last executing test programs: 1.842857017s ago: executing program 2 (id=823): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2711}, 0x10) listen(r0, 0xa) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x56, [0x8000, 0x3, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000002, 0x20000000, 0x6, 0xe, 0x9, 0x4, 0xffff2d37, 0xffffff01, 0x31, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c1b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0x1, 0x4, 0x5, 0x3, 0x800, 0x4c74, 0x80000000, 0x242, 0x3, 0xc, 0x846, 0x5, 0x7, 0x200, 0xffffffff, 0x7, 0x5, 0x3, 0x8f, 0x6, 0x3, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x7, 0x5, 0x4, 0x200001, 0x40], [0x10, 0x9, 0x8000012d, 0x8004, 0x8000005, 0xfffffff3, 0x129432e2, 0xc8, 0xf9, 0x10, 0x3, 0x1, 0x9, 0xfffffffc, 0x4, 0x10001, 0x0, 0x5, 0x2f, 0xe, 0x6, 0xcf1, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x8, 0x401, 0x9, 0x2ae, 0xff, 0x3, 0x1000005, 0x5f31, 0x1000d, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x89, 0x3, 0xd, 0xffff8001, 0x47, 0x7ffd, 0x1, 0xfe000000, 0x7c, 0x2, 0x4, 0x9, 0x6, 0x3, 0x9, 0x1, 0x0, 0x3, 0xbc45, 0x3, 0x42, 0x401], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0xd, 0x5, 0x7fff, 0x0, 0x5, 0x7, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x2, 0x2, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0xb, 0x1, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x3, 0x200, 0xffffff6a, 0x3, 0x1, 0x2950bfaf, 0x80001000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x4002, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120201, 0x3, 0x1, 0x80a2ed, 0x4, 0x29], [0x2, 0xbb33, 0x7, 0xb, 0x5, 0x5, 0x6, 0xf3f, 0x0, 0xb9, 0xce7, 0x1ff, 0xf0f6, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x8, 0x7fff, 0xffff, 0xa420, 0x200001, 0x78b, 0x1, 0x2, 0x2, 0x60a7, 0x6, 0x16, 0xffffffff, 0xd4cf, 0x4, 0x4, 0xcc, 0x1, 0xfffff000, 0x5, 0x3, 0x92, 0x100, 0x3, 0x7, 0x3, 0x8, 0x6, 0x226, 0x827, 0x4005, 0x8, 0x30b1d694, 0xa1f, 0x9, 0x7, 0x5b, 0x6c1b, 0x0, 0x4, 0x5, 0xb0e, 0xd7, 0x3f6, 0xffff343f, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 1.634438484s ago: executing program 2 (id=827): syz_mount_image$f2fs(&(0x7f00000001c0), &(0x7f0000000380)='./file2\x00', 0x0, &(0x7f0000008e80)=ANY=[@ANYBLOB="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", @ANYRES8, @ANYRESDEC], 0x25, 0x55a8, &(0x7f00000014c0)="$eJzs3EtvG2UXAOAzTtP71y9CLNh1pAopkWqrTi+CFQVacRGtKi4LVuDYruXW9kSx64asumCJWPBPEEisWPIbWMASdogFiB1SkWcm0KQNtI3jqO3zSDNn5vj1mXdGlqUzYzmAZ9ZC+sdvSZyIIxExFxHHk8i3k3KJuBNxsRj7QkScjIjKPUtS5v9OHIyIoxFxYlK8qJmUL31xenzq/K9v//7t94cOHPvymx/29cSBffViRPRXi+3b/SJmnSLeKPONcTeP/XPjMq5uqdHPivzt9kpe4XZjc1wjj2c7xfhs9dZwEq/3Gs1J7HSv5/nVQXHA4bizWWfyhvRGYy3fb7VX8tgdZnnsbBTHXd8ovts2hqOiTqus90lePkajzVjk2+vt4nxWb+axORiV+aJu1mqvT+K4jOXhopn1Wvk8Vh7zIj8B3ukObq2n4/basJsN0vO1+ku1+oVqfS1rtUftc9VGv3XhXLrY6U2GVUftRv9iJ8s6vXatmfWX0sVOs1mt19PFS+2VbmOQ1uu1s7Uz1fNL5dbp9I2rH6S9Vro4ia91B7dG3d4wvZ6tpcU7ltLl2tmXl9JT9fS9K9fSa+9evnzl2vsfXfrw6qtX3nq9HHTftNLF5TPLy9X6mepyfekZOv9Py0k/wvknD07/9OPuLhsUdviAAbCz+/r/2N7/h/4fmLrd9P/9m+X+3vT/8TD9f0yz/5+0VPr//+5/K4/U/56YSv87H/r/PTx/2JXH6/8PTn0eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADM3M/zX72ZbywU+8fK/P/K1HPlfhIRlYi4+wBzcXBLzbmyzvwO4+e3zeG7JPIKk2McKpejEXGxXP78/15fBQAAAHh6fX3n5OdFt16sFvZ7QsxScdOmcvzjKdVLImJ+4ZcpVatMVs9PqVj++T4Q61Oqlt/AOjylYsUttwPTqvZQ5raEw/eEpAiVmU4HAACYia2dwGy7EAAAAGbps3999ZWZzYMZS2LzUebms+D8l/f/PBA8Mlnd3fbjfgAAAOBJkuz3BAAAAIA9l/f//v8PAAAAnm7F//8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBf7NzPjdpAFAfgZ4OB/FNQlHtayQ3KSAk55hgoIE1QAmkhDVADkXJICStYYc8ieRek1TLGWvR9ku2d8ernGeDyxtIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXfpbree/f375dWnObn+ZPLMBAAAATtlW63n9x7Rpv0v9H1LXp9QuIqKMiFO1+yBGrcxByqnO/H/1aAx/IuqEQ/84HW8j4ms67j52/SkAAADA7dosV7OmWm9OaQngX7+j4kqaRZvy/bdMeUVEVNP/mdLKw+lzprD69z2MH5nS6gWsSaawZsltePreKNdD2gaty8NMFvWXWLfKbp4LAAD0qV0JnKlCAAAAuAHf+x4A1/C0tC+Op+N7xnFzSS8E37RaAAAAwCtU9D0AAAAAoHN1/d/N/n+TF+3/V9j/DwAAALJr9v8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgS9tqPd8sV7Nz9xfPzNntL5NvRgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9+zPOwqEQBiEwd71ncnc/7DSoKGxSRUIH39jMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABvfveX/xNT40wy99pYeh5J1k6NrVNj79w4+sP4+jUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwsT8vKRACQRAFc8b/Tvr+h5UEPYMIEdDwqKIWDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwBf97pf/E1PjTDJ32lg6HknWrhpbV429B42jB+Pt3wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwsW//vm1UcQDA3/lspylUhIAiEUAFdYCFpm5p6YoQKGLgT0CKUqcEXAptBlpFlCxsKHMXBAsSQkigsOV/6NxIXcrWIUOQmBiC7lf6nJgmpO05TT8f6fl9/Xx5P86Wla/fHQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQWX83vNIo4zR7GCviqu32xuJsVq9tqzOry3cms5LFyUjVeuz1+mZ/oL0aPzk+MbyJAAAAcFgc2/WItMrvQwh3WyvTWd0Yy/P/VnVMlvP/UHaVlG3b8/61jcUj5UuTVf7/x+/3XtwaaCzNx8k6nZvvdU/tnEpz38t8wj236xHN/Mznv72k+RvS+HDphfVWfj6T727der+dhyN1zBYA2I+TVV0G1f9DWd0Z5sQAeGo0o8S7yv/TseHOCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKAO60vhmSpOQgiTzftxZm1jcXZQ/c3yncnVspy7eXM57jProhVCmJvvdU/VuJaDqzqb1z+b6fW6V65eqzs4HkIY8NKNvf15Wk7/P49phxD6Wk68NKCfj/cw1rZ+dgTlxzPUew5Hs/XtenDS15LsOOHvbRaG8QGoK2iU78/jGGK09ve9P6g+e4++5//zXTLyaL6SAAA41FplyTLRu62V6awtGQ9h88f+/P+NKA59ef/mjaKleL4a5f/3Pjl3Ox4rzv87Na3vSTC1cOmLqavXrr81f2nmYvdi9/O3T3fe6Zw5f/bs+an8t5KpudDwiwkAAAAPoV2WOP8fHbD/fzSKwwP2/4st4SL///L7ztfxWKn8f6D7m37DngkAAMDTqL0VPf/a338lA45I2u3w1czCwpVO8bj1/HTxWOt092mkLHH+n44Pe1YAAABAHdaXkr79/wtRHB6w/x9f///szy//GveZFtcWXA4hdE/OXu5dqG85B1r/Tb8/pY/jRuV8oPawVwoAAMCwjJYl3v9vjWf5f2PrkodGCOHNEyH8U97DH/aY/6cffPtLPFZ8/f+ZWld58DQmivOR1xMhNCeGPSMAAAAOsyNlyZL9P1sr05/+dvSjtuv/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOr2bwAAAP//aR4tAA==") syz_io_uring_setup(0x633b, &(0x7f0000000080)={0x0, 0x5855, 0x200, 0x0, 0x11a}, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x23) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x12042, 0x0) preadv2(r1, &(0x7f0000000080), 0x4, 0x7, 0x1, 0x1e) 1.503509128s ago: executing program 3 (id=831): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r0, 0x0) r1 = epoll_create1(0x0) ppoll(&(0x7f0000000040)=[{r0}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000340)={0xc0000008}) 1.428753452s ago: executing program 1 (id=832): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x50483}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0xe}, @IFLA_GRE_LOCAL={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x26}}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 1.359286598s ago: executing program 1 (id=834): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000180)=@mmap={0x0, 0x2, 0x4, 0x800, 0x81, {0x0, 0xea60}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x5, 0x1, {}, 0x1}) close_range(r0, 0xffffffffffffffff, 0x0) 1.298103635s ago: executing program 2 (id=835): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(0x3) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0xa, 0x3, 0x87) sendto(r1, &(0x7f00000003c0)="e1118ce4769b", 0xfdef, 0x800, &(0x7f0000000600)=@l2tp6={0xa, 0x0, 0x7, @local, 0x5}, 0x80) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 1.211375758s ago: executing program 1 (id=837): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000400)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000005c0)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000001380)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000740)="17f2b2de5c6b0db5d25446463f74d3740a70f6e0249ca79ea3579bc57df5837189a49908837dae500632174cac1efc0e61b9cbcde67b0070040000003d478881c92de1d95dcc82811ba3e4d049aa70572e323a9b0080fe56fc785245e3dd4eb6fd1d435e39d84c964a20acf7d7ef519aea75b91aa77cac6acc28cafff73c92dc58cdc172494f050a1678bcfcc26a1ef6", 0x90}], 0x1, 0x0, 0x0, 0x11}], 0x1, 0xc48d4) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000040)=""/114, 0x72}, {&(0x7f0000000100)=""/96, 0x60}], 0x2}, 0x0) 914.063517ms ago: executing program 0 (id=843): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file1\x00', 0x800810, &(0x7f0000000140)={[{@nossd_spread}, {@nodatasum}, {@compress_force}, {@compress_algo={'compress', 0x3d, 'lzo'}}, {@flushoncommit}, {@autodefrag}, {@max_inline={'max_inline', 0x3d, [0x30, 0x37, 0x65]}}, {@nodiscard}]}, 0xfb, 0x510a, &(0x7f000000d000)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x101042, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, 0x0) 662.699505ms ago: executing program 0 (id=846): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x5) accept(r0, &(0x7f0000000080)=@can, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000847fff)='X', 0xfef4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 618.873636ms ago: executing program 3 (id=847): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./bus\x00', 0x4000, &(0x7f0000000500)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES64, @ANYRES32, @ANYRESHEX, @ANYRES16], 0x1, 0x2cb, &(0x7f0000000ac0)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x12000)=nil, 0x12000, 0x65) 478.952118ms ago: executing program 4 (id=849): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x29) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0xff) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000040)={0xd4c, 0x8, 0x7f, 0xc6ce, 0xfd, "0020080700000900000000000000000100", 0x240000, 0x1fd}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0x8) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000200)=0x1) 413.138994ms ago: executing program 3 (id=850): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="1eb6ffffffffffff88a82bbaf5002b0088f7"], 0x16) 394.28385ms ago: executing program 4 (id=851): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000580)="b19ccccf84f531d9ec4cda81a3ef2ca8", 0x10) sendmmsg$alg(r1, &(0x7f0000001bc0)=[{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000002c00)="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", 0x801}, {&(0x7f0000000080)="2d4cc890e19ddb16821e17f40f6a6fd24b06c65564b0c8e70b378448624c25ff9ad42dfd82704b6d7cde17d91d9c480167febfa5e9b48e43a9743a480018d42c3874a69683139036552d27e35ba0f7420ad32f15a1e536403e14db3b735e583b0f4c3c9904a1bc", 0x67}, {&(0x7f0000000100)="b626b257f59e53567cb9554def57a4eb35dae97d59dbe786c72d3db418d41ee87f5acb2754c93b2f4901d70fb0e06840e25e594bb2", 0x35}, {&(0x7f0000001c00)="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", 0x75f}], 0x4, 0x0, 0x0, 0x81}], 0x1, 0x20041000) recvmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000009c0)=""/4091, 0xffb}, {&(0x7f0000000780)=""/239, 0xef}], 0x2}, 0x12143) 347.463071ms ago: executing program 1 (id=852): connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000100)={0x18, 0x0, {0x2, @multicast, 'macvlan1\x00'}}, 0x1e) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000000)=0x1) ioctl$PPPIOCBRIDGECHAN(r1, 0x40047435, &(0x7f0000000200)=0xfffffffe) 326.129256ms ago: executing program 4 (id=853): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) close(0x3) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r0, r1, 0x5}, 0x10) unshare(0x400) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[], 0x10) 319.701985ms ago: executing program 0 (id=854): sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x14, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4850}, 0x4048095) unshare(0x2c020400) r0 = msgget$private(0x0, 0x0) msgsnd(0x0, &(0x7f0000000180)=ANY=[], 0x2000, 0x0) msgrcv(0x0, &(0x7f0000000000)={0x0, ""/19}, 0x2000, 0x0, 0x0) msgctl$MSG_STAT_ANY(r0, 0xd, &(0x7f00000002c0)=""/88) 298.356551ms ago: executing program 2 (id=855): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(aes),sha256)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) read$alg(r1, &(0x7f0000001540)=""/4131, 0x1023) sendmmsg$alg(r1, &(0x7f00000000c0)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000340)="98d1e72ecfbe28d5ac6096c2652aa5c397b2ed6209ab65bf3886e35409c47e5762a30f137f7889b7c9774599a7827c016ef083880b2fd3b74c417de030434efeba5407352e428c1d09f7cfd2831f34f7ebedd97d87f49b055a671f5dc7ba23f59d24c1283f1da6f0e28016f5315f87722e", 0x71}, {&(0x7f00000001c0)="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", 0x100}, {&(0x7f0000000040)="bcdad1efd255e09633774998d84341b7bed86d8f8d89736044bf450e78ca0717194b0665e03a3abfa9f7", 0x2a}, {&(0x7f0000002580)="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", 0xe88}], 0x4, 0x0, 0x0, 0x2804c044}], 0x1, 0x4c091) 272.151145ms ago: executing program 1 (id=856): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) io_setup(0x4, &(0x7f0000000600)=0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r2, 0x1, &(0x7f0000000080)=[&(0x7f0000000140)={0x0, 0x4, 0x0, 0x0, 0x0, r3, 0x0}]) 262.610553ms ago: executing program 0 (id=857): syz_mount_image$udf(&(0x7f0000000280), &(0x7f00000001c0)='./file0\x00', 0x10004d0, &(0x7f0000000140)=ANY=[@ANYBLOB="73686f72746164000000006d653d3030303030303030303030303030303030b030342c6e6f6164696e6963622c7569643d00", @ANYRES8, @ANYRESHEX], 0x2, 0xa1b, &(0x7f0000001f80)="$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") setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x129242, 0x30) r1 = openat(0xffffffffffffff9c, &(0x7f0000000f80)='./file1\x00', 0x183802, 0x15) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c) pwrite64(r0, &(0x7f00000002c0)="63cc8c902e022de83371dfa74b700ecc0a59c762bfe489790f977ada2efcc1381ce675b90c83acac91a53591ca6d5579977a160e0109000000000000003cd7616b61bf9e572605fda1d82580a8ec052620fe43fc", 0x54, 0x80000000e0) 243.835219ms ago: executing program 4 (id=858): connect$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x2, 0x0, 0x1, 0x0, 0x6, @random="edb7fd4e1ca2"}, 0x14) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b031200e0ff64000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100, r2}, 0x14) 236.888808ms ago: executing program 3 (id=859): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @broadcast, 'geneve1\x00'}}, 0x1e) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) 209.029752ms ago: executing program 2 (id=860): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)={0x14}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000001c0)={0x20000014}) epoll_pwait(r2, &(0x7f0000000200)=[{}, {}], 0x2, 0x8, 0x0, 0x0) 167.886414ms ago: executing program 3 (id=861): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a31000000001400048008000240e7b140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) close(0x3) 143.767489ms ago: executing program 2 (id=862): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x6dd3, 0x6, 0x1, 0x100, 0x2}, 0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 143.362929ms ago: executing program 4 (id=863): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-aes-neonbs\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="b7f2288d3a9ea2bc0000def1260a0000", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20044004}], 0x1, 0x0) read$alg(r1, &(0x7f0000000340)=""/4115, 0x1013) 106.909321ms ago: executing program 4 (id=864): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x90000005}) epoll_pwait(r2, &(0x7f0000000580)=[{}], 0x1, 0xfffeffff, 0x0, 0x0) write(r0, 0x0, 0x0) 105.990771ms ago: executing program 1 (id=865): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x4, &(0x7f0000000180)={[{@sysvgroups}, {@noload}, {@nobh}, {@noload}, {@nombcache}, {@norecovery}, {@errors_continue}, {@quota}]}, 0x1, 0x656, &(0x7f0000001080)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000002540)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000140)={0x7b, 0x1e, 0x88, 0x7ec, 0x9, 0x2000000000002, 0x3, 0x0, 0x7ffc}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) truncate(&(0x7f0000000040)='./file1\x00', 0x41bfc) 76.176725ms ago: executing program 0 (id=866): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r0], 0x4c}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 50.03103ms ago: executing program 3 (id=867): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$uinput_user_dev(r0, &(0x7f0000000240)={'syz0\x00', {0x508, 0x7, 0x87, 0x1}, 0x47, [0x5f11bec3, 0x3, 0x5, 0x40, 0x0, 0x3, 0x0, 0x7d, 0x80013, 0x5, 0x0, 0x6, 0x0, 0x0, 0x4000000, 0x2, 0x1a4, 0xfffff605, 0x3, 0x0, 0x4, 0x7ff, 0xe2b, 0x7, 0x681c1eb5, 0x11e, 0x0, 0x2, 0x0, 0xe9, 0x0, 0xffff, 0xfffffffd, 0x4, 0x1, 0x3, 0x0, 0x1, 0x5de82a4e, 0x0, 0x0, 0x9, 0x4, 0xfffffffe, 0x1, 0x0, 0x8000, 0x7, 0x0, 0xe0, 0x3fd, 0x5, 0xfffffff7, 0x0, 0xf685, 0x0, 0x1ab9, 0x6, 0x2, 0x0, 0x9, 0x1c15d73a, 0x2], [0x0, 0x0, 0x0, 0x5, 0x4, 0x1, 0x8, 0x5, 0x3, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x61c5fb46, 0x10000, 0x0, 0x35, 0x10001, 0x75, 0x0, 0x4, 0x0, 0xd, 0x80000000, 0x0, 0xfffff303, 0x9, 0x0, 0x9, 0x2, 0xff, 0x2, 0xa, 0x3, 0x0, 0x7, 0xfffffffb, 0xffffff00, 0x0, 0x10, 0x0, 0x0, 0x0, 0x1, 0xffff, 0x9, 0x441238c7, 0x0, 0x3, 0x0, 0x66f4, 0x2, 0x7ffffffd, 0x6, 0x9], [0x20, 0xc50, 0x3, 0x9f5, 0x0, 0xa02, 0x1c75, 0xf51, 0xdb, 0x40, 0x0, 0x21, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x205, 0x5, 0xfffffffd, 0xc, 0x200000, 0x200, 0xcc0, 0x3fd, 0x6, 0x6, 0x0, 0x0, 0xffffff7f, 0x80, 0x921, 0x2f, 0x0, 0x0, 0xfffffffd, 0x0, 0x15960318, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x5, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffe, 