last executing test programs: 1m5.413383064s ago: executing program 1 (id=761): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x104000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m5.282351735s ago: executing program 1 (id=765): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@setlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0x3a}, @IFLA_GSO_MAX_SEGS={0x8}]}, 0x44}}, 0x0) 1m5.114364946s ago: executing program 1 (id=771): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0xd0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x9}}) 1m5.000866177s ago: executing program 1 (id=776): syz_mount_image$hfsplus(&(0x7f0000007340), &(0x7f0000000040)='./file2\x00', 0x1600008, &(0x7f000001fbc0)=ANY=[], 0x1, 0x63e, &(0x7f0000002200)="$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") mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) 1m4.776751338s ago: executing program 1 (id=784): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETA(r0, 0x560a, &(0x7f0000000000)={0x0, 0x75d, 0x2, 0x6, 0xd, "5f730200a9003f00"}) 1m4.215373401s ago: executing program 1 (id=801): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv6_getaddrlabel={0x24, 0x19, 0x1, 0x0, 0x0, {0xa, 0x2, 0x40}, [@IFAL_LABEL={0x8}]}, 0x24}}, 0x0) 1m4.035413672s ago: executing program 32 (id=801): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv6_getaddrlabel={0x24, 0x19, 0x1, 0x0, 0x0, {0xa, 0x2, 0x40}, [@IFAL_LABEL={0x8}]}, 0x24}}, 0x0) 44.63636533s ago: executing program 4 (id=1135): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, 0x0, &(0x7f00000004c0)) 44.533465301s ago: executing program 4 (id=1139): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f030000000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 44.379562572s ago: executing program 4 (id=1145): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000006c0)=ANY=[@ANYBLOB="300000004a00010000000000000000000a008000", @ANYRES32=0x0, @ANYBLOB="00000000140001000000000000000000000085"], 0x30}}, 0x0) 44.301776802s ago: executing program 4 (id=1148): syz_mount_image$hfsplus(&(0x7f0000007340), &(0x7f0000000040)='./file2\x00', 0x1600008, &(0x7f000001fbc0)=ANY=[], 0x1, 0x63e, &(0x7f0000002200)="$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") mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) 44.119904314s ago: executing program 4 (id=1154): syz_mount_image$hfsplus(&(0x7f0000000500), &(0x7f0000000280)='./file0\x00', 0x200010, &(0x7f0000000040)=ANY=[], 0x0, 0x663, &(0x7f0000000540)="$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") mount$tmpfs(0x0, &(0x7f0000000080)='./file0/../file0/../file0\x00', 0x0, 0x1210020, &(0x7f0000000bc0)={[{@gid}]}) 43.620058186s ago: executing program 4 (id=1165): r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt(r0, 0x10d, 0x10, &(0x7f00000000c0)="03a47f6338", 0x5) 43.436895797s ago: executing program 33 (id=1165): r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt(r0, 0x10d, 0x10, &(0x7f00000000c0)="03a47f6338", 0x5) 2.004000899s ago: executing program 2 (id=2102): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x1000000, &(0x7f0000000400)={[{@nouser_xattr}]}, 0x1, 0x17e, &(0x7f0000000240)="$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") mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='cifs\x00', 0x0, &(0x7f0000000400)) 1.95001789s ago: executing program 5 (id=2103): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a00)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x50}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}}, 0x0) 1.82453054s ago: executing program 2 (id=2106): r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="480000001400190d09004beafc0d8c560a8447608004000000000000000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 1.82335059s ago: executing program 5 (id=2107): r0 = syz_mount_image$btrfs(&(0x7f00000051c0), &(0x7f0000005200)='./file0\x00', 0x1204408, &(0x7f00000003c0)={[{@compress_force}, {@clear_cache}, {@nodatasum}, {@nossd}, {}, {@space_cache_v1}]}, 0x0, 0x51ab, &(0x7f000000a440)="$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") ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000c40)={0x2, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @usage, 0x0, 0x9}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa93}}) 1.543369361s ago: executing program 2 (id=2120): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) write$sndseq(r0, &(0x7f00000000c0)=[{0x41, 0x0, 0x0, 0xfd, @time, {}, {0xf}, @raw32={[0x4]}}], 0x1c) 1.484789592s ago: executing program 2 (id=2113): r0 = socket(0x40000000002, 0x3, 0x9) setsockopt(r0, 0xff, 0x3c, 0x0, 0x0) 1.237374464s ago: executing program 2 (id=2116): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x400, 0x0, 0x1000, 0x0, 0x11, "4415264a88b82c522013fb235902af2556c6b6"}) 1.107179954s ago: executing program 6 (id=2118): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x2, 0x18, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x17, 0x0, 0xa0, 0x0, @in6={0xa, 0x4e24, 0x1, @private2, 0x1}}]}, 0x38}}, 0x0) 1.071315205s ago: executing program 2 (id=2119): syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f0000000240)={[{@journal_async_commit}, {@heartbeat_none}, {@usrquota}, {@inode64}, {@heartbeat_none}, {@inode64}]}, 0x0, 0x4703, &(0x7f0000004800)="$eJzs212IXFcBB/BzJ6vZpMl2P9ImafoxSQQXLcumT9X6ENeqjabNh7bVVFlnN9vN6uzMujujBYPUIIiCoARBxQ+qQulLLYiBvtQiFPxAWoVSUbS+iBSq4INBG+jKzNybnXtntneyk7S0/f2gnb3n3nPumf3vPXfOPZNCrHZqYaW4sFIsVYrV2ftXbil+rlquL86FwqvktT4/vbkSOcn+tXPkfR/4yD23hPCHY1/70Orq6mpoGA5dHWj7+fy/T8+2vyYKmTqNdru31vLH+iMv/fwtr3REnhMhhB0d/WrYFEL42C9C2BxCGInLRuPXLSGEbSGEKITw6G/+9ePBfrrQ5uy9Lzx37MzhfWemHn/smQvzR9c9MArhu+XdN88vvrh/023Pv+MynR4AAF7RB48fufvo5IHwZBSGzg10fl7fGb8mn4/vfNun7np4YG3/Kr3Z9CqGCgAAABlr8//h6OUu63XJylqyJPjEAyfufipa229i+/p26K4jt79/8kC8/ht17L81Lvrnezc111Cz677Z9d+RTP3u679r53n4q8/+svLWjfc/6V9y3uEQFSZS24XCxEQIx6Za27uirYVydaX2zvur9crJjZ/3jSKdf3b1fm1Bv9f8RzPV89b/d3/i8z/bMtDPOxgL2b/axnax80+ZLtL5rz+W/+RLUU/5j2Xq5eV/x9Pbz/9qcz/vIHtGLkU6/9aFuK/9gGJrAGjk/82B/Px3ZNrPy//7U+cePbGB7/80xpnhqNHXwdQI8HJcvs5XmMhI598KIjV0xr/I9a7//2XyvybTfl7+d1b/8bu/9XH/X2/8H5/qp803j3T+rSCKqSPWrv+RQv71f22m/bz8f3vqz89+sq97dWf+jf6Pu//3JJ1/fCNOD57N32Sv4//OTPt5+e8au++hhQ30+8Nb4n4ORWGs7Vun5xq3sKG19ermlKaxe2kDJ3kTSOff+q2lLp2h1kvz+h/OH/93ZdrPy/+hPV9/z+m+vv/bffyfNP73JJ3/lmbZpeT/Uib/3Zn28/L/4em//+W+yzz+N7YPyr8n6fy3duxfe/5T6Gn+d12mft7zn32jTz3y1z7m/0n/kvMmz3+S5xDjUev5D92l879q3eN6vf/vydTLu/6/9Z/nn97fz/gfDXoC0Id0/ttahV0mgL3mf32m/bz8v3DPlz/+pw3M/5qf+AaT/Nvm/5tb5UeN/z1J57+9VZj6x1APNv/fvP9Hnbn/N5P/DZn28/K/cGhi4CuX+f7f6P94l0fZdErnP7TucY38f9/D/f/GTL28/L+496cv3tzX5/8QJs31Nyyd/9XrHte8/gfz878pUy8v/+9849dPPNhH/9/eR12y+bfu9anLKf5s3uv8v5hpPy//H42fP7v/Csz/bnX/70k6/9aq+aXkn53/7820n5f/9478YHngCjz/uUP+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGzIavw6HqDCR2i4UJiZCGIu3d4Wt0Uzp5PRMuTr7mZUQdsTlxTAazZerM6Xy9EKlenJuulQuV2dDuCbevyMMRivlam16sbR07cW2tkSn5krLtZm5Ui2EsDMuvz5sT9qaWagtlpaaxyZ1ropKn61Xa6WJ+srccth9sXxbUj6/XK0vXXexrasL1eWlU6XK9MmF5XdPTk5Ohj0X+zwSzT1Qm6vUWr1t7W3USeoOR21vprn7hrbzfbpaX66Uys3yG9vqlKuzpXJbnZvazldbrldmS7W56XJ1Pjlfsa1u23tr7t4b7xsPI6n3l9TNOhi/3n7o+EePHz7Qsb8YpfOu1BfnJrd3/5sAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4I3rydve9e0QwkBrqxBCOJj8EMX/pZy994Xnjp05vO/M1OOPPXNh/mi3YwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4PztwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYuZ+XKro4DsBnxve+FkgpbYRcBoaI6E7Cgn4RSeU1smWb1kGtEjIoCgwjWhYEQVC7qCBoFVT+BVELl62qTS1aGERQMTqTlzvCDS90zHkeGM4Mc++ZLwzcO3M+hwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALB+nN2x2JW1l3ZtXtq6+0PozM/9H0IYTZb3P+/tCD0hhK9fZk6HVdpCT1P/bybnxstXTX7v7R9/eH00WXv9xXeL63aHJB1qON6ZpOnQ0Nr736juDD6bHkxCSGMXQhQLY0/O1EIIHbELIYqfH+cvZr/v/8UuhCj6P9ztyu5/LXYhRLF196e+Wv6MR/Wcr18YbPzvb/UI3sYjOuvQ25NX3qVuauW9zN//k3zzPlgNsyeOvH8euwiimZ2bOhq7BgAA4O861yL/D1uW9+9fTkJPdzn3/9aU//c29b96/r/i3vYbYzNthRDbSmOT2fHwvnb63PhODVy9/bpmvKeq5P/VJv+vNvl/tcn/q03+X23yfzKv5P+V9PjmnsUXsYsgGvk/AABUz6HjE1P14ZHs5X/Tj85yXt+Xt/U8T39wa3rgUcO4kfzw33b42MSBg8Mj+X0vDwiurP+QLp39ns/3aG4Lk03zLlqt/9D7dGH+Wmf5E/U/nL9R1Fdc1/oPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAvdueehkEwCsPod1sRtdGqaMLCT4IPNDAiACnMaEAHEwZgIAQUMJBzlnuTZ3kBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA5/tXeV18f2mM9Foj0lR22bV/jqfZz9y3w/I+e9y4FQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADZ24EAGAAAAQJi/dR7tBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4KkAAAD//8Oayzs=") setxattr$incfs_metadata(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, 0x0, 0x0) 1.009002905s ago: executing program 3 (id=2122): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x2000, 0x0, 0x0, 0x7, 0x4, 0x0, {}, {}, {}, {0x0, 0x8000000}, 0x2, 0x3f0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x1, 0x0, 0x5}) 814.331156ms ago: executing program 6 (id=2124): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x541b, 0xfffffffffffffffe) 758.809066ms ago: executing program 5 (id=2125): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000000)={0x300}) 718.003056ms ago: executing program 3 (id=2127): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="800000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000580012800c0001006d6163766c616e00480002800800010010000000280005800a000400aaaaaaaaaabb00000a"], 0x80}}, 0x0) 674.602137ms ago: executing program 6 (id=2128): r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000040)={0xe, {{0xa, 0x4, 0x1003, @mcast2, 0x80000001}}, {{0xa, 0x0, 0xfffffffe, @remote}}}, 0x108) 506.337638ms ago: executing program 3 (id=2130): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x400, 0x0, 0x1000, 0x0, 0x11, "4415264a88b82c522013fb235902af2556c6b6"}) 504.521817ms ago: executing program 6 (id=2140): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x6}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0xa00}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0xa, 0x6}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x2, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {0x7, 0x0, 0x0, 0x6}, {0x5, 0x0, 0x7, 0x2, 0x0, 0x2}, {0x18, 0x9, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 434.916308ms ago: executing program 0 (id=2131): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x1000000, &(0x7f0000000400)={[{@nouser_xattr}]}, 0x1, 0x17e, &(0x7f0000000240)="$eJzsmDFP8kAYx/935YW8xvgBXBwkEWMsbVHDwoCJu4mocZNIJWgBAzUREgc/gKODiYuDX8DRycFvoYM6uTA61/TuoCcR0EET4/MbHn5Hnx7Xh+Q/FARB/Fmen14fT5ezBQPAOJJIqO9fjKiHa/0P54dzZ7mVi+v7q7vaxPFN/34MQBB8/vdjAG7zBny1DoL3dyfVZwG85+vgmFW+CQZT+TY4NpS7YNhSvqd5Pew3zd2K55o7da8UihUWOyxOWDL95+ucMJS08zHterPV3i96ntv4Rhk1v06eI6edT/+/urOxtPnZ4LCVZ8CwpjyLRHc2ciTa80/Gov2NH35+EhKS3yZRPgWXDDNaPsW0/Ej71YN0s9Wer1SLZbfs1hwns2QtWNaikxZBJOuQ/Psv8mlM2//fgN44i+Oo6PsNW9be2pH1o8TlIv84UtNyHWZ/fOBp5HWm7mPCUsaQdoIgCIIgCIIgCIIgCIIgiC8wBSbego7AWRXdbwEAAP//gYN3SA==") mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='cifs\x00', 0x0, &(0x7f0000000400)) 392.894128ms ago: executing program 3 (id=2132): munmap(&(0x7f0000340000/0x2000)=nil, 0x2000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xf) 338.078969ms ago: executing program 5 (id=2133): r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_OVERLAY(r0, 0x4004560e, &(0x7f0000000000)) 295.073159ms ago: executing program 3 (id=2134): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f00000046c0)) 275.158359ms ago: executing program 0 (id=2135): mlockall(0x6) io_setup(0x3fe, &(0x7f0000000100)) 225.388349ms ago: executing program 6 (id=2136): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f0000000880)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @empty, @loopback={0xfec0ffff00000000, 0xffff8881114a4aa8}, 0x40}}) 225.143449ms ago: executing program 5 (id=2137): r0 = syz_open_dev$video4linux(&(0x7f0000001040), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0285628, &(0x7f0000000040)={0x0, 0x0, 0x0, '\x00', 0x0}) 182.26557ms ago: executing program 3 (id=2138): r0 = syz_open_dev$sndpcmc(&(0x7f0000000200), 0x0, 0x200) ioctl$SNDRV_PCM_IOCTL_PAUSE(r0, 0x40044145, 0x0) 116.57126ms ago: executing program 0 (id=2139): r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x10001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000240)={0x1, @raw_data="a425e2f1a54d24f15247313660608d70566e425a6c36af37b33fac9d31c8a9c7044410d324b03e044e454d2092a62fea8f13441431ce248bfc73a6726ee61ba491d15d8f392ff66fe0b17f0e11f5d2367d5593205ab1efa97d40619a553e7da2518125b850a186ef691daa55c9e50ffaf6ddc25220ded32aeba4524cec1afbd17abba1d15ea05e97ed3dcad452db6e08a991e2c78b057f55de7fdeba7411ce65700c0a1ad7946ff7c355db87566e3e5abb7a37a06731ed19ddfa970bb58a27fd9fa194c092730319"}) 85.6601ms ago: executing program 0 (id=2141): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000003880)={{{@in6=@rand_addr=' \x01\x00', @in=@remote, 0x4e22, 0x81, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x3a}, {0x8, 0xfff, 0x9, 0x200000000000, 0x3ff, 0xe08, 0x4, 0x9}, {0x7, 0x3, 0x800, 0x10}, 0x4, 0x6e6bbd, 0x1, 0x1, 0x6}, {{@in=@multicast2, 0x4d6, 0x32}, 0xa, @in6=@private1={0xfc, 0x1, '\x00', 0x6}, 0x3503, 0x3, 0x1, 0xff, 0xfffff932, 0x62, 0x7f}}, 0xe8) 54.14606ms ago: executing program 0 (id=2142): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@migrate={0xec, 0x21, 0xd39, 0x0, 0x0, {{@in=@dev, @in=@multicast2}}, [@migrate={0x9c, 0x11, [{@in6=@mcast1, @in=@broadcast, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in6=@mcast1, @in=@broadcast, @in6=@dev, @in=@remote}]}]}, 0xec}}, 0x0) 44.27634ms ago: executing program 5 (id=2143): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/218, 0xda}], 0x1, 0xffff, 0x0) 11.40237ms ago: executing program 0 (id=2144): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x94, 0x0, 0x0, 0xfffff02c}, {0x80000006, 0xfc, 0x0, 0xfffffffd}]}, 0x10) 0s ago: executing program 6 (id=2145): prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) socket$qrtr(0x2a, 0x2, 0x0) kernel console output (not intermixed with test programs): tivated: batadv_slave_1 [ 64.312076][ T175] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.314317][ T175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.317605][ T175] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.319849][ T175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.333348][ T4303] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.335446][ T4303] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.337435][ T4296] Bluetooth: hci2: command 0x041b tx timeout [ 64.337478][ T4296] Bluetooth: hci0: command 0x041b tx timeout [ 64.337505][ T4296] Bluetooth: hci1: command 0x041b tx timeout [ 64.337531][ T4296] Bluetooth: hci4: command 0x041b tx timeout [ 64.337557][ T4296] Bluetooth: hci3: command 0x041b tx timeout [ 64.344711][ T4303] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.346563][ T4303] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.350665][ T4301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.352886][ T4301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.356296][ T4301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.363773][ T227] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.366191][ T227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.369463][ T227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.371927][ T227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.374074][ T227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.376254][ T227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.393314][ T4304] device veth0_macvtap entered promiscuous mode [ 64.413891][ T4301] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.415952][ T4301] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.418705][ T4301] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.420610][ T4301] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.424705][ T4304] device veth1_macvtap entered promiscuous mode [ 64.438928][ T227] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.441369][ T227] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.444546][ T227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.447801][ T227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.450298][ T227] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.452224][ T227] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.456029][ T4294] device veth0_vlan entered promiscuous mode [ 64.458978][ T4304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.461205][ T4304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.463331][ T4304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.465437][ T4304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.470874][ T4304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.475198][ T4304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.478315][ T4304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.480612][ T4304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.482775][ T4304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.485948][ T4304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.491244][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.493685][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.495942][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.499394][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.499472][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.503883][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.506411][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.510687][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.530924][ T4294] device veth1_vlan entered promiscuous mode [ 64.534358][ T4295] device veth0_macvtap entered promiscuous mode [ 64.552655][ T4304] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.554587][ T4304] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.557130][ T4304] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.558907][ T4304] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.599877][ T4295] device veth1_macvtap entered promiscuous mode [ 64.639615][ T252] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.641373][ T252] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.646502][ T227] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.648611][ T227] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.652421][ T4295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.654757][ T4295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.658739][ T4295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.660971][ T4295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.663014][ T4295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.665053][ T4295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.670107][ T4295] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.679202][ T252] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.681439][ T252] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.683486][ T252] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.685695][ T252] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.688836][ T252] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.690901][ T252] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.692927][ T252] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.695072][ T252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.713235][ T4295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.715379][ T4295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.723300][ T4295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.726175][ T4295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.728911][ T4295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.731372][ T4295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.735601][ T4295] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.745198][ T227] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.750314][ T227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.762110][ T4294] device veth0_macvtap entered promiscuous mode [ 64.766202][ T4295] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.768603][ T4295] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.770438][ T4295] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.772277][ T4295] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.784383][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.787524][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.789774][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.792827][ T4294] device veth1_macvtap entered promiscuous mode [ 64.802478][ T4324] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.804130][ T4324] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.820219][ T227] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.822436][ T227] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.838544][ T4294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.840941][ T4294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.843215][ T4294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.845583][ T4294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.849445][ T4294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.851815][ T4294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.853954][ T4294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.856268][ T4294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.865175][ T4294] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.876792][ T227] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.879254][ T227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.885116][ T227] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.888396][ T4324] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.890157][ T4324] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.892867][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.894853][ T227] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.901610][ T4294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.903813][ T4294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.905793][ T4294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.908547][ T4294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.910723][ T4294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.912824][ T4294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.914890][ T4294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.920872][ T4294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.924332][ T4294] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.939526][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.941661][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.943842][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.971564][ T4294] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.973337][ T4294] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.975133][ T4294] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.985961][ T4294] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.048476][ T175] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.050285][ T175] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.101044][ T175] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.174259][ T4385] loop2: detected capacity change from 0 to 64 [ 65.215722][ T227] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.217719][ T227] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.261003][ T227] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.368168][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.369927][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.372610][ T227] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.399770][ T175] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.401646][ T175] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.425589][ T175] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.494078][ T252] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.496189][ T252] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.502530][ T227] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.605928][ T4400] loop4: detected capacity change from 0 to 1764 [ 65.636045][ T4407] capability: warning: `syz.0.1' uses deprecated v2 capabilities in a way that may be insecure [ 65.897612][ T4423] random: crng reseeded on system resumption [ 66.225569][ T4452] loop4: detected capacity change from 0 to 16 [ 66.260778][ T4452] erofs: (device loop4): mounted with root inode @ nid 36. [ 66.421869][ T4300] Bluetooth: hci3: command 0x040f tx timeout [ 66.423331][ T4300] Bluetooth: hci4: command 0x040f tx timeout [ 66.424820][ T4300] Bluetooth: hci1: command 0x040f tx timeout [ 66.426086][ T4300] Bluetooth: hci0: command 0x040f tx timeout [ 66.427541][ T4300] Bluetooth: hci2: command 0x040f tx timeout [ 66.725141][ T4486] loop0: detected capacity change from 0 to 512 [ 66.812066][ T4486] EXT4-fs error (device loop0): ext4_get_branch:178: inode #13: block 33619980: comm syz.0.52: invalid block [ 66.821076][ T4486] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:477: comm syz.0.52: Invalid block bitmap block 0 in block_group 0 [ 66.839173][ T4486] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 66.857260][ T4486] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz.0.52: attempt to clear invalid blocks 983261 len 1 [ 66.860586][ T4497] netlink: 36 bytes leftover after parsing attributes in process `syz.2.57'. [ 66.862564][ T4497] netlink: 4 bytes leftover after parsing attributes in process `syz.2.57'. [ 66.882419][ T4486] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.52: invalid indirect mapped block 2683928664 (level 0) [ 66.889521][ T4486] EXT4-fs error (device loop0): __ext4_get_inode_loc:4506: comm syz.0.52: Invalid inode table block 0 in block_group 0 [ 66.892268][ T4499] netlink: 'syz.2.58': attribute type 3 has an invalid length. [ 66.926205][ T4486] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5885: Corrupt filesystem [ 66.929450][ T4486] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 66.933950][ T4486] EXT4-fs error (device loop0): __ext4_get_inode_loc:4506: comm syz.0.52: Invalid inode table block 0 in block_group 0 [ 66.940779][ T4486] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5885: Corrupt filesystem [ 66.943260][ T4486] EXT4-fs error (device loop0): ext4_truncate:4311: inode #13: comm syz.0.52: mark_inode_dirty error [ 66.948533][ T4486] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 66.961890][ T4486] EXT4-fs error (device loop0): __ext4_get_inode_loc:4506: comm syz.0.52: Invalid inode table block 0 in block_group 0 [ 66.967283][ T4486] EXT4-fs (loop0): 1 truncate cleaned up [ 66.968514][ T4486] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 67.005666][ T4486] EXT4-fs error (device loop0): __ext4_get_inode_loc:4506: comm syz.0.52: Invalid inode table block 0 in block_group 0 [ 67.026711][ T4486] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5885: Corrupt filesystem [ 67.099747][ T4509] netlink: 'syz.3.61': attribute type 32 has an invalid length. [ 67.125095][ T4294] EXT4-fs (loop0): unmounting filesystem. [ 67.310232][ T4526] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 67.315762][ T4526] CIFS mount error: No usable UNC path provided in device string! [ 67.315762][ T4526] [ 67.350529][ T4530] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 67.372125][ T4526] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 67.805648][ T4571] netlink: 28 bytes leftover after parsing attributes in process `syz.1.91'. [ 67.884465][ T4577] ip6t_REJECT: ECHOREPLY is not supported [ 67.997372][ T4573] loop0: detected capacity change from 0 to 4096 [ 67.999037][ T4573] ======================================================= [ 67.999037][ T4573] WARNING: The mand mount option has been deprecated and [ 67.999037][ T4573] and is ignored by this kernel. Remove the mand [ 67.999037][ T4573] option from the mount to silence this warning. [ 67.999037][ T4573] ======================================================= [ 68.041680][ T4573] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 68.103487][ T4594] netlink: 24 bytes leftover after parsing attributes in process `syz.3.103'. [ 68.122575][ T4594] netlink: 5 bytes leftover after parsing attributes in process `syz.3.103'. [ 68.155470][ T4573] ntfs3: loop0: failed to convert "c46c" to cp950 [ 68.492807][ T4613] xt_TCPMSS: Only works on TCP SYN packets [ 68.499129][ T4296] Bluetooth: hci2: command 0x0419 tx timeout [ 68.500693][ T4296] Bluetooth: hci0: command 0x0419 tx timeout [ 68.501925][ T4296] Bluetooth: hci1: command 0x0419 tx timeout [ 68.503335][ T4296] Bluetooth: hci4: command 0x0419 tx timeout [ 68.504536][ T4296] Bluetooth: hci3: command 0x0419 tx timeout [ 68.579675][ T4617] loop0: detected capacity change from 0 to 164 [ 68.588788][ T4617] Unable to read rock-ridge attributes [ 68.623199][ T4589] loop1: detected capacity change from 0 to 32768 [ 68.746917][ T4589] XFS (loop1): Mounting V5 Filesystem [ 68.888208][ T4589] XFS (loop1): Ending clean mount [ 68.992119][ T4647] netlink: 60 bytes leftover after parsing attributes in process `syz.0.123'. [ 68.993989][ T4647] netlink: 28 bytes leftover after parsing attributes in process `syz.0.123'. [ 68.995918][ T4647] netlink: 28 bytes leftover after parsing attributes in process `syz.0.123'. [ 69.031840][ T4649] netlink: 'syz.3.124': attribute type 3 has an invalid length. [ 69.035760][ T4647] netlink: 32 bytes leftover after parsing attributes in process `syz.0.123'. [ 69.084298][ T4301] XFS (loop1): Unmounting Filesystem [ 69.141233][ T4659] netlink: 'syz.0.127': attribute type 1 has an invalid length. [ 69.149585][ T4658] netlink: 'syz.2.130': attribute type 15 has an invalid length. [ 69.411759][ T4679] netlink: 'syz.0.140': attribute type 1 has an invalid length. [ 69.413660][ T4679] netlink: 161700 bytes leftover after parsing attributes in process `syz.0.140'. [ 69.612527][ T4692] overlayfs: unrecognized mount option "\" or missing value [ 69.618655][ T1516] cfg80211: failed to load regulatory.db [ 69.890110][ T4712] loop4: detected capacity change from 0 to 64 [ 70.111261][ T4722] loop1: detected capacity change from 0 to 1764 [ 70.212703][ T4730] loop0: detected capacity change from 0 to 256 [ 70.396319][ T4694] loop2: detected capacity change from 0 to 32768 [ 70.409771][ T4694] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.146 (4694) [ 70.412304][ T4740] loop3: detected capacity change from 0 to 256 [ 70.455902][ T4694] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 70.463435][ T4694] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm [ 70.465294][ T4694] BTRFS info (device loop2): using free space tree [ 70.473693][ T4740] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cb2, utbl_chksum : 0xe619d30d) [ 70.517980][ T4749] loop0: detected capacity change from 0 to 128 [ 70.575070][ T4740] exFAT-fs (loop3): hint_cluster is invalid (521) [ 70.588477][ T4740] exFAT-fs (loop3): error, invalid access to FAT (entry 0x00000208) [ 70.590325][ T4740] exFAT-fs (loop3): Filesystem has been set read-only [ 70.591910][ T4740] exFAT-fs (loop3): error, failed to bmap (inode : 00000000465268ef iblock : 9, err : -5) [ 70.604833][ T4740] exFAT-fs (loop3): error, invalid access to FAT (entry 0x00000208) [ 70.615869][ T4740] exFAT-fs (loop3): error, invalid access to FAT (entry 0x00000208) [ 70.821295][ T4694] BTRFS info (device loop2): enabling ssd optimizations [ 70.872054][ T4779] AppArmor: change_hat: Invalid input '\' [ 70.922513][ T4694] nfs: Deprecated parameter 'nointr' [ 71.035908][ T4303] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 71.312766][ T4811] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (126) [ 71.464803][ T4818] Illegal XDP return value 2027660536 on prog (id 7) dev N/A, expect packet loss! [ 71.563507][ T4828] loop1: detected capacity change from 0 to 512 [ 71.703876][ T4828] Quota error (device loop1): do_check_range: Getting dqdh_entries 1536 out of range 0-14 [ 71.708571][ T4828] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 71.710675][ T4828] EXT4-fs error (device loop1): ext4_acquire_dquot:6801: comm syz.1.204: Failed to acquire dquot type 1 [ 71.753459][ T4828] EXT4-fs (loop1): 1 truncate cleaned up [ 71.754754][ T4828] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 71.899171][ T4301] EXT4-fs (loop1): unmounting filesystem. [ 71.948845][ T4851] random: crng reseeded on system resumption [ 72.242754][ T4873] random: crng reseeded on system resumption [ 72.281383][ T4876] __nla_validate_parse: 4 callbacks suppressed [ 72.281397][ T4876] netlink: 12 bytes leftover after parsing attributes in process `syz.4.222'. [ 72.473990][ T4896] netlink: 'syz.4.232': attribute type 21 has an invalid length. [ 72.592822][ T4895] loop2: detected capacity change from 0 to 4096 [ 72.940084][ T4928] autofs4:pid:4928:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(3.1), cmd(0xc0189371) [ 72.940117][ T4928] autofs4:pid:4928:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189371) [ 72.998334][ T4932] netlink: 'syz.1.251': attribute type 13 has an invalid length. [ 73.084268][ T27] audit: type=1326 audit(73.050:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4936 comm="syz.2.253" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8894b328 code=0x0 [ 73.147547][ T4943] loop1: detected capacity change from 0 to 512 [ 73.160075][ T4944] loop0: detected capacity change from 0 to 2048 [ 73.178754][ T4943] EXT2-fs (loop1): warning: mounting ext3 filesystem as ext2 [ 73.187264][ T4944] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 73.224670][ T4943] EXT2-fs (loop1): error: ext2_valid_block_bitmap: Invalid