] loop2: detected capacity change from 0 to 512 [ 147.703748][ T6205] EXT4-fs (loop2): can't mount with journal_async_commit, fs mounted w/o journal [ 147.824973][ T6218] loop3: detected capacity change from 0 to 512 [ 147.826519][ T6218] EXT4-fs: Ignoring removed orlov option [ 147.848156][ T6218] EXT4-fs (loop3): Test dummy encryption mode enabled [ 147.849281][ T6218] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 147.861695][ T6218] EXT4-fs (loop3): 1 truncate cleaned up [ 147.862688][ T6218] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 147.911994][ T6212] loop1: detected capacity change from 0 to 40427 [ 147.941082][ T6212] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 147.942587][ T6212] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 147.947634][ T6212] F2FS-fs (loop1): invalid crc value [ 147.967790][ T6212] F2FS-fs (loop1): Found nat_bits in checkpoint [ 147.983793][ T6212] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 147.984806][ T6212] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 148.038749][ T6227] loop2: detected capacity change from 0 to 512 [ 148.070438][ T6227] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 148.371661][ T6238] netlink: 24 bytes leftover after parsing attributes in process `syz.1.488'. [ 148.472264][ T6246] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 148.773569][ T4331] EXT4-fs error (device loop3): mb_free_blocks:1839: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt. [ 148.787107][ T4331] EXT4-fs (loop3): unmounting filesystem. [ 148.858568][ T6251] loop3: detected capacity change from 0 to 1024 [ 148.898513][ T4329] EXT4-fs (loop2): unmounting filesystem. [ 148.924534][ T6251] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 149.013320][ T6257] loop2: detected capacity change from 0 to 512 [ 149.019996][ T6257] EXT4-fs (loop2): can't mount with journal_async_commit, fs mounted w/o journal [ 149.575905][ T6264] EXT4-fs (loop1): can't mount with journal_async_commit, fs mounted w/o journal [ 149.727787][ T6269] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 149.729577][ T6269] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 149.973558][ T112] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 149.982283][ T4331] EXT4-fs (loop3): unmounting filesystem. [ 150.027810][ T6272] EXT4-fs: Ignoring removed orlov option [ 150.029220][ T6272] EXT4-fs (loop3): Test dummy encryption mode enabled [ 150.033653][ T6272] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 150.042475][ T6272] EXT4-fs (loop3): 1 truncate cleaned up [ 150.043536][ T6272] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 150.069439][ T6275] EXT4-fs (loop2): can't mount with journal_async_commit, fs mounted w/o journal [ 150.156971][ T112] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8 has an invalid bInterval 160, changing to 11 [ 150.163868][ T112] usb 1-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40 [ 150.166633][ T112] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.170529][ T112] usb 1-1: Product: syz [ 150.171347][ T112] usb 1-1: Manufacturer: syz [ 150.172089][ T112] usb 1-1: SerialNumber: syz [ 150.384418][ T6288] EXT4-fs: Ignoring removed orlov option [ 150.395651][ T6288] EXT4-fs (loop1): Test dummy encryption mode enabled [ 150.396982][ T6288] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 150.404325][ T112] usb 1-1: MIDIStreaming interface descriptor not found [ 150.412899][ T6288] EXT4-fs (loop1): 1 truncate cleaned up [ 150.413961][ T6288] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 150.482189][ T112] usb 1-1: USB disconnect, device number 7 [ 150.589165][ T6292] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 150.878554][ T5915] udevd[5915]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 151.030862][ T4331] EXT4-fs (loop3): unmounting filesystem. [ 151.097568][ T6303] netlink: 24 bytes leftover after parsing attributes in process `syz.2.506'. [ 151.186637][ T6304] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 