last executing test programs: 1.367477093s ago: executing program 1 (id=4685): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8915, 0x0) 1.269194118s ago: executing program 1 (id=4686): r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000b40), 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000b80)={0x80000000, 0x240, "0ff09afed946ef612ccce4eecd62bd4668e46cebafc82b6dd50631be036d948a", 0x0, 0x7, 0xa, 0x3, 0x0, 0x2, 0x6, 0x16b04, [0x4, 0x1, 0x67bb67f, 0x6]}) 1.252941919s ago: executing program 1 (id=4689): r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f0000000600)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc008e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29103"}, 0x48, 0xffffffffffffffff) keyctl$chown(0x4, r0, 0x0, 0xffffffffffffffff) 1.183603182s ago: executing program 1 (id=4697): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x9, 0xa, 0x42, 0x40}, 0x50) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x2, r0, 0x2000000}, 0x38) 1.057098308s ago: executing program 1 (id=4702): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000000180)={[{@four_active_logs}, {@nocheckpoint_merge}, {@nodiscard}, {@fsync_mode_posix}, {}, {@fault_injection={'fault_injection', 0x3d, 0x10}}, {@discard}, {@noacl}, {@noinline_dentry}, {@alloc_mode_def}, {@noextent_cache}, {@two_active_logs}, {@fault_type={'fault_type', 0x3d, 0xd74}}]}, 0x1, 0x5514, &(0x7f0000005880)="$eJzs3MtrY1UYAPAv7XTejkVcuJsLg9DCJEw6D3Q36gw+cIYy6sKVpkkaMpPkliZNa1cuXIoL/xNRcOXSv8GFa3fiQnEnKLnn1pn6AKFpY6e/H9x855ycfPecUArfveEGcGItZr/+XIlLcS4i5iPiYkTRrpRH4XYKL0TE5YiYe+KolON/DpyOiPMRcWmSPOWslG99fnV85eZPb/3yzXdnTl344uvvZ7drYNZejIj+Rmpv91PMOyk+LMcb424R+zfGZUxv9B+V/TzF7fZakWG7sTevUcTrnTQ/39gaTuJ6r9GcxE53vRjfGKQTDsedvTzFBx42Not+q71WxO4wL2JnN61rZzf9b9sdjlKeVpnvoyJ9jEZ7MY23d9ppPxuPitgcjMrxlDdvtXcmcVzG8nTRzHutYh1rB/mm/9/e7g62drJxe3PYzQfZzVr9pVr9VrW+mbfao/aNaqPfunUjW+r0JtOqo3ajf7uT551eu9bM+8vZUqfZrNbr2dKd9lq3Mcjq9dr12rXqzeWydTV7/f57Wa+VLU3iq93B1qjbG2br+WaWPrGcrdSuv7ycXaln79xbzVYf3L17b/XdD+68f/+Ve2++Vk7627KypZVrKyvV+rXqSn35BO3/k3LRU9w/HEhl1gsAOH7U/8AsHF79v/kg4vDr/1D/T8Wxqn9Pev1/CPuHA1H/AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACcWD8sfPlG0VhM/Qvl+DPl0HNlvxIRcxHx+z+Yj9P7cs6XeRb+Zf7CX9bwbSWKDJNznCmP8xFxuzx+e/awvwUAAAB4en318eXPUrWeXhZnvSCOUrpoM3fxwynlq0TEwuKPU8o2N3l5fkrJir/vU7EzpWzFBayzU0qWLrmdmla2/2R+Xzj7RKikMHekywEAAI7E/krgaKsQAAAAjtKnj5vKv5OkEnu3MvfuBRe/vH98Q/Dcvh4AAABwDFVmvQAAAADg0BX1v+f/AQAAwNMtPf8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/mDnfnLTBqI4AD8bXOg/FVXd9yrdwTF6hC67rDhAL8EBuqBXyAU4A9nlCBFE2BOCIxaRPLaV6PskY8aYH28QLGZGGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoE+31Xb1/8/3v11zDsdu8vQGAAAAuGZfbVf1k0XT/piuf06XvqZ2ERFlRFwbu0/iXStzknKqp/v/Xd5fPavhJqJOOH3GLB0fIuJHOu6/9P0tAAAAwNu1W2+WzWi9eVi0Xp2NVBUDaSZtyk8/M+UVEVEt7jKllae8b5nC6t/3NH5nSqsnsOaZwpopt2mutBep/+7nWbv5xaloTuXVt52LzNZ3AABgQJPWadhRCAAAAEP6NXYBjKOIx6XM81JgWvNPy3vvWy0AAADgFSrGLgAAAADoXT3+H2j/v6P9/wAAAGAczf5/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9GlfbVe79WbZNedw7CZPbwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhgf95RIATCIAz2ru9M5v6HlQZNTU2qQPj4G4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADe/O4v/yemxplk7rWx9DySrJ0aW6fG3rlx9Ifx9WsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIv9eUmBEAiCKJgz/nfS9z+sJOgZRIiAhkcVtWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgC/63S//J6bGmWTutLF0PJKsXTW2rhp7DxpHD8bbvwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIud+/dto4oDAP7uzufSAqoJyEMQAokBFuq6paUbYgBFDPwJSFHqllCXH20GWlWILGwocxcEI0JIoLD1f+jcSFnClsFDkJhBd76LLz8kHH7cOcnnI717X59P977vLFn53rsYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAASqN3JnGSbTrjOC72Pdl5sJT1G/v6zKO1zfmsZXFUZ9LHw0vVF1G3uUQAAAA4PZKyvg8hbKXrC1kfd/L6Py2PyWr+754dx2U9v7/uL/uy9s/ar79sv7A7UGc8TnbSG8vDwcWDqbT+v1nOtvN/e0Qrv/L5vZck/0Di91efH6X59Yy+efz43XYenqkjWwDgn7hQ9kVQ/j2U9f0mEwPg1GhVCu+y/k86zeYEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAUIfRani6jKMQwnxrEmc2dh4sHdY/WtucL9vVhw/XwleTc2anSEMIN5aHg4u1zma23b13/9bicDi4U3/wcgihqdHfLqZ/68MpDg6hkesj+I+CuPiwZyWf4xHs+Zo4X/sXEwAAJ05atKyu30rXF7J90VwIf36f1//tULz3WnH8Uer/7Y+uPqmOVa3/+7XOcrb1Vm5/1rt77/4by7cXbw5uDj5581L/rf7la1euXOvl90p67pgAAADw77SLVq3/47mD6//nKnGYsv7//Nv+l9WxEvX/oSaLfk1nAgAAcLo998ofv0eH7I/a7fDF4srKnf54u/v60njbQKpHdqZo1fo/mWs6KwAAAKAOo9Voz/r/9Uocplz/f+aHF3+qnjMJIZwt1v8vLH06vF7fdGZaHf9O3PQcAQAAaNbZolXX/9P8+f9495GHOITw+qvjuPgZwKnq/+S9r3+sjlV9/v9yfVOcSXF3fD3yvhtCq1t9N2kuMQAAAE6kp4qWFfu/pesLH/987oO25/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6vZXAAAA//8APT61") symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') 520.667104ms ago: executing program 1 (id=4731): syz_mount_image$f2fs(&(0x7f0000000100), &(0x7f0000010600)='./file0\x00', 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x1, 0x105d6, &(0x7f0000010640)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000000)='.\x00', 0x18424bc, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) 409.39007ms ago: executing program 4 (id=4737): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r0, 0x4b4c, 0x0) 406.45349ms ago: executing program 2 (id=4738): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000040)={0x2, @pix={0x9, 0x4, 0x36314d4e, 0x3, 0x3, 0xe71, 0xa, 0xfffffffc, 0x1, 0x4, 0x2}}) 365.153872ms ago: executing program 4 (id=4740): r0 = socket(0x2b, 0x80801, 0x1) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000000)={0x9, 0x8, 0xfffffff7}, 0xc) 364.268652ms ago: executing program 3 (id=4749): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7c, 0x0, &(0x7f0000000440)) 319.374514ms ago: executing program 0 (id=4741): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_MASK={0x8, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xd8}}, 0x0) 319.334214ms ago: executing program 2 (id=4742): unshare(0x400) pread64(0xffffffffffffffff, 0x0, 0x0, 0x4004) 291.130746ms ago: executing program 4 (id=4743): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x1, 0x9, 0x201, 0x0, 0x0, {0xa, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x6b912e513dbcb127}, 0x4000) 291.019386ms ago: executing program 2 (id=4744): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f0000000180)=0xffff0001, 0x4) 290.978986ms ago: executing program 3 (id=4745): r0 = syz_open_dev$video(&(0x7f0000000000), 0x8, 0x40) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000140)=0x8) 239.550818ms ago: executing program 0 (id=4746): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f00000001c0)={0x0, 0x2, "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"}) 231.345048ms ago: executing program 2 (id=4747): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r0, 0x29, 0x48, &(0x7f0000000100)=0x1, 0x4) 230.418728ms ago: executing program 4 (id=4748): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x58, 0x0, 0x9, 0x101, 0x0, 0x0, {}, [@NFCTH_POLICY={0x10, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x3}}, @NFCTH_TUPLE={0x4, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x2, 0x0, 0x1, @ipv4={{0x8, 0x1, @private}, {0x8, 0x2, @dev}}}]}, @NFCTH_PRIV_DATA_LEN={0x8}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x58}}, 0x0) 224.925469ms ago: executing program 3 (id=4750): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="2800000011148d8a29bd7000fcdbdf2508004b001300000008000100000000000800030003"], 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x4004800) 168.367152ms ago: executing program 2 (id=4751): request_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='].\x00', 0xffffffffffffffff) request_key(&(0x7f0000000140)='id_legacy\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0, 0xfffffffffffffffe) 167.392092ms ago: executing program 0 (id=4752): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xca) setsockopt$ax25_int(r0, 0x101, 0x9, &(0x7f0000000100)=0x80000000, 0x4) 125.257103ms ago: executing program 3 (id=4753): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xc3) recvfrom$ax25(r0, 0x0, 0x0, 0x40, 0x0, 0x0) 125.165754ms ago: executing program 4 (id=4754): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000500), 0x4) 115.188564ms ago: executing program 0 (id=4755): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000011ff, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0xfffffff8, 0x40, &(0x7f0000000000)={0x4b5a9da54893e123, 0x1, 0x8, 0xfffd}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0}) 115.053484ms ago: executing program 2 (id=4756): syz_mount_image$hfs(&(0x7f00000007c0), &(0x7f0000000000)='./file1\x00', 0x30008c0, &(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYBLOB="11f4579be01e435c584a33c63f8173f96bc4546035804d47be19163bd9e589bfdd0a9e6804495a4e4d83804e78ac5a72446295afd79de3fd6a02932a26ab4045133c371e56b0d48544db3c7db23a432f837b93f89b6f223cd1f6731d407ffdb1dd9467f5cd2d6c4e8b9d4f50d338ac91501a4bb780c4723929e22f55254546facc4f0284e644e6", @ANYRES8, @ANYRESHEX=0x0], 0x11, 0x314, &(0x7f0000000b80)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x61c28c7771d1cf6b) 99.543055ms ago: executing program 3 (id=4757): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001800), 0x0, 0x0) ioctl$TCSBRKP(r0, 0x545d, 0x40000020000000) 52.126718ms ago: executing program 0 (id=4758): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000001e000100000000000000002907000000010000000000000008000e"], 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x0) 51.224618ms ago: executing program 4 (id=4759): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x1}, {}, {}, 0x0, 0x0, 0xc, 0x0, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xc}) 10.977179ms ago: executing program 3 (id=4760): r0 = semget$private(0x0, 0x5, 0x0) semop(r0, &(0x7f0000000080)=[{0x3, 0x7fff, 0x1000}, {0x0, 0x7ff, 0x1800}, {0x2, 0x7, 0x1000}, {0x4, 0x2b, 0x800}, {0x3, 0x6, 0x1000}], 0x5) 0s ago: executing program 0 (id=4761): r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0xcd, &(0x7f0000000000), &(0x7f0000000080)=0x4) kernel console output (not intermixed with test programs): 2) failed [ 46.019718][ T5914] FAT-fs (loop3): Directory bread(block 73) failed [ 46.040223][ T5920] netlink: 220 bytes leftover after parsing attributes in process `syz.0.697'. [ 46.126423][ T5933] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 46.147695][ T5933] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 46.176064][ T5940] netlink: 52 bytes leftover after parsing attributes in process `syz.1.706'. [ 46.189961][ T5932] loop0: detected capacity change from 0 to 4096 [ 46.192178][ T5932] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 46.213409][ T5944] netlink: 4 bytes leftover after parsing attributes in process `syz.3.709'. [ 46.231447][ T5947] binder: 5945:5947 ERROR: BC_REGISTER_LOOPER called without request [ 46.354265][ T5963] netlink: 52 bytes leftover after parsing attributes in process `syz.0.719'. [ 46.413836][ T5971] loop0: detected capacity change from 0 to 512 [ 46.425934][ T5973] libceph: resolve '0' (ret=-3): failed [ 46.428588][ T5971] EXT4-fs (loop0): orphan cleanup on readonly fs [ 46.430575][ T5971] EXT4-fs error (device loop0): ext4_find_extent:936: inode #4: comm syz.0.723: pblk 2 bad header/extent: invalid magic - magic 3fff, entries 12, max 508(0), depth 0(0) [ 46.434702][ T5971] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=-117 [ 46.436227][ T5971] EXT4-fs warning (device loop0): ext4_enable_quotas:7087: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 46.441993][ T5971] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 46.443083][ T5971] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 46.463406][ T4327] EXT4-fs (loop0): unmounting filesystem. [ 46.514134][ T5948] loop4: detected capacity change from 0 to 32768 [ 46.527423][ T5980] xt_SECMARK: invalid mode: 2 [ 46.560259][ T5948] blkno = 8ed2c, nblocks = 1 [ 46.561127][ T5948] ERROR: (device loop4): dbFree: block to be freed is outside the map [ 46.561127][ T5948] [ 46.571553][ T5948] ERROR: (device loop4): remounting filesystem as read-only [ 46.572806][ T5948] ialloc: diAlloc returned -17! [ 46.638986][ T5997] netlink: 'syz.2.734': attribute type 1 has an invalid length. [ 46.640209][ T5997] netlink: 216 bytes leftover after parsing attributes in process `syz.2.734'. [ 46.691134][ T5992] loop0: detected capacity change from 0 to 8192 [ 46.703385][ T5992] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 46.705443][ T5992] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 46.710572][ T5992] REISERFS (device loop0): using ordered data mode [ 46.711982][ T5992] reiserfs: using flush barriers [ 46.717389][ T5992] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 46.719988][ T5992] REISERFS (device loop0): checking transaction log (loop0) [ 46.733883][ T5992] REISERFS (device loop0): Using r5 hash to sort names [ 46.810014][ T6009] loop4: detected capacity change from 0 to 1764 [ 46.848160][ T6009] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 46.973456][ T6035] netlink: 'syz.1.753': attribute type 10 has an invalid length. [ 46.976422][ T6035] device syz_tun entered promiscuous mode [ 46.983402][ T6035] bridge0: port 3(syz_tun) entered blocking state [ 46.986559][ T6035] bridge0: port 3(syz_tun) entered disabled state [ 46.994108][ T6035] bridge0: port 3(syz_tun) entered blocking state [ 46.995239][ T6035] bridge0: port 3(syz_tun) entered forwarding state [ 47.226478][ T6060] netlink: 'syz.1.763': attribute type 1 has an invalid length. [ 47.404676][ T6087] xt_SECMARK: invalid mode: 2 [ 47.560897][ T6108] netlink: 'syz.3.790': attribute type 1 has an invalid length. [ 47.618746][ T6116] kAFS: unable to lookup cell '@mTsyz0' [ 47.641371][ T6118] xt_SECMARK: invalid mode: 2 [ 47.748553][ T6123] loop4: detected capacity change from 0 to 8192 [ 47.771801][ T6123] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 47.774069][ T6123] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 47.775536][ T6123] REISERFS (device loop4): using ordered data mode [ 47.776568][ T6123] reiserfs: using flush barriers [ 47.779972][ T6123] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 47.782684][ T6123] REISERFS (device loop4): checking transaction log (loop4) [ 47.784648][ T6123] REISERFS (device loop4): Using r5 hash to sort names [ 47.798407][ T6106] loop1: detected capacity change from 0 to 32768 [ 47.820108][ T6106] blkno = 8ed2c, nblocks = 1 [ 47.821000][ T6106] ERROR: (device loop1): dbFree: block to be freed is outside the map [ 47.821000][ T6106] [ 47.823573][ T6106] ERROR: (device loop1): remounting filesystem as read-only [ 47.824664][ T6106] ialloc: diAlloc returned -17! [ 47.971490][ T6159] comedi comedi0: comedi_config --init_data is deprecated [ 48.164812][ T6187] loop2: detected capacity change from 0 to 1024 [ 48.203169][ T6187] fuse: Bad value for 'fd' [ 48.259449][ T1605] hfsplus: b-tree write err: -5, ino 25 [ 48.260423][ T1605] hfsplus: b-tree write err: -5, ino 4 [ 48.261382][ T1605] hfsplus: b-tree write err: -5, ino 2 [ 48.262281][ T1605] hfsplus: b-tree write err: -5, ino 26 [ 48.329844][ T6213] netlink: 'syz.1.850': attribute type 21 has an invalid length. [ 48.340055][ T6213] netlink: 'syz.1.850': attribute type 1 has an invalid length. [ 48.461561][ T6229] netlink: 'syz.2.848': attribute type 1 has an invalid length. [ 48.500216][ T6231] netlink: 'syz.4.849': attribute type 1 has an invalid length. [ 48.569410][ T6242] comedi: No check for data length of config insn id 35 is implemented [ 48.576230][ T6242] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 48.578593][ T6242] comedi: Assuming n=15 is correct [ 48.670727][ T6255] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 48.685361][ T6255] EXT4-fs (loop4): 1 truncate cleaned up [ 48.686349][ T6255] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 48.732246][ T4329] EXT4-fs (loop4): unmounting filesystem. [ 48.740132][ T6260] FAT-fs (loop1): Directory bread(block 64) failed [ 48.741250][ T6260] FAT-fs (loop1): Directory bread(block 65) failed [ 48.762714][ T6260] FAT-fs (loop1): Directory bread(block 66) failed [ 48.763824][ T6260] FAT-fs (loop1): Directory bread(block 67) failed [ 48.764903][ T6260] FAT-fs (loop1): Directory bread(block 68) failed [ 48.765758][ T6260] FAT-fs (loop1): Directory bread(block 69) failed [ 48.766886][ T6260] FAT-fs (loop1): Directory bread(block 70) failed [ 48.802226][ T6260] FAT-fs (loop1): Directory bread(block 71) failed [ 48.808807][ T6260] FAT-fs (loop1): Directory bread(block 72) failed [ 48.809974][ T6260] FAT-fs (loop1): Directory bread(block 73) failed [ 48.924773][ T6281] debugfs: Directory ' j¦!