block bitmap - block_group = 0, block = 252 [ 73.240431][ T4943] EXT2-fs (loop1): error: ext2_free_blocks: bit already cleared for block 28 [ 73.244631][ T4944] syz.0.257: attempt to access beyond end of device [ 73.244631][ T4944] loop0: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 73.244691][ T4943] EXT2-fs (loop1): error: ext2_free_blocks: bit already cleared for block 29 [ 73.248527][ T4949] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 73.285078][ T4943] EXT2-fs (loop1): error: ext2_free_blocks: bit already cleared for block 30 [ 73.288379][ T4944] syz.0.257: attempt to access beyond end of device [ 73.288379][ T4944] loop0: rw=0, sector=33554430, nr_sectors = 2 limit=2048 [ 73.292493][ T4943] EXT2-fs (loop1): error: ext2_free_blocks: bit already cleared for block 31 [ 73.316708][ T4943] EXT2-fs (loop1): error: ext2_free_blocks: bit already cleared for block 32 [ 73.327078][ T4943] EXT2-fs (loop1): error: ext2_free_blocks: bit already cleared for block 33 [ 73.329684][ T4944] NILFS (loop0): I/O error reading meta-data file (ino=6, block-offset=3) [ 73.331559][ T4944] NILFS (loop0): error -5 reading inode: ino=12 [ 73.336365][ T4943] EXT2-fs (loop1): error: ext2_free_blocks: bit already cleared for block 34 [ 73.350281][ T4943] EXT2-fs (loop1): error: ext2_free_blocks: bit already cleared for block 35 [ 73.372802][ T4943] EXT2-fs (loop1): error: ext2_free_branches: Read failure, inode=16, block=1564416 [ 73.812363][ T4996] loop0: detected capacity change from 0 to 764 [ 73.815792][ T4997] process 'syz.3.281' launched '/dev/fd/-1' with NULL argv: empty string added [ 73.846801][ T4991] loop4: detected capacity change from 0 to 4096 [ 73.850476][ T4996] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 73.855724][ T4991] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 73.972316][ T4991] ntfs3: loop4: ino=5, "/" directory corrupted [ 73.989253][ T5004] loop1: detected capacity change from 0 to 2048 [ 73.996053][ T5004] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 74.047396][ T5004] syz.1.286: attempt to access beyond end of device [ 74.047396][ T5004] loop1: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 74.057239][ T5009] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 74.113267][ T5012] loop3: detected capacity change from 0 to 256 [ 74.134927][ T5012] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 74.229143][ T5017] netlink: 'syz.0.292': attribute type 29 has an invalid length. [ 74.246966][ T5017] netlink: 'syz.0.292': attribute type 29 has an invalid length. [ 74.390919][ T5023] netlink: 108 bytes leftover after parsing attributes in process `syz.3.295'. [ 74.668974][ T5041] loop4: detected capacity change from 0 to 1024 [ 74.694118][ T5006] loop2: detected capacity change from 0 to 32768 [ 74.760465][ T5041] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 74.781828][ T5041] EXT4-fs error (device loop4): ext4_get_first_dir_block:3605: inode #11: comm syz.4.304: directory missing '..' [ 74.836761][ T5053] device gre0 entered promiscuous mode [ 74.907041][ T4304] EXT4-fs (loop4): unmounting filesystem. [ 75.106097][ T5068] netlink: 28 bytes leftover after parsing attributes in process `syz.0.316'. [ 75.134659][ T5068] netlink: 28 bytes leftover after parsing attributes in process `syz.0.316'. [ 75.554244][ T5054] loop3: detected capacity change from 0 to 32768 [ 75.584883][ T5054] (syz.3.308,5054,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 75.602755][ T5054] (syz.3.308,5054,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 75.649914][ T5054] JBD2: Ignoring recovery information on journal [ 75.706103][ T5054] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 75.794493][ T5054] (syz.3.308,5054,1):ocfs2_parse_options:1458 ERROR: Invalid heartbeat mount options [ 75.893541][ T5128] netlink: 15 bytes leftover after parsing attributes in process `syz.4.344'. [ 75.896227][ T5128] netlink: 15 bytes leftover after parsing attributes in process `syz.4.344'. [ 75.973124][ T4295] ocfs2: Unmounting device (7,3) on (node local) [ 75.996210][ T5129] delete_channel: no stack [ 76.047260][ T5137] xt_TCPMSS: Only works on TCP SYN packets [ 76.222004][ T5150] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 76.277344][ T5156] netlink: 20 bytes leftover after parsing attributes in process `syz.3.358'. [ 76.996030][ T5213] netlink: 'syz.0.384': attribute type 21 has an invalid length. [ 76.997910][ T5213] netlink: 4 bytes leftover after parsing attributes in process `syz.0.384'. [ 77.305625][ T5182] loop2: detected capacity change from 0 to 40427 [ 77.343523][ T5182] F2FS-fs (loop2): invalid crc value [ 77.368800][ T5182] F2FS-fs (loop2): Found nat_bits in checkpoint [ 77.423083][ T5182] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 77.481328][ T5249] Device name cannot be null; rc = [-22] [ 77.543386][ T5255] syz.3.404 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 77.559043][ T5257] mmap: syz.1.405 (5257): VmData 54267904 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 77.609907][ T4303] syz-executor: attempt to access beyond end of device [ 77.609907][ T4303] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 77.697611][ T5268] loop4: detected capacity change from 0 to 512 [ 77.714514][ T5265] loop3: detected capacity change from 0 to 2048 [ 77.741731][ T5268] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 77.806967][ T5276] netlink: 100 bytes leftover after parsing attributes in process `syz.2.408'. [ 77.833635][ T5265] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 78.014323][ T4304] EXT4-fs (loop4): unmounting filesystem. [ 78.095514][ T5292] netlink: 144 bytes leftover after parsing attributes in process `syz.4.417'. [ 78.163205][ T5296] loop3: detected capacity change from 0 to 64 [ 78.362391][ T5306] loop4: detected capacity change from 0 to 2048 [ 78.397016][ T5306] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 78.410053][ T5306] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 78.589129][ T5327] loop4: detected capacity change from 0 to 128 [ 78.601719][ T5327] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 78.607400][ T5329] binder: 5326 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 78.607423][ T5329] binder: 5326:5329 ioctl c018620c 20000040 returned -22 [ 78.611443][ T5327] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 78.920436][ T5342] loop4: detected capacity change from 0 to 4096 [ 78.937054][ T5342] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 78.972842][ T5342] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 79.126335][ T5360] netlink: 'syz.3.454': attribute type 27 has an invalid length. [ 79.134040][ T5360] netlink: 28 bytes leftover after parsing attributes in process `syz.3.454'. [ 79.139754][ T4324] ntfs3: loop4: ntfs3_write_inode r=5 failed, -22. [ 79.143649][ T4304] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 79.281613][ T5332] loop1: detected capacity change from 0 to 32768 [ 79.336147][ T5332] jfs_strtoUCS: char2uni returned -22. [ 79.343909][ T5332] charset = iso8859-6, char = 0xfc [ 79.355532][ T5375] netlink: 36 bytes leftover after parsing attributes in process `syz.4.460'. [ 79.645141][ T5395] loop4: detected capacity change from 0 to 64 [ 79.932077][ T5418] loop4: detected capacity change from 0 to 256 [ 79.933923][ T5418] exfat: Deprecated parameter 'utf8' [ 79.935276][ T5419] netlink: 4 bytes leftover after parsing attributes in process `syz.0.483'. [ 79.963681][ T5418] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 80.219312][ T5437] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 80.459532][ T5464] loop2: detected capacity change from 0 to 8 [ 80.700301][ T5480] Soft offlining pfn 0x1356c9 at process virtual address 0x204c9000 [ 80.830943][ T5480] Memory failure: 0x1356c9: unhandlable page. [ 80.859581][ T5494] x_tables: unsorted entry at hook 2 [ 81.032509][ T5500] loop3: detected capacity change from 0 to 4096 [ 81.046438][ T5500] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 81.072568][ T5510] loop1: detected capacity change from 0 to 8 [ 81.107862][ T5510] SQUASHFS error: Failed to read block 0x730: -5 [ 81.109269][ T5510] SQUASHFS error: Unable to read metadata cache entry [72e] [ 81.394698][ T5528] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 81.495064][ T5535] netlink: 24 bytes leftover after parsing attributes in process `syz.3.540'. [ 81.518583][ T5504] loop4: detected capacity change from 0 to 32768 [ 81.528565][ T5504] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.525 (5504) [ 81.540300][ T5504] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 81.542606][ T5504] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 81.554895][ T5504] BTRFS info (device loop4): doing ref verification [ 81.556343][ T5504] BTRFS info (device loop4): metadata ratio 65535 [ 81.567971][ T5504] BTRFS info (device loop4): using free space tree [ 81.934615][ T5583] loop2: detected capacity change from 0 to 8 [ 81.979451][ T5504] BTRFS info (device loop4): enabling ssd optimizations [ 82.025419][ T5583] UBIFS error (pid: 5583): cannot open "./file2", error -22 [ 82.064398][ T4304] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 82.479760][ T5626] usb usb8: usbfs: process 5626 (syz.0.575) did not claim interface 0 before use [ 82.598699][ T5637] netlink: 8 bytes leftover after parsing attributes in process `syz.1.581'. [ 82.770126][ T5651] cgroup: No subsys list or none specified [ 82.781615][ T5655] loop0: detected capacity change from 0 to 256 [ 82.804590][ T5655] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 2194728288258) [ 82.862591][ T5655] exFAT-fs (loop0): error, found bogus dentry(3) beyond unused empty group(2) (start_clu : 5, cur_clu : 5) [ 82.864983][ T5655] exFAT-fs (loop0): Filesystem has been set read-only [ 83.193430][ T5687] netlink: 'syz.4.604': attribute type 10 has an invalid length. [ 83.205535][ T5687] bridge0: port 3(team0) entered blocking state [ 83.213844][ T5687] bridge0: port 3(team0) entered disabled state [ 83.216517][ T5687] device team0 entered promiscuous mode [ 83.223394][ T5687] device team_slave_0 entered promiscuous mode [ 83.224821][ T5687] device team_slave_1 entered promiscuous mode [ 83.237129][ T5687] bridge0: port 3(team0) entered blocking state [ 83.239520][ T5687] bridge0: port 3(team0) entered forwarding state [ 83.242380][ T5689] netlink: 'syz.1.605': attribute type 2 has an invalid length. [ 83.444391][ T5705] loop3: detected capacity change from 0 to 1764 [ 83.689207][ T5731] snd_dummy snd_dummy.0: control 0:0:0:syz1:0 is already present [ 83.744294][ T5735] CIFS: iocharset name too long [ 83.833092][ T5741] loop4: detected capacity change from 0 to 1764 [ 83.868250][ T5741] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 83.953787][ T5752] netlink: 12 bytes leftover after parsing attributes in process `syz.2.637'. [ 83.955821][ T5752] netlink: 48 bytes leftover after parsing attributes in process `syz.2.637'. [ 84.006976][ T5758] netlink: 40 bytes leftover after parsing attributes in process `syz.3.641'. [ 84.009209][ T5758] netlink: 40 bytes leftover after parsing attributes in process `syz.3.641'. [ 84.092203][ T5762] loop2: detected capacity change from 0 to 256 [ 84.222316][ T5769] usb usb8: usbfs: process 5769 (syz.4.646) did not claim interface 9 before use [ 84.232320][ T5774] loop1: detected capacity change from 0 to 64 [ 84.247297][ T5767] loop0: detected capacity change from 0 to 1764 [ 85.104821][ T5787] loop1: detected capacity change from 0 to 32768 [ 85.137595][ T5787] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.654 (5787) [ 85.145393][ T5836] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 85.165114][ T5787] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 85.172891][ T5787] BTRFS info (device loop1): using crc32c (crc32c-generic) checksum algorithm [ 85.174751][ T5787] BTRFS info (device loop1): using free space tree [ 85.371974][ T5787] BTRFS info (device loop1): enabling ssd optimizations [ 85.442400][ T5787] nfs: Deprecated parameter 'nointr' [ 85.530007][ T4301] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 85.562540][ T5882] loop3: detected capacity change from 0 to 64 [ 85.681295][ T5880] loop4: detected capacity change from 0 to 4096 [ 85.695643][ T5880] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 85.793201][ T5880] ntfs3: loop4: failed to convert "c46c" to cp950 [ 85.982657][ T5877] loop2: detected capacity change from 0 to 32768 [ 86.006121][ T5904] loop3: detected capacity change from 0 to 164 [ 86.040667][ T5877] XFS (loop2): Mounting V5 Filesystem [ 86.112254][ T5877] XFS (loop2): Ending clean mount [ 86.164927][ T4303] XFS (loop2): Unmounting Filesystem [ 86.289745][ T5929] loop1: detected capacity change from 0 to 256 [ 86.314506][ T5929] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1a97a7bd, utbl_chksum : 0xe619d30d) [ 86.518130][ T5942] loop4: detected capacity change from 0 to 1764 [ 86.553971][ T5942] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 87.361639][ T5954] loop0: detected capacity change from 0 to 40427 [ 87.408828][ T5954] F2FS-fs (loop0): invalid crc value [ 87.440709][ T5954] F2FS-fs (loop0): Found nat_bits in checkpoint [ 87.526956][ T5954] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 87.616349][ T5982] loop4: detected capacity change from 0 to 32768 [ 87.633540][ T5984] loop3: detected capacity change from 0 to 32768 [ 87.646534][ T5984] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.739 (5984) [ 87.650693][ T5982] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz.4.737 (5982) [ 87.673800][ T5984] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 87.675976][ T5984] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 87.687127][ T5984] BTRFS info (device loop3): using free space tree [ 87.815622][ T5981] loop2: detected capacity change from 0 to 40427 [ 87.818773][ T5981] F2FS-fs (loop2): build fault injection attr: rate: 4, type: 0x3ffff [ 87.820748][ T5981] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x4 [ 87.827610][ T5981] F2FS-fs (loop2): invalid crc value [ 87.834121][ T5981] F2FS-fs (loop2) : inject page alloc in f2fs_grab_cache_page of __get_meta_page+0x1f8/0x6b8 [ 87.837369][ T5981] F2FS-fs (loop2) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x3f8/0x9b8 [ 87.851207][ T5981] F2FS-fs (loop2): Found nat_bits in checkpoint [ 87.860387][ T5981] F2FS-fs (loop2) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x3f8/0x9b8 [ 87.864085][ T5981] F2FS-fs (loop2) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x3f8/0x9b8 [ 87.866560][ T5981] F2FS-fs (loop2) : inject page alloc in f2fs_grab_cache_page of __get_meta_page+0x1f8/0x6b8 [ 87.915646][ T5981] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 87.930914][ T5981] F2FS-fs (loop2) : inject page alloc in f2fs_grab_cache_page of f2fs_get_read_data_page+0xfc/0x6f8 [ 88.013192][ T4303] F2FS-fs (loop2) : inject page alloc in f2fs_grab_cache_page of f2fs_grab_meta_page+0x70/0x21c [ 88.026733][ T5984] BTRFS info (device loop3): enabling ssd optimizations [ 88.218888][ T4295] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 88.378448][ T6055] loop4: detected capacity change from 0 to 64 [ 88.526467][ T6066] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 88.534145][ T6066] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 88.536124][ T6066] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 88.765959][ T6086] loop1: detected capacity change from 0 to 1024 [ 88.927394][ T4301] hfsplus: bad catalog entry type [ 88.930276][ T4301] hfsplus: bad catalog entry type [ 88.931646][ T6098] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 89.063768][ T6107] loop0: detected capacity change from 0 to 512 [ 89.092515][ T6107] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 89.112563][ T6107] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (28729!