last executing test programs: 4.359097237s ago: executing program 1 (id=1352): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="a1830000000000000000050000000800030036"], 0x78}}, 0x0) 4.223632979s ago: executing program 1 (id=1355): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000100)={0x1}) 3.804406465s ago: executing program 1 (id=1359): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "17"}]}], {0x14}}, 0x70}}, 0x0) 3.163607624s ago: executing program 4 (id=1367): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f00000000c0)={0x0, 0x2710}, 0x10) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 2.891971878s ago: executing program 4 (id=1369): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netlink\x00') lseek(r0, 0x8eb, 0x0) preadv(r0, &(0x7f0000000540)=[{&(0x7f0000000380)=""/157, 0x9d}], 0x1, 0xffffffff, 0x0) 2.716245641s ago: executing program 4 (id=1371): timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/55, 0x37}], 0x35) 2.621349332s ago: executing program 1 (id=1374): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f00000003c0)={[{@errors_remount}, {@mblk_io_submit}, {@inlinecrypt}, {@test_dummy_encryption_v1}, {@barrier}, {@stripe={'stripe', 0x3d, 0x2}}, {@nogrpid}]}, 0x3, 0x445, &(0x7f0000000800)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) 2.396385755s ago: executing program 1 (id=1378): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000640)={{{@in6=@mcast2, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x1, 0x0, 0x4e22, 0x4000, 0xa, 0x0, 0x30, 0x0, 0x0, 0xee00}, {0x1, 0x8000000000000001, 0x100000001, 0x6, 0x3, 0x4, 0x4, 0x4}, {0x0, 0x0, 0x0, 0x7}, 0xe, 0x0, 0x1, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x32}, 0x2, @in=@rand_addr=0x64010100, 0x2, 0x4, 0x3}}, 0xe8) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) 2.144094949s ago: executing program 1 (id=1381): syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f00000001c0)=ANY=[@ANYBLOB="6a6f75726e616c5f6173796e635f636f6d6d69742c6865617274626561743d6e6f6e652c6c6f63616c666c6f636b732c696e6f646536342c6a6f75726e616c5f6173796e635f636f6d6d69742c6e6f61636c2c6e6f61636c2c6572726f72733d636f6e74696e75652c00edc97523793b5022d016bb24c65ba594abbd38fd9c301bfa101e61d574eb5cc84215aa20846b6f33df6281eaedb4b4afaaacd321e4df0d16b4f5a8a992efe2554b52ec9c980e5544cd4b8df3e1ba594d07e0bfe3471c164430a36b7ebddc35caf2959224d8330f1807117fc520d8ff5660c5691afd66a8e397bb802ed69df198008fb799cc37"], 0x1, 0x470e, &(0x7f0000008f40)="$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") syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x1260a9, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000c40)) 2.133845209s ago: executing program 4 (id=1382): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f00000000c0)=0x2000) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 1.900184822s ago: executing program 4 (id=1384): syz_mount_image$f2fs(&(0x7f0000000280), &(0x7f0000000040)='./bus\x00', 0x2008400, &(0x7f00000068c0)=ANY=[@ANYBLOB="66617374626f6f742c71756f7461000000000000003b814e50a959736d65720f73ecea54b5e5be45ace9a88f723cb005aeff24212c651baef614d442ae89412ad3dcd0b7586df00000006d65cacd4fc5002207ce994dda65c4b1d23a9bd5ba0f4ce5c2b5a5718c6aa918080002223d2753a5cac974110144cd0a1e368652324a41b31e1eb3b32dccbdf8f68bd96a45a75427a5f789d267fd92f6a5540200b81d5b9fa9b40fe4d7fbd5122b2fea44890a6afc3a989c6d60045663c59cbdc4c700000000bc7f6b22df0191acf5912afdcc1c061835177068c40f757dd123d2600b1c544f1525aa8d00000000000000000000002e8b5c733d362417c17f527c0bfebec112d57fc69fabb9b31ef97b2147931ff60cdf666c25244218b1f1a6010000000100000020563b835d0e8e9a09070ef1691fcb2f37bda5d4e3d9d7a2d0ac82b45a53001057f321acc45d5e065a461de90100000077d200000000000040b78f0dd3836f5ab2f6a1a5b798bb7752f192c6b48e568973a59cd9c74bd9a14721856c5499cd8f93f8beaa9cf76718ce7244c84268c99b6403000000005c000208886b313bd01a22d576e414011a4f0a897515329f86d4585fa0ea17068f8af349696da4a2b3e24310ca52ec51bc23b57897cb55a2d513e6a00765ee3f58b471c54dd57f0af584afe4a21f92b515d7f2fa6fbb273ca0f751e684584320534667aea39ad7222c8ef531f514939177a47395e94c1723abb3fd44fd64fde4b45cc2f55f4ae05ff48648a4c998257856bcdcf2fa02010000001f54fb936570450e91c8d55abad76a7b7a000016f81ec9da9ccc1191c211632266d907e4d9b23496ae19bac24dc23c43f514f1b4af19988bbe61ee29a368a999e6776872d01b79c7821e875859dfbf3c57e4f1fb0be46cb5f7a0fa13516c0926d19dd2d5862085e1e4cb8279be17cba17ee4d06ad97b4ca282e73ea142b01b4a742fa11c0927ba811dd60903d575db449d775021b542db617086b3ed42e6e60fe043cff79b0c067c584ba1d2341fddb8e55312b4b522052b9467d0da116ccc1652d861a420f09aaf67d3e9f6160100000001000008000000ad9896abd325d72e9144cf4f88702f586507e3147198e0bc4060a7c8f4dce73b653177ecf8228e6e6fae02510000000000000000000000000000f43739fdd2d24e50e0233acfe1c8639070fe00f40b0d01f8a0a35fcfe3ea10faf9c24b8488ed4ed83fb06a9a7c57442ede9e1fc2853b8f4d2241cff61d0125b7750e3fdae6a4ab9c776a191ed8098a780ea2bbaa64978cd3a6458fcc6b949bcbca0dceb7b61f66e46731eba4f3aed335e7c8c541e82453218a19d39489e1525466ac93759787e767f601931d94c9c426489b741a6bc8abf475e4bf859e1ce7f7227069e9f51e25fa3d1b18dc565180a1af464a1dd697db85e2b27b90f6bd7cf1b6bc0bcd8ba552ced3d3cfbf9c9bc04f65b6f83cb40173b4bdc393d47e5da95b63a40ac18daf11e8d0706b47795fbe2b56d0ea7ffc5a59ede88621a08b25ca6ebe041317b62373a60951af33eb7954a9731aaa125add0913812435a207439e9122512d77096747a4b404459cebc8faff8f7a31758e630c75a1ff90402754d339dc21cf6b8e04e1aedf14df0b4aaf0e03194df3eb41ba066bc343b323a3162d7e7ba687633c2faa8f28b42364b72e3a457476fd6b2a54e670ba798172c44c4390f73fdab743a4cac88b2bd0545b8483f2e2f9846b138a4d8a7332978da70e9050417087c5ae034a735e8b448dd9701404000000000000262605375ccfdcd7524a63ee2082e989a03fe2b9020ba69ffc7e70434b47ff97678a618f37dc7575b5b19f39bcb9bcd9fbcdaa9ce7dcff94f13c1311fd7ba4375de7b07058a848e44edb77187c1f1ab550cf4307357c36ffb00e3e4c2306c297e7ee493b187a176b9b48f39c484d51417d0e79a3d537866fd0aa37d41e627ba0cccdd6ec0ade31a75ac3587f7e9849973031d68f510226ec6a56746e184318630d4aab5d36c00e9a23432d3fdea8634d8079a5deac6771850ac7de794d3b977011f7759bfa2e173f3fbc2e172b37542094f7b12200d6c0f52680aeb88444331db2c8a96c15a711c8d814a7f6b94379b08f60222b29e408eb4d452093a1881dd6817b04be", @ANYRES8=0x0], 0x1, 0x553b, &(0x7f0000001380)="$eJzs3EtvG1UUAOA7TtPSJxFiwa4jVUiJVFt12lSwC9CKh0gV8ViwAsd2LLe2J4odJ2SFBEvEgn+CQGLFkt/AgjU7xALEDgnkuWNKKI9WduKk/T5pfGbujM+cO7ISnRnLAXhiLaS//pyES+FsCGEuhHAhCfl6Uiy51RieCyFcDiGU/rIkxfifA6dDCOdCCJdGyWPOpNj1+dXhlZWf3vjlm+/OnDr/xdffz27WwKw9H0LobsX13W6MWSvGu8V4bdjOY/fGsIhxR/desZ3FuNvcyDPs1sbH1fJ4vRWPz7Z2+qO42anVR7HV3szHt3rxhP1ha5wnf8Pd2na+3Whu5LHdz/LY2o917e3Hv237/UHM0yjyfZinD4PBOMbx5l4zzmfrXh7rvUExHvNmjebeKA6LWJwu1LNOI69jY5Irfby92e7t7KXD5na/nfXSlUr1hUr1Zrm6nTWag+aNcq3buHkjXWx1RoeVB81ad7WVZa1Os1LPukvpYqteL1er6eKt5ka71kur1cr1yrXyylKxdjV99c67aaeRLo7iy+3ezul2p59uZttpfMdSuly5/uJSeqWavr22nq6/dfv22vo77996785La6+/Uhz0QFnp4vK15eVy9Vp5ubp0DOY/+r/7kPMfTDL/T4qiH2H+yWSXB/6bDxjAI3ug/w/6f+DwnfT+P0yz/x+1VPr//+9/S5P3/xP1v8e1/z/B84eJ6P8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ5YP8x/+Vq+shC3zxfjF4uhZ4rtJIRQCiH8/g/mwukDOeeKPPP/cvz832r4Ngl5htE5zhTLuRDCarH89vRhXwUAAAB4fH310eXPYrceXxZmXRBHKd60KV34YEr5khDC/MKPU8pWGr08O6Vk+ef7VNibUrb8BtZTU0oWb7mdmla2hzI3Dh9fvD+YTyiJoXSk5QAAAEdi7kA42i4EAACAo/TprAtgNpIwfpQ5fhacf/P+/qPNswf2AQAAACdQMusCAAAAgEOX9/9+/w8AAAAeb/H3/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4g537uU0ciOIA/GwwsP+0aLX3bWVvUEZKyDHHQAFpghJIC2mAGsgtJUQQYY+QHIEUiXGsoO+TPM7Y0W9mgMsbSwYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6NJztZ4/3v97uDRnt79MntUAAAAAp2yr9bz+Y9r0f6Trv9KlP6lfREQZEadq90GMWpmDlFOd+f/q3RyeIuqEwxjjdHyPiP/peP3d9acAAAAA12uzXM2aar1ppn1PiM/UbNqUP28y5RURUU1fMqWVh+ZvprD69z2Mu0xp9QbWJFNYs+U2PH1vlGuQtkHrlFYyWdRfYt0ruxkXAADoU7sSOFOFAAAAcAVu+54A/SiOzfE547g5pQeC31o9AAAA4Asq+p4AAAAA0Lm6/vf+PwAAALhuzfv/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6NK2Ws83y9Xs3P3FB3N2+8vkWxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwBv7844CIRAGYbB3fWcy9z+sNGhobFIFwsffGAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAm9/95f/E1DiTzL02lp5HkrVTY+vU2Ds3jv4wvn4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXOzPSwqEQBBEwZzxv5O+/2ElQc8gQgQ0PKqoRQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBFv/vl/8TUOJPMnTaWjkeStavG1lVj70Hj6MF4+zcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXOzcP28cRRQA8Hd7t5c/gDAGuTCgIFFAQ+xLSEgJBcii4CMgWc45GC4EEhckskBuoEKu0yAoEUICmS7fIXUspQldChdGogbt3u5lkxhyiszuEv9+0uy8Pa9m3uydLD/P2gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAafedeCkp4m52mBnH5Wu39jZWsn7ngT5zY+v2fNayuPOoib55++CTb7eXqycn5ionX9WfDAAAAIdDt6zvI+JOur2U9clMXv+n5TVZzf/9M+O4rOcfrPt39jaOFl+aL+v/3369+8JkopnxPNmgq2uj4eLDqfT+oyW23rOPvKKX3/n8dy/d/A1J3t98fjfN72fn25s33+3n4ZE6sgUAHsfJsi+C8uehrB80mRgAh0avUniX9X93ptmcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOqwuxlPlXEnIuZ79+LMzt7Gyn79ja3b82U7e/36VnXMbIg0IlbXRsO0xrW03ZWr1z5ZHo2Gl+sPTkREc7MXwYdTXBPx79cUH89obhX/HHTakUajQVK8P23J5yCD8rN38CM39A0JAIAnVlq0rK6/k24vZa91ZiP++uH++v+1ShxT1v93Pzp7qzpXtf4f1LbC9ltYv/jZwpWr195Yu7h8YXhh+OmbpwZvDU6fO3Pm3EJ2rxYXViMZLjadJgAAAP9j/aJV6/9k9uH9/+OVOKas/z//bvBlda6u+n9f9zb9ms4EAADgMOpPoude+fOPzj5XdPr9+GJ5ff3yYHycnJ8aH2tN9zEdKVq1/u/ONp0VAAAAUIfdzc59+//nK3FMuf//9I8v/lwdsxsRxyIuRcTw5Mql0fn6ltNqdfyhcj5Rv+mVAgAA0JRjRavu/6f58//J5JGHJCJef3Ucl//rapr6v/ve1z9V56o+/3+6viW2UjI3vh95PxfRm2s6IwAAAJ5kR4uWFfu/p9tLH/9y/IO+5/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6vZ3AAAA//+pzDYD") r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./bus\x00', 0x141842, 0x12) fadvise64(r0, 0x9, 0x6, 0x2) 1.268250892s ago: executing program 2 (id=1387): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip_vti0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}, @IFLA_BOND_ACTIVE_SLAVE={0x8, 0x2, r1}]}}}]}, 0x44}}, 0x0) 1.173062723s ago: executing program 2 (id=1389): r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x240c8004, &(0x7f0000000280)={0xa, 0xe20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1b}}}, 0x1c) setsockopt$inet6_udp_int(r0, 0x88, 0x1, &(0x7f0000000080), 0x4) 1.113281744s ago: executing program 2 (id=1391): r0 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SYMLINKAT={0x26, 0x15, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 1.011503465s ago: executing program 2 (id=1393): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$TCGETA(r0, 0x541a, 0xffffffffffffffff) 875.011838ms ago: executing program 2 (id=1395): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x1010000, &(0x7f0000000140)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@iocharset={'iocharset', 0x3d, 'ascii'}}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'cp857'}}, {@utf8no}, {@utf8}, {@utf8no}, {@uni_xlate}, {@uni_xlateno}, {@shortname_winnt}, {@utf8no}, {@fat=@codepage={'codepage', 0x3d, '863'}}, {@utf8no}, {@fat=@dos1xfloppy}, {@utf8no}, {@fat=@check_strict}, {@numtail}]}, 0x1, 0x36b, &(0x7f0000000500)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000001280)=""/4089, 0xff9) 788.249689ms ago: executing program 0 (id=1397): socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0x7, &(0x7f0000000100)={0x5, 0x5}, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 736.915709ms ago: executing program 0 (id=1399): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bind$tipc(r0, 0x0, 0x0) 721.76098ms ago: executing program 3 (id=1400): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r0, 0x29, 0x6, 0xfffffffffffffffe, 0x3) 672.18793ms ago: executing program 0 (id=1401): syz_mount_image$hfs(&(0x7f00000000c0), &(0x7f0000000040)='./bus\x00', 0x800044, &(0x7f0000000080)=ANY=[], 0x1, 0x368, &(0x7f00000009c0)="$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") syz_emit_vhci(0x0, 0x7) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x1}}, 0x4) 661.168651ms ago: executing program 3 (id=1402): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000000b80)=""/101) 568.228312ms ago: executing program 3 (id=1403): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001480)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xfe, 0x60000002, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffffffffd73, &(0x7f0000000040)="ded61b966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75b4eb3e7206afce", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f90931dec60fed6c9fee64af416c29f65e47110b81f6b4da06db5e1aad1f627acb", 0x0, 0x3}, 0x2c) 447.195074ms ago: executing program 4 (id=1404): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x44, r1, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0x44}, 0x1, 0x0, 0x0, 0x84}, 0x4) 413.737644ms ago: executing program 2 (id=1405): syz_mount_image$hfs(&(0x7f0000000300), &(0x7f0000000000)='.\x02\x00', 0x4810, &(0x7f0000000180)=ANY=[], 0x3, 0x2e7, &(0x7f0000001900)="$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") r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x50009404, &(0x7f00000004c0)={0x0, 0x0, 0x3a}) 300.144126ms ago: executing program 0 (id=1406): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x10, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6d2c}]}]}]}, 0x3c}}, 0x0) 299.954856ms ago: executing program 3 (id=1407): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc0045516, 0xffffffffffffffff) 245.153977ms ago: executing program 0 (id=1408): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCADDRT(r0, 0x89e0, 0xfffffffffffffffe) 201.731447ms ago: executing program 3 (id=1409): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="180200001b00000000000000b296ffff850000004100000095000000000000003af1f53778422dccc1c3e37f5ed9fef666387df316ddb9043b838619eb042c080f5e94778ec365075dd75aaaa969f99760a84a18cb0534ba5f8ac821babe107f0000004c5b4692af9eac983e8f8ff0d856912643dddc1a5d2b904a5b066005b2342eccfad67243af92826de6e0e7ae1025806b557b7c98c031a61dd9f91b1c71b45c29d26439c985eada75"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff200000000021000aac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 113.329859ms ago: executing program 0 (id=1410): unshare(0x22020600) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$inet(r0, 0x0, 0x0) 0s ago: executing program 3 (id=1411): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x40}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x17}]}}}]}]}], {0x14, 0x11, 0x102}}, 0x7c}}, 0x0) kernel console output (not intermixed with test programs): th1_to_hsr: link becomes ready [ 52.487859][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.493553][ T4044] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 52.517252][ T4046] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 52.555424][ T4046] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 52.605668][ T4046] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 52.657189][ T4046] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 52.745614][ T4034] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.754494][ T4044] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.768212][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 52.770470][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 52.781877][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.784859][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.798448][ T4034] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.815820][ T4041] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.831530][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.835773][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.838718][ T326] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.840810][ T326] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.844086][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.847899][ T1632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.851055][ T1632] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.857286][ T1632] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.859407][ T1632] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.864937][ T4033] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.883524][ T1632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 52.886770][ T1632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 52.889975][ T1632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.894430][ T1632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.899317][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.927978][ T1632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 52.931231][ T1632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.935218][ T1632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.942375][ T4041] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.950020][ T4033] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.953943][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 52.958858][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.979148][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 