ÐÕ(á=|èl'rŒý½¯VI' with parent 'ieee80211' already present! [ 49.009942][ T278] hfsplus: b-tree write err: -5, ino 25 [ 49.010965][ T278] hfsplus: b-tree write err: -5, ino 4 [ 49.011873][ T278] hfsplus: b-tree write err: -5, ino 2 [ 49.070446][ T245] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.286855][ T6327] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 49.351918][ T6341] erofs: (device loop3): mounted with root inode @ nid 36. [ 49.391710][ T6344] netlink: 'syz.0.904': attribute type 6 has an invalid length. [ 49.717784][ T6388] netlink: 'syz.1.928': attribute type 1 has an invalid length. [ 50.041098][ T6433] Cannot find add_set index 0 as target [ 50.087604][ T6440] delete_channel: no stack [ 50.280420][ T6466] __nla_validate_parse: 11 callbacks suppressed [ 50.280432][ T6466] netlink: 12 bytes leftover after parsing attributes in process `syz.3.966'. [ 50.537584][ T6469] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.968 (6469) [ 50.550086][ T6469] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 50.556209][ T6469] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm [ 50.558410][ T6469] BTRFS info (device loop2): force clearing of disk cache [ 50.559699][ T6469] BTRFS info (device loop2): force zlib compression, level 3 [ 50.560887][ T6469] BTRFS info (device loop2): enabling auto defrag [ 50.561908][ T6469] BTRFS info (device loop2): max_inline at 0 [ 50.562914][ T6469] BTRFS info (device loop2): enabling disk space caching [ 50.564112][ T6469] BTRFS info (device loop2): disk space caching is enabled [ 50.739675][ T6469] BTRFS info (device loop2): enabling ssd optimizations [ 50.741258][ T6469] BTRFS info (device loop2): rebuilding free space tree [ 50.744333][ T6529] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.745206][ T6469] BTRFS info (device loop2): disabling free space tree [ 50.746006][ T6529] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.746618][ T6469] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 50.765121][ T6529] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.766300][ T6469] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 50.766343][ T6529] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.770417][ T6529] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.771621][ T6529] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.780554][ T6529] team0: Port device bridge0 added [ 50.890769][ T4332] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 51.011276][ T4631] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 11 /dev/loop2 scanned by udevd (4631) [ 51.025946][ T6561] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1002'. [ 51.101048][ T6576] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1008'. [ 51.266130][ T6595] random: crng reseeded on system resumption [ 51.307167][ T6603] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 51.531340][ T6626] set_capacity_and_notify: 7 callbacks suppressed [ 51.531350][ T6626] loop4: detected capacity change from 0 to 8192 [ 51.539103][ T6626] REISERFS warning (device loop4): super-6514 reiserfs_parse_options: unknown quota format specified. [ 51.567954][ T6637] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 51.596998][ T6646] random: crng reseeded on system resumption [ 51.617290][ T6648] loop1: detected capacity change from 0 to 512 [ 51.649580][ T6648] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 51.660253][ T6648] EXT4-fs error (device loop1): ext4_validate_inode_bitmap:106: comm syz.1.1041: Corrupt inode bitmap - block_group = 0, inode_bitmap = 20 [ 51.705874][ T4322] EXT4-fs (loop1): unmounting filesystem. [ 51.745664][ T78] block nbd1: Attempted send on invalid socket [ 51.746759][ T78] I/O error, dev nbd1, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 51.748717][ T78] gfs2: error 10 reading superblock [ 52.023550][ T6703] validate_nla: 2 callbacks suppressed [ 52.023561][ T6703] netlink: 'syz.3.1067': attribute type 1 has an invalid length. [ 52.035405][ T6703] netlink: 220 bytes leftover after parsing attributes in process `syz.3.1067'. [ 52.266657][ T6738] loop4: detected capacity change from 0 to 256 [ 52.385138][ T6755] loop1: detected capacity change from 0 to 512 [ 52.407378][ T6755] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 52.422042][ T6755] EXT4-fs (loop1): 1 truncate cleaned up [ 52.422969][ T6755] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 52.451532][ T4322] EXT4-fs (loop1): unmounting filesystem. [ 52.478881][ T6765] netlink: 'syz.3.1097': attribute type 1 has an invalid length. [ 52.480219][ T6765] netlink: 'syz.3.1097': attribute type 2 has an invalid length. [ 52.490382][ T6768] loop0: detected capacity change from 0 to 256 [ 52.509769][ T6768] FAT-fs (loop0): Directory bread(block 64) failed [ 52.510894][ T6768] FAT-fs (loop0): Directory bread(block 65) failed [ 52.511988][ T6768] FAT-fs (loop0): Directory bread(block 66) failed [ 52.513053][ T6768] FAT-fs (loop0): Directory bread(block 67) failed [ 52.521207][ T6768] FAT-fs (loop0): Directory bread(block 68) failed [ 52.522284][ T6768] FAT-fs (loop0): Directory bread(block 69) failed [ 52.534583][ T6768] FAT-fs (loop0): Directory bread(block 70) failed [ 52.535659][ T6768] FAT-fs (loop0): Directory bread(block 71) failed [ 52.536779][ T6768] FAT-fs (loop0): Directory bread(block 72) failed [ 52.542521][ T6768] FAT-fs (loop0): Directory bread(block 73) failed [ 52.788841][ T6804] loop4: detected capacity change from 0 to 256 [ 52.794802][ T6804] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 52.933512][ T6813] sctp: [Deprecated]: syz.1.1122 (pid 6813) Use of int in maxseg socket option. [ 52.933512][ T6813] Use struct sctp_assoc_value instead [ 52.936506][ T6785] loop3: detected capacity change from 0 to 32768 [ 52.947829][ T6785] (syz.3.1108,6785,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 52.949958][ T6785] (syz.3.1108,6785,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 52.981092][ T6785] JBD2: Ignoring recovery information on journal [ 53.031798][ T6800] loop2: detected capacity change from 0 to 32768 [ 53.045716][ T6785] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 53.190122][ T6836] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1131'. [ 53.200613][ T6835] netlink: 'syz.1.1132': attribute type 1 has an invalid length. [ 53.204720][ T6835] netlink: 'syz.1.1132': attribute type 2 has an invalid length. [ 53.219093][ T4323] ocfs2: Unmounting device (7,3) on (node local) [ 53.299327][ T6842] loop1: detected capacity change from 0 to 2048 [ 53.311017][ T6842] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=27485, location=27485 [ 53.322194][ T6842] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 53.629318][ T6890] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1159'. [ 53.755632][ T6911] random: crng reseeded on system resumption [ 53.856746][ T6925] loop1: detected capacity change from 0 to 16 [ 53.891226][ T6925] erofs: (device loop1): mounted with root inode @ nid 36. [ 53.923669][ T6933] device vlan0 entered promiscuous mode [ 54.031757][ T6947] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1187'. [ 54.043839][ T6953] netlink: 'syz.3.1191': attribute type 6 has an invalid length. [ 54.129522][ T6961] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 54.320795][ T6989] netlink: 'syz.4.1207': attribute type 6 has an invalid length. [ 54.515772][ T6997] REISERFS warning (device loop0): super-6514 reiserfs_parse_options: unknown quota format specified. [ 54.692155][ T7040] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1233'. [ 54.828582][ T7052] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1240'. [ 55.000245][ T7076] delete_channel: no stack [ 55.054364][ T7085] device team0 entered promiscuous mode [ 55.055340][ T7085] device team_slave_0 entered promiscuous mode [ 55.056520][ T7085] device team_slave_1 entered promiscuous mode [ 55.078551][ T7085] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.080357][ T7084] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1256'. [ 55.089543][ T7089] binder: 7087:7089 ERROR: BC_REGISTER_LOOPER called without request [ 55.120730][ T7063] REISERFS warning (device loop3): super-6514 reiserfs_parse_options: unknown quota format specified. [ 55.277279][ T7102] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 55.324777][ T7113] libceph: resolve '0' (ret=-3): failed [ 55.396348][ T4322] EXT4-fs (loop1): unmounting filesystem. [ 55.564336][ T7141] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 55.855603][ T7177] __nla_validate_parse: 1 callbacks suppressed [ 55.855615][ T7177] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1310'. [ 55.905301][ T7184] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1303'. [ 56.193361][ T7218] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1321'. [ 56.493461][ T7265] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 56.681327][ T7292] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 56.690640][ T7292] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 56.789477][ T7310] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (262144) [ 56.832829][ T7317] netlink: 'syz.4.1369': attribute type 3 has an invalid length. [ 56.834137][ T7317] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1369'. [ 56.884066][ T7321] netlink: 'syz.0.1381': attribute type 3 has an invalid length. [ 56.885336][ T7321] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1381'. [ 56.946604][ T7323] set_capacity_and_notify: 4 callbacks suppressed [ 56.946613][ T7323] loop1: detected capacity change from 0 to 4096 [ 56.960567][ T7323] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 57.213566][ T7366] loop2: detected capacity change from 0 to 8 [ 57.247827][ T7366] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 57.301569][ T4332] SQUASHFS error: Unable to read directory block [1d0:22] [ 57.302853][ T4332] SQUASHFS error: Unable to read directory block [1d0:22] [ 57.335651][ T7379] loop4: detected capacity change from 0 to 4096 [ 57.353266][ T7378] loop3: detected capacity change from 0 to 4096 [ 57.367795][ T7378] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 57.382388][ T7384] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 57.423733][ T7388] netlink: 'syz.1.1404': attribute type 6 has an invalid length. [ 57.446471][ T7379] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 57.456799][ T7379] Remounting filesystem read-only [ 57.489897][ T7396] netlink: 'syz.2.1419': attribute type 6 has an invalid length. [ 57.491700][ T4329] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer [ 57.577305][ T7402] netlink: 'syz.2.1411': attribute type 17 has an invalid length. [ 57.578834][ T7402] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1411'. [ 57.756198][ T7428] loop0: detected capacity change from 0 to 4096 [ 57.793530][ T7435] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 57.818495][ T7428] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 57.824442][ T7428] Remounting filesystem read-only [ 57.838866][ T7444] netlink: 'syz.1.1430': attribute type 17 has an invalid length. [ 57.840193][ T7444] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1430'. [ 57.866959][ T4327] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer [ 57.971640][ T7456] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1436'. [ 58.113650][ T7470] netlink: 'syz.2.1442': attribute type 10 has an invalid length. [ 58.117729][ T7470] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.119051][ T7470] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.134666][ T7439] loop4: detected capacity change from 0 to 32768 [ 58.134786][ T7470] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.136922][ T7470] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.138829][ T7470] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.140070][ T7470] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.142276][ T7439] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 58.143795][ T7439] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 58.165785][ T7470] device bridge0 entered promiscuous mode [ 58.171499][ T7470] team0: Port device bridge0 added [ 58.183943][ T7439] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 58.187619][ T1966] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 58.188749][ T1966] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 58.203452][ T1966] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 14ms [ 58.204812][ T1966] gfs2: fsid=syz:syz.0: jid=0: Done [ 58.205797][ T7439] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 58.350760][ T7491] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1452'. [ 58.426527][ T7502] loop2: detected capacity change from 0 to 512 [ 58.446827][ T7503] netlink: 'syz.3.1454': attribute type 12 has an invalid length. [ 58.463371][ T7502] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 58.543885][ T7502] EXT4-fs error (device loop2): ext4_validate_inode_bitmap:106: comm syz.2.1455: Corrupt inode bitmap - block_group = 0, inode_bitmap = 20 [ 58.625634][ T7515] vhci_hcd: invalid port number 254 [ 58.626589][ T7515] vhci_hcd: GetPortErrorCount req not supported for USB 2.0 roothub [ 58.661481][ T4332] EXT4-fs (loop2): unmounting filesystem. [ 58.752475][ T78] block nbd4: Attempted send on invalid socket [ 58.753542][ T78] I/O error, dev nbd4, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 58.755071][ T78] gfs2: error 10 reading superblock [ 58.884752][ T7541] vhci_hcd: invalid port number 254 [ 58.885709][ T7541] vhci_hcd: GetPortErrorCount req not supported for USB 2.0 roothub [ 59.020330][ T7524] loop1: detected capacity change from 0 to 32768 [ 59.040986][ T7524] (syz.1.1468,7524,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 59.048511][ T7524] (syz.1.1468,7524,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 59.081806][ T7524] JBD2: Ignoring recovery information on journal [ 59.138955][ T7524] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 59.178691][ T7571] vhci_hcd: invalid port number 254 [ 59.179526][ T7571] vhci_hcd: GetPortErrorCount req not supported for USB 2.0 roothub [ 59.244997][ T7539] loop3: detected capacity change from 0 to 32768 [ 59.254333][ T7539] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 59.255667][ T7539] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 59.256632][ T4322] ocfs2: Unmounting device (7,1) on (node local) [ 59.300289][ T7539] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 59.311552][ T1966] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 59.312696][ T1966] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 59.336605][ T1966] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 23ms [ 59.342094][ T1966] gfs2: fsid=syz:syz.0: jid=0: Done [ 59.342951][ T7539] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 59.519135][ T7603] binder: 7602:7603 got transaction to invalid handle, 1 [ 59.520378][ T7603] binder: 7603:7602 cannot find target node [ 59.521385][ T7603] binder: 7602:7603 transaction call to 0:0 failed 2/29201/-22, size 96-0 line 3045 [ 59.523059][ T7603] binder: 7602:7603 ioctl c0306201 20000680 returned -14 [ 59.572647][ T7605] loop2: detected capacity change from 0 to 8192 [ 59.575112][ T7605] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 59.609971][ T7605] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 59.619243][ T7605] REISERFS (device loop2): using ordered data mode [ 59.632255][ T7605] reiserfs: using flush barriers [ 59.655391][ T7605] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 59.668498][ T7605] REISERFS (device loop2): checking transaction log (loop2) [ 59.704809][ T7615] netlink: 116376 bytes leftover after parsing attributes in process `syz.0.1504'. [ 59.709038][ T7615] netlink: zone id is out of range [ 59.765396][ T7605] REISERFS (device loop2): Using tea hash to sort names [ 59.766704][ T7605] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 59.814823][ T7621] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=27485, location=27485 [ 59.832805][ T7621] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 59.917726][ T7629] hfsplus: Filesystem is marked locked, mounting read-only. [ 59.981713][ T7637] random: crng reseeded on system resumption [ 60.013049][ T7642] device vlan0 entered promiscuous mode [ 60.148162][ T7656] hfsplus: Filesystem is marked locked, mounting read-only. [ 60.273565][ T7674] device vlan0 entered promiscuous mode [ 60.488379][ T7702] device team0 entered promiscuous mode [ 60.502286][ T7702] device team_slave_0 entered promiscuous mode [ 60.503403][ T7702] device team_slave_1 entered promiscuous mode [ 60.504542][ T7702] device bridge0 entered promiscuous mode [ 60.512099][ T7702] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.522117][ T7663] XFS (loop1): Mounting V5 Filesystem [ 60.595194][ T7712] hfsplus: Filesystem is marked locked, mounting read-only. [ 60.601465][ T7663] XFS (loop1): Ending clean mount [ 60.665182][ T7716] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 60.721104][ T4322] XFS (loop1): Unmounting Filesystem [ 60.728504][ T4323] EXT4-fs (loop3): unmounting filesystem. [ 60.778207][ T7734] binder: 7732:7734 ERROR: BC_REGISTER_LOOPER called without request [ 60.820516][ T7727] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 60.905550][ T7740] EXT4-fs (loop2): orphan cleanup on readonly fs [ 60.906816][ T7740] EXT4-fs error (device loop2): ext4_find_extent:936: inode #4: comm syz.2.1565: pblk 2 bad header/extent: invalid magic - magic 3fff, entries 12, max 508(0), depth 0(0) [ 60.921101][ T7740] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=-117 [ 60.922676][ T7740] EXT4-fs warning (device loop2): ext4_enable_quotas:7087: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 60.924860][ T7740] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 60.925993][ T7740] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 61.011876][ T4332] EXT4-fs (loop2): unmounting filesystem. [ 61.063790][ T7757] __nla_validate_parse: 1 callbacks suppressed [ 61.063802][ T7757] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1558'. [ 61.320578][ T7775] EXT4-fs (loop4): orphan cleanup on readonly fs [ 61.325882][ T7781] device team0 entered promiscuous mode [ 61.326883][ T7781] device team_slave_0 entered promiscuous mode [ 61.328313][ T7781] device team_slave_1 entered promiscuous mode [ 61.333434][ T7775] EXT4-fs error (device loop4): ext4_find_extent:936: inode #4: comm syz.4.1583: pblk 2 bad header/extent: invalid magic - magic 3fff, entries 12, max 508(0), depth 0(0) [ 61.341848][ T7775] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=-117 [ 61.357482][ T7775] EXT4-fs warning (device loop4): ext4_enable_quotas:7087: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 61.359837][ T7775] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 61.360896][ T7775] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 61.377582][ T7776] FAT-fs (loop0): Directory bread(block 64) failed [ 61.378699][ T7776] FAT-fs (loop0): Directory bread(block 65) failed [ 61.379746][ T7776] FAT-fs (loop0): Directory bread(block 66) failed [ 61.380795][ T7776] FAT-fs (loop0): Directory bread(block 67) failed [ 61.381890][ T7776] FAT-fs (loop0): Directory bread(block 68) failed [ 61.382989][ T7776] FAT-fs (loop0): Directory bread(block 69) failed [ 61.384005][ T7776] FAT-fs (loop0): Directory bread(block 70) failed [ 61.385149][ T7776] FAT-fs (loop0): Directory bread(block 71) failed [ 61.386315][ T7776] FAT-fs (loop0): Directory bread(block 72) failed [ 61.423426][ T7791] netlink: 'syz.3.1587': attribute type 10 has an invalid length. [ 61.424794][ T7791] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1587'. [ 61.430414][ T7776] FAT-fs (loop0): Directory bread(block 73) failed [ 61.452614][ T7791] device syz_tun entered promiscuous mode [ 61.453785][ T7791] bridge0: port 3(syz_tun) entered blocking state [ 61.466298][ T7791] bridge0: port 3(syz_tun) entered disabled state [ 61.473041][ T4329] EXT4-fs (loop4): unmounting filesystem. [ 61.479203][ T7787] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 61.491936][ T7791] bridge0: port 3(syz_tun) entered blocking state [ 61.493103][ T7791] bridge0: port 3(syz_tun) entered forwarding state [ 61.641547][ T7809] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1599'. [ 61.692175][ T7819] EXT4-fs (loop3): orphan cleanup on readonly fs [ 61.693395][ T7819] EXT4-fs error (device loop3): ext4_find_extent:936: inode #4: comm syz.3.1602: pblk 2 bad header/extent: invalid magic - magic 3fff, entries 12, max 508(0), depth 0(0) [ 61.698605][ T7819] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=-117 [ 61.700197][ T7819] EXT4-fs warning (device loop3): ext4_enable_quotas:7087: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 61.715326][ T7819] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 61.716411][ T7819] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 61.753278][ T4323] EXT4-fs (loop3): unmounting filesystem. [ 61.959027][ T7826] infiniband syz1: set down [ 61.959910][ T7826] infiniband syz1: added ipvlan0 [ 61.995180][ T7826] RDS/IB: syz1: added [ 61.996172][ T7826] smc: adding ib device syz1 with port count 1 [ 62.012377][ T7826] smc: ib device syz1 port 1 has pnetid [ 62.606436][ T7907] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1645'. [ 62.662839][ T7924] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1652'. [ 62.664379][ T7924] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 62.863580][ T7950] netlink: 'syz.3.1663': attribute type 21 has an invalid length. [ 62.865498][ T7950] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1663'. [ 63.033524][ T7970] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 63.050658][ T7973] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1674'. [ 63.109394][ T7984] rdma_rxe: rxe_register_device failed with error -23 [ 63.110688][ T7984] rdma_rxe: failed to add ipvlan0 [ 63.250074][ T8006] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1691'. [ 63.330223][ T8020] rdma_rxe: rxe_register_device failed with error -23 [ 63.332645][ T8020] rdma_rxe: failed to add ipvlan0 [ 63.346786][ T8023] No such timeout policy "syz1" [ 63.609666][ T8058] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 63.619814][ T8061] netlink: 'syz.1.1718': attribute type 1 has an invalid length. [ 63.623369][ T8061] netlink: 'syz.1.1718': attribute type 3 has an invalid length. [ 63.631417][ T8061] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1718'. [ 63.635152][ T8061] NCSI netlink: No device for ifindex 52229 [ 63.771617][ T8081] No such timeout policy "syz1" [ 63.819612][ T8084] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1728'. [ 63.878827][ T8089] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 63.950956][ T8102] No such timeout policy "syz1" [ 64.024200][ T8109] set_capacity_and_notify: 12 callbacks suppressed [ 64.024211][ T8109] loop1: detected capacity change from 0 to 1764 [ 64.143850][ T8127] netlink: 'syz.4.1747': attribute type 1 has an invalid length. [ 64.145126][ T8127] netlink: 'syz.4.1747': attribute type 3 has an invalid length. [ 64.146328][ T8127] NCSI netlink: No device for ifindex 52229 [ 64.244844][ T8140] loop0: detected capacity change from 0 to 512 [ 64.312299][ T8140] EXT2-fs (loop0): error: ext2_check_page: entry in directory #2 spans the page boundaryoffset=1016, inode=0 [ 64.397633][ T8164] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 64.489706][ T2064] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.557582][ T8184] loop3: detected capacity change from 0 to 512 [ 64.576077][ T8184] EXT2-fs (loop3): error: ext2_check_page: entry in directory #2 spans the page boundaryoffset=1016, inode=0 [ 64.633315][ T8196] loop0: detected capacity change from 0 to 1764 [ 64.672521][ T8196] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 64.935557][ T8236] netlink: 'syz.2.1806': attribute type 1 has an invalid length. [ 65.094252][ T8257] loop4: detected capacity change from 0 to 1764 [ 65.114346][ T8257] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 65.402773][ T8262] loop2: detected capacity change from 0 to 32768 [ 65.433591][ T8289] loop1: detected capacity change from 0 to 1764 [ 65.450612][ T8289] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 65.815524][ T8340] loop0: detected capacity change from 0 to 512 [ 65.852746][ T8345] delete_channel: no stack [ 65.857629][ T8340] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.1865: inode has both inline data and extents flags [ 65.862168][ T8340] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.1865: couldn't read orphan inode 15 (err -117) [ 65.864205][ T8340] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 65.939621][ T8354] netlink: 'syz.4.1860': attribute type 6 has an invalid length. [ 65.965998][ T4327] EXT4-fs (loop0): unmounting filesystem. [ 65.981561][ T8324] loop1: detected capacity change from 0 to 32768 [ 66.038097][ T8364] device gre1 entered promiscuous mode [ 66.098783][ T8370] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 66.100313][ T8370] overlayfs: missing 'lowerdir' [ 66.168430][ T8384] netlink: 'syz.1.1871': attribute type 8 has an invalid length. [ 66.175463][ T8381] __nla_validate_parse: 11 callbacks suppressed [ 66.175477][ T8381] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1877'. [ 66.185519][ T8381] netlink: 50 bytes leftover after parsing attributes in process `syz.4.1877'. [ 66.186963][ T8381] netlink: 50 bytes leftover after parsing attributes in process `syz.4.1877'. [ 66.252964][ T8395] loop0: detected capacity change from 0 to 512 [ 66.283362][ T8398] device gre1 entered promiscuous mode [ 66.391018][ T8414] netlink: 'syz.2.1901': attribute type 8 has an invalid length. [ 66.459373][ T8424] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1897'. [ 66.463404][ T8424] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1897'. [ 67.061470][ T8496] ntfs3: loop4: ntfs_set_state r=3 failed, -22. [ 67.117959][ T11] ntfs3: loop4: ntfs3_write_inode r=3 failed, -22. [ 67.119524][ T4329] ntfs3: loop4: ntfs_set_state r=3 failed, -22. [ 67.120611][ T4329] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 67.127531][ T4329] ntfs3: loop4: ntfs_set_state r=3 failed, -22. [ 67.128593][ T245] ntfs3: loop4: ntfs3_write_inode r=3 failed, -22. [ 67.130071][ T4329] ntfs3: loop4: ntfs_evict_inode r=3 failed, -22. [ 67.336339][ T8539] ieee802154 phy1 wpan1: encryption failed: -22 [ 67.338319][ T8539] ieee802154 phy1 wpan1: encryption failed: -22 [ 67.388453][ T8544] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1953'. [ 67.389910][ T8544] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1953'. [ 67.418250][ T8541] ntfs3: loop0: ntfs_set_state r=3 failed, -22. [ 67.497458][ T5494] ntfs3: loop0: ntfs3_write_inode r=3 failed, -22. [ 67.499285][ T4327] ntfs3: loop0: ntfs_set_state r=3 failed, -22. [ 67.500288][ T4327] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 67.501410][ T4327] ntfs3: loop0: ntfs_set_state r=3 failed, -22. [ 67.503158][ T5494] ntfs3: loop0: ntfs3_write_inode r=3 failed, -22. [ 67.504522][ T4327] ntfs3: loop0: ntfs_evict_inode r=3 failed, -22. [ 67.605200][ T8568] xt_TCPMSS: Only works on TCP SYN packets [ 67.611167][ T8574] usb usb1: usbfs: process 8574 (syz.1.1966) did not claim interface 0 before use [ 67.621007][ T8519] XFS (loop3): Mounting V5 Filesystem [ 67.660107][ T8519] XFS (loop3): Ending clean mount [ 67.662552][ T8519] XFS (loop3): Quotacheck needed: Please wait. [ 67.688160][ T8519] XFS (loop3): Quotacheck: Done. [ 67.734311][ T8519] process 'syz.3.1952' launched './file2' with NULL argv: empty string added [ 67.822190][ T8586] ntfs3: loop2: ntfs_set_state r=3 failed, -22. [ 67.824032][ T4323] XFS (loop3): Unmounting Filesystem [ 67.865650][ T8603] xt_TCPMSS: Only works on TCP SYN packets [ 67.871312][ T245] ntfs3: loop2: ntfs3_write_inode r=3 failed, -22. [ 67.872410][ T4332] ntfs3: loop2: ntfs_set_state r=3 failed, -22. [ 67.873414][ T4332] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 67.874566][ T4332] ntfs3: loop2: ntfs_set_state r=3 failed, -22. [ 67.875560][ T245] ntfs3: loop2: ntfs3_write_inode r=3 failed, -22. [ 67.897919][ T4332] ntfs3: loop2: ntfs_evict_inode r=3 failed, -22. [ 67.925945][ T8605] ntfs3: loop1: ntfs_set_state r=3 failed, -22. [ 67.967608][ T245] ntfs3: loop1: ntfs3_write_inode r=3 failed, -22. [ 67.968845][ T4322] ntfs3: loop1: ntfs_set_state r=3 failed, -22. [ 67.969889][ T4322] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 67.971016][ T4322] ntfs3: loop1: ntfs_set_state r=3 failed, -22. [ 67.984940][ T5494] ntfs3: loop1: ntfs3_write_inode r=3 failed, -22. [ 67.986311][ T4322] ntfs3: loop1: ntfs_evict_inode r=3 failed, -22. [ 68.073819][ T8617] ieee802154 phy1 wpan1: encryption failed: -22 [ 68.075054][ T8617] ieee802154 phy1 wpan1: encryption failed: -22 [ 68.132105][ T8601] JBD2: Ignoring recovery information on journal [ 68.212914][ T8601] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 68.311317][ T4327] ocfs2: Unmounting device (7,0) on (node local) [ 68.785680][ T8663] JBD2: Ignoring recovery information on journal [ 68.818511][ T8705] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2028'. [ 68.820121][ T8705] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2028'. [ 68.844341][ T8663] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 68.879669][ T4329] ocfs2: Unmounting device (7,4) on (node local) [ 69.068052][ T8737] IPv6: ADDRCONF(NETDEV_CHANGE): netdevsim0: link becomes ready [ 69.069399][ T8737] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 69.195070][ T8711] set_capacity_and_notify: 10 callbacks suppressed [ 69.195080][ T8711] loop3: detected capacity change from 0 to 32768 [ 69.228273][ T8711] JBD2: Ignoring recovery information on journal [ 69.242415][ T8751] loop1: detected capacity change from 0 to 1024 [ 69.266698][ T8711] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 69.286886][ T8751] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 69.290320][ T8751] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 69.295222][ T8751] EXT4-fs error (device loop1): ext4_acquire_dquot:6835: comm syz.1.2050: Failed to acquire dquot type 0 [ 69.370390][ T8751] EXT4-fs (loop1): 1 truncate cleaned up [ 69.371471][ T8751] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 69.422704][ T8751] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 69.431592][ T8751] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 69.433210][ T8751] EXT4-fs error (device loop1): ext4_acquire_dquot:6835: comm syz.1.2050: Failed to acquire dquot type 0 [ 69.480740][ T4323] ocfs2: Unmounting device (7,3) on (node local) [ 69.490191][ T8775] loop0: detected capacity change from 0 to 2048 [ 69.491829][ T8775] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=2362, location=2362 [ 69.500595][ T8775] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 69.507276][ T8775] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 69.513159][ T8775] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 69.516921][ T8777] IPv6: ADDRCONF(NETDEV_CHANGE): netdevsim0: link becomes ready [ 69.521979][ T8777] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 69.576382][ T4322] EXT4-fs (loop1): unmounting filesystem. [ 69.617792][ T1967] cfg80211: failed to load regulatory.db [ 69.859341][ T8808] loop2: detected capacity change from 0 to 2048 [ 69.871095][ T8808] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=2362, location=2362 [ 69.882656][ T8808] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 69.884642][ T8808] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 69.901088][ T8808] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 70.087884][ T8798] loop1: detected capacity change from 0 to 32768 [ 70.109610][ T8798] JBD2: Ignoring recovery information on journal [ 70.115328][ T8835] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2086'. [ 70.146693][ T8798] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 70.190781][ T8841] loop4: detected capacity change from 0 to 1024 [ 70.232567][ T8841] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 70.234300][ T8841] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 70.235798][ T8841] EXT4-fs error (device loop4): ext4_acquire_dquot:6835: comm syz.4.2089: Failed to acquire dquot type 0 [ 70.261030][ T8846] loop3: detected capacity change from 0 to 512 [ 70.268554][ T8841] EXT4-fs (loop4): 1 truncate cleaned up [ 70.269489][ T8841] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 70.282502][ T8841] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 70.284213][ T8841] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 70.285674][ T8841] EXT4-fs error (device loop4): ext4_acquire_dquot:6835: comm syz.4.2089: Failed to acquire dquot type 0 [ 70.301260][ T8846] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 70.335588][ T4322] ocfs2: Unmounting device (7,1) on (node local) [ 70.394188][ T8846] Quota error (device loop3): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 70.396449][ T8846] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 70.398597][ T8846] EXT4-fs error (device loop3): ext4_acquire_dquot:6835: comm syz.3.2090: Failed to acquire dquot type 0 [ 70.431217][ T4329] EXT4-fs (loop4): unmounting filesystem. [ 70.467155][ T4323] EXT4-fs (loop3): unmounting filesystem. [ 70.661980][ T8883] loop2: detected capacity change from 0 to 512 [ 70.668502][ T8882] loop3: detected capacity change from 0 to 512 [ 70.702196][ T8883] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 70.708671][ T8882] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 70.778777][ T8892] SET target dimension over the limit! [ 70.779889][ T8883] EXT4-fs error (device loop2): ext4_acquire_dquot:6835: comm syz.2.2108: Failed to acquire dquot type 0 [ 70.786268][ T8879] loop4: detected capacity change from 0 to 32768 [ 70.844389][ T4323] EXT4-fs (loop3): unmounting filesystem. [ 70.868682][ T4332] EXT4-fs (loop2): unmounting filesystem. [ 70.869079][ T8879] XFS (loop4): Mounting V5 Filesystem [ 70.926919][ T8879] XFS (loop4): Ending clean mount [ 70.935248][ T8879] XFS (loop4): Quotacheck needed: Please wait. [ 70.972963][ T8879] XFS (loop4): Quotacheck: Done. [ 71.044169][ T4329] XFS (loop4): Unmounting Filesystem [ 71.076651][ T8921] device veth1_to_batadv entered promiscuous mode [ 71.172715][ T8934] PKCS8: Unsupported PKCS#8 version [ 71.190269][ T8929] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 71.200667][ T8929] EXT4-fs error (device loop1): ext4_acquire_dquot:6835: comm syz.1.2125: Failed to acquire dquot type 0 [ 71.401842][ T4322] EXT4-fs (loop1): unmounting filesystem. [ 71.433188][ T8951] EXT4-fs error (device loop3): ext4_acquire_dquot:6835: comm syz.3.2144: Failed to acquire dquot type 0 [ 71.436845][ T8951] EXT4-fs (loop3): 1 truncate cleaned up [ 71.444053][ T8951] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 71.453247][ T8951] EXT4-fs error (device loop3): ext4_acquire_dquot:6835: comm syz.3.2144: Failed to acquire dquot type 0 [ 71.495216][ T4323] EXT4-fs (loop3): unmounting filesystem. [ 71.496835][ T8960] device veth1_to_batadv entered promiscuous mode [ 71.571934][ T8968] PKCS8: Unsupported PKCS#8 version [ 71.804543][ T8999] PKCS8: Unsupported PKCS#8 version [ 71.855844][ T9005] wg1 speed is unknown, defaulting to 1000 [ 71.856988][ T9005] wg1 speed is unknown, defaulting to 1000 [ 71.864753][ T9005] wg1 speed is unknown, defaulting to 1000 [ 71.877984][ T9005] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 71.881191][ T9005] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 71.899991][ T9005] wg1 speed is unknown, defaulting to 1000 [ 71.901386][ T9005] wg1 speed is unknown, defaulting to 1000 [ 71.910794][ T9005] wg1 speed is unknown, defaulting to 1000 [ 71.914366][ T9005] wg1 speed is unknown, defaulting to 1000 [ 71.915818][ T9005] wg1 speed is unknown, defaulting to 1000 [ 71.974935][ T9019] netlink: 'syz.0.2167': attribute type 29 has an invalid length. [ 71.976215][ T9019] __nla_validate_parse: 2 callbacks suppressed [ 71.976223][ T9019] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2167'. [ 71.984408][ T9019] netlink: 'syz.0.2167': attribute type 29 has an invalid length. [ 71.985670][ T9019] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2167'. [ 72.189006][ T9047] IPv6: NLM_F_CREATE should be specified when creating new route [ 72.220446][ T9047] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2178'. [ 72.263163][ T9054] netlink: 'syz.1.2183': attribute type 29 has an invalid length. [ 72.285381][ T9054] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2183'. [ 72.288749][ T9054] netlink: 'syz.1.2183': attribute type 29 has an invalid length. [ 72.289979][ T9054] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2183'. [ 72.399076][ T9065] EXT4-fs error (device loop2): ext4_acquire_dquot:6835: comm syz.2.2188: Failed to acquire dquot type 1 [ 72.432556][ T9065] EXT4-fs error (device loop2): ext4_do_update_inode:5272: inode #16: comm syz.2.2188: corrupted inode contents [ 72.453064][ T9065] EXT4-fs error (device loop2): ext4_dirty_inode:6137: inode #16: comm syz.2.2188: mark_inode_dirty error [ 72.465031][ T9065] EXT4-fs error (device loop2): ext4_do_update_inode:5272: inode #16: comm syz.2.2188: corrupted inode contents [ 72.496406][ T9065] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #16: comm syz.2.2188: mark_inode_dirty error [ 72.500762][ T9059] XFS (loop0): Mounting V5 Filesystem [ 72.505105][ T9065] EXT4-fs error (device loop2): ext4_do_update_inode:5272: inode #16: comm syz.2.2188: corrupted inode contents [ 72.523706][ T9059] XFS (loop0): Ending clean mount [ 72.525175][ T9065] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 72.534814][ T9059] XFS (loop0): Quotacheck needed: Please wait. [ 72.535344][ T9065] EXT4-fs error (device loop2): ext4_do_update_inode:5272: inode #16: comm syz.2.2188: corrupted inode contents [ 72.548544][ T9059] XFS (loop0): Quotacheck: Done. [ 72.581678][ T9065] EXT4-fs error (device loop2): ext4_truncate:4318: inode #16: comm syz.2.2188: mark_inode_dirty error [ 72.599222][ T9065] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 72.605527][ T9065] EXT4-fs (loop2): 1 truncate cleaned up [ 72.606501][ T9065] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 72.643937][ T4327] XFS (loop0): Unmounting Filesystem [ 72.671261][ T9065] EXT4-fs error (device loop2): ext4_acquire_dquot:6835: comm syz.2.2188: Failed to acquire dquot type 1 [ 72.722259][ T4332] EXT4-fs (loop2): unmounting filesystem. [ 72.729854][ T9097] netlink: 'syz.4.2199': attribute type 29 has an invalid length. [ 72.731121][ T9097] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2199'. [ 72.732626][ T9097] netlink: 'syz.4.2199': attribute type 29 has an invalid length. [ 72.736558][ T9097] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2199'. [ 72.881027][ T9115] SET target dimension over the limit! [ 72.998926][ T9122] EXT4-fs error (device loop1): ext4_acquire_dquot:6835: comm syz.1.2213: Failed to acquire dquot type 1 [ 73.003964][ T9122] EXT4-fs error (device loop1): ext4_do_update_inode:5272: inode #16: comm syz.1.2213: corrupted inode contents [ 73.028005][ T9131] device ip6erspan1 entered promiscuous mode [ 73.030871][ T9122] EXT4-fs error (device loop1): ext4_dirty_inode:6137: inode #16: comm syz.1.2213: mark_inode_dirty error [ 73.050052][ T9122] EXT4-fs error (device loop1): ext4_do_update_inode:5272: inode #16: comm syz.1.2213: corrupted inode contents [ 73.061554][ T9122] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #16: comm syz.1.2213: mark_inode_dirty error [ 73.069771][ T9122] EXT4-fs error (device loop1): ext4_do_update_inode:5272: inode #16: comm syz.1.2213: corrupted inode contents [ 73.086962][ T9122] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 73.091784][ T9122] EXT4-fs error (device loop1): ext4_do_update_inode:5272: inode #16: comm syz.1.2213: corrupted inode contents [ 73.099948][ T9122] EXT4-fs error (device loop1): ext4_truncate:4318: inode #16: comm syz.1.2213: mark_inode_dirty error [ 73.104098][ T9122] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 73.112087][ T9122] EXT4-fs (loop1): 1 truncate cleaned up [ 73.113069][ T9122] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 73.181495][ T9122] EXT4-fs error (device loop1): ext4_acquire_dquot:6835: comm syz.1.2213: Failed to acquire dquot type 1 [ 73.215337][ T9149] netlink: 'syz.3.2222': attribute type 10 has an invalid length. [ 73.234655][ T4322] EXT4-fs (loop1): unmounting filesystem. [ 73.241753][ T9149] team0: Device veth1_vlan failed to register rx_handler [ 73.353555][ T9163] exfat: Deprecated parameter 'utf8' [ 73.354611][ T9163] exfat: Deprecated parameter 'namecase' [ 73.355536][ T9163] exfat: Deprecated parameter 'namecase' [ 73.382767][ T9163] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x200001de, utbl_chksum : 0xe619d30d) [ 73.419553][ T9169] SET target dimension over the limit! [ 73.423996][ T9173] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2234'. [ 73.425383][ T9173] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2234'. [ 73.636918][ T9192] exfat: Deprecated parameter 'utf8' [ 73.653558][ T9192] exfat: Deprecated parameter 'namecase' [ 73.654543][ T9192] exfat: Deprecated parameter 'namecase' [ 73.663982][ T9192] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x200001de, utbl_chksum : 0xe619d30d) [ 73.723917][ T9201] netlink: 'syz.1.2259': attribute type 10 has an invalid length. [ 73.740125][ T9204] SET target dimension over the limit! [ 73.740526][ T9201] team0: Device veth1_vlan failed to register rx_handler [ 73.775687][ T9207] rdma_rxe: rxe creation allowed on top of a real device only [ 73.888889][ T9215] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 73.964479][ T4323] ntfs3: loop3: ntfs_sync_fs r=1a failed, -22. [ 73.966215][ T4323] ntfs3: loop3: ntfs_evict_inode r=1a failed, -22. [ 73.967493][ T4323] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 74.003423][ T9227] exfat: Deprecated parameter 'utf8' [ 74.004370][ T9227] exfat: Deprecated parameter 'namecase' [ 74.005375][ T9227] exfat: Deprecated parameter 'namecase' [ 74.028118][ T9227] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x200001de, utbl_chksum : 0xe619d30d) [ 74.080134][ T9211] (syz.0.2255,9211,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 74.086311][ T9211] (syz.0.2255,9211,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 74.114944][ T9211] JBD2: Ignoring recovery information on journal [ 74.134269][ T9211] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 74.231594][ T9247] netlink: 'syz.3.2269': attribute type 1 has an invalid length. [ 74.252935][ T9251] Soft offlining pfn 0x1406c9 at process virtual address 0x204c9000 [ 74.263813][ T4327] ocfs2: Unmounting device (7,0) on (node local) [ 74.352297][ T9261] set_capacity_and_notify: 17 callbacks suppressed [ 74.352307][ T9261] loop2: detected capacity change from 0 to 256 [ 74.392687][ T9266] rdma_rxe: rxe creation allowed on top of a real device only [ 74.397477][ T9251] Memory failure: 0x1406c9: unhandlable page. [ 74.657253][ T9297] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 74.673069][ T9300] rdma_rxe: rxe creation allowed on top of a real device only [ 74.718274][ T9273] loop0: detected capacity change from 0 to 32768 [ 74.745395][ T9302] loop1: detected capacity change from 0 to 4096 [ 74.751171][ T9302] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 74.831490][ T4322] ntfs3: loop1: ntfs_sync_fs r=1a failed, -22. [ 74.834615][ T4322] ntfs3: loop1: ntfs_evict_inode r=1a failed, -22. [ 74.836062][ T4322] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 74.840932][ T9316] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 74.842163][ T9316] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 74.849040][ T9316] vhci_hcd vhci_hcd.0: Device attached [ 74.871873][ T9317] usbip_core: unknown command [ 74.872751][ T9317] vhci_hcd: unknown pdu 1469903664 [ 74.873641][ T9317] usbip_core: unknown command [ 74.876307][ T39] vhci_hcd: stop threads [ 74.878448][ T39] vhci_hcd: release socket [ 74.879213][ T39] vhci_hcd: disconnect device [ 74.885777][ T9325] Soft offlining pfn 0x1406c9 at process virtual address 0x204c9000 [ 74.889581][ T9325] Memory failure: 0x1406c9: unhandlable page. [ 74.956859][ T9333] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2312'. [ 74.967667][ T9333] netlink: 'syz.4.2312': attribute type 1 has an invalid length. [ 75.063657][ T9344] loop4: detected capacity change from 0 to 4096 [ 75.089901][ T9344] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 75.168658][ T9356] loop1: detected capacity change from 0 to 1024 [ 75.185647][ T4329] ntfs3: loop4: ntfs_sync_fs r=1a failed, -22. [ 75.200684][ T4329] ntfs3: loop4: ntfs_evict_inode r=1a failed, -22. [ 75.201776][ T4329] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 75.519038][ T9407] xt_time: unknown flags 0x18 [ 75.574105][ T9417] xt_time: unknown flags 0x18 [ 75.636923][ T9426] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 75.672667][ T9432] loop3: detected capacity change from 0 to 64 [ 75.784315][ T9446] xt_time: unknown flags 0x18 [ 75.840380][ T9454] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 75.923269][ T9470] loop3: detected capacity change from 0 to 1024 [ 76.269680][ T9476] loop4: detected capacity change from 0 to 32768 [ 76.290516][ T9476] (syz.4.2394,9476,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 76.296132][ T9476] (syz.4.2394,9476,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 76.321887][ T9476] JBD2: Ignoring recovery information on journal [ 76.323330][ T9517] loop2: detected capacity change from 0 to 4096 [ 76.339496][ T9517] ntfs: volume version 3.1. [ 76.356800][ T9521] loop3: detected capacity change from 0 to 4096 [ 76.412225][ T9476] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 76.441237][ T9524] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 76.442373][ T9524] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 76.444547][ T9524] vhci_hcd vhci_hcd.0: Device attached [ 76.447396][ T9525] usbip_core: unknown command [ 76.448224][ T9525] vhci_hcd: unknown pdu 1469903664 [ 76.449048][ T9525] usbip_core: unknown command [ 76.453283][ T245] vhci_hcd: stop threads [ 76.453905][ T245] vhci_hcd: release socket [ 76.454599][ T245] vhci_hcd: disconnect device [ 76.478811][ T4329] ocfs2: Unmounting device (7,4) on (node local) [ 76.554643][ T9528] ntfs: volume version 3.1. [ 76.571300][ T9538] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 76.660235][ T9546] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 76.916399][ T9568] ntfs: volume version 3.1. [ 76.959153][ T9586] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 77.052716][ T9597] device bond0 entered promiscuous mode [ 77.053667][ T9597] device bond_slave_0 entered promiscuous mode [ 77.054692][ T9597] device bond_slave_1 entered promiscuous mode [ 77.055802][ T9597] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 77.310987][ T9630] tc_dump_action: action bad kind [ 77.312447][ T9620] ntfs: volume version 3.1. [ 78.266777][ T9659] F2FS-fs (loop0): invalid crc value [ 78.273564][ T9659] F2FS-fs (loop0): Found nat_bits in checkpoint [ 78.282437][ T9659] F2FS-fs (loop0): Start checkpoint disabled! [ 78.286386][ T9659] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 78.690291][ T9693] __ntfs_error: 16 callbacks suppressed [ 78.690304][ T9693] ntfs: (device loop3): parse_options(): NLS character set is not found. Using previous one default. [ 78.693007][ T9693] ntfs: (device loop3): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 78.713189][ T9693] ntfs: volume version 3.1. [ 78.775433][ T9714] xt_policy: output policy not valid in PREROUTING and INPUT [ 78.900725][ T9728] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 78.969058][ T9739] tmpfs: Bad value for 'mpol' [ 78.972041][ T9734] ntfs: volume version 3.1. [ 79.294686][ T9778] ntfs: volume version 3.1. [ 79.394318][ T9792] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 79.665627][ T9827] set_capacity_and_notify: 11 callbacks suppressed [ 79.665637][ T9827] loop4: detected capacity change from 0 to 4096 [ 79.682667][ T9833] cgroup: noprefix used incorrectly [ 79.725028][ T9827] ntfs: (device loop4): parse_options(): NLS character set is not found. Using previous one default. [ 79.726802][ T9827] ntfs: (device loop4): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 79.747325][ T9827] ntfs: volume version 3.1. [ 79.754645][ T9804] loop2: detected capacity change from 0 to 32768 [ 79.816191][ T9843] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 79.971589][ T9859] loop2: detected capacity change from 0 to 2048 [ 80.020099][ T9859] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 80.116409][ T9877] validate_nla: 5 callbacks suppressed [ 80.116496][ T9877] netlink: 'syz.0.2579': attribute type 1 has an invalid length. [ 80.127931][ T4332] EXT4-fs (loop2): unmounting filesystem. [ 80.212001][ T9880] loop1: detected capacity change from 0 to 4096 [ 80.244626][ T9893] __nla_validate_parse: 11 callbacks suppressed [ 80.244638][ T9893] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2585'. [ 80.255720][ T9880] ntfs: (device loop1): parse_options(): NLS character set is not found. Using previous one default. [ 80.257716][ T9880] ntfs: (device loop1): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 80.276084][ T9896] cgroup: noprefix used incorrectly [ 80.287766][ T9880] ntfs: volume version 3.1. [ 80.387855][ T9908] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 37748736, id = 0 [ 80.405557][ T9910] netlink: 'syz.1.2594': attribute type 1 has an invalid length. [ 80.444023][ T9913] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 37748736, id = 0 [ 80.525452][ T9886] loop0: detected capacity change from 0 to 32768 [ 80.531446][ T9927] cgroup: noprefix used incorrectly [ 80.621432][ T9937] netlink: 'syz.4.2607': attribute type 1 has an invalid length. [ 80.638519][ T9943] loop3: detected capacity change from 0 to 256 [ 80.639946][ T9943] exfat: Deprecated parameter 'namecase' [ 80.640816][ T9943] exfat: Deprecated parameter 'namecase' [ 80.641810][ T9943] exfat: Deprecated parameter 'utf8' [ 80.644786][ T9943] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d) [ 80.702481][ T9945] loop4: detected capacity change from 0 to 2048 [ 80.741312][ T9945] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 80.812974][ T9947] loop2: detected capacity change from 0 to 32768 [ 80.815097][ T9947] (syz.2.2621,9947,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 80.820210][ T9947] (syz.2.2621,9947,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 80.826677][ T4329] EXT4-fs (loop4): unmounting filesystem. [ 80.875082][ T9947] JBD2: Ignoring recovery information on journal [ 80.901344][ T9947] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 80.974050][ T4332] ocfs2: Unmounting device (7,2) on (node local) [ 81.116279][ T9982] MTD: Attempt to mount non-MTD device "/dev/nbd3" [ 81.127465][ T51] block nbd3: Attempted send on invalid socket [ 81.128500][ T51] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 81.166574][ T9984] loop2: detected capacity change from 0 to 256 [ 81.176716][ T9984] exfat: Deprecated parameter 'namecase' [ 81.183166][ T9984] exfat: Deprecated parameter 'namecase' [ 81.184122][ T9984] exfat: Deprecated parameter 'utf8' [ 81.204673][ T9984] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d) [ 81.330796][ T9998] netlink: 'syz.3.2635': attribute type 1 has an invalid length. [ 81.341357][ T9970] loop1: detected capacity change from 0 to 32768 [ 81.561707][T10021] exfat: Deprecated parameter 'namecase' [ 81.562647][T10021] exfat: Deprecated parameter 'namecase' [ 81.580950][T10021] exfat: Deprecated parameter 'utf8' [ 81.614504][T10021] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d) [ 81.688605][T10031] netlink: 'syz.2.2649': attribute type 1 has an invalid length. [ 81.783196][T10042] MTD: Attempt to mount non-MTD device "/dev/nbd1" [ 81.785363][ T51] block nbd1: Attempted send on invalid socket [ 81.786326][ T51] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 81.986977][T10059] netlink: 'syz.0.2661': attribute type 1 has an invalid length. [ 82.044099][ T9965] F2FS-fs (loop4): invalid crc value [ 82.060823][ T9965] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 704461755581925) [ 82.097768][ T9965] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 82.112923][ T9965] F2FS-fs (loop4): sanity_check_inode: inode (ino=4) has corrupted i_extra_isize: 6, max: 36 [ 82.116864][T10050] (syz.1.2659,10050,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 82.127192][T10050] (syz.1.2659,10050,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 82.151139][T10050] JBD2: Ignoring recovery information on journal [ 82.196425][T10080] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 82.214181][T10050] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 82.302642][ T4322] ocfs2: Unmounting device (7,1) on (node local) [ 82.363726][T10093] netlink: 140 bytes leftover after parsing attributes in process `syz.3.2677'. [ 82.493621][T10112] (unnamed net_device) (uninitialized): option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 82.725887][T10090] XFS (loop1): Mounting V5 Filesystem [ 82.804432][T10090] XFS (loop1): Ending clean mount [ 82.842542][T10090] XFS (loop1): Quotacheck needed: Please wait. [ 82.856060][T10090] XFS (loop1): Quotacheck: Done. [ 82.902350][ T4322] XFS (loop1): Unmounting Filesystem [ 83.179005][T10194] ipt_ECN: cannot use operation on non-tcp rule [ 83.223814][T10202] (unnamed net_device) (uninitialized): option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 83.323414][T10217] netlink: 140 bytes leftover after parsing attributes in process `syz.2.2743'. [ 83.442841][T10237] (unnamed net_device) (uninitialized): option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 83.645571][T10264] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 83.647054][T10264] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 83.648919][T10264] EXT4-fs (loop0): 1 truncate cleaned up [ 83.649948][T10264] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 83.661603][T10264] EXT4-fs error (device loop0): ext4_append:79: inode #2: comm syz.0.2756: Logical block already allocated [ 83.676857][T10264] EXT4-fs (loop0): Remounting filesystem read-only [ 83.802456][ T4327] EXT4-fs (loop0): unmounting filesystem. [ 84.000331][T10305] ipt_ECN: cannot use operation on non-tcp rule [ 84.224674][T10300] (syz.3.2782,10300,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 84.233331][T10300] (syz.3.2782,10300,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 84.255419][T10300] JBD2: Ignoring recovery information on journal [ 84.322281][T10326] xt_TCPMSS: Only works on TCP SYN packets [ 84.332248][T10300] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 84.371745][T10331] ipt_ECN: cannot use operation on non-tcp rule [ 84.380171][T10314] XFS (loop2): Mounting V5 Filesystem [ 84.450242][ T4323] ocfs2: Unmounting device (7,3) on (node local) [ 84.451419][T10314] XFS (loop2): Ending clean mount [ 84.468737][T10341] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66dc59, utbl_chksum : 0xe619d30d) [ 84.468837][T10314] XFS (loop2): Quotacheck needed: Please wait. [ 84.488682][T10314] XFS (loop2): Quotacheck: Done. [ 84.595412][ T4332] XFS (loop2): Unmounting Filesystem [ 84.643428][T10365] xt_TCPMSS: Only works on TCP SYN packets [ 84.906534][T10393] set_capacity_and_notify: 14 callbacks suppressed [ 84.906544][T10393] loop0: detected capacity change from 0 to 1764 [ 85.083642][T10407] xt_TCPMSS: Only works on TCP SYN packets [ 85.116223][T10411] loop0: detected capacity change from 0 to 256 [ 85.122279][T10387] loop4: detected capacity change from 0 to 32768 [ 85.147719][T10411] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66dc59, utbl_chksum : 0xe619d30d) [ 85.163417][T10387] XFS (loop4): Mounting V5 Filesystem [ 85.243617][T10387] XFS (loop4): Ending clean mount [ 85.253242][T10387] XFS (loop4): Quotacheck needed: Please wait. [ 85.307504][T10387] XFS (loop4): Quotacheck: Done. [ 85.353425][T10437] loop1: detected capacity change from 0 to 1764 [ 85.395765][ T4329] XFS (loop4): Unmounting Filesystem [ 85.513547][T10450] loop2: detected capacity change from 0 to 256 [ 85.522511][T10450] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66dc59, utbl_chksum : 0xe619d30d) [ 85.672043][T10464] xt_TCPMSS: Only works on TCP SYN packets [ 85.705145][T10468] xt_hashlimit: size too large, truncated to 1048576 [ 85.803463][T10480] loop2: detected capacity change from 0 to 64 [ 85.818830][T10484] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2856'. [ 85.835172][T10367] loop3: detected capacity change from 0 to 131072 [ 85.859078][T10367] F2FS-fs (loop3): invalid crc value [ 85.890693][T10367] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 704461755581925) [ 85.905079][T10491] loop0: detected capacity change from 0 to 64 [ 85.919796][T10367] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 85.969705][T10499] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 85.974110][T10367] F2FS-fs (loop3): sanity_check_inode: inode (ino=4) has corrupted i_extra_isize: 6, max: 36 [ 86.038794][T10507] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2864'. [ 86.049851][T10506] loop1: detected capacity change from 0 to 1024 [ 86.088476][ T278] hfsplus: b-tree write err: -5, ino 25 [ 86.089445][ T278] hfsplus: b-tree write err: -5, ino 4 [ 86.090359][ T278] hfsplus: b-tree write err: -5, ino 2 [ 86.092040][ T278] hfsplus: b-tree write err: -5, ino 26 [ 86.208418][T10528] xt_hashlimit: size too large, truncated to 1048576 [ 86.361152][T10549] loop3: detected capacity change from 0 to 256 [ 86.370688][T10549] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 86.372337][T10549] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 86.400719][T10549] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 86.474115][T10561] xt_hashlimit: size too large, truncated to 1048576 [ 86.540833][T10568] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2892'. [ 86.631102][T10583] xt_TCPMSS: Only works on TCP SYN packets [ 86.671059][T10587] xt_TCPMSS: Only works on TCP SYN packets [ 86.791277][T10599] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2901'. [ 86.817474][T10574] (syz.4.2890,10574,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 86.822295][T10574] (syz.4.2890,10574,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 86.851413][T10574] JBD2: Ignoring recovery information on journal [ 86.894506][T10574] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 86.971351][T10584] XFS (loop3): Mounting V5 Filesystem [ 87.002503][ T4329] ocfs2: Unmounting device (7,4) on (node local) [ 87.094492][ T39] hfsplus: b-tree write err: -5, ino 25 [ 87.095543][ T39] hfsplus: b-tree write err: -5, ino 4 [ 87.096443][ T39] hfsplus: b-tree write err: -5, ino 2 [ 87.102309][ T39] hfsplus: b-tree write err: -5, ino 26 [ 87.108106][T10584] XFS (loop3): Ending clean mount [ 87.136647][T10584] XFS (loop3): Quotacheck needed: Please wait. [ 87.236803][T10584] XFS (loop3): Quotacheck: Done. [ 87.285389][T10647] binder: 10646:10647 got reply transaction with no transaction stack [ 87.286723][T10647] binder: 10646:10647 transaction reply to 0:0 failed 3/29201/-71, size 80-24 line 2946 [ 87.298799][ T5015] binder: undelivered TRANSACTION_ERROR: 29201 [ 87.353997][ T4323] XFS (loop3): Unmounting Filesystem [ 87.393586][ T278] hfsplus: b-tree write err: -5, ino 25 [ 87.394641][ T278] hfsplus: b-tree write err: -5, ino 4 [ 87.395566][ T278] hfsplus: b-tree write err: -5, ino 2 [ 87.396463][ T278] hfsplus: b-tree write err: -5, ino 26 [ 87.443802][T10669] netlink: 'syz.1.2933': attribute type 15 has an invalid length. [ 87.728056][T10675] XFS: noikeep mount option is deprecated. [ 87.732391][ T11] hfsplus: b-tree write err: -5, ino 25 [ 87.733407][ T11] hfsplus: b-tree write err: -5, ino 4 [ 87.734337][ T11] hfsplus: b-tree write err: -5, ino 2 [ 87.735239][ T11] hfsplus: b-tree write err: -5, ino 26 [ 87.815175][T10675] XFS (loop1): Mounting V5 Filesystem [ 87.872400][T10675] XFS (loop1): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 87.902614][T10675] XFS (loop1): Starting recovery (logdev: internal) [ 87.924115][T10675] XFS (loop1): Ending recovery (logdev: internal) [ 87.946938][T10723] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 88.000276][ T4322] XFS (loop1): Unmounting Filesystem [ 88.060350][T10737] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 88.245573][T10763] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2986'. [ 88.415322][T10790] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2989'. [ 88.548942][T10800] ntfs: volume version 3.1. [ 88.564235][T10800] ntfs: (device loop2): ntfs_truncate(): Truncate would cause the inode 0x43 to exceed the maximum size for its attribute type (0x80). Aborting truncate. [ 88.640066][T10812] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 88.665275][T10823] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 88.723681][ T4323] EXT4-fs (loop3): unmounting filesystem. [ 88.835438][T10845] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 88.921373][T10858] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 88.939389][T10859] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 89.049807][T10870] x_tables: ip6_tables: SET.1 target: invalid size 8 (kernel) != (user) 0 [ 89.079510][ T4329] EXT4-fs (loop4): unmounting filesystem. [ 89.106472][T10874] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3025'. [ 89.265623][T10887] ntfs: volume version 3.1. [ 89.282182][T10900] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 89.307914][T10898] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 89.319688][T10887] ntfs: (device loop0): ntfs_truncate(): Truncate would cause the inode 0x43 to exceed the maximum size for its attribute type (0x80). Aborting truncate. [ 89.323034][ T4322] EXT4-fs (loop1): unmounting filesystem. [ 89.405753][T10913] libceph: resolve '4.' (ret=-3): failed [ 89.422245][T10916] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3042'. [ 89.502597][T10929] x_tables: ip6_tables: SET.1 target: invalid size 8 (kernel) != (user) 0 [ 89.622720][T10935] ntfs: volume version 3.1. [ 89.670798][T10935] ntfs: (device loop3): ntfs_truncate(): Truncate would cause the inode 0x43 to exceed the maximum size for its attribute type (0x80). Aborting truncate. [ 89.784827][T10927] XFS: noikeep mount option is deprecated. [ 89.801351][T10958] ntfs: volume version 3.1. [ 89.826974][T10958] ntfs: (device loop1): ntfs_truncate(): Truncate would cause the inode 0x43 to exceed the maximum size for its attribute type (0x80). Aborting truncate. [ 89.836240][T10927] XFS (loop4): Mounting V5 Filesystem [ 89.906344][T10927] XFS (loop4): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 89.930975][T10927] XFS (loop4): Starting recovery (logdev: internal) [ 89.947980][T10927] XFS (loop4): Ending recovery (logdev: internal) [ 90.008352][T10985] libceph: resolve '4.' (ret=-3): failed [ 90.074712][T10993] set_capacity_and_notify: 20 callbacks suppressed [ 90.074721][T10993] loop0: detected capacity change from 0 to 2048 [ 90.088000][ T4329] XFS (loop4): Unmounting Filesystem [ 90.102855][T10993] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 90.170681][T11003] loop2: detected capacity change from 0 to 512 [ 90.193103][T11007] loop1: detected capacity change from 0 to 256 [ 90.194847][T11003] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 90.249782][T11013] netlink: 'syz.2.3091': attribute type 1 has an invalid length. [ 90.293254][T11017] libceph: resolve '4.' (ret=-3): failed [ 90.475733][T11040] netlink: 'syz.4.3106': attribute type 1 has an invalid length. [ 90.485176][T11044] netlink: 'syz.1.3104': attribute type 1 has an invalid length. [ 90.536601][T11050] netlink: 'syz.2.3109': attribute