last executing test programs: 1m25.871599439s ago: executing program 4 (id=60): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000f40)=[{{&(0x7f0000000080)={0xa, 0x4e22, 0x4, @dev={0xfe, 0x80, '\x00', 0x1d}, 0xa}, 0x1c, &(0x7f0000000280)=[{&(0x7f00000022c0)='t', 0x1}], 0x1}}, {{&(0x7f0000000000)={0xa, 0x4e24, 0x400004, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xb}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000040)='>', 0x1}], 0x1}}], 0x2, 0x40c4) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000240)={0x0, 0x9}, &(0x7f00000003c0)=0x8) 1m25.622878102s ago: executing program 4 (id=66): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4010, &(0x7f0000000400)={[{@nombcache}, {@barrier_val={'barrier', 0x3d, 0x3ff}}, {@stripe={'stripe', 0x3d, 0x7}}, {@sb={'sb', 0x3d, 0x9}}, {@data_ordered}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1000}}, {@test_dummy_encryption}, {@test_dummy_encryption}]}, 0xd, 0x5f6, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x31) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f0000000100)={0x0, 0x7fff, 0x10, 0x7fff, 0xfff, 0x1000, 0x200, 0xce, 0xd}) 1m25.139352409s ago: executing program 4 (id=73): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xc312}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$TUNSETCARRIER(r0, 0x400454e2, 0x0) 1m24.770715974s ago: executing program 4 (id=78): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000680)={[{@test_dummy_encryption}, {@init_itable}, {@noload}]}, 0x3, 0x470, &(0x7f0000001240)="$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") syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x80a053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file2\x00', 0xc08, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) 1m23.878246248s ago: executing program 4 (id=87): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x90, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x0, 0x2, 0x9, 0x5}}}}, @TCA_STAB={0x48, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7d, 0x9, 0x7, 0xfffffff8, 0x3, 0x5, 0xb}}, {0x4}}, {{0x1c, 0x1, {0xa9, 0x2, 0x2, 0x400, 0x1, 0x4ee6c7bc, 0x6fd6, 0x1}}, {0x6, 0x2, [0x7]}}]}]}, 0x90}}, 0x44080) 1m23.239441607s ago: executing program 4 (id=91): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000300)={0xd, {"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", 0x1000}}, 0x1006) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000009c0)={0x3d, 0x0, [{0x5000, 0x84, &(0x7f00000001c0)=""/132}, {0x8000000, 0xf1, &(0x7f0000000500)=""/241}, {0xdddd0000, 0x1000, &(0x7f0000001600)=""/4096}, {0x0, 0x83, &(0x7f0000000280)=""/131}, {0x5000, 0x2a, &(0x7f0000000040)=""/42}, {0x80a0000, 0x51, &(0x7f0000000600)=""/81}, {0x8080000, 0x66, &(0x7f0000000680)=""/102}, {0x6000, 0xf5, &(0x7f00000008c0)=""/245}]}) 1m23.119454669s ago: executing program 32 (id=91): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000300)={0xd, {"a2e3ad21ed0d09f91b3d090987f70e06d038e7ff7fc6e5539b0d650e8b089b3f35006c090890e0878f0e1ac6e7049b336d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d074a0936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15ffffffffffffffff1243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc10700000032d0ad7bc946813591bd8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f423500c7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9cc8036cbd65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x1000}}, 0x1006) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000009c0)={0x3d, 0x0, [{0x5000, 0x84, &(0x7f00000001c0)=""/132}, {0x8000000, 0xf1, &(0x7f0000000500)=""/241}, {0xdddd0000, 0x1000, &(0x7f0000001600)=""/4096}, {0x0, 0x83, &(0x7f0000000280)=""/131}, {0x5000, 0x2a, &(0x7f0000000040)=""/42}, {0x80a0000, 0x51, &(0x7f0000000600)=""/81}, {0x8080000, 0x66, &(0x7f0000000680)=""/102}, {0x6000, 0xf5, &(0x7f00000008c0)=""/245}]}) 11.233402076s ago: executing program 5 (id=1257): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0x6, 0x31, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x6c4, &(0x7f0000000080)={0x0, 0x4075, 0x18, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 10.065443844s ago: executing program 5 (id=1262): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd28, 0x8020, {0x0, 0x0, 0x0, 0x0, {0x5, 0x8}, {}, {0xa, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x200c0e9}, 0x20000004) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x10400, &(0x7f0000000280)={[{@noinline_data}, {@nocheckpoint_merge}, {@alloc_mode_def}, {@checkpoint_diasble}, {@flush_merge}, {@fault_injection={'fault_injection', 0x3d, 0x4f1}}, {@noinline_dentry}, {@noacl}, {@six_active_logs}, {@alloc_mode_def}, {@noextent_cache}, {@compress_chksum}, {@checkpoint_diasble}]}, 0x1, 0x550c, &(0x7f00000089c0)="$eJzs3M1rI2UYAPAn7Xa/XYt48LYDi9DKJjT9WPRWdRc/sEtZ9eBJ0yQN2U0ypUnT2pMHj+LB/0QUPHn0b/Dg2Zt4ULwJSmYmuvUDhKaN3f5+MHnmffPmmecNy8IzUxLAuTWf/PJTKW7ElYiYjYjrEdl5qTgy63l4LiJuRsTMY0epmP9j4mJEXI2IG6Pkec5S8dZnt4e31n588+evv7104drnX303vV0D0/Z8RHR38vP9bh7TVh4fFvO1YTuL3dVhEfM3uo+KcZrH/eZWlmG/Nl5Xy+JKK1+f7uz1R3G7U6uPYqu9nc3v9PIL9oetcZ7sAw9ru9m40dzKYrufZrF1mNd1cJj/33bYH+R5GkW+D7P0MRiMYz7fPGjm+9l5lMV6b1DM53nTRvNgFIdFLC4X9bTTyOrYOs43/f/2Vru3d5AMm7v9dtpL1irVFyvVO+XqbtpoDpqr5Vq3cWc1WWh1RsvKg2atu95K01anWamn3cVkoVWvl6vVZOFuc6td6yXVamWlslReWyzObiev3X836TSShVF8pd3bG7Q7/WQ73U3yTywmy5WVlxaTW9Xk7Y3NZPPBvXsbm++8f/e9+y9vvPFqsehvZb0Qy0vLy+XqUnm5uniO9v9xUXSyMLH9w7GUpl0AwNmj/wem4eT6/90HESff/4f+fyLOVP87LmuC/e953z8ci/4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODc+n7ui9ezk/l8fK2Yf6qYeqYYlyJiJiJ++wezcfFIztkiz9y/rJ/7Sw3flCLLMLrGpeK4GhHrxfHr0yf9LQAAAMCT68uPbn6ad+v5y/y0C+I05TdtZq5/MKF8pYiYm/9hQtlmRi/PTihZ9u/7QhxMKFt2A+vyhJLlt9wuTCrbfzJ7JFx+LJTyMHOq5QAAAKfiaCdwul0IAAAAp+mTaRfAdJRi/Chz/Cw4+8v7Px8IXjkyAgAAAM6g0rQLAAAAAE5c1v/7/T8AAAB4suW//wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPzOzv3cJg5EcQB+Nnhh/2nRau/byt6gjC1hj3uMKCBNUEAOpIU0QA3klhIiiPA4BCIOkTy2lej7JGcylvnxBsFhZqQBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACALt1X68Xt1e/rtjm7fTt5RgMAAABcsq3Wi/qfWep/be5/b279bPpFRJQRcWnuPopPZ5mjJqd6ef7m9PnqVQ13EXXC4T0mzfUlIv401+OPrj8FAAAA+Lg2y9U8zdbTn9nQBdGntGhTfvubKa+IiGr2kCmtPOT9yhRWf7/H8T9TWr2ANc0UlpbcxrnS3qT+uR9X7aYnTZGa8uLLjkVmGzsAANCj0VnT7ywEAACAPv0bugCGUcTzVuZxK3CSmmZ77/NZDwAAAHiHiqELAAAAADpXz/97Ov9v7/w/AAAAGEY6/w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAubav1YrNczdvm7Pbt5BkNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwxP68o0AIhEEY7F3fmcz9DysNmpqaVIHw8TcGAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJvf/eX/xNQ4k8y9NpaeR5K1U2Pr1Ng7N47+ML5+DQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAX+/OSAiEQBFEwZ/zvpO9/WEnQM4gQAQ2PKmrRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwRb/75f/E1DiTzJ02lo5HkrWrxtZVY+9B4+jBePs3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXO/fzGkcVBwD8zc7OxlbFNcoeIqLgQS92u62tvYkHJXjwTxBCuq2xW3+0OdhSxFy8Sc69iB5FBCXe+j/0nEAu8ZbDHiJ4jszszO7kB7j+6Mwm+XzgzfvuMMz7vlkI+c57CQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEBh+O4kjtNDexQ38nObew+W037rUJ96tL69kLY0jqpM+mR4ufwh6ozDvTqSAQAA4GyIi/o+hLCTbCymfaOd1f9JcU1a83//7Cgu6vnDdX/RF7V/2n77dffF8UDt0TjpTW+sDPoXj6bSfHKznG3P/e0VzezJZ+9e4uwLaXyw9sIwyZ5n9O3jx++1snCuimwBgH/jQtHnQfH7UNr36kwMgDOjWSq8i/o/btebEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAVhmvh6SKOQggLzUmc2tp7sHxc/2h9e6FoVx8+XA9fT+6Z3iIJIdxYGfQvVjqb2Xb33v1bS4NB/071wSshhLpGfyef/q2Pprg4hFqej+D/Cfbn8i97RvI5IUGNP5QAADiVkryldf1OsrGYnovmQ9j/4WD9/3opDlPW/7sfX90sj1Wu/3uVzXD2dVdvf969e+/+myu3l272b/Y/fetS7+3e5WtXrlzrZu9Kut6YAAAA8N+08lau/xvzR9f/z5fiMGX9/8V3va/KY8Xq/2NNFv3qzgQAAOBse/7VP/+IjjkftVrhy6XV1Tu90XH8+dLoWEOq/9hc3sr1fzxfd1YAAABAFYZr0YH1/+ulOEy5/v/Mjy/9XL5nHEI4l6//X1j+bHC9uunMtCr+nLjuOQIAAFCvc3krr/8n2f7/xnjLQyOE8MZrozj/N4BT1f/x+9/8VB6rvP//cnVTnEmNzuh5ZH0nhGan7owAAAA4zZ7KW1rs/55sLH7yy/kPW/b/AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFTtrwAAAP//RAE/8A==") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x4008f510, &(0x7f0000000180)={0x1000, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x8, 0x9, 0x3, 0x2401}) 7.52885444s ago: executing program 5 (id=1266): syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000080)='./file1\x00', 0x10, &(0x7f0000000100)=ANY=[], 0x5, 0xa5a, &(0x7f0000001b40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000d80)='./file1\x00', 0x143042, 0x0) pwrite64(r0, &(0x7f0000000080)="8e", 0x1, 0x709c) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000280)={0xc, 0x8005, 0x1, 0xe, 0x2, 0x0, [{0x80000000, 0x5, 0x80}, {0x4, 0x401, 0x2, '\x00', 0x108}]}) 5.112071986s ago: executing program 5 (id=1282): unshare(0x8040600) syz_mount_image$f2fs(&(0x7f0000000100), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f00000006c0)=ANY=[], 0x25, 0x5586, &(0x7f00000079c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$NBD_SET_SOCK(r0, 0x8004587d, 0xffffffffffffffff) 4.381764676s ago: executing program 2 (id=1303): pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r0, 0xcf) keyctl$restrict_keyring(0x1d, r1, 0x0, 0x0) 4.282692408s ago: executing program 2 (id=1294): sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="010000000000f3dd3d0726a40284fcea64"], 0x1c}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x2}) ioctl(r0, 0x8b32, &(0x7f0000000040)) 4.15940352s ago: executing program 2 (id=1296): r0 = socket(0x11, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x1000000, {0x0, 0x0, 0x12, r1, {0x0, 0x300}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4], [0x0, 0x0, 0x0, 0x0, 0xd645, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffff]}}]}}]}, 0x8c}, 0x1, 0x7a00}, 0x4000000) 4.13421792s ago: executing program 2 (id=1297): syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="757365725f78617474722c61636c2c00abc39e1ba3ee498e1d8c12531462cd5519277b030853d25b421cc41e0b90996e5f28728a3bc9df609ba1a22568735bd5f06e6f25829fce8ee7fdde9d092508e3df606b9036557dfa085395e37c67337d522ef3d3a6a08578f19ed4d0753564c43e"], 0x3, 0x1bf, &(0x7f00000000c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x400, 0x0) fadvise64(r0, 0x0, 0x20004101, 0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) 3.081147605s ago: executing program 1 (id=1301): r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="20000000000000008400000002000000040045"], 0x20, 0x48800}, 0xc0) 2.970147867s ago: executing program 5 (id=1302): openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x20002, 0x0) getpid() r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 2.7265265s ago: executing program 1 (id=1306): pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r0, 0xcf) keyctl$restrict_keyring(0x1d, r1, 0x0, 0x0) 2.679391731s ago: executing program 1 (id=1310): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001300290afefffffffddbdf2507000000", @ANYRES32=r1, @ANYBLOB="040400000000000014"], 0x34}}, 0x8800) 2.567971243s ago: executing program 1 (id=1312): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000900)=0x400, 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@broadcast, @random="e23dfb9c6ac7", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote}}}}}}, 0x0) recvmmsg(r0, &(0x7f0000004440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x30, 0x0) 1.813754534s ago: executing program 0 (id=1318): pipe2$watch_queue(&(0x7f0000001180), 0x80) unshare(0x20000400) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x4, 0x0, 0x6}, 0x1d, [0x8000, 0x78, 0xf, 0x9, 0x80, 0x2, 0x203, 0x7e, 0x6, 0x4b, 0x39cc1919, 0x40, 0x9, 0x5, 0xffff2d37, 0xffffffff, 0x6, 0x7, 0x0, 0x5, 0x3, 0x3, 0x5, 0x3c5b, 0x1, 0x1000, 0x9, 0x3, 0x15bb, 0x3ca, 0xe65f, 0x3, 0x7, 0x3, 0x7fff, 0x7, 0x80000000, 0xa72, 0x3, 0x9, 0x0, 0x71, 0x407, 0x5, 0x1, 0x5, 0x9, 0x3a, 0x7, 0x6, 0x6, 0xfffbffff, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x4, 0x9, 0x8, 0x7, 0x21, 0x40], [0x10000007, 0x100, 0x800, 0x8000, 0x10, 0xffeffff3, 0x8, 0x200c7, 0xf9, 0x10, 0x2bf, 0x6c9, 0xfff, 0xfffffffc, 0x5, 0x0, 0xd14, 0x5, 0x2f, 0xe, 0x4312, 0x78, 0xea4, 0x0, 0x4, 0x24, 0x8000, 0x9, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x5, 0x0, 0x7f9, 0x0, 0x2, 0x2, 0x9, 0x5, 0x9, 0x0, 0x800000d, 0x6, 0x2007, 0xd, 0x1, 0xfe000000, 0xffff, 0x2, 0x7b, 0x9, 0x3, 0x3, 0x9, 0x1, 0x7, 0x0, 0x9, 0x48c93690, 0x42, 0xffff], [0x7, 0xf5fd, 0x0, 0x5, 0x1, 0x100, 0x8d2, 0x9, 0x800003, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x5, 0x20000005, 0x0, 0x1ef, 0x5, 0x6, 0x86, 0x3, 0x0, 0x3e7, 0xa, 0x5, 0x2, 0x5, 0x3, 0x8, 0x8, 0x6cfc, 0x5, 0x39, 0x800003, 0x200, 0x80, 0x3, 0x4e0a, 0x7, 0x1000, 0xa2, 0x7, 0x9, 0x5, 0x6, 0xac8, 0xffffffff, 0x2, 0x11, 0x7ff, 0xfffffff9, 0x0, 0x10000, 0xffff, 0x2b98, 0x6, 0x4, 0x120000, 0xbe, 0x0, 0xa2ed, 0x2, 0x25], [0x9, 0xbb31, 0x7, 0xb, 0x5, 0x7, 0xa, 0x80000006, 0x0, 0x5, 0x7d, 0xc9, 0x6, 0x6, 0x8, 0x57b, 0x7, 0x10000, 0x6, 0x7ffd, 0xfffd, 0x4, 0x20000, 0x5, 0xe8a0556, 0x2, 0x14c, 0x60a6, 0x6, 0x6, 0x3, 0x80000000, 0x5, 0x8, 0xce, 0xee1, 0xfffff000, 0x179, 0x3, 0x7e, 0x100, 0x9600, 0x56e, 0x2, 0x1007, 0x40000006, 0x1, 0x0, 0x8, 0x8, 0x30b1d693, 0xa1f, 0xc, 0x800007, 0xfffffffe, 0x3, 0x0, 0x4, 0x7, 0x2bf, 0x0, 0x200, 0xffff3441, 0x2]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1.796581754s ago: executing program 0 (id=1319): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x6d89}, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x101, 0x1}) io_uring_enter(r1, 0x8aa, 0x0, 0x0, 0x0, 0x0) 1.669746946s ago: executing program 3 (id=1320): r0 = getpid() r1 = openat$uhid(0xffffff9c, &(0x7f0000000280), 0x2, 0x0) r2 = epoll_create1(0x0) kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, r1, &(0x7f0000000340)={r2, 0xffffffffffffffff, 0x8}) 1.669472406s ago: executing program 0 (id=1321): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_clone(0x4d800000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)="93") r0 = getpid() process_vm_readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000100)=""/247, 0xf7}], 0x1, &(0x7f0000000280)=[{&(0x7f00000007c0)=""/4096, 0x1000}], 0x1, 0x0) 1.669318316s ago: executing program 1 (id=1322): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x2, 0x0, @loopback, 0x2009}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000080)=0xfffffffe, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 1.602586277s ago: executing program 1 (id=1323): syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f00000001c0)={[{@journal_async_commit}, {@heartbeat_none}, {@usrquota}, {@inode64}, {@heartbeat_none}, {@usrquota}]}, 0x0, 0x4703, &(0x7f0000004800)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000002700)=ANY=[], 0x1015, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140), &(0x7f0000000380)={0x0, 0xfb, 0x51, 0x0, 0x40, "3308aff97d202dc0ad20bbf1c2273d47", "3334db267ce0fbd1ffe4b4bfd72a2db9680d1a4ef7ef0a9792bf49bbc9b16fb1685b692b1b5871167bdeb6bdfc3a2c0353fa40ceb336bd843418d050"}, 0x51, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, 0x0, 0x2) 1.576527887s ago: executing program 3 (id=1324): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000140)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000002500000008000300", @ANYRES32=r2, @ANYBLOB="0a0006000802110000010000180050800400050005000200458dc67a566bc7bd00000000040034000800350004000000080026"], 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x40050) 1.475609369s ago: executing program 0 (id=1325): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="62a02a3a3409777772"], 0xa) 1.40744429s ago: executing program 3 (id=1326): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)={0x20, 0x7, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040}, 0x0) 1.40718483s ago: executing program 0 (id=1327): r0 = syz_io_uring_setup(0x10e, &(0x7f0000000040)={0x0, 0x5337, 0x1, 0x0, 0x805}, &(0x7f0000000340)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, 0x0, 0x0, 0x4008001}) io_uring_enter(r0, 0x3516, 0x100000, 0x0, 0x0, 0x0) 1.322083951s ago: executing program 0 (id=1328): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@newqdisc={0x45c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x8, 0x1, 0xffff0001, 0x0, 0x8, 0x3ff, 0x10000000, 0x7fffffff, 0xbc, 0x5, 0x6, 0x4, 0x7, 0x10, 0x7, 0x9, 0xcbc0, 0x400, 0x98a, 0x6, 0x6, 0xf, 0x3, 0x1, 0xfffffffd, 0x1, 0x1, 0xfff, 0xfffffffe, 0xaf, 0x7, 0x49, 0x6, 0x4, 0x10, 0xe, 0x1000001, 0x80, 0xe, 0x5, 0x100, 0x9, 0x4, 0x5, 0xffff, 0x8, 0x9, 0x3, 0x5, 0x44, 0xb, 0x0, 0x800, 0x2, 0x400, 0x0, 0x1, 0x3ff, 0x0, 0x9, 0x8c5, 0xfffffffd, 0x2, 0x0, 0x9, 0x7, 0x7, 0x40, 0x6aeb, 0x2, 0x2, 0x3, 0x5, 0x1, 0x44, 0x8, 0x2d4f, 0x2, 0x6, 0x8, 0x96e, 0x8, 0x3, 0x8, 0x0, 0x7, 0xc53, 0x0, 0x5, 0xfffffffb, 0x5, 0x8, 0x800, 0x81, 0x0, 0x2, 0x9, 0x1, 0x1ff, 0x1, 0x7, 0x7ff, 0x7fffffff, 0x4, 0x5, 0x402, 0x5, 0x6, 0x8, 0x0, 0x9, 0x7, 0x2, 0x80, 0x5, 0xf7e2, 0xd53, 0x7, 0xf, 0x7, 0x233bb4ea, 0xfffff202, 0x1, 0x11, 0x4, 0x3, 0x402, 0x6, 0x0, 0x14, 0x7, 0x7, 0x0, 0x6, 0xfffffffd, 0x3, 0x1, 0xffffffff, 0x10000, 0x1ff, 0x10000, 0x401, 0x0, 0x8000, 0x75089b47, 0x0, 0x0, 0x100, 0x6, 0x800, 0x4, 0x7fff, 0x0, 0xfffffffe, 0x9, 0x8, 0x7, 0x1, 0x4, 0xff, 0x38, 0x3, 0x1ff, 0x3ec, 0x3, 0x7fffffff, 0x4, 0x5, 0x943, 0x2, 0xffffffff, 0x9, 0x7f, 0x9, 0x3, 0x7f, 0xa2b, 0x7, 0x9, 0x5, 0xfefa, 0x7, 0x1, 0x5, 0x12f, 0x1, 0x2, 0x7fffffff, 0x8000, 0xc, 0x101, 0x0, 0xffffffff, 0x8001, 0x4, 0x0, 0x4, 0x2, 0x5, 0x0, 0x7110b6c, 0x7, 0x81, 0x0, 0x5bba, 0x9, 0x80000000, 0x26, 0x4, 0x9, 0x5, 0x7, 0x3, 0x8, 0x4c5, 0x1, 0x3d, 0x4003, 0x10, 0x100, 0xa, 0x1, 0x8, 0x2, 0x4, 0xffff8001, 0xffff, 0x2, 0x4000000, 0x200, 0x5, 0x80000001, 0x4, 0x46, 0x8, 0x7f, 0x9, 0x2a400, 0x446c, 0x9b, 0x3, 0x17a9, 0xb2a, 0x3, 0x6, 0x1, 0x6, 