151.304545][ T4320] EXT4-fs error (device loop1): mb_free_blocks:1839: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt. [ 151.317344][ T4320] EXT4-fs (loop1): unmounting filesystem. [ 151.358652][ T6310] set_capacity_and_notify: 6 callbacks suppressed [ 151.358736][ T6310] loop1: detected capacity change from 0 to 512 [ 151.374404][ T6310] EXT4-fs (loop1): can't mount with journal_async_commit, fs mounted w/o journal [ 151.432504][ T4322] EXT4-fs (loop4): unmounting filesystem. [ 151.458722][ T6313] loop4: detected capacity change from 0 to 1024 [ 151.461278][ T6313] EXT4-fs: Ignoring removed orlov option [ 151.784794][ T6310] loop1: detected capacity change from 0 to 128 [ 151.805162][ T6313] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 151.882017][ T4322] EXT4-fs (loop4): unmounting filesystem. [ 151.900153][ T6320] loop0: detected capacity change from 0 to 512 [ 151.915156][ T6320] EXT4-fs (loop0): can't mount with journal_async_commit, fs mounted w/o journal [ 151.926556][ T6322] loop4: detected capacity change from 0 to 512 [ 151.957597][ T6322] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 151.989639][ T6322] EXT4-fs error (device loop4): ext4_empty_dir:3139: inode #12: comm syz.4.512: Directory hole found for htree leaf block 0 [ 152.039056][ T6328] loop2: detected capacity change from 0 to 256 [ 152.048853][ T4322] EXT4-fs (loop4): unmounting filesystem. [ 152.051665][ T6328] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 152.070650][ T6328] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 152.088483][ T6328] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c91aa, utbl_chksum : 0xe619d30d) [ 152.172849][ T6336] loop3: detected capacity change from 0 to 512 [ 152.176503][ T6336] EXT4-fs: Ignoring removed orlov option [ 152.180097][ T6336] EXT4-fs (loop3): Test dummy encryption mode enabled [ 152.182240][ T6336] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 152.193727][ T6336] EXT4-fs (loop3): 1 truncate cleaned up [ 152.194650][ T6336] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 152.317795][ T6340] loop1: detected capacity change from 0 to 512 [ 152.344602][ T6340] EXT4-fs (loop1): can't mount with journal_async_commit, fs mounted w/o journal [ 152.443740][ T6345] loop1: detected capacity change from 0 to 128 [ 152.448083][ T6343] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 152.494117][ T6330] loop4: detected capacity change from 0 to 40427 [ 152.508103][ T6330] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 152.517256][ T6330] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 152.524136][ T6330] F2FS-fs (loop4): invalid crc value [ 152.535491][ T6349] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 152.622982][ T6330] F2FS-fs (loop4): Found nat_bits in checkpoint [ 152.634576][ T5473] EXT4-fs (loop0): unmounting filesystem. [ 152.637152][ T6330] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 152.638399][ T6330] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 152.685448][ T4927] kworker/u4:15: attempt to access beyond end of device [ 152.685448][ T4927] loop1: rw=1, sector=145, nr_sectors = 896 limit=128 [ 152.691811][ T6358] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d) [ 154.336063][ T6363] netlink: 24 bytes leftover after parsing attributes in process `syz.1.523'. [ 154.340730][ T6364] 9pnet_fd: Insufficient options for proto=fd [ 154.342325][ T6364] netlink: 28 bytes leftover after parsing attributes in process `syz.4.522'. [ 155.486460][ T6376] EXT4-fs (loop1): can't mount with journal_async_commit, fs mounted w/o journal [ 155.590522][ T6382] EXT4-fs (loop2): can't mount with journal_async_commit, fs mounted w/o journal [ 155.792393][ T4475] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 155.977343][ T4331] EXT4-fs (loop3): unmounting filesystem. [ 156.037400][ T4475] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.039089][ T4475] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.040609][ T4475] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 