type 41 has an invalid length. [ 90.538171][T11050] netlink: 'syz.2.3109': attribute type 4 has an invalid length. [ 90.539991][T11050] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3109'. [ 90.566097][T11050] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 90.664034][T11066] loop0: detected capacity change from 0 to 512 [ 90.682021][T11066] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 90.692080][T11072] netlink: 'syz.1.3120': attribute type 1 has an invalid length. [ 90.797977][T11086] netlink: 'syz.4.3128': attribute type 1 has an invalid length. [ 90.840925][T11083] loop0: detected capacity change from 0 to 4096 [ 90.841898][T11083] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 90.873269][T11094] loop3: detected capacity change from 0 to 512 [ 90.911884][T11094] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 91.012819][T11115] netlink: 'syz.4.3143': attribute type 41 has an invalid length. [ 91.014187][T11115] netlink: 'syz.4.3143': attribute type 4 has an invalid length. [ 91.015450][T11115] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3143'. [ 91.047833][T11115] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 91.291760][T11153] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3159'. [ 91.309465][T11153] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 91.943203][T11240] loop1: detected capacity change from 0 to 4096 [ 91.980989][T11240] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 92.435280][T11272] loop3: detected capacity change from 0 to 32768 [ 92.448095][T11272] [ 92.448095][T11272] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 92.448095][T11272] [ 92.452398][T11272] ERROR: (device loop3): ea_get: invalid ea.flag [ 92.452398][T11272] [ 92.471986][T11272] ERROR: (device loop3): remounting filesystem as read-only [ 92.630269][T11294] loop2: detected capacity change from 0 to 32768 [ 92.641288][T11294] ialloc: diAlloc returned -5! [ 92.691321][T11267] loop0: detected capacity change from 0 to 65536 [ 92.792385][T11267] XFS (loop0): Mounting V5 Filesystem [ 92.833978][T11267] XFS (loop0): Ending clean mount [ 92.835305][T11267] XFS (loop0): Quotacheck needed: Please wait. [ 92.846853][T11337] Trying to free block not in datazone [ 92.880957][T11267] XFS (loop0): Quotacheck: Done. [ 92.881737][T11346] netlink: 352 bytes leftover after parsing attributes in process `syz.3.3254'. [ 92.932653][T11349] trusted_key: encrypted_key: master key parameter is missing [ 92.997007][ T4327] XFS (loop0): Unmounting Filesystem [ 93.243065][T11372] netlink: 352 bytes leftover after parsing attributes in process `syz.1.3268'. [ 93.347886][T11368] [ 93.347886][T11368] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 93.347886][T11368] [ 93.364248][T11368] ERROR: (device loop4): ea_get: invalid ea.flag [ 93.364248][T11368] [ 93.374927][T11368] ERROR: (device loop4): remounting filesystem as read-only [ 93.446760][T11386] Trying to free block not in datazone [ 93.542740][T11396] trusted_key: encrypted_key: master key parameter is missing [ 93.546150][T11378] ialloc: diAlloc returned -5! [ 93.600736][T11402] netlink: 352 bytes leftover after parsing attributes in process `syz.4.3282'. [ 93.765631][T11421] trusted_key: encrypted_key: master key parameter is missing [ 93.963552][T11380] XFS (loop1): Mounting V5 Filesystem [ 93.966132][T11444] overlayfs: overlapping lowerdir path [ 94.043962][T11380] XFS (loop1): Ending clean mount [ 94.045391][T11380] XFS (loop1): Quotacheck needed: Please wait. [ 94.062840][T11380] XFS (loop1): Quotacheck: Done. [ 94.096072][ T4322] XFS (loop1): Unmounting Filesystem [ 94.219638][T11426] ialloc: diAlloc returned -5! [ 94.715823][T11486] XFS (loop3): Mounting V5 Filesystem [ 94.722198][T11528] overlayfs: overlapping lowerdir path [ 94.796582][T11486] XFS (loop3): Ending clean mount [ 94.842201][ T4323] XFS (loop3): Unmounting Filesystem [ 94.881095][T11530] ERROR: (device loop2): diWrite: ixpxd invalid [ 94.881095][T11530] [ 94.883603][T11530] ERROR: (device loop2): remounting filesystem as read-only [ 94.884778][T11530] ERROR: (device loop2): txAbort: [ 94.884778][T11530] [ 95.177943][T11546] set_capacity_and_notify: 8 callbacks suppressed [ 95.177953][T11546] loop0: detected capacity change from 0 to 32768 [ 95.182547][T11546] [ 95.182547][T11546] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 95.182547][T11546] [ 95.232787][ T4327] [ 95.232787][ T4327] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 95.232787][ T4327] [ 95.251240][ T4327] [ 95.251240][ T4327] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 95.251240][ T4327] [ 95.835222][T11615] loop0: detected capacity change from 0 to 32768 [ 95.904535][T11615] ERROR: (device loop0): diWrite: ixpxd invalid [ 95.904535][T11615] [ 95.906946][T11615] ERROR: (device loop0): remounting filesystem as read-only [ 95.908536][T11615] ERROR: (device loop0): txAbort: [ 95.908536][T11615] [ 95.960917][T11655] Error parsing options; rc = [-22] [ 96.063187][T11671] netlink: 988 bytes leftover after parsing attributes in process `syz.0.3407'. [ 96.363435][T11720] Error parsing options; rc = [-22] [ 96.426571][T11727] loop1: detected capacity change from 0 to 16 [ 96.429532][T11727] erofs: (device loop1): mounted with root inode @ nid 36. [ 96.458511][T11727] erofs: (device loop1): erofs_find_target_block: corrupted dir block 8200 @ nid 36 [ 96.580803][T11750] loop2: detected capacity change from 0 to 8 [ 96.589158][T11751] sctp: [Deprecated]: syz.1.3447 (pid 11751) Use of int in max_burst socket option. [ 96.589158][T11751] Use struct sctp_assoc_value instead [ 96.734831][T11770] Error parsing options; rc = [-22] [ 96.755752][T11774] netlink: 988 bytes leftover after parsing attributes in process `syz.4.3455'. [ 97.009424][T11805] netlink: 988 bytes leftover after parsing attributes in process `syz.2.3472'. [ 97.014642][T11806] loop1: detected capacity change from 0 to 64 [ 97.032365][T11808] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3475'. [ 97.041026][T11806] hfs: unable to locate alternate MDB [ 97.042081][T11806] hfs: continuing without an alternate MDB [ 97.161535][ T4631] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 97.224496][T11756] loop3: detected capacity change from 0 to 65536 [ 97.235687][T11832] loop2: detected capacity change from 0 to 16 [ 97.250477][T11832] erofs: (device loop2): mounted with root inode @ nid 36. [ 97.262981][T11832] erofs: (device loop2): erofs_find_target_block: corrupted dir block 8200 @ nid 36 [ 97.286959][T11756] XFS (loop3): Mounting V5 Filesystem [ 97.374332][T11756] XFS (loop3): Ending clean mount [ 97.381851][T11756] XFS (loop3): Quotacheck needed: Please wait. [ 97.416753][T11756] XFS (loop3): Quotacheck: Done. [ 97.505825][ T4323] XFS (loop3): Unmounting Filesystem [ 97.564545][T11873] loop0: detected capacity change from 0 to 16 [ 97.572186][T11873] erofs: (device loop0): mounted with root inode @ nid 36. [ 97.581332][T11873] erofs: (device loop0): erofs_find_target_block: corrupted dir block 8200 @ nid 36 [ 97.660481][T11884] validate_nla: 2 callbacks suppressed [ 97.660492][T11884] netlink: 'syz.4.3510': attribute type 10 has an invalid length. [ 97.662812][T11884] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3510'. [ 97.664514][T11884] device virt_wifi0 entered promiscuous mode [ 97.683829][T11884] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 97.686362][T11886] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3508'. [ 97.741179][T11894] loop0: detected capacity change from 0 to 8 [ 97.827843][T11901] loop4: detected capacity change from 0 to 64 [ 97.831363][T11901] hfs: unable to locate alternate MDB [ 97.832234][T11901] hfs: continuing without an alternate MDB [ 97.939935][T11914] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3523'. [ 98.229023][T11948] netlink: 'syz.0.3538': attribute type 10 has an invalid length. [ 98.230329][T11948] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3538'. [ 98.231973][T11948] device virt_wifi0 entered promiscuous mode [ 98.234818][T11948] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 98.371122][T11892] XFS (loop2): Mounting V5 Filesystem [ 98.401875][T11892] XFS (loop2): Ending clean mount [ 98.404625][T11892] XFS (loop2): Quotacheck needed: Please wait. [ 98.444064][T11892] XFS (loop2): Quotacheck: Done. [ 98.516613][T11987] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3552'. [ 98.525288][ T4332] XFS (loop2): Unmounting Filesystem [ 98.561585][T11991] netlink: 'syz.1.3555': attribute type 10 has an invalid length. [ 98.589129][T11991] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3555'. [ 98.590856][T11991] device virt_wifi0 entered promiscuous mode [ 98.598230][T11991] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 98.678065][T12003] netlink: 'syz.1.3562': attribute type 5 has an invalid length. [ 98.918465][T12026] NILFS: invalid option "cp=0x0000000000000002": read-only option is not specified [ 99.114355][T12060] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 99.181798][T12067] netdevsim netdevsim3: Direct firmware load for ýÿÿÿ failed with error -2 [ 99.183384][T12067] netdevsim netdevsim3: Falling back to sysfs fallback for: ýÿÿÿ [ 99.337895][T12093] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 99.685366][T12129] NILFS: invalid option "cp=0x0000000000000002": read-only option is not specified [ 99.733185][ T8729] I/O error, dev loop1, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 99.863137][T12145] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 100.064854][T12171] NILFS: invalid option "cp=0x0000000000000002": read-only option is not specified [ 100.096725][ T7746] I/O error, dev loop4, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 100.427719][T12223] set_capacity_and_notify: 6 callbacks suppressed [ 100.427728][T12223] loop1: detected capacity change from 0 to 2048 [ 100.443424][T12223] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 100.712578][T12271] loop4: detected capacity change from 0 to 2048 [ 100.732068][T12271] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 100.750556][T12276] loop0: detected capacity change from 0 to 512 [ 100.768563][T12276] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 100.843569][T12276] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 100.893621][T12267] loop1: detected capacity change from 0 to 40427 [ 100.909199][T12267] F2FS-fs (loop1): build fault injection attr: rate: 14, type: 0x3ffff [ 100.910700][T12267] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x724 [ 100.912520][T12267] F2FS-fs (loop1): invalid crc value [ 100.931833][T12267] F2FS-fs (loop1): Found nat_bits in checkpoint [ 100.949768][T12267] F2FS-fs (loop1) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x54c/0x884 [ 100.982858][ T4327] EXT4-fs (loop0): unmounting filesystem. [ 100.997306][T12267] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 101.004551][T12267] F2FS-fs (loop1) : inject page alloc in f2fs_grab_cache_page of f2fs_new_node_page+0x110/0x8e4 [ 101.059194][T12302] device vlan0 left promiscuous mode [ 101.060201][T12302] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 101.320598][T12336] netdevsim netdevsim4: Direct firmware load for ýÿÿÿ failed with error -2 [ 101.338639][T12336] netdevsim netdevsim4: Falling back to sysfs fallback for: ýÿÿÿ [ 101.374504][T12344] loop2: detected capacity change from 0 to 128 [ 101.406484][T12344] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 101.426462][T12344] hpfs: filesystem error: improperly stopped [ 101.428899][T12344] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 101.430172][T12344] hpfs: You really don't want any checks? You are crazy... [ 101.431383][T12344] hpfs: Code page index out of array [ 101.432566][T12344] hpfs: code page support is disabled [ 101.434244][T12344] hpfs: hpfs_map_4sectors(): unaligned read [ 101.435925][T12344] hpfs: hpfs_map_4sectors(): unaligned read [ 101.436880][T12344] hpfs: filesystem error: unable to find root dir [ 101.540196][T12362] loop3: detected capacity change from 0 to 512 [ 101.550059][T12362] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 101.583508][T12362] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 101.711252][ T4323] EXT4-fs (loop3): unmounting filesystem. [ 102.011792][T12419] __nla_validate_parse: 6 callbacks suppressed [ 102.011804][T12419] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3763'. [ 102.091835][T12431] device vlan0 left promiscuous mode [ 102.092923][T12431] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 102.137653][T12434] netlink: 'syz.1.3779': attribute type 2 has an invalid length. [ 102.138920][T12434] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3779'. [ 102.212650][T12442] loop1: detected capacity change from 0 to 128 [ 102.224156][T12442] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 102.227800][T12442] hpfs: filesystem error: improperly stopped [ 102.228866][T12442] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 102.230043][T12442] hpfs: You really don't want any checks? You are crazy... [ 102.231216][T12442] hpfs: Code page index out of array [ 102.246902][T12442] hpfs: code page support is disabled [ 102.254044][T12442] hpfs: hpfs_map_4sectors(): unaligned read [ 102.255106][T12442] hpfs: hpfs_map_4sectors(): unaligned read [ 102.256038][T12442] hpfs: filesystem error: unable to find root dir [ 102.291948][T12421] loop0: detected capacity change from 0 to 40427 [ 102.301129][T12421] F2FS-fs (loop0): build fault injection attr: rate: 14, type: 0x3ffff [ 102.303344][T12421] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x724 [ 102.324185][T12421] F2FS-fs (loop0): invalid crc value [ 102.349813][T12421] F2FS-fs (loop0): Found nat_bits in checkpoint [ 102.364249][T12421] F2FS-fs (loop0) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x54c/0x884 [ 102.372789][T12460] netlink: 'syz.2.3782': attribute type 1 has an invalid length. [ 102.384947][T12421] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 102.399452][T12421] F2FS-fs (loop0) : inject page alloc in f2fs_grab_cache_page of f2fs_new_node_page+0x110/0x8e4 [ 102.636621][T12491] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3797'. [ 102.799468][T12508] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 102.855626][T12473] loop4: detected capacity change from 0 to 32768 [ 102.876687][T12520] ipt_CLUSTERIP: bad local_nodes[0] 312 [ 102.930121][T12473] XFS (loop4): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent. [ 102.954780][T12473] XFS (loop4): Quotacheck needed: Please wait. [ 102.974117][T12473] XFS (loop4): Quotacheck: Done. [ 102.975229][T12473] XFS (loop4): Unmounting Filesystem [ 103.002400][T12499] loop2: detected capacity change from 0 to 40427 [ 103.004277][T12499] F2FS-fs (loop2): build fault injection attr: rate: 14, type: 0x3ffff [ 103.005736][T12499] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x724 [ 103.013937][T12499] F2FS-fs (loop2): invalid crc value [ 103.039190][T12499] F2FS-fs (loop2): Found nat_bits in checkpoint [ 103.050664][T12499] F2FS-fs (loop2) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x54c/0x884 [ 103.071967][T12499] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 103.102746][T12499] F2FS-fs (loop2) : inject page alloc in f2fs_grab_cache_page of f2fs_new_node_page+0x110/0x8e4 [ 103.376909][T12579] ipt_CLUSTERIP: bad local_nodes[0] 312 [ 103.596385][T12610] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 103.602648][T12608] netlink: 'syz.1.3850': attribute type 1 has an invalid length. [ 103.612043][T12608] netlink: 'syz.1.3850': attribute type 2 has an invalid length. [ 103.613482][T12608] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3850'. [ 103.853222][T12642] x_tables: duplicate underflow at hook 2 [ 103.972626][T12622] (syz.0.3858,12622,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 103.974921][T12622] (syz.0.3858,12622,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 103.994776][T12622] JBD2: Ignoring recovery information on journal [ 104.050475][T12665] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 104.062156][T12622] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 104.133425][T12670] x_tables: duplicate underflow at hook 2 [ 104.205677][ T4327] ocfs2: Unmounting device (7,0) on (node local) [ 104.233059][T12682] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3888'. [ 104.238781][T12682] IPv6: ADDRCONF(NETDEV_CHANGE): bridge4: link becomes ready [ 104.281058][T12688] netlink: 'syz.2.3889': attribute type 1 has an invalid length. [ 104.292961][T12690] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 104.295118][T12688] netlink: 'syz.2.3889': attribute type 2 has an invalid length. [ 104.296404][T12688] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3889'. [ 104.327990][ T47] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 104.329631][ T47] CPU: 0 PID: 47 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 104.330752][ T47] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 104.332376][ T47] Workqueue: hci2 hci_rx_work [ 104.333154][ T47] Call trace: [ 104.333673][ T47] dump_backtrace+0x1c0/0x1ec [ 104.334446][ T47] show_stack+0x2c/0x3c [ 104.335138][ T47] __dump_stack+0x30/0x40 [ 104.335874][ T47] dump_stack_lvl+0xf4/0x15c [ 104.336583][ T47] dump_stack+0x1c/0x5c [ 104.337262][ T47] sysfs_create_dir_ns+0x244/0x264 [ 104.338140][ T47] kobject_add_internal+0x598/0xb08 [ 104.338992][ T47] kobject_add+0x140/0x20c [ 104.339702][ T47] device_add+0x3f0/0xf90 [ 104.340380][ T47] hci_conn_add_sysfs+0xbc/0x1c8 [ 104.341249][ T47] le_conn_complete_evt+0xcc8/0x1244 [ 104.342127][ T47] hci_le_conn_complete_evt+0x114/0x3f4 [ 104.343075][ T47] hci_le_meta_evt+0x2c0/0x4a0 [ 104.343843][ T47] hci_event_packet+0x6b8/0xf18 [ 104.344670][ T47] hci_rx_work+0x324/0xa80 [ 104.345383][ T47] process_one_work+0x7f8/0x13a4 [ 104.346187][ T47] worker_thread+0x8c4/0xfec [ 104.346951][ T47] kthread+0x250/0x2d8 [ 104.347611][ T47] ret_from_fork+0x10/0x20 [ 104.350110][ T47] kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 104.352330][ T47] Bluetooth: hci2: failed to register connection device [ 104.484636][T12706] x_tables: duplicate underflow at hook 2 [ 104.760146][T12732] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3910'. [ 104.779681][T12710] gfs2: fsid=Ô±rÐÛ»ð_î [ 104.779681][T12710] ˜b‚瀫ñ§Ö]êk;.