=33349) [ 89.149952][ T6107] EXT4-fs (loop0): orphan cleanup on readonly fs [ 89.151666][ T6107] EXT4-fs error (device loop0): ext4_orphan_get:1426: comm syz.0.787: bad orphan inode 15 [ 89.155378][ T6107] ext4_test_bit(bit=14, block=20) = 0 [ 89.160254][ T6107] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 89.200848][ T4294] EXT4-fs (loop0): unmounting filesystem. [ 89.342077][ T6119] loop2: detected capacity change from 0 to 4096 [ 89.390471][ T6119] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 89.474667][ T4303] EXT4-fs (loop2): unmounting filesystem. [ 89.569126][ T6136] netlink: 'syz.0.802': attribute type 1 has an invalid length. [ 89.834587][ T4296] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 89.839841][ T4296] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 89.842573][ T4296] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 89.844919][ T4296] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 89.847755][ T4296] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 89.849513][ T4296] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 89.919747][ T227] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.956821][ T6144] netlink: 144 bytes leftover after parsing attributes in process `syz.0.805'. [ 90.129631][ T227] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.231038][ T227] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.439427][ T6196] loop0: detected capacity change from 0 to 512 [ 90.449407][ T227] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.458532][ T6196] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 90.460740][ T6196] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c01c, mo2=0002] [ 90.463276][ T6196] EXT4-fs (loop0): orphan cleanup on readonly fs [ 90.472547][ T6196] EXT4-fs warning (device loop0): ext4_block_to_path:107: block 3279949761 > max in inode 13 [ 90.474735][ T6196] EXT4-fs warning (device loop0): ext4_block_to_path:107: block 3279949762 > max in inode 13 [ 90.477945][ T6196] EXT4-fs (loop0): 1 truncate cleaned up [ 90.479100][ T6196] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 90.502530][ T6202] loop2: detected capacity change from 0 to 1024 [ 90.511940][ T6196] EXT4-fs warning (device loop0): dx_probe:893: inode #2: comm syz.0.827: dx entry: limit 65535 != root limit 120 [ 90.514804][ T6196] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.827: Corrupt directory, running e2fsck is recommended [ 90.546450][ T4294] EXT4-fs (loop0): unmounting filesystem. [ 90.680367][ T9] hfsplus: b-tree write err: -5, ino 4 [ 90.730328][ T6212] loop3: detected capacity change from 0 to 4096 [ 90.805290][ T6221] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 90.915627][ T6152] chnl_net:caif_netlink_parms(): no params data found [ 90.943366][ T6228] loop4: detected capacity change from 0 to 512 [ 90.945164][ T6228] EXT4-fs: Ignoring removed orlov option [ 90.964813][ T6228] EXT4-fs: Ignoring removed i_version option [ 90.966118][ T6228] EXT4-fs: Ignoring removed nomblk_io_submit option [ 91.008653][ T6228] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 91.010229][ T6228] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e118, mo2=0002] [ 91.012686][ T6228] EXT4-fs (loop4): orphan cleanup on readonly fs [ 91.014010][ T6228] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=0 [ 91.056732][ T6228] EXT4-fs warning (device loop4): ext4_enable_quotas:7036: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 91.059375][ T78] block nbd0: Attempted send on invalid socket [ 91.061758][ T78] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 91.062843][ T6228] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 91.077643][ T6228] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.840: bg 0: block 40: padding at end of block bitmap is not set [ 91.091881][ T6228] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 91.102115][ T6228] EXT4-fs (loop4): 1 truncate cleaned up [ 91.103318][ T6228] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 91.138534][ T6228] EXT4-fs error (device loop4): ext4_encrypted_get_link:46: inode #16: comm syz.4.840: bad symlink. [ 91.191032][ T6246] loop2: detected capacity change from 0 to 512 [ 91.196530][ T4304] EXT4-fs (loop4): unmounting filesystem. [ 91.205781][ T6246] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002] [ 91.220215][ T6246] System zones: 1-12 [ 91.236242][ T6246] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.847: invalid indirect mapped block 1 (level 1) [ 91.254124][ T6246] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.847: invalid indirect mapped block 7 (level 2) [ 91.261013][ T6246] EXT4-fs (loop2): 1 truncate cleaned up [ 91.262189][ T6246] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 91.296937][ T6248] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 361: padding at end of block bitmap is not set [ 91.323747][ T4303] EXT4-fs (loop2): unmounting filesystem. [ 91.339715][ T6152] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.341248][ T6152] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.343351][ T6152] device bridge_slave_0 entered promiscuous mode [ 91.370788][ T6152] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.372305][ T6152] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.374528][ T6152] device bridge_slave_1 entered promiscuous mode [ 91.446122][ T6258] xt_recent: hitcount (4294967295) is larger than allowed maximum (255) [ 91.544976][ T6255] IPv6: Can't replace route, no match found [ 91.562990][ T6152] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.575408][ T6152] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.672047][ T6270] loop2: detected capacity change from 0 to 1024 [ 91.673886][ T6270] EXT4-fs: Ignoring removed nomblk_io_submit option [ 91.731172][ T6152] team0: Port device team_slave_0 added [ 91.739288][ T6152] team0: Port device team_slave_1 added [ 91.768964][ T6270] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 91.842018][ T6152] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.843528][ T6152] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.864821][ T6152] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.886315][ T4303] EXT4-fs (loop2): unmounting filesystem. [ 91.936750][ T4300] Bluetooth: hci2: command 0x0409 tx timeout [ 91.954990][ T6152] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.968623][ T6152] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.973756][ T6152] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.217999][ T6306] netlink: 12 bytes leftover after parsing attributes in process `syz.0.871'. [ 92.329027][ T6152] device hsr_slave_0 entered promiscuous mode [ 92.377055][ T6152] device hsr_slave_1 entered promiscuous mode [ 92.427622][ T6152] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.429249][ T6152] Cannot create hsr debugfs directory [ 92.536540][ T6324] loop3: detected capacity change from 0 to 512 [ 92.605058][ T6324] Quota error (device loop3): do_check_range: Getting dqdh_entries 1536 out of range 0-14 [ 92.609883][ T6324] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 92.611987][ T6324] EXT4-fs error (device loop3): ext4_acquire_dquot:6801: comm syz.3.878: Failed to acquire dquot type 1 [ 92.623437][ T6324] EXT4-fs (loop3): 1 truncate cleaned up [ 92.624520][ T6324] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 92.663407][ T6291] loop2: detected capacity change from 0 to 32768 [ 92.665832][ T6291] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.864 (6291) [ 92.677776][ T6291] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 92.680063][ T6291] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm [ 92.681841][ T6291] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 92.717003][ T4295] EXT4-fs (loop3): unmounting filesystem. [ 92.719482][ T6291] BTRFS info (device loop2): use zstd compression, level 3 [ 92.720965][ T6291] BTRFS info (device loop2): using free space tree [ 92.829469][ T6291] BTRFS info (device loop2): enabling ssd optimizations [ 93.061732][ T6372] loop3: detected capacity change from 0 to 1024 [ 93.075163][ T4303] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 93.098452][ T6372] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 93.158867][ T6372] EXT4-fs error (device loop3): ext4_get_first_dir_block:3605: inode #11: comm syz.3.888: directory missing '..' [ 93.194750][ T4295] EXT4-fs (loop3): unmounting filesystem. [ 93.203064][ T27] audit: type=1326 audit(93.170:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6377 comm="syz.4.901" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f14b328 code=0x0 [ 93.256368][ T6369] netlink: 108 bytes leftover after parsing attributes in process `syz.0.886'. [ 93.381023][ T6152] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 93.773902][ T6152] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 93.810023][ T6152] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 93.985327][ T227] device hsr_slave_0 left promiscuous mode [ 94.016870][ T4300] Bluetooth: hci2: command 0x041b tx timeout [ 94.021160][ T227] device hsr_slave_1 left promiscuous mode [ 94.082356][ T6428] usb usb8: usbfs: process 6428 (syz.2.906) did not claim interface 0 before use [ 94.106907][ T227] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.108690][ T227] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.111861][ T227] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.113346][ T227] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.115290][ T227] device bridge_slave_1 left promiscuous mode [ 94.118672][ T227] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.168060][ T227] device bridge_slave_0 left promiscuous mode [ 94.169540][ T227] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.302793][ T6438] loop2: detected capacity change from 0 to 1764 [ 94.347121][ T227] device veth1_macvtap left promiscuous mode [ 94.351056][ T227] device veth0_macvtap left promiscuous mode [ 94.353498][ T227] device veth1_vlan left promiscuous mode [ 94.354953][ T227] device veth0_vlan left promiscuous mode [ 94.480746][ T6443] loop2: detected capacity change from 0 to 128 [ 94.503657][ T6443] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 94.528510][ T6443] EXT4-fs error (device loop2): ext4_empty_dir:3139: inode #2: comm syz.2.915: Directory block failed checksum [ 94.570585][ T4303] EXT4-fs (loop2): unmounting filesystem. [ 96.107604][ T4300] Bluetooth: hci2: command 0x040f tx timeout [ 96.239896][ T227] team0 (unregistering): Port device team_slave_1 removed [ 96.420041][ T227] team0 (unregistering): Port device team_slave_0 removed [ 96.598477][ T227] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 96.798536][ T227] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 98.176791][ T4296] Bluetooth: hci2: command 0x0419 tx timeout [ 99.262011][ T227] bond0 (unregistering): Released all slaves [ 99.490401][ T6152] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 99.735326][ T6152] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.755297][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 99.757403][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 99.781494][ T6152] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.815992][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 99.818397][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 99.820484][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.822026][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.824723][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 99.837763][ T6159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 99.839981][ T6159] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 99.841887][ T6159] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.843333][ T6159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.861845][ T6159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 99.884487][ T6159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 99.891370][ T6159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 99.902796][ T6159] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 99.915738][ T6159] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 99.927380][ T6159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 99.941791][ T6159] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 99.953547][ T6152] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 99.955691][ T6152] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 99.983738][ T6159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 99.986000][ T6159] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 99.989390][ T6159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 99.991603][ T6159] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 99.994176][ T6159] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 100.033768][ T6476] device bridge_slave_1 left promiscuous mode [ 100.036791][ T6476] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.194246][ T6491] netlink: 'syz.3.932': attribute type 5 has an invalid length. [ 100.283868][ T6477] infiniband syz1: set active [ 100.285377][ T6477] infiniband syz1: added bond0 [ 100.370642][ T6477] RDS/IB: syz1: added [ 100.372251][ T6477] smc: adding ib device syz1 with port count 1 [ 100.377842][ T6477] smc: ib device syz1 port 1 has pnetid [ 100.483081][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 100.485066][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 100.554919][ T6516] futex_wake_op: syz.3.941 tries to shift op by 32; fix this program [ 100.561080][ T6152] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.857252][ T6534] netlink: 4 bytes leftover after parsing attributes in process `syz.0.946'. [ 101.017427][ T6546] binder: 6544:6546 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 101.019206][ T6546] binder: 6544:6546 ioctl c0306201 20000000 returned -14 [ 101.074517][ T6552] netlink: 8 bytes leftover after parsing attributes in process `syz.0.952'. [ 101.137926][ T6556] netlink: 4 bytes leftover after parsing attributes in process `syz.4.953'. [ 101.285651][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 101.288014][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 101.310064][ T6568] loop3: detected capacity change from 0 to 164 [ 101.313948][ T6159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 101.316308][ T6159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 101.320588][ T6159] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 101.333194][ T6159] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 101.340921][ T6568] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 101.352598][ T6152] device veth0_vlan entered promiscuous mode [ 101.368577][ T6568] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 101.368763][ T6152] device veth1_vlan entered promiscuous mode [ 101.468775][ T227] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 101.475021][ T227] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 101.481085][ T227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 101.492253][ T227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 101.518757][ T6152] device veth0_macvtap entered promiscuous mode [ 101.547500][ T6152] device veth1_macvtap entered promiscuous mode [ 101.601519][ T6152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.603680][ T6152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.605615][ T6152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.634018][ T6152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.636054][ T6152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.656751][ T6152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.658899][ T6152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.661242][ T6152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.685966][ T6152] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.704556][ T252] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 101.707006][ T252] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 101.709679][ T252] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 101.718542][ T252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 101.736438][ T6152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.739472][ T6152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.741538][ T6152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.743712][ T6152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.745687][ T6152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.777741][ T6152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.779899][ T6152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.782250][ T6152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.816093][ T6152] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.820162][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 101.822682][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 101.835593][ T6152] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.838087][ T6152] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.839972][ T6152] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.841799][ T6152] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.850056][ T6591] loop0: detected capacity change from 0 to 8192 [ 101.924210][ T6591] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 101.936502][ T6591] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 101.954634][ T6591] REISERFS (device loop0): using ordered data mode [ 101.956498][ T6591] reiserfs: using flush barriers [ 101.997373][ T6591] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 