52.983207][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 52.986183][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 52.989268][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.992755][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.995435][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.997526][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.000031][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.003589][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.006313][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.008384][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.010797][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.014915][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.017724][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.020637][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.026582][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.029304][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.032748][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.038688][ T4044] device veth0_vlan entered promiscuous mode [ 53.053692][ T4034] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 53.057160][ T4034] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.059932][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.067876][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.070698][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.074244][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.076996][ T326] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.078996][ T326] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.081551][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.085441][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.088921][ T4044] device veth1_vlan entered promiscuous mode [ 53.107906][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 53.110700][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.113945][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.116681][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.118630][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.121109][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.125027][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.128158][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.145507][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.148323][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.168070][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 53.171105][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.180696][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.184743][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.189040][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.192903][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.199412][ T1632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.203680][ T1632] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.214672][ T4041] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.240347][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.247339][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.250259][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.254654][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.260336][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.271856][ T1632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.274788][ T1632] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.277647][ T1632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.280233][ T1632] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.297596][ T4033] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.310040][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 53.315868][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 53.323384][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 53.325613][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 53.365425][ T4046] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.389309][ T4044] device veth0_macvtap entered promiscuous mode [ 53.398859][ T4034] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.412316][ T13] Bluetooth: hci0: command 0x041b tx timeout [ 53.414834][ T13] Bluetooth: hci2: command 0x041b tx timeout [ 53.416725][ T13] Bluetooth: hci3: command 0x041b tx timeout [ 53.418819][ T13] Bluetooth: hci1: command 0x041b tx timeout [ 53.420825][ T4044] device veth1_macvtap entered promiscuous mode [ 53.426186][ T13] Bluetooth: hci4: command 0x041b tx timeout [ 53.427197][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 53.430678][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 53.434067][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.436937][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.449430][ T4046] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.456150][ T1632] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 53.458499][ T1632] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 53.479528][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.490414][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.494146][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.496253][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.498737][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.503382][ T4041] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.525496][ T4044] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.529019][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.533236][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.536058][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.538034][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.540555][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 53.546064][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 53.556545][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.561001][ T4044] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.574520][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 53.577434][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 53.580413][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 53.583316][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 53.585519][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 53.588366][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.606910][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.609977][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 53.613843][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.623284][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.626515][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.629717][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.635613][ T4044] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.638222][ T4044] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.640621][ T4044] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.643729][ T4044] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.650927][ T4033] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.667535][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.670678][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.723016][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.726038][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.746373][ T1632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 53.749429][ T1632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.752945][ T1632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 53.756405][ T1632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.759325][ T1632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.763749][ T1632] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.766727][ T4034] device veth0_vlan entered promiscuous mode [ 53.793732][ T1632] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.796437][ T1632] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.799085][ T1632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 53.804566][ T1632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.807546][ T1632] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.810147][ T1632] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.818571][ T4046] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.830213][ T4041] device veth0_vlan entered promiscuous mode [ 53.852443][ T4034] device veth1_vlan entered promiscuous mode [ 53.866396][ T4041] device veth1_vlan entered promiscuous mode [ 53.895099][ T1632] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 53.897880][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.900571][ T1632] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 53.911282][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.912984][ T1632] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 53.916614][ T1632] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 53.919748][ T1632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 53.931347][ T1632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.937804][ T4033] device veth0_vlan entered promiscuous mode [ 53.957895][ T1632] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 53.960726][ T1632] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.964783][ T1632] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.980437][ T4033] device veth1_vlan entered promiscuous mode [ 54.016117][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 54.018863][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 54.025005][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 54.027920][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 54.030777][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 54.039713][ T1632] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.040104][ T4034] device veth0_macvtap entered promiscuous mode [ 54.044307][ T1632] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.055190][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 54.058002][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 54.060836][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 54.073879][ T4041] device veth0_macvtap entered promiscuous mode [ 54.079386][ T4041] device veth1_macvtap entered promiscuous mode [ 54.088074][ T4034] device veth1_macvtap entered promiscuous mode [ 54.117460][ T4033] device veth0_macvtap entered promiscuous mode [ 54.122841][ T1632] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 54.125762][ T1632] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 54.128595][ T1632] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 54.134620][ T1632] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.136916][ T1632] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.139162][ T1632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 54.142936][ T1632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 54.153268][ T4046] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.163726][ T4041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.166822][ T4041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.171106][ T4041] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.201092][ T1632] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 54.203990][ T1632] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 54.206855][ T1632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 54.224235][ T4033] device veth1_macvtap entered promiscuous mode [ 54.228905][ T4034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.233949][ T4034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.236822][ T4034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.239649][ T4034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.245458][ T4034] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.253505][ T4041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.256703][ T4041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.260752][ T4041] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.264926][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 54.267751][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 54.270863][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 54.275642][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 54.278613][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 54.295028][ T4034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.298058][ T4034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.300871][ T4034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.323360][ T4146] loop3: detected capacity change from 0 to 128 [ 54.330016][ T4034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.335152][ T4034] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.345515][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 54.348471][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 54.355033][ T4033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.357866][ T4033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.367036][ T4033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.370083][ T4033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.381124][ T4033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.389168][ T4033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.401372][ T4033] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.431975][ T4041] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.434599][ T4041] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.437044][ T4041] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.439567][ T4041] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.473939][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 54.477026][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 54.485948][ T4034] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.488513][ T4034] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.490920][ T4034] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.494781][ T4034] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.503457][ T4033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.517081][ T4033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.519976][ T4033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.531369][ T4033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.540259][ T4151] ptrace attach of "./syz-executor exec"[4044] was attempted by "\x22"[4151] [ 54.550049][ T4033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.560374][ T4033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.564752][ T4033] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.570580][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 54.580220][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 54.679728][ T4033] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.689925][ T4033] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.702103][ T4033] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.706743][ T4033] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.769401][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.774417][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.874511][ T1632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.877450][ T1632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.881359][ T1632] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.885129][ T1632] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.925678][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.927572][ T4046] device veth0_vlan entered promiscuous mode [ 54.928034][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.939467][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.951817][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.968534][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 54.971380][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 54.989348][ T4046] device veth1_vlan entered promiscuous mode [ 55.028646][ T4165] trusted_key: encrypted_key: key trusted:syz not found [ 55.081083][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.086698][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.100147][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.103263][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 55.109818][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 55.136099][ T1632] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.138292][ T1632] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.141553][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 55.152425][ T326] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.154989][ T326] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.159343][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 