156.042679][ T4475] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 156.044538][ T6391] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 156.049711][ T4475] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.058643][ T4475] usb 1-1: config 0 descriptor?? [ 156.133356][ T6395] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 156.264176][ T4322] EXT4-fs (loop4): unmounting filesystem. [ 156.469173][ T4475] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 156.480561][ T4475] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 156.563149][ T6400] set_capacity_and_notify: 8 callbacks suppressed [ 156.563159][ T6400] loop1: detected capacity change from 0 to 40427 [ 156.604553][ T6400] F2FS-fs (loop1): Found nat_bits in checkpoint [ 156.631420][ T6400] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 156.752799][ T6400] syz.1.532: attempt to access beyond end of device [ 156.752799][ T6400] loop1: rw=2049, sector=77824, nr_sectors = 192 limit=40427 [ 156.809366][ T4320] syz-executor: attempt to access beyond end of device [ 156.809366][ T4320] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 156.841991][ T3897] usb 1-1: USB disconnect, device number 8 [ 156.843507][ T6419] plantronics 0003:047F:FFFF.0003: usb_submit_urb(ctrl) failed: -19 [ 157.014682][ T4331] EXT4-fs (loop3): unmounting filesystem. [ 157.153844][ T6431] netlink: 24 bytes leftover after parsing attributes in process `syz.3.538'. [ 157.440844][ T6432] loop1: detected capacity change from 0 to 512 [ 157.447582][ T6432] EXT4-fs: Ignoring removed orlov option [ 157.451592][ T6432] EXT4-fs (loop1): Test dummy encryption mode enabled [ 157.452659][ T6432] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 157.470657][ T6435] loop4: detected capacity change from 0 to 512 [ 157.481684][ T6435] EXT4-fs (loop4): can't mount with journal_async_commit, fs mounted w/o journal [ 157.484334][ T6432] EXT4-fs (loop1): 1 truncate cleaned up [ 157.485270][ T6432] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 157.486634][ T6438] loop2: detected capacity change from 0 to 512 [ 157.553227][ T6438] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 157.651242][ T4329] EXT4-fs (loop2): unmounting filesystem. [ 157.655566][ T5745] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 157.660506][ T6435] loop4: detected capacity change from 0 to 128 [ 157.660691][ T5745] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 157.712725][ T6446] loop2: detected capacity change from 0 to 512 [ 157.794686][ T6435] syz.4.542: attempt to access beyond end of device [ 157.794686][ T6435] loop4: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 158.219030][ T6451] loop0: detected capacity change from 0 to 512 [ 158.221932][ T6451] EXT4-fs (loop0): can't mount with journal_async_commit, fs mounted w/o journal [ 158.265547][ T5917] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 158.270115][ T6451] loop0: detected capacity change from 0 to 128 [ 158.270215][ T5917] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 158.274754][ T5917] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 158.283370][ T5917] Buffer I/O error on dev loop0, logical block 0, async page read [ 158.574243][ T6471] loop4: detected capacity change from 0 to 512 [ 158.576404][ T4320] EXT4-fs (loop1): unmounting filesystem. [ 158.602836][ T6471] [ 158.603267][ T6471] ====================================================== [ 158.604442][ T6471] WARNING: possible circular locking dependency detected [ 158.605574][ T6471] syzkaller #0 Not tainted [ 158.606292][ T6471] ------------------------------------------------------ [ 158.607533][ T6471] syz.4.553/6471 is trying to acquire lock: [ 158.608055][ T6476] loop1: detected capacity change from 0 to 512 [ 158.608615][ T6471] ffff0000cccdcc18 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: ext4_writepages+0x1b8/0x28b4 [ 158.611369][ T6471] [ 158.611369][ T6471] but task is already holding lock: [ 158.612545][ T6471] ffff0000e2706518 