Ä Œ±OŽ¿²ˆ:‚.£’tY_U§æM: Trying to join cluster "lock_nolock", "Ô±rÐÛ»ð_î [ 104.779681][T12710] ˜b‚瀫ñ§Ö]êk;.Ä Œ±OŽ¿²ˆ:‚.£’tY_U§æM" [ 104.790775][T12710] gfs2: fsid=Ô±rÐÛ»ð_î [ 104.790775][T12710] ˜b‚瀫ñ§Ö]êk;.Ä Œ±OŽ¿²ˆ:‚.£’tY_U§æM: Now mounting FS (format 1801)... [ 104.806305][T12710] gfs2: fsid=Ô±rÐÛ»ð_î [ 104.806305][T12710] ˜b‚瀫ñ§Ö]êk;.Ä Œ±OŽ¿²ˆ:‚.£’tY_U§æM.s: journal 0 mapped with 5 extents in 0ms [ 104.836713][T12710] gfs2: fsid=Ô±rÐÛ»ð_î [ 104.836713][T12710] ˜b‚瀫ñ§Ö]êk;.Ä Œ±OŽ¿²ˆ:‚.£’tY_U§æM.s: first mount done, others may mount [ 104.860014][T12736] tipc: Trying to set illegal importance in message [ 104.994428][T12724] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 104.995779][T12724] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 105.007309][T12724] F2FS-fs (loop2): invalid crc value [ 105.042274][T12724] F2FS-fs (loop2): Found nat_bits in checkpoint [ 105.068785][T12724] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 105.070029][T12724] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 105.141784][T12760] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3922'. [ 105.333800][T12742] XFS (loop3): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent. [ 105.354843][T12789] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3934'. [ 105.360144][T12787] tipc: Trying to set illegal importance in message [ 105.394320][ T47] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 105.396067][ T47] CPU: 0 PID: 47 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 105.397194][ T47] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 105.398820][ T47] Workqueue: hci0 hci_rx_work [ 105.399608][ T47] Call trace: [ 105.400165][ T47] dump_backtrace+0x1c0/0x1ec [ 105.400918][ T47] show_stack+0x2c/0x3c [ 105.401648][ T47] __dump_stack+0x30/0x40 [ 105.402375][ T47] dump_stack_lvl+0xf4/0x15c [ 105.403173][ T47] dump_stack+0x1c/0x5c [ 105.403843][ T47] sysfs_create_dir_ns+0x244/0x264 [ 105.404710][ T47] kobject_add_internal+0x598/0xb08 [ 105.405563][ T47] kobject_add+0x140/0x20c [ 105.406312][ T47] device_add+0x3f0/0xf90 [ 105.407035][ T47] hci_conn_add_sysfs+0xbc/0x1c8 [ 105.407818][ T47] le_conn_complete_evt+0xcc8/0x1244 [ 105.408659][ T47] hci_le_conn_complete_evt+0x114/0x3f4 [ 105.409605][ T47] hci_le_meta_evt+0x2c0/0x4a0 [ 105.410429][ T47] hci_event_packet+0x6b8/0xf18 [ 105.411241][ T47] hci_rx_work+0x324/0xa80 [ 105.411972][ T47] process_one_work+0x7f8/0x13a4 [ 105.412772][ T47] worker_thread+0x8c4/0xfec [ 105.413518][ T47] kthread+0x250/0x2d8 [ 105.414202][ T47] ret_from_fork+0x10/0x20 [ 105.417703][ T47] kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 105.419761][ T47] Bluetooth: hci0: failed to register connection device [ 105.434299][T12799] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3937'. [ 105.447051][T12797] xt_CT: No such helper "snmp_trap" [ 105.456309][T12742] XFS (loop3): Quotacheck needed: Please wait. [ 105.472158][T12742] XFS (loop3): Quotacheck: Done. [ 105.473165][T12742] XFS (loop3): Unmounting Filesystem [ 105.662262][T12817] tipc: Trying to set illegal importance in message [ 105.825736][T12831] xt_CT: No such helper "snmp_trap" [ 105.897646][ T27] audit: type=1400 audit(32792.548:2): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name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xt_CT: No such helper "snmp_trap" [ 106.108194][T12863] netlink: 'syz.2.3969': attribute type 11 has an invalid length. [ 106.169444][T12839] set_capacity_and_notify: 4 callbacks suppressed [ 106.169453][T12839] loop4: detected capacity change from 0 to 32768 [ 106.176429][T12839] (syz.4.3956,12839,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 106.183137][T12839] (syz.4.3956,12839,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 106.214528][T12839] JBD2: Ignoring recovery information on journal [ 106.272902][T12839] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 106.298146][T12882] loop0: detected capacity change from 0 to 16 [ 106.299613][T12882] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 106.363159][ T4329] ocfs2: Unmounting device (7,4) on (node local) [ 106.407190][ T47] Bluetooth: hci2: command 0x2016 tx timeout [ 106.416226][T12896] netlink: 'syz.3.3984': attribute type 11 has an invalid length. [ 106.497559][ T4334] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 106.499347][ T4334] CPU: 0 PID: 4334 Comm: kworker/u5:5 Not tainted syzkaller #0 [ 106.500576][ T4334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 106.502122][ T4334] Workqueue: hci1 hci_rx_work [ 106.502856][ T4334] Call trace: [ 106.503304][ T4334] dump_backtrace+0x1c0/0x1ec [ 106.504109][ T4334] show_stack+0x2c/0x3c [ 106.504818][ T4334] __dump_stack+0x30/0x40 [ 106.505530][ T4334] dump_stack_lvl+0xf4/0x15c [ 106.506267][ T4334] dump_stack+0x1c/0x5c [ 106.507007][ T4334] sysfs_create_dir_ns+0x244/0x264 [ 106.507814][ T4334] kobject_add_internal+0x598/0xb08 [ 106.508646][ T4334] kobject_add+0x140/0x20c [ 106.509326][ T4334] device_add+0x3f0/0xf90 [ 106.510014][ T4334] hci_conn_add_sysfs+0xbc/0x1c8 [ 106.510789][ T4334] le_conn_complete_evt+0xcc8/0x1244 [ 106.511631][ T4334] hci_le_conn_complete_evt+0x114/0x3f4 [ 106.512526][ T4334] hci_le_meta_evt+0x2c0/0x4a0 [ 106.513254][ T4334] hci_event_packet+0x6b8/0xf18 [ 106.514011][ T4334] hci_rx_work+0x324/0xa80 [ 106.514715][ T4334] process_one_work+0x7f8/0x13a4 [ 106.515525][ T4334] worker_thread+0x8c4/0xfec [ 106.516306][ T4334] kthread+0x250/0x2d8 [ 106.516947][ T4334] ret_from_fork+0x10/0x20 [ 106.529518][ T4334] kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 106.531408][ T4334] Bluetooth: hci1: failed to register connection device [ 106.668434][T12925] loop2: detected capacity change from 0 to 16 [ 106.669885][T12925] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 106.734964][T12933] netlink: 'syz.4.4001': attribute type 11 has an invalid length. [ 106.928562][T12958] loop4: detected capacity change from 0 to 16 [ 106.932618][T12958] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 107.070616][T12970] loop2: detected capacity change from 0 to 164 [ 107.093454][T12968] loop4: detected capacity change from 0 to 2048 [ 107.103223][T12970] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 107.111046][T12970] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 107.114660][T12949] loop0: detected capacity change from 0 to 40427 [ 107.116443][T12949] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 107.120544][T12970] Symlink component flag not implemented [ 107.124074][T12949] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 107.127018][T12970] Symlink component flag not implemented [ 107.128825][T12968] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 107.135255][T12949] F2FS-fs (loop0): invalid crc value [ 107.136003][T12970] Symlink component flag not implemented (7) [ 107.140410][T12970] Symlink component flag not implemented (116) [ 107.153906][T12949] F2FS-fs (loop0): Found nat_bits in checkpoint [ 107.171929][T12949] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 107.173256][T12949] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 107.243984][T12984] loop1: detected capacity change from 0 to 16 [ 107.255738][T12984] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 107.436412][T13002] netlink: 'syz.3.4035': attribute type 1 has an invalid length. [ 107.438953][T13002] __nla_validate_parse: 1 callbacks suppressed [ 107.438962][T13002] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4035'. [ 107.447248][ T4334] Bluetooth: hci0: command 0x2016 tx timeout [ 107.449433][T13004] netlink: 2 bytes leftover after parsing attributes in process `syz.1.4034'. [ 107.469316][T13013] loop0: detected capacity change from 0 to 164 [ 107.484827][T13013] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 107.509961][T13013] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 107.519882][T13013] Symlink component flag not implemented [ 107.523205][T13013] Symlink component flag not implemented [ 107.524112][T13013] Symlink component flag not implemented (7) [ 107.531030][T13013] Symlink component flag not implemented (116) [ 107.808226][T13061] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 107.809230][T13061] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 107.811887][T13061] vhci_hcd vhci_hcd.0: Device attached [ 107.814319][T13062] usbip_core: unknown command [ 107.815140][T13062] vhci_hcd: unknown pdu 0 [ 107.815831][T13062] usbip_core: unknown command [ 107.819086][ T278] vhci_hcd: stop threads [ 107.819788][ T278] vhci_hcd: release socket [ 107.820539][ T278] vhci_hcd: disconnect device [ 107.891306][T13077] netlink: 'syz.1.4065': attribute type 1 has an invalid length. [ 107.892628][T13077] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4065'. [ 107.897427][T13075] loop0: detected capacity change from 0 to 2048 [ 107.900843][T13075] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 107.926783][T13081] netlink: 2 bytes leftover after parsing attributes in process `syz.2.4069'. [ 108.167353][T13105] vim2m vim2m.0: Fourcc format (0x42474752) invalid. [ 108.170755][T13109] netlink: 'syz.2.4080': attribute type 1 has an invalid length. [ 108.172015][T13109] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4080'. [ 108.221391][T13117] bad cache= option: nonw [ 108.221391][T13117] [ 108.222544][T13117] CIFS: VFS: bad cache= option: nonw [ 108.567304][ T47] Bluetooth: hci1: command 0x2016 tx timeout [ 108.652515][T13171] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 108.701545][T13171] EXT4-fs error (device loop1): ext4_get_verity_descriptor_location:337: inode #15: comm syz.1.4120: verity file corrupted; can't find descriptor [ 108.707241][T13171] fs-verity (loop1, inode 15): Error -117 getting verity descriptor size [ 108.744482][ T4322] EXT4-fs (loop1): unmounting filesystem. [ 108.944246][T13222] bad cache= option: nonw [ 108.944246][T13222] [ 108.945340][T13222] CIFS: VFS: bad cache= option: nonw [ 109.118795][T13254] usb usb1: usbfs: process 13254 (syz.4.4149) did not claim interface 2 before use [ 109.130986][T13255] device gre0 entered promiscuous mode [ 109.286098][T13280] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4164'. [ 109.366117][T13288] usb usb1: usbfs: process 13288 (syz.0.4165) did not claim interface 2 before use [ 109.458925][T13303] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4174'. [ 109.520484][T13312] device gre0 entered promiscuous mode [ 109.795498][T13354] device gre0 entered promiscuous mode [ 109.934843][T13376] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4209'. [ 110.175090][T13417] set match dimension is over the limit! [ 110.184695][T13420] bridge3: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 110.708137][T13525] bridge4: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 110.730914][T13530] set match dimension is over the limit! [ 110.802232][T13532] ntfs: (device loop0): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 110.803996][T13532] ntfs: (device loop0): ntfs_read_locked_inode(): $DATA attribute is missing. [ 110.805381][T13532] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 110.811982][T13532] ntfs: (device loop0): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 110.837001][T13532] ntfs: volume version 3.1. [ 110.968536][T13576] netlink: 'syz.1.4277': attribute type 1 has an invalid length. [ 110.991871][T13578] set match dimension is over the limit! [ 111.273428][T13634] set_capacity_and_notify: 4 callbacks suppressed [ 111.273437][T13634] loop2: detected capacity change from 0 to 4096 [ 111.289621][T13645] netlink: 'syz.0.4309': attribute type 1 has an invalid length. [ 111.301691][T13634] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 111.509889][T13690] netlink: 'syz.4.4314': attribute type 1 has an invalid length. [ 111.552481][T13697] loop1: detected capacity change from 0 to 64 [ 111.567747][T13701] netlink: 'syz.3.4317': attribute type 9 has an invalid length. [ 111.814517][T13759] loop4: detected capacity change from 0 to 64 [ 111.814881][T13760] netlink: 'syz.2.4334': attribute type 9 has an invalid length. [ 111.967715][T13789] ieee802154 phy1 wpan1: encryption failed: -22 [ 112.080719][T13813] loop3: detected capacity change from 0 to 64 [ 112.170353][T13829] ieee802154 phy1 wpan1: encryption failed: -22 [ 112.370486][T13859] loop3: detected capacity change from 0 to 4096 [ 112.382271][T13859] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 112.425729][T13881] loop1: detected capacity change from 0 to 2048 [ 112.432030][T13879] ieee802154 phy1 wpan1: encryption failed: -22 [ 112.463167][ T4334] Bluetooth: hci2: Malformed HCI Event [ 112.531470][T13895] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4381'. [ 112.532895][T13895] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4381'. [ 112.682984][T13923] netlink: 'syz.3.4392': attribute type 3 has an invalid length. [ 112.974151][T13936] loop3: detected capacity change from 0 to 32768 [ 113.005806][T13936] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 113.042440][T13936] ocfs2: Unmounting device (7,3) on (node local) [ 113.107485][ T4334] Bluetooth: hci3: Malformed HCI Event [ 113.201695][T14007] loop4: detected capacity change from 0 to 1764 [ 113.234598][T13967] loop2: detected capacity change from 0 to 32768 [ 113.250510][T13967] (syz.2.4409,13967,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 113.255168][T13967] (syz.2.4409,13967,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 113.291364][T13967] JBD2: Ignoring recovery information on journal [ 113.444531][ T4334] Bluetooth: hci0: Malformed HCI Event [ 113.447334][T13967] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 113.504786][ T4332] ocfs2: Unmounting device (7,2) on (node local) [ 113.580737][T14070] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4441'. [ 113.592802][T14070] device