55.278709][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.281105][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.308372][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 55.318551][ T4046] device veth0_macvtap entered promiscuous mode [ 55.345657][ T4046] device veth1_macvtap entered promiscuous mode [ 55.353966][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.356905][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.360532][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.373899][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.437617][ T4046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.440649][ T4046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.464542][ T4046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.471913][ T4046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.474669][ T4046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.477562][ T4046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.480409][ T4046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.492366][ T4104] Bluetooth: hci4: command 0x040f tx timeout [ 55.494794][ T4104] Bluetooth: hci1: command 0x040f tx timeout [ 55.499698][ T4104] Bluetooth: hci3: command 0x040f tx timeout [ 55.508138][ T4104] Bluetooth: hci2: command 0x040f tx timeout [ 55.509606][ T4046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.517618][ T4104] Bluetooth: hci0: command 0x040f tx timeout [ 55.522894][ T4046] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.536723][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.539644][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.568904][ T4046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.582427][ T4046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.585339][ T4046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.588138][ T4046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.590939][ T4046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.595915][ T4188] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20'. [ 55.637905][ T4046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.640579][ T4046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.657267][ T4046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.683727][ T4046] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.711261][ T4046] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.724994][ T4197] loop1: detected capacity change from 0 to 256 [ 55.727067][ T4046] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.729514][ T4046] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.749087][ T4046] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.760946][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.766510][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.939246][ T1632] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.941610][ T1632] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.945166][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 55.989111][ T1632] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.991483][ T1632] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.997098][ T1632] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 56.076976][ T4211] loop1: detected capacity change from 0 to 256 [ 56.120195][ T4211] exfat: Deprecated parameter 'utf8' [ 56.154698][ T4211] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x9ae00b1e, utbl_chksum : 0xe619d30d) [ 56.186959][ T4217] loop4: detected capacity change from 0 to 164 [ 56.222699][ T4217] ======================================================= [ 56.222699][ T4217] WARNING: The mand mount option has been deprecated and [ 56.222699][ T4217] and is ignored by this kernel. Remove the mand [ 56.222699][ T4217] option from the mount to silence this warning. [ 56.222699][ T4217] ======================================================= [ 56.283257][ T4217] Unable to read rock-ridge attributes [ 56.338576][ T4217] Unable to read rock-ridge attributes [ 56.348972][ T4223] loop2: detected capacity change from 0 to 256 [ 56.377771][ T4217] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 56.412915][ T4223] exfat: Deprecated parameter 'utf8' [ 56.414576][ T4223] exfat: Deprecated parameter 'utf8' [ 56.416122][ T4223] exfat: Deprecated parameter 'utf8' [ 56.486212][ T4231] tipc: Started in network mode [ 56.487708][ T4231] tipc: Node identity 0500000000000000faffffffffffffff, cluster identity 4711 [ 56.503878][ T4223] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d) [ 56.559228][ T4199] loop0: detected capacity change from 0 to 32768 [ 56.613195][ T4239] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 56.743661][ T4199] jfs_create: dtInsert returned -EIO [ 56.745453][ T4199] ERROR: (device loop0): txAbort: [ 56.745453][ T4199] [ 56.960803][ T4259] netlink: 'syz.2.56': attribute type 3 has an invalid length. [ 57.031890][ T4264] netlink: 8 bytes leftover after parsing attributes in process `syz.3.58'. [ 57.034628][ T4264] netlink: 4 bytes leftover after parsing attributes in process `syz.3.58'. [ 57.037100][ T4264] netlink: 52 bytes leftover after parsing attributes in process `syz.3.58'. [ 57.047583][ T4265] loop4: detected capacity change from 0 to 2048 [ 57.211240][ T4265] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 57.239592][ T4274] loop2: detected capacity change from 0 to 2048 [ 57.277167][ T4274] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 57.368054][ T4283] loop3: detected capacity change from 0 to 512 [ 57.383934][ T4287] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 57.444636][ T4283] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 57.447592][ T4283] EXT4-fs (loop3): can't mount with commit=7, fs mounted w/o journal [ 57.582179][ T4024] Bluetooth: hci0: command 0x0419 tx timeout [ 57.584090][ T4024] Bluetooth: hci2: command 0x0419 tx timeout [ 57.585799][ T4024] Bluetooth: hci3: command 0x0419 tx timeout [ 57.587481][ T4024] Bluetooth: hci1: command 0x0419 tx timeout [ 57.590388][ T4297] device netdevsim0 entered promiscuous mode [ 57.595452][ T4024] Bluetooth: hci4: command 0x0419 tx timeout [ 57.615740][ T4291] loop1: detected capacity change from 0 to 4096 [ 57.654639][ T4297] netlink: 40 bytes leftover after parsing attributes in process `syz.2.71'. [ 57.664831][ T4297] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 57.670369][ T4291] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 58.140868][ T4321] loop4: detected capacity change from 0 to 1024 [ 58.241435][ T4321] hfsplus: bad catalog entry type [ 58.305442][ T136] hfsplus: b-tree write err: -5, ino 4 [ 58.467826][ T4307] loop0: detected capacity change from 0 to 32768 [ 58.530698][ T26] audit: type=1326 audit(58.460:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4339 comm="syz.4.92" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffadb5cba8 code=0x0 [ 59.417908][ T4349] loop3: detected capacity change from 0 to 40427 [ 59.503352][ T4349] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x1ffff [ 59.554864][ T4349] F2FS-fs (loop3): invalid crc value [ 59.593925][ T4349] F2FS-fs (loop3): Found nat_bits in checkpoint [ 59.655512][ T4349] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 59.905229][ T4044] attempt to access beyond end of device [ 59.905229][ T4044] loop3: rw=2049, want=45104, limit=40427 [ 60.011213][ T4389] loop4: detected capacity change from 0 to 1024 [ 60.051063][ T4389] EXT4-fs (loop4): Ignoring removed bh option [ 60.083836][ T4389] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,data_err=abort,min_batch_time=0x0000000000000008,dioread_lock,data_err=ignore,nodiscard,data_err=ignore,grpquota,abort,noauto_da_alloc,bh,nolazytime,,errors=continue. Quota mode: writeback. [ 60.578255][ T4385] loop0: detected capacity change from 0 to 32768 [ 60.640495][ T4385] XFS (loop0): Mounting V5 Filesystem [ 60.717282][ T4385] XFS (loop0): Ending clean mount [ 60.808867][ T4041] XFS (loop0): Unmounting Filesystem [ 61.582087][ T4468] loop1: detected capacity change from 0 to 256 [ 61.627212][ T4432] loop2: detected capacity change from 0 to 32768 [ 61.633367][ T4453] loop0: detected capacity change from 0 to 8192 [ 61.665658][ T4432] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.127 (4432) [ 61.667164][ T4453] ntfs: (device loop0): parse_options(): Unrecognized mount option J€dº¢Uât/Tî;z ¤ØÕ|Èa´4î㿜‹‘³Ÿb$÷Ê. [ 61.696515][ T4468] FAT-fs (loop1): Directory bread(block 64) failed [ 61.698589][ T4468] FAT-fs (loop1): Directory bread(block 65) failed [ 61.700448][ T4468] FAT-fs (loop1): Directory bread(block 66) failed [ 61.712533][ T4468] FAT-fs (loop1): Directory bread(block 67) failed [ 61.714598][ T4468] FAT-fs (loop1): Directory bread(block 68) failed [ 61.716350][ T4468] FAT-fs (loop1): Directory bread(block 69) failed [ 61.718620][ T4468] FAT-fs (loop1): Directory bread(block 70) failed [ 61.720503][ T4468] FAT-fs (loop1): Directory bread(block 71) failed [ 61.736615][ T4468] FAT-fs (loop1): Directory bread(block 72) failed [ 61.738538][ T4468] FAT-fs (loop1): Directory bread(block 73) failed [ 61.751824][ T4432] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 61.754653][ T4432] BTRFS info (device loop2): force zlib compression, level 3 [ 61.756700][ T4432] BTRFS info (device loop2): force clearing of disk cache [ 61.782009][ T4432] BTRFS info (device loop2): setting nodatasum [ 61.783665][ T4432] BTRFS info (device loop2): allowing degraded mounts [ 61.785530][ T4432] BTRFS info (device loop2): enabling disk space caching [ 61.787627][ T4432] BTRFS info (device loop2): disk space caching is enabled [ 61.789644][ T4432] BTRFS info (device loop2): has skinny extents [ 61.800345][ T4468] attempt to access beyond end of device [ 61.800345][ T4468] loop1: rw=2051, want=1768, limit=256 [ 61.821099][ T4443] loop3: detected capacity change from 0 to 32768 [ 61.862386][ T4443] XFS: ikeep mount option is deprecated. [ 61.958831][ T4443] XFS (loop3): Mounting V5 Filesystem [ 62.181447][ T4443] XFS (loop3): Ending clean mount [ 62.209526][ T4443] XFS (loop3): Quotacheck needed: Please wait. [ 62.228359][ T4432] BTRFS info (device loop2): clearing free space tree [ 62.230693][ T4432] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 62.242077][ T4432] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 62.332199][ T4443] XFS (loop3): Quotacheck: Done. [ 62.471532][ T4432] BTRFS info (device loop2): balance: start -svrange=18446744073709551614..0,limit=25769803776 [ 62.500149][ T4432] BTRFS info (device loop2): balance: ended with status: 0 [ 62.555976][ T4044] XFS (loop3): Unmounting Filesystem [ 62.836877][ T4514] loop0: detected capacity change from 0 to 32768 [ 62.993638][ T4514] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 63.036567][ T4514] (syz.0.152,4514,1):ocfs2_verify_group_and_input:425 ERROR: the add group should be in chain 1 [ 63.073972][ T4514] (syz.0.152,4514,1):ocfs2_group_add:503 ERROR: status = -22 [ 63.078606][ T4549] netlink: 80 bytes leftover after parsing attributes in process `syz.3.157'. [ 63.137268][ T4551] sctp: [Deprecated]: syz.1.166 (pid 4551) Use of int in maxseg socket option. [ 63.137268][ T4551] Use struct sctp_assoc_value instead [ 63.207224][ T4041] ocfs2: Unmounting device (7,0) on (node local) [ 63.320660][ T4563] loop4: detected capacity change from 0 to 512 [ 63.386698][ T4563] EXT2-fs (loop4): warning: feature flags set on rev 0 fs, running e2fsck is recommended [ 63.409998][ T4563] EXT2-fs (loop4): warning: maximal mount count reached, running e2fsck is recommended [ 63.438157][ T4563] EXT2-fs (loop4): 0.5b, 95/08/09, bs=4096, gc=1, bpg=32768, ipg=32, mo=8001c] [ 63.575366][ T4574] netlink: 'syz.3.177': attribute type 3 has an invalid length. [ 63.586717][ T4575] smc: net device ip_vti0 applied user defined pnetid SYZ0 [ 63.701498][ T4579] loop4: detected capacity change from 0 to 64 [ 63.805136][ T4579] hfs: hfs: Invalid key length: 94 [ 63.815878][ T4585] loop0: detected capacity change from 0 to 64 [ 63.940450][ T4046] hfs: node 4:3 still has 1 user(s)! [ 63.948256][ T4560] loop2: detected capacity change from 0 to 32768 [ 63.957616][ T4585] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 64.043355][ T4592] netlink: 28 bytes leftover after parsing attributes in process `syz.3.186'. [ 64.081853][ T4560] XFS (loop2): Mounting V5 Filesystem [ 64.192109][ T4569] loop1: detected capacity change from 0 to 40427 [ 64.239490][ T4560] XFS (loop2): Ending clean mount [ 64.311850][ T4034] XFS (loop2): Unmounting Filesystem [ 64.322904][ T4569] F2FS-fs (loop1): build fault injection attr: rate: 693, type: 0x1ffff [ 64.330087][ T4569] F2FS-fs (loop1): invalid crc value [ 64.375214][ T4569] F2FS-fs (loop1): Found nat_bits in checkpoint [ 64.422402][ T4569] F2FS-fs (loop1): Start checkpoint disabled! [ 64.437405][ T4569] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 64.526295][ T4569] F2FS-fs (loop1): Checkpoint should be enabled. [ 64.629285][ T136] attempt to access beyond end of device [ 64.629285][ T136] loop1: rw=2049, want=40976, limit=40427 [ 64.922555][ T4644] loop1: detected capacity change from 0 to 512 [ 64.974711][ T4644] EXT4-fs (loop1): Ignoring removed bh option [ 64.976504][ T4644] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 64.978657][ T4644] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 65.065609][ T4644] EXT4-fs (loop1): mounted filesystem without journal. Opts: bh,mblk_io_submit,nojournal_checksum,init_itable=0x0000000000000006,dioread_nolock,,errors=continue. Quota mode: writeback. [ 65.633314][ T4641] loop3: detected capacity change from 0 to 32768 [ 65.663261][ T4676] loop2: detected capacity change from 0 to 2048 [ 65.705444][ T4641] ERROR: (device loop3): dbAlloc: the hint is outside the map [ 65.705444][ T4641] [ 65.718260][ T4641] ERROR: (device loop3): remounting filesystem as read-only [ 65.761740][ T4683] loop0: detected capacity change from 0 to 2048 [ 65.771246][ T4676] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 65.781537][ T4676] UDF-fs: Scanning with blocksize 512 failed [ 65.781602][ T241] blkno = 5002c, nblocks = 1 [ 65.785833][ T241] ERROR: (device loop3): dbUpdatePMap: blocks are outside the map [ 65.785833][ T241] [ 65.826603][ T4683] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 65.843136][ T4676] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 66.182526][ T4699] loop1: detected capacity change from 0 to 2048 [ 66.214678][ T4702] CUSE: unknown device info "" [ 66.222016][ T4702] CUSE: DEVNAME unspecified [ 66.311222][ T4699] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 66.555447][ T4700] loop0: detected capacity change from 0 to 40427 [ 66.598468][ T4686] loop4: detected capacity change from 0 to 32768 [ 66.637357][ T4700] F2FS-fs (loop0): invalid crc value [ 66.679992][ T4700] F2FS-fs (loop0): Found nat_bits in checkpoint [ 66.716157][ T4686] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 66.862345][ T4700] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 66.968958][ T4046] ocfs2: Unmounting device (7,4) on (node local) [ 67.255564][ T4757] netlink: 4 bytes leftover after parsing attributes in process `syz.1.257'. [ 67.558999][ T4785] tipc: Started in network mode [ 67.570249][ T4785] tipc: Node identity aaaaaaaaaa3b, cluster identity 4711 [ 67.583322][ T4785] tipc: Enabled bearer , priority 10 [ 67.639463][ T4789] Injecting memory failure for pfn 0x12c07f at process virtual address 0x20ffe000 [ 67.649642][ T4789] Memory failure: 0x12c07f: recovery action for dirty LRU page: Recovered [ 67.653913][ T4789] Injecting memory failure for pfn 0x12c125 at process virtual address 0x20fff000 [ 67.658266][ T4789] Memory failure: 0x12c125: recovery action for dirty LRU page: Recovered [ 67.809668][ T4804] binder: BINDER_SET_CONTEXT_MGR already set [ 67.811591][ T4804] binder: 4801:4804 ioctl 40046207 0 returned -16 [ 67.999678][ T4813] loop0: detected capacity change from 0 to 256 [ 68.098081][ T4813] FAT-fs (loop0): Directory bread(block 64) failed [ 68.101894][ T4813] FAT-fs (loop0): Directory bread(block 65) failed [ 68.104589][ T4813] FAT-fs (loop0): Directory bread(block 66) failed [ 68.118169][ T4813] FAT-fs (loop0): Directory bread(block 67) failed [ 68.120091][ T4813] FAT-fs (loop0): Directory bread(block 68) failed [ 68.128324][ T4813] FAT-fs (loop0): Directory bread(block 69) failed [ 68.130224][ T4813] FAT-fs (loop0): Directory bread(block 70) failed [ 68.141131][ T4813] FAT-fs (loop0): Directory bread(block 71) failed [ 68.169130][ T4813] FAT-fs (loop0): Directory bread(block 72) failed [ 68.171005][ T4813] FAT-fs (loop0): Directory bread(block 73) failed [ 68.418308][ T4797] loop3: detected capacity change from 0 to 32768 [ 