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x37c/0x784 [ 158.614219][ T6471] [ 158.614219][ T6471] which lock already depends on the new lock. [ 158.614219][ T6471] [ 158.615961][ T6471] [ 158.615961][ T6471] the existing dependency chain (in reverse order) is: [ 158.617449][ T6471] [ 158.617449][ T6471] -> #1 (&ei->xattr_sem){++++}-{3:3}: [ 158.618810][ T6471] down_write+0x5c/0x88 [ 158.619570][ T6471] ext4_destroy_inline_data+0x30/0x114 [ 158.620607][ T6471] ext4_writepages+0x430/0x28b4 [ 158.621467][ T6471] do_writepages+0x2b0/0x504 [ 158.622324][ T6471] filemap_fdatawrite_wbc+0x124/0x174 [ 158.623239][ T6471] file_write_and_wait_range+0x11c/0x1f4 [ 158.624209][ T6471] ext4_sync_file+0x210/0xc70 [ 158.624985][ T6471] vfs_fsync_range+0x168/0x188 [ 158.625790][ T6471] ext4_buffered_write_iter+0x47c/0x528 [ 158.626710][ T6471] ext4_file_write_iter+0x18c/0x1574 [ 158.627631][ T6471] do_iter_write+0x53c/0x940 [ 158.628447][ T6471] vfs_iter_write+0x88/0xac [ 158.629286][ T6471] iter_file_splice_write+0x520/0xa7c [ 158.630279][ T6471] direct_splice_actor+0xe4/0x134 [ 158.631238][ T6471] splice_direct_to_actor+0x3a0/0x954 [ 158.632225][ T6471] do_splice_direct+0x168/0x25c [ 158.633207][ T6471] do_sendfile+0x478/0xcc8 [ 158.634053][ T6471] __arm64_sys_sendfile64+0x134/0x36c [ 158.635048][ T6471] invoke_syscall+0x98/0x2b4 [ 158.635895][ T6471] el0_svc_common+0x138/0x258 [ 158.636781][ T6471] do_el0_svc+0x58/0x130 [ 158.637545][ T6471] el0_svc+0x58/0x128 [ 158.638290][ T6471] el0t_64_sync_handler+0x84/0xf0 [ 158.639204][ T6471] el0t_64_sync+0x18c/0x190 [ 158.640008][ T6471] [ 158.640008][ T6471] -> #0 (&sbi->s_writepages_rwsem){.+.+}-{0:0}: [ 158.641464][ T6471] __lock_acquire+0x2880/0x6800 [ 158.642498][ T6471] lock_acquire+0x20c/0x63c [ 158.643420][ T6471] percpu_down_read+0x70/0x2a8 [ 158.644353][ T6471] ext4_writepages+0x1b8/0x28b4 [ 158.645286][ T6471] do_writepages+0x2b0/0x504 [ 158.646136][ T6471] __writeback_single_inode+0x164/0x1554 [ 158.647215][ T6471] writeback_single_inode+0x1cc/0x740 [ 158.648168][ T6471] write_inode_now+0x150/0x1cc [ 158.649045][ T6471] iput+0x5bc/0x7e4 [ 158.649741][ T6471] ext4_xattr_block_set+0x1454/0x2880 [ 158.650731][ T6471] ext4_expand_extra_isize_ea+0xe5c/0x17ac [ 158.651762][ T6471] __ext4_expand_extra_isize+0x298/0x358 [ 158.652849][ T6471] __ext4_mark_inode_dirty+0x3e4/0x784 [ 158.653873][ T6471] ext4_evict_inode+0xb64/0x1278 [ 158.654876][ T6471] evict+0x3e0/0x828 [ 158.655585][ T6471] iput+0x754/0x7e4 [ 158.656304][ T6471] ext4_process_orphan+0x240/0x2b4 [ 158.657222][ T6471] ext4_orphan_cleanup+0x920/0x1060 [ 158.658174][ T6471] ext4_fill_super+0x594c/0x61b0 [ 158.659043][ T6471] get_tree_bdev+0x358/0x544 [ 158.659909][ T6471] ext4_get_tree+0x28/0x38 [ 158.660721][ T6471] vfs_get_tree+0x90/0x274 [ 158.661535][ T6471] do_new_mount+0x228/0x810 [ 158.662369][ T6471] path_mount+0x5bc/0xe80 [ 158.663171][ T6471] __arm64_sys_mount+0x49c/0x59c [ 158.664072][ T6471] invoke_syscall+0x98/0x2b4 [ 158.664887][ T6471] el0_svc_common+0x138/0x258 [ 158.665717][ T6471] do_el0_svc+0x58/0x130 [ 158.666529][ T6471] el0_svc+0x58/0x128 [ 158.667328][ T6471] el0t_64_sync_handler+0x84/0xf0 [ 158.668246][ T6471] el0t_64_sync+0x18c/0x190 [ 158.669115][ T6471] [ 158.669115][ T6471] other info that might help us debug this: [ 158.669115][ T6471] [ 158.670817][ T6471] Possible unsafe locking scenario: [ 158.670817][ T6471] [ 158.672067][ T6471] CPU0 CPU1 [ 158.672985][ T6471] ---- ---- [ 158.673904][ T6471] lock(&ei->xattr_sem); [ 158.674642][ T6471] lock(&sbi->s_writepages_rwsem); [ 158.675948][ T6471] lock(&ei->xattr_sem); [ 158.677068][ T6471] lock(&sbi->s_writepages_rwsem); [ 158.677963][ T6471] [ 158.677963][ T6471] *** DEADLOCK *** [ 158.677963][ T6471] [ 158.679285][ T6471] 3 locks held by syz.4.553/6471: [ 158.680198][ T6471] #0: ffff0000cccde0e0 (&type->s_umount_key#26/1){+.+.