last executing test programs: 2.723573365s ago: executing program 1 (id=2005): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000038c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001440)={'\x00', 0x2}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x9) ioctl$TUNSETLINK(r0, 0x400454cd, 0x308) 2.503510452s ago: executing program 1 (id=2010): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006067c09e8fe55a10a0015400400142603600e120800060000001001a8001600a400014003000000036004fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x1a, &(0x7f0000000180)=[{&(0x7f0000000000)="1c000000190081084e81f782db44b904021d080006067c09e8fe55a1", 0x1c}], 0x1, 0x0, 0x0, 0x6000}, 0x0) 2.40101261s ago: executing program 1 (id=2011): syz_mount_image$nilfs2(&(0x7f00000000c0), &(0x7f0000000380)='./file1\x00', 0x1014800, &(0x7f0000000980)=ANY=[@ANYRES16=0x0, @ANYRES32=0x0, @ANYRESDEC, @ANYRES8=0x0, @ANYRES8=0x0, @ANYRES64=0x0, @ANYRESDEC, @ANYRES8=0x0, @ANYRESOCT=0x0], 0x1, 0xda6, &(0x7f0000003c80)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='pids.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)={'#! ', './file1', [{0x20, '/'}]}, 0xd) fadvise64(r0, 0x7, 0x4, 0x4) 2.019274578s ago: executing program 1 (id=2017): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000280)='./file0\x00', 0x12b8c03, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x1, 0x1524, &(0x7f0000002280)="$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") socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1.956548983s ago: executing program 0 (id=2020): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xe8001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) 1.751204688s ago: executing program 0 (id=2023): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f00000002c0)={[{@nodiscard}, {}, {@acl}, {@alloc_mode_reuse}, {@discard_unit_section}, {@checkpoint_diasble}, {@background_gc_on}, {@nouser_xattr}, {@data_flush}, {@user_xattr}, {@data_flush}, {@adaptive_mode}, {@jqfmt_vfsold}, {@noinline_dentry}]}, 0x1, 0x5505, &(0x7f0000002480)="$eJzs3E1rY9UbAPAn7XTe//Mv4sLdXBiEFiZh0nlBd6PO4At2KKMuXGmapCEzSW5p0rR25cKluPCbiIIrl34GF67diQvFnaDknlud+gJC08ZOfz+4ee45OXnuc8Iw8NxbEsCptZj9/GMlrsSFiJiPiMsRxXmlPAp3U3guIq5GxNwTR6Wc/33ibERcjIgrk+QpZ6V869Pr42u3f3jjp6++OXfm0mdffju7XQOz9nxE9DfT+U4/xbyT4qNyvjHuFrF/a1zG9Eb/cTnOU9xprxcZdhr76xpFvNlJ6/PN7eEkbvQazUnsdDeK+c1BuuBw3NnPU3zgUWOrGLfa60XsDvMidvZSXbt76f+2veEo5WmV+T4o0sdotB/TfHu3nfaz+biIzcGonE9581Z7dxLHZSwvF8281yrqWD/MN/3f9mZ3sL2bjdtbw24+yG7X6i/U6neq9a281R61b1Ub/dadW9lSpzdZVh21G/27nTzv9Nq1Zt5fzpY6zWa1Xs+W7rXXu41BVq/XbtZuVG8vl2fXs1cfvJP1WtnSJL7cHWyPur1htpFvZekTy9lK7eaLy9m1evbW6lq29vD+/dW1t9+79+6Dl1Zff6Vc9JeysqWVGysr1fqN6kp9+RTt/6Oy6CnuHw6lMusCAE4e/T8wC0fX/289jDj6/j/0/1Nxovrf097/H8H+4VD0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp9Z3C5+/VpwspvGlcv5/5dQz5bgSEXMR8evfmI+zB3LOl3kW/mH9wp9q+LoSRYbJNc6Vx8WIuFsev/z/qL8FAAAAeHp98eHVT1K3nl4WZ10QxyndtJm7/P6U8lUiYmHx+yllm5u8PDulZMW/7zOxO6VsxQ2s81NKlm65nZlWtn9l/kA4/0SopDB3rOUAAADH4mAncLxdCAAAAMfp41kXwGxUYv9R5v6z4OIv7/94IHjhwAgAAAA4gSqzLgAAAAA4ckX/7/f/AAAA4OmWfv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfmPnfm4TB6I4AD8bvLD/tGi1921lb1DGlrDHPUYUkCYoIAfSQhqgBnJLCRFEeBwCEYdIHttK9H2SMxnL/HiD4DAz0gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF26r9aL26vf121zdvt28owGAAAAuGRbrRf1P7PU/9rc/97c+tn0i4goI+LS3H0Un84yR01O9fL8zenz1asa7iLqhMN7TJrrS0T8aa7HH11/CgAAAPBxbZareZqtpz+zoQuiT2nRpvz2N1NeERHV7CFTWnnI+5UprP5+j+N/prR6AWuaKSwtuY1zpb1J/XM/rtpNT5oiNeXFlx2LzDZ2AACgR6Ozpt9ZCAAAAH36N3QBDKOI563M41bgJDXN9t7nsx4AAADwDhVDFwAAAAB0rp7/93T+3975fwAAADCMdP4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXdpW68VmuZq3zdnt28kzGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhif95RIATCIAz2ru9M5v6HlQZNTU2qQPj4G4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIv9eUmBEAiCKJgz/nfS9z+sJOgZRIiAhkcVtWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIud+3mNo4oDAP5mZmdrq+IaZQ8RUfCgF7vd1tbexIMSPPgnCCHd1titP9ocbCliLt4k515EjyKCEm/9H3JOIJd4y2EPETwrMzuTnfwA118zm+TzgTfvu8Mw7/tmIeQ77yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACURm9P4iQ7dMZxXJzb3Hu4lPVbh/rM47Xt+axlcVRn0ifDi9UPUbe5RAAAADg7krK+DyHspOsLWR938vo/La/Jav5vnx7HZT1/uO4v+7L2z9ovP+8+vz9QZzxOdtOby8PBpaOptP6/Wc62Z/7yilb+5PN3L0n+hcTvrT43SvPnGX29sfFOOw/P1ZEtAPBPXCz7Iih/H8r6fpOJAXBmtCqFd1n/J51mcwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACow2g1PFnGUQhhvjWJM1t7D5eO6x+vbc+X7dqjR2vhy8k9