0xcb9, 0xe000000, 0x7c3dea77, 0x6, 0x9, 0x0, 0x8, 0x1, 0x4]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x6, 0x2, 0x8, 0x7865, 0xf5f, 0x5}, {0x80, 0x0, 0x4, 0x200, 0xfc00}, 0x1, 0x6da, 0x14c9}}]}}]}, 0x45c}}, 0x20000800) 1.313248641s ago: executing program 3 (id=1329): r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="20000000000000008400000002000000040045"], 0x20, 0x48800}, 0xc0) 981.658516ms ago: executing program 2 (id=1330): r0 = io_uring_setup(0x5f41, &(0x7f00000001c0)={0x0, 0x0, 0x2}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 773.314039ms ago: executing program 3 (id=1331): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x1c, r1, 0x3a9, 0x70bd27, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 683.32888ms ago: executing program 3 (id=1332): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x400, &(0x7f0000001080)=0x0) io_submit(r1, 0x20000029, &(0x7f0000000180)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x300, 0x8000000}]) 110.594709ms ago: executing program 5 (id=1333): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@bridge_dellink={0x2c, 0x13, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0x2400, 0x2}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x5, 0x0, 0x1, {0x4}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048904}, 0x4) 0s ago: executing program 2 (id=1334): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001400)=ANY=[@ANYBLOB="3c0000001000010800"/20, @ANYRES32=r1, @ANYBLOB="00410000000000001c002b8008000100", @ANYRES32, @ANYBLOB="0800030019000000080008"], 0x3c}}, 0x0) kernel console output (not intermixed with test programs): ] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.071049][ T4092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.073472][ T4092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.074175][ T4109] loop0: detected capacity change from 0 to 512 [ 49.109240][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 49.199555][ T333] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.202037][ T333] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.217617][ T4092] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 49.234691][ T4109] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.1: inode #1: comm syz.0.1: iget: illegal inode # [ 49.262633][ T4114] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8'. [ 49.283267][ T153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.285430][ T153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.289585][ T4109] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.1: error while reading EA inode 1 err=-117 [ 49.307008][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 49.315289][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.317580][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.331007][ T4109] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2825: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 49.334644][ T4109] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.1: inode #1: comm syz.0.1: iget: illegal inode # [ 49.340227][ T4109] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.1: error while reading EA inode 1 err=-117 [ 49.345925][ T4109] EXT4-fs (loop0): 1 orphan inode deleted [ 49.347578][ T4109] EXT4-fs (loop0): mounted filesystem without journal. Opts: usrjquota=,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,grpquota,usrjquota=,journal_dev=0x0000000000000dcc,,errors=continue. Quota mode: writeback. [ 49.365497][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 49.414425][ T153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.416691][ T153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.446668][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 49.513245][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.515601][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.518638][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 49.523223][ T4124] loop1: detected capacity change from 0 to 16 [ 49.557759][ T4124] erofs: (device loop1): mounted with root inode @ nid 36. [ 49.687539][ T4131] vcan0: tx address claim with dest, not broadcast [ 49.866359][ T4143] loop4: detected capacity change from 0 to 1764 [ 49.885906][ T4081] Bluetooth: hci2: command 0x040f tx timeout [ 49.887453][ T4143] ======================================================= [ 49.887453][ T4143] WARNING: The mand mount option has been deprecated and [ 49.887453][ T4143] and is ignored by this kernel. Remove the mand [ 49.887453][ T4143] option from the mount to silence this warning. [ 49.887453][ T4143] ======================================================= [ 49.887653][ T4081] Bluetooth: hci0: command 0x040f tx timeout [ 49.923648][ T4081] Bluetooth: hci1: command 0x040f tx timeout [ 49.960395][ T4081] Bluetooth: hci3: command 0x040f tx timeout [ 49.962924][ T4081] Bluetooth: hci4: command 0x040f tx timeout [ 50.141601][ T4158] loop2: detected capacity change from 0 to 1024 [ 50.397413][ T4165] loop4: detected capacity change from 0 to 4096 [ 50.459440][ T4165] ntfs: (device loop4): check_mft_mirror(): Incomplete multi sector transfer detected in mft record 2. [ 50.462526][ T4165] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 50.503724][ T4165] ntfs: volume version 3.1. [ 50.505006][ T4165] ntfs: (device loop4): map_mft_record_page(): Mft record 0x2 is corrupt. Run chkdsk. [ 50.507680][ T4165] ntfs: (device loop4): map_mft_record(): Failed with error code 5. [ 50.518201][ T4176] netlink: 24 bytes leftover after parsing attributes in process `syz.3.33'. [ 50.528854][ T4165] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x2 as bad. Run chkdsk. [ 50.538982][ T4165] ntfs: (device loop4): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 50.602899][ T4180] netlink: 132 bytes leftover after parsing attributes in process `syz.1.35'. [ 50.663984][ T4165] ntfs: (device loop4): ntfs_read_locked_inode(): Index block size (0) < NTFS_BLOCK_SIZE (512) is not supported. Sorry. [ 50.685063][ T4165] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -95. Marking corrupt inode 0x40 as bad. Run chkdsk. [ 50.813251][ T4184] loop2: detected capacity change from 0 to 4096 [ 50.814332][ T4192] tun0: tun_chr_ioctl cmd 1074025677 [ 50.816437][ T4192] tun0: linktype set to 804 [ 50.876653][ T4169] loop0: detected capacity change from 0 to 32768 [ 50.881938][ T4184] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 51.023092][ T4169] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 51.039216][ T4201] Zero length message leads to an empty skb [ 51.283968][ T4216] device vlan2 entered promiscuous mode [ 51.285654][ T4216] device bond0 entered promiscuous mode [ 51.287177][ T4216] device bond_slave_0 entered promiscuous mode [ 51.328241][ T4216] device bond_slave_1 entered promiscuous mode [ 51.382984][ T4029] ocfs2: Unmounting device (7,0) on (node local) [ 51.489929][ T4229] input: syz1 as /devices/virtual/input/input2 [ 51.501573][ T4230] loop1: detected capacity change from 0 to 512 [ 51.553746][ T4230] EXT4-fs error (device loop1): ext4_ext_check_inode:501: inode #15: comm syz.1.55: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0) [ 51.583092][ T4230] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.55: couldn't read orphan inode 15 (err -117) [ 51.595410][ T4230] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 51.666000][ T4234] loop4: detected capacity change from 0 to 2048 [ 51.695782][ T4230] EXT4-fs error (device loop1): ext4_add_entry:2486: inode #2: comm syz.1.55: Directory hole found for htree leaf block 0 [ 51.736638][ T4234] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 51.839753][ T4016] udevd[4016]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 51.846913][ T4016] udevd[4016]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 51.947774][ T4214] udevd[4214]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 51.962311][ T4024] Bluetooth: hci1: command 0x0419 tx timeout [ 51.964023][ T4024] Bluetooth: hci0: command 0x0419 tx timeout [ 51.967130][ T4024] Bluetooth: hci2: command 0x0419 tx timeout [ 52.001339][ T4218] loop2: detected capacity change from 0 to 32768 [ 52.039197][ T4024] Bluetooth: hci4: command 0x0419 tx timeout [ 52.041225][ T4024] Bluetooth: hci3: command 0x0419 tx timeout [ 52.057714][ T4218] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.49 (4218) [ 52.109171][ T4218] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm [ 52.111848][ T4218] BTRFS info (device loop2): setting nodatacow, compression disabled [ 52.124368][ T4218] BTRFS info (device loop2): setting datacow [ 52.125978][ T4218] BTRFS info (device loop2): doing ref verification [ 52.127716][ T4218] BTRFS info (device loop2): force clearing of disk cache [ 52.149402][ T4218] BTRFS info (device loop2): turning off barriers [ 52.151079][ T4218] BTRFS info (device loop2): enabling ssd optimizations [ 52.152889][ T4218] BTRFS info (device loop2): using spread ssd allocation scheme [ 52.172124][ T4218] BTRFS info (device loop2): using free space tree [ 52.174018][ T4218] BTRFS info (device loop2): has skinny extents [ 52.255421][ T4261] loop4: detected capacity change from 0 to 1024 [ 52.387683][ T4218] BTRFS info (device loop2): clearing free space tree [ 52.390156][ T4218] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 52.393027][ T4218] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 52.434620][ T4218] BTRFS info (device loop2): creating free space tree [ 52.478743][ T4261] EXT4-fs (loop4): Test dummy encryption mode enabled [ 52.481006][ T4261] EXT4-fs (loop4): Test dummy encryption mode enabled [ 52.487386][ T4218] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 52.503899][ T4261] EXT4-fs (loop4): mounted filesystem without journal. Opts: nombcache,barrier=0x00000000000003ff,stripe=0x0000000000000007,sb=0x0000000000000009,data=ordered,inode_readahead_blks=0x0000000000001000,test_dummy_encryption,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 52.522691][ T4218] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 52.724186][ T4293] tun0: tun_chr_ioctl cmd 1074025681 [ 52.969462][ T26] audit: type=1326 audit(52.920:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4300 comm="syz.1.75" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9d1ff8a8 code=0x0 [ 53.126784][ T4310] loop4: detected capacity change from 0 to 512 [ 53.127474][ T4286] loop0: detected capacity change from 0 to 32768 [ 53.137231][ T4310] EXT4-fs (loop4): Test dummy encryption mode enabled [ 53.150548][ T4310] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 53.157695][ T4310] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 53.166084][ T136] tipc: Subscription rejected, illegal request [ 53.186921][ T4310] EXT4-fs error (device loop4): ext4_orphan_get:1427: comm syz.4.78: bad orphan inode 131083 [ 53.191271][ T4310] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,noload,,errors=continue. Quota mode: none. [ 53.233391][ T4286] XFS (loop0): Mounting V5 Filesystem [ 53.361406][ T4286] XFS (loop0): Ending clean mount [ 53.388580][ T4286] XFS (loop0): Quotacheck needed: Please wait. [ 53.435807][ T4286] XFS (loop0): Quotacheck: Done. [ 53.535264][ T4310] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-ce" [ 53.563849][ T4310] overlayfs: upper fs needs to support d_type. [ 53.588138][ T4029] XFS (loop0): Unmounting Filesystem [ 53.774659][ T4310] fscrypt: AES-256-XTS using implementation "xts-aes-ce" [ 54.139492][ T4326] loop2: detected capacity change from 0 to 32768 [ 54.251821][ T4326] diRead: diIAGRead returned -5 [ 54.347542][ T4351] loop0: detected capacity change from 0 to 512 [ 54.431795][ T4351] EXT4-fs error (device loop0): ext4_orphan_get:1427: comm syz.0.85: bad orphan inode 11 [ 54.437584][ T4351] ext4_test_bit(bit=10, block=4) = 1 [ 54.445326][ T4351] is_bad_inode(inode)=0 [ 54.469557][ T4351] NEXT_ORPHAN(inode)=2080374784 [ 54.475580][ T4351] max_ino=32 [ 54.476761][ T4345] loop1: detected capacity change from 0 to 32768 [ 54.481195][ T4351] i_nlink=0 [ 54.485744][ T4351] EXT4-fs (loop0): 1 truncate cleaned up [ 54.493001][ T4351] EXT4-fs (loop0): mounted filesystem without journal. Opts: usrjquota=,auto_da_alloc=0x0000000000000a0f,,errors=continue. Quota mode: writeback. [ 54.501545][ T4345] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.86 (4345) [ 54.540944][ T4345] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 54.553459][ T4345] BTRFS info (device loop1): using free space tree [ 54.565413][ T4345] BTRFS info (device loop1): has skinny extents [ 54.843252][ T4345] BTRFS info (device loop1): enabling ssd optimizations [ 55.715044][ T4437] bridge0: port 3(ipvlan2) entered blocking state [ 55.716991][ T4437] bridge0: port 3(ipvlan2) entered disabled state [ 55.844578][ T4443] loop2: detected capacity change from 0 to 2048 [ 55.971999][ T4401] chnl_net:caif_netlink_parms(): no params data found [ 55.985695][ T4450] loop1: detected capacity change from 0 to 256 [ 55.997584][ T4443] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier=0x0000000000000007,,errors=continue. Quota mode: none. [ 56.123627][ T4450] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 198, start 00000006) [ 56.158035][ T4434] loop0: detected capacity change from 0 to 32768 [ 56.159614][ T4450] FAT-fs (loop1): Filesystem has been set read-only [ 56.177856][ T4450] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 198, start 00000006) [ 56.188848][ T4401] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.191011][ T4401] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.193782][ T4401] device bridge_slave_0 entered promiscuous mode [ 56.197885][ T4401] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.202517][ T4401] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.205260][ T4401] device bridge_slave_1 entered promiscuous mode [ 56.205390][ T4450] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 198, start 00000006) [ 56.264039][ T4401] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.272031][ T4434] XFS (loop0): Mounting V5 Filesystem [ 56.291630][ T4401] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.444447][ T4434] XFS (loop0): Ending clean mount [ 56.474755][ T4434] XFS (loop0): Quotacheck needed: Please wait. [ 56.506767][ T4472] loop1: detected capacity change from 0 to 2048 [ 56.528420][ T4434] XFS (loop0): Quotacheck: Done. [ 56.575317][ T148] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.694361][ T4401] team0: Port device team_slave_0 added [ 56.709266][ T148] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.742420][ T4401] team0: Port device team_slave_1 added [ 56.769882][ T4401] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.771851][ T4401] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.788397][ T4474] devpts: called with bogus options [ 56.789091][ T4401] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.818108][ T148] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.836492][ T4401] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.838391][ T4401] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.874177][ T4401] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.890159][ T148] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.066253][ T4401] device hsr_slave_0 entered promiscuous mode [ 57.087475][ T4401] device hsr_slave_1 entered promiscuous mode [ 57.122503][ T4401] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.124724][ T4401] Cannot create hsr debugfs directory [ 57.239027][ T21] Bluetooth: hci0: command 0x0409 tx timeout [ 57.326459][ T4472] loop1: detected capacity change from 0 to 32768 [ 57.361428][ T4472] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.120 (4472) [ 57.411532][ T4472] BTRFS info (device loop1): using crc32c (crc32c-generic) checksum algorithm [ 57.414048][ T4472] BTRFS info (device loop1): turning on async discard [ 57.415885][ T4472] BTRFS info (device loop1): using free space tree [ 57.417638][ T4472] BTRFS info (device loop1): has skinny extents [ 57.444927][ T4401] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 57.475740][ T4029] XFS (loop0): Unmounting Filesystem [ 57.501501][ T4401] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 57.603585][ T4401] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 57.651476][ T4401] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 57.686021][ T4472] BTRFS info (device loop1): enabling ssd optimizations [ 57.808718][ T4472] BTRFS error (device loop1): balance: invalid convert data profile raid1c4 [ 58.042072][ T4401] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.052164][ T4401] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.077815][ T4092] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.089536][ T4092] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.110579][ T4092] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.120013][ T4092] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.159368][ T4092] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.161374][ T4092] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.213484][ T4542] netlink: 16 bytes leftover after parsing attributes in process `syz.1.135'. [ 58.217309][ T4542] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.220646][ T4542] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.309094][ T4092] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.311852][ T4092] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.315319][ T4092] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.317896][ T4092] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.319854][ T4092] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.343942][ T4092] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.376185][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.414254][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.418456][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.424431][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.427313][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.441502][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.454756][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.468367][ T4401] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.473192][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.549178][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.551997][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.557009][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.772635][ T4559] loop0: detected capacity change from 0 to 4096 [ 58.823915][ T4559] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 58.959388][ T4401] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.966100][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.968357][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.009591][ T4576] netlink: 8 bytes leftover after parsing attributes in process `syz.3.145'. [ 59.107329][ T4587] bridge0: port 3(syz_tun) entered blocking state [ 59.111491][ T4587] bridge0: port 3(syz_tun) entered disabled state [ 59.131069][ T4587] device syz_tun entered promiscuous mode [ 59.260486][ T4534] loop2: detected capacity change from 0 to 40427 [ 59.311538][ T4534] F2FS-fs (loop2): invalid crc value [ 59.332271][ T4407] Bluetooth: hci0: command 0x041b tx timeout [ 59.339189][ T4534] F2FS-fs (loop2): Found nat_bits in checkpoint [ 59.452292][ T4534] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 59.576758][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.580271][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.672475][ T4035] attempt to access beyond end of device [ 59.672475][ T4035] loop2: rw=2049, want=45104, limit=40427 [ 59.676623][ T148] device hsr_slave_0 left promiscuous mode [ 59.677288][ T4611] loop1: detected capacity change from 0 to 8192 [ 59.729283][ T148] device hsr_slave_1 left promiscuous mode [ 59.807397][ T148] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 59.810066][ T148] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 59.814281][ T148] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 59.816304][ T148] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 59.822286][ T148] device bridge_slave_1 left promiscuous mode [ 59.825022][ T148] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.882090][ T148] device bridge_slave_0 left promiscuous mode [ 59.884006][ T148] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.036369][ T148] device veth1_macvtap left promiscuous mode [ 60.044514][ T148] device veth0_macvtap left promiscuous mode [ 60.046552][ T148] device veth1_vlan left promiscuous mode [ 60.060497][ T148] device veth0_vlan left promiscuous mode [ 60.359491][ T148] team0 (unregistering): Port device team_slave_1 removed [ 60.373030][ T148] team0 (unregistering): Port device team_slave_0 removed [ 60.384626][ T148] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 60.442139][ T148] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 60.577346][ T148] bond0 (unregistering): Released all slaves [ 60.726235][ T4401] device veth0_vlan entered promiscuous mode [ 60.731343][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.739420][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.748462][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.796487][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.834332][ T4401] device veth1_vlan entered promiscuous mode [ 60.927884][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 60.935848][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 60.946976][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.960674][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.969288][ T4637] mmap: syz.2.166 (4637) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 60.974627][ T4401] device veth0_macvtap entered promiscuous mode [ 60.981937][ T4401] device veth1_macvtap entered promiscuous mode [ 61.023369][ T4642] loop1: detected capacity change from 0 to 1024 [ 61.040980][ T4401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.043888][ T4401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.046577][ T4401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.075379][ T4401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.078188][ T4401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.093113][ T4401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.095880][ T4401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.116448][ T4401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.136575][ T4401] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.138730][ T4646] netlink: 12 bytes leftover after parsing attributes in process `syz.0.169'. [ 61.144766][ T4646] device wlan0 entered promiscuous mode [ 61.158112][ T4646] device macsec1 entered promiscuous mode [ 61.167434][ T4642] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 61.171757][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.187515][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.197829][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.230203][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.235679][ T4401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.238464][ T4401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.263329][ T4401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.300175][ T4401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.302973][ T4401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.305889][ T4401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.308940][ T4401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.311664][ T4401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.329819][ T4659] loop2: detected capacity change from 0 to 64 [ 61.337220][ T4401] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.345088][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.347924][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.356594][ T4401] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.364422][ T4401] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.366837][ T4401] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.385682][ T4401] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.399459][ T4405] Bluetooth: hci0: command 0x040f tx timeout [ 61.493311][ T4659] hfs: inconsistency in B*Tree (1,0,2,2,3) [ 61.683756][ T1599] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.686173][ T1599] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.702497][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.752290][ T4339] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.754731][ T4339] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.762904][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.801025][ T4689] loop1: detected capacity change from 0 to 32768 [ 62.925764][ T4689] ERROR: (device loop1): dtReadFirst: stbl[0] out of bound [ 62.925764][ T4689] [ 62.959490][ T4746] syzkaller0: tun_chr_ioctl cmd 1073935638 [ 62.959983][ T4689] ERROR: (device loop1): remounting filesystem as read-only [ 63.481601][ T4405] Bluetooth: hci0: command 0x0419 tx timeout [ 63.492204][ T4769] netlink: 'syz.2.210': attribute type 1 has an invalid length. [ 63.618712][ T4733] loop0: detected capacity change from 0 to 32768 [ 64.170788][ T4794] loop2: detected capacity change from 0 to 1024 [ 64.320663][ T4794] hfsplus: bad catalog entry type [ 64.335342][ T4797] loop0: detected capacity change from 0 to 2048 [ 64.380986][ T9] hfsplus: b-tree write err: -5, ino 4 [ 64.406717][ T4797] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 64.420939][ T4797] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 64.858079][ T4813] loop5: detected capacity change from 0 to 4096 [ 65.097294][ T4830] netlink: 4 bytes leftover after parsing attributes in process `syz.3.231'. [ 65.149501][ T4830] netlink: 12 bytes leftover after parsing attributes in process `syz.3.231'. [ 65.231547][ T4339] Bluetooth: hci5: Frame reassembly failed (-84) [ 65.411299][ T4844] netlink: 4 bytes leftover after parsing attributes in process `syz.1.235'. [ 65.609007][ T4810] loop0: detected capacity change from 0 to 32768 [ 65.687170][ T4810] BTRFS: device fsid 3a375e4e-b156-4d76-a2ad-16e198ce1409 devid 1 transid 8 /dev/loop0 scanned by syz.0.225 (4810) [ 65.724629][ T4810] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 65.727387][ T4810] BTRFS info (device loop0): using free space tree [ 65.730757][ T4810] BTRFS info (device loop0): has skinny extents [ 65.840809][ T4810] BTRFS info (device loop0): enabling ssd optimizations [ 66.073125][ T4887] Bluetooth: hci0: load_link_keys: expected 6403 bytes, got 7 bytes [ 66.150467][ T4849] capability: warning: `syz.3.237' uses 32-bit capabilities (legacy support in use) [ 66.713128][ T4924] loop1: detected capacity change from 0 to 4096 [ 66.763407][ T4924] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 66.958200][ T4938] loop5: detected capacity change from 0 to 2048 [ 67.087698][ T4938] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodioread_nolock,,errors=continue. Quota mode: none. [ 67.176601][ T4938] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.252: bg 0: block 120: padding at end of block bitmap is not set [ 67.215349][ T4938] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 67.239118][ T4907] Bluetooth: hci5: command 0xfc11 tx timeout [ 67.240732][ T4025] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 67.343872][ T4092] EXT4-fs (loop5): Delayed block allocation failed for inode 16 at logical offset 0 with max blocks 1 with error 28 [ 67.347452][ T4092] EXT4-fs (loop5): This should not happen!! Data will be lost [ 67.347452][ T4092] [ 67.369775][ T4092] EXT4-fs (loop5): Total free blocks count 0 [ 67.373977][ T4092] EXT4-fs (loop5): Free/Dirty block details [ 67.375657][ T4092] EXT4-fs (loop5): free_blocks=16 [ 67.380086][ T4092] EXT4-fs (loop5): dirty_blocks=16 [ 67.381608][ T4092] EXT4-fs (loop5): Block reservation details [ 67.383341][ T4092] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 67.425492][ T4971] capability: warning: `syz.2.263' uses deprecated v2 capabilities in a way that may be insecure [ 68.078526][ T5014] loop0: detected capacity change from 0 to 128 [ 68.171063][ T5014] EXT4-fs (loop0): mounted filesystem without journal. Opts: resgid=0x0000000000000000,max_batch_time=0x0000000000000001,,errors=continue. Quota mode: none. [ 68.367080][ T5034] loop2: detected capacity change from 0 to 256 [ 68.403373][ T5034] exfat: Deprecated parameter 'namecase' [ 68.449273][ T5034] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 68.598167][ T5048] loop5: detected capacity change from 0 to 65 [ 68.648961][ T5048] BFS-fs: bfs_fill_super(): NOTE: filesystem loop5 was created with 512 inodes, the real maximum is 511, mounting anyway [ 68.895843][ T5060] loop1: detected capacity change from 0 to 1024 [ 68.961943][ T5060] EXT4-fs (loop1): Mount option "nouser_xattr" will be removed by 3.5 [ 68.961943][ T5060] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 68.961943][ T5060] [ 69.034361][ T5060] EXT4-fs (loop1): mounted filesystem without journal. Opts: auto_da_alloc,init_itable=0x0000000000000400,inode_readahead_blks=0x0000000000000002,lazytime,norecovery,max_dir_size_kb=0x00000000004007b1,noblock_validity,grpquota,minixdf,nouser_xattr,barrier=0x0000000000000002,i_version,,errors=continue. Quota mode: writeback. [ 69.475424][ T5082] netlink: 14 bytes leftover after parsing attributes in process `syz.1.311'. [ 69.642026][ T2054] ieee802154 phy0 wpan0: encryption failed: -22 [ 69.644158][ T2054] ieee802154 phy1 wpan1: encryption failed: -22 [ 69.675620][ T5084] netlink: 'syz.1.312': attribute type 1 has an invalid length. [ 69.685631][ T5084] netlink: 4 bytes leftover after parsing attributes in process `syz.1.312'. [ 69.961083][ T5062] loop0: detected capacity change from 0 to 32768 [ 69.979305][ T5062] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.304 (5062) [ 70.009041][ T5062] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 70.011604][ T5062] BTRFS info (device loop0): using free space tree [ 70.017986][ T5062] BTRFS info (device loop0): has skinny extents [ 70.148244][ T5080] loop5: detected capacity change from 0 to 32768 [ 70.236191][ T5114] loop1: detected capacity change from 0 to 128 [ 70.304582][ T5114] VFS: Found a Xenix FS (block size = 512) on device loop1 [ 70.316785][ T5114] sysv_count_free_blocks: free block count was -2041545935, correcting to 3 [ 70.362139][ T5062] BTRFS info (device loop0): enabling ssd optimizations [ 70.370685][ T5080] XFS (loop5): Mounting V5 Filesystem [ 70.449632][ T5114] sysv_count_free_inodes: unable to read inode table [ 70.466412][ T5127] sysv_count_free_inodes: unable to read inode table [ 70.506055][ T5134] loop2: detected capacity change from 0 to 256 [ 70.532550][ T5132] overlayfs: upper fs does not support tmpfile. [ 70.577722][ T5080] XFS (loop5): Ending clean mount [ 70.646324][ T5134] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 70.654041][ T5134] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 70.670337][ T4401] XFS (loop5): Unmounting Filesystem [ 70.762056][ T5134] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 70.799523][ T4023] sysv_free_block: trying to free block not in datazone [ 70.802177][ T4023] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 71.056656][ T5152] netlink: 'syz.2.334': attribute type 4 has an invalid length. [ 71.377304][ T5172] loop2: detected capacity change from 0 to 1024 [ 71.465233][ T5181] device team_slave_0 entered promiscuous mode [ 71.467234][ T5181] device team_slave_1 entered promiscuous mode [ 71.523751][ T5178] loop5: detected capacity change from 0 to 4096 [ 71.594904][ T5172] hfsplus: catalog searching failed [ 71.637610][ T5178] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 71.682478][ T4092] hfsplus: bad catalog file entry [ 71.695688][ T5178] EXT4-fs error (device loop5): ext4_do_update_inode:5203: inode #15: comm syz.5.343: corrupted inode contents [ 71.699265][ T4092] hfsplus: b-tree write err: -5, ino 3 [ 71.728393][ T5178] EXT4-fs error (device loop5): ext4_dirty_inode:6039: inode #15: comm syz.5.343: mark_inode_dirty error [ 71.773734][ T5178] EXT4-fs error (device loop5): ext4_do_update_inode:5203: inode #15: comm syz.5.343: corrupted inode contents [ 71.801656][ T5178] EXT4-fs error (device loop5): __ext4_ext_dirty:183: inode #15: comm syz.5.343: mark_inode_dirty error [ 71.817572][ T5178] EXT4-fs error (device loop5): ext4_do_update_inode:5203: inode #15: comm syz.5.343: corrupted inode contents [ 71.837681][ T5178] EXT4-fs error (device loop5): __ext4_ext_dirty:183: inode #15: comm syz.5.343: mark_inode_dirty error [ 71.850850][ T5178] EXT4-fs error (device loop5): ext4_do_update_inode:5203: inode #15: comm syz.5.343: corrupted inode contents [ 71.864862][ T5178] EXT4-fs error (device loop5): ext4_truncate:4273: inode #15: comm syz.5.343: mark_inode_dirty error [ 71.872684][ T5178] EXT4-fs error (device loop5) in ext4_setattr:5607: Corrupt filesystem [ 71.915910][ T5206] input: syz0 as /devices/virtual/input/input4 [ 72.180530][ T5209] loop1: detected capacity change from 0 to 8192 [ 72.251027][ T26] audit: type=1326 audit(72.200:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5219 comm="syz.5.361" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9fc4d8a8 code=0x7ffc0000 [ 72.263680][ T26] audit: type=1326 audit(72.210:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5219 comm="syz.5.361" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9fc4d8a8 code=0x7ffc0000 [ 72.273861][ T26] audit: type=1326 audit(72.220:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5219 comm="syz.5.361" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9fc4d8a8 code=0x7ffc0000 [ 72.293640][ T5209] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 72.294847][ T26] audit: type=1326 audit(72.220:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5219 comm="syz.5.361" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9fc4d8a8 code=0x7ffc0000 [ 72.296659][ T5209] REISERFS (device loop1): using ordered data mode [ 72.325797][ T5209] reiserfs: using flush barriers [ 72.339933][ T26] audit: type=1326 audit(72.240:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5219 comm="syz.5.361" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9fc4d8a8 code=0x7ffc0000 [ 72.347467][ T5209] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 72.352608][ T26] audit: type=1326 audit(72.240:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5219 comm="syz.5.361" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9fc4d8a8 code=0x7ffc0000 [ 72.358417][ T26] audit: type=1326 audit(72.240:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5219 comm="syz.5.361" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9fc4d8a8 code=0x7ffc0000 [ 72.364693][ T26] audit: type=1326 audit(72.260:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5219 