102.035808][ T6591] REISERFS (device loop0): checking transaction log (loop0) [ 102.068460][ T6591] REISERFS (device loop0): Using r5 hash to sort names [ 102.088491][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.090411][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.094707][ T252] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 102.166303][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.168599][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.182092][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 102.460952][ T6584] loop4: detected capacity change from 0 to 40427 [ 102.465234][ T6584] F2FS-fs (loop4): invalid crc value [ 102.478516][ T6584] F2FS-fs (loop4): Found nat_bits in checkpoint [ 102.520300][ T6584] F2FS-fs (loop4): Start checkpoint disabled! [ 102.571071][ T6584] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 102.594087][ T6635] netlink: 'syz.0.981': attribute type 10 has an invalid length. [ 102.687257][ T6635] device macvlan0 entered promiscuous mode [ 102.716515][ T6635] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 102.922251][ T6656] loop3: detected capacity change from 0 to 1024 [ 103.072878][ T6666] loop2: detected capacity change from 0 to 16 [ 103.077147][ T6655] loop5: detected capacity change from 0 to 4096 [ 103.087746][ T6656] hfsplus: xattr searching failed [ 103.093718][ T6655] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) [ 103.101419][ T6666] erofs: (device loop2): mounted with root inode @ nid 36. [ 103.130949][ T6655] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 103.250276][ T6675] loop2: detected capacity change from 0 to 64 [ 103.279606][ T6678] loop4: detected capacity change from 0 to 256 [ 103.295685][ T6678] exfat: Deprecated parameter 'utf8' [ 103.299481][ T6678] exfat: Deprecated parameter 'namecase' [ 103.300792][ T6678] exfat: Deprecated parameter 'utf8' [ 103.322424][ T6678] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010253, chksum : 0xa98551aa, utbl_chksum : 0xe619d30d) [ 103.591106][ T6701] loop3: detected capacity change from 0 to 256 [ 103.980148][ T6735] loop5: detected capacity change from 0 to 128 [ 104.077897][ T6152] sysv_free_block: flc_count > flc_size [ 104.079699][ T6152] sysv_free_block: flc_count > flc_size [ 104.080883][ T6152] sysv_free_block: flc_count > flc_size [ 104.082035][ T6152] sysv_free_block: flc_count > flc_size [ 104.083190][ T6152] sysv_free_block: flc_count > flc_size [ 104.084336][ T6152] sysv_free_block: flc_count > flc_size [ 104.085522][ T6152] sysv_free_block: flc_count > flc_size [ 104.112215][ T6152] sysv_free_block: flc_count > flc_size [ 104.113460][ T6152] sysv_free_block: flc_count > flc_size [ 104.114615][ T6152] sysv_free_block: flc_count > flc_size [ 104.144682][ T6152] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 104.487924][ T6766] netlink: 'syz.2.1035': attribute type 4 has an invalid length. [ 104.495174][ T6766] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1035'. [ 104.629937][ T6722] loop0: detected capacity change from 0 to 32768 [ 104.654552][ T6722] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.1018 (6722) [ 104.684396][ T6722] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 104.690641][ T6722] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 104.692708][ T6722] BTRFS info (device loop0): metadata ratio 30454 [ 104.694145][ T6722] BTRFS info (device loop0): using free space tree [ 105.058595][ T6722] BTRFS info (device loop0): enabling ssd optimizations [ 105.146183][ T6819] loop5: detected capacity change from 0 to 4096 [ 105.189339][ T6819] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) [ 105.200247][ T4294] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 105.385901][ T6769] loop3: detected capacity change from 0 to 32768 [ 105.485264][ T6837] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1048'. [ 105.522367][ T6769] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 105.774378][ T4295] ocfs2: Unmounting device (7,3) on (node local) [ 105.984752][ T6864] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 106.717119][ T6904] loop2: detected capacity change from 0 to 4096 [ 106.720837][ T6904] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 106.796544][ T6904] ntfs: (device loop2): parse_options(): NLS character set macgre not found. Using previous one utf8. [ 106.805144][ T6904] ntfs: (device loop2): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 106.808571][ T6904] ntfs: (device loop2): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 106.821176][ T6904] ntfs: volume version 3.1. [ 106.911882][ T6918] netlink: 'syz.5.1079': attribute type 21 has an invalid length. [ 107.112420][ T6927] loop5: detected capacity change from 0 to 16 [ 107.119721][ T6927] erofs: (device loop5): mounted with root inode @ nid 36. [ 107.158541][ T6927] erofs: (device loop5): z_erofs_read_folio: failed to read, err [-95] [ 107.308799][ T6932] loop2: detected capacity change from 0 to 4096 [ 107.329027][ T6932] NILFS (loop2): invalid segment: Checksum error in segment payload [ 107.351497][ T6932] NILFS (loop2): trying rollback from an earlier position [ 107.373309][ T6932] NILFS (loop2): recovery complete [ 107.394112][ T6939] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 107.701827][ T6953] netlink: 'syz.0.1094': attribute type 10 has an invalid length. [ 107.703592][ T6953] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1094'. [ 107.723004][ T6957] kAFS: No cell specified [ 107.843900][ T6965] netlink: 'syz.3.1099': attribute type 2 has an invalid length. [ 107.970567][ T6973] netlink: 'syz.3.1103': attribute type 21 has an invalid length. [ 108.154787][ T6986] netlink: 'syz.0.1107': attribute type 17 has an invalid length. [ 108.161104][ T6988] loop5: detected capacity change from 0 to 512 [ 108.172744][ T6986] netlink: 'syz.0.1107': attribute type 16 has an invalid length. [ 108.174332][ T6986] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1107'. [ 108.201198][ T6988] EXT2-fs (loop5): warning: mounting ext3 filesystem as ext2 [ 108.418780][ T4300] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 108.420769][ T4300] Bluetooth: hci2: Injecting HCI hardware error event [ 108.423359][ T4296] Bluetooth: hci2: hardware error 0x00 [ 108.571844][ T7011] netlink: 'syz.5.1122': attribute type 13 has an invalid length. [ 108.573556][ T7011] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1122'. [ 108.576425][ T7011] syz_tun: refused to change device tx_queue_len [ 108.600502][ T7011] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 108.660734][ T6971] loop2: detected capacity change from 0 to 32768 [ 108.742746][ T7017] loop4: detected capacity change from 0 to 4096 [ 108.755175][ T6971] XFS (loop2): Mounting V5 Filesystem [ 108.842859][ T6971] XFS (loop2): Ending clean mount [ 108.858139][ T6971] XFS (loop2): Quotacheck needed: Please wait. [ 108.907540][ T6971] XFS (loop2): Quotacheck: Done. [ 109.011085][ T4303] XFS (loop2): Unmounting Filesystem [ 109.127226][ T7051] loop0: detected capacity change from 0 to 64 [ 109.435672][ T7074] loop4: detected capacity change from 0 to 1024 [ 109.569178][ T4304] hfsplus: bad catalog entry type [ 109.570497][ T4304] hfsplus: bad catalog entry type [ 109.609256][ T7086] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 109.865342][ T7101] loop5: detected capacity change from 0 to 1024 [ 109.883241][ T7103] loop0: detected capacity change from 0 to 128 [ 109.889559][ T7103] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 109.906694][ T7103] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 109.934768][ T11] hfsplus: b-tree write err: -5, ino 4 [ 110.154736][ T7109] loop0: detected capacity change from 0 to 4096 [ 110.193726][ T7075] loop3: detected capacity change from 0 to 32768 [ 110.195590][ T7075] XFS: ikeep mount option is deprecated. [ 110.200702][ T7109] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 110.280031][ T4294] EXT4-fs (loop0): unmounting filesystem. [ 110.369902][ T7075] XFS (loop3): Mounting V5 Filesystem [ 110.376265][ T47] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 110.384547][ T47] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 110.387662][ T47] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 110.390589][ T47] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 110.392665][ T47] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 110.394491][ T47] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 110.461932][ T6159] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.558105][ T7075] XFS (loop3): Ending clean mount [ 110.578690][ T7075] XFS (loop3): Quotacheck needed: Please wait. [ 110.621144][ T7075] XFS (loop3): Quotacheck: Done. [ 110.656870][ T4296] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 110.677062][ T7151] netlink: 'syz.5.1170': attribute type 1 has an invalid length. [ 110.680439][ T6159] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.735894][ T7155] loop2: detected capacity change from 0 to 64 [ 110.750786][ T4295] XFS (loop3): Unmounting Filesystem [ 110.838585][ T6159] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.947170][ T6159] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.975733][ T7161] loop5: detected capacity change from 0 to 4096 [ 111.008860][ T7161] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) [ 111.732491][ T7131] chnl_net:caif_netlink_parms(): no params data found [ 111.785002][ T7215] xt_l2tp: unknown flags: 3b [ 112.202027][ T7245] xt_recent: hitcount (4294967295) is larger than allowed maximum (255) [ 112.215501][ T7131] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.217237][ T7131] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.219612][ T7131] device bridge_slave_0 entered promiscuous mode [ 112.222707][ T7131] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.224102][ T7131] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.226176][ T7131] device bridge_slave_1 entered promiscuous mode [ 112.369673][ T7131] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.374257][ T7131] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.416905][ T4296] Bluetooth: hci4: command 0x0409 tx timeout [ 112.511103][ T7131] team0: Port device team_slave_0 added [ 112.514229][ T7131] team0: Port device team_slave_1 added [ 112.712549][ T7131] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.714115][ T7131] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.740030][ T7131] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.802550][ T7131] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.804065][ T7131] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.817092][ T7131] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.861229][ T7282] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1220'. [ 112.954757][ T7131] device hsr_slave_0 entered promiscuous mode [ 112.986979][ T7131] device hsr_slave_1 entered promiscuous mode [ 113.254093][ T7301] loop0: detected capacity change from 0 to 4096 [ 113.285705][ T7301] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 113.310456][ T7260] loop3: detected capacity change from 0 to 40427 [ 113.327493][ T7260] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 113.328955][ T7260] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 113.364713][ T7260] F2FS-fs (loop3): invalid crc value [ 113.405570][ T7260] F2FS-fs (loop3): Found nat_bits in checkpoint [ 113.470421][ T7260] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 113.472006][ T7260] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 113.585779][ T4295] syz-executor: attempt to access beyond end of device [ 113.585779][ T4295] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 113.853413][ T7303] loop5: detected capacity change from 0 to 32768 [ 113.882043][ T7303] [ 113.882043][ T7303] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 113.882043][ T7303] [ 113.904068][ T7303] [ 113.904068][ T7303] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 113.904068][ T7303] [ 113.906449][ T7303] [ 113.906449][ T7303] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 113.906449][ T7303] [ 113.932964][ T7303] [ 113.932964][ T7303] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 113.932964][ T7303] [ 113.935269][ T7303] [ 113.935269][ T7303] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 113.935269][ T7303] [ 113.945428][ T7339] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1242'. [ 113.952423][ T7303] [ 113.952423][ T7303] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 113.952423][ T7303] [ 113.978338][ T92] [ 113.978338][ T92] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 113.978338][ T92] [ 114.072875][ T6152] [ 114.072875][ T6152] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 114.072875][ T6152] [ 114.076309][ T6152] [ 114.076309][ T6152] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 114.076309][ T6152] [ 114.154970][ T7351] loop0: detected capacity change from 0 to 64 [ 114.226461][ T7351] Bad inode number on dev loop0: 6 is out of range [ 114.391615][ T7131] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 114.393574][ T7363] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1252'. [ 114.395405][ T7363] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1252'. [ 114.463286][ T6159] device hsr_slave_0 left promiscuous mode [ 114.475482][ T7366] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1254'. [ 114.496755][ T4296] Bluetooth: hci4: command 0x041b tx timeout [ 114.507440][ T6159] device hsr_slave_1 left promiscuous mode [ 114.602788][ T6159] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.604499][ T6159] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 114.608338][ T6159] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.609924][ T6159] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 114.614855][ T6159] device team0 left promiscuous mode [ 114.616034][ T6159] device team_slave_0 left promiscuous mode [ 114.626440][ T6159] device team_slave_1 left promiscuous mode [ 114.632766][ T6159] bridge0: port 3(team0) entered disabled state [ 114.647566][ T7381] loop2: detected capacity change from 0 to 256 [ 114.718135][ T6159] device bridge_slave_0 left promiscuous mode [ 114.719574][ T6159] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.837402][ T6159] device veth1_macvtap left promiscuous mode [ 114.838809][ T6159] device veth0_macvtap left promiscuous mode [ 114.840111][ T6159] device veth1_vlan left promiscuous mode [ 114.841280][ T6159] device veth0_vlan left promiscuous mode [ 115.559991][ T7420] loop0: detected capacity change from 0 to 40427 [ 115.571591][ T7420] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 115.573056][ T7420] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 115.575902][ T7420] F2FS-fs (loop0): invalid crc value [ 115.581209][ T7420] F2FS-fs (loop0): Found nat_bits in checkpoint [ 115.611652][ T7420] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 115.613186][ T7420] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 115.652141][ T4294] syz-executor: attempt to access beyond end of device [ 115.652141][ T4294] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 115.812447][ T7426] loop0: detected capacity change from 0 to 256 [ 116.582894][ T4296] Bluetooth: hci4: command 0x040f tx timeout [ 116.951880][ T6159] team0 (unregistering): Port device team_slave_1 removed [ 117.128267][ T6159] team0 (unregistering): Port device team_slave_0 removed [ 117.309022][ T6159] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 117.507574][ T6159] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 118.658346][ T4296] Bluetooth: hci4: command 0x0419 tx timeout [ 119.883081][ T6159] bond0 (unregistering): Released all slaves [ 120.142722][ T7131] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 120.179249][ T7131] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 120.223255][ T7131] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 120.261913][ T7404] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551614) [ 120.264220][ T7404] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 120.279177][ T7413] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1271'. [ 120.406335][ T7446] loop3: detected capacity change from 0 to 8 [ 120.464836][ T7445] loop0: detected capacity change from 0 to 2048 [ 120.488220][ T7445] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 120.544702][ T7445] cifs: Unknown parameter 'no'aN[Gzob,er;%j [ 120.544702][ T7445] z,@qJ#"h/.W1ȱnNC"C׈E)8+1<+`#k' [ 120.554794][ T7131] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.607389][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 120.609418][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 