0x4, 0x0, 0x6574, 0x7, 0x0, 0xcd55, 0xfb], [0x0, 0x6, 0x0, 0x2, 0x1, 0xffffffff, 0x5, 0x200, 0x0, 0xd63, 0x6, 0x0, 0x0, 0x0, 0xfffffffa, 0xfa3, 0x3ff, 0x8, 0x2, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x194e, 0x0, 0xe793, 0x4ad, 0x8, 0x0, 0x80000001, 0x3, 0x0, 0x400, 0x101, 0x0, 0x1, 0x0, 0x40, 0x8000010, 0x0, 0x5, 0x0, 0x0, 0x7fff, 0x6, 0x10800, 0x5, 0xd, 0x0, 0x40000000, 0x0, 0x4, 0x6, 0x4, 0x0, 0xfff, 0xb2, 0xa, 0xb]}, 0x45c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000240)={0x0, 0x9, 0x30, 0x6e673fc2, 0x8}, &(0x7f00000002c0)=0x18) 0s ago: executing program 0 (id=868): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430c1", 0x10) sendmmsg$alg(r1, &(0x7f0000003000)=[{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f00000033c0)="f5ac467833c129406b9fb74227deb178a089", 0x12}], 0x1, 0x0, 0x0, 0xc855}], 0x1, 0x4004004) recvmsg(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000007c0)=""/16, 0x10}], 0x1}, 0x102) kernel console output (not intermixed with test programs): 762217][ T4325] syz-executor: attempt to access beyond end of device [ 29.762217][ T4325] loop0: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 29.812179][ T4461] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 29.818224][ T4432] BTRFS info (device loop3): enabling ssd optimizations [ 29.824579][ T4432] BTRFS info (device loop3): rebuilding free space tree [ 29.842041][ T4461] EXT4-fs error (device loop1): ext4_lookup:1858: inode #16: comm syz.1.22: iget: bad i_size value: 8796093031208 [ 29.851863][ T4432] BTRFS info (device loop3): disabling free space tree [ 29.852667][ T4461] EXT4-fs error (device loop1): ext4_iget_extra_inode:4756: inode #12: comm syz.1.22: corrupted in-inode xattr [ 29.853109][ T4432] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 29.857034][ T4432] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 29.899405][ T4321] EXT4-fs (loop1): unmounting filesystem. [ 29.928332][ T4328] Bluetooth: hci2: command 0x041b tx timeout [ 29.929353][ T4328] Bluetooth: hci0: command 0x041b tx timeout [ 29.930408][ T4328] Bluetooth: hci4: command 0x041b tx timeout [ 29.931410][ T4328] Bluetooth: hci3: command 0x041b tx timeout [ 29.932391][ T4328] Bluetooth: hci1: command 0x041b tx timeout [ 29.939421][ T4478] loop2: detected capacity change from 0 to 4096 [ 29.949459][ T4480] ======================================================= [ 29.949459][ T4480] WARNING: The mand mount option has been deprecated and [ 29.949459][ T4480] and is ignored by this kernel. Remove the mand [ 29.949459][ T4480] option from the mount to silence this warning. [ 29.949459][ T4480] ======================================================= [ 29.960964][ T4482] loop0: detected capacity change from 0 to 512 [ 29.966006][ T4482] EXT4-fs: Ignoring removed oldalloc option [ 29.969444][ T4478] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 29.971271][ T4478] NILFS (loop2): mounting unchecked fs [ 29.991205][ T4482] EXT4-fs (loop0): 1 truncate cleaned up [ 30.001530][ T4482] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 30.010869][ T4334] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 30.031409][ T4478] NILFS (loop2): recovery complete [ 30.039831][ T4486] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 30.129240][ T4325] EXT4-fs (loop0): unmounting filesystem. [ 30.390043][ T4505] loop3: detected capacity change from 0 to 40427 [ 30.401482][ T4505] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x35f7 [ 30.402809][ T4505] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x3ffff [ 30.414166][ T4505] F2FS-fs (loop3): invalid crc value [ 30.417440][ T4505] F2FS-fs (loop3): Found nat_bits in checkpoint [ 30.439803][ T4505] F2FS-fs (loop3): Start checkpoint disabled! [ 30.440960][ T4503] loop2: detected capacity change from 0 to 40427 [ 30.449483][ T4503] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 30.449780][ T4505] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 30.453190][ T4503] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 30.460295][ T4503] F2FS-fs (loop2): invalid crc value [ 30.470253][ T4503] F2FS-fs (loop2): Found nat_bits in checkpoint [ 30.490998][ T4503] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 30.492252][ T4503] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 30.510256][ T4505] syz.3.27: attempt to access beyond end of device [ 30.510256][ T4505] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 30.539032][ T4505] F2FS-fs (loop3) : inject too big dir depth in f2fs_add_regular_entry of f2fs_do_add_link+0x2a0/0x4f0 [ 30.552925][ T4503] syz.2.31: attempt to access beyond end of device [ 30.552925][ T4503] loop2: rw=10241, sector=53248, nr_sectors = 8 limit=40427 [ 30.569024][ T4513] loop0: detected capacity change from 0 to 32768 [ 30.573347][ T4387] kworker/u4:6: attempt to access beyond end of device [ 30.573347][ T4387] loop3: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 30.599740][ T4326] syz-executor: attempt to access beyond end of device [ 30.599740][ T4326] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 30.617026][ T4513] loop0: p1 p3 < > [ 30.889273][ T4528] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.37 (4528) [ 30.893092][ T4528] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 30.908970][ T4314] udevd[4314]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 30.912574][ T4528] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm [ 30.914010][ T4528] BTRFS info (device loop2): setting nodatacow, compression disabled [ 30.914399][ T4310] udevd[4310]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 30.919756][ T4528] BTRFS info (device loop2): max_inline at 0 [ 30.920684][ T4528] BTRFS info (device loop2): enabling auto defrag [ 30.921728][ T4528] BTRFS info (device loop2): turning on flush-on-commit [ 30.930784][ T4528] BTRFS info (device loop2): disabling auto defrag [ 30.931913][ T4528] BTRFS info (device loop2): doing ref verification [ 30.933017][ T4528] BTRFS info (device loop2): force clearing of disk cache [ 30.934220][ T4528] BTRFS info (device loop2): force zlib compression, level 3 [ 30.943495][ T4528] BTRFS info (device loop2): enabling ssd optimizations [ 30.944673][ T4528] BTRFS info (device loop2): turning off barriers [ 30.948326][ T4528] BTRFS info (device loop2): max_inline at 8 [ 30.949394][ T4528] BTRFS info (device loop2): using free space tree [ 31.128480][ T4528] BTRFS info (device loop2): rebuilding free space tree [ 31.228689][ T4552] XFS (loop0): Mounting V5 Filesystem [ 31.276127][ T4552] XFS (loop0): Ending clean mount [ 31.284482][ T4552] XFS (loop0): Quotacheck needed: Please wait. [ 31.318950][ T4552] XFS (loop0): Quotacheck: Done. [ 31.351101][ T4326] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 31.374412][ T4592] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 31.481640][ T4325] XFS (loop0): Unmounting Filesystem [ 31.623622][ T4604] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 31.643633][ T4604] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002] [ 31.645091][ T4604] System zones: 0-2, 18-18, 34-34 [ 31.653694][ T4604] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1113: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters [ 31.660331][ T4604] EXT4-fs (loop2): Remounting filesystem read-only [ 31.663096][ T4604] EXT4-fs error (device loop2): ext4_do_update_inode:5272: inode #16: comm syz.2.56: corrupted inode contents [ 31.666156][ T4604] EXT4-fs (loop2): Remounting filesystem read-only [ 31.667310][ T4604] EXT4-fs error (device loop2): ext4_dirty_inode:6137: inode #16: comm syz.2.56: mark_inode_dirty error [ 31.669476][ T4604] EXT4-fs (loop2): Remounting filesystem read-only [ 31.670766][ T4604] EXT4-fs error (device loop2): ext4_do_update_inode:5272: inode #16: comm syz.2.56: corrupted inode contents [ 31.672890][ T4604] EXT4-fs (loop2): Remounting filesystem read-only [ 31.674001][ T4604] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #16: comm syz.2.56: mark_inode_dirty error [ 31.678794][ T4604] EXT4-fs (loop2): Remounting filesystem read-only [ 31.680024][ T4604] EXT4-fs error (device loop2): ext4_do_update_inode:5272: inode #16: comm syz.2.56: corrupted inode contents [ 31.682371][ T4604] EXT4-fs (loop2): Remounting filesystem read-only [ 31.683619][ T4604] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #16: comm syz.2.56: mark_inode_dirty error [ 31.686543][ T4604] EXT4-fs (loop2): Remounting filesystem read-only [ 31.687833][ T4604] EXT4-fs error (device loop2): ext4_do_update_inode:5272: inode #16: comm syz.2.56: corrupted inode contents [ 31.690602][ T4604] EXT4-fs (loop2): Remounting filesystem read-only [ 31.691786][ T4604] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 31.693622][ T4604] EXT4-fs (loop2): Remounting filesystem read-only [ 31.694830][ T4604] EXT4-fs error (device loop2): ext4_do_update_inode:5272: inode #16: comm syz.2.56: corrupted inode contents [ 31.708404][ T4604] EXT4-fs (loop2): Remounting filesystem read-only [ 31.710662][ T4604] EXT4-fs error (device loop2): ext4_truncate:4318: inode #16: comm syz.2.56: mark_inode_dirty error [ 31.716114][ T4604] EXT4-fs (loop2): Remounting filesystem read-only [ 31.718457][ T4604] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 31.721452][ T4604] EXT4-fs (loop2): Remounting filesystem read-only [ 31.728061][ T4604] EXT4-fs (loop2): 1 truncate cleaned up [ 31.730240][ T4604] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 31.761829][ T4607] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 31.763097][ T4607] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 31.765059][ T4607] F2FS-fs (loop1): invalid crc value [ 31.792947][ T4607] F2FS-fs (loop1): Found nat_bits in checkpoint [ 31.799662][ T11] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 31.801307][ T11] EXT4-fs error (device loop2): ext4_release_dquot:6871: comm kworker/u4:1: Failed to release dquot type 1 [ 31.807520][ T11] EXT4-fs (loop2): Remounting filesystem read-only [ 31.816133][ T4604] capability: warning: `syz.2.56' uses deprecated v2 capabilities in a way that may be insecure [ 31.829162][ T4607] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 31.830577][ T4607] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 31.832864][ T4326] EXT4-fs (loop2): unmounting filesystem. [ 32.005870][ T4331] Bluetooth: hci1: command 0x040f tx timeout [ 32.006837][ T4331] Bluetooth: hci3: command 0x040f tx timeout [ 32.007877][ T4331] Bluetooth: hci4: command 0x040f tx timeout [ 32.008870][ T4331] Bluetooth: hci0: command 0x040f tx timeout [ 32.012561][ T4328] Bluetooth: hci2: command 0x040f tx timeout [ 32.116290][ T4639] input: syz1 as /devices/virtual/input/input2 [ 32.119973][ T4638] binder: 4637:4638 ioctl c0306201 200003c0 returned -14 [ 32.123470][ T4639] input: failed to attach handler leds to device input2, error: -6 [ 32.136437][ T4638] binder: 4637:4638 got transaction to invalid handle, 3 [ 32.141019][ T4638] binder: 4638:4637 cannot find target node [ 32.142058][ T4638] binder: 4637:4638 transaction call to 0:0 failed 3/29201/-22, size 0-0 line 3045 [ 32.156214][ T4494] binder: undelivered TRANSACTION_ERROR: 29201 [ 32.212230][ T4647] Bluetooth: MGMT ver 1.22 [ 32.307957][ T4654] use of bytesused == 0 is deprecated and will be removed in the future, [ 32.315512][ T4654] use the actual size instead. [ 32.563218][ T4670] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 32.569664][ T4670] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 32.571286][ T4670] REISERFS (device loop4): using ordered data mode [ 32.572391][ T4670] reiserfs: using flush barriers [ 32.574027][ T4670] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 32.577224][ T4670] REISERFS (device loop4): checking transaction log (loop4) [ 32.580415][ T4670] REISERFS (device loop4): Using r5 hash to sort names [ 32.582851][ T4670] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 33.093220][ T4726] syz.4.104 uses obsolete (PF_INET,SOCK_PACKET) [ 33.110256][ T4728] netlink: 44 bytes leftover after parsing attributes in process `syz.3.105'. [ 33.191218][ T4724] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.103 (4724) [ 33.197946][ T4724] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 33.199722][ T4724] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 33.201316][ T4724] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 33.202995][ T4724] BTRFS info (device loop2): use zstd compression, level 3 [ 33.204341][ T4724] BTRFS info (device loop2): using free space tree [ 33.233771][ T4724] BTRFS info (device loop2): enabling ssd optimizations [ 33.332485][ T4326] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 33.374564][ T4755] tls_set_device_offload: netdev not found [ 33.509186][ T4766] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 33.542386][ T4773] x_tables: eb_tables: AUDIT.0 target: invalid size 8 (kernel) != (user) 0 [ 33.588408][ T4780] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan2: link becomes ready [ 33.592271][ T4779] netlink: 16 bytes leftover after parsing attributes in process `syz.0.119'. [ 33.613864][ T4782] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 33.614361][ T4780] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan3: link becomes ready [ 33.853020][ T4811] netlink: 'syz.4.134': attribute type 39 has an invalid length. [ 34.076697][ T47] Bluetooth: hci0: command 0x0419 tx timeout [ 34.077715][ T47] Bluetooth: hci2: command 0x0419 tx timeout [ 34.078673][ T47] Bluetooth: hci4: command 0x0419 tx timeout [ 34.079717][ T47] Bluetooth: hci3: command 0x0419 tx timeout [ 34.080719][ T47] Bluetooth: hci1: command 0x0419 tx timeout [ 34.215369][ T4803] set_capacity_and_notify: 10 callbacks suppressed [ 34.215378][ T4803] loop0: detected capacity change from 0 to 131072 [ 34.222196][ T4803] F2FS-fs (loop0): Wrong NAT boundary, start(2560) end(3584) blocks(0) [ 34.223551][ T4803] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 34.225217][ T4803] F2FS-fs (loop0): invalid crc value [ 34.230300][ T4803] F2FS-fs (loop0): Found nat_bits in checkpoint [ 34.238538][ T4803] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 34.239739][ T4803] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 34.292781][ T4325] F2FS-fs (loop0): f2fs_remove_inode_page: inconsistent i_blocks, ino:7, iblocks:1407713280 [ 34.406837][ T4836] netlink: 104 bytes leftover after parsing attributes in process `syz.0.140'. [ 34.429472][ T4838] netlink: 104 bytes leftover after parsing attributes in process `syz.4.143'. [ 34.783006][ T4851] device syzkaller1 entered promiscuous mode [ 34.835200][ T4848] loop2: detected capacity change from 0 to 32768 [ 34.850658][ T4845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.852352][ T4845] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.911798][ T4848] XFS (loop2): DAX unsupported by block device. Turning off DAX. [ 34.913329][ T4848] XFS (loop2): Mounting V5 Filesystem [ 34.958688][ T4848] XFS (loop2): Ending clean mount [ 34.962583][ T4848] XFS (loop2): Quotacheck needed: Please wait. [ 34.978282][ T4848] XFS (loop2): Quotacheck: Done. [ 35.041396][ T4326] XFS (loop2): Unmounting Filesystem [ 35.113904][ T4868] tipc: Started in network mode [ 35.114733][ T4868] tipc: Node identity 7f000001, cluster identity 4711 [ 35.117257][ T4868] tipc: Enabling of bearer rejected, failed to enable media [ 35.170972][ T4870] device syzkaller1 entered promiscuous mode [ 35.398004][ T4874] loop3: detected capacity change from 0 to 256 [ 35.416250][ T4874] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 35.841644][ T4890] loop2: detected capacity change from 0 to 8192 [ 35.863756][ T4890] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 35.865970][ T4890] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 35.867546][ T4890] REISERFS (device loop2): using ordered data mode [ 35.868601][ T4890] reiserfs: using flush barriers [ 35.873658][ T4890] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 35.876491][ T4890] REISERFS (device loop2): checking transaction log (loop2) [ 35.880867][ T4890] REISERFS (device loop2): Using r5 hash to sort names [ 35.882129][ T4890] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 36.201518][ T4879] loop4: detected capacity change from 0 to 40427 [ 36.219245][ T4879] F2FS-fs (loop4): Fix alignment : done, start(4096) end(16896) block(12288) [ 36.228234][ T4879] F2FS-fs (loop4): invalid crc value [ 36.262754][ T4879] F2FS-fs (loop4): Found nat_bits in checkpoint [ 36.330580][ T4879] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 36.430872][ T4320] syz-executor: attempt to access beyond end of device [ 36.430872][ T4320] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 36.999090][ T4916] loop3: detected capacity change from 0 to 32768 [ 37.022198][ T4916] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.172 (4916) [ 37.052454][ T4916] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 37.054172][ T4916] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 