s1ukIYSby8PBpVpnM9vu3X9we3E4HNytP3gphNDU6G8V07/9wRQXh9DI8xH8R0FcfNmzks/JCBr8oQQAwKmUFi2r63fS9YXsXDQXwh/fHaz/X63EYcr6f/fDa5vVsar1f7+2Gc6+3sqdT3v37j94ffnO4q3BrcHHb1zuv9m/cv3q1eu9/F1JzxsTAAAA/p120ar1fzx3dP3/QiUOU9b/n33T/6I6VqL+P9Zk0a/pTAAAAM62Z1/+/bfomPNRux0+X1xZudsfH/c/Xx4fG0j1bztXtGr9n8w1nRUAAABQh9FqdGD9/0YlDlOu/z/1/Qs/Vu+ZhBDOF+v/F5c+Gd6obzozrY4/J256jgAAADTrfNGq6/9pvv8/3t/yEIcQXntlHBf/BnCq+j9596sfqmNV9/9fqW+KMynujp9H3ndDaHWbzggAAIDT7ImiZcX+r+n6wkc/XXi/bf8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQN3+DAAA//962D6S") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000000)=0x1) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000180)=0xfffffff9) 1.74002719s ago: executing program 1 (id=2024): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000200)='./bus\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x1, 0x54f8, &(0x7f0000010140)="$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") r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0d83) write$binfmt_format(r0, &(0x7f0000000000)='0\x00', 0x2) fchown(r0, 0xffffffffffffffff, 0x0) 1.227627088s ago: executing program 4 (id=2030): r0 = gettid() clock_nanosleep(0x7, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) tkill(r0, 0x7) 1.016199793s ago: executing program 4 (id=2033): r0 = syz_io_uring_setup(0xf02, &(0x7f0000000080), &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x110}) io_uring_enter(r0, 0x1c3c, 0x0, 0x0, 0x0, 0x0) 1.015948944s ago: executing program 0 (id=2034): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f00000000c0)={@dev}, 0x5) 919.957071ms ago: executing program 4 (id=2036): openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfad6}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0xdb4, 0x0, 0x0, 0x0, 0x0) 816.238219ms ago: executing program 2 (id=2037): syz_open_dev$video4linux(&(0x7f0000000100), 0x1000, 0x80a0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mbind(&(0x7f0000ff0000/0x4000)=nil, 0x4000, 0x4001, &(0x7f0000000000)=0x3, 0x2, 0x0) mbind(&(0x7f0000fee000/0x3000)=nil, 0x3000, 0x4001, &(0x7f0000000040)=0x1, 0x7, 0x0) 816.046989ms ago: executing program 3 (id=2038): syz_mount_image$udf(&(0x7f00000019c0), &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa00010, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x1, 0xc56, &(0x7f0000002680)="$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") openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) 800.45021ms ago: executing program 4 (id=2039): ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000240)={0x6, 'veth0_to_batadv\x00', {0x2}, 0x5}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) 757.024573ms ago: executing program 2 (id=2040): syz_mount_image$exfat(&(0x7f0000000200), &(0x7f0000000a00)='./file0\x00', 0x8, &(0x7f0000000080)=ANY=[], 0x6, 0x1503, &(0x7f0000002a80)="$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") chdir(&(0x7f00000001c0)='./file0\x00') faccessat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2) syz_mount_image$fuse(0x0, &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x8, 0x0, 0x0) 644.225732ms ago: executing program 3 (id=2041): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000080)={0x48, r1, 0xb97534d5fe9704cf, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x185}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x8}]}]}, 0x48}}, 0x0) 607.901484ms ago: executing program 4 (id=2042): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{r0}, &(0x7f00000000c0), &(0x7f0000000100)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000040)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 546.566149ms ago: executing program 3 (id=2043): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r1, @ANYBLOB="00001700000000001c003780"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) 460.239365ms ago: executing program 2 (id=2044): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e30, 0x81, @mcast2, 0x80000001}, 0x1c) syz_emit_ethernet(0x32, &(0x7f0000000000)={@random="35ab2788d003", @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xe0, @broadcast=0xe0000001}, {0x4e24, 0xe22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x1, 0x0, @val=0x80}}}}}}}, 0x0) 460.044956ms ago: executing program 4 (id=2045): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000500)=[@in={0x2, 0x0, @private=0xa010102}]}, &(0x7f0000000140)=0x10) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x6d, &(0x7f0000000080), &(0x7f00000000c0)=0x3930) 