120.618911][ T7131] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.630757][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 120.633200][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 120.636334][ T4366] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.637961][ T4366] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.647955][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 120.713564][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 120.716008][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 120.719115][ T4366] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.720669][ T4366] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.731629][ T7459] loop5: detected capacity change from 0 to 1024 [ 120.751092][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 120.753731][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 120.756077][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 120.767804][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 120.780476][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 120.792321][ T227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 120.795005][ T227] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 120.800298][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 120.814375][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 120.828497][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 120.830930][ T7459] hfsplus: bad catalog entry type [ 120.845225][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 120.866093][ T7131] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 120.957144][ T7477] loop2: detected capacity change from 0 to 256 [ 121.026032][ T7481] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 121.048520][ T7477] tmpfs: Bad value for 'mpol' [ 121.335293][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 121.337247][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 121.351628][ T7131] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.634228][ T7524] netlink: 'syz.3.1309': attribute type 10 has an invalid length. [ 121.636013][ T7524] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1309'. [ 121.651934][ T7524] batman_adv: batadv0: Adding interface: wlan0 [ 121.653254][ T7524] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.673351][ T7524] batman_adv: batadv0: Interface activated: wlan0 [ 121.714985][ T7528] netlink: 'syz.5.1312': attribute type 11 has an invalid length. [ 121.923897][ T252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 121.926182][ T252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 122.004841][ T252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 122.021036][ T252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 122.033564][ T252] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 122.051978][ T252] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 122.068904][ T7131] device veth0_vlan entered promiscuous mode [ 122.074681][ T7131] device veth1_vlan entered promiscuous mode [ 122.183614][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 122.196104][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 122.215385][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 122.226970][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 122.231054][ T7131] device veth0_macvtap entered promiscuous mode [ 122.235167][ T7131] device veth1_macvtap entered promiscuous mode [ 122.262570][ T7131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.264645][ T7131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.270127][ T7131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.272314][ T7131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.274851][ T7131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.282575][ T7131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.284686][ T7131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.287244][ T7131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.298525][ T7131] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 122.311376][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 122.313701][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 122.321632][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 122.336006][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 122.355463][ T7131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.358499][ T7131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.360661][ T7131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.363011][ T7131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.365230][ T7131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.367808][ T7131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.370273][ T7131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.372739][ T7131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.388426][ T7131] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 122.391229][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 122.393518][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 122.409822][ T7131] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.418214][ T7131] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.420266][ T7131] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.422095][ T7131] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.463182][ T7131] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 122.465532][ T7131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.508046][ T7581] loop2: detected capacity change from 0 to 16 [ 122.510703][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.512641][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.525568][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 122.530054][ T4366] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.532022][ T4366] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.536432][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 122.540498][ T7581] erofs: (device loop2): mounted with root inode @ nid 36. [ 123.086777][ T7632] netlink: 'syz.6.1349': attribute type 18 has an invalid length. [ 123.121843][ T7636] netlink: 'syz.0.1350': attribute type 39 has an invalid length. [ 123.143614][ T7636] device veth0_macvtap left promiscuous mode [ 123.154576][ T7640] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 123.662718][ T7679] netlink: 'syz.0.1367': attribute type 21 has an invalid length. [ 123.664531][ T7679] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1367'. [ 124.009444][ T7709] netlink: 'syz.2.1379': attribute type 4 has an invalid length. [ 124.011114][ T7709] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1379'. [ 124.134352][ T7709] infiniband syz1: set down [ 124.427637][ T7744] capability: warning: `syz.3.1392' uses 32-bit capabilities (legacy support in use) [ 124.450139][ T7746] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1394'. [ 124.502387][ T7740] loop0: detected capacity change from 0 to 4096 [ 124.835055][ T7777] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1406'. [ 124.992244][ T7784] loop0: detected capacity change from 0 to 1024 [ 125.030485][ T7791] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1412'. [ 125.032608][ T7791] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1412'. [ 125.094724][ T7788] loop2: detected capacity change from 0 to 4096 [ 125.116816][ T7788] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 125.215360][ T7788] ntfs3: loop2: failed to convert "c46c" to cp850 [ 125.232648][ T7784] loop0: detected capacity change from 0 to 2048 [ 125.236433][ T7784] hpfs: bad mount options. [ 125.247001][ T7805] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1417'. [ 125.375651][ T7808] loop5: detected capacity change from 0 to 4096 [ 125.418319][ T7808] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 125.504883][ T7824] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1425'. [ 125.550609][ T7830] libceph: resolve '40' (ret=-3): failed [ 125.565202][ T6152] EXT4-fs (loop5): unmounting filesystem. [ 125.787503][ T7851] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1435'. [ 125.938435][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.940255][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.033783][ T7870] loop3: detected capacity change from 0 to 128 [ 126.067235][ T7870] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 126.158325][ T4295] EXT4-fs (loop3): unmounting filesystem. [ 126.626511][ T7928] netlink: 'syz.0.1465': attribute type 3 has an invalid length. [ 126.663106][ T7925] loop5: detected capacity change from 0 to 2048 [ 126.682735][ T7925] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 126.726964][ T7925] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 126.864191][ T7939] loop6: detected capacity change from 0 to 1024 [ 126.901525][ T7943] loop2: detected capacity change from 0 to 1024 [ 126.957612][ T7939] hfsplus: bad catalog entry type [ 127.115685][ T7955] xt_TCPMSS: Only works on TCP SYN packets [ 127.280364][ T7969] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 127.293488][ T7969] ipt_CLUSTERIP: ipt_CLUSTERIP is deprecated and it will removed soon, use xt_cluster instead [ 127.509977][ T7983] binder: 7982:7983 ERROR: BC_REGISTER_LOOPER called without request [ 127.512309][ T7983] binder: 7982:7983 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 127.666889][ T7994] ipt_CLUSTERIP: Please specify destination IP [ 127.684810][ T7997] libceph: resolve 'c' (ret=-3): failed [ 127.743747][ T7993] loop5: detected capacity change from 0 to 4096 [ 127.781132][ T7993] ntfs3: loop5: Different NTFS' sector size (2048) and media sector size (512) [ 128.022112][ T8015] netlink: 6 bytes leftover after parsing attributes in process `syz.6.1498'. [ 128.157920][ T8017] loop5: detected capacity change from 0 to 2048 [ 128.185886][ T8017] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 128.427804][ T8039] netlink: 'syz.6.1507': attribute type 3 has an invalid length. [ 128.580696][ T8044] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1508'. [ 128.713118][ T8009] loop0: detected capacity change from 0 to 32768 [ 128.756294][ T8009] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.1497 (8009) [ 128.769689][ T8009] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 128.771946][ T8009] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 128.773721][ T8009] BTRFS info (device loop0): enabling disk space caching [ 128.775089][ T8009] BTRFS info (device loop0): enabling auto defrag [ 128.776479][ T8009] BTRFS info (device loop0): doing ref verification [ 128.806656][ T8009] BTRFS info (device loop0): use no compression [ 128.808019][ T8009] BTRFS info (device loop0): force clearing of disk cache [ 128.809491][ T8009] BTRFS info (device loop0): use zlib compression, level 3 [ 128.810953][ T8009] BTRFS info (device loop0): disabling disk space caching [ 128.830599][ T8056] loop2: detected capacity change from 0 to 2048 [ 128.862489][ T8056] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 128.864889][ T8056] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 128.869772][ T8056] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 129.008200][ T7904] loop3: detected capacity change from 0 to 131072 [ 129.013000][ T7904] F2FS-fs (loop3): invalid crc value [ 129.125101][ T8009] BTRFS info (device loop0): enabling ssd optimizations [ 129.127710][ T8009] BTRFS info (device loop0): rebuilding free space tree [ 129.176281][ T7904] F2FS-fs (loop3): Found nat_bits in checkpoint [ 129.263005][ T8009] BTRFS info (device loop0): disabling free space tree [ 129.265628][ T8009] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 129.273614][ T8098] netlink: 'syz.2.1517': attribute type 1 has an invalid length. [ 129.275251][ T8098] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.1517'. [ 129.276522][ T8009] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 129.280385][ T7904] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 129.372233][ T8104] loop6: detected capacity change from 0 to 1024 [ 129.447186][ T8009] CIFS: VFS: SMB3 compression support is experimental [ 129.451895][ T8009] cifs: Unknown parameter 'nospace_cache' [ 129.555354][ T8117] loop2: detected capacity change from 0 to 512 [ 129.571750][ T8117] EXT4-fs: Ignoring removed nobh option [ 129.603757][ T8117] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 129.631311][ T4294] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 129.830519][ T4303] EXT4-fs (loop2): unmounting filesystem. [ 129.868030][ T8133] xt_CT: No such helper "snmp" [ 129.869274][ T8140] netlink: 'syz.3.1532': attribute type 29 has an invalid length. [ 129.898893][ T8142] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1533'. [ 129.934207][ T8145] random: crng reseeded on system resumption [ 130.103102][ T8159] netlink: 116 bytes leftover after parsing attributes in process `syz.3.1540'. [ 130.248438][ T8170] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 130.262332][ T8173] binder: 8172:8173 ioctl 40046210 9999999999999999 returned -14 [ 130.713099][ T8217] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1563'. [ 130.765952][ T8220] netlink: 'syz.2.1566': attribute type 10 has an invalid length. [ 130.846840][ T8220] device geneve0 entered promiscuous mode [ 130.886847][ T8220] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 131.514409][ T8208] loop5: detected capacity change from 0 to 32768 [ 131.543043][ T8267] loop0: detected capacity change from 0 to 256 [ 131.544892][ T8267] exfat: Deprecated parameter 'utf8' [ 131.586313][ T8208] XFS (loop5): Mounting V5 Filesystem [ 131.606488][ T8267] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 131.655095][ T8208] XFS (loop5): Ending clean mount [ 131.832082][ T6152] XFS (loop5): Unmounting Filesystem [ 131.931586][ T8242] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 132.466788][ T8327] binder: 8321:8327 BC_INCREFS_DONE u0000000000000000 no match [ 132.744778][ T8350] loop0: detected capacity change from 0 to 1024 [ 132.855461][ T8360] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1619'. [ 133.119268][ T8379] Cannot find add_set index 0 as target [ 133.125305][ T8382] netlink: 131996 bytes leftover after parsing attributes in process `syz.3.1628'. [ 133.561053][ T8412] netlink: 'syz.0.1640': attribute type 10 has an invalid length. [ 133.633686][ T8415] x_tables: duplicate underflow at hook 2 [ 133.648377][ T8417] netlink: 160 bytes leftover after parsing attributes in process `syz.3.1642'. [ 133.650302][ T8417] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1642'. [ 133.674023][ T8418] loop6: detected capacity change from 0 to 512 [ 133.746025][ T8418] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 133.818646][ T8418] Quota error (device loop6): find_tree_dqentry: Cycle in quota tree detected: block 3 index 0 [ 133.820767][ T8430] IPv6: sit1: Disabled Multicast RS [ 133.821094][ T8418] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 133.823846][ T8418] EXT4-fs error (device loop6): ext4_acquire_dquot:6801: comm syz.6.1643: Failed to acquire dquot type 0 [ 134.051892][ T7131] EXT4-fs (loop6): unmounting filesystem. [ 134.076526][ T8446] loop2: detected capacity change from 0 to 128 [ 134.079266][ T8446] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 134.098989][ T8446] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 134.164033][ T8455] netlink: 'syz.6.1654': attribute type 9 has an invalid length. [ 134.165640][ T8455] netlink: 'syz.6.1654': attribute type 7 has an invalid length. [ 134.185041][ T8455] netlink: 'syz.6.1654': attribute type 8 has an invalid length. [ 134.253879][ T8460] loop5: detected capacity change from 0 to 256 [ 134.277806][ T8460] exFAT-fs (loop5): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 134.808988][ T8492] loop0: detected capacity change from 0 to 4096 [ 134.813153][ T8492] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 134.936768][ T8492] ntfs3: loop0: failed to convert "c46c" to macturkish [ 135.021609][ T8458] loop3: detected capacity change from 0 to 32768 [ 135.176893][ T8517] netlink: 'syz.6.1682': attribute type 1 has an invalid length. [ 135.596091][ T8498] loop5: detected capacity change from 0 to 32768 [ 135.643881][ T8498] (syz.5.1675,8498,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 135.665303][ T8498] (syz.5.1675,8498,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 135.680495][ T8557] netlink: 'syz.0.1697': attribute type 1 has an invalid length. [ 135.743197][ T8498] JBD2: Ignoring recovery information on journal [ 135.762921][ T8566] loop0: detected capacity change from 0 to 8 [ 135.766138][ T8561] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 135.884276][ T8498] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 135.982454][ T8498] (syz.5.1675,8498,0):ocfs2_remount:623 ERROR: Cannot change heartbeat mode on remount [ 136.064932][ T6152] ocfs2: Unmounting device (7,5) on (node local) [ 136.522110][ T8620] loop0: detected capacity change from 0 to 16 [ 136.525902][ T8620] erofs: (device loop0): mounted with root inode @ nid 36. [ 136.833410][ T8638] netlink: 'syz.5.1730': attribute type 39 has an invalid length. [ 136.853239][ T8638] device veth0_macvtap left promiscuous mode [ 137.023640][ T8646] netlink: 131996 bytes leftover after parsing attributes in process `syz.2.1733'. [ 137.214257][ T8616] loop3: detected capacity change from 0 to 32768 [ 137.236031][ T8616] (syz.3.1722,8616,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 137.252475][ T8616] (syz.3.1722,8616,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 137.279636][ T8607] loop6: detected capacity change from 0 to 32768 [ 137.283698][ T8616] JBD2: Ignoring recovery information on journal [ 137.317968][ T8607] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 137.319846][ T8607] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 137.360449][ T8607] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 137.384082][ T1516] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 137.386970][ T1516] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 137.426227][ T8616] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 137.443349][ T8664] binder: 8660:8664 BC_INCREFS_DONE u0000000000000000 no match [ 137.450367][ T8616] (syz.3.1722,8616,1):ocfs2_remount:623 ERROR: Cannot change heartbeat mode on remount [ 137.467135][ T8666] netlink: 'syz.5.1737': attribute type 4 has an invalid length. [ 137.477954][ T8666] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1737'. [ 137.532439][ T1516] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 145ms [ 137.543511][ T1516] gfs2: fsid=syz:syz.0: jid=0: Done [ 137.552821][ T8607] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 137.581852][ T4295] ocfs2: Unmounting device (7,3) on (node local) [ 137.964153][ T8693] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1747'. [ 138.069429][ T8698] loop3: detected capacity change from 0 to 1024 [ 138.119613][ T8705] loop6: detected capacity change from 0 to 128 [ 138.152515][ T8705] FAT-fs (loop6): Directory bread(block 11554) failed [ 138.154164][ T8705] FAT-fs (loop6): Directory bread(block 11555) failed [ 138.166937][ T8705] FAT-fs (loop6): Directory bread(block 11556) failed [ 138.196346][ T8705] FAT-fs (loop6): Directory bread(block 11557) failed [ 138.206282][ T8705] FAT-fs (loop6): Directory bread(block 11558) failed [ 138.209224][ T8705] FAT-fs (loop6): Directory bread(block 11559) failed [ 138.210734][ T8705] FAT-fs (loop6): Directory bread(block 11560) failed [ 138.212123][ T8705] FAT-fs (loop6): Directory bread(block 11561) failed [ 138.213759][ T8705] FAT-fs (loop6): Directory bread(block 11562) failed [ 138.215136][ T8705] FAT-fs (loop6): Directory bread(block 11563) failed [ 138.593288][ T8722] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 138.714999][ T8726] netlink: 'syz.6.1761': attribute type 21 has an invalid length. [ 138.724016][ T8726] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1761'. [ 138.838338][ T8699] loop2: detected capacity change from 0 to 32768 [ 138.899490][ T8699] XFS (loop2): Mounting V5 Filesystem [ 138.970888][ T8707] loop5: detected capacity change from 0 to 32768 [ 138.975312][ T8707] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 138.977054][ T8707] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 138.982835][ T8707] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 138.994234][ T8699] XFS (loop2): Ending clean mount [ 138.997284][ T1516] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 138.998757][ T1516] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 139.057707][ T1516] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 58ms [ 139.059435][ T1516] gfs2: fsid=syz:syz.0: jid=0: Done [ 139.060545][ T8707] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 139.118133][ T4303] XFS (loop2): Unmounting Filesystem [ 139.223018][ T8713] loop3: detected capacity change from 0 to 32768 [ 139.233072][ T8713] gfs2: fsid=_dev_net_tun: Trying to join cluster "lock_nolock", "_dev_net_tun" [ 139.234968][ T8713] gfs2: fsid=_dev_net_tun: Now mounting FS (format 1801)... [ 139.295624][ T8713] gfs2: fsid=_dev_net_tun.0: journal 0 mapped with 16 extents in 0ms [ 139.299274][ T6050] gfs2: fsid=_dev_net_tun.0: jid=0, already locked for use [ 139.300901][ T6050] gfs2: fsid=_dev_net_tun.0: jid=0: Looking at journal... [ 139.374112][ T6050] gfs2: fsid=_dev_net_tun.0: jid=0: Journal head lookup took 73ms [ 139.376199][ T6050] gfs2: fsid=_dev_net_tun.0: jid=0: Done [ 139.385076][ T8713] gfs2: fsid=_dev_net_tun.0: first mount done, others may mount [ 139.539230][ T8763] loop2: detected capacity change from 0 to 512 [ 139.627554][ T8763] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 139.634648][ T8770] netlink: 116 bytes leftover after parsing attributes in process `syz.5.1775'. [ 139.663771][ T4303] EXT4-fs (loop2): unmounting filesystem. [ 139.794902][ T8781] xt_TCPMSS: Only works on TCP SYN packets [ 139.876516][ T8790] loop5: detected capacity change from 0 to 128 [ 139.924443][ T8790] FAT-fs (loop5): Directory bread(block 11554) failed [ 139.925978][ T8790] FAT-fs (loop5): Directory bread(block 11555) failed [ 139.928999][ T8790] FAT-fs (loop5): Directory bread(block 11556) failed [ 139.930532][ T8790] FAT-fs (loop5): Directory bread(block 11557) failed [ 139.938765][ T8790] FAT-fs (loop5): Directory bread(block 11558) failed [ 139.940175][ T8790] FAT-fs (loop5): Directory bread(block 11559) failed [ 139.952066][ T8790] FAT-fs (loop5): Directory bread(block 11560) failed [ 139.962217][ T8790] FAT-fs (loop5): Directory bread(block 11561) failed [ 139.963808][ T8790] FAT-fs (loop5): Directory bread(block 11562) failed [ 139.971567][ T8790] FAT-fs (loop5): Directory bread(block 11563) failed [ 140.429754][ T8820] xt_TCPMSS: Only works on TCP SYN packets [ 140.464433][ T8823] loop3: detected capacity change from 0 to 512 [ 140.466240][ T8823] EXT4-fs: Ignoring removed nobh option [ 140.509532][ T8823] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 140.681566][ T4295] EXT4-fs (loop3): unmounting filesystem. [ 140.702362][ T8788] loop6: detected capacity change from 0 to 32768 [ 140.738107][ T8788] gfs2: fsid=_dev_net_tun: Trying to join cluster "lock_nolock", "_dev_net_tun" [ 140.740151][ T8788] gfs2: fsid=_dev_net_tun: Now mounting FS (format 1801)... [ 140.766439][ T8788] gfs2: fsid=_dev_net_tun.0: journal 0 mapped with 16 extents in 0ms [ 140.770832][ T6050] gfs2: fsid=_dev_net_tun.0: jid=0, already locked for use [ 140.772642][ T6050] gfs2: fsid=_dev_net_tun.0: jid=0: Looking at journal... [ 140.842567][ T6050] gfs2: fsid=_dev_net_tun.0: jid=0: Journal head lookup took 69ms [ 140.844311][ T6050] gfs2: fsid=_dev_net_tun.0: jid=0: Done [ 140.845534][ T8788] gfs2: fsid=_dev_net_tun.0: first mount done, others may mount [ 141.293880][ T8868] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1821'. [ 141.524706][ T8879] loop3: detected capacity change from 0 to 4096 [ 141.556913][ T8879] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 141.572060][ T8879] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 141.576279][ T8879] ntfs: (device loop3): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 141.586213][ T8879] ntfs: (device loop3): ntfs_mapping_pairs_decompress(): Corrupt attribute. deltaxcn = 0x1, max_cluster = 0x0 [ 141.596737][ T8879] ntfs: (device loop3): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute. [ 141.599181][ T8879] ntfs: (device loop3): ntfs_read_block(): Failed to read from inode 0x1, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 141.603344][ T8879] ntfs: (device loop3): ntfs_mapping_pairs_decompress(): Corrupt attribute. deltaxcn = 0x1, max_cluster = 0x0 [ 141.634599][ T8879] ntfs: (device loop3): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute. [ 141.646284][ T8879] ntfs: (device loop3): ntfs_read_block(): Failed to read from inode 0x1, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5). [ 141.675790][ T8879] ntfs: (device loop3): check_mft_mirror(): Failed to read $MFTMirr. [ 141.684806][ T8879] ntfs: volume version 3.1. [ 141.819339][ T8899] loop5: detected capacity change from 0 to 256 [ 141.824196][ T8901] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1838'. [ 142.271153][ T8931] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1851'. [ 142.322088][ T8933] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 142.606235][ T8910] loop2: detected capacity change from 0 to 32768 [ 142.996167][ T8966] loop3: detected capacity change from 0 to 2048 [ 143.012925][ T8966] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 143.151384][ T8977] x_tables: duplicate underflow at hook 3 [ 143.272908][ T8825] loop0: detected capacity change from 0 to 131072 [ 143.288864][ T8986] loop2: detected capacity change from 0 to 256 [ 143.302337][ T8825] F2FS-fs (loop0): invalid crc value [ 143.330737][ T8991] loop5: detected capacity change from 0 to 16 [ 143.335168][ T8991] erofs: (device loop5): mounted with root inode @ nid 36. [ 143.354219][ T8825] F2FS-fs (loop0): Found nat_bits in checkpoint [ 143.372049][ T8986] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 143.373912][ T8986] FAT-fs (loop2): Filesystem has been set read-only [ 143.413643][ T8825] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 143.439418][ T8996] loop6: detected capacity change from 0 to 1764 [ 143.487085][ T8825] F2FS-fs (loop0): dec_valid_node_count: inconsistent i_blocks, ino:7, iblocks:0 [ 143.509978][ T9002] binfmt_misc: register: failed to install interpreter file ./file0 [ 143.589445][ T9007] CIFS mount error: No usable UNC path provided in device string! [ 143.589445][ T9007] [ 143.592235][ T9007] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 143.621461][ T9011] libceph: resolve '40' (ret=-3): failed [ 143.744335][ T9019] netlink: 'syz.6.1890': attribute type 2 has an invalid length. [ 143.748091][ T9020] netlink: 'syz.5.1889': attribute type 18 has an invalid length. [ 143.961206][ T9038] xt_hashlimit: overflow, try lower: 17592186044416/1147 [ 144.328522][ T9056] loop3: detected capacity change from 0 to 4096 [ 144.450867][ T9056] ntfs3: loop3: mft corrupted [ 144.466793][ T9069] netlink: 'syz.5.1911': attribute type 1 has an invalid length. [ 144.613431][ T9082] vxcan1 speed is unknown, defaulting to 1000 [ 144.616173][ T9082] vxcan1 speed is unknown, defaulting to 1000 [ 144.636849][ T9082] vxcan1 speed is unknown, defaulting to 1000 [ 144.827927][ T9082] infiniband syz2: set active [ 144.829074][ T4347] vxcan1 speed is unknown, defaulting to 1000 [ 144.835847][ T9082] infiniband syz2: added vxcan1 [ 144.854290][ T9082] RDS/IB: syz2: added [ 144.855351][ T9082] smc: adding ib device syz2 with port count 1 [ 144.857406][ T9082] smc: ib device syz2 port 1 has pnetid [ 144.858964][ T4347] vxcan1 speed is unknown, defaulting to 1000 [ 144.861748][ T9082] vxcan1 speed is unknown, defaulting to 1000 [ 145.012645][ T9111] loop5: detected capacity change from 0 to 256 [ 145.026397][ T9111] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 145.026433][ T9111] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 145.029676][ T9082] vxcan1 speed is unknown, defaulting to 1000 [ 145.037796][ T9111] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 145.170696][ T9082] vxcan1 speed is unknown, defaulting to 1000 [ 145.225127][ T9121] syz.6.1934 uses old SIOCAX25GETINFO [ 145.263171][ T9115] loop2: detected capacity change from 0 to 4096 [ 145.265461][ T9115] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 145.283664][ T9115] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 145.313494][ T9123] loop5: detected capacity change from 0 to 1024 [ 145.331372][ T9082] vxcan1 speed is unknown, defaulting to 1000 [ 145.374584][ T9123] hfsplus: bad catalog entry type [ 145.407240][ T227] ntfs3: loop2: ntfs3_write_inode r=5 failed, -22. [ 145.412007][ T4303] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 145.472106][ T9082] vxcan1 speed is unknown, defaulting to 1000 [ 145.681824][ T9145] loop6: detected capacity change from 0 to 128 [ 145.778407][ T9147] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1947'. [ 145.780568][ T9147] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1947'. [ 145.782338][ T9147] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1947'. [ 146.122782][ T9133] loop2: detected capacity change from 0 to 32768 [ 146.151199][ T9135] loop5: detected capacity change from 0 to 32768 [ 146.168704][ T9135] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.1941 (9135) [ 146.181076][ T9135] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 146.183421][ T9135] BTRFS info (device loop5): using sha256 (sha256-ce) checksum algorithm [ 146.191207][ T9135] BTRFS info (device loop5): using free space tree [ 146.192898][ T9133] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode. [ 146.214868][ T4300] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 146.255606][ T9133] OCFS2: ERROR (device loop2): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #17056 has bad chain 7 [ 146.264646][ T9133] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 146.276352][ T9133] OCFS2: Returning error to the calling process. [ 146.284432][ T9133] (syz.2.1940,9133,0):ocfs2_search_chain:1761 ERROR: status = -5 [ 146.286548][ T9133] (syz.2.1940,9133,0):ocfs2_search_chain:1871 ERROR: status = -5 [ 146.296972][ T9133] (syz.2.1940,9133,0):ocfs2_claim_suballoc_bits:1940 ERROR: status = -5 [ 146.311708][ T9133] (syz.2.1940,9133,0):ocfs2_claim_suballoc_bits:1983 ERROR: status = -5 [ 146.313526][ T9133] (syz.2.1940,9133,0):ocfs2_claim_new_inode:2216 ERROR: status = -5 [ 146.319664][ T9133] (syz.2.1940,9133,1):ocfs2_claim_new_inode:2231 ERROR: status = -5 [ 146.321567][ T9133] (syz.2.1940,9133,1):ocfs2_mknod_locked:637 ERROR: status = -5 [ 146.352092][ T9133] (syz.2.1940,9133,1):ocfs2_mknod:383 ERROR: status = -5 [ 146.353971][ T9133] (syz.2.1940,9133,1):ocfs2_mknod:500 ERROR: status = -5 [ 146.385472][ T9133] (syz.2.1940,9133,1):ocfs2_create:674 ERROR: status = -5 [ 146.499815][ T4303] ocfs2: Unmounting device (7,2) on (node local) [ 146.500018][ T9203] loop3: detected capacity change from 0 to 2048 [ 146.520595][ T9203] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 146.570345][ T9135] BTRFS info (device loop5): enabling ssd optimizations [ 146.605527][ T9211] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1976'. [ 146.723889][ T6152] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 146.760447][ T9222] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 146.986791][ T9239] netlink: 'syz.6.1981': attribute type 1 has an invalid length. [ 147.171531][ T9252] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1989'. [ 147.173737][ T9252] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1989'. [ 147.489449][ T9277] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2001'. [ 147.510408][ T9233] loop2: detected capacity change from 0 to 32768 [ 147.512771][ T9233] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.1978 (9233) [ 147.541046][ T9233] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 147.543660][ T9233] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 147.545804][ T9233] BTRFS info (device loop2): force zlib compression, level 3 [ 147.569675][ T9233] BTRFS info (device loop2): force clearing of disk cache [ 147.571269][ T9233] BTRFS info (device loop2): setting nodatasum [ 147.572583][ T9233] BTRFS info (device loop2): allowing degraded mounts [ 147.579706][ T9233] BTRFS info (device loop2): enabling disk space caching [ 147.583552][ T9233] BTRFS info (device loop2): disk space caching is enabled [ 147.683919][ T9290] netlink: 172 bytes leftover after parsing attributes in process `syz.5.2007'. [ 147.685875][ T9290] netlink: 22 bytes leftover after parsing attributes in process `syz.5.2007'. [ 147.871376][ T9315] ax25_connect(): syz.6.2011 uses autobind, please contact jreuter@yaina.de [ 147.967836][ T9331] loop6: detected capacity change from 0 to 128 [ 147.978682][ T9233] BTRFS info (device loop2): rebuilding free space tree [ 147.983932][ T9233] BTRFS info (device loop2): disabling free space tree [ 147.985381][ T9233] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 148.006463][ T9233] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 148.148426][ T9233] BTRFS info (device loop2): balance: start -ssoft,profiles=NONE,usage=0,vrange=0..0,stripes=0..0 [ 148.165970][ T9233] BTRFS info (device loop2): balance: ended with status: 0 [ 148.278181][ T9343] loop5: detected capacity change from 0 to 8 [ 148.280056][ T4303] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 148.330609][ T9343] SQUASHFS error: Corrupted symlink [ 148.533838][ T9329] loop3: detected capacity change from 0 to 32768 [ 148.541741][ T9329] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.2014 (9329) [ 148.568866][ T9329] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 148.571205][ T9329] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 148.572830][ T9329] BTRFS info (device loop3): using free space tree [ 148.573620][ T9307] loop0: detected capacity change from 0 to 32768 [ 148.623661][ T9307] (syz.0.2012,9307,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 148.630736][ T9307] (syz.0.2012,9307,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 148.672172][ T9307] JBD2: Ignoring recovery information on journal [ 148.732579][ T9307] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 148.928123][ T9329] BTRFS info (device loop3): enabling ssd optimizations [ 148.960610][ T4294] ocfs2: Unmounting device (7,0) on (node local) [ 149.025461][ T9402] loop6: detected capacity change from 0 to 8 [ 149.084705][ T4295] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 149.097328][ T9402] SQUASHFS error: Corrupted symlink [ 149.623193][ T9449] loop0: detected capacity change from 0 to 8 [ 149.674879][ T9449] SQUASHFS error: Corrupted symlink [ 149.866525][ T9468] xt_policy: neither incoming nor outgoing policy selected [ 150.017561][ T9477] loop6: detected capacity change from 0 to 64 [ 150.066180][ T9431] loop5: detected capacity change from 0 to 32768 [ 150.107607][ T9431] (syz.5.2041,9431,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 150.114663][ T9431] (syz.5.2041,9431,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 150.184522][ T9431] JBD2: Ignoring recovery information on journal [ 150.341784][ T9431] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 150.462688][ T9508] xt_policy: neither incoming nor outgoing policy selected [ 150.545980][ T6152] ocfs2: Unmounting device (7,5) on (node local) [ 150.631670][ T9517] loop2: detected capacity change from 0 to 2048 [ 150.665062][ T9525] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 150.736898][ T9517] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=201, name_len=0 [ 150.771379][ T9517] Remounting filesystem read-only [ 150.804848][ T9533] loop3: detected capacity change from 0 to 64 [ 151.034252][ T9551] syz.0.2096 (9551): /proc/9549/oom_adj is deprecated, please use /proc/9549/oom_score_adj instead. [ 151.044112][ T9547] loop5: detected capacity change from 0 to 1024 [ 151.150474][ T9547] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 151.217443][ T9563] xt_policy: neither incoming nor outgoing policy selected [ 151.329052][ T6152] EXT4-fs (loop5): unmounting filesystem. [ 151.375484][ T9574] loop0: detected capacity change from 0 to 2048 [ 151.417395][ T9578] loop6: detected capacity change from 0 to 1024 [ 151.540779][ T9586] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 151.596145][ T9574] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=201, name_len=0 [ 151.601331][ T9574] Remounting filesystem read-only [ 151.724808][ T9598] loop2: detected capacity change from 0 to 16 [ 151.753996][ T9598] erofs: (device loop2): mounted with root inode @ nid 36. [ 151.808019][ T9598] CIFS mount error: No usable UNC path provided in device string! [ 151.808019][ T9598] [ 151.810044][ T9598] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 151.833414][ T9550] loop3: detected capacity change from 0 to 32768 [ 151.852565][ T9550] (syz.3.2083,9550,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 151.852750][ T9550] (syz.3.2083,9550,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 151.883433][ T9550] JBD2: Ignoring recovery information on journal [ 152.052462][ T9550] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 152.221385][ T4295] ocfs2: Unmounting device (7,3) on (node local) [ 152.259352][ T9628] netlink: 'syz.6.2112': attribute type 12 has an invalid length. [ 152.311871][ T9610] loop5: detected capacity change from 0 to 32768 [ 152.366792][ T9610] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop5 scanned by syz.5.2107 (9610) [ 152.384757][ T9610] BTRFS info (device loop5): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 152.386948][ T9610] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm [ 152.388788][ T9610] BTRFS info (device loop5): force zlib compression, level 3 [ 152.390257][ T9610] BTRFS info (device loop5): force clearing of disk cache [ 152.391731][ T9610] BTRFS info (device loop5): setting nodatasum [ 152.393028][ T9610] BTRFS info (device loop5): allowing degraded mounts [ 152.402063][ T9610] BTRFS info (device loop5): enabling disk space caching [ 152.403802][ T9610] BTRFS info (device loop5): disk space caching is enabled [ 152.507119][ T9648] loop6: detected capacity change from 0 to 16 [ 152.551990][ T9646] loop3: detected capacity change from 0 to 2048 [ 152.558463][ T9648] erofs: (device loop6): mounted with root inode @ nid 36. [ 152.563563][ T9648] CIFS mount error: No usable UNC path provided in device string! [ 152.563563][ T9648] [ 152.565697][ T9648] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 152.575903][ T9656] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 152.605325][ T9646] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=201, name_len=0 [ 152.622271][ T9646] Remounting filesystem read-only [ 152.737745][ T9610] BTRFS info (device loop5): rebuilding free space tree [ 152.744293][ T9610] BTRFS info (device loop5): disabling free space tree [ 152.745760][ T9610] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 152.753603][ T9610] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 152.874735][ T9610] BTRFS info (device loop5): balance: start -ssoft,profiles=NONE,usage=0,vrange=0..0,stripes=0..0 [ 152.874852][ T9610] BTRFS info (device loop5): balance: ended with status: 0 [ 152.967861][ T6152] BTRFS info (device loop5): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 153.067918][ T9688] binfmt_misc: register: failed to install interpreter file ./file0 [ 153.104758][ T9691] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2127'. [ 153.106559][ T9691] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2127'. [ 153.311401][ T9703] loop0: detected capacity change from 0 to 16 [ 153.324966][ T9703] erofs: (device loop0): mounted with root inode @ nid 36. [ 153.355821][ T9703] CIFS mount error: No usable UNC path provided in device string! [ 153.355821][ T9703] [ 153.375269][ T9703] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 153.427348][ T9668] loop2: detected capacity change from 0 to 32768 [ 153.443866][ T9668] (syz.2.2119,9668,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 153.450277][ T9668] (syz.2.2119,9668,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 153.489749][ T9668] JBD2: Ignoring recovery information on journal [ 153.555266][ T9668] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 153.695605][ T9668] [ 153.696138][ T9668] ====================================================== [ 153.697548][ T9668] WARNING: possible circular locking dependency detected [ 153.698963][ T9668] 6.1.118-syzkaller #0 Not tainted [ 153.700050][ T9668] ------------------------------------------------------ [ 153.701551][ T9668] syz.2.2119/9668 is trying to acquire lock: [ 153.702729][ T9668] ffff0000f1a842c8 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x164/0x4428 [ 153.705498][ T9668] [ 153.705498][ T9668] but task is already holding lock: [ 153.707199][ T9668] ffff0000f682b1b8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x4e4/0x1478 [ 153.709393][ T9668] [ 153.709393][ T9668] which lock already depends on the new lock. [ 153.709393][ T9668] [ 153.711717][ T9668] [ 153.711717][ T9668] the existing dependency chain (in reverse order) is: [ 153.713602][ T9668] [ 153.713602][ T9668] -> #5 (&oi->ip_xattr_sem){++++}-{3:3}: [ 153.715400][ T9668] down_read+0x64/0x308 [ 153.716480][ T9668] ocfs2_init_acl+0x2c8/0x764 [ 153.717521][ T9668] ocfs2_mknod+0x1574/0x2560 [ 153.718700][ T9668] ocfs2_create+0x1a8/0x560 [ 153.719723][ T9668] path_openat+0xeac/0x2548 [ 153.720817][ T9668] do_filp_open+0x1bc/0x3cc [ 153.721897][ T9668] do_sys_openat2+0x128/0x3e0 [ 153.722955][ T9668] __arm64_sys_openat+0x1f0/0x240 [ 153.724179][ T9668] invoke_syscall+0x98/0x2bc [ 153.725311][ T9668] el0_svc_common+0x138/0x258 [ 153.726537][ T9668] do_el0_svc+0x58/0x13c [ 153.727620][ T9668] el0_svc+0x58/0x168 [ 153.728543][ T9668] el0t_64_sync_handler+0x84/0xf0 [ 153.729703][ T9668] el0t_64_sync+0x18c/0x190 [ 153.730927][ T9668] [ 153.730927][ T9668] -> #4 (jbd2_handle){++++}-{0:0}: [ 153.732605][ T9668] start_this_handle+0x1140/0x13ac [ 153.733902][ T9668] jbd2__journal_start+0x298/0x544 [ 153.735171][ T9668] jbd2_journal_start+0x3c/0x4c [ 153.736379][ T9668] ocfs2_start_trans+0x3e8/0x73c [ 153.737587][ T9668] ocfs2_modify_bh+0xe4/0x484 [ 153.738693][ T9668] ocfs2_local_read_info+0x1220/0x15bc [ 153.740025][ T9668] dquot_load_quota_sb+0x6f0/0xb1c [ 153.741268][ T9668] dquot_load_quota_inode+0x280/0x4f4 [ 153.742481][ T9668] ocfs2_enable_quotas+0x17c/0x3cc [ 153.743696][ T9668] ocfs2_fill_super+0x3ef4/0x4a0c [ 153.744942][ T9668] mount_bdev+0x274/0x370 [ 153.746010][ T9668] ocfs2_mount+0x44/0x58 [ 153.747012][ T9668] legacy_get_tree+0xd4/0x16c [ 153.748154][ T9668] vfs_get_tree+0x90/0x274 [ 153.749233][ T9668] do_new_mount+0x278/0x8fc [ 153.750380][ T9668] path_mount+0x590/0xe5c [ 153.751428][ T9668] __arm64_sys_mount+0x45c/0x594 [ 153.752596][ T9668] invoke_syscall+0x98/0x2bc [ 153.753742][ T9668] el0_svc_common+0x138/0x258 [ 153.754866][ T9668] do_el0_svc+0x58/0x13c [ 153.755878][ T9668] el0_svc+0x58/0x168 [ 153.756887][ T9668] el0t_64_sync_handler+0x84/0xf0 [ 153.758199][ T9668] el0t_64_sync+0x18c/0x190 [ 153.759416][ T9668] [ 153.759416][ T9668] -> #3 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 153.761375][ T9668] down_read+0x64/0x308 [ 153.762402][ T9668] ocfs2_start_trans+0x3dc/0x73c [ 153.763647][ T9668] ocfs2_modify_bh+0xe4/0x484 [ 153.764736][ T9668] ocfs2_local_read_info+0x1220/0x15bc [ 153.766147][ T9668] dquot_load_quota_sb+0x6f0/0xb1c [ 153.767420][ T9668] dquot_load_quota_inode+0x280/0x4f4 [ 153.768714][ T9668] ocfs2_enable_quotas+0x17c/0x3cc [ 153.769992][ T9668] ocfs2_fill_super+0x3ef4/0x4a0c [ 153.771242][ T9668] mount_bdev+0x274/0x370 [ 153.772388][ T9668] ocfs2_mount+0x44/0x58 [ 153.773451][ T9668] legacy_get_tree+0xd4/0x16c [ 153.774757][ T9668] vfs_get_tree+0x90/0x274 [ 153.775804][ T9668] do_new_mount+0x278/0x8fc [ 153.776885][ T9668] path_mount+0x590/0xe5c [ 153.777896][ T9668] __arm64_sys_mount+0x45c/0x594 [ 153.779105][ T9668] invoke_syscall+0x98/0x2bc [ 153.780182][ T9668] el0_svc_common+0x138/0x258 [ 153.781254][ T9668] do_el0_svc+0x58/0x13c [ 153.782281][ T9668] el0_svc+0x58/0x168 [ 153.783274][ T9668] el0t_64_sync_handler+0x84/0xf0 [ 153.784436][ T9668] el0t_64_sync+0x18c/0x190 [ 153.785804][ T9668] [ 153.785804][ T9668] -> #2 (sb_internal#4){.+.+}-{0:0}: [ 153.787536][ T9668] ocfs2_start_trans+0x260/0x73c [ 153.788762][ T9668] ocfs2_mknod+0xe64/0x2560 [ 153.789796][ T9668] ocfs2_create+0x1a8/0x560 [ 153.790879][ T9668] path_openat+0xeac/0x2548 [ 153.792100][ T9668] do_filp_open+0x1bc/0x3cc [ 153.793295][ T9668] do_sys_openat2+0x128/0x3e0 [ 153.794395][ T9668] __arm64_sys_openat+0x1f0/0x240 [ 153.795646][ T9668] invoke_syscall+0x98/0x2bc [ 153.796799][ T9668] el0_svc_common+0x138/0x258 [ 153.797912][ T9668] do_el0_svc+0x58/0x13c [ 153.799025][ T9668] el0_svc+0x58/0x168 [ 153.800041][ T9668] el0t_64_sync_handler+0x84/0xf0 [ 153.801331][ T9668] el0t_64_sync+0x18c/0x190 [ 153.802573][ T9668] [ 153.802573][ T9668] -> #1 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6){+.+.}-{3:3}: [ 153.804995][ T9668] down_write+0x5c/0x88 [ 153.806101][ T9668] ocfs2_reserve_local_alloc_bits+0xfc/0x25dc [ 153.807670][ T9668] ocfs2_reserve_clusters_with_limit+0x194/0xabc [ 153.809178][ T9668] ocfs2_reserve_clusters+0x3c/0x50 [ 153.810360][ T9668] ocfs2_mknod+0xe04/0x2560 [ 153.811482][ T9668] ocfs2_create+0x1a8/0x560 [ 153.812644][ T9668] path_openat+0xeac/0x2548 [ 153.813792][ T9668] do_filp_open+0x1bc/0x3cc [ 153.814911][ T9668] do_sys_openat2+0x128/0x3e0 [ 153.815989][ T9668] __arm64_sys_openat+0x1f0/0x240 [ 153.817222][ T9668] invoke_syscall+0x98/0x2bc [ 153.818312][ T9668] el0_svc_common+0x138/0x258 [ 153.819506][ T9668] do_el0_svc+0x58/0x13c [ 153.820655][ T9668] el0_svc+0x58/0x168 [ 153.821731][ T9668] el0t_64_sync_handler+0x84/0xf0 [ 153.822903][ T9668] el0t_64_sync+0x18c/0x190 [ 153.824025][ T9668] [ 153.824025][ T9668] -> #0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{3:3}: [ 153.826446][ T9668] __lock_acquire+0x3338/0x7680 [ 153.827689][ T9668] lock_acquire+0x26c/0x7cc [ 153.828847][ T9668] down_write+0x5c/0x88 [ 153.829868][ T9668] ocfs2_reserve_suballoc_bits+0x164/0x4428 [ 153.831264][ T9668] ocfs2_reserve_new_metadata_blocks+0x384/0x848 [ 153.832797][ T9668] ocfs2_init_xattr_set_ctxt+0x3b0/0x9f8 [ 153.834213][ T9668] ocfs2_xattr_set+0xc08/0x1478 [ 153.835389][ T9668] ocfs2_xattr_user_set+0xc0/0xe8 [ 153.836911][ T9668] __vfs_setxattr+0x388/0x3a4 [ 153.838236][ T9668] __vfs_setxattr_noperm+0x110/0x528 [ 153.839490][ T9668] __vfs_setxattr_locked+0x1ec/0x218 [ 153.840887][ T9668] vfs_setxattr+0x1a8/0x344 [ 153.842137][ T9668] setxattr+0x230/0x294 [ 153.843150][ T9668] path_setxattr+0x17c/0x258 [ 153.844266][ T9668] __arm64_sys_setxattr+0xbc/0xd8 [ 153.845592][ T9668] invoke_syscall+0x98/0x2bc [ 153.846765][ T9668] el0_svc_common+0x138/0x258 [ 153.847972][ T9668] do_el0_svc+0x58/0x13c [ 153.849042][ T9668] el0_svc+0x58/0x168 [ 153.849990][ T9668] el0t_64_sync_handler+0x84/0xf0 [ 153.851375][ T9668] el0t_64_sync+0x18c/0x190 [ 153.852535][ T9668] [ 153.852535][ T9668] other info that might help us debug this: [ 153.852535][ T9668] [ 153.854882][ T9668] Chain exists of: [ 153.854882][ T9668] &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5 --> jbd2_handle --> &oi->ip_xattr_sem [ 153.854882][ T9668] [ 153.858541][ T9668] Possible unsafe locking scenario: [ 153.858541][ T9668] [ 153.860297][ T9668] CPU0 CPU1 [ 153.861359][ T9668] ---- ---- [ 153.862653][ T9668] lock(&oi->ip_xattr_sem); [ 153.863631][ T9668] lock(jbd2_handle); [ 153.865117][ T9668] lock(&oi->ip_xattr_sem); [ 153.866740][ T9668] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5); [ 153.868337][ T9668] [ 153.868337][ T9668] *** DEADLOCK *** [ 153.868337][ T9668] [ 153.870198][ T9668] 3 locks held by syz.2.2119/9668: [ 153.871339][ T9668] #0: ffff0000f61f6460 (sb_writers#28){.+.+}-{0:0}, at: mnt_want_write+0x44/0x9c [ 153.873467][ T9668] #1: ffff0000f682b488 (&type->i_mutex_dir_key#22){+.+.}-{3:3}, at: vfs_setxattr+0x17c/0x344 [ 153.875839][ T9668] #2: ffff0000f682b1b8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x4e4/0x1478 [ 153.878091][ T9668] [ 153.878091][ T9668] stack backtrace: [ 153.879466][ T9668] CPU: 0 PID: 9668 Comm: syz.2.2119 Not tainted 6.1.118-syzkaller #0 [ 153.881323][ T9668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 153.883691][ T9668] Call trace: [ 153.884419][ T9668] dump_backtrace+0x1c8/0x1f4 [ 153.885484][ T9668] show_stack+0x2c/0x3c [ 153.886765][ T9668] dump_stack_lvl+0x108/0x170 [ 153.887921][ T9668] dump_stack+0x1c/0x5c [ 153.888875][ T9668] print_circular_bug+0x150/0x1b8 [ 153.890154][ T9668] check_noncircular+0x2cc/0x378 [ 153.891231][ T9668] __lock_acquire+0x3338/0x7680 [ 153.892390][ T9668] lock_acquire+0x26c/0x7cc [ 153.893368][ T9668] down_write+0x5c/0x88 [ 153.894297][ T9668] ocfs2_reserve_suballoc_bits+0x164/0x4428 [ 153.895673][ T9668] ocfs2_reserve_new_metadata_blocks+0x384/0x848 [ 153.897013][ T9668] ocfs2_init_xattr_set_ctxt+0x3b0/0x9f8 [ 153.898345][ T9668] ocfs2_xattr_set+0xc08/0x1478 [ 153.899426][ T9668] ocfs2_xattr_user_set+0xc0/0xe8 [ 153.900556][ T9668] __vfs_setxattr+0x388/0x3a4 [ 153.901612][ T9668] __vfs_setxattr_noperm+0x110/0x528 [ 153.902927][ T9668] __vfs_setxattr_locked+0x1ec/0x218 [ 153.904089][ T9668] vfs_setxattr+0x1a8/0x344 [ 153.905092][ T9668] setxattr+0x230/0x294 [ 153.905999][ T9668] path_setxattr+0x17c/0x258 [ 153.906994][ T9668] __arm64_sys_setxattr+0xbc/0xd8 [ 153.908142][ T9668] invoke_syscall+0x98/0x2bc [ 153.909138][ T9668] el0_svc_common+0x138/0x258 [ 153.910233][ T9668] do_el0_svc+0x58/0x13c [ 153.911247][ T9668] el0_svc+0x58/0x168 [ 153.912188][ T9668] el0t_64_sync_handler+0x84/0xf0 [ 153.913439][ T9668] el0t_64_sync+0x18c/0x190 [ 153.977331][ T4303] ocfs2: Unmounting device (7,2) on (node local)