}-{3:3}, at: alloc_super+0x1a4/0x800 [ 158.682096][ T6471] #1: ffff0000cccde650 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x3e0/0x1278 [ 158.683771][ T6471] #2: ffff0000e2706518 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x37c/0x784 [ 158.685636][ T6471] [ 158.685636][ T6471] stack backtrace: [ 158.686597][ T6471] CPU: 0 PID: 6471 Comm: syz.4.553 Not tainted syzkaller #0 [ 158.687819][ T6471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 158.689574][ T6471] Call trace: [ 158.690150][ T6471] dump_backtrace+0x1c0/0x1ec [ 158.690970][ T6471] show_stack+0x2c/0x3c [ 158.691717][ T6471] __dump_stack+0x30/0x40 [ 158.692429][ T6471] dump_stack_lvl+0xf4/0x15c [ 158.693217][ T6471] dump_stack+0x1c/0x5c [ 158.693900][ T6471] print_circular_bug+0x148/0x1b0 [ 158.694714][ T6471] check_noncircular+0x264/0x2f8 [ 158.695576][ T6471] __lock_acquire+0x2880/0x6800 [ 158.696438][ T6471] lock_acquire+0x20c/0x63c [ 158.697193][ T6471] percpu_down_read+0x70/0x2a8 [ 158.698106][ T6471] ext4_writepages+0x1b8/0x28b4 [ 158.698951][ T6471] do_writepages+0x2b0/0x504 [ 158.699741][ T6471] __writeback_single_inode+0x164/0x1554 [ 158.700693][ T6471] writeback_single_inode+0x1cc/0x740 [ 158.701521][ T6471] write_inode_now+0x150/0x1cc [ 158.702374][ T6471] iput+0x5bc/0x7e4 [ 158.703089][ T6471] ext4_xattr_block_set+0x1454/0x2880 [ 158.704014][ T6471] ext4_expand_extra_isize_ea+0xe5c/0x17ac [ 158.705062][ T6471] __ext4_expand_extra_isize+0x298/0x358 [ 158.706137][ T6471] __ext4_mark_inode_dirty+0x3e4/0x784 [ 158.707067][ T6471] ext4_evict_inode+0xb64/0x1278 [ 158.707929][ T6471] evict+0x3e0/0x828 [ 158.708606][ T6471] iput+0x754/0x7e4 [ 158.709270][ T6471] ext4_process_orphan+0x240/0x2b4 [ 158.710205][ T6471] ext4_orphan_cleanup+0x920/0x1060 [ 158.711103][ T6471] ext4_fill_super+0x594c/0x61b0 [ 158.711934][ T6471] get_tree_bdev+0x358/0x544 [ 158.712718][ T6471] ext4_get_tree+0x28/0x38 [ 158.713499][ T6471] vfs_get_tree+0x90/0x274 [ 158.714276][ T6471] do_new_mount+0x228/0x810 [ 158.715033][ T6471] path_mount+0x5bc/0xe80 [ 158.715758][ T6471] __arm64_sys_mount+0x49c/0x59c [ 158.716579][ T6471] invoke_syscall+0x98/0x2b4 [ 158.717330][ T6471] el0_svc_common+0x138/0x258 [ 158.718088][ T6471] do_el0_svc+0x58/0x130 [ 158.718917][ T6471] el0_svc+0x58/0x128 [ 158.719549][ T6471] el0t_64_sync_handler+0x84/0xf0 [ 158.720407][ T6471] el0t_64_sync+0x18c/0x190 [ 158.725840][ T4335] Bluetooth: hci1: command 0x0406 tx timeout [ 158.726018][ T6471] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #11: comm syz.4.553: iget: bad extra_isize 90 (inode size 256) [ 158.726825][ T4335] Bluetooth: hci2: command 0x0406 tx timeout [ 158.729394][ T6471] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.553: error while reading EA inode 11 err=-117 [ 158.730086][ T4335] Bluetooth: hci4: command 0x0406 tx timeout [ 158.732342][ T6471] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2800: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 158.733196][ T4335] Bluetooth: hci3: command 0x0406 tx timeout [ 158.736762][ T6471] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #11: comm syz.4.553: iget: bad extra_isize 90 (inode size 256) [ 158.749490][ T6471] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.553: error while reading EA inode 11 err=-117 [ 158.751827][ T6471] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #18: comm syz.4.553: iget: bad extra_isize 90 (inode size 256) [ 158.754407][ T6471] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.553: error while reading EA inode 18 err=-117 [ 158.757945][ T6471] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #18: comm syz.4.553: iget: bad extra_isize 90 (inode size 256) [ 158.763022][ T6476] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 158.763505][ T6471] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.553: error while reading EA inode 18 err=-117 [ 158.768882][ T6471] EXT4-fs (loop4): 1 orphan inode deleted [ 158.770176][ T6471] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 158.778083][ T6478] device syzkaller0 entered promiscuous mode [ 158.779514][ T4320] EXT4-fs (loop1): unmounting filesystem. [ 158.780131][ T6471] EXT4-fs (loop4): unmounting filesystem.