comm="syz.5.361" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=90 compat=0 ip=0xffff9fc4d8a8 code=0x7ffc0000 [ 72.370584][ T26] audit: type=1326 audit(72.260:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5219 comm="syz.5.361" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9fc4d8a8 code=0x7ffc0000 [ 72.376569][ T26] audit: type=1326 audit(72.260:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5219 comm="syz.5.361" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9fc4d8a8 code=0x7ffc0000 [ 72.376707][ T5209] REISERFS (device loop1): checking transaction log (loop1) [ 72.453416][ T5209] REISERFS (device loop1): Using r5 hash to sort names [ 72.477747][ T5209] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 72.499189][ T5209] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 72.598552][ T5237] loop5: detected capacity change from 0 to 1024 [ 72.740437][ T4405] kernel read not supported for file /dsp1 (pid: 4405 comm: kworker/0:14) [ 72.752034][ T4538] kernel write not supported for file 219/task/220/clear_refs (pid: 4538 comm: kworker/1:13) [ 72.819349][ T4092] hfsplus: b-tree write err: -5, ino 4 [ 73.103961][ T5248] udc-core: couldn't find an available UDC or it's busy [ 73.106001][ T5248] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 73.237965][ T5276] netlink: 144 bytes leftover after parsing attributes in process `syz.5.379'. [ 73.269123][ T5227] loop0: detected capacity change from 0 to 40427 [ 73.306591][ T5227] F2FS-fs (loop0): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 73.308661][ T5227] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 73.313087][ T5227] F2FS-fs (loop0): invalid crc value [ 73.317517][ T5227] F2FS-fs (loop0): Found nat_bits in checkpoint [ 73.341425][ T5283] loop5: detected capacity change from 0 to 8 [ 73.348521][ T5227] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 73.350935][ T5227] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 73.385789][ T5227] attempt to access beyond end of device [ 73.385789][ T5227] loop0: rw=2049, want=45104, limit=40427 [ 73.388690][ T5283] unable to read inode lookup table [ 73.624237][ T5294] netlink: 16 bytes leftover after parsing attributes in process `syz.5.385'. [ 73.626962][ T5294] netem: invalid attributes len -14 [ 73.628563][ T5294] netem: change failed [ 73.885818][ T5319] netlink: 56 bytes leftover after parsing attributes in process `syz.1.397'. [ 73.944241][ T5325] netlink: 'syz.3.400': attribute type 4 has an invalid length. [ 74.279304][ T4907] atkbd serio1: keyboard reset failed on [ 74.333310][ T5363] netlink: 36 bytes leftover after parsing attributes in process `syz.1.416'. [ 74.571510][ T5377] loop0: detected capacity change from 0 to 4096 [ 74.604488][ T5381] loop5: detected capacity change from 0 to 164 [ 74.675720][ T5381] netlink: 8 bytes leftover after parsing attributes in process `syz.5.426'. [ 74.690392][ T5384] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 74.765718][ T3319] cfg80211: failed to load regulatory.db [ 74.792135][ T5377] NILFS (loop0): bad btree node (ino=3, blocknr=0): level = 0, flags = 0x0, nchildren = 0 [ 74.803958][ T5377] NILFS error (device loop0): nilfs_bmap_lookup_at_level: broken bmap (inode number=3) [ 74.823843][ T5377] Remounting filesystem read-only [ 74.831547][ T5391] loop5: detected capacity change from 0 to 512 [ 74.866120][ T5394] netlink: 60 bytes leftover after parsing attributes in process `syz.1.432'. [ 74.959003][ T5391] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,quota,,errors=continue. Quota mode: writeback. [ 75.129770][ T5407] netlink: 8 bytes leftover after parsing attributes in process `syz.0.433'. [ 75.167355][ T5409] loop1: detected capacity change from 0 to 512 [ 75.176065][ T5409] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 75.180649][ T5409] EXT4-fs (loop1): Test dummy encryption mode enabled [ 75.204945][ T5409] EXT4-fs (loop1): orphan cleanup on readonly fs [ 75.233940][ T5409] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz.1.438: inode #13: comm syz.1.438: iget: illegal inode # [ 75.266746][ T5409] EXT4-fs (loop1): Remounting filesystem read-only [ 75.301905][ T5409] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.438: couldn't read orphan inode 13 (err -117) [ 75.335176][ T5409] EXT4-fs (loop1): Remounting filesystem read-only [ 75.337034][ T5409] EXT4-fs (loop1): mounted filesystem without journal. Opts: lazytime,i_version,noblock_validity,abort,mblk_io_submit,data_err=ignore,max_dir_size_kb=0x000000000000222a,errors=remount-ro,test_dummy_encryption,bsdgroups,. Quota mode: none. [ 75.455776][ T5409] CUSE: info not properly terminated [ 76.621276][ T5428] loop2: detected capacity change from 0 to 32768 [ 76.651242][ T5438] loop5: detected capacity change from 0 to 32768 [ 76.691406][ T5438] XFS: attr2 mount option is deprecated. [ 76.728528][ T5489] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 76.728528][ T5489] The task syz.3.462 (5489) triggered the difference, watch for misbehavior. [ 76.747519][ T5438] XFS (loop5): Mounting V5 Filesystem [ 76.749322][ T5428] XFS (loop2): Mounting V5 Filesystem [ 76.826887][ T5428] XFS (loop2): Ending clean mount [ 76.851325][ T5428] XFS (loop2): Quotacheck needed: Please wait. [ 76.870369][ T5438] XFS (loop5): Ending clean mount [ 76.873824][ T5438] XFS (loop5): Quotacheck needed: Please wait. [ 76.928597][ T5428] XFS (loop2): Quotacheck: Done. [ 76.940738][ T5438] XFS (loop5): Quotacheck: Done. [ 77.145477][ T5453] loop0: detected capacity change from 0 to 32768 [ 77.195917][ T4035] XFS (loop2): Unmounting Filesystem [ 77.266044][ T4401] XFS (loop5): Unmounting Filesystem [ 77.314174][ T5453] XFS (loop0): Mounting V5 Filesystem [ 77.481222][ T5519] loop1: detected capacity change from 0 to 4096 [ 77.558224][ T5519] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 77.599789][ T5453] XFS (loop0): Ending clean mount [ 77.606476][ T5453] XFS (loop0): Quotacheck needed: Please wait. [ 77.617712][ T5519] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 77.637983][ T5453] XFS (loop0): Quotacheck: Done. [ 77.844860][ T4023] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 77.943391][ T5539] loop8: detected capacity change from 0 to 1 [ 77.970847][ T5539] Dev loop8: unable to read RDB block 1 [ 77.972661][ T5539] loop8: unable to read partition table [ 77.974348][ T5539] loop8: partition table beyond EOD, truncated [ 77.993312][ T5539] loop_reread_partitions: partition scan of loop8 (þ被xü^>à– ) failed (rc=-5) [ 78.008569][ T4029] XFS (loop0): Unmounting Filesystem [ 78.205010][ T5549] sp0: Synchronizing with TNC [ 78.426594][ T5566] sctp: [Deprecated]: syz.5.483 (pid 5566) Use of struct sctp_assoc_value in delayed_ack socket option. [ 78.426594][ T5566] Use struct sctp_sack_info instead [ 78.822974][ T5591] netlink: 12 bytes leftover after parsing attributes in process `syz.2.492'. [ 78.832541][ T5591] netlink: 12 bytes leftover after parsing attributes in process `syz.2.492'. [ 79.024579][ T5603] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 79.447915][ T5624] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 79.457773][ T5624] vhci_hcd: default hub control req: 6011 v8001 i0001 l0 [ 79.655119][ T5637] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.657357][ T5637] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.826293][ T5641] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.829485][ T5641] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.831927][ T5641] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.834419][ T5641] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.098933][ T5606] loop0: detected capacity change from 0 to 40427 [ 80.170677][ T5606] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 80.172743][ T5606] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 80.188494][ T5606] F2FS-fs (loop0): invalid crc value [ 80.196181][ T5669] loop2: detected capacity change from 0 to 256 [ 80.219805][ T5606] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 80.234104][ T5669] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0xa0d184c0, utbl_chksum : 0xe619d30d) [ 80.335215][ T5683] netlink: 'syz.5.526': attribute type 1 has an invalid length. [ 80.337342][ T5683] netlink: 'syz.5.526': attribute type 2 has an invalid length. [ 80.340690][ T5606] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 80.342610][ T5606] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 80.353966][ T5683] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 80.534379][ T4029] attempt to access beyond end of device [ 80.534379][ T4029] loop0: rw=2049, want=45104, limit=40427 [ 81.143749][ T5733] loop2: detected capacity change from 0 to 64 [ 81.229414][ T5680] loop1: detected capacity change from 0 to 32768 [ 81.373133][ T5747] "syz.3.549" (5747) uses obsolete ecb(arc4) skcipher [ 81.386880][ T5680] XFS (loop1): Mounting V5 Filesystem [ 81.574572][ T5761] loop0: detected capacity change from 0 to 2048 [ 81.577730][ T5680] XFS (loop1): Ending clean mount [ 81.581287][ T5680] XFS (loop1): Quotacheck needed: Please wait. [ 81.629065][ T5770] loop2: detected capacity change from 0 to 256 [ 81.631521][ T5680] XFS (loop1): Quotacheck: Done. [ 81.649908][ T5761] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 81.667197][ T5680] syz.1.525 (5680): drop_caches: 2 [ 81.745283][ T5761] EXT4-fs (loop0): mounted filesystem without journal. Opts: nombcache,usrjquota=,errors=remount-ro,norecovery,barrier=0x0000000000000008,mblk_io_submit,minixdf,resuid=0x0000000000000000,grpjquota=,bsddf,. Quota mode: none. [ 81.772281][ T4023] XFS (loop1): Unmounting Filesystem [ 81.784057][ T5735] loop5: detected capacity change from 0 to 32768 [ 81.803459][ T4407] hid-generic 0005:046D:0A0E.0001: unknown main item tag 0x0 [ 81.820401][ T4407] hid-generic 0005:046D:0A0E.0001: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 82.016075][ T5789] tap0: tun_chr_ioctl cmd 1074025677 [ 82.017823][ T5789] tap0: linktype set to 768 [ 82.085952][ T5792] loop2: detected capacity change from 0 to 512 [ 82.136292][ T5792] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 82.157710][ T5792] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 82.188805][ T5792] EXT4-fs (loop2): orphan cleanup on readonly fs [ 82.194239][ T5792] EXT4-fs error (device loop2): ext4_orphan_get:1427: comm syz.2.562: bad orphan inode 267 [ 82.212566][ T5792] EXT4-fs (loop2): Remounting filesystem read-only [ 82.214391][ T5792] EXT4-fs (loop2): mounted filesystem without journal. Opts: nojournal_checksum,noblock_validity,discard,errors=remount-ro,inode_readahead_blks=0x0000000001000000. Quota mode: none. [ 82.339819][ T5792] EXT4-fs warning (device loop2): dx_probe:893: inode #2: comm syz.2.562: dx entry: limit 0 != root limit 125 [ 82.386322][ T5792] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.562: Corrupt directory, running e2fsck is recommended [ 82.497420][ T5816] process 'syz.1.569' launched './file1' with NULL argv: empty string added [ 82.567492][ T5819] tipc: Started in network mode [ 82.575909][ T5819] tipc: Node identity ac14140f, cluster identity 4711 [ 82.578149][ T5819] tipc: New replicast peer: 255.255.255.255 [ 82.580891][ T5819] tipc: Enabled bearer , priority 10 [ 82.976342][ T5812] fido_id[5812]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci0/hci0:200/report_descriptor': No such file or directory [ 83.019287][ T5806] loop0: detected capacity change from 0 to 32768 [ 83.024260][ T5854] loop2: detected capacity change from 0 to 512 [ 83.150505][ T5854] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,nobarrier,noload,,errors=continue. Quota mode: writeback. [ 83.165462][ T5806] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 83.257134][ T5806] (syz.0.566,5806,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is too small for name_len - offset=0, inode=65, rec_len=16, name_len=8 [ 83.341305][ T5860] loop5: detected capacity change from 0 to 32768 [ 83.347027][ T5866] loop1: detected capacity change from 0 to 2048 [ 83.362775][ T4029] ocfs2: Unmounting device (7,0) on (node local) [ 83.476150][ T5866] UDF-fs: iocharset maccenteuƒo not found [ 83.496226][ T5860] XFS (loop5): Mounting V5 Filesystem [ 83.580682][ T4405] tipc: Node number set to 2886997007 [ 83.666634][ T5860] XFS (loop5): Ending clean mount [ 83.676291][ T5860] XFS (loop5): Quotacheck needed: Please wait. [ 83.739505][ T5860] XFS (loop5): Quotacheck: Done. [ 83.911735][ T4209] udevd[4209]: symlink '../../loop0' '/dev/disk/by-diskseq/189.tmp-b7:0' failed: Read-only file system [ 83.917906][ T4141] udevd[4141]: symlink '../../loop1' '/dev/disk/by-label/LinuxUDF.tmp-b7:1' failed: Read-only file system [ 83.947111][ T4401] XFS (loop5): Unmounting Filesystem [ 83.975447][ T4141] udevd[4141]: symlink '../../loop1' '/dev/disk/by-uuid/1234567812345678.tmp-b7:1' failed: Read-only file system [ 83.981935][ T5915] loop2: detected capacity change from 0 to 2048 [ 83.992239][ T5915] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 84.066749][ T5923] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 84.091008][ T4209] udevd[4209]: symlink '../../loop0' '/dev/disk/by-diskseq/189.tmp-b7:0' failed: Read-only file system [ 84.243377][ T4014] udevd[4014]: symlink '../../loop2' '/dev/disk/by-uuid/1a95d291-cd32-4c4d-814a-8221d1aa3beb.tmp-b7:2' failed: Read-only file system [ 84.300516][ T5931] loop0: detected capacity change from 0 to 4096 [ 84.314731][ T4241] udevd[4241]: symlink '../../loop5' '/dev/disk/by-uuid/a2f82aab-77f8-4286-afd4-a8f747a74bab.tmp-b7:5' failed: Read-only file system [ 84.363836][ T5931] NILFS (loop0): invalid segment: Checksum error in segment payload [ 84.366348][ T5931] NILFS (loop0): trying rollback from an earlier position [ 84.445568][ T5931] NILFS (loop0): recovery complete [ 84.461823][ T5953] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 84.520177][ T5958] netlink: 4 bytes leftover after parsing attributes in process `syz.1.613'. [ 84.561824][ T5961] tipc: Started in network mode [ 84.563243][ T5961] tipc: Node identity ac14140f, cluster identity 4711 [ 84.565416][ T5961] tipc: New replicast peer: 255.255.255.255 [ 84.567465][ T5961] tipc: Enabled bearer , priority 10 [ 84.778139][ T5980] loop2: detected capacity change from 0 to 512 [ 84.860089][ T4014] udevd[4014]: symlink '../../loop1' '/dev/disk/by-diskseq/187.tmp-b7:1' failed: Read-only file system [ 84.865057][ T4209] udevd[4209]: symlink '../../loop0' '/dev/disk/by-diskseq/193.tmp-b7:0' failed: Read-only file system [ 84.881226][ T4209] udevd[4209]: symlink '../../loop0' '/dev/disk/by-uuid/53ef1790-6acb-496c-bd13-8113447d28c8.tmp-b7:0' failed: Read-only file system [ 84.900180][ T5980] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 84.940859][ T5980] [EXT4 FS bs=4096, gc=1, bpg=95, ipg=32, mo=e002e118, mo2=0000] [ 84.943225][ T5980] System zones: 0-2, 34-35 [ 84.945203][ T5980] EXT4-fs (loop2): orphan cleanup on readonly fs [ 84.956519][ T5980] EXT4-fs warning (device loop2): ext4_enable_quotas:6456: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 84.987831][ T5980] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 84.990055][ T5980] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.619: couldn't read orphan inode 26 (err -116) [ 84.995632][ T5980] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,debug,stripe=0x000000000000436f,nouid32,noload,data_err=ignore,init_itable,,errors=continue. Quota mode: writeback. [ 85.056206][ T5994] loop5: detected capacity change from 0 to 4096 [ 85.077922][ T4141] udevd[4141]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 85.150891][ T5980] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 85.168401][ T5980] [EXT4 FS bs=4096, gc=1, bpg=95, ipg=32, mo=e002e118, mo2=0000] [ 85.203871][ T5980] EXT4-fs warning (device loop2): ext4_enable_quotas:6456: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 85.568001][ T4411] tipc: Node number set to 2886997007 [ 85.805344][ T6029] loop0: detected capacity change from 0 to 8192 [ 85.851378][ T6029] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 85.854009][ T6029] REISERFS (device loop0): using ordered data mode [ 85.855794][ T6029] reiserfs: using flush barriers [ 85.883505][ T6029] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 85.888248][ T6029] REISERFS (device loop0): checking transaction log (loop0) [ 85.936441][ T6029] REISERFS (device loop0): Using r5 hash to sort names [ 85.938536][ T6029] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 85.941731][ T6029] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 85.944926][ T6029] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 85.948120][ T6029] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 86.153085][ T6012] loop2: detected capacity change from 0 to 40427 [ 86.184329][ T6012] F2FS-fs (loop2): Found nat_bits in checkpoint [ 86.245595][ T6012] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 86.389728][ T6057] netlink: 'syz.5.652': attribute type 1 has an invalid length. [ 86.394841][ T6056] delete_channel: no stack [ 86.412786][ T6057] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 86.415307][ T6057] IPv6: NLM_F_CREATE should be set when creating new route [ 86.428512][ T4035] attempt to access beyond end of device [ 86.428512][ T4035] loop2: rw=2049, want=45104, limit=40427 [ 86.610963][ T6065] loop0: detected capacity change from 0 to 1024 [ 86.623715][ T6069] netlink: 8 bytes leftover after parsing attributes in process `syz.2.654'. [ 86.652868][ T6065] EXT4-fs (loop0): Ignoring removed orlov option [ 86.664415][ T6065] EXT4-fs (loop0): mounted filesystem without journal. Opts: orlov,discard,,errors=continue. Quota mode: writeback. [ 87.245616][ T6101] Â: renamed from pim6reg1 [ 87.307326][ T6107] loop2: detected capacity change from 0 to 128 [ 87.437611][ T6064] loop5: detected capacity change from 0 to 40427 [ 87.502013][ T6064] F2FS-fs (loop5): Small segment_count (9 < 1 * 24) [ 87.503902][ T6064] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 87.553654][ T6064] F2FS-fs (loop5): Found nat_bits in checkpoint [ 87.565432][ T6121] sch_tbf: burst 2 is lower than device lo mtu (65550) ! [ 87.581901][ T6064] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 87.597792][ T6064] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 87.732387][ T6064] attempt to access beyond end of device [ 87.732387][ T6064] loop5: rw=2049, want=53344, limit=40427 [ 87.783328][ T4401] attempt to access beyond end of device [ 87.783328][ T4401] loop5: rw=2049, want=45104, limit=40427 [ 88.219427][ T6129] loop1: detected capacity change from 0 to 8192 [ 88.221830][ T6131] loop5: detected capacity change from 0 to 4096 [ 88.301131][ T6129] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 88.303825][ T6129] REISERFS (device loop1): using ordered data mode [ 88.305626][ T6129] reiserfs: using flush barriers [ 88.308263][ T6129] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 88.318462][ T6129] REISERFS (device loop1): checking transaction log (loop1) [ 88.325721][ T6129] REISERFS (device loop1): Using rupasov hash to sort names [ 88.327914][ T6129] REISERFS (device loop1): using 3.5.x disk format [ 88.335789][ T6129] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 88.352966][ T6131] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 88.369649][ T6129] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 88.372912][ T6129] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 88.376020][ T6129] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2) [ 88.378117][ T6125] loop0: detected capacity change from 0 to 32768 [ 88.455148][ T6129] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 88.465167][ T6123] loop2: detected capacity change from 0 to 40427 [ 88.479298][ T6125] ERROR: (device loop0): diAllocBit: iag inconsistent [ 88.479298][ T6125] [ 88.495636][ T6129] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 88.502049][ T6129] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 88.505505][ T6129] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 88.510752][ T6125] ERROR: (device loop0): remounting filesystem as read-only [ 88.512817][ T6125] ialloc: diAlloc returned -5! [ 88.519106][ T6123] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 88.521266][ T6123] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 88.545254][ T6129] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 88.550036][ T6129] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 88.553696][ T6129] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 88.556732][ T6123] F2FS-fs (loop2): invalid crc value [ 88.560512][ T6129] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2) [ 88.566883][ T6129] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2) [ 88.601994][ T6129] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 88.630350][ T4401] ntfs3: loop5: ntfs_sync_fs r=9 failed, -22. [ 88.650502][ T6123] F2FS-fs (loop2): Found nat_bits in checkpoint [ 88.705760][ T6123] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 88.707747][ T6123] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 88.730068][ T4401] ntfs3: loop5: ntfs_evict_inode r=9 failed, -22. [ 88.787346][ T6145] netlink: 27 bytes leftover after parsing attributes in process `syz.5.687'. [ 88.998736][ T6154] x_tables: duplicate underflow at hook 2 [ 89.013949][ T6153] netlink: 24 bytes leftover after parsing attributes in process `syz.1.693'. [ 89.043278][ T4209] udevd[4209]: symlink '../../loop0' '/dev/disk/by-diskseq/213.tmp-b7:0' failed: Read-only file system [ 89.047580][ T4209] udevd[4209]: symlink '../../loop0' '/dev/disk/by-uuid/45b0d9a3-5e0b-4fd0-ae05-2ff6b274033b.tmp-b7:0' failed: Read-only file system [ 89.078423][ T4014] udevd[4014]: symlink '../../loop5' '/dev/disk/by-diskseq/208.tmp-b7:5' failed: Read-only file system [ 89.101418][ T4241] udevd[4241]: symlink '../../loop2' '/dev/disk/by-diskseq/214.tmp-b7:2' failed: Read-only file system [ 89.105658][ T4241] udevd[4241]: symlink '../../loop2' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:2' failed: Read-only file system [ 89.139116][ T4014] udevd[4014]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 89.147697][ T4014] udevd[4014]: symlink '../../loop5' '/dev/disk/by-uuid/0B506D495F2D248F.tmp-b7:5' failed: Read-only file system [ 89.204635][ T4092] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 89.207333][ T4092] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 89.313583][ T4141] udevd[4141]: symlink '../../loop1' '/dev/disk/by-diskseq/211.tmp-b7:1' failed: Read-only file system [ 89.521862][ T4014] udevd[4014]: symlink '../../loop1' '/dev/disk/by-diskseq/211.tmp-b7:1' failed: Read-only file system [ 89.609409][ T4141] udevd[4141]: symlink '../../loop5' '/dev/disk/by-diskseq/208.tmp-b7:5' failed: Read-only file system [ 89.735546][ T6142] loop0: detected capacity change from 0 to 32768 [ 89.895867][ T6142] XFS (loop0): Mounting V5 Filesystem [ 89.987097][ T6160] loop1: detected capacity change from 0 to 32768 [ 90.042332][ T6142] XFS (loop0): Ending clean mount [ 90.060355][ T6142] XFS (loop0): Quotacheck needed: Please wait. [ 90.101935][ T6142] XFS (loop0): Quotacheck: Done. [ 90.206378][ T6160] XFS (loop1): Mounting V5 Filesystem [ 90.412497][ T4029] XFS (loop0): Unmounting Filesystem [ 90.474098][ T6160] XFS (loop1): Ending clean mount [ 90.509289][ T6160] XFS (loop1): Quotacheck needed: Please wait. [ 90.568712][ T6160] XFS (loop1): Quotacheck: Done. [ 90.632384][ T6182] loop5: detected capacity change from 0 to 32768 [ 90.717762][ T4023] XFS (loop1): Unmounting Filesystem [ 91.045806][ T6227] netlink: 64 bytes leftover after parsing attributes in process `syz.5.721'. [ 91.340057][ T6235] loop5: detected capacity change from 0 to 4096 [ 91.422561][ T6235] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 91.659198][ T4401] ntfs3: loop5: ntfs_evict_inode r=5 failed, -22. [ 92.023698][ T6229] loop2: detected capacity change from 0 to 40427 [ 92.046656][ T6271] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.057428][ T6229] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x1ffff [ 92.059926][ T6229] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x2 [ 92.065645][ T6271] device batadv_slave_1 entered promiscuous mode [ 92.069814][ T6229] F2FS-fs (loop2): invalid crc value [ 92.094674][ T6229] F2FS-fs (loop2): Found nat_bits in checkpoint [ 92.174268][ T6229] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 92.301586][ T6229] attempt to access beyond end of device [ 92.301586][ T6229] loop2: rw=2049, want=45104, limit=40427 [ 92.323040][ T6285] loop0: detected capacity change from 0 to 1024 [ 92.371267][ T6255] loop1: detected capacity change from 0 to 40427 [ 92.430798][ T6255] F2FS-fs (loop1): build fault injection attr: rate: 693, type: 0x1ffff [ 92.437800][ T6255] F2FS-fs (loop1): invalid crc value [ 92.456613][ T1599] hfsplus: b-tree write err: -5, ino 4 [ 92.476423][ T6255] F2FS-fs (loop1): Found nat_bits in checkpoint [ 92.527608][ T6255] F2FS-fs (loop1): Start checkpoint disabled! [ 92.588954][ T6255] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 92.751674][ T1599] attempt to access beyond end of device [ 92.751674][ T1599] loop1: rw=2049, want=40976, limit=40427 [ 92.987051][ T6315] loop2: detected capacity change from 0 to 764 [ 93.207026][ T6326] ipt_CLUSTERIP: Please specify destination IP [ 93.665370][ T6311] loop0: detected capacity change from 0 to 32768 [ 93.722863][ T6311] XFS (loop0): Mounting V5 Filesystem [ 93.771649][ T6311] XFS (loop0): Ending clean mount [ 93.857074][ T4029] XFS (loop0): Unmounting Filesystem [ 93.871776][ T6330] loop1: detected capacity change from 0 to 32768 [ 93.938523][ T6330] XFS (loop1): Mounting V5 Filesystem [ 94.050975][ T4014] udevd[4014]: symlink '../../loop0' '/dev/disk/by-diskseq/235.tmp-b7:0' failed: Read-only file system [ 94.057429][ T4014] udevd[4014]: symlink '../../loop0' '/dev/disk/by-uuid/d7dc424e-7990-42cb-9f91-9cb7200a101d.tmp-b7:0' failed: Read-only file system [ 94.062582][ T4241] udevd[4241]: symlink '../../loop5' '/dev/disk/by-diskseq/226.tmp-b7:5' failed: Read-only file system [ 94.104029][ T6330] XFS (loop1): Ending clean mount [ 94.128507][ T4023] XFS (loop1): Unmounting Filesystem [ 94.180387][ T4209] udevd[4209]: symlink '../../loop1' '/dev/disk/by-diskseq/236.tmp-b7:1' failed: Read-only file system [ 94.216379][ T4141] udevd[4141]: symlink '../../loop2' '/dev/disk/by-diskseq/234.tmp-b7:2' failed: Read-only file system [ 94.265147][ T4209] udevd[4209]: symlink '../../loop0' '/dev/disk/by-diskseq/235.tmp-b7:0' failed: Read-only file system [ 94.301577][ T4141] udevd[4141]: symlink '../../loop2' '/dev/disk/by-diskseq/234.tmp-b7:2' failed: Read-only file system [ 94.308517][ T4209] udevd[4209]: symlink '../../loop0' '/dev/disk/by-diskseq/235.tmp-b7:0' failed: Read-only file system [ 94.366779][ T4014] udevd[4014]: symlink '../../loop1' '/dev/disk/by-diskseq/236.tmp-b7:1' failed: Read-only file system [ 94.383727][ T4141] udevd[4141]: symlink '../../loop2' '/dev/disk/by-diskseq/234.tmp-b7:2' failed: Read-only file system [ 94.483545][ T6381] loop2: detected capacity change from 0 to 512 [ 94.523138][ T6381] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 94.541821][ T6385] fuse: Invalid group_id [ 94.559114][ T6381] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #16: comm syz.2.784: invalid indirect mapped block 83886080 (level 1) [ 94.578357][ T6381] EXT4-fs (loop2): Remounting filesystem read-only [ 94.586975][ T6381] EXT4-fs (loop2): 1 orphan inode deleted [ 94.596756][ T6381] EXT4-fs (loop2): 1 truncate cleaned up [ 94.612824][ T6381] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000000000040,block_validity,quota,. Quota mode: writeback. [ 94.922935][ T6393] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 95.333312][ T6406] loop5: detected capacity change from 0 to 64 [ 95.508778][ C1] sched: RT throttling activated [ 95.741142][ T6410] netlink: 12 bytes leftover after parsing attributes in process `syz.2.790'. [ 96.081938][ T6386] loop0: detected capacity change from 0 to 262144 [ 96.116151][ T6408] loop1: detected capacity change from 0 to 32768 [ 96.163106][ T6408] XFS: ikeep mount option is deprecated. [ 96.218127][ T6386] F2FS-fs (loop0): invalid crc value [ 96.228568][ T6408] XFS (loop1): Mounting V5 Filesystem [ 96.256768][ T6386] F2FS-fs (loop0): Found nat_bits in checkpoint [ 96.287117][ T6443] netlink: 'syz.2.804': attribute type 3 has an invalid length. [ 96.290854][ T6443] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.804'. [ 96.294498][ T6386] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 96.402564][ T6408] XFS (loop1): Ending clean mount [ 96.404281][ T6408] XFS (loop1): Quotacheck needed: Please wait. [ 96.460925][ T6408] XFS (loop1): Quotacheck: Done. [ 96.615480][ T4023] XFS (loop1): Unmounting Filesystem [ 96.987522][ T6480] loop2: detected capacity change from 0 to 1024 [ 97.157766][ T6480] hfsplus: bad catalog entry type [ 97.200901][ T4339] hfsplus: b-tree write err: -5, ino 4 [ 97.253882][ T6492] bridge0: port 3(syz_tun) entered blocking state [ 97.259003][ T6492] bridge0: port 3(syz_tun) entered disabled state [ 97.681600][ T6467] loop0: detected capacity change from 0 to 40427 [ 97.817858][ T6467] F2FS-fs (loop0): invalid crc value [ 97.872800][ T6467] F2FS-fs (loop0): Found nat_bits in checkpoint [ 97.917330][ T6467] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 97.999864][ T6520] netlink: 28 bytes leftover after parsing attributes in process `syz.2.839'. [ 98.011391][ T6520] netlink: 28 bytes leftover after parsing attributes in process `syz.2.839'. [ 98.074937][ T4029] attempt to access beyond end of device [ 98.074937][ T4029] loop0: rw=2049, want=45104, limit=40427 [ 98.975824][ T6549] loop2: detected capacity change from 0 to 8192 [ 99.213589][ T6509] loop5: detected capacity change from 0 to 65536 [ 99.365544][ T6587] bridge0: port 3(syz_tun) entered blocking state [ 99.367519][ T6587] bridge0: port 3(syz_tun) entered disabled state [ 99.370693][ T6587] device syz_tun entered promiscuous mode [ 99.372812][ T6587] bridge0: port 3(syz_tun) entered blocking state [ 99.375031][ T6587] bridge0: port 3(syz_tun) entered forwarding state [ 99.437488][ T6509] XFS (loop5): Mounting V5 Filesystem [ 99.572627][ T6509] XFS (loop5): Ending clean mount [ 99.578352][ T6509] XFS (loop5): Quotacheck needed: Please wait. [ 99.597143][ T333] XFS (loop5): Metadata CRC error detected at xfs_allocbt_read_verify+0x54/0x3e4, xfs_cntbt block 0x6 [ 99.607589][ T333] XFS (loop5): Unmount and run xfs_repair [ 99.609354][ T333] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 99.632068][ T333] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 99.634625][ T333] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 99.637016][ T333] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 99.669737][ T333] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 99.682574][ T333] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 99.692721][ T333] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 99.695135][ T333] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 99.697622][ T333] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 99.719832][ T4141] udevd[4141]: symlink '../../loop2' '/dev/disk/by-diskseq/248.tmp-b7:2' failed: Read-only file system [ 99.723772][ T4141] udevd[4141]: symlink '../../loop2' '/dev/disk/by-label/SYZKALLER.tmp-b7:2' failed: Read-only file system [ 99.731816][ T333] XFS (loop5): metadata I/O error in "xfs_btree_read_buf_block+0x180/0x284" at daddr 0x6 len 2 error 74 [ 99.737298][ T6509] XFS (loop5): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 99.789151][ T4141] udevd[4141]: symlink '../../loop2' '/dev/disk/by-uuid/1DC8-C73B.tmp-b7:2' failed: Read-only file system [ 99.793349][ T6575] loop1: detected capacity change from 0 to 32768 [ 99.816443][ T3319] XFS (loop5): Metadata CRC error detected at xfs_allocbt_read_verify+0x54/0x3e4, xfs_cntbt block 0x6 [ 99.819937][ T3319] XFS (loop5): Unmount and run xfs_repair [ 99.821457][ T3319] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 99.823572][ T3319] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 99.827251][ T3319] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 99.837300][ T3319] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 99.863692][ T3319] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 99.866276][ T3319] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 99.896877][ T3319] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 99.904364][ T3319] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 99.906875][ T3319] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 99.944261][ T6509] XFS (loop5): metadata I/O error in "xfs_btree_read_buf_block+0x180/0x284" at daddr 0x6 len 2 error 74 [ 99.966255][ T6575] XFS (loop1): Mounting V5 Filesystem [ 99.981819][ T6633] loop2: detected capacity change from 0 to 256 [ 100.037329][ T4209] udevd[4209]: symlink '../../loop1' '/dev/disk/by-diskseq/247.tmp-b7:1' failed: Read-only file system [ 100.067613][ T6633] exfat: Deprecated parameter 'utf8' [ 100.076241][ T6633] exfat: Deprecated parameter 'utf8' [ 100.077772][ T6633] exfat: Deprecated parameter 'utf8' [ 100.130115][ T6575] XFS (loop1): Ending clean mount [ 100.133693][ T6575] XFS (loop1): Quotacheck needed: Please wait. [ 100.139363][ T6633] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 100.182332][ T6575] XFS (loop1): Quotacheck: Done. [ 100.236167][ T4141] udevd[4141]: symlink '../../loop2' '/dev/disk/by-diskseq/252.tmp-b7:2' failed: Read-only file system [ 100.313146][ T4401] XFS (loop5): Unmounting Filesystem [ 100.427981][ T4141] udevd[4141]: symlink '../../loop2' '/dev/disk/by-uuid/1234-1234.tmp-b7:2' failed: Read-only file system [ 100.452535][ T4023] XFS (loop1): Unmounting Filesystem [ 100.623199][ T4241] udevd[4241]: symlink '../../loop1' '/dev/disk/by-diskseq/247.tmp-b7:1' failed: Read-only file system [ 100.682420][ T4141] udevd[4141]: symlink '../../loop2' '/dev/disk/by-diskseq/252.tmp-b7:2' failed: Read-only file system [ 100.864138][ T4141] udevd[4141]: symlink '../../loop2' '/dev/disk/by-diskseq/252.tmp-b7:2' failed: Read-only file system [ 100.956045][ T4141] udevd[4141]: symlink '../../loop2' '/dev/disk/by-diskseq/252.tmp-b7:2' failed: Read-only file system [ 100.976889][ T6640] loop0: detected capacity change from 0 to 40427 [ 101.055343][ T6640] F2FS-fs (loop0): invalid crc value [ 101.075461][ T6640] F2FS-fs (loop0): Found nat_bits in checkpoint [ 101.079138][ T3319] Bluetooth: hci0: command 0x0407 tx timeout [ 101.108222][ T4092] Bluetooth: hci5: Frame reassembly failed (-84) [ 101.110324][ T4092] Bluetooth: hci5: Frame reassembly failed (-84) [ 101.112831][ T136] Bluetooth: hci5: Frame reassembly failed (-84) [ 101.138386][ T6678] netlink: 40 bytes leftover after parsing attributes in process `syz.1.887'. [ 101.162208][ T6640] F2FS-fs (loop0): Cannot turn on quotas: -2 on 1 [ 101.170300][ T6640] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 101.249738][ T6640] attempt to access beyond end of device [ 101.249738][ T6640] loop0: rw=2049, want=45104, limit=40427 [ 101.522725][ T6667] loop2: detected capacity change from 0 to 32768 [ 101.620569][ T6667] XFS (loop2): Mounting V5 Filesystem [ 101.733244][ T6667] XFS (loop2): Ending clean mount [ 101.776114][ T6703] loop1: detected capacity change from 0 to 64 [ 101.783977][ T4035] XFS (loop2): Unmounting Filesystem [ 101.973890][ T6711] "syz.0.901" (6711) uses obsolete ecb(arc4) skcipher [ 102.137780][ T6714] loop1: detected capacity change from 0 to 8192 [ 102.163207][ T6714] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 102.165754][ T6714] REISERFS (device loop1): using ordered data mode [ 102.167688][ T6714] reiserfs: using flush barriers [ 102.171629][ T6714] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 102.176337][ T6714] REISERFS (device loop1): checking transaction log (loop1) [ 102.339372][ T6714] REISERFS (device loop1): Using tea hash to sort names [ 102.341549][ T6714] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 102.424725][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 102.424736][ T26] audit: type=1326 audit(102.370:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6728 comm="syz.2.898" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffaf9a48a8 code=0x0 [ 102.493883][ T4406] kernel write not supported for file /snd/seq (pid: 4406 comm: kworker/0:15) [ 102.534225][ T6734] netlink: 40 bytes leftover after parsing attributes in process `syz.3.910'. [ 102.882667][ T6748] misc userio: Begin command sent, but we're already running [ 102.900974][ T6736] loop1: detected capacity change from 0 to 32768 [ 102.956418][ T6736] XFS (loop1): Mounting V5 Filesystem [ 103.000679][ T6736] XFS (loop1): Ending clean mount [ 103.055631][ T4023] XFS (loop1): Unmounting Filesystem [ 103.156732][ T6758] loop0: detected capacity change from 0 to 1024 [ 103.162609][ T3319] Bluetooth: hci5: command 0x1003 tx timeout [ 103.164437][ T4028] Bluetooth: hci5: sending frame failed (-49) [ 103.194313][ T6758] EXT4-fs (loop0): Ignoring removed nobh option [ 103.196092][ T6758] EXT4-fs (loop0): Ignoring removed bh option [ 103.197844][ T6758] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 103.277792][ T6758] EXT4-fs (loop0): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 103.299723][ T6772] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 103.366913][ T6778] tap0: tun_chr_ioctl cmd 1074025677 [ 103.368615][ T6778] tap0: linktype set to 768 [ 103.561941][ T4406] hid-generic 0005:046D:0A0E.0002: unknown main item tag 0x0 [ 103.569184][ T4406] hid-generic 0005:046D:0A0E.0002: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 103.681738][ T6790] loop1: detected capacity change from 0 to 256 [ 103.684743][ T6792] netlink: 8 bytes leftover after parsing attributes in process `syz.0.928'. [ 103.770908][ T6788] loop2: detected capacity change from 0 to 8192 [ 103.829104][ T6788] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 103.837493][ T6788] REISERFS (device loop2): using ordered data mode [ 103.846309][ T6788] reiserfs: using flush barriers [ 103.849482][ T6788] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 103.853811][ T6798] loop0: detected capacity change from 0 to 512 [ 103.854099][ T6788] REISERFS (device loop2): checking transaction log (loop2) [ 103.933883][ T6800] loop1: detected capacity change from 0 to 512 [ 103.951530][ T6798] EXT4-fs error (device loop0): ext4_orphan_get:1401: inode #15: comm syz.0.933: casefold flag without casefold feature [ 103.955312][ T6798] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.933: couldn't read orphan inode 15 (err -117) [ 103.967813][ T6798] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 103.984542][ T6800] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 104.009415][ T6800] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 104.012428][ T6800] EXT4-fs (loop1): orphan cleanup on readonly fs [ 104.014147][ T6800] EXT4-fs error (device loop1): ext4_orphan_get:1427: comm syz.1.934: bad orphan inode 267 [ 104.057223][ T6800] EXT4-fs (loop1): Remounting filesystem read-only [ 104.064858][ T6800] EXT4-fs (loop1): mounted filesystem without journal. Opts: nojournal_checksum,noblock_validity,discard,errors=remount-ro,inode_readahead_blks=0x0000000001000000. Quota mode: none. [ 104.176994][ T6800] EXT4-fs warning (device loop1): dx_probe:893: inode #2: comm syz.1.934: dx entry: limit 0 != root limit 125 [ 104.221948][ T6800] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.934: Corrupt directory, running e2fsck is recommended [ 104.290083][ T6788] REISERFS (device loop2): Using tea hash to sort names [ 104.293614][ T6788] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 104.297341][ T6788] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 104.743415][ T4141] udevd[4141]: symlink '../../loop0' '/dev/disk/by-diskseq/280.tmp-b7:0' failed: Read-only file system [ 104.763005][ T4141] udevd[4141]: symlink '../../loop1' '/dev/disk/by-diskseq/281.tmp-b7:1' failed: Read-only file system [ 104.825995][ T4141] udevd[4141]: symlink '../../loop2' '/dev/disk/by-diskseq/276.tmp-b7:2' failed: Read-only file system [ 104.891894][ T4209] udevd[4209]: symlink '../../loop0' '/dev/disk/by-diskseq/280.tmp-b7:0' failed: Read-only file system [ 104.942143][ T4141] udevd[4141]: symlink '../../loop2' '/dev/disk/by-diskseq/276.tmp-b7:2' failed: Read-only file system [ 104.948511][ T4014] udevd[4014]: symlink '../../loop1' '/dev/disk/by-diskseq/281.tmp-b7:1' failed: Read-only file system [ 105.026614][ T4141] udevd[4141]: symlink '../../loop2' '/dev/disk/by-diskseq/282.tmp-b7:2' failed: Read-only file system [ 105.075713][ T4141] udevd[4141]: symlink '../../loop2' '/dev/disk/by-diskseq/282.tmp-b7:2' failed: Read-only file system [ 105.101529][ T4014] udevd[4014]: symlink '../../loop0' '/dev/disk/by-diskseq/280.tmp-b7:0' failed: Read-only file system [ 105.159632][ T6854] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.206808][ T4141] udevd[4141]: symlink '../../loop2' '/dev/disk/by-diskseq/282.tmp-b7:2' failed: Read-only file system [ 105.238486][ T6859] loop2: detected capacity change from 0 to 256 [ 105.244586][ T4907] Bluetooth: hci5: command 0x1001 tx timeout [ 105.246350][ T4028] Bluetooth: hci5: sending frame failed (-49) [ 105.287385][ T6863] loop0: detected capacity change from 0 to 1024 [ 105.437212][ T136] hfsplus: b-tree write err: -5, ino 4 [ 105.605747][ T6870] loop0: detected capacity change from 0 to 512 [ 105.730390][ T6870] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 105.758898][ T6870] EXT4-fs (loop0): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000004739,jqfmt=vfsold,norecovery,,errors=continue. Quota mode: writeback. [ 106.085405][ T6886] loop0: detected capacity change from 0 to 2048 [ 106.155186][ T6886] UDF-fs: iocharset maccenteuƒo not found [ 106.178444][ T6878] loop1: detected capacity change from 0 to 32768 [ 106.215527][ T6872] loop2: detected capacity change from 0 to 32768 [ 106.262495][ T6872] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop2 scanned by syz.2.968 (6872) [ 106.306342][ T6872] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 106.313381][ T6872] BTRFS info (device loop2): using free space tree [ 106.315120][ T6872] BTRFS info (device loop2): has skinny extents [ 106.581553][ T6872] BTRFS info (device loop2): enabling ssd optimizations [ 106.594615][ T6924] Injecting memory failure for pfn 0x134029 at process virtual address 0x2021c000 [ 106.613729][ T6924] Memory failure: 0x134029: recovery action for dirty LRU page: Recovered [ 106.616400][ T6924] Injecting memory failure for pfn 0x121932 at process virtual address 0x2021d000 [ 106.619491][ T6924] Memory failure: 0x121932: recovery action for dirty LRU page: Recovered [ 106.621967][ T6924] Injecting memory failure for pfn 0x121931 at process virtual address 0x2021e000 [ 106.629261][ T6924] Memory failure: 0x121931: recovery action for dirty LRU page: Recovered [ 106.723016][ T6872] BTRFS info (device loop2): device stats zeroed by syz.2.968 (6872) [ 106.937434][ T6940] loop1: detected capacity change from 0 to 2048 [ 106.998319][ T6940] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 107.056590][ T6944] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 107.318954][ T4307] Bluetooth: hci5: command 0x1009 tx timeout [ 107.416872][ T6919] loop0: detected capacity change from 0 to 40427 [ 107.485298][ T6919] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 107.487471][ T6919] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 107.522990][ T6919] F2FS-fs (loop0): Found nat_bits in checkpoint [ 107.603171][ T6919] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 107.605462][ T6919] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 108.133263][ T6983] loop2: detected capacity change from 0 to 4096 [ 108.205096][ T6983] NILFS (loop2): invalid segment: Checksum error in segment payload [ 108.207297][ T6983] NILFS (loop2): trying rollback from an earlier position [ 108.234917][ T6983] NILFS (loop2): recovery complete [ 108.260422][ T6986] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 108.351754][ T6981] loop1: detected capacity change from 0 to 32768 [ 108.396575][ T6981] (syz.1.1009,6981,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 108.410005][ T6981] (syz.1.1009,6981,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 108.445428][ T6981] (syz.1.1009,6981,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC. [ 108.477206][ T6981] JBD2: Ignoring recovery information on journal [ 108.487387][ T6995] loop0: detected capacity change from 0 to 512 [ 108.621638][ T6981] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 108.643529][ T6995] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,bsddf,. Quota mode: writeback. [ 108.853428][ T4023] ocfs2: Unmounting device (7,1) on (node local) [ 109.047810][ T7017] loop2: detected capacity change from 0 to 4096 [ 109.118349][ T7024] loop1: detected capacity change from 0 to 512 [ 109.123736][ T7027] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1027'. [ 109.159643][ T7024] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 109.177641][ T7030] loop0: detected capacity change from 0 to 164 [ 109.186295][ T7024] EXT4-fs error (device loop1): ext4_orphan_get:1401: inode #15: comm syz.1.1022: casefold flag without casefold feature [ 109.197104][ T7024] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.1022: couldn't read orphan inode 15 (err -117) [ 109.210742][ T7024] EXT4-fs (loop1): mounted filesystem without journal. Opts: abort,jqfmt=vfsv0,,errors=continue. Quota mode: writeback. [ 109.244620][ T7030] Unable to read rock-ridge attributes [ 109.346419][ T7030] Unable to read rock-ridge attributes [ 109.565840][ T7040] loop1: detected capacity change from 0 to 4096 [ 109.602366][ T7054] tipc: Started in network mode [ 109.603832][ T7054] tipc: Node identity ac14140f, cluster identity 4711 [ 109.605784][ T7054] tipc: New replicast peer: 255.255.255.255 [ 109.619843][ T7054] tipc: Enabled bearer , priority 10 [ 109.620117][ T7040] ntfs: (device loop1): check_mft_mirror(): Incomplete multi sector transfer detected in mft record 10. [ 109.624737][ T7040] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 109.628330][ T7040] ntfs: (device loop1): map_mft_record_page(): Mft record 0xa is corrupt. Run chkdsk. [ 109.671768][ T7040] ntfs: (device loop1): map_mft_record(): Failed with error code 5. [ 109.674163][ T7040] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 109.688369][ T7040] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 109.703491][ T7040] ntfs: volume version 3.1. [ 109.732375][ T7062] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1044'. [ 109.756074][ T4014] udevd[4014]: symlink '../../loop0' '/dev/disk/by-diskseq/307.tmp-b7:0' failed: Read-only file system [ 109.838074][ T4209] udevd[4209]: symlink '../../loop2' '/dev/disk/by-diskseq/309.tmp-b7:2' failed: Read-only file system [ 109.846170][ T7071] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1046'. [ 109.865457][ T4141] udevd[4141]: symlink '../../loop1' '/dev/disk/by-diskseq/306.tmp-b7:1' failed: Read-only file system [ 109.881913][ T4141] udevd[4141]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 109.886051][ T4014] udevd[4014]: symlink '../../loop0' '/dev/disk/by-diskseq/307.tmp-b7:0' failed: Read-only file system [ 109.907907][ T4141] udevd[4141]: symlink '../../loop1' '/dev/disk/by-uuid/43CF732B47819AF7.tmp-b7:1' failed: Read-only file system [ 109.934259][ T4014] udevd[4014]: symlink '../../loop0' '/dev/disk/by-diskseq/307.tmp-b7:0' failed: Read-only file system [ 109.977771][ T7080] delete_channel: no stack [ 109.982481][ T4014] udevd[4014]: symlink '../../loop0' '/dev/disk/by-diskseq/310.tmp-b7:0' failed: Read-only file system [ 110.085617][ T4141] udevd[4141]: symlink '../../loop1' '/dev/disk/by-diskseq/306.tmp-b7:1' failed: Read-only file system [ 110.090870][ T4141] udevd[4141]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 110.255750][ T7076] loop0: detected capacity change from 0 to 32768 [ 110.294083][ T7076] (syz.0.1051,7076,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 110.302131][ T7076] (syz.0.1051,7076,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 110.355227][ T7076] JBD2: Ignoring recovery information on journal [ 110.434801][ T7076] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 110.532594][ T7091] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1057'. [ 110.548064][ T4029] ocfs2: Unmounting device (7,0) on (node local) [ 110.569910][ T7078] loop2: detected capacity change from 0 to 32768 [ 110.683785][ T7078] XFS (loop2): Mounting V5 Filesystem [ 110.735305][ T4307] tipc: Node number set to 2886997007 [ 110.860204][ T7078] XFS (loop2): Ending clean mount [ 110.925958][ T4035] XFS (loop2): Unmounting Filesystem [ 111.343378][ T7133] loop5: detected capacity change from 0 to 512 [ 111.356656][ T7133] EXT4-fs (loop5): Ignoring removed bh option [ 111.417288][ T7133] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 111.423837][ T7120] loop1: detected capacity change from 0 to 32768 [ 111.434420][ T7133] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.1074: invalid indirect mapped block 262144 (level 1) [ 111.451878][ T7133] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.1074: invalid indirect mapped block 262144 (level 1) [ 111.473238][ T7120] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.1067 (7120) [ 111.477328][ T7133] EXT4-fs (loop5): 1 truncate cleaned up [ 111.499150][ T7133] EXT4-fs (loop5): mounted filesystem without journal. Opts: noblock_validity,dioread_lock,bh,nodiscard,acl,usrjquota=.test_dummy_encryption=v1,dioread_lock,jqfmt=vfsv0,noload,,,errors=continue. Quota mode: writeback. [ 111.539836][ T7133] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.1074: invalid indirect mapped block 480848489 (level 1) [ 111.549259][ T7133] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.1074: invalid indirect mapped block 512 (level 0) [ 111.583363][ T7120] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 111.585806][ T7120] BTRFS info (device loop1): force zlib compression, level 3 [ 111.587735][ T7120] BTRFS info (device loop1): force clearing of disk cache [ 111.602345][ T7120] BTRFS info (device loop1): setting nodatasum [ 111.604059][ T7120] BTRFS info (device loop1): doing ref verification [ 111.605913][ T7120] BTRFS info (device loop1): allowing degraded mounts [ 111.607784][ T7120] BTRFS info (device loop1): enabling disk space caching [ 111.639017][ T7120] BTRFS info (device loop1): disk space caching is enabled [ 111.641087][ T7120] BTRFS info (device loop1): has skinny extents [ 111.755944][ T7127] loop0: detected capacity change from 0 to 40427 [ 111.806740][ T7127] F2FS-fs (loop0): build fault injection attr: rate: 771, type: 0x1ffff [ 111.814346][ T7127] F2FS-fs (loop0): invalid crc value [ 111.841832][ T7127] F2FS-fs (loop0): Found nat_bits in checkpoint [ 111.856495][ T7159] loop2: detected capacity change from 0 to 1024 [ 111.892038][ T7159] EXT4-fs (loop2): Ignoring removed orlov option [ 111.939343][ T7159] EXT4-fs (loop2): mounted filesystem without journal. Opts: orlov,discard,,errors=continue. Quota mode: writeback. [ 111.945270][ T7127] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 112.034821][ T7120] BTRFS info (device loop1): enabling ssd optimizations [ 112.038522][ T7120] BTRFS info (device loop1): clearing free space tree [ 112.048623][ T7120] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 112.079084][ T4029] attempt to access beyond end of device [ 112.079084][ T4029] loop0: rw=2049, want=45104, limit=40427 [ 112.090931][ T7120] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 112.168448][ T7120] BTRFS info (device loop1): balance: start -d -m [ 112.182462][ T7120] BTRFS info (device loop1): relocating block group 6881280 flags data|metadata [ 112.354992][ T7185] netlink: 'syz.0.1082': attribute type 1 has an invalid length. [ 112.369391][ T7185] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 112.371488][ T7185] IPv6: NLM_F_CREATE should be set when creating new route [ 112.500593][ T4092] BTRFS info (device loop1): qgroup scan completed (inconsistency flag cleared) [ 112.537140][ T7120] BTRFS