37.059210][ T4916] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 37.060678][ T4916] BTRFS info (device loop3): use zstd compression, level 3 [ 37.065443][ T4916] BTRFS info (device loop3): using free space tree [ 37.330158][ T4916] BTRFS info (device loop3): enabling ssd optimizations [ 37.488465][ T4334] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 37.737218][ T4961] netlink: 8 bytes leftover after parsing attributes in process `syz.3.182'. [ 37.743323][ T4961] netlink: 4 bytes leftover after parsing attributes in process `syz.3.182'. [ 37.755063][ T39] failed while handling packet from 3:0 [ 37.759332][ T4961] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 37.761856][ T4961] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 37.763379][ T4961] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 37.764826][ T4961] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 37.780309][ T4961] netlink: 8 bytes leftover after parsing attributes in process `syz.3.182'. [ 37.783046][ T4961] netlink: 4 bytes leftover after parsing attributes in process `syz.3.182'. [ 37.787697][ T4961] Zero length message leads to an empty skb [ 38.019961][ T4973] loop0: detected capacity change from 0 to 256 [ 38.036293][ T4973] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 38.054870][ T4975] netlink: 52 bytes leftover after parsing attributes in process `syz.2.187'. [ 38.062146][ T4973] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d) [ 38.073008][ T4975] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.074731][ T4975] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.114783][ T4978] netlink: 52 bytes leftover after parsing attributes in process `syz.2.187'. [ 38.222446][ T4984] netlink: 172 bytes leftover after parsing attributes in process `syz.2.201'. [ 38.370246][ T4995] loop0: detected capacity change from 0 to 4096 [ 38.371681][ T4995] EXT4-fs: inline encryption not supported [ 38.391181][ T4994] loop1: detected capacity change from 0 to 2048 [ 38.392725][ T4995] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a84ec018, mo2=0003] [ 38.394140][ T4995] System zones: 0-5 [ 38.399411][ T4995] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 38.457546][ T4994] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 38.602639][ T4325] EXT4-fs (loop0): unmounting filesystem. [ 38.605185][ T5009] loop1: detected capacity change from 0 to 256 [ 38.615017][ T5009] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 38.679728][ T5016] process 'syz.4.204' launched './file2' with NULL argv: empty string added [ 38.691678][ T5019] EXT4-fs: inline encryption not supported [ 38.693833][ T5019] EXT4-fs: Ignoring removed mblk_io_submit option [ 38.721027][ T5009] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779264) [ 38.722865][ T5009] FAT-fs (loop1): Filesystem has been set read-only [ 38.724505][ T5009] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779008) [ 38.729643][ T5009] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779008) [ 38.769459][ T5019] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 38.771932][ T5019] EXT4-fs (loop0): Test dummy encryption mode enabled [ 38.774528][ T5019] EXT4-fs (loop0): orphan cleanup on readonly fs [ 38.776170][ T5019] EXT4-fs error (device loop0): ext4_orphan_get:1399: comm syz.0.205: inode #13: comm syz.0.205: iget: illegal inode # [ 38.782461][ T5019] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.205: couldn't read orphan inode 13 (err -117) [ 38.784810][ T5019] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 38.800741][ T5019] EXT4-fs error (device loop0): ext4_resize_begin:62: comm syz.0.205: resize_inode disabled but reserved GDT blocks non-zero [ 38.813755][ T4325] EXT4-fs (loop0): unmounting filesystem. [ 38.846707][ T5031] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 38.867449][ T5031] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: comm syz.0.208: inode #647214379: comm syz.0.208: iget: illegal inode # [ 38.872922][ T5031] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.208: error while reading EA inode 647214379 err=-117 [ 38.902008][ T4325] EXT4-fs (loop0): unmounting filesystem. [ 38.946650][ T5037] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 38.974783][ T5037] ntfs3: loop1: ntfs_set_state r=3 failed, -22. [ 39.016959][ T5037] ntfs3: loop1: ino=1e, "file1" mmap encrypted not supported [ 39.049662][ T486] ntfs3: loop1: ntfs3_write_inode r=3 failed, -22. [ 39.051468][ T4321] ntfs3: loop1: ntfs_set_state r=3 failed, -22. [ 39.052476][ T4321] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 39.054187][ T4321] ntfs3: loop1: ntfs_set_state r=3 failed, -22. [ 39.073243][ T486] ntfs3: loop1: ntfs3_write_inode r=3 failed, -22. [ 39.074868][ T4321] ntfs3: loop1: ntfs_evict_inode r=3 failed, -22. [ 39.235120][ T5057] set_capacity_and_notify: 3 callbacks suppressed [ 39.235129][ T5057] loop1: detected capacity change from 0 to 128 [ 39.244039][ T5057] EXT4-fs (loop1): Test dummy encryption mode enabled [ 39.249196][ T5057] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 39.259703][ T5057] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-ce" [ 39.265712][ T5057] fscrypt: AES-256-XTS using implementation "xts-aes-ce" [ 39.293632][ T4321] EXT4-fs (loop1): unmounting filesystem. [ 39.300071][ T5063] loop4: detected capacity change from 0 to 512 [ 39.485405][ T27] audit: type=1326 audit(39.480:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5073 comm="syz.2.224" exe="/root/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffffb2377ee8 code=0x0 [ 39.858807][ T5106] loop1: detected capacity change from 0 to 32768 [ 39.860672][ T5106] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.238 (5106) [ 39.864121][ T5106] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 39.866316][ T5106] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 39.867789][ T5106] BTRFS info (device loop1): force clearing of disk cache [ 39.869593][ T5106] BTRFS info (device loop1): force zlib compression, level 3 [ 39.870875][ T5106] BTRFS info (device loop1): enabling auto defrag [ 39.871994][ T5106] BTRFS info (device loop1): max_inline at 0 [ 39.872959][ T5106] BTRFS info (device loop1): enabling disk space caching [ 39.874369][ T5106] BTRFS info (device loop1): disk space caching is enabled [ 39.897492][ T5106] BTRFS info (device loop1): enabling ssd optimizations [ 39.899242][ T5106] BTRFS info (device loop1): rebuilding free space tree [ 39.903574][ T5106] BTRFS info (device loop1): disabling free space tree [ 39.904895][ T5106] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 39.909249][ T5106] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 39.949532][ T4374] BTRFS info (device loop1): qgroup scan completed (inconsistency flag cleared) [ 39.986343][ T4321] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 40.553821][ T5167] binder: 5165:5167 got transaction to context manager from process owning it [ 40.554643][ T5166] loop4: detected capacity change from 0 to 256 [ 40.560827][ T5167] binder: 5165:5167 transaction call to 5165:0 failed 7/29201/-22, size 88-24 line 3034 [ 40.574585][ T5166] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 40.576977][ T4488] binder: undelivered TRANSACTION_ERROR: 29201 [ 40.591762][ T5166] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 40.604404][ T5166] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 40.775544][ T5155] loop1: detected capacity change from 0 to 40427 [ 40.784242][ T5155] F2FS-fs (loop1): invalid crc value [ 40.786564][ T5155] F2FS-fs (loop1): Found nat_bits in checkpoint [ 40.793159][ T5155] F2FS-fs (loop1): Start checkpoint disabled! [ 40.801073][ T5155] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 41.022214][ T39] kworker/u4:2: attempt to access beyond end of device [ 41.022214][ T39] loop1: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 41.228581][ T5222] loop3: detected capacity change from 0 to 256 [ 41.230076][ T5222] exfat: Deprecated parameter 'utf8' [ 41.234830][ T5222] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 41.253870][ T5222] exFAT-fs (loop3): IO charset iso8³5•V“Ì$ not found [ 41.416895][ T5218] loop1: detected capacity change from 0 to 32768 [ 41.429391][ T5218] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.278 (5218) [ 41.449965][ T5218] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 41.451774][ T5218] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 41.453142][ T5218] BTRFS info (device loop1): setting nodatacow, compression disabled [ 41.454404][ T5218] BTRFS info (device loop1): setting datasum, datacow enabled [ 41.458128][ T5218] BTRFS info (device loop1): force clearing of disk cache [ 41.459356][ T5218] BTRFS info (device loop1): enabling ssd optimizations [ 41.470441][ T5218] BTRFS info (device loop1): using spread ssd allocation scheme [ 41.473241][ T5218] BTRFS info (device loop1): turning on sync discard [ 41.474351][ T5218] BTRFS info (device loop1): turning off barriers [ 41.487695][ T5218] BTRFS info (device loop1): enabling auto defrag [ 41.488753][ T5218] BTRFS info (device loop1): not using ssd optimizations [ 41.489870][ T5218] BTRFS info (device loop1): not using spread ssd allocation scheme [ 41.491205][ T5218] BTRFS info (device loop1): using free space tree [ 41.587595][ T5232] loop3: detected capacity change from 0 to 40427 [ 41.590821][ T5232] F2FS-fs (loop3): invalid crc value [ 41.595109][ T5232] F2FS-fs (loop3): Found nat_bits in checkpoint [ 41.603396][ T5235] loop2: detected capacity change from 0 to 32768 [ 41.606233][ T5235] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.284 (5235) [ 41.625646][ T5235] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 41.629182][ T5235] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm [ 41.641005][ T5262] loop0: detected capacity change from 0 to 128 [ 41.645355][ T5235] BTRFS info (device loop2): force clearing of disk cache [ 41.646518][ T5235] BTRFS info (device loop2): max_inline at 0 [ 41.649809][ T5232] F2FS-fs (loop3): Start checkpoint disabled! [ 41.654003][ T5235] BTRFS info (device loop2): max_inline at 3 [ 41.654988][ T5235] BTRFS info (device loop2): enabling auto defrag [ 41.656714][ T5235] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 41.658240][ T5235] BTRFS info (device loop2): force zstd compression, level 3 [ 41.659475][ T5235] BTRFS info (device loop2): enabling disk space caching [ 41.661106][ T5235] BTRFS info (device loop2): disk space caching is enabled [ 41.664645][ T5218] BTRFS info (device loop1): rebuilding free space tree [ 41.673383][ T5232] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 41.793438][ T5279] 9pnet: p9_errstr2errno: server reported unknown error n$Ž[ [ 41.793438][ T5279] Q&|xùXºX [ 41.821883][ T5235] BTRFS info (device loop2): enabling ssd optimizations [ 41.826374][ T5235] BTRFS info (device loop2): rebuilding free space tree [ 41.835782][ T5235] BTRFS info (device loop2): disabling free space tree [ 41.837451][ T5235] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 41.838969][ T5235] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 41.857698][ T4321] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 41.949894][ T39] kworker/u4:2: attempt to access beyond end of device [ 41.949894][ T39] loop3: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 41.966160][ T4387] BTRFS info (device loop2): qgroup scan completed (inconsistency flag cleared) [ 42.014572][ T4326] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 42.057082][ T5307] Illegal XDP return value 4294967274 on prog (id 13) dev syz_tun, expect packet loss! [ 42.088469][ T5311] netlink: 24 bytes leftover after parsing attributes in process `syz.4.301'. [ 42.144031][ T5318] syz.3.302 sent an empty control message without MSG_MORE. [ 42.276261][ T5333] overlayfs: failed to resolve './bus': -2 [ 42.607725][ T5354] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 43.057682][ T5367] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 43.061049][ T5367] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 43.065322][ T5367] F2FS-fs (loop2): invalid crc value [ 43.099343][ T5367] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 43.111778][ T5370] syz.1.324: attempt to access beyond end of device [ 43.111778][ T5370] loop1: rw=2049, sector=201, nr_sectors = 3 limit=128 [ 43.162625][ T5367] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 43.163759][ T5367] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 43.208345][ T5367] syz.2.323: attempt to access beyond end of device [ 43.208345][ T5367] loop2: rw=2049, sector=53248, nr_sectors = 24 limit=40427 [ 43.250410][ T4326] syz-executor: attempt to access beyond end of device [ 43.250410][ T4326] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 43.408533][ T5384] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 43.410644][ T5384] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 43.412165][ T5384] REISERFS (device loop4): using ordered data mode [ 43.413222][ T5384] reiserfs: using flush barriers [ 43.427695][ T5384] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 43.430340][ T5384] REISERFS (device loop4): checking transaction log (loop4) [ 43.449074][ T5384] REISERFS (device loop4): Using r5 hash to sort names [ 43.450292][ T5384] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 43.893600][ T5409] EXT4-fs: Ignoring removed bh option [ 43.965544][ T5409] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 44.159020][ T4321] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2800: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 44.186645][ T5425] netlink: 'syz.2.346': attribute type 1 has an invalid length. [ 44.188586][ T5425] netlink: 126288 bytes leftover after parsing attributes in process `syz.2.346'. [ 44.189036][ T4321] EXT4-fs error (device loop1): ext4_read_inline_dir:1611: inode #12: block 7: comm syz-executor: path /51/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 44.190100][ T5425] netlink: 4 bytes leftover after parsing attributes in process `syz.2.346'. [ 44.202629][ T4321] EXT4-fs (loop1): Remounting filesystem read-only [ 44.204459][ T4321] EXT4-fs error (device loop1): ext4_read_inline_dir:1611: inode #12: block 7: comm syz-executor: path /51/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 44.219365][ T4321] EXT4-fs (loop1): Remounting filesystem read-only [ 44.220567][ T4321] EXT4-fs error (device loop1): empty_inline_dir:1895: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 44.257691][ T4321] EXT4-fs (loop1): Remounting filesystem read-only [ 44.258748][ T4321] EXT4-fs warning (device loop1): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 44.261213][ T4321] EXT4-fs error (device loop1): ext4_read_inline_dir:1611: inode #12: block 7: comm syz-executor: path /51/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 44.279237][ T4321] EXT4-fs (loop1): Remounting filesystem read-only [ 44.280286][ T4321] EXT4-fs error (device loop1): ext4_read_inline_dir:1611: inode #12: block 7: comm syz-executor: path /51/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 44.284094][ T4321] EXT4-fs (loop1): Remounting filesystem read-only [ 44.286292][ T4321] EXT4-fs error (device loop1): empty_inline_dir:1895: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 44.289873][ T4321] EXT4-fs (loop1): Remounting filesystem read-only [ 44.290894][ T4321] EXT4-fs warning (device loop1): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 44.293401][ T4321] EXT4-fs error (device loop1): ext4_read_inline_dir:1611: inode #12: block 7: comm syz-executor: path /51/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 44.298364][ T4321] EXT4-fs (loop1): Remounting filesystem read-only [ 44.299403][ T4321] EXT4-fs error (device loop1): ext4_read_inline_dir:1611: inode #12: block 7: comm syz-executor: path /51/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 44.303440][ T4321] EXT4-fs (loop1): Remounting filesystem read-only [ 44.304559][ T4321] EXT4-fs error (device loop1): empty_inline_dir:1895: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 44.313895][ T4321] EXT4-fs (loop1): Remounting filesystem read-only [ 44.315129][ T4321] EXT4-fs warning (device loop1): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 44.319862][ T4321] EXT4-fs error (device loop1): ext4_read_inline_dir:1611: inode #12: block 7: comm syz-executor: path /51/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 44.324108][ T4321] EXT4-fs warning (device loop1): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 44.328239][ T4321] EXT4-fs warning (device loop1): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 44.331184][ T4321] EXT4-fs warning (device loop1): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 44.334331][ T4321] EXT4-fs warning (device loop1): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 44.339601][ T4321] EXT4-fs warning (device loop1): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 44.342460][ T4321] EXT4-fs warning (device loop1): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 44.745096][ T5439] set_capacity_and_notify: 6 callbacks suppressed [ 44.745105][ T5439] loop2: detected capacity change from 0 to 32768 [ 44.779087][ T5439] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by syz.2.355 (5439) [ 44.786965][ T5439] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 44.788599][ T5439] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 44.790070][ T5439] BTRFS info (device loop2): force zlib compression, level 3 [ 44.791319][ T5439] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 44.792779][ T5439] BTRFS info (device loop2): use zstd compression, level 3 [ 44.794043][ T5439] BTRFS info (device loop2): enabling ssd optimizations [ 44.795208][ T5439] BTRFS info (device loop2): using free space tree [ 45.124952][ T5440] loop0: detected capacity change from 0 to 131072 [ 45.131500][ T5440] F2FS-fs (loop0): invalid crc value [ 45.162223][ T5440] F2FS-fs (loop0): Found nat_bits in checkpoint [ 45.183305][ T5440] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 45.214097][ T4326] BTRFS info (device loop2): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 45.243649][ T486] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.328183][ T5476] loop3: detected capacity change from 0 to 256 [ 45.328404][ T4314] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 10 /dev/loop2 scanned by udevd (4314) [ 45.357704][ T486] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.368739][ T5476] FAT-fs (loop3): Directory bread(block 64) failed [ 45.369816][ T5476] FAT-fs (loop3): Directory bread(block 65) failed [ 45.370898][ T5476] FAT-fs (loop3): Directory bread(block 66) failed [ 45.372053][ T5476] FAT-fs (loop3): Directory bread(block 67) failed [ 45.373131][ T5476] FAT-fs (loop3): Directory bread(block 68) failed [ 45.374230][ T5476] FAT-fs (loop3): Directory bread(block 69) failed [ 45.388677][ T5476] FAT-fs (loop3): Directory bread(block 70) failed [ 45.389755][ T5476] FAT-fs (loop3): Directory bread(block 71) failed [ 45.390863][ T5476] FAT-fs (loop3): Directory bread(block 72) failed [ 45.391921][ T5476] FAT-fs (loop3): Directory bread(block 73) failed [ 45.410126][ T47] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 45.412489][ T47] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 45.414559][ T47] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 45.416392][ T47] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 45.417905][ T47] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 45.419337][ T47] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 45.448671][ T5463] loop4: detected capacity change from 0 to 32768 [ 45.472915][ T486] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.491963][ T5463] XFS (loop4): Mounting V5 Filesystem [ 45.562840][ T5463] XFS (loop4): Ending clean mount [ 45.575151][ T5463] XFS (loop4): Quotacheck needed: Please wait. [ 45.589734][ T486] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.607296][ T5482] chnl_net:caif_netlink_parms(): no params data found [ 45.611527][ T5463] XFS (loop4): Quotacheck: Done. [ 45.669971][ T5482] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.671151][ T5482] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.677573][ T5482] device bridge_slave_0 entered promiscuous mode [ 45.680032][ T5482] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.681167][ T5482] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.682688][ T5482] device bridge_slave_1 entered promiscuous mode [ 45.692111][ T5482] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.699673][ T5482] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.729492][ T5482] team0: Port device team_slave_0 added [ 45.731384][ T5482] team0: Port device team_slave_1 added [ 45.791095][ T5482] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.792168][ T5482] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.808213][ T5482] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.815985][ T5482] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.817090][ T5482] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.823272][ T4320] XFS (loop4): Unmounting Filesystem [ 45.839118][ T5482] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.022501][ T5482] device hsr_slave_0 entered promiscuous mode [ 46.053567][ T5482] device hsr_slave_1 entered promiscuous mode [ 46.065719][ T5482] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.067002][ T5482] Cannot create hsr debugfs directory [ 46.227322][ T5546] loop4: detected capacity change from 0 to 16 [ 46.242164][ T5546] erofs: (device loop4): mounted with root inode @ nid 36. [ 46.271060][ T5546] syz.4.368: attempt to access beyond end of device [ 46.271060][ T5546] loop4: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 46.291048][ T5546] syz.4.368: attempt to access beyond end of device [ 46.291048][ T5546] loop4: rw=524288, sector=16, nr_sectors = 104 limit=16 [ 46.294756][ T5546] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 46.300748][ T5546] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 46.352308][ T5554] loop2: detected capacity change from 0 to 512 [ 46.377592][ T5554] EXT4-fs warning (device loop2): ext4_multi_mount_protect:324: fsck is running on the filesystem [ 46.381578][ T5554] EXT4-fs warning (device loop2): ext4_multi_mount_protect:324: MMP failure info: last update time: 1756377954, last update node: nogikhp920.muc.corp.google.com, last update device: loop12 [ 46.692383][ T5585] loop0: detected capacity change from 0 to 32768 [ 46.708383][ T5585] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.393 (5585) [ 46.713234][ T5585] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 46.715100][ T5585] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm [ 46.719830][ T5585] BTRFS info (device loop0): using free space tree [ 46.790667][ T5585] BTRFS info (device loop0): enabling ssd optimizations [ 46.864412][ T4325] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 47.074633][ T5635] netlink: 80 bytes leftover after parsing attributes in process `syz.0.396'. [ 47.084890][ T5482] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 47.118088][ T5482] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 47.190184][ T5648] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 47.210824][ T5482] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 47.248632][ T5482] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 47.361887][ T5482] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.369402][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 47.370844][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.382700][ T5482] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.384697][ T5666] loop4: detected capacity change from 0 to 128 [ 47.419832][ T5666] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 47.445309][ T47] Bluetooth: hci1: command 0x0409 tx timeout [ 47.468999][ T4320] EXT4-fs (loop4): unmounting filesystem. [ 47.732103][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.733817][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.735424][ T1611] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.736563][ T1611] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.738030][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.745185][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.746911][ T1611] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.748079][ T1611] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.749519][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 47.754759][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 47.759119][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 47.761143][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 47.768528][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 47.770237][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 47.772187][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 47.773700][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 47.776019][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 47.777585][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.782158][ T5694] loop2: detected capacity change from 0 to 128 [ 47.793115][ T5694] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 47.808020][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 47.809593][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.811775][ T5482] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 47.881765][ T4326] EXT4-fs (loop2): unmounting filesystem. [ 47.964931][ T5642] overlayfs: statfs failed on './file0' [ 48.064475][ T5698] loop3: detected capacity change from 0 to 32768 [ 48.087373][ T5698] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.419 (5698) [ 48.107102][ T5698] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 48.108775][ T5698] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 48.110163][ T5698] BTRFS info (device loop3): force clearing of disk cache [ 48.111381][ T5698] BTRFS info (device loop3): max_inline at 0 [ 48.112341][ T5698] BTRFS info (device loop3): max_inline at 3 [ 48.132628][ T5698] BTRFS info (device loop3): enabling auto defrag [ 48.133949][ T5698] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 48.138786][ T5698] BTRFS info (device loop3): force zstd compression, level 3 [ 48.140083][ T5698] BTRFS info (device loop3): enabling disk space caching [ 48.141236][ T5698] BTRFS info (device loop3): disk space caching is enabled [ 48.151926][ T5729] EXT4-fs: Ignoring removed oldalloc option [ 48.156327][ T5729] EXT4-fs (loop0): 1 truncate cleaned up [ 48.157227][ T5729] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 48.159960][ T5723] Symlink component flag not implemented [ 48.160968][ T5723] Symlink component flag not implemented [ 48.179343][ T486] device hsr_slave_0 left promiscuous mode [ 48.182127][ T5723] Symlink component flag not implemented (128) [ 48.193130][ T5723] Symlink component flag not implemented (122) [ 48.205777][ T486] device hsr_slave_1 left promiscuous mode [ 48.254853][ T4325] EXT4-fs (loop0): unmounting filesystem. [ 48.286451][ T486] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 48.287711][ T486] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 48.291168][ T486] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 48.292334][ T486] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 48.302011][ T486] device bridge_slave_1 left promiscuous mode [ 48.303729][ T486] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.336395][ T486] device bridge_slave_0 left promiscuous mode [ 48.337436][ T486] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.338646][ T5698] BTRFS info (device loop3): enabling ssd optimizations [ 48.346281][ T5698] BTRFS info (device loop3): rebuilding free space tree [ 48.356191][ T5698] BTRFS info (device loop3): disabling free space tree [ 48.357364][ T5698] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 48.358892][ T5698] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 48.404388][ T5702] BTRFS info (device loop3): qgroup scan completed (inconsistency flag cleared) [ 48.467711][ T4334] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 48.505894][ T486] device veth1_macvtap left promiscuous mode [ 48.510197][ T486] device veth0_macvtap left promiscuous mode [ 48.515807][ T486] device veth1_vlan left promiscuous mode [ 48.518923][ T486] device veth0_vlan left promiscuous mode [ 48.849485][ T5787] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.438: inode has both inline data and extents flags [ 48.853311][ T5787] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.438: couldn't read orphan inode 15 (err -117) [ 48.858656][ T5787] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 49.236682][ T5790] F2FS-fs (loop2): invalid crc value [ 49.239033][ T5790] F2FS-fs (loop2): Found nat_bits in checkpoint [ 49.247229][ T5790] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2 [ 49.248589][ T5790] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 49.515294][ T4331] Bluetooth: hci1: command 0x041b tx timeout [ 50.094885][ T4374] wlan1: Trigger new scan to find an IBSS to join [ 50.908452][ T486] team0 (unregistering): Port device team_slave_1 removed [ 51.076731][ T486] team0 (unregistering): Port device team_slave_0 removed [ 51.245693][ T486] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 51.356031][ T47] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 51.357539][ T47] Bluetooth: hci4: Injecting HCI hardware error event [ 51.359634][ T47] Bluetooth: hci4: hardware error 0x00 [ 51.445753][ T486] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 51.595392][ T4331] Bluetooth: hci1: command 0x040f tx timeout [ 52.986935][ T486] bond0 (unregistering): Released all slaves [ 53.115343][ T11] wlan1: Trigger new scan to find an IBSS to join [ 53.273139][ T5482] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.307343][ T5787] tipc: Started in network mode [ 53.308148][ T5787] tipc: Node identity ac14140f, cluster identity 4711 [ 53.309442][ T5787] tipc: New replicast peer: 255.255.255.255 [ 53.310656][ T5787] tipc: Enabled bearer , priority 10 [ 53.311930][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 53.313224][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 53.349231][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 53.350865][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.352359][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 53.353750][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.357262][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.358951][ T4334] EXT4-fs (loop3): unmounting filesystem. [ 53.359069][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.364700][ T5482] device veth0_vlan entered promiscuous mode [ 53.377433][ T5482] device veth1_vlan entered promiscuous mode [ 53.385168][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 53.391636][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 53.393103][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 53.394619][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 53.399978][ T5482] device veth0_macvtap entered promiscuous mode [ 53.402484][ T5482] device veth1_macvtap entered promiscuous mode [ 53.409598][ T5482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.411320][ T5482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.417363][ T5482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.418904][ T5482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.420363][ T5482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.422071][ T5482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.424778][ T5482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.430195][ T5482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.432786][ T5482] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.433479][ T5802] input: syz1 as /devices/virtual/input/input3 [ 53.434255][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 53.439366][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 53.441050][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 53.442617][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 53.446360][ T5482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.448080][ T5482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.449669][ T5482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.451480][ T5482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.453133][ T5482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.459118][ T5482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.460614][ T5482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.462152][ T5482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.464898][ T5482] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.466539][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 53.468244][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 53.471043][ T5482] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.472508][ T5482] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.473871][ T5482] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.475200][ T5482] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.515391][ T47] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 53.534131][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.558972][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.566240][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 53.594800][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.596589][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.597940][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 53.649236][ T5813] set_capacity_and_notify: 6 callbacks suppressed [ 53.649243][ T5813] loop2: detected capacity change from 0 to 4096 [ 53.675338][ T47] Bluetooth: hci1: command 0x0419 tx timeout [ 53.721724][ T5813] ntfs3: loop2: ino=5, "/" directory corrupted [ 53.731110][ T4326] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 