431.179327ms ago: executing program 0 (id=2046): r0 = msgget$private(0x0, 0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) msgrcv(r0, 0x0, 0x0, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000180)={0x1}, 0x8, 0x0) 396.48085ms ago: executing program 1 (id=2047): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000800000000000008100000008000300", @ANYRES32=r2, @ANYBLOB="060066008e8800000a0006000802110000010000260033"], 0x58}}, 0x0) 342.376634ms ago: executing program 3 (id=2048): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x11}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x8}]}, 0x3c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001000000008000600000000001800018014000200776c616e300000000000000000000000080008"], 0x3c}}, 0x0) 288.168728ms ago: executing program 2 (id=2049): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x9c, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4041}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x98, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x98}}, 0x0) 231.422433ms ago: executing program 3 (id=2050): prctl$PR_SET_SECUREBITS(0x1c, 0x7) setfsuid(0xee00) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f00000001c0), 0x81, 0x79e, &(0x7f00000018c0)="$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") syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') 231.161123ms ago: executing program 2 (id=2051): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x34, r0, 0x701, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x5e}, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0) 218.943003ms ago: executing program 0 (id=2052): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'geneve0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0xfffffffc}, @TCA_FQ_RATE_ENABLE={0x8, 0x5, 0x1}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8850}, 0x0) 88.207533ms ago: executing program 2 (id=2053): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6c00000010000304002000003c0e77897399f655", @ANYRES32=0x0, @ANYBLOB="15020000000000003c0012800b00010067726574617000002c00028006000f000700000006000f0000800000060011004e220000080007007f000001050013000000000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x6c}, 0x1, 0xba01}, 0x0) 32.913658ms ago: executing program 0 (id=2054): r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="5c00000013006bcd9e3fe3dc6e48aa31086b87043000000000000000160af365040014000d0002008bc3a0e640e51753cd60bc24eab556a705251e6182940800000000001282bb2352d1f006baa45e3bbd225a8941b1436e000a84c9", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 0s ago: executing program 3 (id=2055): socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000800)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) kernel console output (not intermixed with test programs): ce loop4): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 84.080913][ T6112] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 84.088537][ T6112] erofs: (device loop4): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 84.096504][ T6112] erofs: (device loop4): z_erofs_readahead: readahead error at page 45 @ nid 36 [ 84.100315][ T6112] syz.4.609: attempt to access beyond end of device [ 84.100315][ T6112] loop4: rw=524288, sector=32, nr_sectors = 64 limit=16 [ 84.121923][ T6112] syz.4.609: attempt to access beyond end of device [ 84.121923][ T6112] loop4: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 84.128897][ T6112] syz.4.609: attempt to access beyond end of device [ 84.128897][ T6112] loop4: rw=524288, sector=14425508768, nr_sectors = 8 limit=16 [ 84.152173][ T6112] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -29 in[58, 4038] out[4275] [ 84.343298][ T6147] netlink: 8 bytes leftover after parsing attributes in process `syz.2.626'. [ 84.497384][ T6157] netlink: 4 bytes leftover after parsing attributes in process `syz.2.631'. [ 84.769570][ T6174] loop2: detected capacity change from 0 to 16 [ 84.796620][ T6174] erofs: (device loop2): mounted with root inode @ nid 36. [ 84.969361][ T6182] mkiss: ax0: crc mode is auto. [ 84.969799][ T6176] loop1: detected capacity change from 0 to 8192 [ 85.014387][ T6176] REISERFS warning (device loop1): super-6515 reiserfs_parse_options: journaled quota format not specified. [ 85.097460][ T6185] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 85.100155][ T6156] loop4: detected capacity change from 0 to 32768 [ 85.109659][ T6156] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz.4.630 (6156) [ 85.125607][ T6156] BTRFS info (device loop4): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 85.128357][ T6156] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 85.171463][ T6156] BTRFS info (device loop4): using free space tree [ 85.294216][ T6192] bridge0: port 2(bridge_slave_1) entered learning state [ 85.355733][ T6192] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.437743][ T6156] BTRFS info (device loop4): enabling ssd optimizations [ 85.555667][ T4295] BTRFS info (device loop4): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 85.815096][ T6223] netlink: 8 bytes leftover after parsing attributes in process `syz.4.648'. [ 85.818656][ T6223] IPVS: Error joining to the multicast group [ 85.849967][ T6222] input: syz0 as /devices/virtual/input/input3 [ 85.985863][ T6230] loop2: detected capacity change from 0 to 1024 [ 85.998426][ T6233] loop0: detected capacity change from 0 to 128 [ 86.025812][ T6230] hfsplus: walked past end of dir [ 86.165832][ T6213] loop1: detected capacity change from 0 to 40427 [ 86.187498][ T6213] F2FS-fs (loop1): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 86.189702][ T6213] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 86.198485][ T6213] F2FS-fs (loop1): invalid crc value [ 86.214484][ T6213] F2FS-fs (loop1): Found nat_bits in checkpoint [ 86.252351][ T6213] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 86.254338][ T6213] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 86.337151][ T6243] loop2: detected capacity change from 0 to 1024 [ 86.374947][ T4303] syz-executor: attempt to access beyond end of device [ 86.374947][ T4303] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 86.382691][ T6243] hfsplus: catalog searching failed [ 86.452655][ T5222] hfsplus: b-tree write err: -5, ino 4 [ 86.465724][ T6245] loop0: detected capacity change from 0 to 256 [ 86.486551][ T6245] exfat: Deprecated parameter 'utf8' [ 86.505425][ T6245] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 86.553866][ T6234] loop4: detected capacity change from 0 to 32768 [ 86.598181][ T6234] XFS (loop4): Mounting V5 Filesystem [ 86.670697][ T6234] XFS (loop4): Ending clean mount [ 86.678473][ T6257] loop1: detected capacity change from 0 to 2048 [ 86.685722][ T6257] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 86.705605][ T6234] XFS (loop4): Quotacheck needed: Please wait. [ 86.736794][ T6234] XFS (loop4): Quotacheck: Done. [ 86.760699][ T6261] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 86.761897][ T4286] udevd[4286]: incorrect nilfs2 checksum on /dev/loop1 [ 86.826846][ T4295] XFS (loop4): Unmounting Filesystem [ 86.997421][ T6268] netlink: 'syz.0.667': attribute type 16 has an invalid length. [ 86.999729][ T6268] netlink: 'syz.0.667': attribute type 1 has an invalid length. [ 87.002524][ T6268] netlink: 'syz.0.667': attribute type 2 has an invalid length. [ 87.476241][ T6295] loop4: detected capacity change from 0 to 128 [ 87.498176][ T6295] VFS: Found a Xenix FS (block size = 1024) on device loop4 [ 87.846521][ T6313] netlink: 4 bytes leftover after parsing attributes in process `syz.1.688'. [ 88.052332][ T6320] loop1: detected capacity change from 0 to 4096 [ 88.078449][ T6320] __ntfs_error: 60 callbacks suppressed [ 88.078464][ T6320] ntfs: (device loop1): ntfs_read_locked_inode(): $DATA attribute is missing. [ 88.084971][ T6320] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 88.099932][ T6320] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 88.114087][ T6320] ntfs: volume version 3.1. [ 88.216717][ T4303] ntfs: (device loop1): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 88.325139][ T6304] loop4: detected capacity change from 0 to 40427 [ 88.331750][ T6304] F2FS-fs (loop4): Small segment_count (9 < 1 * 24) [ 88.333475][ T6304] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 88.405793][ T6304] F2FS-fs (loop4): Found nat_bits in checkpoint [ 88.409516][ T6314] loop0: detected capacity change from 0 to 32768 [ 88.418315][ T6314] XFS: ikeep mount option is deprecated. [ 88.436457][ T6304] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 88.438196][ T6304] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 88.473481][ T6304] syz.4.683: attempt to access beyond end of device [ 88.473481][ T6304] loop4: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 88.481559][ T6314] XFS (loop0): Mounting V5 Filesystem [ 88.519449][ T6304] F2FS-fs (loop4): Unrecognized mount option "ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ017777777777777777777771844674407370955161501777777777777777777777ÿÿÿÿÿÿÿÿÿ" or missing value [ 88.588276][ T6344] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.591001][ T6344] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.593527][ T6344] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.595840][ T6344] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.628701][ T4295] syz-executor: attempt to access beyond end of device [ 88.628701][ T4295] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 88.665883][ T6314] XFS (loop0): Ending clean mount [ 88.668506][ T6314] XFS (loop0): Quotacheck needed: Please wait. [ 88.713465][ T6314] XFS (loop0): Quotacheck: Done. [ 88.902507][ T6336] loop1: detected capacity change from 0 to 32768 [ 88.907163][ T6336] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.696 (6336) [ 88.919544][ T4294] XFS (loop0): Unmounting Filesystem [ 88.934295][ T6336] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 88.936917][ T6336] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 88.939366][ T6336] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 88.952083][ T6336] BTRFS info (device loop1): use lzo compression, level 0 [ 88.954014][ T6336] BTRFS info (device loop1): using free space tree [ 89.179000][ T6336] BTRFS info (device loop1): enabling ssd optimizations [ 89.407618][ T4303] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 89.980470][ T6398] Injecting memory failure for pfn 0x142c00 at process virtual address 0x400000000000 [ 90.034154][ T6398] Memory failure: 0x142c00: recovery action for dirty LRU page: Recovered [ 90.065548][ T6401] loop4: detected capacity change from 0 to 256 [ 90.067779][ T6401] exfat: Deprecated parameter 'utf8' [ 90.069127][ T6401] exfat: Deprecated parameter 'utf8' [ 90.117682][ T6401] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 90.300646][ T6392] loop2: detected capacity change from 0 to 32768 [ 90.329426][ T6392] JBD2: Ignoring recovery information on journal [ 90.413245][ T6392] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 90.430646][ T6409] netlink: 88 bytes leftover after parsing attributes in process `syz.4.720'. [ 90.439699][ T6409] netlink: 24 bytes leftover after parsing attributes in process `syz.4.720'. [ 90.461282][ T6409] netlink: 16 bytes leftover after parsing attributes in process `syz.4.720'. [ 90.463830][ T6409] netlink: 80 bytes leftover after parsing attributes in process `syz.4.720'. [ 90.495183][ T6410] OCFS2: ERROR (device loop2): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Invalid dinode #65: signature = [ 90.499247][ T6410] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 90.512496][ T6410] OCFS2: File system is now read-only. [ 90.527210][ T6410] (syz.2.714,6410,1):ocfs2_assign_bh:2414 ERROR: status = -30 [ 90.540696][ T6410] (syz.2.714,6410,1):ocfs2_inode_lock_full_nested:2509 ERROR: status = -30 [ 90.552838][ T6410] (syz.2.714,6410,1):ocfs2_inode_lock_atime:2601 ERROR: status = -30 [ 90.562309][ T6410] (syz.2.714,6410,1):ocfs2_readdir:1952 ERROR: status = -30 [ 90.632433][ T4305] ocfs2: Unmounting device (7,2) on (node local) [ 90.872292][ T6420] loop4: detected capacity change from 0 to 1024 [ 90.907943][ T6402] loop1: detected capacity change from 0 to 40427 [ 90.915940][ T6402] F2FS-fs (loop1): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 90.920494][ T6402] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 90.936833][ T6420] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 90.936888][ T6402] F2FS-fs (loop1): invalid crc value [ 90.962734][ T6402] F2FS-fs (loop1): Found nat_bits in checkpoint [ 90.994410][ T4295] EXT4-fs (loop4): unmounting filesystem. [ 91.047559][ T6431] loop2: detected capacity change from 0 to 1024 [ 91.122873][ T6402] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 91.124797][ T6402] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 91.126170][ T6431] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 91.156027][ T6435] netlink: 16 bytes leftover after parsing attributes in process `syz.4.727'. [ 91.327663][ T6431] EXT4-fs (loop2): unmounting filesystem. [ 91.794396][ T6462] netlink: 12 bytes leftover after parsing attributes in process `syz.4.739'. [ 91.908987][ T6464] loop0: detected capacity change from 0 to 256 [ 91.936874][ T6464] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fdc0, chksum : 0xac235812, utbl_chksum : 0xe619d30d) [ 92.010960][ T6466] input: syz0 as /devices/virtual/input/input4 [ 92.284986][ T6460] loop1: detected capacity change from 0 to 32768 [ 92.319618][ T6460] JBD2: Ignoring recovery information on journal [ 92.388178][ T6477] Zero length message leads to an empty skb [ 92.393078][ T6460] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 92.434672][ T6458] loop2: detected capacity change from 0 to 40427 [ 92.438843][ T6458] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 92.441586][ T6458] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 92.447036][ T4303] ocfs2: Unmounting device (7,1) on (node local) [ 92.464866][ T6458] F2FS-fs (loop2): invalid crc value [ 92.495431][ T6483] loop4: detected capacity change from 0 to 256 [ 92.504532][ T6458] F2FS-fs (loop2): Found nat_bits in checkpoint [ 92.568665][ T6458] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 92.571178][ T6458] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 92.615246][ T6458] syz.2.737: attempt to access beyond end of device [ 92.615246][ T6458] loop2: rw=2049, sector=53248, nr_sectors = 128 limit=40427 [ 92.630216][ T6488] loop1: detected capacity change from 0 to 1024 [ 92.701494][ T6488] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 92.755210][ T6499] netlink: 'syz.3.754': attribute type 46 has an invalid length. [ 92.775523][ T6499] netlink: 212868 bytes leftover after parsing attributes in process `syz.3.754'. [ 92.813008][ T4303] EXT4-fs (loop1): unmounting filesystem. [ 92.826789][ T6495] loop0: detected capacity change from 0 to 4096 [ 92.832329][ T6495] ntfs3: Unknown parameter 'al' [ 92.892407][ T4416] I/O error, dev loop0, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 93.017931][ T6506] loop1: detected capacity change from 0 to 1024 [ 93.101877][ T6506] EXT4-fs: Ignoring removed bh option [ 93.118902][ T6506] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 93.122375][ T6506] EXT4-fs (loop1): orphan cleanup on readonly fs [ 93.202511][ T6506] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5885: Corrupt filesystem [ 93.247818][ T6506] EXT4-fs (loop1): Remounting filesystem read-only [ 93.249432][ T6506] EXT4-fs error (device loop1): ext4_dirty_inode:6089: inode #3: comm syz.1.756: mark_inode_dirty error [ 93.253070][ T6506] EXT4-fs (loop1): Remounting filesystem read-only [ 93.254983][ T6506] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:477: comm syz.1.756: Invalid block bitmap block 3 in block_group 0 [ 93.266271][ T6506] EXT4-fs (loop1): Remounting filesystem read-only [ 93.281833][ T6506] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5885: Corrupt filesystem [ 93.296906][ T6506] EXT4-fs (loop1): Remounting filesystem read-only [ 93.298567][ T6506] EXT4-fs error (device loop1): ext4_dirty_inode:6089: inode #3: comm syz.1.756: mark_inode_dirty error [ 93.310928][ T6506] EXT4-fs (loop1): Remounting filesystem read-only [ 93.330383][ T6506] Quota error (device loop1): write_blk: dquota write failed [ 93.348114][ T6506] EXT4-fs error (device loop1): ext4_map_blocks:634: inode #3: block 1: comm syz.1.756: lblock 6 mapped to illegal pblock 1 (length 1) [ 93.371454][ T6506] EXT4-fs (loop1): Remounting filesystem read-only [ 93.373038][ T6506] Quota error (device loop1): write_blk: dquota write failed [ 93.374958][ T6506] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 93.391443][ T6506] EXT4-fs error (device loop1): ext4_map_blocks:634: inode #3: block 48: comm syz.1.756: lblock 0 mapped to illegal pblock 48 (length 1) [ 93.401825][ T6506] EXT4-fs (loop1): Remounting filesystem read-only [ 93.403405][ T6506] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 93.405943][ T6506] EXT4-fs error (device loop1): ext4_acquire_dquot:6795: comm syz.1.756: Failed to acquire dquot type 0 [ 93.419188][ T6506] EXT4-fs (loop1): Remounting filesystem read-only [ 93.421031][ T6506] EXT4-fs error (device loop1): ext4_map_blocks:634: inode #3: block 49: comm syz.1.756: lblock 1 mapped to illegal pblock 49 (length 1) [ 93.439879][ T6506] EXT4-fs (loop1): Remounting