68.429398][ T4834] loop4: detected capacity change from 0 to 1024 [ 68.488798][ T4797] (syz.3.272,4797,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 68.497550][ T4797] (syz.3.272,4797,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 68.575994][ T4797] JBD2: Ignoring recovery information on journal [ 68.580101][ T136] hfsplus: b-tree write err: -5, ino 4 [ 68.702478][ T25] tipc: Node number set to 9546410 [ 68.753200][ T4797] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 68.876112][ T4856] loop2: detected capacity change from 0 to 256 [ 68.949232][ T4856] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x587066de, utbl_chksum : 0xe619d30d) [ 68.956692][ T4858] Injecting memory failure for pfn 0x12c15d at process virtual address 0x20ffe000 [ 68.970488][ T4858] Memory failure: 0x12c15d: recovery action for dirty LRU page: Recovered [ 68.973841][ T4858] Injecting memory failure for pfn 0x11e783 at process virtual address 0x20fff000 [ 68.979243][ T4858] Memory failure: 0x11e783: recovery action for dirty LRU page: Recovered [ 69.062740][ T4044] ocfs2: Unmounting device (7,3) on (node local) [ 69.103930][ T4867] netlink: 40 bytes leftover after parsing attributes in process `syz.0.307'. [ 69.135233][ T4868] loop4: detected capacity change from 0 to 2048 [ 69.237440][ T4868] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 69.264534][ T4877] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 69.264822][ T4868] attempt to access beyond end of device [ 69.264822][ T4868] loop4: rw=524288, want=33554432, limit=2048 [ 69.357972][ T4868] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 69.365624][ T4868] Remounting filesystem read-only [ 69.368051][ T4868] NILFS error (device loop4): nilfs_bmap_last_key: broken bmap (inode number=16) [ 69.370781][ T4868] NILFS (loop4): error -5 truncating bmap (ino=16) [ 69.416950][ T4868] attempt to access beyond end of device [ 69.416950][ T4868] loop4: rw=0, want=33554432, limit=2048 [ 69.420549][ T4868] NILFS (loop4): I/O error reading meta-data file (ino=6, block-offset=3) [ 69.453370][ T4887] loop3: detected capacity change from 0 to 128 [ 69.466953][ T4868] NILFS (loop4): error -5 reading inode: ino=12 [ 69.537023][ T4887] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 69.555940][ T4895] loop1: detected capacity change from 0 to 512 [ 69.590176][ T4046] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer [ 69.642346][ T4895] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 69.645572][ T4895] EXT4-fs (loop1): orphan cleanup on readonly fs [ 69.649866][ T4895] EXT4-fs warning (device loop1): ext4_enable_quotas:6459: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 69.659499][ T2053] ieee802154 phy0 wpan0: encryption failed: -22 [ 69.661632][ T2053] ieee802154 phy1 wpan1: encryption failed: -22 [ 69.711081][ T4895] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 69.732924][ T4895] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2941: inode #16: comm syz.1.317: corrupted xattr block 31 [ 69.768292][ T4895] EXT4-fs warning (device loop1): ext4_evict_inode:302: xattr delete (err -117) [ 69.779493][ T4894] loop0: detected capacity change from 0 to 32768 [ 69.781928][ T4895] EXT4-fs (loop1): 1 orphan inode deleted [ 69.783621][ T4895] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 69.959024][ T4894] XFS (loop0): Mounting V5 Filesystem [ 70.009409][ T4919] loop3: detected capacity change from 0 to 256 [ 70.017745][ T4916] loop2: detected capacity change from 0 to 1024 [ 70.043486][ T4894] XFS (loop0): Ending clean mount [ 70.198568][ T136] hfsplus: b-tree write err: -5, ino 4 [ 70.285371][ T4041] XFS (loop0): Unmounting Filesystem [ 71.000422][ T4969] Soft offlining pfn 0x12c38e at process virtual address 0x20000000 [ 71.015859][ T4969] Soft offlining pfn 0x213dbd at process virtual address 0x20001000 [ 71.032951][ T4969] Memory failure: 0x213dbd: unhandlable page. [ 71.148382][ T4945] loop2: detected capacity change from 0 to 32768 [ 71.201123][ T4945] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.339 (4945) [ 71.222965][ T4945] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm [ 71.225493][ T4945] BTRFS info (device loop2): enabling auto defrag [ 71.240125][ T4945] BTRFS info (device loop2): use no compression [ 71.244484][ T4945] BTRFS info (device loop2): force clearing of disk cache [ 71.249989][ T4945] BTRFS info (device loop2): turning on async discard [ 71.259095][ T4945] BTRFS info (device loop2): max_inline at 5 [ 71.266788][ T4945] BTRFS info (device loop2): force zlib compression, level 3 [ 71.268887][ T4945] BTRFS info (device loop2): using free space tree [ 71.270988][ T4945] BTRFS info (device loop2): has skinny extents [ 71.429459][ T4945] BTRFS info (device loop2): enabling ssd optimizations [ 71.444544][ T4945] BTRFS info (device loop2): clearing free space tree [ 71.446535][ T4945] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 71.449143][ T4945] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 71.505366][ T4945] BTRFS info (device loop2): creating free space tree [ 71.508860][ T4945] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 71.511637][ T4945] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 71.644787][ T4977] loop4: detected capacity change from 0 to 40427 [ 71.682879][ T4977] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x1ffff [ 71.687132][ T4977] F2FS-fs (loop4): invalid crc value [ 71.708171][ T5021] capability: warning: `syz.0.364' uses 32-bit capabilities (legacy support in use) [ 71.725214][ T4977] F2FS-fs (loop4): Found nat_bits in checkpoint [ 71.768447][ T4977] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 71.807767][ T4046] attempt to access beyond end of device [ 71.807767][ T4046] loop4: rw=2049, want=45104, limit=40427 [ 72.061501][ T5035] netlink: 128 bytes leftover after parsing attributes in process `syz.0.370'. [ 72.102097][ T5035] Zero length message leads to an empty skb [ 72.295441][ T5049] sp0: Synchronizing with TNC [ 72.570997][ T5068] loop3: detected capacity change from 0 to 1024 [ 72.580776][ T5063] loop4: detected capacity change from 0 to 2048 [ 72.672075][ T5063] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 72.686039][ T5063] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 72.773163][ T5068] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 72.814343][ T5068] EXT4-fs warning (device loop3): ext4_resize_begin:73: won't resize using backup superblock at 1 [ 72.856354][ T5043] loop0: detected capacity change from 0 to 40427 [ 72.877623][ T5081] loop1: detected capacity change from 0 to 64 [ 72.899367][ T5043] F2FS-fs (loop0): build fault injection attr: rate: 771, type: 0x1ffff [ 72.904093][ T5043] F2FS-fs (loop0): invalid crc value [ 72.928548][ T5076] loop2: detected capacity change from 0 to 8192 [ 72.935091][ T5043] F2FS-fs (loop0): Found nat_bits in checkpoint [ 72.989525][ T5081] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing [ 72.992024][ T5076] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 73.038761][ T5043] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 73.080180][ T5076] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 73.085885][ T5076] ntfs3: loop2: Failed to load $Extend. [ 73.116055][ T5092] loop4: detected capacity change from 0 to 1024 [ 73.230047][ T5092] hfsplus: small file entry [ 73.288100][ T4041] attempt to access beyond end of device [ 73.288100][ T4041] loop0: rw=2049, want=45104, limit=40427 [ 73.561174][ T5102] loop4: detected capacity change from 0 to 8192 [ 73.568218][ T5104] loop1: detected capacity change from 0 to 4096 [ 73.617030][ T5104] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 73.644789][ T5102] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 73.647729][ T5102] REISERFS (device loop4): using ordered data mode [ 73.649632][ T5102] reiserfs: using flush barriers [ 73.709948][ T5091] loop3: detected capacity change from 0 to 32768 [ 73.711943][ T5102] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 73.716664][ T5102] REISERFS (device loop4): checking transaction log (loop4) [ 73.759628][ T26] audit: type=1326 audit(73.690:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5113 comm="syz.2.404" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff94301ba8 code=0x0 [ 73.822500][ T5091] XFS (loop3): Mounting V5 Filesystem [ 73.925037][ T5091] XFS (loop3): Ending clean mount [ 73.941595][ T5110] loop0: detected capacity change from 0 to 4096 [ 74.029091][ T5110] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 74.077689][ T4044] XFS (loop3): Unmounting Filesystem [ 74.109498][ T5102] REISERFS (device loop4): Using tea hash to sort names [ 74.114906][ T5102] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 74.539810][ T5142] netlink: 71 bytes leftover after parsing attributes in process `syz.0.413'. [ 74.657401][ T5148] loop0: detected capacity change from 0 to 256 [ 74.799765][ T2451] cfg80211: failed to load regulatory.db [ 74.884803][ T5148] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 75.184405][ T5175] loop0: detected capacity change from 0 to 256 [ 75.346794][ T5175] FAT-fs (loop0): Directory bread(block 64) failed [ 75.348766][ T5175] FAT-fs (loop0): Directory bread(block 65) failed [ 75.350680][ T5175] FAT-fs (loop0): Directory bread(block 66) failed [ 75.394228][ T5175] FAT-fs (loop0): Directory bread(block 67) failed [ 75.396131][ T5175] FAT-fs (loop0): Directory bread(block 68) failed [ 75.397961][ T5175] FAT-fs (loop0): Directory bread(block 69) failed [ 75.399841][ T5175] FAT-fs (loop0): Directory bread(block 70) failed [ 75.423878][ T5175] FAT-fs (loop0): Directory bread(block 71) failed [ 75.425862][ T5175] FAT-fs (loop0): Directory bread(block 72) failed [ 75.427705][ T5175] FAT-fs (loop0): Directory bread(block 73) failed [ 75.543796][ T5178] loop2: detected capacity change from 0 to 40427 [ 75.616654][ T5178] F2FS-fs (loop2): Unrecognized mount option "memory=low" or missing value [ 75.749363][ T26] audit: type=1400 audit(75.680:4): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=2626200D3A5BE6B7F805A21209C05E5927693A pid=5189 comm="syz.2.437" [ 75.766525][ T5193] loop0: detected capacity change from 0 to 512 [ 75.815669][ T5193] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 75.819759][ T5193] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 75.937115][ T5193] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2825: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 75.941472][ T5161] loop1: detected capacity change from 0 to 32768 [ 75.966939][ T5193] EXT4-fs (loop0): 1 truncate cleaned up [ 75.968548][ T5193] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,nobarrier,debug_want_extra_isize=0x0000000000000068,mb_optimize_scan=0x0000000000000001,block_validity,dioread_lock,. Quota mode: none. [ 75.995777][ T5161] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.422 (5161) [ 76.053925][ T5161] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 76.056533][ T5161] BTRFS info (device loop1): enabling disk space caching [ 76.058624][ T5161] BTRFS info (device loop1): enabling auto defrag [ 76.060359][ T5161] BTRFS info (device loop1): doing ref verification [ 76.072787][ T5161] BTRFS info (device loop1): use no compression [ 76.085968][ T5161] BTRFS info (device loop1): force clearing of disk cache [ 76.092670][ T5161] BTRFS info (device loop1): disabling disk space caching [ 76.094786][ T5161] BTRFS info (device loop1): has skinny extents [ 76.125890][ T5195] loop4: detected capacity change from 0 to 32768 [ 76.255402][ T5195] attempt to access beyond end of device [ 76.255402][ T5195] loop4: rw=1, want=4680040, limit=32768 [ 76.297573][ T5195] metapage_write_end_io: I/O error [ 76.330972][ T5195] blkno = 8ed2c, nblocks = 1 [ 76.340144][ T5195] ERROR: (device loop4): dbUpdatePMap: blocks are outside the map [ 76.340144][ T5195] [ 76.375412][ T5195] ERROR: (device loop4): remounting filesystem as read-only [ 76.439886][ T5161] BTRFS info (device loop1): enabling ssd optimizations [ 76.450586][ T5195] blkno = 8ed2c, nblocks = 1 [ 76.455640][ T5161] BTRFS info (device loop1): clearing free space tree [ 76.458153][ T5195] ERROR: (device loop4): dbUpdatePMap: blocks are outside the map [ 76.458153][ T5195] [ 76.463550][ T5161] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 76.480020][ T5161] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 76.492832][ T5195] UFO tlock:0x00000000487039cd [ 76.584491][ T5195] ERROR: (device loop4): dtSearch: DT_GETPAGE: dtree page corrupt [ 76.584491][ T5195] [ 76.596880][ T5195] jfs_lookup: dtSearch returned -5 [ 76.674699][ T241] blkno = 8ed2c, nblocks = 4 [ 76.676108][ T241] ERROR: (device loop4): dbUpdatePMap: blocks are outside the map [ 76.676108][ T241] [ 76.679968][ T4046] attempt to access beyond end of device [ 76.679968][ T4046] loop4: rw=1, want=4680040, limit=32768 [ 76.684276][ T4046] metapage_write_end_io: I/O error [ 76.685961][ T4046] JFS: metapage_get_blocks failed [ 76.687322][ T4046] JFS: metapage_get_blocks failed [ 76.688740][ T4046] JFS: metapage_get_blocks failed [ 76.922653][ T5233] netlink: 'syz.2.445': attribute type 1 has an invalid length. [ 76.952098][ T4046] JFS: metapage_get_blocks failed [ 76.954162][ T5233] netlink: 'syz.2.445': attribute type 9 has an invalid length. [ 77.007994][ T5200] loop3: detected capacity change from 0 to 32768 [ 77.066033][ T5200] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.440 (5200) [ 77.139954][ T5200] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 77.142724][ T5200] BTRFS info (device loop3): enabling auto defrag [ 77.144508][ T5200] BTRFS info (device loop3): use no compression [ 77.146207][ T5200] BTRFS info (device loop3): force clearing of disk cache [ 77.148184][ T5200] BTRFS info (device loop3): turning on async discard [ 77.171338][ T5200] BTRFS info (device loop3): max_inline at 5 [ 77.178288][ T5200] BTRFS info (device loop3): force zlib compression, level 3 [ 77.180411][ T5200] BTRFS info (device loop3): using free space tree [ 77.190806][ T5200] BTRFS info (device loop3): has skinny extents [ 77.396929][ T5223] loop0: detected capacity change from 0 to 32768 [ 77.557110][ T5266] netlink: 84 bytes leftover after parsing attributes in process `syz.4.443'. [ 77.565972][ T5200] BTRFS info (device loop3): enabling ssd optimizations [ 77.573166][ T5200] BTRFS info (device loop3): clearing free space tree [ 77.575613][ T5200] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 77.578225][ T5200] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 77.603035][ T5200] BTRFS info (device loop3): creating free space tree [ 77.605716][ T5200] BTRFS info (device loop3): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 77.641849][ T5200] BTRFS info (device loop3): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 78.317004][ T4352] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 11 /dev/loop3 scanned by udevd (4352) [ 78.631028][ T5271] loop4: detected capacity change from 0 to 32768 [ 78.685488][ T5269] loop0: detected capacity change from 0 to 40427 [ 78.739779][ T5269] F2FS-fs (loop0): invalid crc value [ 78.750315][ T5269] F2FS-fs (loop0): Found nat_bits in checkpoint [ 78.800321][ T5269] F2FS-fs (loop0): Start checkpoint disabled! [ 78.821102][ T5269] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 79.038049][ T136] attempt to access beyond end of device [ 79.038049][ T136] loop0: rw=2049, want=40976, limit=40427 [ 79.711266][ T5296] loop1: detected capacity change from 0 to 131072 [ 79.726433][ T5296] F2FS-fs (loop1): QUOTA feature is enabled, so ignore jquota_fmt [ 79.728773][ T5296] F2FS-fs (loop1): inline_xattr_size option should be set with inline_xattr option [ 80.265969][ T5337] netlink: 16 bytes leftover after parsing attributes in process `syz.2.485'. [ 80.327318][ T5341] loop3: detected capacity change from 0 to 256 [ 80.370593][ T5341] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 80.499199][ T5343] loop2: detected capacity change from 0 to 4096 [ 80.608942][ T5343] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 80.646812][ T5343] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 80.767289][ T5320] loop4: detected capacity change from 0 to 40427 [ 80.796109][ T4034] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 80.834025][ T5323] loop0: detected capacity change from 0 to 32768 [ 80.862340][ T5320] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x1ffff [ 80.867288][ T5320] F2FS-fs (loop4): invalid crc value [ 80.890091][ T5323] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz.0.478 (5323) [ 80.908920][ T5320] F2FS-fs (loop4): Found nat_bits in