info (device loop1): relocating block group 5242880 flags data|metadata [ 112.589069][ T7120] BTRFS info (device loop1): balance: canceled [ 112.896844][ T7180] loop5: detected capacity change from 0 to 40427 [ 112.970420][ T7180] F2FS-fs (loop5): build fault injection attr: rate: 771, type: 0x1ffff [ 112.976756][ T7180] F2FS-fs (loop5): invalid crc value [ 113.012111][ T7180] F2FS-fs (loop5): Found nat_bits in checkpoint [ 113.053842][ T7180] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 113.080236][ T7208] netlink: 160 bytes leftover after parsing attributes in process `syz.1.1094'. [ 113.177077][ T7187] loop2: detected capacity change from 0 to 32768 [ 113.214597][ T4401] attempt to access beyond end of device [ 113.214597][ T4401] loop5: rw=2049, want=45104, limit=40427 [ 113.238089][ T7213] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 113.287951][ T7187] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode. [ 113.288237][ T7217] loop1: detected capacity change from 0 to 1024 [ 113.385075][ T7217] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 113.387230][ T7217] EXT4-fs (loop1): Ignoring removed nobh option [ 113.392049][ T7217] EXT4-fs (loop1): Ignoring removed bh option [ 113.397227][ T7217] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 113.464366][ T7217] EXT4-fs (loop1): mounted filesystem without journal. Opts: i_version,data_err=abort,mblk_io_submit,dioread_lock,data_err=ignore,resgid=0x0000000000000000,data_err=ignore,jqfmt=vfsv0,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: none. [ 113.618437][ T4035] ocfs2: Unmounting device (7,2) on (node local) [ 113.710899][ T7227] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1102'. [ 113.730776][ T7231] udc-core: couldn't find an available UDC or it's busy [ 113.732767][ T7231] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 113.735870][ T7230] x_tables: duplicate underflow at hook 2 [ 113.860090][ T7237] loop0: detected capacity change from 0 to 1024 [ 114.017145][ T7237] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsv1,resgid=0x0000000000000000,nodioread_nolock,norecovery,min_batch_time=0x0000000000000520,resgid=0x0000000000000000,errors=remount-ro,grpid,noauto_da_alloc,. Quota mode: none. [ 114.441805][ T7262] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1115'. [ 114.508556][ T7239] loop1: detected capacity change from 0 to 40427 [ 114.545970][ T26] audit: type=1326 audit(114.490:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7269 comm="syz.2.1119" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaf9a48a8 code=0x7ffc0000 [ 114.556172][ T26] audit: type=1326 audit(114.500:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7269 comm="syz.2.1119" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaf9a48a8 code=0x7ffc0000 [ 114.570761][ T26] audit: type=1326 audit(114.510:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7269 comm="syz.2.1119" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffaf9a48a8 code=0x7ffc0000 [ 114.590238][ T26] audit: type=1326 audit(114.510:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7269 comm="syz.2.1119" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaf9a48a8 code=0x7ffc0000 [ 114.610048][ T7239] F2FS-fs (loop1): invalid crc value [ 114.632160][ T26] audit: type=1326 audit(114.510:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7269 comm="syz.2.1119" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaf9a48a8 code=0x7ffc0000 [ 114.634231][ T7239] F2FS-fs (loop1): Found nat_bits in checkpoint [ 114.648027][ T26] audit: type=1326 audit(114.510:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7269 comm="syz.2.1119" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffaf9a48a8 code=0x7ffc0000 [ 114.672729][ T7278] loop2: detected capacity change from 0 to 512 [ 114.674766][ T26] audit: type=1326 audit(114.520:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7269 comm="syz.2.1119" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaf9a48a8 code=0x7ffc0000 [ 114.685840][ T26] audit: type=1326 audit(114.520:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7269 comm="syz.2.1119" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaf9a48a8 code=0x7ffc0000 [ 114.717205][ T7239] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 114.731496][ T7278] EXT4-fs (loop2): filesystem is read-only [ 114.741719][ T7278] EXT4-fs (loop2): filesystem is read-only [ 114.743437][ T7278] EXT4-fs (loop2): orphan cleanup on readonly fs [ 114.754446][ T7278] EXT4-fs error (device loop2): ext4_orphan_get:1427: comm syz.2.1122: bad orphan inode 16 [ 114.798830][ T7278] ext4_test_bit(bit=15, block=3) = 0 [ 114.800352][ T7278] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,,errors=continue. Quota mode: none. [ 114.884599][ T4209] udevd[4209]: symlink '../../loop0' '/dev/disk/by-diskseq/332.tmp-b7:0' failed: Read-only file system [ 114.899199][ T4209] udevd[4209]: symlink '../../loop0' '/dev/disk/by-diskseq/332.tmp-b7:0' failed: Read-only file system [ 114.912716][ T4023] attempt to access beyond end of device [ 114.912716][ T4023] loop1: rw=2049, want=45104, limit=40427 [ 114.916782][ T6646] udevd[6646]: symlink '../../loop5' '/dev/disk/by-diskseq/328.tmp-b7:5' failed: Read-only file system [ 114.956793][ T4141] udevd[4141]: symlink '../../loop2' '/dev/disk/by-diskseq/334.tmp-b7:2' failed: Read-only file system [ 115.016315][ T7298] loop5: detected capacity change from 0 to 1024 [ 115.026237][ T4014] udevd[4014]: symlink '../../loop1' '/dev/disk/by-diskseq/333.tmp-b7:1' failed: Read-only file system [ 115.042572][ T4141] udevd[4141]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 115.063836][ T4014] udevd[4014]: symlink '../../loop1' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:1' failed: Read-only file system [ 115.075850][ T7302] netlink: 27 bytes leftover after parsing attributes in process `syz.2.1132'. [ 115.158510][ T4014] udevd[4014]: symlink '../../loop2' '/dev/disk/by-diskseq/334.tmp-b7:2' failed: Read-only file system [ 115.173343][ T7306] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1137'. [ 115.177774][ T7304] loop0: detected capacity change from 0 to 2048 [ 115.182590][ T4092] hfsplus: b-tree write err: -5, ino 4 [ 115.195709][ T7306] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1137'. [ 115.236586][ T4141] udevd[4141]: symlink '../../loop1' '/dev/disk/by-diskseq/333.tmp-b7:1' failed: Read-only file system [ 115.263710][ T4209] udevd[4209]: symlink '../../loop5' '/dev/disk/by-diskseq/328.tmp-b7:5' failed: Read-only file system [ 115.278910][ T7310] netlink: 'syz.2.1139': attribute type 3 has an invalid length. [ 115.305953][ T7304] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 115.380155][ T7304] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 115.400381][ T7304] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 115.403990][ T7304] EXT4-fs (loop0): This should not happen!! Data will be lost [ 115.403990][ T7304] [ 115.406618][ T7304] EXT4-fs (loop0): Total free blocks count 0 [ 115.408271][ T7304] EXT4-fs (loop0): Free/Dirty block details [ 115.468208][ T7314] loop5: detected capacity change from 0 to 4096 [ 115.493601][ T7304] EXT4-fs (loop0): free_blocks=2415919104 [ 115.503401][ T7304] EXT4-fs (loop0): dirty_blocks=16 [ 115.504986][ T7304] EXT4-fs (loop0): Block reservation details [ 115.515349][ T7304] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 115.519166][ T7314] NILFS (loop5): invalid segment: Checksum error in segment payload [ 115.521366][ T7314] NILFS (loop5): trying rollback from an earlier position [ 115.544685][ T7319] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 115.558469][ T7319] EXT4-fs (loop0): This should not happen!! Data will be lost [ 115.558469][ T7319] [ 115.562262][ T7314] NILFS (loop5): recovery complete [ 115.577289][ T7323] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 116.485371][ T7336] loop1: detected capacity change from 0 to 32768 [ 116.566364][ T7376] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1165'. [ 116.569169][ T7376] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1165'. [ 116.572177][ T7376] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1165'. [ 116.574607][ T7376] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1165'. [ 116.582354][ T7336] XFS (loop1): Mounting V5 Filesystem [ 116.585592][ T7376] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1165'. [ 116.587986][ T7376] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1165'. [ 116.644644][ T7343] loop0: detected capacity change from 0 to 32768 [ 116.669111][ T7336] XFS (loop1): Ending clean mount [ 116.675811][ T7336] XFS (loop1): Quotacheck needed: Please wait. [ 116.733625][ T7336] XFS (loop1): Quotacheck: Done. [ 116.802280][ T4023] XFS (loop1): Unmounting Filesystem [ 116.827042][ T7343] XFS (loop0): Mounting V5 Filesystem [ 116.987124][ T7343] XFS (loop0): Ending clean mount [ 117.010508][ T7343] XFS (loop0): Quotacheck needed: Please wait. [ 117.151653][ T7343] XFS (loop0): Quotacheck: Done. [ 117.293320][ T7367] loop2: detected capacity change from 0 to 32768 [ 117.312205][ T4029] XFS (loop0): Unmounting Filesystem [ 117.314908][ T7361] loop5: detected capacity change from 0 to 32768 [ 117.373166][ T7361] gfs2: fsid=^Ö5xóî¥sŒ: Trying to join cluster "lock_nolock", "^Ö5xóî¥sŒ" [ 117.376013][ T7361] gfs2: fsid=^Ö5xóî¥sŒ: Now mounting FS (format 0)... [ 117.475521][ T7361] gfs2: fsid=^Ö5xóî¥sŒ.0: journal 0 mapped with 16 extents in 0ms [ 117.493085][ T4398] gfs2: fsid=^Ö5xóî¥sŒ.0: jid=0, already locked for use [ 117.496344][ T4398] gfs2: fsid=^Ö5xóî¥sŒ.0: jid=0: Looking at journal... [ 117.603443][ T4398] gfs2: fsid=^Ö5xóî¥sŒ.0: jid=0: Journal head lookup took 107ms [ 117.625062][ T4398] gfs2: fsid=^Ö5xóî¥sŒ.0: jid=0: Done [ 117.630540][ T7361] gfs2: fsid=^Ö5xóî¥sŒ.0: first mount done, others may mount [ 117.909576][ T7403] IPVS: ip_vs_add_dest(): server weight less than zero [ 118.162157][ T7415] loop0: detected capacity change from 0 to 256 [ 118.234447][ T7415] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 118.392163][ T7427] loop1: detected capacity change from 0 to 256 [ 118.395936][ T7400] loop2: detected capacity change from 0 to 32768 [ 118.435331][ T7427] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 118.475251][ T7400] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 118.570896][ T7429] loop5: detected capacity change from 0 to 8192 [ 118.581619][ T7427] attempt to access beyond end of device [ 118.581619][ T7427] loop1: rw=524288, want=696, limit=256 [ 118.584423][ T7429] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 118.587919][ T7427] attempt to access beyond end of device [ 118.587919][ T7427] loop1: rw=524288, want=952, limit=256 [ 118.588179][ T7429] REISERFS (device loop5): using ordered data mode [ 118.591719][ T7427] attempt to access beyond end of device [ 118.591719][ T7427] loop1: rw=0, want=448, limit=256 [ 118.596179][ T7427] attempt to access beyond end of device [ 118.596179][ T7427] loop1: rw=0, want=448, limit=256 [ 118.607670][ T7427] attempt to access beyond end of device [ 118.607670][ T7427] loop1: rw=0, want=448, limit=256 [ 118.609348][ T7436] attempt to access beyond end of device [ 118.609348][ T7436] loop1: rw=524288, want=2744, limit=256 [ 118.612857][ T7427] attempt to access beyond end of device [ 118.612857][ T7427] loop1: rw=0, want=448, limit=256 [ 118.617568][ T7427] attempt to access beyond end of device [ 118.617568][ T7427] loop1: rw=0, want=448, limit=256 [ 118.621676][ T7427] attempt to access beyond end of device [ 118.621676][ T7427] loop1: rw=0, want=448, limit=256 [ 118.622078][ T4035] ocfs2: Unmounting device (7,2) on (node local) [ 118.624797][ T7427] attempt to access beyond end of device [ 118.624797][ T7427] loop1: rw=0, want=448, limit=256 [ 118.640532][ T7429] reiserfs: using flush barriers [ 118.666508][ T7429] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 118.688689][ T7429] REISERFS (device loop5): checking transaction log (loop5) [ 118.713815][ T7429] REISERFS (device loop5): Using rupasov hash to sort names [ 118.726056][ T7429] REISERFS (device loop5): using 3.5.x disk format [ 118.742134][ T7429] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 118.760789][ T7429] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 118.780180][ T7429] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 118.789319][ T7429] REISERFS warning (device loop5): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2) [ 118.793722][ T7429] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 118.843628][ T7429] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 118.853056][ T7429] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 118.863681][ T7429] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 118.881759][ T7429] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 118.891716][ T7429] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 118.899515][ T7429] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 118.907415][ T7429] REISERFS warning (device loop5): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2) [ 118.938066][ T7429] REISERFS warning (device loop5): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2) [ 118.946864][ T7429] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 119.166008][ T227] block nbd2: Attempted send on invalid socket [ 119.168925][ T227] blk_update_request: I/O error, dev nbd2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 119.186764][ T149] block nbd2: Attempted send on invalid socket [ 119.188649][ T149] blk_update_request: I/O error, dev nbd2, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 119.195401][ T7449] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 119.198544][ T149] block nbd2: Attempted send on invalid socket [ 119.202422][ T149] blk_update_request: I/O error, dev nbd2, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 119.223459][ T7449] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 119.241834][ T227] block nbd2: Attempted send on invalid socket [ 119.244121][ T227] blk_update_request: I/O error, dev nbd2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 119.248352][ T149] block nbd2: Attempted send on invalid socket [ 119.250271][ T149] blk_update_request: I/O error, dev nbd2, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 119.258674][ T7449] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 119.266090][ T149] block nbd2: Attempted send on invalid socket [ 119.267839][ T149] blk_update_request: I/O error, dev nbd2, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 119.275340][ T7449] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 119.301735][ T149] block nbd2: Attempted send on invalid socket [ 119.303449][ T149] blk_update_request: I/O error, dev nbd2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 119.306603][ T149] block nbd2: Attempted send on invalid socket [ 119.308308][ T149] blk_update_request: I/O error, dev nbd2, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 119.314762][ T7449] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 119.317558][ T149] block nbd2: Attempted send on invalid socket [ 119.319469][ T149] blk_update_request: I/O error, dev nbd2, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 119.322585][ T7449] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 119.327807][ T227] block nbd2: Attempted send on invalid socket [ 119.329630][ T227] blk_update_request: I/O error, dev nbd2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 119.343149][ T7449] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 119.380487][ T7449] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 119.383176][ T7449] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 119.572453][ T7468] loop1: detected capacity change from 0 to 256 [ 119.705380][ T7474] __nla_validate_parse: 2 callbacks suppressed [ 119.705393][ T7474] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1204'. [ 119.814675][ T7480] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1207'. [ 119.817120][ T7480] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1207'. [ 120.188045][ T7498] xt_cgroup: xt_cgroup: no path or classid specified [ 120.192332][ T7456] loop5: detected capacity change from 0 to 40427 [ 120.275385][ T7456] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 120.278380][ T7456] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 120.328285][ T7456] F2FS-fs (loop5): invalid crc value [ 120.350859][ T4141] udevd[4141]: symlink '../../loop2' '/dev/disk/by-diskseq/346.tmp-b7:2' failed: Read-only file system [ 120.413029][ T7456] F2FS-fs (loop5): Found nat_bits in checkpoint [ 120.416501][ T7513] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1221'. [ 120.546743][ T4014] udevd[4014]: symlink '../../loop1' '/dev/disk/by-diskseq/352.tmp-b7:1' failed: Read-only file system [ 120.582735][ T7456] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 120.584698][ T7456] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 120.755411][ T4141] udevd[4141]: symlink '../../loop2' '/dev/disk/by-diskseq/353.tmp-b7:2' failed: Read-only file system [ 120.832861][ T4014] udevd[4014]: symlink '../../loop1' '/dev/disk/by-diskseq/352.tmp-b7:1' failed: Read-only file system [ 121.010230][ T4141] udevd[4141]: symlink '../../loop2' '/dev/disk/by-diskseq/353.tmp-b7:2' failed: Read-only file system [ 121.011864][ T4014] udevd[4014]: symlink '../../loop1' '/dev/disk/by-diskseq/352.tmp-b7:1' failed: Read-only file system [ 121.027580][ T7535] syzkaller0: tun_chr_ioctl cmd 2147767511 [ 121.037677][ T153] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 121.045650][ T4014] udevd[4014]: symlink '../../loop1' '/dev/disk/by-diskseq/352.tmp-b7:1' failed: Read-only file system [ 121.048096][ T153] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 121.117671][ T6646] udevd[6646]: symlink '../../loop0' '/dev/disk/by-diskseq/354.tmp-b7:0' failed: Read-only file system [ 121.153951][ T4141] udevd[4141]: symlink '../../loop2' '/dev/disk/by-diskseq/353.tmp-b7:2' failed: Read-only file system [ 121.248348][ T6646] udevd[6646]: symlink '../../loop0' '/dev/disk/by-diskseq/354.tmp-b7:0' failed: Read-only file system [ 121.443759][ T7512] loop0: detected capacity change from 0 to 32768 [ 121.693923][ T7555] loop2: detected capacity change from 0 to 1024 [ 121.852132][ T7512] XFS (loop0): Mounting V5 Filesystem [ 122.050633][ T7565] loop5: detected capacity change from 0 to 256 [ 123.307804][ T4339] hfsplus: b-tree write err: -5, ino 4 [ 123.344768][ T7567] block nbd1: shutting down sockets [ 123.399678][ T7571] loop1: detected capacity change from 0 to 40427 [ 123.925563][ T7565] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 124.227038][ T7512] XFS (loop0): Ending clean mount [ 124.301678][ T7512] XFS (loop0): Quotacheck needed: Please wait. [ 124.475073][ T7512] XFS (loop0): Quotacheck: Done. [ 124.534908][ T4029] XFS (loop0): Unmounting Filesystem [ 124.951207][ T7575] loop2: detected capacity change from 0 to 32768 [ 125.018092][ T7571] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 125.020447][ T7571] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 125.084986][ T7575] XFS (loop2): Mounting V5 Filesystem [ 125.111746][ T7571] F2FS-fs (loop1): invalid crc value [ 125.215021][ T7571] F2FS-fs (loop1): Found nat_bits in checkpoint [ 125.346814][ T7571] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 125.348806][ T7571] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 125.389902][ T4141] udevd[4141]: symlink '../../loop0' '/dev/disk/by-diskseq/362.tmp-b7:0' failed: Read-only file system [ 125.422860][ T4141] udevd[4141]: symlink '../../loop0' '/dev/disk/by-uuid/a2f82aab-77f8-4286-afd4-a8f747a74bab.tmp-b7:0' failed: Read-only file system [ 125.483958][ T4014] udevd[4014]: symlink '../../loop5' '/dev/disk/by-diskseq/360.tmp-b7:5' failed: Read-only file system [ 125.525025][ T7597] netlink: 312 bytes leftover after parsing attributes in process `syz.5.1249'. [ 125.554344][ T4014] udevd[4014]: symlink '../../loop5' '/dev/disk/by-diskseq/360.tmp-b7:5' failed: Read-only file system [ 125.660270][ T4014] udevd[4014]: symlink '../../loop5' '/dev/disk/by-diskseq/360.tmp-b7:5' failed: Read-only file system [ 125.760588][ T4014] udevd[4014]: symlink '../../loop5' '/dev/disk/by-diskseq/365.tmp-b7:5' failed: Read-only file system [ 125.893292][ T4141] udevd[4141]: symlink '../../loop0' '/dev/disk/by-diskseq/362.tmp-b7:0' failed: Read-only file system [ 125.897527][ T4141] udevd[4141]: symlink '../../loop0' '/dev/disk/by-uuid/a2f82aab-77f8-4286-afd4-a8f747a74bab.tmp-b7:0' failed: Read-only file system [ 125.928591][ T6646] udevd[6646]: symlink '../../loop1' '/dev/disk/by-diskseq/359.tmp-b7:1' failed: Read-only file system [ 125.953688][ T4014] udevd[4014]: symlink '../../loop5' '/dev/disk/by-diskseq/365.tmp-b7:5' failed: Read-only file system [ 126.025684][ T4092] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 126.028277][ T4092] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 126.133178][ T7608] netlink: 'syz.5.1255': attribute type 21 has an invalid length. [ 126.135496][ T7608] netlink: 156 bytes leftover after parsing attributes in process `syz.5.1255'. [ 126.138150][ T7607] netlink: 'syz.5.1255': attribute type 21 has an invalid length. [ 126.162361][ T7607] netlink: 156 bytes leftover after parsing attributes in process `syz.5.1255'. [ 126.177840][ T7575] XFS (loop2): Ending clean mount [ 126.281230][ T7610] loop5: detected capacity change from 0 to 512 [ 126.292518][ T7575] XFS (loop2): Quotacheck needed: Please wait. [ 126.312585][ T7610] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 126.354217][ T7610] EXT4-fs (loop5): invalid journal inode [ 126.356091][ T7610] EXT4-fs (loop5): can't get journal size [ 126.450796][ T7610] EXT4-fs (loop5): 1 truncate cleaned up [ 126.452495][ T7610] EXT4-fs (loop5): mounted filesystem without journal. Opts: norecovery,,errors=continue. Quota mode: none. [ 126.584360][ T7575] XFS (loop2): Quotacheck: Done. [ 126.671379][ T4035] XFS (loop2): Unmounting Filesystem [ 129.576370][ T7627] loop5: detected capacity change from 0 to 40427 [ 129.639522][ T7627] F2FS-fs (loop5): build fault injection attr: rate: 693, type: 0x1ffff [ 129.704951][ T7627] F2FS-fs (loop5): invalid crc value [ 129.857465][ T7627] F2FS-fs (loop5): Found nat_bits in checkpoint [ 129.958509][ T7627] F2FS-fs (loop5): Start checkpoint disabled! [ 130.040999][ T7627] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 130.224717][ T333] handle_bad_sector: 4017 callbacks suppressed [ 130.224732][ T333] attempt to access beyond end of device [ 130.224732][ T333] loop5: rw=2049, want=40976, limit=40427 [ 130.684596][ T4141] udevd[4141]: symlink '../../loop5' '/dev/disk/by-diskseq/373.tmp-b7:5' failed: Read-only file system [ 130.753474][ T4141] udevd[4141]: symlink '../../loop5' '/dev/disk/by-diskseq/373.tmp-b7:5' failed: Read-only file system [ 130.943757][ T4141] udevd[4141]: symlink '../../loop5' '/dev/disk/by-diskseq/374.tmp-b7:5' failed: Read-only file system [ 130.947195][ T4014] udevd[4014]: symlink '../../loop0' '/dev/disk/by-diskseq/362.tmp-b7:0' failed: Read-only file system [ 130.975305][ T4014] udevd[4014]: symlink '../../loop2' '/dev/disk/by-diskseq/368.tmp-b7:2' failed: Read-only file system [ 130.991372][ T4141] udevd[4141]: symlink '../../loop0' '/dev/disk/by-diskseq/362.tmp-b7:0' failed: Read-only file system [ 130.993562][ T7642] loop5: detected capacity change from 0 to 2048 [ 131.085498][ T2054] ieee802154 phy0 wpan0: encryption failed: -22 [ 131.087352][ T2054] ieee802154 phy1 wpan1: encryption failed: -22 [ 131.209040][ T7645] netlink: 'syz.2.1258': attribute type 11 has an invalid length. [ 131.445075][ T7657] loop0: detected capacity change from 0 to 2048 [ 131.765870][ T7664] loop1: detected capacity change from 0 to 64 [ 131.895903][ T7661] loop2: detected capacity change from 0 to 40427 [ 131.932192][ T7661] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x1ffff [ 131.934664][ T7661] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x2 [ 131.940880][ T7661] F2FS-fs (loop2): invalid crc value [ 131.952304][ T7661] F2FS-fs (loop2): Found nat_bits in checkpoint [ 131.975063][ T7661] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 132.024437][ T4035] attempt to access beyond end of device [ 132.024437][ T4035] loop2: rw=2049, want=45104, limit=40427 [ 132.295409][ T7642] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 132.310929][ T4141] udevd[4141]: symlink '../../loop2' '/dev/disk/by-diskseq/368.tmp-b7:2' failed: Read-only file system [ 132.344756][ T7670] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 132.486292][ T7675] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 132.507374][ T7675] Remounting filesystem read-only [ 132.828967][ T7688] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 133.134762][ T7691] loop0: detected capacity change from 0 to 4096 [ 133.137186][ T7693] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1288'. [ 133.295298][ T7698] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1291'. [ 133.304237][ T7698] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1291'. [ 133.435696][ T7691] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 133.680444][ T7713] loop2: detected capacity change from 0 to 16 [ 133.723278][ T7713] erofs: (device loop2): erofs_read_superblock: blkszbits 9 isn't supported on this platform [ 133.723732][ T4029] ntfs3: loop0: ntfs_sync_fs r=9 failed, -22. [ 133.795620][ T4029] ntfs3: loop0: ntfs_evict_inode r=9 failed, -22. [ 134.411978][ T7717] loop0: detected capacity change from 0 to 40427 [ 134.468270][ T7719] loop5: detected capacity change from 0 to 40427 [ 134.473100][ T7717] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 134.475291][ T7717] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 134.481319][ T7717] F2FS-fs (loop0): invalid crc value [ 134.491890][ T7717] F2FS-fs (loop0): Found nat_bits in checkpoint [ 134.514128][ T7717] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 134.521388][ T7719] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 134.523538][ T7719] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 134.535092][ T7717] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 134.536966][ T7717] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 134.564817][ T7719] F2FS-fs (loop5): invalid crc value [ 134.594663][ T7719] F2FS-fs (loop5): Found nat_bits in checkpoint [ 134.632335][ T7719] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 134.634389][ T7719] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 135.447919][ T7759] loop0: detected capacity change from 0 to 4096 [ 135.523007][ T7760] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 136.306359][ T7779] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1324'. [ 136.535051][ T7788] sch_tbf: burst 0 is lower than device ip6tnl0 mtu (1452) ! [ 137.308275][ T7780] loop1: detected capacity change from 0 to 32768 [ 137.393934][ T7780] (syz.1.1323,7780,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 137.398682][ T7780] (syz.1.1323,7780,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 137.540372][ T4209] udevd[4209]: symlink '../../loop2' '/dev/disk/by-diskseq/380.tmp-b7:2' failed: Read-only file system [ 137.555549][ T4141] udevd[4141]: symlink '../../loop0' '/dev/disk/by-diskseq/378.tmp-b7:0' failed: Read-only file system [ 137.617437][ T6646] udevd[6646]: symlink '../../loop0' '/dev/disk/by-diskseq/378.tmp-b7:0' failed: Read-only file system [ 137.625112][ T4209] udevd[4209]: symlink '../../loop2' '/dev/disk/by-diskseq/380.tmp-b7:2' failed: Read-only file system [ 137.759571][ T4141] udevd[4141]: symlink '../../loop5' '/dev/disk/by-diskseq/377.tmp-b7:5' failed: Read-only file system [ 137.777692][ T4209] udevd[4209]: symlink '../../loop2' '/dev/disk/by-diskseq/380.tmp-b7:2' failed: Read-only file system [ 137.789523][ T7809] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 137.794960][ T6646] udevd[6646]: symlink '../../loop0' '/dev/disk/by-diskseq/378.tmp-b7:0' failed: Read-only file system [ 137.798472][ T7809] device batadv_slave_1 entered promiscuous mode [ 137.852346][ T7780] JBD2: Ignoring recovery information on journal [ 137.898624][ T4141] udevd[4141]: symlink '../../loop2' '/dev/disk/by-diskseq/384.tmp-b7:2' failed: Read-only file system [ 137.916082][ T4209] udevd[4209]: symlink '../../loop5' '/dev/disk/by-diskseq/377.tmp-b7:5' failed: Read-only file system [ 137.941640][ T6646] udevd[6646]: symlink '../../loop0' '/dev/disk/by-diskseq/378.tmp-b7:0' failed: Read-only file system [ 137.982722][ T7780] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 138.048452][ T7780] [ 138.049157][ T7780] ====================================================== [ 138.051075][ T7780] WARNING: possible circular locking dependency detected [ 138.052961][ T7780] 5.15.185-syzkaller #0 Not tainted [ 138.054362][ T7780] ------------------------------------------------------ [ 138.056254][ T7780] syz.1.1323/7780 is trying to acquire lock: [ 138.057870][ T7780] ffff0000e9ea2648 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{3:3}, at: ocfs2_xattr_set+0x8ac/0xea8 [ 138.061203][ T7780] [ 138.061203][ T7780] but task is already holding lock: [ 138.063208][ T7780] ffff0000ef02eab8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x328/0xea8 [ 138.065739][ T7780] [ 138.065739][ T7780] which lock already depends on the new lock. [ 138.065739][ T7780] [ 138.068628][ T7780] [ 138.068628][ T7780] the existing dependency chain (in reverse order) is: [ 138.070991][ T7780] [ 138.070991][ T7780] -> #2 (&oi->ip_xattr_sem){++++}-{3:3}: [ 138.073099][ T7780] down_read+0xc0/0x390 [ 138.074350][ T7780] ocfs2_init_acl+0x260/0x604 [ 138.075772][ T7780] ocfs2_mknod+0x114c/0x1e88 [ 138.077147][ T7780] ocfs2_create+0x180/0x468 [ 138.078510][ T7780] path_openat+0x1144/0x26e4 [ 138.079934][ T7780] do_filp_open+0x164/0x330 [ 138.081330][ T7780] do_sys_openat2+0x128/0x3d8 [ 138.082748][ T7780] __arm64_sys_openat+0x120/0x154 [ 138.084306][ T7780] invoke_syscall+0x98/0x2b8 [ 138.085706][ T7780] el0_svc_common+0x138/0x258 [ 138.087137][ T7780] do_el0_svc+0x58/0x14c [ 138.088441][ T7780] el0_svc+0x78/0x1e0 [ 138.089627][ T7780] el0t_64_sync_handler+0xcc/0xe4 [ 138.091085][ T7780] el0t_64_sync+0x1a0/0x1a4 [ 138.092449][ T7780] [ 138.092449][ T7780] -> #1 (jbd2_handle){++++}-{0:0}: [ 138.094388][ T7780] jbd2_journal_lock_updates+0xb0/0x310 [ 138.096064][ T7780] __ocfs2_flush_truncate_log+0x258/0xf30 [ 138.097766][ T7780] ocfs2_flush_truncate_log+0x48/0x68 [ 138.099424][ T7780] ocfs2_sync_fs+0xf8/0x2a4 [ 138.100780][ T7780] sync_filesystem+0x1a0/0x218 [ 138.102192][ T7780] generic_shutdown_super+0x70/0x2f0 [ 138.103811][ T7780] kill_block_super+0x70/0xdc [ 138.105277][ T7780] deactivate_locked_super+0xb8/0x13c [ 138.106869][ T7780] deactivate_super+0xf8/0x118 [ 138.108330][ T7780] cleanup_mnt+0x3a4/0x458 [ 138.109605][ T7780] __cleanup_mnt+0x20/0x30 [ 138.110895][ T7780] task_work_run+0x12c/0x1e0 [ 138.112341][ T7780] do_notify_resume+0x24b4/0x3128 [ 138.113838][ T7780] el0_svc+0xf0/0x1e0 [ 138.115101][ T7780] el0t_64_sync_handler+0xcc/0xe4 [ 138.116609][ T7780] el0t_64_sync+0x1a0/0x1a4 [ 138.117996][ T7780] [ 138.117996][ T7780] -> #0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{3:3}: [ 138.120877][ T7780] __lock_acquire+0x2928/0x651c [ 138.122316][ T7780] lock_acquire+0x1f4/0x620 [ 138.123650][ T7780] down_write+0xbc/0x12c [ 138.124943][ T7780] ocfs2_xattr_set+0x8ac/0xea8 [ 138.126411][ T7780] ocfs2_xattr_trusted_set+0x4c/0x64 [ 138.127989][ T7780] __vfs_setxattr+0x388/0x3a4 [ 138.129464][ T7780] __vfs_setxattr_noperm+0x120/0x564 [ 138.131164][ T7780] __vfs_setxattr_locked+0x1ec/0x218 [ 138.132722][ T7780] vfs_setxattr+0x158/0x2ac [ 138.134106][ T7780] setxattr+0x248/0x2ac [ 138.135375][ T7780] path_setxattr+0x12c/0x25c [ 138.136739][ T7780] __arm64_sys_setxattr+0xbc/0xd8 [ 138.138231][ T7780] invoke_syscall+0x98/0x2b8 [ 138.139596][ T7780] el0_svc_common+0x138/0x258 [ 138.140994][ T7780] do_el0_svc+0x58/0x14c [ 138.142276][ T7780] el0_svc+0x78/0x1e0 [ 138.143576][ T7780] el0t_64_sync_handler+0xcc/0xe4 [ 138.145159][ T7780] el0t_64_sync+0x1a0/0x1a4 [ 138.146566][ T7780] [ 138.146566][ T7780] other info that might help us debug this: [ 138.146566][ T7780] [ 138.149412][ T7780] Chain exists of: [ 138.149412][ T7780] &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5 --> jbd2_handle --> &oi->ip_xattr_sem [ 138.149412][ T7780] [ 138.153820][ T7780] Possible unsafe locking scenario: [ 138.153820][ T7780] [ 138.155874][ T7780] CPU0 CPU1 [ 138.157328][ T7780] ---- ---- [ 138.158821][ T7780] lock(&oi->ip_xattr_sem); [ 138.160088][ T7780] lock(jbd2_handle); [ 138.161819][ T7780] lock(&oi->ip_xattr_sem); [ 138.163729][ T7780] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5); [ 138.165724][ T7780] [ 138.165724][ T7780] *** DEADLOCK *** [ 138.165724][ T7780] [ 138.168022][ T7780] 3 locks held by syz.1.1323/7780: [ 138.169466][ T7780] #0: ffff0000c158c460 (sb_writers#13){.+.+}-{0:0}, at: mnt_want_write+0x44/0x9c [ 138.172070][ T7780] #1: ffff0000ef02ed88 (&type->i_mutex_dir_key#10){+.+.}-{3:3}, at: vfs_setxattr+0x138/0x2ac [ 138.174883][ T7780] #2: ffff0000ef02eab8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x328/0xea8 [ 138.177590][ T7780] [ 138.177590][ T7780] stack backtrace: [ 138.179249][ T7780] CPU: 1 PID: 7780 Comm: syz.1.1323 Not tainted 5.15.185-syzkaller #0 [ 138.181525][ T7780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 138.184216][ T7780] Call trace: [ 138.185110][ T7780] dump_backtrace+0x0/0x43c [ 138.186336][ T7780] show_stack+0x2c/0x3c [ 138.187497][ T7780] __dump_stack+0x30/0x40 [ 138.188690][ T7780] dump_stack_lvl+0xf8/0x160 [ 138.189935][ T7780] dump_stack+0x1c/0x5c [ 138.191032][ T7780] print_circular_bug+0x148/0x1b0 [ 138.192461][ T7780] check_noncircular+0x240/0x2d4 [ 138.193769][ T7780] __lock_acquire+0x2928/0x651c [ 138.195066][ T7780] lock_acquire+0x1f4/0x620 [ 138.196258][ T7780] down_write+0xbc/0x12c [ 138.197370][ T7780] ocfs2_xattr_set+0x8ac/0xea8 [ 138.198684][ T7780] ocfs2_xattr_trusted_set+0x4c/0x64 [ 138.200145][ T7780] __vfs_setxattr+0x388/0x3a4 [ 138.201468][ T7780] __vfs_setxattr_noperm+0x120/0x564 [ 138.202888][ T7780] __vfs_setxattr_locked+0x1ec/0x218 [ 138.204347][ T7780] vfs_setxattr+0x158/0x2ac [ 138.205548][ T7780] setxattr+0x248/0x2ac [ 138.206672][ T7780] path_setxattr+0x12c/0x25c [ 138.207977][ T7780] __arm64_sys_setxattr+0xbc/0xd8 [ 138.209351][ T7780] invoke_syscall+0x98/0x2b8 [ 138.210606][ T7780] el0_svc_common+0x138/0x258 [ 138.211865][ T7780] do_el0_svc+0x58/0x14c [ 138.213029][ T7780] el0_svc+0x78/0x1e0 [ 138.214079][ T7780] el0t_64_sync_handler+0xcc/0xe4 [ 138.215454][ T7780] el0t_64_sync+0x1a0/0x1a4 [ 138.216746][ C1] vkms_vblank_simulate: vblank timer overrun [ 138.580362][ T4023] ocfs2: Unmounting device (7,1) on (node local)