hsr_slave_0 left promiscuous mode [ 113.644412][T14079] dlm: no locking on control device [ 113.653955][T14070] device hsr_slave_1 left promiscuous mode [ 113.897461][T14112] ALSA: mixer_oss: invalid OSS volume '' [ 113.945766][T14125] dlm: no locking on control device [ 114.043700][T14140] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4468'. [ 114.074022][T14140] device hsr_slave_0 left promiscuous mode [ 114.107695][T14140] device hsr_slave_1 left promiscuous mode [ 114.162071][T14163] dlm: no locking on control device [ 114.325345][T14155] loop0: detected capacity change from 0 to 32768 [ 114.354744][T14182] netlink: 'syz.4.4478': attribute type 1 has an invalid length. [ 114.356096][T14182] netlink: 'syz.4.4478': attribute type 12 has an invalid length. [ 114.357255][T14155] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 114.357633][T14182] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4478'. [ 114.365910][T14155] ocfs2: Unmounting device (7,0) on (node local) [ 114.518419][T14196] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 114.665307][T14223] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4494'. [ 114.670656][T14223] device hsr_slave_0 left promiscuous mode [ 114.712737][T14223] device hsr_slave_1 left promiscuous mode [ 114.932723][T14255] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 115.006197][T14276] netlink: 'syz.3.4512': attribute type 1 has an invalid length. [ 115.027484][T14276] netlink: 'syz.3.4512': attribute type 12 has an invalid length. [ 115.028828][T14276] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4512'. [ 115.079112][T14289] deleting an unspecified loop device is not supported. [ 115.216098][T14308] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4525'. [ 115.633295][T14384] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 115.694021][T14384] EXT4-fs error (device loop4): ext4_do_update_inode:5272: inode #2: comm syz.4.4551: corrupted inode contents [ 115.733447][T14384] EXT4-fs error (device loop4): ext4_dirty_inode:6137: inode #2: comm syz.4.4551: mark_inode_dirty error [ 115.765941][T14384] EXT4-fs error (device loop4): ext4_do_update_inode:5272: inode #2: comm syz.4.4551: corrupted inode contents [ 115.799841][T14384] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #2: comm syz.4.4551: mark_inode_dirty error [ 115.852732][ T4329] EXT4-fs (loop4): unmounting filesystem. [ 116.096318][T14479] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 116.115237][T14479] EXT4-fs error (device loop3): ext4_do_update_inode:5272: inode #2: comm syz.3.4582: corrupted inode contents [ 116.120455][T14479] EXT4-fs error (device loop3): ext4_dirty_inode:6137: inode #2: comm syz.3.4582: mark_inode_dirty error [ 116.127483][T14479] EXT4-fs error (device loop3): ext4_do_update_inode:5272: inode #2: comm syz.3.4582: corrupted inode contents [ 116.129937][T14479] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #2: comm syz.3.4582: mark_inode_dirty error [ 116.173566][ T4323] EXT4-fs (loop3): unmounting filesystem. [ 116.231853][T14511] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4589'. [ 116.242043][T14511] IPv6: sit1: Disabled Multicast RS [ 116.315546][T14529] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 116.470586][T14557] set_capacity_and_notify: 7 callbacks suppressed [ 116.470596][T14557] loop4: detected capacity change from 0 to 256 [ 116.676760][T14605] syz.1.4620: vmalloc error: size 18446744073709551615, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz1,mems_allowed=0 [ 116.691818][T14605] CPU: 1 PID: 14605 Comm: syz.1.4620 Not tainted syzkaller #0 [ 116.693052][T14605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 116.694695][T14605] Call trace: [ 116.695230][T14605] dump_backtrace+0x1c0/0x1ec [ 116.696040][T14605] show_stack+0x2c/0x3c [ 116.696766][T14605] __dump_stack+0x30/0x40 [ 116.697438][T14605] dump_stack_lvl+0xf4/0x15c [ 116.698178][T14605] dump_stack+0x1c/0x5c [ 116.698845][T14605] warn_alloc+0x214/0x328 [ 116.699551][T14605] __vmalloc_node_range+0x118/0xe3c [ 116.700304][T14605] vmalloc+0x9c/0xd4 [ 116.700959][T14605] dvb_dvr_do_ioctl+0x120/0x1f8 [ 116.701686][T14605] dvb_usercopy+0x240/0x45c [ 116.702337][T14605] dvb_dvr_ioctl+0x3c/0x54 [ 116.702994][T14605] __arm64_sys_ioctl+0x14c/0x1c8 [ 116.703834][T14605] invoke_syscall+0x98/0x2b4 [ 116.704576][T14605] el0_svc_common+0x138/0x258 [ 116.705339][T14605] do_el0_svc+0x58/0x130 [ 116.705992][T14605] el0_svc+0x58/0x128 [ 116.706619][T14605] el0t_64_sync_handler+0x84/0xf0 [ 116.707421][T14605] el0t_64_sync+0x18c/0x190 [ 116.717547][T14609] loop2: detected capacity change from 0 to 512 [ 116.735386][T14605] Mem-Info: [ 116.735918][T14605] active_anon:6203 inactive_anon:0 isolated_anon:0 [ 116.735918][T14605] active_file:19519 inactive_file:2915 isolated_file:0 [ 116.735918][T14605] unevictable:768 dirty:511 writeback:0 [ 116.735918][T14605] slab_reclaimable:19875 slab_unreclaimable:98310 [ 116.735918][T14605] mapped:29308 shmem:1017 pagetables:682 [ 116.735918][T14605] sec_pagetables:0 bounce:0 [ 116.735918][T14605] kernel_misc_reclaimable:0 [ 116.735918][T14605] free:1426400 free_pcp:1452 free_cma:7360 [ 116.756006][T14605] Node 0 active_anon:24812kB inactive_anon:0kB active_file:78076kB inactive_file:11660kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:117232kB dirty:2044kB writeback:0kB shmem:4068kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:8796kB pagetables:2728kB sec_pagetables:0kB all_unreclaimable? no [ 116.762715][T14609] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 116.786374][T14605] Node 0 DMA free:3076864kB boost:0kB min:20656kB low:25820kB high:30984kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145728kB managed:3080192kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:29440kB [ 116.792844][T14605] lowmem_reserve[]: 0 0 3552 3552 3552 [ 116.793960][T14605] Node 0 Normal free:2628736kB boost:0kB min:24396kB low:30492kB high:36588kB reserved_highatomic:0KB active_anon:24712kB inactive_anon:0kB active_file:78076kB inactive_file:11660kB unevictable:3072kB writepending:2044kB present:5242880kB managed:3641612kB mlocked:0kB bounce:0kB free_pcp:6140kB local_pcp:3420kB free_cma:0kB [ 116.805455][T14605] lowmem_reserve[]: 0 0 0 0 0 [ 116.806244][T14605] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 1*256kB (C) 1*512kB (C) 0*1024kB 0*2048kB 751*4096kB (MC) = 3076864kB [ 116.809455][ T4332] EXT4-fs (loop2): unmounting filesystem. [ 116.834205][T14605] Node 0 Normal: 1246*4kB (UME) 1573*8kB (UME) 626*16kB (UME) 554*32kB (UME) 182*64kB (UME) 52*128kB (UM) 32*256kB (ME) 12*512kB (M) 13*1024kB (ME) 7*2048kB (UM) 616*4096kB (UM) = 2628736kB [ 116.857412][T14605] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 116.858970][T14605] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=32768kB [ 116.874576][T14605] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 116.876334][T14605] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=64kB [ 116.899774][T14605] 24182 total pagecache pages [ 116.900551][T14605] 0 pages in swap cache [ 116.901304][T14605] Free swap = 124996kB [ 116.901988][T14605] Total swap = 124996kB [ 116.907468][T14605] 2097152 pages RAM [ 116.908248][T14605] 0 pages HighMem/MovableOnly [ 116.909080][T14605] 416701 pages reserved [ 116.909908][T14605] 8192 pages cma reserved [ 116.916893][T14605] 0 pages hwpoisoned [ 117.080115][T14615] loop4: detected capacity change from 0 to 40427 [ 117.088095][T14615] F2FS-fs (loop4): build fault injection attr: rate: 14, type: 0x3ffff [ 117.089450][T14615] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0xe4 [ 117.100376][T14666] loop0: detected capacity change from 0 to 256 [ 117.103891][T14615] F2FS-fs (loop4): invalid crc value [ 117.119436][T14615] F2FS-fs (loop4): Found nat_bits in checkpoint [ 117.125950][T14615] F2FS-fs (loop4) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x54c/0x884 [ 117.153614][T14675] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4644'. [ 117.160791][T14615] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 117.172528][T14675] IPv6: sit1: Disabled Multicast RS [ 117.178133][T14678] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 117.191587][T14615] F2FS-fs (loop4) : inject alloc nid in f2fs_alloc_nid of f2fs_get_dnode_of_data+0x64c/0x1b9c [ 117.288598][T14651] loop1: detected capacity change from 0 to 32768 [ 117.292995][T14651] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 11 [ 117.478417][T14727] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 117.492243][T14731] loop3: detected capacity change from 0 to 256 [ 117.622613][T14759] xt_TPROXY: Can be used only with -p tcp or -p udp [ 117.684202][T14772] loop3: detected capacity change from 0 to 512 [ 117.744752][T14772] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 117.819732][ T4323] EXT4-fs (loop3): unmounting filesystem. [ 117.942018][T14805] xt_TPROXY: Can be used only with -p tcp or -p udp [ 118.052146][T14821] xt_TPROXY: Can be used only with -p tcp or -p udp [ 118.189910][T14847] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 118.594411][T14851] loop1: detected capacity change from 0 to 40427 [ 118.598418][T14851] F2FS-fs (loop1): build fault injection attr: rate: 14, type: 0x3ffff [ 118.599752][T14851] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0xe4 [ 118.621373][T14851] F2FS-fs (loop1): invalid crc value [ 118.622435][T14909] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 118.658705][T14851] F2FS-fs (loop1): Found nat_bits in checkpoint [ 118.664205][T14851] F2FS-fs (loop1) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x54c/0x884 [ 118.717247][T14851] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 118.728590][T14881] loop0: detected capacity change from 0 to 32768 [ 118.741761][T14851] F2FS-fs (loop1) : inject alloc nid in f2fs_alloc_nid of f2fs_get_dnode_of_data+0x64c/0x1b9c [ 118.747608][T14881] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 11 [ 118.868197][T14947] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 119.105817][T14994] validate_nla: 2 callbacks suppressed [ 119.105827][T14994] netlink: 'syz.4.4748': attribute type 1 has an invalid length. [ 119.121249][T14994] netlink: 'syz.4.4748': attribute type 2 has an invalid length. [ 119.199783][T15010] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 119.227270][T15013] loop2: detected capacity change from 0 to 64 [ 119.238663][T15013] hfs: unable to locate alternate MDB [ 119.239604][T15013] hfs: continuing without an alternate MDB [ 119.308718][ T5494] hfs: new node 0 already hashed? [ 119.309735][ T5494] ------------[ cut here ]------------ [ 119.310674][ T5494] WARNING: CPU: 1 PID: 5494 at fs/hfs/bnode.c:520 hfs_bnode_create+0x40c/0x4c4 [ 119.312099][ T5494] Modules linked in: [ 119.312748][ T5494] CPU: 1 PID: 5494 Comm: kworker/u4:6 Not tainted syzkaller #0 [ 119.313975][ T5494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 119.315684][ T5494] Workqueue: writeback wb_workfn (flush-7:2) [ 119.316682][ T5494] pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 119.318033][ T5494] pc : hfs_bnode_create+0x40c/0x4c4 [ 119.318875][ T5494] lr : hfs_bnode_create+0x40c/0x4c4 [ 119.319758][ T5494] sp : ffff800021256d40 [ 119.320429][ T5494] x29: ffff800021256d60 x28: ffff70000424adbc x27: dfff800000000000 [ 119.321786][ T5494] x26: 0000000000000080 x25: 0000000000000000 x24: ffff0000ce47ea88 [ 119.323207][ T5494] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000cf498000 [ 119.324572][ T5494] x20: 0000000000000000 x19: ffff0000ce47ea00 x18: 0000000000000000 [ 119.325895][ T5494] x17: 0000000000000000 x16: ffff8000082d91a4 x15: 0000000000000000 [ 119.327297][ T5494] x14: 0000000000000001 x13: 1ffff0000424ad10 x12: 0000000000ff0100 [ 119.328664][ T5494] x11: ff00800008311550 x10: 0000000000000000 x9 : 267690052763ad00 [ 119.329992][ T5494] x8 : 267690052763ad00 x7 : 0000000000000001 x6 : 0000000000000001 [ 119.331403][ T5494] x5 : ffff800021256818 x4 : ffff8000152f4cc0 x3 : ffff80000a88d9f0 [ 119.332677][ T5494] x2 : ffff00019f564d10 x1 : 0000000100000000 x0 : 000000000000001f [ 119.333960][ T5494] Call trace: [ 119.334499][ T5494] hfs_bnode_create+0x40c/0x4c4 [ 119.335276][ T5494] hfs_bmap_alloc+0x4fc/0x5ac [ 119.335987][ T5494] hfs_btree_inc_height+0x108/0x890 [ 119.336842][ T5494] hfs_brec_insert+0x5c4/0x97c [ 119.337608][ T5494] __hfs_ext_write_extent+0x22c/0x484 [ 119.338495][ T5494] hfs_ext_write_extent+0x154/0x1e0 [ 119.339334][ T5494] hfs_write_inode+0xf0/0x8dc [ 119.340100][ T5494] __writeback_single_inode+0x5e0/0x1554 [ 119.341022][ T5494] writeback_sb_inodes+0x858/0x143c [ 119.341912][ T5494] wb_writeback+0x414/0xfcc [ 119.342658][ T5494] wb_workfn+0x360/0xe18 [ 119.343366][ T5494] process_one_work+0x7f8/0x13a4 [ 119.344194][ T5494] worker_thread+0x8c4/0xfec [ 119.344943][ T5494] kthread+0x250/0x2d8 [ 119.345607][ T5494] ret_from_fork+0x10/0x20 [ 119.346345][ T5494] irq event stamp: 5645162 [ 119.347056][ T5494] hardirqs last enabled at (5645161): [] __up_console_sem+0xb4/0xfc [ 119.348663][ T5494] hardirqs last disabled at (5645162): [] el1_dbg+0x24/0x80 [ 119.350086][ T5494] softirqs last enabled at (5645012): [] handle_softirqs+0xaec/0xc60 [ 119.351731][ T5494] softirqs last disabled at (5643819): [] __do_softirq+0x14/0x20 [ 119.353227][ T5494] ---[ end trace 0000000000000000 ]--- [ 119.432618][ T5494] ------------[ cut here ]------------ [ 119.433449][ T5494] kernel BUG at fs/hfs/bnode.c:565! [ 119.434407][ T5494] Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP [ 119.435697][ T5494] Modules linked in: [ 119.436343][ T5494] CPU: 1 PID: 5494 Comm: kworker/u4:6 Tainted: G W syzkaller #0 [ 119.437862][ T5494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 119.439574][ T5494] Workqueue: writeback wb_workfn (flush-7:2) [ 119.440522][ T5494] pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 119.441823][ T5494] pc : hfs_bnode_put+0x358/0x364 [ 119.442575][ T5494] lr : hfs_bnode_put+0x358/0x364 [ 119.443338][ T5494] sp : ffff800021256e40 [ 119.443968][ T5494] x29: ffff800021256e40 x28: 0000000000000302 x27: dfff800000000000 [ 119.445194][ T5494] x26: ffff70000424addc x25: ffff800021256ee0 x24: 1fffe00019c8fd40 [ 119.446455][ T5494] x23: ffff0000cf498000 x22: dfff800000000000 x21: 0000000000000000 [ 119.447670][ T5494] x20: ffff0000ce47ea80 x19: ffff0000ce47ea00 x18: 0000000000000000 [ 119.448908][ T5494] x17: 0000000000000000 x16: ffff8000082eee68 x15: 0000000000000000 [ 119.450233][ T5494] x14: 0000000000000001 x13: 1fffe00019c8fd50 x12: 0000000000ff0100 [ 119.451440][ T5494] x11: ff00800008fa0468 x10: 0000000000000000 x9 : ffff800008fa0468 [ 119.452720][ T5494] x8 : ffff0000d09e9bc0 x7 : ffff8000118c0d24 x6 : 0000000000000000 [ 119.453989][ T5494] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff800008fa016c [ 119.455270][ T5494] x2 : 0000000000000000 x1 : 0000000000000000 x0 : 0000000000000000 [ 119.456560][ T5494] Call trace: [ 119.457053][ T5494] hfs_bnode_put+0x358/0x364 [ 119.457824][ T5494] hfs_btree_inc_height+0x458/0x890 [ 119.458662][ T5494] hfs_brec_insert+0x5c4/0x97c [ 119.459421][ T5494] __hfs_ext_write_extent+0x22c/0x484 [ 119.460349][ T5494] hfs_ext_write_extent+0x154/0x1e0 [ 119.461166][ T5494] hfs_write_inode+0xf0/0x8dc [ 119.461919][ T5494] __writeback_single_inode+0x5e0/0x1554 [ 119.462861][ T5494] writeback_sb_inodes+0x858/0x143c [ 119.463666][ T5494] wb_writeback+0x414/0xfcc [ 119.464371][ T5494] wb_workfn+0x360/0xe18 [ 119.465040][ T5494] process_one_work+0x7f8/0x13a4 [ 119.465865][ T5494] worker_thread+0x8c4/0xfec [ 119.466658][ T5494] kthread+0x250/0x2d8 [ 119.467337][ T5494] ret_from_fork+0x10/0x20 [ 119.468053][ T5494] Code: aa1403e0 97e514eb 17ffffce 97d42b95 (d4210000) [ 119.469195][ T5494] ---[ end trace 0000000000000000 ]--- [ 119.772773][ T5494] Kernel panic - not syncing: Oops - BUG: Fatal exception [ 119.773835][ T5494] SMP: stopping secondary CPUs [ 119.774627][ T5494] Kernel Offset: disabled [ 119.775329][ T5494] CPU features: 0x080000,000f0097,a65bfea7 [ 119.776291][ T5494] Memory Limit: none [ 120.073833][ T5494] Rebooting in 86400 seconds..