checkpoint [ 80.939712][ T5323] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm [ 80.942509][ T5323] BTRFS info (device loop0): enabling disk space caching [ 80.944470][ T5323] BTRFS info (device loop0): force clearing of disk cache [ 80.946533][ T5323] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 80.949326][ T5323] BTRFS info (device loop0): use lzo compression, level 0 [ 80.951326][ T5323] BTRFS info (device loop0): disk space caching is enabled [ 80.968219][ T5320] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 80.971004][ T5323] BTRFS info (device loop0): has skinny extents [ 81.116985][ T4046] attempt to access beyond end of device [ 81.116985][ T4046] loop4: rw=2049, want=45104, limit=40427 [ 81.438252][ T5394] usb usb1: check_ctrlrecip: process 5394 (syz.4.502) requesting ep 01 but needs 81 [ 81.542259][ T5323] BTRFS info (device loop0): enabling ssd optimizations [ 81.572498][ T5323] BTRFS info (device loop0): clearing free space tree [ 81.574573][ T5323] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 81.578178][ T5323] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 82.177068][ T5373] mmap: syz.2.500 (5373): VmData 42643456 exceed data ulimit 33554432. Update limits or use boot option ignore_rlimit_data. [ 82.226551][ T5426] netlink: 'syz.3.514': attribute type 1 has an invalid length. [ 82.228764][ T5426] netlink: 'syz.3.514': attribute type 2 has an invalid length. [ 82.276395][ T4285] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 12 /dev/loop0 scanned by udevd (4285) [ 82.680351][ T5446] loop2: detected capacity change from 0 to 512 [ 82.802783][ T5446] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 82.830351][ T5451] capability: warning: `syz.3.524' uses deprecated v2 capabilities in a way that may be insecure [ 82.899407][ T5446] EXT4-fs (loop2): 1 truncate cleaned up [ 82.904714][ T5446] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 82.948301][ T5446] EXT4-fs warning (device loop2): verify_group_input:147: Cannot add at group 49 (only 1 groups) [ 83.173776][ T5467] netlink: 8 bytes leftover after parsing attributes in process `syz.4.531'. [ 83.176419][ T5467] netlink: 4 bytes leftover after parsing attributes in process `syz.4.531'. [ 83.179044][ T5467] netlink: 'syz.4.531': attribute type 11 has an invalid length. [ 83.297766][ T5430] loop1: detected capacity change from 0 to 40427 [ 83.468698][ T5480] loop4: detected capacity change from 0 to 128 [ 83.540178][ T5480] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 83.549394][ T5480] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 83.559370][ T5430] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x1ffff [ 83.565426][ T5430] F2FS-fs (loop1): invalid crc value [ 83.587272][ T5430] F2FS-fs (loop1): Found nat_bits in checkpoint [ 83.662321][ T5430] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 83.749623][ T4033] attempt to access beyond end of device [ 83.749623][ T4033] loop1: rw=2049, want=45104, limit=40427 [ 84.438946][ T5484] loop0: detected capacity change from 0 to 32768 [ 84.467632][ T5484] XFS: attr2 mount option is deprecated. [ 84.469349][ T5484] XFS: ikeep mount option is deprecated. [ 84.469579][ T5511] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551615) [ 84.470866][ T5484] XFS: noikeep mount option is deprecated. [ 84.482592][ T5511] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 84.733758][ T5489] loop4: detected capacity change from 0 to 32768 [ 84.755251][ T5484] XFS (loop0): Mounting V5 Filesystem [ 84.856427][ T5489] (syz.4.539,5489,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 84.860615][ T5489] (syz.4.539,5489,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 84.906189][ T5484] XFS (loop0): Ending clean mount [ 84.911266][ T5489] JBD2: Ignoring recovery information on journal [ 84.952389][ T5484] XFS (loop0): Quotacheck needed: Please wait. [ 85.056667][ T5532] loop2: detected capacity change from 0 to 512 [ 85.057100][ T5484] XFS (loop0): Quotacheck: Done. [ 85.132832][ T4041] XFS (loop0): Unmounting Filesystem [ 85.192473][ T5539] loop3: detected capacity change from 0 to 4096 [ 85.247304][ T5532] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.555: inode #1: comm syz.2.555: iget: illegal inode # [ 85.262077][ T5489] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 85.288013][ T5532] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.555: error while reading EA inode 1 err=-117 [ 85.295055][ T5532] EXT4-fs (loop2): 1 orphan inode deleted [ 85.296708][ T5532] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 85.396432][ T5547] loop1: detected capacity change from 0 to 64 [ 85.400130][ T5532] EXT4-fs error (device loop2): ext4_lookup:1858: inode #15: comm syz.2.555: unexpected EA_INODE flag [ 85.464435][ T4046] ocfs2: Unmounting device (7,4) on (node local) [ 85.571396][ T5552] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.574186][ T5552] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.576732][ T5552] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.579083][ T5552] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.889691][ T5563] loop1: detected capacity change from 0 to 4096 [ 85.963399][ T5563] ntfs: (device loop1): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 86.014135][ T5563] ntfs: volume version 3.1. [ 86.153300][ T5573] loop2: detected capacity change from 0 to 128 [ 86.225428][ T5577] loop4: detected capacity change from 0 to 1024 [ 86.249817][ T5573] EXT4-fs (loop2): mounted filesystem without journal. Opts: resgid=0x0000000000000000,max_batch_time=0x0000000000000001,,errors=continue. Quota mode: none. [ 86.336165][ T5577] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 86.404461][ T5577] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv1,bsddf,barrier=0x0000000000000000,norecovery,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue. Quota mode: none. [ 86.480008][ T5590] loop1: detected capacity change from 0 to 512 [ 86.494735][ T5592] loop3: detected capacity change from 0 to 512 [ 86.618835][ T5592] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 86.642827][ T5592] EXT4-fs (loop3): 1 truncate cleaned up [ 86.644423][ T5592] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 86.762166][ T5598] netlink: 96 bytes leftover after parsing attributes in process `syz.4.583'. [ 86.764791][ T5598] netlink: 64 bytes leftover after parsing attributes in process `syz.4.583'. [ 86.913118][ T5590] EXT4-fs (loop1): Test dummy encryption mode enabled [ 86.939807][ T5590] EXT4-fs error (device loop1): __ext4_iget:4894: inode #11: block 1: comm syz.1.579: invalid block [ 86.965692][ T5608] loop2: detected capacity change from 0 to 256 [ 86.977797][ T5590] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.579: couldn't read orphan inode 11 (err -117) [ 86.995991][ T5590] EXT4-fs (loop1): mounted filesystem without journal. Opts: discard,user_xattr,max_dir_size_kb=0x0000000000000009,inode_readahead_blks=0x0000000000040000,jqfmt=vfsv0,delalloc,inode_readahead_blks=0x0000000000400000,noauto_da_alloc,test_dummy_encryption,,errors=continue. Quota mode: none. [ 87.092228][ T5612] netlink: 8 bytes leftover after parsing attributes in process `syz.3.584'. [ 87.096722][ T5591] loop0: detected capacity change from 0 to 32768 [ 87.118645][ T5612] netlink: 4 bytes leftover after parsing attributes in process `syz.3.584'. [ 87.121173][ T5612] netlink: 'syz.3.584': attribute type 11 has an invalid length. [ 87.285640][ T5590] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-ce" [ 87.288614][ T5590] EXT4-fs error (device loop1): ext4_add_entry:2486: inode #2: comm syz.1.579: Directory hole found for htree leaf block 0 [ 87.299738][ T5608] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 87.831166][ T5646] netlink: 40 bytes leftover after parsing attributes in process `syz.2.605'. [ 88.061366][ T5659] loop2: detected capacity change from 0 to 1024 [ 88.370169][ T9] hfsplus: b-tree write err: -5, ino 4 [ 88.427047][ T5667] netlink: 12 bytes leftover after parsing attributes in process `syz.4.615'. [ 88.497690][ T5672] loop2: detected capacity change from 0 to 256 [ 88.558731][ T5672] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 88.861095][ T5656] loop1: detected capacity change from 0 to 32768 [ 88.899374][ T5686] loop4: detected capacity change from 0 to 64 [ 88.913783][ T5684] loop2: detected capacity change from 0 to 2048 [ 89.128088][ T5688] loop4: detected capacity change from 0 to 256 [ 89.266232][ T5684] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 89.327033][ T5684] attempt to access beyond end of device [ 89.327033][ T5684] loop2: rw=524288, want=33554432, limit=2048 [ 89.332774][ T5699] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 89.408974][ T5684] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 89.450731][ T5703] attempt to access beyond end of device [ 89.450731][ T5703] loop2: rw=0, want=33554432, limit=2048 [ 89.463995][ T5703] NILFS (loop2): I/O error reading meta-data file (ino=6, block-offset=3) [ 89.472283][ T5684] Remounting filesystem read-only [ 89.472413][ T5684] NILFS error (device loop2): nilfs_bmap_last_key: broken bmap (inode number=16) [ 89.472444][ T5684] NILFS (loop2): error -5 truncating bmap (ino=16) [ 89.501294][ T5703] NILFS (loop2): error -5 reading inode: ino=12 [ 89.568312][ T4034] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer [ 89.611923][ T5705] loop4: detected capacity change from 0 to 2048 [ 89.707351][ T5705] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 89.735149][ T5705] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 89.755479][ T5705] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 89.778299][ T5705] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 89.783090][ T5705] overlayfs: missing 'lowerdir' [ 89.995818][ T5712] loop4: detected capacity change from 0 to 256 [ 90.040951][ T5712] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 90.061509][ T5701] loop1: detected capacity change from 0 to 32768 [ 90.308150][ T5701] JBD2: Ignoring recovery information on journal [ 90.377734][ T5701] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 90.551013][ T4033] ocfs2: Unmounting device (7,1) on (node local) [ 90.887883][ T5745] loop0: detected capacity change from 0 to 1024 [ 90.928265][ T5743] loop4: detected capacity change from 0 to 1024 [ 90.986263][ T5745] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 91.077539][ T5753] loop1: detected capacity change from 0 to 1024 [ 91.167015][ T5745] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_nolock,norecovery,min_batch_time=0x0000000000000001,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,nodelalloc,errors=remount-ro,acl,auto_da_alloc=0x0000000000000343,jqfmt=vfsold,barrier=0x00000000000000. Quota mode: none. [ 91.458225][ T5728] loop3: detected capacity change from 0 to 32768 [ 91.703263][ T5728] XFS: noikeep mount option is deprecated. [ 91.712314][ T326] hfsplus: b-tree write err: -5, ino 4 [ 91.732125][ T9] hfsplus: b-tree write err: -5, ino 4 [ 91.816341][ T5728] XFS (loop3): Mounting V5 Filesystem [ 91.843694][ T5767] syz.2.655 uses obsolete (PF_INET,SOCK_PACKET) [ 91.901845][ T5420] Bluetooth: hci4: command 0x0405 tx timeout [ 91.948980][ T5774] netlink: 8 bytes leftover after parsing attributes in process `syz.4.652'. [ 92.194797][ T5789] netlink: 192 bytes leftover after parsing attributes in process `syz.1.659'. [ 92.210970][ T5728] XFS (loop3): Ending clean mount [ 92.300560][ T5728] XFS (loop3): Quotacheck needed: Please wait. [ 92.311143][ T5794] loop2: detected capacity change from 0 to 2048 [ 92.371035][ T5728] XFS (loop3): Quotacheck: Done. [ 92.476816][ T4044] XFS (loop3): Unmounting Filesystem [ 92.537092][ T5794] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 92.556196][ T5794] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 92.591762][ T5794] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 92.608118][ T5802] loop1: detected capacity change from 0 to 8 [ 93.394601][ T5825] loop2: detected capacity change from 0 to 4096 [ 93.612814][ T5846] loop0: detected capacity change from 0 to 2048 [ 93.616027][ T5848] loop1: detected capacity change from 0 to 128 [ 93.664704][ T5848] VFS: Found a Xenix FS (block size = 1024) on device loop1 [ 93.686888][ T5850] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 93.748771][ T4033] sysv_free_block: flc_count > flc_size [ 93.751130][ T4033] sysv_free_block: flc_count > flc_size [ 93.768228][ T4033] sysv_free_block: flc_count > flc_size [ 93.787526][ T4033] sysv_free_block: flc_count > flc_size [ 93.810982][ T4033] sysv_free_block: flc_count > flc_size [ 93.830356][ T4033] sysv_free_block: flc_count > flc_size [ 93.832068][ T4033] sysv_free_block: flc_count > flc_size [ 93.833558][ T4033] sysv_free_block: flc_count > flc_size [ 93.835081][ T4033] sysv_free_block: flc_count > flc_size [ 93.836563][ T4033] sysv_free_block: flc_count > flc_size [ 93.838902][ T4033] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 93.874933][ T5825] ntfs3: loop2: MFT: r=19, expect seq=1 instead of 0! [ 93.879435][ T5825] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 93.974174][ T5825] ntfs3: loop2: failed to convert name for inode 1e. [ 94.174475][ T5860] loop1: detected capacity change from 0 to 4096 [ 94.252081][ T5860] NILFS (loop1): invalid segment: Checksum error in segment payload [ 94.254906][ T5860] NILFS (loop1): trying rollback from an earlier position [ 94.362676][ T5876] netlink: 20 bytes leftover after parsing attributes in process `syz.2.698'. [ 94.379639][ T5860] NILFS (loop1): recovery complete [ 94.496676][ T5832] loop3: detected capacity change from 0 to 32768 [ 94.585109][ T5882] usb usb1: check_ctrlrecip: process 5882 (syz.0.701) requesting ep 01 but needs 81 [ 94.592917][ T5884] process 'syz.4.703' launched '/dev/fd/3' with NULL argv: empty string added [ 95.073659][ T5912] usb usb1: usbfs: process 5912 (syz.0.717) did not claim interface 8 before use [ 95.257585][ T5921] Error parsing options; rc = [-22] [ 95.294468][ T5923] loop3: detected capacity change from 0 to 1024 [ 95.414473][ T5930] loop0: detected capacity change from 0 to 256 [ 95.429755][ T5931] loop4: detected capacity change from 0 to 1024 [ 95.787194][ T5942] loop1: detected capacity change from 0 to 1024 [ 96.437803][ T5960] netlink: 72 bytes leftover after parsing attributes in process `syz.1.739'. [ 96.447168][ T5960] netlink: 'syz.1.739': attribute type 4 has an invalid length. [ 96.575454][ T5965] loop0: detected capacity change from 0 to 256 [ 96.618531][ T5965] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 96.621034][ T5965] FAT-fs (loop0): Filesystem has been set read-only [ 96.916628][ T5981] netlink: 'syz.0.751': attribute type 2 has an invalid length. [ 96.999661][ T5985] loop1: detected capacity change from 0 to 512 [ 97.088540][ T5954] loop2: detected capacity change from 0 to 32768 [ 97.283896][ T6000] loop0: detected capacity change from 0 to 1024 [ 97.310232][ T6003] netlink: 'syz.4.760': attribute type 1 has an invalid length. [ 97.314848][ T5985] EXT4-fs (loop1): Mount option "noacl" will be removed by 3.5 [ 97.314848][ T5985] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 97.314848][ T5985] [ 97.320044][ T5985] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 97.347179][ T5985] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 97.350995][ T5954] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.738 (5954) [ 97.378469][ T5954] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm [ 97.381048][ T5954] BTRFS info (device loop2): using free space tree [ 97.387179][ T5954] BTRFS info (device loop2): has skinny extents [ 97.448503][ T5985] [EXT4 FS bs=4096, gc=1, bpg=3008, ipg=32, mo=80026019, mo2=0000] [ 97.513667][ T5985] EXT4-fs (loop1): 1 truncate cleaned up [ 97.515243][ T5985] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobarrier,noblock_validity,nombcache,acl,barrier=0x000000000000000c,noacl,nodiscard,jqfmt=vfsold,resgid=0x00000000000000002,errors=continue. Quota mode: writeback. [ 97.557500][ T9] Quota error (device loop1): free_dqentry: Quota structure has offset to other block (1) than it should (5) [ 97.561060][ T9] EXT4-fs error (device loop1): ext4_release_dquot:6243: comm kworker/u4:0: Failed to release dquot type 1 [ 97.628617][ T5985] EXT4-fs warning (device loop1): __ext4_unlink:3335: inode #15: comm syz.1.752: Deleting file 'file1' with no links [ 97.761047][ T9] Quota error (device loop1): free_dqentry: Quota structure has offset to other block (1) than it should (5) [ 97.764760][ T9] EXT4-fs error (device loop1): ext4_release_dquot:6243: comm