53.732212][ T4326] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 53.869498][ T5837] loop0: detected capacity change from 0 to 256 [ 53.870948][ T5837] FAT-fs (loop0): Unrecognized mount option "shortnshortname=lower" or missing value [ 53.928125][ T5287] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 53.992879][ T5830] loop4: detected capacity change from 0 to 32768 [ 54.000380][ T5830] BTRFS: device fsid 3a492a15-ac49-4ce6-945e-cef7a687c6c9 devid 1 transid 8 /dev/loop4 scanned by syz.4.452 (5830) [ 54.019363][ T5830] BTRFS info (device loop4): first mount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 54.021007][ T5830] BTRFS info (device loop4): using crc32c (crc32c-generic) checksum algorithm [ 54.022384][ T5830] BTRFS info (device loop4): using free space tree [ 54.046905][ T5828] loop2: detected capacity change from 0 to 40427 [ 54.049810][ T5828] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x35f7 [ 54.054172][ T5828] F2FS-fs (loop2): invalid crc value [ 54.063428][ T5839] loop3: detected capacity change from 0 to 32768 [ 54.069780][ T5828] F2FS-fs (loop2): Found nat_bits in checkpoint [ 54.091542][ T5828] F2FS-fs (loop2): Start checkpoint disabled! [ 54.128408][ T5828] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 54.292204][ T5830] BTRFS info (device loop4): enabling ssd optimizations [ 54.316213][ T4326] F2FS-fs (loop2): access invalid blkaddr:4043309056 [ 54.317272][ T4326] CPU: 0 PID: 4326 Comm: syz-executor Not tainted syzkaller #0 [ 54.318491][ T4326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 54.320210][ T4326] Call trace: [ 54.320750][ T4326] dump_backtrace+0x1c0/0x1ec [ 54.321548][ T4326] show_stack+0x2c/0x3c [ 54.322247][ T4326] __dump_stack+0x30/0x40 [ 54.323044][ T4326] dump_stack_lvl+0xf4/0x15c [ 54.323827][ T4326] dump_stack+0x1c/0x5c [ 54.324513][ T4326] f2fs_is_valid_blkaddr+0x9e4/0xf44 [ 54.325409][ T4326] f2fs_map_blocks+0xa18/0x2a6c [ 54.326187][ T4326] f2fs_mpage_readpages+0x8ec/0x1a24 [ 54.327056][ T4326] f2fs_readahead+0x190/0x3f4 [ 54.327807][ T4326] read_pages+0x158/0x680 [ 54.328512][ T4326] page_cache_ra_unbounded+0x490/0x574 [ 54.329478][ T4326] page_cache_ra_order+0x84c/0xa14 [ 54.330318][ T4326] ondemand_readahead+0x600/0xb0c [ 54.331126][ T4326] page_cache_sync_ra+0x350/0x3d0 [ 54.332020][ T4326] f2fs_readdir+0x390/0xc10 [ 54.332807][ T4326] iterate_dir+0x1f0/0x4cc [ 54.333566][ T4326] __arm64_sys_getdents64+0x11c/0x320 [ 54.334495][ T4326] invoke_syscall+0x98/0x2b4 [ 54.335253][ T4326] el0_svc_common+0x138/0x258 [ 54.336027][ T4326] do_el0_svc+0x58/0x130 [ 54.336718][ T4326] el0_svc+0x58/0x128 [ 54.337395][ T4326] el0t_64_sync_handler+0x84/0xf0 [ 54.338266][ T4326] el0t_64_sync+0x18c/0x190 [ 54.342898][ T4326] syz-executor: attempt to access beyond end of device [ 54.342898][ T4326] loop2: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 54.345488][ T4326] syz-executor: attempt to access beyond end of device [ 54.345488][ T4326] loop2: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 54.394556][ T486] kworker/u4:3: attempt to access beyond end of device [ 54.394556][ T486] loop2: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 54.426455][ T4492] tipc: Node number set to 2886997007 [ 54.444354][ T4320] BTRFS info (device loop4): last unmount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 54.718395][ T5891] loop3: detected capacity change from 0 to 32768 [ 54.758592][ T5891] XFS (loop3): Mounting V5 Filesystem [ 54.786715][ T5891] XFS (loop3): Ending clean mount [ 54.789187][ T5891] XFS (loop3): Quotacheck needed: Please wait. [ 54.850268][ T5891] XFS (loop3): Quotacheck: Done. [ 55.009207][ T4334] XFS (loop3): Unmounting Filesystem [ 55.042412][ T4331] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 55.045061][ T4331] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 55.046850][ T4331] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 55.048262][ T4331] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 55.050125][ T4331] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 55.051394][ T4331] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 55.099307][ T5901] chnl_net:caif_netlink_parms(): no params data found [ 55.151654][ T5901] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.169799][ T5901] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.171709][ T5901] device bridge_slave_0 entered promiscuous mode [ 55.177803][ T5887] loop4: detected capacity change from 0 to 131072 [ 55.183412][ T5887] F2FS-fs (loop4): Test dummy encryption mode enabled [ 55.184932][ T5887] F2FS-fs (loop4): invalid crc value [ 55.198626][ T5901] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.200253][ T5901] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.217179][ T5901] device bridge_slave_1 entered promiscuous mode [ 55.242336][ T5887] F2FS-fs (loop4): Found nat_bits in checkpoint [ 55.242549][ T5901] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.266877][ T5901] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.278599][ T5887] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 55.301212][ T5901] team0: Port device team_slave_0 added [ 55.307354][ T5920] loop0: detected capacity change from 0 to 1024 [ 55.307390][ T5901] team0: Port device team_slave_1 added [ 55.341527][ T5901] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.342618][ T5901] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.351622][ T5901] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.362514][ T5901] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.363672][ T5901] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.383741][ T5901] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.476976][ T5901] device hsr_slave_0 entered promiscuous mode [ 55.520549][ T5901] device hsr_slave_1 entered promiscuous mode [ 55.535543][ T5901] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.536781][ T5901] Cannot create hsr debugfs directory [ 55.680558][ T5938] loop1: detected capacity change from 0 to 512 [ 55.698323][ T5901] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.702087][ T5938] EXT4-fs: Ignoring removed oldalloc option [ 55.711071][ T5931] loop0: detected capacity change from 0 to 32768 [ 55.716450][ T5931] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.479 (5931) [ 55.728910][ T5931] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 55.730597][ T5931] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm [ 55.732074][ T5931] BTRFS info (device loop0): using free space tree [ 55.738198][ T5938] EXT4-fs (loop1): 1 truncate cleaned up [ 55.739205][ T5938] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 55.809939][ T5901] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.831677][ T5931] BTRFS info (device loop0): enabling ssd optimizations [ 55.868843][ T5482] EXT4-fs (loop1): unmounting filesystem. [ 55.908753][ T5901] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.009398][ T4325] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 56.064219][ T5901] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.075698][ T4387] wlan1: Creating new IBSS network, BSSID 8e:39:e3:7a:7f:db [ 56.111692][ T5970] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 56.197309][ T4314] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 56.320040][ T5901] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 56.359522][ T5901] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 56.396516][ T5901] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 56.404305][ T5985] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.492 (5985) [ 56.413310][ T5985] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 56.414955][ T5985] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm [ 56.416886][ T5985] BTRFS info (device loop0): turning on sync discard [ 56.419135][ T5985] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 56.420628][ T5985] BTRFS info (device loop0): use zstd compression, level 3 [ 56.422886][ T5985] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 56.424923][ T5985] BTRFS info (device loop0): trying to use backup root at mount time [ 56.426525][ T5985] BTRFS info (device loop0): enabling auto defrag [ 56.428012][ T5985] BTRFS info (device loop0): using free space tree [ 56.429990][ C0] vcan0: j1939_tp_rxtimer: 0x0000000006d4f4de: rx timeout, send abort [ 56.447229][ T5901] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 56.516655][ T486] BTRFS warning (device loop0): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 56.519349][ T5985] BTRFS error (device loop0): failed to load root extent [ 56.520481][ T5985] BTRFS warning (device loop0): try to load backup roots slot 1 [ 56.521897][ T9] BTRFS warning (device loop0): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 56.524194][ T5985] BTRFS warning (device loop0): couldn't read tree root [ 56.528549][ T5985] BTRFS warning (device loop0): try to load backup roots slot 2 [ 56.531669][ T5985] BTRFS error (device loop0): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7 [ 56.533607][ T5985] BTRFS warning (device loop0): couldn't read tree root [ 56.534749][ T5985] BTRFS warning (device loop0): try to load backup roots slot 3 [ 56.551749][ T5901] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.554736][ T5985] BTRFS info (device loop0): enabling ssd optimizations [ 56.561707][ T5985] BTRFS info (device loop0): rebuilding free space tree [ 56.565687][ T5985] BTRFS info (device loop0): checking UUID tree [ 56.568582][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.570045][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.599671][ T5901] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.609459][ T486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.611191][ T486] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.612723][ T486] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.613901][ T486] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.631803][ T486] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.637740][ T486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.641938][ T486] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.643474][ T486] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.644646][ T486] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.658319][ T5982] F2FS-fs (loop3): Test dummy encryption mode enabled [ 56.670982][ T486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.673082][ T486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.674788][ T486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.680428][ T5982] F2FS-fs (loop3): invalid crc value [ 56.682815][ T486] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.688797][ T486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.696393][ T486] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.699474][ T4325] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 56.703867][ T5982] F2FS-fs (loop3): Found nat_bits in checkpoint [ 56.704829][ T486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.723539][ T486] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.725146][ T486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.728156][ T486] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.734103][ T486] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.737684][ T5901] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.760328][ T5982] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 56.883072][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.884487][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.891532][ T5901] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.908385][ T486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.910100][ T486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.928704][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.930681][ C0] vcan0: j1939_tp_rxtimer: 0x0000000071ace753: rx timeout, send abort [ 56.930849][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.932017][ C0] vcan0: j1939_tp_rxtimer: 0x0000000006d4f4de: abort rx timeout. Force session deactivation [ 56.933854][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.937466][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.941044][ T5901] device veth0_vlan entered promiscuous mode [ 56.946728][ T5901] device veth1_vlan entered promiscuous mode [ 56.982381][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.983891][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.985542][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.987179][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.993944][ T5901] device veth0_macvtap entered promiscuous mode [ 57.039586][ T5901] device veth1_macvtap entered promiscuous mode [ 57.048658][ T5901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.052581][ T5901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.057585][ T5901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.060431][ T5901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.064192][ T5901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.067111][ T5901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.070986][ T5901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.073830][ T5901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.077780][ T5901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.080687][ T5901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.085520][ T5901] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.089409][ T5901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.093317][ T5901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.096026][ T5901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.103626][ T5901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.106496][ T5901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.110554][ T5901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.113236][ T5901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.115473][ T47] Bluetooth: hci3: command 0x0409 tx timeout [ 57.118847][ T5901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.122070][ T6023] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.495 (6023) [ 57.122731][ T5901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.128132][ T6023] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 57.131188][ T5901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.131263][ T6023] BTRFS info (device loop4): using crc32c (crc32c-generic) checksum algorithm [ 57.137120][ T6023] BTRFS info (device loop4): using free space tree [ 57.139719][ T5901] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.145863][ T486] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.147395][ T486] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.148937][ T486] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.150486][ T486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.152866][ T486] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.159871][ T486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.166425][ T5901] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.167784][ T5901] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.169283][ T5901] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.170803][ T5901] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.227116][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.228360][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.230241][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.249403][ T4387] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.250618][ T4387] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.251928][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.283954][ T6023] BTRFS info (device loop4): enabling ssd optimizations [ 57.426175][ T6048] netlink: 'syz.1.498': attribute type 1 has an invalid length. [ 57.431962][ C0] vcan0: j1939_tp_rxtimer: 0x0000000071ace753: abort rx timeout. Force session deactivation [ 57.569007][ T6021] F2FS-fs (loop0): Test dummy encryption mode enabled [ 57.570368][ T4320] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 57.572578][ T6021] F2FS-fs (loop0): invalid crc value [ 57.636056][ T6021] F2FS-fs (loop0): Found nat_bits in checkpoint [ 57.654526][ T6021] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 57.831555][ T6067] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 58.040984][ T6076] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.508 (6076) [ 58.047599][ T6076] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 58.049375][ T6076] BTRFS info (device loop4): using crc32c (crc32c-generic) checksum algorithm [ 58.051240][ T6076] BTRFS info (device loop4): turning on sync discard [ 58.052447][ T6076] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 58.054163][ T6076] BTRFS info (device loop4): use zstd compression, level 3 [ 58.065100][ T6076] BTRFS warning (device loop4): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 58.070346][ T6076] BTRFS info (device loop4): trying to use backup root