kworker/u4:0: Failed to release dquot type 1 [ 97.849324][ T6018] loop3: detected capacity change from 0 to 4096 [ 97.908402][ T6040] loop4: detected capacity change from 0 to 512 [ 97.960996][ T5954] BTRFS info (device loop2): enabling ssd optimizations [ 97.975163][ T6040] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 98.069876][ T6018] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 98.091137][ T6046] loop0: detected capacity change from 0 to 2048 [ 98.153892][ T6040] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.768: iget: bad i_size value: 360287970189639680 [ 98.183682][ T6040] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.768: couldn't read orphan inode 15 (err -117) [ 98.302259][ T6040] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 98.329774][ T6049] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 98.338140][ T6040] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.768: bg 0: block 65: padding at end of block bitmap is not set [ 98.362669][ T6040] Quota error (device loop4): write_blk: dquota write failed [ 98.364975][ T6040] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 98.401413][ T6040] EXT4-fs error (device loop4): ext4_acquire_dquot:6207: comm syz.4.768: Failed to acquire dquot type 0 [ 98.504649][ T5397] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop2 scanned by udevd (5397) [ 98.763814][ T6065] netlink: 'syz.4.774': attribute type 3 has an invalid length. [ 98.992622][ T6037] loop1: detected capacity change from 0 to 40427 [ 99.021427][ T6079] Soft offlining pfn 0x12d9d0 at process virtual address 0x20000000 [ 99.048217][ T6037] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x1ffff [ 99.050344][ T6079] soft offline: 0x12d9d0: page migration failed 1, type 5ffc0000008080e (referenced|uptodate|dirty|arch_1|swapbacked|node=0|zone=2|lastcpupid=0x7ff) [ 99.107645][ T6037] F2FS-fs (loop1): invalid crc value [ 99.209725][ T6037] F2FS-fs (loop1): Found nat_bits in checkpoint [ 99.296714][ T6037] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 99.390813][ T4033] attempt to access beyond end of device [ 99.390813][ T4033] loop1: rw=2049, want=45104, limit=40427 [ 99.962777][ T6060] loop3: detected capacity change from 0 to 40427 [ 100.021393][ T6119] loop4: detected capacity change from 0 to 4096 [ 100.085235][ T6119] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 100.096705][ T6060] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x1ffff [ 100.101402][ T6060] F2FS-fs (loop3): invalid crc value [ 100.138516][ T6060] F2FS-fs (loop3): Found nat_bits in checkpoint [ 100.176348][ T6119] ntfs: volume version 3.1. [ 100.272214][ T6091] loop0: detected capacity change from 0 to 32768 [ 100.274987][ T6060] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 100.312594][ T6119] ntfs: (device loop4): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set iso8859-15. You might want to try to use the mount option nls=utf8. [ 100.335750][ T6119] ntfs: (device loop4): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 100.353749][ T4044] attempt to access beyond end of device [ 100.353749][ T4044] loop3: rw=2049, want=45104, limit=40427 [ 100.437312][ T6091] XFS (loop0): Mounting V5 Filesystem [ 100.557266][ T6091] XFS (loop0): Ending clean mount [ 100.712031][ T6138] netlink: 8 bytes leftover after parsing attributes in process `syz.3.803'. [ 100.788461][ T4041] XFS (loop0): Unmounting Filesystem [ 101.283540][ T6154] sch_tbf: burst 59 is lower than device ip6tnl0 mtu (1452) ! [ 101.390626][ T6161] netlink: 12 bytes leftover after parsing attributes in process `syz.4.814'. [ 101.401988][ T6125] loop1: detected capacity change from 0 to 40427 [ 101.521293][ T6125] F2FS-fs (loop1): invalid crc value [ 101.556870][ T6125] F2FS-fs (loop1): Found nat_bits in checkpoint [ 101.654066][ T6125] F2FS-fs (loop1): Start checkpoint disabled! [ 101.665125][ T6125] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 101.784521][ T6180] loop0: detected capacity change from 0 to 256 [ 101.872611][ T136] attempt to access beyond end of device [ 101.872611][ T136] loop1: rw=2049, want=40976, limit=40427 [ 102.018933][ T6180] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x88000078, utbl_chksum : 0xe619d30d) [ 102.379034][ T6164] loop2: detected capacity change from 0 to 32768 [ 102.635312][ T6206] loop4: detected capacity change from 0 to 512 [ 102.915288][ T6206] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 102.921947][ T6206] EXT4-fs (loop4): invalid journal inode [ 102.923697][ T6206] EXT4-fs (loop4): can't get journal size [ 102.999773][ T6206] EXT4-fs (loop4): 1 truncate cleaned up [ 103.001538][ T6206] EXT4-fs (loop4): mounted filesystem without journal. Opts: norecovery,max_batch_time=0x0000000000000003,,errors=continue. Quota mode: none. [ 103.057123][ T6192] loop1: detected capacity change from 0 to 32768 [ 103.220927][ T6192] XFS (loop1): Mounting V5 Filesystem [ 103.342422][ T6192] XFS (loop1): Ending clean mount [ 103.369554][ T6196] loop0: detected capacity change from 0 to 32768 [ 103.395099][ T6192] XFS (loop1): Quotacheck needed: Please wait. [ 103.515102][ T6225] [U] [ 103.525866][ T6192] XFS (loop1): Quotacheck: Done. [ 103.602485][ T6230] trusted_key: encrypted_key: key user:syz not found [ 103.616859][ T4033] XFS (loop1): Unmounting Filesystem [ 103.860938][ T6243] netlink: 36 bytes leftover after parsing attributes in process `syz.4.849'. [ 103.871794][ T6243] netlink: 'syz.4.849': attribute type 1 has an invalid length. [ 103.888572][ T6243] netlink: 13 bytes leftover after parsing attributes in process `syz.4.849'. [ 104.065732][ T6208] loop3: detected capacity change from 0 to 40427 [ 104.275502][ T6208] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x1ffff [ 104.280688][ T6208] F2FS-fs (loop3): invalid crc value [ 104.355326][ T6208] F2FS-fs (loop3): Found nat_bits in checkpoint [ 104.443046][ T6208] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 104.479417][ T6263] netlink: 'syz.1.857': attribute type 32 has an invalid length. [ 104.482223][ T6263] netlink: 28 bytes leftover after parsing attributes in process `syz.1.857'. [ 104.569981][ T6208] F2FS-fs (loop3) : inject no more block in inc_valid_block_count of __allocate_data_block+0x38c/0x89c [ 104.620967][ T6208] attempt to access beyond end of device [ 104.620967][ T6208] loop3: rw=2049, want=78232, limit=40427 [ 104.639609][ T6208] attempt to access beyond end of device [ 104.639609][ T6208] loop3: rw=2049, want=78224, limit=40427 [ 104.812947][ T4044] attempt to access beyond end of device [ 104.812947][ T4044] loop3: rw=2049, want=45104, limit=40427 [ 105.082084][ T6286] netlink: 40 bytes leftover after parsing attributes in process `syz.3.865'. [ 105.084780][ T6286] tipc: Invalid UDP bearer configuration [ 105.084822][ T6286] tipc: Enabling of bearer rejected, failed to enable media [ 105.104765][ T6253] loop0: detected capacity change from 0 to 40427 [ 105.162880][ T6253] F2FS-fs (loop0): invalid crc value [ 105.253744][ T6253] F2FS-fs (loop0): Found nat_bits in checkpoint [ 105.314186][ T6253] F2FS-fs (loop0): Cannot turn on quotas: -2 on 0 [ 105.351968][ T6253] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 105.394347][ T6305] netlink: 8 bytes leftover after parsing attributes in process `syz.4.872'. [ 105.396782][ T6305] netlink: 4 bytes leftover after parsing attributes in process `syz.4.872'. [ 105.399254][ T6305] netlink: 'syz.4.872': attribute type 14 has an invalid length. [ 105.530195][ T4041] attempt to access beyond end of device [ 105.530195][ T4041] loop0: rw=2051, want=45064, limit=40427 [ 105.538444][ T4041] attempt to access beyond end of device [ 105.538444][ T4041] loop0: rw=2051, want=131072, limit=40427 [ 105.566085][ T4041] F2FS-fs (loop0): Issue discard(4614, 4614, 1019) failed, ret: -5 [ 105.566136][ T4041] F2FS-fs (loop0): Issue discard(5637, 5637, 10747) failed, ret: -5 [ 105.772034][ T6315] loop1: detected capacity change from 0 to 4096 [ 105.926895][ T6334] loop3: detected capacity change from 0 to 512 [ 105.984802][ T6315] NILFS (loop1): invalid segment: Checksum error in segment payload [ 105.987101][ T6315] NILFS (loop1): trying rollback from an earlier position [ 106.029009][ T6315] NILFS (loop1): recovery complete [ 106.042172][ T6339] binder: 6338:6339 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 106.049816][ T6342] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 106.077743][ T6334] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 106.080087][ T6334] System zones: 0-2, 18-18, 34-34 [ 106.088381][ T6344] loop4: detected capacity change from 0 to 256 [ 106.098540][ T6334] EXT4-fs (loop3): mounted filesystem without journal. Opts: noquota,debug,inode_readahead_blks=0x0000000000000040,noauto_da_alloc,user_xattr,,errors=continue. Quota mode: writeback. [ 106.133924][ T6344] exfat: Deprecated parameter 'utf8' [ 106.148865][ T6344] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xbe649ead, utbl_chksum : 0xe619d30d) [ 106.268190][ T6349] netlink: 4 bytes leftover after parsing attributes in process `syz.0.891'. [ 107.062502][ T6384] MPTCP: kernel_bind error, err=-99 [ 107.456435][ T6406] cgroup2: Unknown parameter '/' [ 107.731561][ T6368] loop0: detected capacity change from 0 to 32768 [ 107.779648][ T6368] (syz.0.902,6368,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 107.809352][ T6368] (syz.0.902,6368,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 107.837838][ T6424] loop1: detected capacity change from 0 to 512 [ 107.856086][ T6368] JBD2: Ignoring recovery information on journal [ 107.879978][ T6426] loop2: detected capacity change from 0 to 2048 [ 107.902365][ T6424] EXT2-fs (loop1): warning: mounting ext3 filesystem as ext2 [ 108.043310][ T6368] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 108.260440][ T4041] ocfs2: Unmounting device (7,0) on (node local) [ 108.277901][ T6398] loop3: detected capacity change from 0 to 40427 [ 108.332414][ T6398] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x1ffff [ 108.338716][ T6398] F2FS-fs (loop3): invalid crc value [ 108.359297][ T6398] F2FS-fs (loop3): Found nat_bits in checkpoint [ 108.368747][ T6426] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 108.448066][ T6398] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 108.464839][ T6446] vivid-000: disconnect [ 108.499366][ T6445] vivid-000: reconnect [ 108.609733][ T6450] loop1: detected capacity change from 0 to 256 [ 108.652667][ T6450] exfat: Deprecated parameter 'utf8' [ 108.654293][ T6450] exfat: Deprecated parameter 'namecase' [ 108.656063][ T4044] attempt to access beyond end of device [ 108.656063][ T4044] loop3: rw=2049, want=45104, limit=40427 [ 108.679962][ T6450] exfat: Deprecated parameter 'utf8' [ 108.787825][ T6450] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 108.811523][ T6460] netlink: 8 bytes leftover after parsing attributes in process `syz.0.936'. [ 108.832379][ T6460] netlink: 4 bytes leftover after parsing attributes in process `syz.0.936'. [ 108.845621][ T6460] netlink: 'syz.0.936': attribute type 7 has an invalid length. [ 108.864654][ T6462] loop2: detected capacity change from 0 to 256 [ 108.959938][ T6450] attempt to access beyond end of device [ 108.959938][ T6450] loop1: rw=0, want=34359738489, limit=256 [ 109.199266][ T6472] loop4: detected capacity change from 0 to 4096 [ 109.384754][ T6462] FAT-fs (loop2): Directory bread(block 64) failed [ 109.386807][ T6462] FAT-fs (loop2): Directory bread(block 65) failed [ 109.388695][ T6462] FAT-fs (loop2): Directory bread(block 66) failed [ 109.390659][ T6462] FAT-fs (loop2): Directory bread(block 67) failed [ 109.415465][ T6462] FAT-fs (loop2): Directory bread(block 68) failed [ 109.417363][ T6462] FAT-fs (loop2): Directory bread(block 69) failed [ 109.419268][ T6462] FAT-fs (loop2): Directory bread(block 70) failed [ 109.421141][ T6462] FAT-fs (loop2): Directory bread(block 71) failed [ 109.468980][ T6462] FAT-fs (loop2): Directory bread(block 72) failed [ 109.475158][ T6462] FAT-fs (loop2): Directory bread(block 73) failed [ 109.501092][ T6472] ntfs: (device loop4): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 109.504388][ T6472] ntfs: (device loop4): ntfs_read_locked_inode(): $DATA attribute is missing. [ 109.506848][ T6472] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 109.534522][ T6472] ntfs: (device loop4): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 109.651461][ T6472] ntfs: volume version 3.1. [ 109.726310][ T6472] ntfs: (device loop4): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set cp857. You might want to try to use the mount option nls=utf8. [ 109.754747][ T6472] ntfs: (device loop4): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 109.757313][ T6472] ntfs: (device loop4): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set cp857. You might want to try to use the mount option nls=utf8. [ 109.784512][ T6498] loop1: detected capacity change from 0 to 4096 [ 109.786895][ T6472] ntfs: (device loop4): ntfs_filldir(): Skipping unrepresentable inode 0x45. [ 109.902407][ T6498] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 109.922947][ T6510] loop0: detected capacity change from 0 to 64 [ 109.948939][ T6509] netlink: 192 bytes leftover after parsing attributes in process `syz.3.970'. [ 110.005324][ T6510] hfs: request for non-existent node 16777216 in B*Tree [ 110.007575][ T6510] hfs: request for non-existent node 16777216 in B*Tree [ 110.327250][ T6524] loop0: detected capacity change from 0 to 256 [ 110.490205][ T6520] loop4: detected capacity change from 0 to 8192 [ 110.555044][ T6520] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 110.558924][ T6520] REISERFS (device loop4): using ordered data mode [ 110.569661][ T6524] FAT-fs (loop0): Directory bread(block 64) failed [ 110.571844][ T6524] FAT-fs (loop0): Directory bread(block 65) failed [ 110.573718][ T6524] FAT-fs (loop0): Directory bread(block 66) failed [ 110.575632][ T6524] FAT-fs (loop0): Directory bread(block 67) failed [ 110.577571][ T6524] FAT-fs (loop0): Directory bread(block 68) failed [ 110.613213][ T6520] reiserfs: using flush barriers [ 110.624171][ T6524] FAT-fs (loop0): Directory bread(block 69) failed [ 110.635365][ T6524] FAT-fs (loop0): Directory bread(block 70) failed [ 110.648651][ T6520] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 110.657791][ T6524] FAT-fs (loop0): Directory bread(block 71) failed [ 110.670430][ T6524] FAT-fs (loop0): Directory bread(block 72) failed [ 110.682806][ T6520] REISERFS (device loop4): checking transaction log (loop4) [ 110.686340][ T6524] FAT-fs (loop0): Directory bread(block 73) failed [ 110.690799][ T6532] netlink: 8 bytes leftover after parsing attributes in process `syz.3.981'. [ 110.715538][ T6520] REISERFS (device loop4): Using r5 hash to sort names [ 110.743085][ T6520] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 110.778936][ T6520] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 111.192193][ T6551] loop1: detected capacity change from 0 to 8 [ 111.571772][ T4079] Bluetooth: hci0: command 0x0c1a tx timeout [ 112.169168][ T6557] loop4: detected capacity change from 0 to 32768 [ 112.235582][ T6557] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 scanned by syz.4.986 (6557) [ 112.297105][ T6557] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 112.300230][ T6557] BTRFS info (device loop4): force zlib compression, level 3 [ 112.306259][ T6557] BTRFS info (device loop4): force clearing of disk cache [ 112.308365][ T6557] BTRFS info (device loop4): setting nodatasum [ 112.310052][ T6557] BTRFS info (device loop4): use zlib compression, level 3 [ 112.341830][ T6557] BTRFS info (device loop4): allowing degraded mounts [ 112.348194][ T6557] BTRFS info (device loop4): enabling disk space caching [ 112.350246][ T6557] BTRFS info (device loop4): disk space caching is enabled [ 112.367494][ T6557] BTRFS info (device loop4): has skinny extents [ 112.826114][ T6629] loop2: detected capacity change from 0 to 40427 [ 112.837107][ T6557] BTRFS info (device loop4): enabling ssd optimizations [ 112.871231][ T6557] BTRFS info (device loop4): clearing free space tree [ 112.873355][ T6557] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 112.877556][ T6557] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 112.949114][ T6629] F2FS-fs (loop2): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 112.981879][ T6629] F2FS-fs (loop2): Found nat_bits in checkpoint [ 113.052241][ T6629] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0 [ 113.054362][ T6629] F2FS-fs (loop2): Cannot turn on quotas: -2 on 1 [ 113.056487][ T6629] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2 [ 113.061469][ T6629] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 113.293043][ T6655] loop0: detected capacity change from 0 to 8 [ 113.371755][ T5397] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 10 /dev/loop4 scanned by udevd (5397) [ 113.487644][ T6664] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1035'. [ 113.651880][ T4530] Bluetooth: hci0: command 0x0406 tx timeout [ 113.760800][ T6644] loop1: detected capacity change from 0 to 32768 [ 113.809417][ T6644] ea_get: invalid extended attribute [ 113.811167][ T6644] 0000000058f0f31c: 04 00 00 00 .... [ 114.424727][ T6670] loop0: detected capacity change from 0 to 32768 [ 114.593822][ T6670] JBD2: Ignoring recovery information on journal [ 114.637067][ T6676] loop2: detected capacity change from 0 to 40427 [ 114.748618][ T6670] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 114.762307][ T6676] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x1ffff [ 114.764872][ T6676] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x4 [ 114.783897][ T6676] F2FS-fs (loop2): invalid crc value [ 114.816393][ T6676] F2FS-fs (loop2): Found nat_bits in checkpoint [ 114.899359][ T6676] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 114.906181][ T6676] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 114.957381][ T4041] ocfs2: Unmounting device (7,0) on (node local) [ 115.020744][ T6688] loop1: detected capacity change from 0 to 1024 [ 115.330855][ T6690] loop4: detected capacity change from 0 to 4096 [ 115.412104][ T153] hfsplus: b-tree write err: -5, ino 4 [ 115.466567][ T6692] loop0: detected capacity change from 0 to 4096 [ 115.602095][ T6690] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 115.665586][ T6706] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1052'. [ 115.708318][ T6690] ntfs: (device loop4): ntfs_read_locked_inode(): Corrupt standard information attribute in inode. [ 115.711288][ T6690] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 115.715424][ T6690] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 115.733085][ T6690] ntfs: volume version 3.1. [ 115.778391][ T6692] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 115.801051][ T6692] ntfs: (device loop0): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 115.804597][ T6692] ntfs: (device loop0): ntfs_read_locked_inode(): $DATA attribute is missing. [ 115.807031][ T6692] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 115.844384][ T6692] ntfs: (device loop0): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 115.891155][ T6692] ntfs: volume version 3.1. [ 115.904069][ T6692] ntfs: (device loop0): load_and_init_quota(): Failed to find inode number for $Quota. [ 116.433364][ T6700] loop2: detected capacity change from 0 to 32768 [ 116.535477][ T6700] JBD2: Ignoring recovery information on journal [ 116.749083][ T6700] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 116.904476][ T6709] loop3: detected capacity change from 0 to 40427 [ 116.951014][ T4034] ocfs2: Unmounting device (7,2) on (node local) [ 117.030913][ T6709] F2FS-fs (loop3): Found nat_bits in checkpoint [ 117.080968][ T6709] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 117.244106][ T6762] netlink: 'syz.4.1075': attribute type 4 has an invalid length. [ 117.246327][ T6762] netlink: 'syz.4.1075': attribute type 1 has an invalid length. [ 117.248380][ T6762] netlink: 181400 bytes leftover after parsing attributes in process `syz.4.1075'. [ 117.272632][ T4044] attempt to access beyond end of device [ 117.272632][ T4044] loop3: rw=2049, want=45104, limit=40427 [ 117.804906][ T6783] loop4: detected capacity change from 0 to 512 [ 117.867682][ T6783] EXT4-fs (loop4): Mount option "noacl" will be removed by 3.5 [ 117.867682][ T6783] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 117.867682][ T6783] [ 117.931747][ T6783] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 117.934784][ T6783] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 118.117862][ T6783] [EXT4 FS bs=4096, gc=1, bpg=3008, ipg=32, mo=80026019, mo2=0000] [ 118.270631][ T6783] EXT4-fs (loop4): 1 truncate cleaned up [ 118.272507][ T6783] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobarrier,noblock_validity,nombcache,acl,barrier=0x000000000000000c,noacl,nodiscard,jqfmt=vfsold,resgid=0x00000000000000002,errors=continue. Quota mode: writeback. [ 118.282266][ T4170] EXT4-fs error (device loop4): ext4_release_dquot:6243: comm kworker/u4:6: Failed to release dquot type 1 [ 118.396325][ T6783] EXT4-fs warning (device loop4): __ext4_unlink:3335: inode #15: comm syz.4.1087: Deleting file 'file1' with no links [ 118.406100][ T6801] loop2: detected capacity change from 0 to 2048 [ 118.434597][ T6803] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1094'. [ 118.544738][ T6801] UDF-fs: bad mount option "uid=ÿÿÿÿ¬" or missing value [ 118.559495][ T1632] EXT4-fs error (device loop4): ext4_release_dquot:6243: comm kworker/u4:5: Failed to release dquot type 1 [ 118.846609][ T6821] loop4: detected capacity change from 0 to 1024 [ 118.980276][ T1632] hfsplus: b-tree write err: -5, ino 4 [ 119.275212][ T6847] loop3: detected capacity change from 0 to 64 [ 119.591232][ T6855] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1120'. [ 119.884187][ T6857] loop1: detected capacity change from 0 to 8192 [ 119.944164][ T6869] IPVS: sync thread started: state = MASTER, mcast_ifn = vcan0, syncid = 0, id = 0 [ 119.957512][ T6857] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 119.969364][ T6857] REISERFS (device loop1): using ordered data mode [ 119.971204][ T6857] reiserfs: using flush barriers [ 120.004562][ T6857] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 8388382, max trans age 30 [ 120.036844][ T6857] REISERFS (device loop1): checking transaction log (loop1) [ 120.084922][ T6857] REISERFS (device loop1): Using r5 hash to sort names [ 120.452586][ T6885] sch_tbf: burst 59 is lower than device ip6tnl0 mtu (1452) ! [ 120.682274][ T6896] loop4: detected capacity change from 0 to 1024 [ 120.736573][ T6896] hfsplus: failed to load attributes file [ 120.744741][ T6901] tipc: Started in network mode [ 120.746115][ T6901] tipc: Node identity 4, cluster identity 4711 [ 120.747855][ T6901] tipc: Node number set to 4 [ 121.042937][ T6909] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1145'. [ 121.239610][ T6918] netlink: 'syz.2.1149': attribute type 1 has an invalid length. [ 121.252758][ T6918] netlink: 'syz.2.1149': attribute type 2 has an invalid length. [ 121.379764][ T6926] Injecting memory failure for pfn 0x137514 at process virtual address 0x20000000 [ 121.399252][ T6926] Memory failure: 0x137514: recovery action for dirty LRU page: Recovered [ 121.411820][ T6926] Injecting memory failure for pfn 0x213dbd at process virtual address 0x20001000 [ 121.434293][ T6926] Memory failure: 0x213dbd: recovery action for reserved kernel page: Ignored [ 121.598503][ T6935] loop2: detected capacity change from 0 to 256 [ 121.629608][ T6935] exfat: Deprecated parameter 'namecase' [ 121.673700][ T6935] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 121.752799][ T6941] overlayfs: unrecognized mount option "\B" or missing value [ 122.045716][ T6948] loop0: detected capacity change from 0 to 32768 [ 122.315204][ T6928] loop1: detected capacity change from 0 to 40427 [ 122.370299][ T6928] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x1ffff [ 122.375658][ T6928] F2FS-fs (loop1): invalid crc value [ 122.406560][ T6928] F2FS-fs (loop1): Found nat_bits in checkpoint [ 122.478056][ T6928] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 122.609904][ T6928] F2FS-fs (loop1) : inject no more block in inc_valid_block_count of __allocate_data_block+0x38c/0x89c [ 122.662677][ T6928] attempt to access beyond end of device [ 122.662677][ T6928] loop1: rw=2049, want=78232, limit=40427 [ 122.665911][ T6928] attempt to access beyond end of device [ 122.665911][ T6928] loop1: rw=2049, want=78224, limit=40427 [ 122.843151][ T4033] attempt to access beyond end of device [ 122.843151][ T4033] loop1: rw=2049, want=45104, limit=40427 [ 122.884833][ T6981] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1179'. [ 122.887314][ T6981] tipc: Invalid UDP bearer configuration [ 122.887360][ T6981] tipc: Enabling of bearer rejected, failed to enable media [ 122.999404][ T6984] loop2: detected capacity change from 0 to 4096 [ 123.073424][ T6958] mmap: syz.3.1169 (6958) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 123.146388][ T6997] binder: 6993:6997 ioctl c0306201 9999999999999999 returned -14 [ 123.374403][ T7004] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1189'. [ 123.473597][ T7007] loop0: detected capacity change from 0 to 128 [ 123.519422][ T7007] ufs: ufs_fill_super(): fragment size 3263967611 is not a power of 2 [ 123.580073][ T6984] NILFS (loop2): invalid segment: Checksum error in segment payload [ 123.582721][ T6984] NILFS (loop2): trying rollback from an earlier position [ 123.660232][ T6984] NILFS (loop2): recovery complete [ 123.688012][ T7011] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 124.204915][ T7041] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1206'. [ 124.507448][ T7007] loop0: detected capacity change from 0 to 32768 [ 124.517357][ T7046] loop2: detected capacity change from 0 to 8192 [ 124.683979][ T7046] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 124.687126][ T7046] REISERFS (device loop2): using ordered data mode [ 124.688954][ T7046] reiserfs: using flush barriers [ 124.758380][ T7046] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 124.782228][ T7046] REISERFS (device loop2): checking transaction log (loop2) [ 124.945109][ T7046] REISERFS (device loop2): Using r5 hash to sort names [ 124.947437][ T7046] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 124.949770][ T7057] loop4: detected capacity change from 0 to 2048 [ 124.951296][ T7046] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 124.988636][ T7044] loop3: detected capacity change from 0 to 32768 [ 125.025788][ T7046] REISERFS warning (device loop2): reiserfs-13077 reiserfs_fh_to_dentry: nfsd/reiserfs, fhtype=196, len=2 - odd [ 125.080213][ T7057] EXT4-fs (loop4): mounted filesystem without journal. Opts: min_batch_time=0x000000000000000d,mb_optimize_scan=0x0000000000000001,noblock_validity,,errors=continue. Quota mode: none. [ 125.172559][ T7044] XFS (loop3): Mounting V5 Filesystem [ 125.625516][ T7044] XFS (loop3): Ending clean mount [ 125.656668][ T7044] XFS (loop3): Quotacheck needed: Please wait. [ 125.693322][ T7044] XFS (loop3): Quotacheck: Done. [ 125.809563][ T4044] XFS (loop3): Unmounting Filesystem [ 125.822046][ T4114] Bluetooth: hci4: command 0x0405 tx timeout [ 125.939724][ T7088] loop1: detected capacity change from 0 to 512 [ 126.004885][ T7088] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 126.013033][ T7088] EXT4-fs (loop1): invalid journal inode [ 126.021827][ T7088] EXT4-fs (loop1): can't get journal size [ 126.066962][ T7054] loop0: detected capacity change from 0 to 32768 [ 126.081564][ T7088] EXT4-fs (loop1): 1 truncate cleaned up [ 126.090214][ T7088] EXT4-fs (loop1): mounted filesystem without journal. Opts: norecovery,,errors=continue. Quota mode: none. [ 126.138986][ T7094] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1227'. [ 126.336238][ T7054] ERROR: (device loop0): diAllocAG: numfree > numinos [ 126.336238][ T7054] [ 126.375325][ T7054] ERROR: (device loop0): remounting filesystem as read-only [ 126.377373][ T7054] ialloc: diAlloc returned -5! [ 126.436524][ T7102] sp0: Synchronizing with TNC [ 126.838198][ T7121] loop1: detected capacity change from 0 to 64 [ 126.984787][ T7126] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1240'. [ 127.347379][ T7143] loop1: detected capacity change from 0 to 2048 [ 127.354439][ T7098] loop2: detected capacity change from 0 to 32768 [ 127.371730][ T7143] NILFS (loop1): invalid segment: Sequence number mismatch [ 127.375815][ T7143] NILFS (loop1): trying rollback from an earlier position [ 127.405585][ T7098] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.1229 (7098) [ 127.424060][ T7143] NILFS (loop1): recovery complete [ 127.442980][ T7149] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 127.467351][ T7098] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm [ 127.503839][ T7098] BTRFS info (device loop2): setting nodatacow, compression disabled [ 127.520033][ T7098] BTRFS info (device loop2): max_inline at 0 [ 127.532239][ T7098] BTRFS info (device loop2): enabling disk space caching [ 127.534227][ T7098] BTRFS info (device loop2): turning off barriers [ 127.536144][ T7098] BTRFS info (device loop2): turning on flush-on-commit [ 127.538101][ T7098] BTRFS info (device loop2): doing ref verification [ 127.539919][ T7098] BTRFS info (device loop2): force clearing of disk cache [ 127.601900][ T7098] BTRFS info (device loop2): enabling ssd optimizations [ 127.603941][ T7098] BTRFS info (device loop2): use zlib compression, level 3 [ 127.605899][ T7098] BTRFS info (device loop2): disk space caching is enabled [ 127.607922][ T7098] BTRFS info (device loop2): has skinny extents [ 127.873231][ T7098] BTRFS info (device loop2): clearing free space tree [ 127.875582][ T7098] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 127.879139][ T7098] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 128.340412][ T7167] sp0: Synchronizing with TNC [ 128.416795][ T7157] loop1: detected capacity change from 0 to 40427 [ 128.588892][ T7157] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 128.591151][ T7157] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 128.601321][ T7157] F2FS-fs (loop1): invalid crc value [ 128.619433][ T7157] F2FS-fs (loop1): invalid crc value [ 128.620941][ T7157] F2FS-fs (loop1): Failed to get valid F2FS checkpoint [ 128.828769][ T7204] ptrace attach of "./syz-executor exec"[4034] was attempted by " \x07"[7204] [ 128.889407][ T7210] loop4: detected capacity change from 0 to 65 [ 128.973703][ T7210] BFS-fs: bfs_fill_super(): NOTE: filesystem loop4 was created with 512 inodes, the real maximum is 511, mounting anyway [ 129.619297][ T7230] loop3: detected capacity change from 0 to 256 [ 129.887015][ T7208] loop0: detected capacity change from 0 to 40427 [ 129.919821][ T7230] FAT-fs (loop3): Directory bread(block 64) failed [ 129.922064][ T7230] FAT-fs (loop3): Directory bread(block 65) failed [ 129.924015][ T7230] FAT-fs (loop3): Directory bread(block 66) failed [ 129.925980][ T7230] FAT-fs (loop3): Directory bread(block 67) failed [ 129.927899][ T7230] FAT-fs (loop3): Directory bread(block 68) failed [ 129.929738][ T7230] FAT-fs (loop3): Directory bread(block 69) failed [ 129.931614][ T7230] FAT-fs (loop3): Directory bread(block 70) failed [ 129.971882][ T7230] FAT-fs (loop3): Directory bread(block 71) failed [ 129.973884][ T7230] FAT-fs (loop3): Directory bread(block 72) failed [ 129.991894][ T7230] FAT-fs (loop3): Directory bread(block 73) failed [ 130.172275][ T7244] udc-core: couldn't find an available UDC or it's busy [ 130.174420][ T7244] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 130.212751][ T7208] F2FS-fs (loop0): Found nat_bits in checkpoint [ 130.299922][ T7216] loop1: detected capacity change from 0 to 32768 [ 130.301887][ T7208] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 130.383324][ T7216] XFS: ikeep mount option is deprecated. [ 130.385063][ T7216] XFS: ikeep mount option is deprecated. [ 130.386752][ T7216] XFS: noikeep mount option is deprecated. [ 130.390473][ T4041] attempt to access beyond end of device [ 130.390473][ T4041] loop0: rw=2049, want=45104, limit=40427 [ 130.502514][ T7216] XFS (loop1): Mounting V5 Filesystem [ 130.614622][ T7232] loop2: detected capacity change from 0 to 32768 [ 130.728261][ T7232] XFS (loop2): Mounting V5 Filesystem [ 130.808982][ T7216] XFS (loop1): Ending clean mount [ 130.827954][ T7276] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1285'. [ 130.898808][ T4158] XFS (loop2): Metadata CRC error detected at xfs_agf_read_verify+0x14c/0x224, xfs_agf block 0x1 [ 130.903043][ T4158] XFS (loop2): Unmount and run xfs_repair [ 130.904666][ T4158] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 130.906668][ T4158] 00000000: 58 41 47 46 00 00 00 00 00 00 00 00 00 00 10 00 XAGF............ [ 130.909142][ T4158] 00000010: 00 00 00 01 00 00 00 02 00 00 00 00 00 00 00 01 ................ [ 130.911614][ T4158] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 130.929756][ T7276] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1285'. [ 130.945713][ T7280] XFS: ikeep mount option is deprecated. [ 130.947247][ T7280] XFS: ikeep mount option is deprecated. [ 130.969046][ T4158] 00000030: 00 00 00 04 00 00 0b a2 00 00 0b a0 00 00 00 00 ................ [ 130.971602][ T4158] 00000040: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 130.993602][ T4158] 00000050: 00 00 00 00 00 00 00 01 00 00 00 05 00 00 00 01 ................ [ 131.006462][ T4158] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 131.009613][ T4158] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 131.047275][ T7232] XFS (loop2): metadata I/O error in "xfs_read_agf+0x200/0x504" at daddr 0x1 len 1 error 74 [ 131.050237][ T7232] XFS (loop2): Error -117 reserving per-AG metadata reserve pool. [ 131.053134][ T7232] XFS (loop2): Corruption of in-memory data (0x8) detected at xfs_fs_reserve_ag_blocks+0x1c4/0x1f0 (fs/xfs/xfs_fsops.c:573). Shutting down filesystem. [ 131.078508][ T7232] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 131.080920][ T7232] XFS (loop2): Ending clean mount [ 131.092833][ T7232] XFS (loop2): Failed to initialize disk quotas. [ 131.095475][ T4033] XFS (loop1): Unmounting Filesystem [ 131.106272][ T2053] ieee802154 phy0 wpan0: encryption failed: -22 [ 131.108074][ T2053] ieee802154 phy1 wpan1: encryption failed: -22 [ 131.266048][ T4034] XFS (loop2): Unmounting Filesystem [ 131.634439][ T7312] loop4: detected capacity change from 0 to 256 [ 131.883511][ T7314] loop0: detected capacity change from 0 to 4096 [ 131.932883][ T7314] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 131.996933][ T7314] ntfs3: loop0: Failed to load $Extend. [ 132.577499][ T7338] loop2: detected capacity change from 0 to 1024 [ 132.677864][ T7338] hfsplus: bad catalog entry type [ 132.733952][ T326] hfsplus: b-tree write err: -5, ino 4 [ 132.736207][ T7322] loop3: detected capacity change from 0 to 32768 [ 132.779406][ T7322] (syz.3.1301,7322,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 132.794366][ T7322] (syz.3.1301,7322,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 132.848089][ T7322] JBD2: Ignoring recovery information on journal [ 133.074586][ T7322] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 133.469513][ T7332] loop4: detected capacity change from 0 to 40427 [ 133.492270][ T4044] ocfs2: Unmounting device (7,3) on (node local) [ 133.772650][ T7332] F2FS-fs (loop4): Found nat_bits in checkpoint [ 133.861775][ T7332] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 133.877011][ T7354] loop2: detected capacity change from 0 to 8192 [ 133.907757][ T7354] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 133.922072][ T7354] REISERFS (device loop2): using ordered data mode [ 133.924043][ T7354] reiserfs: using flush barriers [ 133.957370][ T7354] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 133.964569][ T7354] REISERFS (device loop2): checking transaction log (loop2) [ 134.024157][ T7371] netlink: 'syz.0.1319': attribute type 2 has an invalid length. [ 134.027486][ T4046] attempt to access beyond end of device [ 134.027486][ T4046] loop4: rw=2049, want=45104, limit=40427 [ 134.065450][ T7354] REISERFS (device loop2): Using r5 hash to sort names [ 134.068358][ T7354] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 134.084276][ T7354] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 134.691544][ T7359] loop1: detected capacity change from 0 to 40427 [ 134.978592][ T7369] loop3: detected capacity change from 0 to 40427 [ 135.011734][ T7359] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 135.013991][ T7359] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 135.036162][ T7369] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 135.038166][ T7369] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 135.081418][ T7369] F2FS-fs (loop3): invalid crc value [ 135.099618][ T7369] F2FS-fs (loop3): Found nat_bits in checkpoint [ 135.136205][ T7369] F2FS-fs (loop3): Cannot turn on quotas: -2 on 2 [ 135.151511][ T7369] F2FS-fs (loop3): Start checkpoint disabled! [ 135.182287][ T7369] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 135.184437][ T7369] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 135.251505][ T7359] F2FS-fs (loop1): Found nat_bits in checkpoint [ 135.328644][ T7359] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 135.330725][ T7359] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 135.448320][ T7409] loop2: detected capacity change from 0 to 4096 [ 135.536270][ T148] attempt to access beyond end of device [ 135.536270][ T148] loop3: rw=2049, want=40976, limit=40427 [ 135.598467][ T7423] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 136.156353][ T7447] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1352'. [ 136.329260][ T7431] loop3: detected capacity change from 0 to 1024 [ 136.399943][ T7450] bridge0: port 3(hsr_slave_0) entered blocking state [ 136.402580][ T7450] bridge0: port 3(hsr_slave_0) entered disabled state [ 136.564171][ T7454] binder: 7453:7454 ioctl c018620c 20000100 returned -22 [ 136.784119][ T7431] EXT4-fs (loop3): Test dummy encryption mode enabled [ 136.786058][ T7431] EXT4-fs (loop3): Ignoring removed orlov option [ 136.787801][ T7431] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 136.849279][ T7431] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,jqfmt=vfsv0,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback. [ 136.862586][ T7437] loop0: detected capacity change from 0 to 32768 [ 136.918005][ T7467] loop4: detected capacity change from 0 to 4096 [ 137.014224][ T7467] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 137.416891][ T7479] loop2: detected capacity change from 0 to 4096 [ 137.441414][ T7437] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 137.486806][ T7479] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 137.550048][ T7437] ocfs2: Unmounting device (7,0) on (node local) [ 137.859079][ T7496] loop1: detected capacity change from 0 to 512 [ 137.916070][ T7496] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 137.918116][ T7496] EXT4-fs (loop1): inline encryption not supported [ 137.919915][ T7496] EXT4-fs (loop1): Test dummy encryption mode enabled [ 137.948743][ T7496] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 137.978459][ T7496] EXT4-fs (loop1): 1 truncate cleaned up [ 137.980111][ T7496] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,stripe=0x0000000000000002,nogrpid,. Quota mode: none. [ 138.281486][ T7510] loop3: detected capacity change from 0 to 64 [ 138.499889][ T4044] hfs: node 4:3 still has 1 user(s)! [ 139.192212][ T7524] (unnamed net_device) (uninitialized): (slave ip_vti0): Device is not bonding slave [ 139.205439][ T7524] (unnamed net_device) (uninitialized): option active_slave: invalid value (ip_vti0) [ 139.237104][ T7512] loop1: detected capacity change from 0 to 32768 [ 139.510790][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 139.510805][ T26] audit: type=1326 audit(139.430:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7536 comm="syz.3.1385" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffae4eaba8 code=0x7ffc0000 [ 139.537754][ T26] audit: type=1326 audit(139.460:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7536 comm="syz.3.1385" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffae4e90d4 code=0x7ffc0000 [ 139.543916][ T26] audit: type=1326 audit(139.460:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7536 comm="syz.3.1385" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffae4e90d4 code=0x7ffc0000 [ 139.578001][ T26] audit: type=1326 audit(139.460:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7536 comm="syz.3.1385" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffae4eaba8 code=0x7ffc0000 [ 139.591587][ T7541] loop2: detected capacity change from 0 to 256 [ 139.597153][ T26] audit: type=1326 audit(139.470:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7536 comm="syz.3.1385" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=78 compat=0 ip=0xffffae4eaba8 code=0x7ffc0000 [ 139.609928][ T26] audit: type=1326 audit(139.470:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7536 comm="syz.3.1385" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffae4eaba8 code=0x7ffc0000 [ 139.649781][ T7518] loop4: detected capacity change from 0 to 40427 [ 139.724598][ T7518] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 139.726859][ T7518] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 139.785716][ T7553] loop0: detected capacity change from 0 to 64 [ 139.817965][ T7518] F2FS-fs (loop4): Found nat_bits in checkpoint [ 139.824097][ T7541] FAT-fs (loop2): Directory bread(block 64) failed [ 139.835007][ T7553] hfs: unable to read volume bitmap [ 139.836147][ T7541] FAT-fs (loop2): Directory bread(block 65) failed [ 139.837069][ T7553] hfs: can't find a HFS filesystem on dev loop0 [ 139.838753][ T7541] FAT-fs (loop2): Directory bread(block 66) failed [ 139.838793][ T7541] FAT-fs (loop2): Directory bread(block 67) failed [ 139.838855][ T7541] FAT-fs (loop2): Directory bread(block 68) failed [ 139.838888][ T7541] FAT-fs (loop2): Directory bread(block 69) failed [ 139.839148][ T7541] FAT-fs (loop2): Directory bread(block 70) failed [ 139.851895][ T7541] FAT-fs (loop2): Directory bread(block 71) failed [ 139.853877][ T7541] FAT-fs (loop2): Directory bread(block 72) failed [ 139.856629][ T7541] FAT-fs (loop2): Directory bread(block 73) failed [ 139.870954][ T7518] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 139.873275][ T7518] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 140.164886][ T7512] (syz.1.1381,7512,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 140.172460][ T7512] (syz.1.1381,7512,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 140.190393][ T7566] loop2: detected capacity change from 0 to 64 [ 140.293716][ T7512] (syz.1.1381,7512,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC. [ 140.393891][ T7512] JBD2: Ignoring recovery information on journal [ 140.456345][ C1] ================================================================== [ 140.459046][ C1] BUG: KASAN: use-after-free in __nft_trace_packet+0x130/0x14c [ 140.461129][ C1] Read of size 2 at addr ffff0000c2c411c0 by task ksoftirqd/1/20 [ 140.463261][ C1] [ 140.463918][ C1] CPU: 1 PID: 20 Comm: ksoftirqd/1 Not tainted 5.15.186-syzkaller #0 [ 140.466110][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 140.466682][ T7512] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 140.468906][ C1] Call trace: [ 140.468935][ C1] dump_backtrace+0x0/0x43c [ 140.473593][ C1] show_stack+0x2c/0x3c [ 140.474724][ C1] __dump_stack+0x30/0x40 [ 140.475952][ C1] dump_stack_lvl+0xf8/0x160 [ 140.477223][ C1] print_address_description+0x78/0x30c [ 140.478774][ C1] kasan_report+0xec/0x15c [ 140.479997][ C1] __asan_report_load2_noabort+0x44/0x50 [ 140.481543][ C1] __nft_trace_packet+0x130/0x14c [ 140.482971][ C1] __nft_trace_verdict+0x64/0x94 [ 140.484305][ C1] nft_do_chain+0xf24/0x1100 [ 140.485580][ C1] nft_do_chain_inet+0x1e0/0x2b4 [ 140.486982][ C1] nf_hook_slow+0xb4/0x1f4 [ 140.488215][ C1] NF_HOOK+0x1c4/0x354 [ 140.489329][ C1] ip6_input+0x90/0xa8 [ 140.490486][ C1] ip6_rcv_finish+0x1fc/0x234 [ 140.491771][ C1] NF_HOOK+0x2c0/0x354 [ 140.492888][ C1] ipv6_rcv+0x9c/0xbc [ 140.493948][ C1] __netif_receive_skb+0xcc/0x2ac [ 140.495297][ C1] process_backlog+0x3c8/0x744 [ 140.496604][ C1] __napi_poll+0xb4/0x5dc [ 140.497799][ C1] net_rx_action+0x468/0xa08 [ 140.499051][ C1] handle_softirqs+0x344/0xbf0 [ 140.500359][ C1] run_ksoftirqd+0x7c/0x2a0 [ 140.501600][ C1] smpboot_thread_fn+0x4b0/0x920 [ 140.502963][ C1] kthread+0x374/0x454 [ 140.504139][ C1] ret_from_fork+0x10/0x20 [ 140.505418][ C1] [ 140.506039][ C1] Allocated by task 20: [ 140.507199][ C1] __kasan_slab_alloc+0x8c/0xcc [ 140.508530][ C1] slab_post_alloc_hook+0x74/0x408 [ 140.510004][ C1] kmem_cache_alloc_node+0x204/0x41c [ 140.511439][ C1] __alloc_skb+0x134/0x67c [ 140.512694][ C1] synproxy_send_client_synack_ipv6+0x124/0x9a4 [ 140.514425][ C1] nft_synproxy_eval_v6+0x17c/0x2b8 [ 140.515876][ C1] nft_synproxy_do_eval+0x338/0x484 [ 140.517381][ C1] nft_synproxy_eval+0x34/0x48 [ 140.518704][ C1] nft_do_chain+0x3f0/0x1100 [ 140.520038][ C1] nft_do_chain_inet+0x1e0/0x2b4 [ 140.521389][ C1] nf_hook_slow+0xb4/0x1f4 [ 140.522676][ C1] NF_HOOK+0x1c4/0x354 [ 140.523743][ C1] ip6_input+0x90/0xa8 [ 140.523785][ T7512] (syz.1.1381,7512,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x2c7b5077, computed 0x28030c75. Applying ECC. [ 140.524899][ C1] ip6_rcv_finish+0x1fc/0x234 [ 140.524914][ C1] NF_HOOK+0x2c0/0x354 [ 140.524923][ C1] ipv6_rcv+0x9c/0xbc [ 140.524932][ C1] __netif_receive_skb+0xcc/0x2ac [ 140.524945][ C1] process_backlog+0x3c8/0x744 [ 140.524954][ C1] __napi_poll+0xb4/0x5dc [ 140.524964][ C1] net_rx_action+0x468/0xa08 [ 140.524973][ C1] handle_softirqs+0x344/0xbf0 [ 140.532144][ T7512] (syz.1.1381,7512,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x2c7b5077, computed 0x28d1d8ae [ 140.532279][ C1] run_ksoftirqd+0x7c/0x2a0 [ 140.536128][ T7512] (syz.1.1381,7512,0):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 140.536278][ C1] smpboot_thread_fn+0x4b0/0x920 [ 140.536295][ C1] kthread+0x374/0x454 [ 140.536306][ C1] ret_from_fork+0x10/0x20 [ 140.536316][ C1] [ 140.536320][ C1] Freed by task 20: [ 140.536326][ C1] kasan_set_track+0x4c/0x84 [ 140.536345][ C1] kasan_set_free_info+0x28/0x4c [ 140.536354][ C1] ____kasan_slab_free+0x118/0x164 [ 140.539897][ T7512] (syz.1.1381,7512,0):ocfs2_quota_read:201 ERROR: status = -5 [ 140.542604][ C1] __kasan_slab_free+0x18/0x28 [ 140.542623][ C1] slab_free_freelist_hook+0x128/0x1e8 [ 140.542634][ C1] kmem_cache_free+0xdc/0x3b4 [ 140.542643][ C1] kfree_skbmem+0x114/0x1b0 [ 140.542656][ C1] consume_skb+0x140/0x33c [ 140.542666][ C1] nft_synproxy_eval_v6+0x184/0x2b8 [ 140.561169][ T7512] Quota error (device loop1): find_tree_dqentry: Can't read quota tree block 5 [ 140.561939][ C1] nft_synproxy_do_eval+0x338/0x484 [ 140.561959][ C1] nft_synproxy_eval+0x34/0x48 [ 140.561968][ C1] nft_do_chain+0x3f0/0x1100 [ 140.561979][ C1] nft_do_chain_inet+0x1e0/0x2b4 [ 140.565781][ T7512] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 140.565937][ C1] nf_hook_slow+0xb4/0x1f4 [ 140.565955][ C1] NF_HOOK+0x1c4/0x354 [ 140.569682][ T7512] (syz.1.1381,7512,0):ocfs2_acquire_dquot:878 ERROR: status = -5 [ 140.569875][ C1] ip6_input+0x90/0xa8 [ 140.569891][ C1] ip6_rcv_finish+0x1fc/0x234 [ 140.569900][ C1] NF_HOOK+0x2c0/0x354 [ 140.569909][ C1] ipv6_rcv+0x9c/0xbc [ 140.578849][ T7512] (syz.1.1381,7512,0):ocfs2_mknod:314 ERROR: status = -5 [ 140.580982][ C1] __netif_receive_skb+0xcc/0x2ac [ 140.581003][ C1] process_backlog+0x3c8/0x744 [ 140.581012][ C1] __napi_poll+0xb4/0x5dc [ 140.588079][ T7512] (syz.1.1381,7512,0):ocfs2_mknod:502 ERROR: status = -5 [ 140.589048][ C1] net_rx_action+0x468/0xa08 [ 140.589066][ C1] handle_softirqs+0x344/0xbf0 [ 140.589079][ C1] run_ksoftirqd+0x7c/0x2a0 [ 140.589090][ C1] smpboot_thread_fn+0x4b0/0x920 [ 140.589100][ C1] kthread+0x374/0x454 [ 140.592677][ T7512] (syz.1.1381,7512,0):ocfs2_mkdir:659 ERROR: status = -5 [ 140.593768][ C1] ret_from_fork+0x10/0x20 [ 140.593793][ C1] [ 140.603877][ C1] The buggy address belongs to the object at ffff0000c2c41140 [ 140.603877][ C1] which belongs to the cache skbuff_head_cache of size 232 [ 140.607875][ C1] The buggy address is located 128 bytes inside of [ 140.607875][ C1] 232-byte region [ffff0000c2c41140, ffff0000c2c41228) [ 140.611719][ C1] The buggy address belongs to the page: [ 140.613371][ C1] page:000000006ebac92d refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x102c41 [ 140.616126][ C1] flags: 0x5ffc00000000200(slab|node=0|zone=2|lastcpupid=0x7ff) [ 140.618292][ C1] raw: 05ffc00000000200 0000000000000000 0000000a00000001 ffff0000c0862000 [ 140.620632][ C1] raw: 0000000000000000 00000000000c000c 00000001ffffffff 0000000000000000 [ 140.622936][ C1] page dumped because: kasan: bad access detected [ 140.624751][ C1] [ 140.625368][ C1] Memory state around the buggy address: [ 140.626962][ C1] ffff0000c2c41080: fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc [ 140.629136][ C1] ffff0000c2c41100: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 140.631447][ C1] >ffff0000c2c41180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 140.633651][ C1] ^ [ 140.635408][ C1] ffff0000c2c41200: fb fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc [ 140.637519][ C1] ffff0000c2c41280: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 140.639625][ C1] ================================================================== [ 140.641825][ C1] Disabling lock debugging due to kernel taint [ 140.778686][ T4033] ocfs2: Unmounting device (7,1) on (node local)