at mount time [ 58.073555][ T6080] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.521'. [ 58.075496][ T6076] BTRFS info (device loop4): enabling auto defrag [ 58.076868][ T6076] BTRFS info (device loop4): using free space tree [ 58.087780][ T6082] EXT4-fs: Ignoring removed nobh option [ 58.098726][ T6082] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.511: iget: bad i_size value: 38620345925642 [ 58.101457][ T6082] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.511: couldn't read orphan inode 15 (err -117) [ 58.105049][ T6082] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 58.172329][ T4387] BTRFS warning (device loop4): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 58.174782][ T6076] BTRFS error (device loop4): failed to load root extent [ 58.176580][ T6076] BTRFS warning (device loop4): try to load backup roots slot 1 [ 58.185773][ T4374] BTRFS warning (device loop4): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 58.187947][ T6076] BTRFS warning (device loop4): couldn't read tree root [ 58.189230][ T6076] BTRFS warning (device loop4): try to load backup roots slot 2 [ 58.190837][ T6076] BTRFS error (device loop4): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7 [ 58.193040][ T6076] BTRFS warning (device loop4): couldn't read tree root [ 58.194187][ T6076] BTRFS warning (device loop4): try to load backup roots slot 3 [ 58.226995][ T6076] BTRFS info (device loop4): enabling ssd optimizations [ 58.228567][ T6076] BTRFS info (device loop4): rebuilding free space tree [ 58.234132][ T6076] BTRFS info (device loop4): checking UUID tree [ 58.250201][ T6082] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.511: bg 0: block 5: invalid block bitmap [ 58.265583][ T6082] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 12 with max blocks 16 with error 28 [ 58.279409][ T6082] EXT4-fs (loop1): This should not happen!! Data will be lost [ 58.279409][ T6082] [ 58.283388][ T6082] EXT4-fs (loop1): Total free blocks count 0 [ 58.290065][ T6082] EXT4-fs (loop1): Free/Dirty block details [ 58.291078][ T6082] EXT4-fs (loop1): free_blocks=0 [ 58.294144][ T6082] EXT4-fs (loop1): dirty_blocks=2448 [ 58.300579][ T6082] EXT4-fs (loop1): Block reservation details [ 58.314931][ T6082] EXT4-fs (loop1): i_reserved_data_blocks=2448 [ 58.324191][ T4320] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 58.330013][ T9] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 12 with error 28 [ 58.539400][ T6114] netlink: 'syz.4.514': attribute type 1 has an invalid length. [ 58.570299][ T6114] 8021q: adding VLAN 0 to HW filter on device bond1 [ 58.580842][ T6112] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 58.583126][ T6112] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 58.584830][ T6112] REISERFS (device loop1): using ordered data mode [ 58.586771][ T6112] reiserfs: using flush barriers [ 58.588039][ T6112] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 58.591121][ T6112] REISERFS (device loop1): checking transaction log (loop1) [ 58.592948][ T6112] REISERFS (device loop1): Using r5 hash to sort names [ 58.595181][ T6112] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 58.628425][ T6114] bond1: (slave geneve2): making interface the new active one [ 58.631339][ T6114] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 58.632775][ T486] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 58.859838][ T6137] set_capacity_and_notify: 8 callbacks suppressed [ 58.859848][ T6137] loop3: detected capacity change from 0 to 128 [ 58.959348][ T6144] loop0: detected capacity change from 0 to 2048 [ 58.983321][ T6144] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 58.993541][ T6144] fs-verity: sha512 using implementation "sha512-ce" [ 59.024078][ T4325] EXT4-fs (loop0): unmounting filesystem. [ 59.079910][ T6150] loop0: detected capacity change from 0 to 512 [ 59.085458][ T6146] loop3: detected capacity change from 0 to 32768 [ 59.087358][ T6150] EXT4-fs: Ignoring removed nobh option [ 59.093416][ T6146] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.527 (6146) [ 59.100702][ T6150] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.528: iget: bad i_size value: 38620345925642 [ 59.103250][ T6150] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.528: couldn't read orphan inode 15 (err -117) [ 59.106606][ T6146] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 59.107686][ T6150] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 59.108854][ T6146] BTRFS info (device loop3): using crc32c (crc32c-generic) checksum algorithm [ 59.111770][ T6146] BTRFS info (device loop3): turning on sync discard [ 59.113316][ T6146] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 59.116662][ T6146] BTRFS info (device loop3): use zstd compression, level 3 [ 59.117959][ T6146] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 59.119606][ T6146] BTRFS info (device loop3): trying to use backup root at mount time [ 59.124447][ T6146] BTRFS info (device loop3): enabling auto defrag [ 59.126100][ T6146] BTRFS info (device loop3): using free space tree [ 59.143174][ T486] BTRFS warning (device loop3): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 59.145667][ T6146] BTRFS error (device loop3): failed to load root extent [ 59.146739][ T6146] BTRFS warning (device loop3): try to load backup roots slot 1 [ 59.148198][ T4387] BTRFS warning (device loop3): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 59.150884][ T6146] BTRFS warning (device loop3): couldn't read tree root [ 59.151944][ T6146] BTRFS warning (device loop3): try to load backup roots slot 2 [ 59.155119][ T6146] BTRFS error (device loop3): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7 [ 59.163754][ T6146] BTRFS warning (device loop3): couldn't read tree root [ 59.164849][ T6146] BTRFS warning (device loop3): try to load backup roots slot 3 [ 59.195588][ T4331] Bluetooth: hci3: command 0x041b tx timeout [ 59.200374][ T6146] BTRFS info (device loop3): enabling ssd optimizations [ 59.202549][ T6146] BTRFS info (device loop3): rebuilding free space tree [ 59.209980][ T6146] BTRFS info (device loop3): checking UUID tree [ 59.249372][ T6150] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.528: bg 0: block 5: invalid block bitmap [ 59.273380][ T6150] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 12 with max blocks 16 with error 28 [ 59.281452][ T6150] EXT4-fs (loop0): This should not happen!! Data will be lost [ 59.281452][ T6150] [ 59.283520][ T4334] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 59.290271][ T6150] EXT4-fs (loop0): Total free blocks count 0 [ 59.293733][ T6150] EXT4-fs (loop0): Free/Dirty block details [ 59.294671][ T6150] EXT4-fs (loop0): free_blocks=0 [ 59.301372][ T6150] EXT4-fs (loop0): dirty_blocks=708 [ 59.302266][ T6150] EXT4-fs (loop0): Block reservation details [ 59.307782][ T6150] EXT4-fs (loop0): i_reserved_data_blocks=708 [ 59.364230][ T4387] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 12 with error 28 [ 59.378329][ T6177] loop2: detected capacity change from 0 to 8192 [ 59.405180][ T6177] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 59.408042][ T6177] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 59.409511][ T6177] REISERFS (device loop2): using ordered data mode [ 59.410666][ T6177] reiserfs: using flush barriers [ 59.412291][ T6177] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 59.415069][ T6177] REISERFS (device loop2): checking transaction log (loop2) [ 59.423229][ T6177] REISERFS (device loop2): Using r5 hash to sort names [ 59.424508][ T6177] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 59.569668][ T6187] netlink: 'syz.3.531': attribute type 1 has an invalid length. [ 59.575884][ T6187] 8021q: adding VLAN 0 to HW filter on device bond1 [ 59.591567][ T6187] bond1: (slave geneve2): making interface the new active one [ 59.594229][ T6187] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 59.598545][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 59.718189][ T6189] loop0: detected capacity change from 0 to 32768 [ 59.749698][ T6199] loop4: detected capacity change from 0 to 2048 [ 59.768823][ T6189] loop0: p1 p3 < > [ 59.782275][ T6199] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 59.814663][ T6193] loop1: detected capacity change from 0 to 32768 [ 59.821021][ T6193] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.540 (6193) [ 59.870713][ T6193] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 59.872423][ T6193] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 59.873952][ T6193] BTRFS info (device loop1): setting nodatasum [ 59.874913][ T6193] BTRFS info (device loop1): using free space tree [ 59.876957][ T4320] EXT4-fs (loop4): unmounting filesystem. [ 60.060351][ T6193] BTRFS info (device loop1): enabling ssd optimizations [ 60.070909][ T6204] loop3: detected capacity change from 0 to 32768 [ 60.146883][ T6207] netlink: 76 bytes leftover after parsing attributes in process `syz.4.545'. [ 60.151690][ T5287] udevd[5287]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 60.175336][ T6207] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 60.208648][ T6241] netlink: 8 bytes leftover after parsing attributes in process `syz.4.553'. [ 60.210112][ T6241] netlink: 4 bytes leftover after parsing attributes in process `syz.4.553'. [ 60.211443][ T6241] netlink: 'syz.4.553': attribute type 6 has an invalid length. [ 60.212733][ T6238] loop2: detected capacity change from 0 to 2048 [ 60.215959][ T6241] netlink: 8 bytes leftover after parsing attributes in process `syz.4.553'. [ 60.219753][ T6241] netlink: 4 bytes leftover after parsing attributes in process `syz.4.553'. [ 60.221171][ T6241] netlink: 'syz.4.553': attribute type 6 has an invalid length. [ 60.232286][ T6243] netlink: 4 bytes leftover after parsing attributes in process `syz.0.552'. [ 60.236332][ T6238] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 60.240578][ T4314] udevd[4314]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 60.263024][ T6246] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 60.386468][ T5482] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 60.663278][ T6261] Bluetooth: MGMT ver 1.22 [ 60.669421][ T6246] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 60.671296][ T6246] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4) [ 60.675081][ T6246] Remounting filesystem read-only [ 60.680569][ T5901] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer [ 60.816358][ T6258] XFS: attr2 mount option is deprecated. [ 60.847253][ T6258] XFS (loop4): Mounting V5 Filesystem [ 60.863557][ T6270] netlink: 76 bytes leftover after parsing attributes in process `syz.1.564'. [ 60.865114][ T6270] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 60.868978][ T6258] XFS (loop4): Ending clean mount [ 60.870843][ T6258] XFS (loop4): Quotacheck needed: Please wait. [ 60.899341][ T6258] XFS (loop4): Quotacheck: Done. [ 60.946898][ T4320] XFS (loop4): Unmounting Filesystem [ 60.992900][ T6284] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 61.011901][ T6285] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 61.159374][ T6285] NILFS (loop1): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 61.161315][ T6285] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=4) [ 61.163199][ T6285] Remounting filesystem read-only [ 61.164290][ T5482] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer [ 61.275697][ T47] Bluetooth: hci3: command 0x040f tx timeout [ 61.618842][ T6304] netlink: 'syz.0.582': attribute type 1 has an invalid length. [ 61.620167][ T6304] netlink: 'syz.0.582': attribute type 2 has an invalid length. [ 61.640797][ T6304] netlink: 'syz.0.582': attribute type 1 has an invalid length. [ 61.643704][ T6304] netlink: 'syz.0.582': attribute type 2 has an invalid length. [ 62.010569][ T6332] netlink: 'syz.1.586': attribute type 1 has an invalid length. [ 62.083287][ T6339] Dev loop5: unable to read RDB block 7 [ 62.087769][ T6339] loop5: unable to read partition table [ 62.088697][ T6339] loop5: partition table beyond EOD, truncated [ 62.096613][ T6339] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 62.343916][ T6365] Dev loop5: unable to read RDB block 7 [ 62.345013][ T6365] loop5: unable to read partition table [ 62.348412][ T6365] loop5: partition table beyond EOD, truncated [ 62.349745][ T6365] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 62.610341][ T6370] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 62.613149][ T6370] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 62.617905][ T6370] F2FS-fs (loop2): invalid crc value [ 62.622615][ T6370] F2FS-fs (loop2): Found nat_bits in checkpoint [ 62.638445][ T6370] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 62.639733][ T6370] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 62.670798][ T6378] F2FS-fs (loop1): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 62.673921][ T6378] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 62.681221][ T6378] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x35f7 [ 62.692262][ T6378] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x3ffff [ 62.700353][ T6378] F2FS-fs (loop1): invalid crc value [ 62.703367][ T6378] F2FS-fs (loop1): Found nat_bits in checkpoint [ 62.710439][ T6378] F2FS-fs (loop1): Start checkpoint disabled! [ 62.712400][ T6378] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 62.713658][ T6378] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 62.737209][ T6378] syz.1.608: attempt to access beyond end of device [ 62.737209][ T6378] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 62.768418][ T4374] kworker/u4:5: attempt to access beyond end of device [ 62.768418][ T4374] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 62.914024][ T6391] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 62.916528][ T6391] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 62.918305][ T6391] REISERFS (device loop3): using ordered data mode [ 62.919451][ T6391] reiserfs: using flush barriers [ 62.925725][ T6391] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 62.932283][ T6391] REISERFS (device loop3): checking transaction log (loop3) [ 62.934311][ T6391] REISERFS (device loop3): Using r5 hash to sort names [ 62.942652][ T6391] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 63.170068][ T6415] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 63.186972][ T6420] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 63.358448][ T4331] Bluetooth: hci3: command 0x0419 tx timeout [ 63.369041][ T6420] NILFS (loop0): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 63.370919][ T6420] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=4) [ 63.372929][ T6420] Remounting filesystem read-only [ 63.374753][ T4325] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer [ 63.443470][ T6424] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 63.444748][ T6424] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 63.449435][ T6424] F2FS-fs (loop4): invalid crc value [ 63.451381][ T6424] F2FS-fs (loop4): Found nat_bits in checkpoint [ 63.459212][ T6424] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 63.460494][ T6424] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 63.465379][ T6418] F2FS-fs (loop2): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 63.466853][ T6418] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 63.468689][ T6418] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x35f7 [ 63.470003][ T6418] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x3ffff [ 63.471672][ T6418] F2FS-fs (loop2): invalid crc value [ 63.473509][ T6418] F2FS-fs (loop2): Found nat_bits in checkpoint [ 63.480081][ T6418] F2FS-fs (loop2): Start checkpoint disabled! [ 63.481966][ T6418] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 63.483136][ T6418] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 63.508216][ T6418] syz.2.623: attempt to access beyond end of device [ 63.508216][ T6418] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 63.534507][ T486] kworker/u4:3: attempt to access beyond end of device [ 63.534507][ T486] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 64.344542][ T6461] set_capacity_and_notify: 15 callbacks suppressed [ 64.344552][ T6461] loop1: detected capacity change from 0 to 32768 [ 64.372457][ T6461] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.635 (6461) [ 64.376443][ T6461] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 64.378463][ T6461] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 64.382289][ T6461] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 64.383848][ T6461] BTRFS info (device loop1): use zstd compression, level 3 [ 64.385078][ T6461] BTRFS info (device loop1): using free space tree [ 64.477315][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.478592][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.648079][ T6461] BTRFS info (device loop1): enabling ssd optimizations [ 64.668328][ T6451] loop3: detected capacity change from 0 to 131072 [ 64.676755][ T6451] F2FS-fs (loop3): Wrong NAT boundary, start(2560) end(3584) blocks(0) [ 64.678066][ T6451] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 64.688678][ T6451] F2FS-fs (loop3): invalid crc value [ 64.710177][ T6451] F2FS-fs (loop3): Found nat_bits in checkpoint [ 64.741150][ T5482] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 64.763718][ T6451] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 64.764886][ T6451] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 64.850547][ T4334] F2FS-fs (loop3): f2fs_remove_inode_page: inconsistent i_blocks, ino:7, iblocks:1407713280 [ 64.969166][ T6514] loop0: detected capacity change from 0 to 256 [ 64.984586][ T6514] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 65.156610][ T6524] netlink: 4 bytes leftover after parsing attributes in process `syz.0.651'. [ 65.297513][ T6535] loop1: detected capacity change from 0 to 512 [ 65.310448][ T6535] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 65.318339][ T6535] EXT4-fs (loop1): orphan cleanup on readonly fs [ 65.332793][ T6535] Quota error (device loop1): dq_insert_tree: Quota tree root isn't allocated! [ 65.344254][ T6446] Set syz1 is full, maxelem 65536 reached [ 65.352163][ T6535] Quota error (device loop1): qtree_write_dquot: Error -5 occurred while creating quota [ 65.379304][ T6535] EXT4-fs error (device loop1): ext4_acquire_dquot:6835: comm syz.1.659: Failed to acquire dquot type 1 [ 65.406872][ T6535] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.659: bg 0: block 40: padding at end of block bitmap is not set [ 65.431361][ T6535] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6181: Corrupt filesystem [ 65.448716][ T6535] EXT4-fs (loop1): 1 truncate cleaned up [ 65.459590][ T6535] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 65.483032][ T6535] EXT4-fs error (device loop1): ext4_get_link:104: inode #16: comm syz.1.659: bad symlink. [ 65.486485][ T6535] EXT4-fs error (device loop1): ext4_get_link:104: inode #16: comm syz.1.659: bad symlink. [ 65.510295][ T5482] EXT4-fs (loop1): unmounting filesystem. [ 65.665487][ T6556] loop1: detected capacity change from 0 to 8192 [ 65.878654][ T6569] netlink: 4 bytes leftover after parsing attributes in process `syz.1.675'. [ 65.879332][ T6560] loop0: detected capacity change from 0 to 40427 [ 65.899129][ T6560] F2FS-fs (loop0): Fix alignment : done, start(4096) end(16896) block(12288) [ 65.902481][ T6560] F2FS-fs (loop0): invalid crc value [ 65.924502][ T6560] F2FS-fs (loop0): Found nat_bits in checkpoint [ 65.948127][ T6560] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 65.984065][ T4325] syz-executor: attempt to access beyond end of device [ 65.984065][ T4325] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 66.144781][ T6578] loop3: detected capacity change from 0 to 512 [ 66.171476][ T6578] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 66.183337][ T6578] EXT4-fs (loop3): orphan cleanup on readonly fs [ 66.213438][ T6578] Quota error (device loop3): dq_insert_tree: Quota tree root isn't allocated! [ 66.214908][ T6578] Quota error (device loop3): qtree_write_dquot: Error -5 occurred while creating quota [ 66.235725][ T6578] EXT4-fs error (device loop3): ext4_acquire_dquot:6835: comm syz.3.678: Failed to acquire dquot type 1 [ 66.251551][ T6578] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.678: bg 0: block 40: padding at end of block bitmap is not set [ 66.282856][ T6578] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6181: Corrupt filesystem [ 66.289013][ T6578] EXT4-fs (loop3): 1 truncate cleaned up [ 66.290067][ T6578] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 66.358811][ T6578] EXT4-fs error (device loop3): ext4_get_link:104: inode #16: comm syz.3.678: bad symlink. [ 66.374096][ T6578] EXT4-fs error (device loop3): ext4_get_link:104: inode #16: comm syz.3.678: bad symlink. [ 66.420109][ T4334] EXT4-fs (loop3): unmounting filesystem. [ 66.720922][ T6600] loop0: detected capacity change from 0 to 32768 [ 66.726300][ T6600] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.687 (6600) [ 66.740193][ T6600] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 66.741945][ T6600] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 66.743477][ T6600] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 66.745028][ T6600] BTRFS info (device loop0): use zstd compression, level 3 [ 66.747127][ T6600] BTRFS info (device loop0): using free space tree [ 66.793985][ T6612] netlink: 4 bytes leftover after parsing attributes in process `syz.4.690'. [ 66.893928][ T6623] device syzkaller1 entered promiscuous mode [ 66.936879][ T6600] BTRFS info (device loop0): enabling ssd optimizations [ 67.015575][ T6562] Set syz1 is full, maxelem 65536 reached [ 67.073738][ T4325] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 67.093327][ T6630] loop2: detected capacity change from 0 to 8192 [ 67.176132][ T6632] tipc: Started in network mode [ 67.176961][ T6632] tipc: Node identity 7f000001, cluster identity 4711 [ 67.178166][ T6632] tipc: Enabling of bearer rejected, failed to enable media [ 67.195718][ T6634] netlink: 104 bytes leftover after parsing attributes in process `syz.3.705'. [ 67.216236][ T4314] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 10 /dev/loop0 scanned by udevd (4314) [ 67.275733][ T6646] device syzkaller1 entered promiscuous mode [ 67.613525][ T6651] loop3: detected capacity change from 0 to 32768 [ 67.667090][ T6651] XFS (loop3): DAX unsupported by block device. Turning off DAX. [ 67.668741][ T6651] XFS (loop3): Mounting V5 Filesystem [ 67.695146][ T6658] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.702 (6658) [ 67.719447][ T6651] XFS (loop3): Ending clean mount [ 67.721517][ T6658] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 67.723369][ T6658] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm [ 67.724991][ T6658] BTRFS info (device loop2): enabling auto defrag [ 67.726486][ T6651] XFS (loop3): Quotacheck needed: Please wait. [ 67.746819][ T6658] BTRFS info (device loop2): use no compression [ 67.747867][ T6658] BTRFS info (device loop2): force clearing of disk cache [ 67.749039][ T6658] BTRFS info (device loop2): max_inline at 4096 [ 67.750101][ T6658] BTRFS info (device loop2): disabling free space tree [ 67.753480][ T6651] XFS (loop3): Quotacheck: Done. [ 67.810901][ T4334] XFS (loop3): Unmounting Filesystem [ 67.904380][ T6658] BTRFS info (device loop2): enabling ssd optimizations [ 67.912954][ T6658] BTRFS info (device loop2): rebuilding free space tree [ 67.926697][ T6658] BTRFS info (device loop2): disabling free space tree [ 67.927875][ T6658] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 67.929424][ T6658] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 67.978963][ T6671] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.980517][ T6671] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.996609][ T5901] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 68.299632][ T6711] netlink: 104 bytes leftover after parsing attributes in process `syz.3.708'. [ 68.502940][ T6718] device syzkaller1 entered promiscuous mode [ 68.780082][ T6725] XFS (loop4): DAX unsupported by block device. Turning off DAX. [ 68.781705][ T6725] XFS (loop4): Mounting V5 Filesystem [ 68.853208][ T6725] XFS (loop4): Ending clean mount [ 68.869891][ T6725] XFS (loop4): Quotacheck needed: Please wait. [ 68.913469][ T6725] XFS (loop4): Quotacheck: Done. [ 68.928575][ T6741] EXT4-fs: inline encryption not supported [ 68.936019][ T6741] EXT4-fs (loop1): Test dummy encryption mode enabled [ 68.948554][ T6741] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 68.950430][ T6741] System zones: 0-5 [ 68.964186][ T6741] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 69.001061][ T6729] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.722 (6729) [ 69.009473][ T6729] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 69.011235][ T6729] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 69.012649][ T6729] BTRFS info (device loop0): enabling auto defrag [ 69.013671][ T6729] BTRFS info (device loop0): use no compression [ 69.014679][ T6729] BTRFS info (device loop0): force clearing of disk cache [ 69.023972][ T6729] BTRFS info (device loop0): max_inline at 4096 [ 69.025046][ T6729] BTRFS info (device loop0): disabling free space tree [ 69.052206][ T4320] XFS (loop4): Unmounting Filesystem [ 69.163694][ T5482] EXT4-fs (loop1): unmounting filesystem. [ 69.181673][ T6765] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 69.215436][ T6729] BTRFS info (device loop0): enabling ssd optimizations [ 69.217790][ T6729] BTRFS info (device loop0): rebuilding free space tree [ 69.241290][ T6729] BTRFS info (device loop0): disabling free space tree [ 69.248437][ T6729] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 69.249303][ T6773] validate_nla: 3 callbacks suppressed [ 69.249311][ T6773] netlink: 'syz.1.729': attribute type 1 has an invalid length. [ 69.252339][ T6729] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 69.260656][ T6773] 8021q: adding VLAN 0 to HW filter on device bond1 [ 69.270933][ T6775] EXT4-fs error (device loop3): ext4_generic_delete_entry:2729: inode #12: block 7: comm syz.3.728: bad entry in directory: inode out of bounds - offset=0, inode=150994957, rec_len=16, size=56 fake=0 [ 69.280783][ T6773] bond1: (slave geneve2): making interface the new active one [ 69.283527][ T6773] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 69.289829][ T6775] EXT4-fs (loop3): Remounting filesystem read-only [ 69.290787][ T6775] EXT4-fs error (device loop3) in ext4_delete_inline_entry:1822: Corrupt filesystem [ 69.294392][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 69.298480][ T6775] EXT4-fs (loop3): Remounting filesystem read-only [ 69.357031][ T4325] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 69.486579][ T6781] netlink: 'syz.0.731': attribute type 39 has an invalid length. [ 69.601790][ T1513] cfg80211: failed to load regulatory.db [ 69.687842][ T6790] device syzkaller1 entered promiscuous mode [ 69.848697][ T6795] set_capacity_and_notify: 7 callbacks suppressed [ 69.848707][ T6795] loop1: detected capacity change from 0 to 128 [ 69.879032][ T6795] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 69.975560][ T5482] EXT4-fs (loop1): unmounting filesystem. [ 70.034907][ T6810] netlink: 'syz.0.741': attribute type 1 has an invalid length. [ 70.042107][ T6810] 8021q: adding VLAN 0 to HW filter on device bond1 [ 70.064542][ T4334] EXT4-fs (loop3): unmounting filesystem. [ 70.102363][ T6814] loop3: detected capacity change from 0 to 256 [ 70.122204][ T6814] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 70.141130][ T6810] bond1: (slave geneve2): making interface the new active one [ 70.143280][ T6810] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 70.144766][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 70.356540][ T6822] loop3: detected capacity change from 0 to 32768 [ 70.364650][ T6822] XFS (loop3): Mounting V5 Filesystem [ 70.388350][ T6822] XFS (loop3): Ending clean mount [ 70.430943][ T4334] XFS (loop3): Unmounting Filesystem [ 70.527040][ T6847] loop2: detected capacity change from 0 to 256 [ 70.529993][ T6847] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 70.531817][ T6847] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 70.565457][ T6847] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 70.712638][ T6841] loop0: detected capacity change from 0 to 32768 [ 70.757797][ T6841] XFS (loop0): Mounting V5 Filesystem [ 70.816835][ T6841] XFS (loop0): Ending clean mount [ 70.843438][ T6866] loop2: detected capacity change from 0 to 1024 [ 70.877534][ T6864] loop3: detected capacity change from 0 to 32768 [ 70.879145][ T6864] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.753 (6864) [ 70.883281][ T6864] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 70.885084][ T6864] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 70.885546][ T6841] XFS (loop0): Metadata CRC error detected at xfs_rmapbt_read_verify+0x50/0x108, xfs_rmapbt block 0x14 [ 70.887269][ T6864] BTRFS info (device loop3): using free space tree [ 70.890387][ T6841] XFS (loop0): Unmount and run xfs_repair [ 70.891819][ T6866] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 70.899141][ T6841] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 70.905288][ T6841] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff RMB3............ [ 70.906629][ T6841] 00000010: 00 00 00 00 00 00 00 14 00 00 00 01 00 00 00 80 ................ [ 70.908283][ T6841] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 70.912383][ T6851] loop4: detected capacity change from 0 to 32768 [ 70.914013][ T6841] 00000030: 00 00 00 00 5b af 3b 1d 00 00 00 00 00 00 00 01 ....[.;......... [ 70.919391][ T6864] BTRFS info (device loop3): enabling ssd optimizations [ 70.922319][ T6841] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00 ................ [ 70.923850][ T6841] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb ................ [ 70.928169][ T6841] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02 ................ [ 70.929656][ T6841] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00 ................ [ 70.938044][ T6841] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x184/0x290" at daddr 0x14 len 4 error 74 [ 70.944377][ T6841] XFS (loop0): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x16ec/0x1eec (fs/xfs/libxfs/xfs_defer.c:580). Shutting down filesystem. [ 70.948313][ T6841] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [ 70.954095][ T6892] EXT4-fs error (device loop2): ext4_generic_delete_entry:2729: inode #12: block 7: comm syz.2.759: bad entry in directory: inode out of bounds - offset=0, inode=150994957, rec_len=16, size=56 fake=0 [ 70.959422][ T6892] EXT4-fs (loop2): Remounting filesystem read-only [ 70.960609][ T6892] EXT4-fs error (device loop2) in ext4_delete_inline_entry:1822: Corrupt filesystem [ 70.962613][ T6892] EXT4-fs (loop2): Remounting filesystem read-only [ 70.969442][ T6851] XFS (loop4): Mounting V5 Filesystem [ 71.006894][ T6851] XFS (loop4): Ending clean mount [ 71.008464][ T6851] XFS (loop4): Quotacheck needed: Please wait. [ 71.041724][ T6851] XFS (loop4): Quotacheck: Done. [ 71.111880][ T4334] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 71.258820][ T4320] XFS (loop4): Unmounting Filesystem [ 71.346460][ T4325] XFS (loop0): Unmounting Filesystem [ 71.352502][ T4314] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop3 scanned by udevd (4314) [ 71.487420][ T6919] loop1: detected capacity change from 0 to 256 [ 71.505728][ T6919] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 71.507489][ T6919] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 71.513222][ T6919] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 71.607646][ T6928] loop4: detected capacity change from 0 to 256 [ 71.611386][ T6928] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 71.695949][ T5901] EXT4-fs (loop2): unmounting filesystem. [ 71.731883][ T6933] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 71.789133][ T6927] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 71.840517][ T4310] I/O error, dev loop1, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 71.847595][ T4320] EXT4-fs (loop4): unmounting filesystem. [ 71.952240][ T6927] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 71.974214][ T6930] XFS (loop3): Mounting V5 Filesystem [ 72.031863][ T6930] XFS (loop3): Ending clean mount [ 72.033512][ T6930] XFS (loop3): Quotacheck needed: Please wait. [ 72.050243][ T6930] XFS (loop3): Quotacheck: Done. [ 72.073898][ T6937] XFS (loop2): Mounting V5 Filesystem [ 72.138859][ T6937] XFS (loop2): Ending clean mount [ 72.192948][ T4334] XFS (loop3): Unmounting Filesystem [ 72.227057][ T6937] XFS (loop2): Metadata CRC error detected at xfs_rmapbt_read_verify+0x50/0x108, xfs_rmapbt block 0x14 [ 72.229851][ T6937] XFS (loop2): Unmount and run xfs_repair [ 72.230646][ T6937] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 72.234511][ T6937] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff RMB3............ [ 72.249902][ T6937] 00000010: 00 00 00 00 00 00 00 14 00 00 00 01 00 00 00 80 ................ [ 72.255377][ T6937] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 72.256763][ T6937] 00000030: 00 00 00 00 5b af 3b 1d 00 00 00 00 00 00 00 01 ....[.;......... [ 72.258121][ T6937] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00 ................ [ 72.259483][ T6937] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb ................ [ 72.265676][ T6937] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02 ................ [ 72.267054][ T6937] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00 ................ [ 72.268404][ T6937] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x184/0x290" at daddr 0x14 len 4 error 74 [ 72.272363][ T6951] XFS (loop0): Mounting V5 Filesystem [ 72.294257][ T6951] XFS (loop0): Ending clean mount [ 72.302309][ T6937] XFS (loop2): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x16ec/0x1eec (fs/xfs/libxfs/xfs_defer.c:580). Shutting down filesystem. [ 72.313125][ T6937] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 72.374538][ T4325] XFS (loop0): Unmounting Filesystem [ 72.610383][ T5901] XFS (loop2): Unmounting Filesystem [ 72.839051][ T6988] XFS (loop0): Mounting V5 Filesystem [ 72.892614][ T6988] XFS (loop0): Ending clean mount [ 72.923128][ T6988] XFS (loop0): Unmounting Filesystem [ 73.002613][ T7007] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 73.004592][ T7007] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 73.010304][ T7007] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c91aa, utbl_chksum : 0xe619d30d) [ 73.613752][ T7033] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 73.618575][ T7033] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 73.623360][ T7033] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c91aa, utbl_chksum : 0xe619d30d) [ 73.724690][ T7035] netlink: 4 bytes leftover after parsing attributes in process `syz.0.806'. [ 73.815005][ T7045] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 73.824411][ T7029] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.803 (7029) [ 73.842291][ T7029] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 73.844159][ T7029] BTRFS info (device loop1): using crc32c (crc32c-generic) checksum algorithm [ 73.848923][ T7029] BTRFS info (device loop1): using free space tree [ 74.067544][ T7029] BTRFS info (device loop1): enabling ssd optimizations [ 74.122456][ T7029] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 74.183309][ T5482] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 74.420844][ T7068] XFS (loop3): Mounting V5 Filesystem [ 74.469244][ T7068] XFS (loop3): Ending clean mount [ 74.489770][ T7068] XFS (loop3): Unmounting Filesystem [ 74.719156][ T7088] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 74.721785][ T7088] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 74.724888][ T7088] F2FS-fs (loop1): invalid crc value [ 74.766109][ T7088] F2FS-fs (loop1): Found nat_bits in checkpoint [ 74.785957][ T7088] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 74.787200][ T7088] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 74.890186][ T39] kworker/u4:2: attempt to access beyond end of device [ 74.890186][ T39] loop1: rw=1, sector=77824, nr_sectors = 136 limit=40427 [ 74.926456][ T7098] device vlan2 entered promiscuous mode [ 74.927356][ T7098] device syz_tun entered promiscuous mode [ 74.970601][ T7098] netlink: 4 bytes leftover after parsing attributes in process `syz.3.819'. [ 75.029642][ T7101] set_capacity_and_notify: 17 callbacks suppressed [ 75.029652][ T7101] loop0: detected capacity change from 0 to 4096 [ 75.041646][ T7102] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 75.355549][ T4331] Bluetooth: hci3: command 0x0405 tx timeout [ 75.396708][ T7109] loop2: detected capacity change from 0 to 32768 [ 75.403497][ T7109] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.822 (7109) [ 75.409081][ T7109] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 75.410774][ T7109] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm [ 75.412322][ T7109] BTRFS info (device loop2): using free space tree [ 75.514275][ T7109] BTRFS info (device loop2): enabling ssd optimizations [ 75.538992][ T7109] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 75.561030][ T5901] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 75.966630][ T7139] loop2: detected capacity change from 0 to 40427 [ 75.977261][ T7139] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 75.978570][ T7139] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 75.989783][ T7139] F2FS-fs (loop2): invalid crc value [ 75.995081][ T7139] F2FS-fs (loop2): Found nat_bits in checkpoint [ 76.019701][ T7139] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 76.020790][ T7139] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 76.039308][ T7160] loop4: detected capacity change from 0 to 4096 [ 76.065567][ T7166] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 76.107417][ T4387] kworker/u4:6: attempt to access beyond end of device [ 76.107417][ T4387] loop2: rw=1, sector=77824, nr_sectors = 136 limit=40427 [ 76.326416][ T7182] loop0: detected capacity change from 0 to 2048 [ 76.333440][ T7182] UDF-fs: error (device loop0): udf_load_sparable_map: error loading logical volume descriptor: Too big sparing table size (134218040) [ 76.336799][ T7182] UDF-fs: Scanning with blocksize 512 failed [ 76.349201][ T7182] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 76.350726][ T7182] UDF-fs: Scanning with blocksize 1024 failed [ 76.354294][ T7182] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 76.359408][ T7182] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 76.360894][ T7182] UDF-fs: Scanning with blocksize 2048 failed [ 76.363742][ T7182] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 76.370064][ T7182] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 76.372251][ T7182] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 76.373729][ T7182] UDF-fs: Scanning with blocksize 4096 failed [ 76.376126][ T7182] UDF-fs: warning (device loop0): udf_fill_super: No partition found (1) [ 76.404832][ T7182] netlink: 28 bytes leftover after parsing attributes in process `syz.0.841'. [ 76.530494][ T7175] Injecting memory failure for pfn 0x143e01 at process virtual address 0x20001000 [ 76.549734][ T7175] Memory failure: 0x143e01: recovery action for dirty LRU page: Recovered [ 76.605840][ T7188] loop0: detected capacity change from 0 to 32768 [ 76.607615][ T7188] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.843 (7188) [ 76.614769][ T7188] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 76.618655][ T7188] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm [ 76.620652][ T7188] BTRFS info (device loop0): setting nodatasum [ 76.621787][ T7188] BTRFS info (device loop0): force zlib compression, level 3 [ 76.623092][ T7188] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 76.624789][ T7188] BTRFS info (device loop0): use lzo compression, level 0 [ 76.627040][ T7188] BTRFS info (device loop0): turning on flush-on-commit [ 76.628444][ T7188] BTRFS info (device loop0): enabling auto defrag [ 76.629644][ T7188] BTRFS info (device loop0): max_inline at 4096 [ 76.630887][ T7188] BTRFS info (device loop0): using free space tree [ 76.652247][ T7188] BTRFS info (device loop0): enabling ssd optimizations [ 76.754854][ T4325] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 76.857416][ T7213] loop3: detected capacity change from 0 to 128 [ 76.862174][ T7215] loop4: detected capacity change from 0 to 16 [ 76.863389][ T7213] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 76.871192][ T7215] erofs: (device loop4): mounted with root inode @ nid 36. [ 76.873035][ T7213] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 76.913575][ T7213] Soft offlining pfn 0x13f3d3 at process virtual address 0x20000000 [ 76.918401][ T7213] Soft offlining pfn 0x1346ce at process virtual address 0x20001000 [ 76.920126][ T7213] Soft offlining pfn 0x1328b0 at process virtual address 0x20002000 [ 76.923769][ T7213] Soft offlining pfn 0x13d9d9 at process virtual address 0x20003000 [ 76.927118][ T7213] Soft offlining pfn 0x1392e4 at process virtual address 0x20004000 [ 76.928874][ T7213] Soft offlining pfn 0x13f9d3 at process virtual address 0x20005000 [ 76.930562][ T7213] Soft offlining pfn 0x1327bc at process virtual address 0x20006000 [ 76.932301][ T7213] Soft offlining pfn 0x1276fa at process virtual address 0x20007000 [ 76.933843][ T7213] Soft offlining pfn 0x11660c at process virtual address 0x20008000 [ 76.935703][ T7213] Soft offlining pfn 0x10bfa5 at process virtual address 0x20009000 [ 76.937243][ T7213] Soft offlining pfn 0x119960 at process virtual address 0x2000a000 [ 76.945823][ T7213] Soft offlining pfn 0x12ca74 at process virtual address 0x2000b000 [ 76.949747][ T7213] Soft offlining pfn 0x13399f at process virtual address 0x2000c000 [ 76.951459][ T7213] Soft offlining pfn 0x120153 at process virtual address 0x2000d000 [ 76.952976][ T7213] Soft offlining pfn 0x127602 at process virtual address 0x2000e000 [ 76.953040][ T7213] Soft offlining pfn 0x112f5a at process virtual address 0x2000f000 [ 77.150758][ T7236] loop0: detected capacity change from 0 to 1024 [ 77.168821][ T7236] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 77.313085][ T7251] loop1: detected capacity change from 0 to 1024 [ 77.320217][ T7251] EXT4-fs: Ignoring removed nobh option [ 77.376646][ T7251] EXT4-fs error (device loop1): ext4_orphan_get:1425: comm syz.1.865: bad orphan inode 11 [ 77.378568][ T7251] ext4_test_bit(bit=10, block=4) = 0 [ 77.379462][ T7251] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 77.434793][ T7251] [ 77.435227][ T7251] ====================================================== [ 77.436439][ T7251] WARNING: possible circular locking dependency detected [ 77.437639][ T7251] syzkaller #0 Not tainted [ 77.438407][ T7251] ------------------------------------------------------ [ 77.439581][ T7251] syz.1.865/7251 is trying to acquire lock: [ 77.440600][ T7251] ffff0000e2045cd0 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_map_blocks+0x7c4/0x1778 [ 77.442152][ T7251] [ 77.442152][ T7251] but task is already holding lock: [ 77.443349][ T7251] ffff000105314208 (&s->s_dquot.dqio_sem){++++}-{3:3}, at: v2_write_dquot+0x114/0x180 [ 77.445011][ T7251] [ 77.445011][ T7251] which lock already depends on the new lock. [ 77.445011][ T7251] [ 77.446715][ T7251] [ 77.446715][ T7251] the existing dependency chain (in reverse order) is: [ 77.448245][ T7251] [ 77.448245][ T7251] -> #2 (&s->s_dquot.dqio_sem){++++}-{3:3}: [ 77.449639][ T7251] down_read+0x64/0x300 [ 77.450409][ T7251] v2_read_dquot+0x4c/0x118 [ 77.451266][ T7251] dquot_acquire+0x120/0x4d8 [ 77.452079][ T7251] ext4_acquire_dquot+0x270/0x428 [ 77.453062][ T7251] dqget+0x654/0xcc4 [ 77.453831][ T7251] __dquot_initialize+0x2fc/0xacc [ 77.454754][ T7251] dquot_initialize+0x24/0x34 [ 77.455663][ T7251] ext4_process_orphan+0x5c/0x2b4 [ 77.456599][ T7251] ext4_orphan_cleanup+0x920/0x1060 [ 77.457539][ T7251] ext4_fill_super+0x6188/0x660c [ 77.458415][ T7251] get_tree_bdev+0x358/0x544 [ 77.459313][ T7251] ext4_get_tree+0x28/0x38 [ 77.460165][ T7251] vfs_get_tree+0x90/0x274 [ 77.460991][ T7251] do_new_mount+0x228/0x810 [ 77.461827][ T7251] path_mount+0x5bc/0xe80 [ 77.462616][ T7251] __arm64_sys_mount+0x49c/0x59c [ 77.463517][ T7251] invoke_syscall+0x98/0x2b4 [ 77.464352][ T7251] el0_svc_common+0x138/0x258 [ 77.465212][ T7251] do_el0_svc+0x58/0x130 [ 77.466069][ T7251] el0_svc+0x58/0x128 [ 77.466855][ T7251] el0t_64_sync_handler+0x84/0xf0 [ 77.467775][ T7251] el0t_64_sync+0x18c/0x190 [ 77.468589][ T7251] [ 77.468589][ T7251] -> #1 (&dquot->dq_lock){+.+.}-{3:3}: [ 77.469831][ T7251] __mutex_lock_common+0x190/0x1f60 [ 77.470769][ T7251] mutex_lock_nested+0x38/0x44 [ 77.471626][ T7251] dquot_commit+0x50/0x1c4 [ 77.472429][ T7251] ext4_write_dquot+0x1b4/0x31c [ 77.473349][ T7251] ext4_mark_dquot_dirty+0xe8/0x140 [ 77.474323][ T7251] mark_all_dquot_dirty+0x108/0x424 [ 77.475281][ T7251] __dquot_free_space+0x73c/0xa78 [ 77.476224][ T7251] ext4_free_blocks+0x1888/0x2390 [ 77.477103][ T7251] ext4_ext_remove_space+0x162c/0x3a9c [ 77.478123][ T7251] ext4_ext_truncate+0x164/0x20c [ 77.479017][ T7251] ext4_truncate+0x9f4/0x1084 [ 77.479860][ T7251] ext4_evict_inode+0xc10/0x1278 [ 77.480726][ T7251] evict+0x3e0/0x828 [ 77.481410][ T7251] iput+0x754/0x7e4 [ 77.482148][ T7251] do_unlinkat+0x36c/0x500 [ 77.482973][ T7251] __arm64_sys_unlinkat+0xe0/0xfc [ 77.483902][ T7251] invoke_syscall+0x98/0x2b4 [ 77.484783][ T7251] el0_svc_common+0x138/0x258 [ 77.485666][ T7251] do_el0_svc+0x58/0x130 [ 77.486480][ T7251] el0_svc+0x58/0x128 [ 77.487260][ T7251] el0t_64_sync_handler+0x84/0xf0 [ 77.488210][ T7251] el0t_64_sync+0x18c/0x190 [ 77.489090][ T7251] [ 77.489090][ T7251] -> #0 (&ei->i_data_sem/2){++++}-{3:3}: [ 77.490399][ T7251] __lock_acquire+0x2880/0x6800 [ 77.491251][ T7251] lock_acquire+0x20c/0x63c [ 77.492087][ T7251] down_write+0x5c/0x88 [ 77.492844][ T7251] ext4_map_blocks+0x7c4/0x1778 [ 77.493786][ T7251] ext4_getblk+0x178/0x664 [ 77.494647][ T7251] ext4_bread+0x3c/0x1a8 [ 77.495491][ T7251] ext4_quota_write+0x204/0x534 [ 77.496449][ T7251] find_free_dqentry+0x548/0xa68 [ 77.497375][ T7251] do_insert_tree+0x574/0xc34 [ 77.498270][ T7251] do_insert_tree+0x790/0xc34 [ 77.499168][ T7251] do_insert_tree+0x790/0xc34 [ 77.500020][ T7251] do_insert_tree+0x790/0xc34 [ 77.500905][ T7251] qtree_write_dquot+0x3d4/0x4f0 [ 77.501876][ T7251] v2_write_dquot+0xf0/0x180 [ 77.502820][ T7251] dquot_acquire+0x2a8/0x4d8 [ 77.503741][ T7251] ext4_acquire_dquot+0x270/0x428 [ 77.504696][ T7251] dqget+0x654/0xcc4 [ 77.505421][ T7251] __dquot_initialize+0x2fc/0xacc [ 77.506385][ T7251] dquot_initialize+0x24/0x34 [ 77.507244][ T7251] ext4_mkdir+0x150/0xa1c [ 77.508027][ T7251] vfs_mkdir+0x314/0x4d4 [ 77.508845][ T7251] do_mkdirat+0x1b8/0x3ec [ 77.509717][ T7251] __arm64_sys_mkdirat+0x90/0xa8 [ 77.510689][ T7251] invoke_syscall+0x98/0x2b4 [ 77.511533][ T7251] el0_svc_common+0x138/0x258 [ 77.512430][ T7251] do_el0_svc+0x58/0x130 [ 77.513191][ T7251] el0_svc+0x58/0x128 [ 77.513895][ T7251] el0t_64_sync_handler+0x84/0xf0 [ 77.514807][ T7251] el0t_64_sync+0x18c/0x190 [ 77.515669][ T7251] [ 77.515669][ T7251] other info that might help us debug this: [ 77.515669][ T7251] [ 77.517467][ T7251] Chain exists of: [ 77.517467][ T7251] &ei->i_data_sem/2 --> &dquot->dq_lock --> &s->s_dquot.dqio_sem [ 77.517467][ T7251] [ 77.519873][ T7251] Possible unsafe locking scenario: [ 77.519873][ T7251] [ 77.521045][ T7251] CPU0 CPU1 [ 77.521920][ T7251] ---- ---- [ 77.522821][ T7251] lock(&s->s_dquot.dqio_sem); [ 77.523651][ T7251] lock(&dquot->dq_lock); [ 77.524850][ T7251] lock(&s->s_dquot.dqio_sem); [ 77.526057][ T7251] lock(&ei->i_data_sem/2); [ 77.526803][ T7251] [ 77.526803][ T7251] *** DEADLOCK *** [ 77.526803][ T7251] [ 77.528178][ T7251] 4 locks held by syz.1.865/7251: [ 77.529007][ T7251] #0: ffff000105314460 (sb_writers#3){.+.+}-{0:0}, at: mnt_want_write+0x44/0x9c [ 77.530608][ T7251] #1: ffff0000e2044030 (&type->i_mutex_dir_key#3/1){+.+.}-{3:3}, at: filename_create+0x1b0/0x3a8 [ 77.532335][ T7251] #2: ffff0000f65905e8 (&dquot->dq_lock){+.+.}-{3:3}, at: dquot_acquire+0x60/0x4d8 [ 77.533958][ T7251] #3: ffff000105314208 (&s->s_dquot.dqio_sem){++++}-{3:3}, at: v2_write_dquot+0x114/0x180 [ 77.535696][ T7251] [ 77.535696][ T7251] stack backtrace: [ 77.536772][ T7251] CPU: 0 PID: 7251 Comm: syz.1.865 Not tainted syzkaller #0 [ 77.538029][ T7251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 77.539768][ T7251] Call trace: [ 77.540343][ T7251] dump_backtrace+0x1c0/0x1ec [ 77.541108][ T7251] show_stack+0x2c/0x3c [ 77.541790][ T7251] __dump_stack+0x30/0x40 [ 77.542592][ T7251] dump_stack_lvl+0xf4/0x15c [ 77.543412][ T7251] dump_stack+0x1c/0x5c [ 77.544109][ T7251] print_circular_bug+0x148/0x1b0 [ 77.544978][ T7251] check_noncircular+0x264/0x2f8 [ 77.545779][ T7251] __lock_acquire+0x2880/0x6800 [ 77.546576][ T7251] lock_acquire+0x20c/0x63c [ 77.547311][ T7251] down_write+0x5c/0x88 [ 77.548004][ T7251] ext4_map_blocks+0x7c4/0x1778 [ 77.548780][ T7251] ext4_getblk+0x178/0x664 [ 77.549474][ T7251] ext4_bread+0x3c/0x1a8 [ 77.550137][ T7251] ext4_quota_write+0x204/0x534 [ 77.550870][ T7251] find_free_dqentry+0x548/0xa68 [ 77.551637][ T7251] do_insert_tree+0x574/0xc34 [ 77.552370][ T7251] do_insert_tree+0x790/0xc34 [ 77.553104][ T7251] do_insert_tree+0x790/0xc34 [ 77.553882][ T7251] do_insert_tree+0x790/0xc34 [ 77.554699][ T7251] qtree_write_dquot+0x3d4/0x4f0 [ 77.555583][ T7251] v2_write_dquot+0xf0/0x180 [ 77.556370][ T7251] dquot_acquire+0x2a8/0x4d8 [ 77.557178][ T7251] ext4_acquire_dquot+0x270/0x428 [ 77.558034][ T7251] dqget+0x654/0xcc4 [ 77.558681][ T7251] __dquot_initialize+0x2fc/0xacc [ 77.559525][ T7251] dquot_initialize+0x24/0x34 [ 77.560347][ T7251] ext4_mkdir+0x150/0xa1c [ 77.561099][ T7251] vfs_mkdir+0x314/0x4d4 [ 77.561860][ T7251] do_mkdirat+0x1b8/0x3ec [ 77.562589][ T7251] __arm64_sys_mkdirat+0x90/0xa8 [ 77.563418][ T7251] invoke_syscall+0x98/0x2b4 [ 77.564171][ T7251] el0_svc_common+0x138/0x258 [ 77.564949][ T7251] do_el0_svc+0x58/0x130 [ 77.565647][ T7251] el0_svc+0x58/0x128 [ 77.566324][ T7251] el0t_64_sync_handler+0x84/0xf0 [ 77.567193][ T7251] el0t_64_sync+0x18c/0x190 [ 77.578017][ T7251] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:477: comm syz.1.865: Invalid block bitmap block 0 in block_group 0 [ 77.580559][ T7251] Quota error (device loop1): write_blk: dquota write failed [ 77.581825][ T7251] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 77.583813][ T7266] EXT4-fs (loop1): shut down requested (1) [ 77.600056][ T5482] EXT4-fs (loop1): unmounting filesystem. [ 84.178325][ T9] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)