filesystem read-only [ 93.446084][ T6506] Quota error (device loop1): do_insert_tree: Can't read tree quota block 1 [ 93.448370][ T6506] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 93.463425][ T6501] loop4: detected capacity change from 0 to 32768 [ 93.464394][ T6506] EXT4-fs error (device loop1): ext4_acquire_dquot:6795: comm syz.1.756: Failed to acquire dquot type 0 [ 93.481591][ T6506] EXT4-fs (loop1): Remounting filesystem read-only [ 93.483431][ T6506] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5885: Corrupt filesystem [ 93.490820][ T6501] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.753 (6501) [ 93.494588][ T6506] EXT4-fs (loop1): Remounting filesystem read-only [ 93.496202][ T6506] EXT4-fs error (device loop1): ext4_evict_inode:279: inode #15: comm syz.1.756: mark_inode_dirty error [ 93.503390][ T6506] EXT4-fs (loop1): Remounting filesystem read-only [ 93.505003][ T6506] EXT4-fs warning (device loop1): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 93.507633][ T6506] EXT4-fs (loop1): 1 orphan inode deleted [ 93.536533][ T6501] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 93.539428][ T6501] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 93.551502][ T6506] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 93.554383][ T6501] BTRFS info (device loop4): turning on flush-on-commit [ 93.556107][ T6501] BTRFS info (device loop4): enabling auto defrag [ 93.557852][ T6501] BTRFS info (device loop4): doing ref verification [ 93.559550][ T6501] BTRFS info (device loop4): max_inline at 0 [ 93.581544][ T6501] BTRFS info (device loop4): force clearing of disk cache [ 93.583436][ T6501] BTRFS info (device loop4): turning on sync discard [ 93.585142][ T6501] BTRFS info (device loop4): disabling free space tree [ 93.600127][ T6526] loop0: detected capacity change from 0 to 2048 [ 93.633221][ T6526] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 93.635353][ T6526] UDF-fs: Scanning with blocksize 512 failed [ 93.657583][ T6526] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 93.689113][ T4303] EXT4-fs (loop1): unmounting filesystem. [ 93.732103][ T6517] loop2: detected capacity change from 0 to 32768 [ 93.743717][ T6517] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz.2.755 (6517) [ 93.744240][ T6501] BTRFS info (device loop4): enabling ssd optimizations [ 93.749155][ T6501] BTRFS info (device loop4): rebuilding free space tree [ 93.799707][ T6501] BTRFS info (device loop4): disabling free space tree [ 93.802101][ T6501] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 93.804482][ T6501] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 93.887951][ T6501] Process accounting resumed [ 94.013982][ T4295] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 94.307794][ T6563] loop1: detected capacity change from 0 to 1024 [ 94.364483][ T6563] hfsplus: catalog searching failed [ 94.399146][ T6567] netlink: 'syz.2.776': attribute type 8 has an invalid length. [ 94.441084][ T5218] hfsplus: b-tree write err: -5, ino 4 [ 94.763548][ T6585] loop1: detected capacity change from 0 to 256 [ 94.782017][ T6585] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fdc0, chksum : 0xac235812, utbl_chksum : 0xe619d30d) [ 94.968425][ T6589] loop0: detected capacity change from 0 to 8192 [ 94.982511][ T6595] netlink: 12 bytes leftover after parsing attributes in process `syz.1.790'. [ 94.988490][ T6589] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 95.004580][ T6589] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 95.015301][ T6589] REISERFS (device loop0): using ordered data mode [ 95.021406][ T6589] reiserfs: using flush barriers [ 95.029333][ T6589] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 95.055675][ T6589] REISERFS (device loop0): checking transaction log (loop0) [ 95.221722][ T6602] netlink: 'syz.2.794': attribute type 1 has an invalid length. [ 95.333656][ T6589] REISERFS (device loop0): Using tea hash to sort names [ 95.351915][ T6589] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 95.355559][ T6589] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 95.603656][ T27] audit: type=1326 audit(103.571:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6615 comm="syz.2.800" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa8d59a68 code=0x0 [ 95.790285][ T6620] loop0: detected capacity change from 0 to 4096 [ 95.809289][ T6620] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 95.838670][ T6623] netlink: 'syz.1.802': attribute type 1 has an invalid length. [ 95.847389][ T6620] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 95.849692][ T6623] netlink: 4 bytes leftover after parsing attributes in process `syz.1.802'. [ 95.854185][ T6620] ntfs3: loop0: mft corrupted [ 95.855387][ T6620] ntfs3: loop0: Failed to load $Extend. [ 96.086504][ T6612] loop4: detected capacity change from 0 to 40427 [ 96.102409][ T6612] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 96.107007][ T6612] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 96.110888][ T6612] F2FS-fs (loop4): invalid crc value [ 96.129293][ T6612] F2FS-fs (loop4): Found nat_bits in checkpoint [ 96.149752][ T6612] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 96.151787][ T6612] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 96.200935][ T6612] syz.4.798: attempt to access beyond end of device [ 96.200935][ T6612] loop4: rw=2049, sector=53248, nr_sectors = 128 limit=40427 [ 96.562354][ T6645] loop2: detected capacity change from 0 to 256 [ 96.724585][ T6653] netlink: 32 bytes leftover after parsing attributes in process `syz.4.815'. [ 96.735384][ T6655] loop2: detected capacity change from 0 to 1024 [ 96.738668][ T6655] EXT4-fs: Ignoring removed nomblk_io_submit option [ 96.785177][ T6655] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 96.979506][ T4305] EXT4-fs (loop2): unmounting filesystem. [ 97.097996][ T6648] loop1: detected capacity change from 0 to 40427 [ 97.162262][ T6648] F2FS-fs (loop1): Found nat_bits in checkpoint [ 97.180526][ T6678] loop2: detected capacity change from 0 to 256 [ 97.214451][ T6678] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011e5d, chksum : 0x63a11b78, utbl_chksum : 0xe619d30d) [ 97.217762][ T6648] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 97.388588][ T4303] syz-executor: attempt to access beyond end of device [ 97.388588][ T4303] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 97.835932][ T6707] loop1: detected capacity change from 0 to 512 [ 97.852204][ T6707] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 97.887983][ T6707] EXT4-fs (loop1): invalid journal inode [ 97.889539][ T6707] EXT4-fs (loop1): can't get journal size [ 97.913377][ T6707] EXT4-fs (loop1): 1 truncate cleaned up [ 97.919613][ T6707] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 98.044389][ T4303] EXT4-fs (loop1): unmounting filesystem. [ 98.125880][ T6723] loop4: detected capacity change from 0 to 512 [ 98.167427][ T6723] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.844: attempt to clear invalid blocks 2 len 1 [ 98.182771][ T6723] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters [ 98.201480][ T6723] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.844: invalid indirect mapped block 1819239214 (level 0) [ 98.206422][ T6723] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.844: invalid indirect mapped block 1819239214 (level 1) [ 98.214835][ T6723] EXT4-fs (loop4): 1 truncate cleaned up [ 98.218683][ T6723] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 98.254878][ T27] audit: type=1326 audit(106.221:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6727 comm="syz.2.847" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa8d59a68 code=0x0 [ 98.304674][ T6723] EXT4-fs (loop4): shut down requested (2) [ 98.306617][ T6723] EXT4-fs warning (device loop4): dx_probe:833: inode #2: comm syz.4.844: Unrecognised inode hash code 20 [ 98.309352][ T6723] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.844: Corrupt directory, running e2fsck is recommended [ 98.351223][ T4295] EXT4-fs (loop4): unmounting filesystem. [ 98.649272][ T6746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.659592][ T6746] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.318644][ T6759] loop1: detected capacity change from 0 to 32768 [ 99.327106][ T6759] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.860 (6759) [ 99.369340][ T6759] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 99.376262][ T6759] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 99.387347][ T6759] BTRFS info (device loop1): setting nodatacow, compression disabled [ 99.394072][ T6759] BTRFS info (device loop1): setting datacow [ 99.396844][ T6759] BTRFS info (device loop1): doing ref verification [ 99.400928][ T6759] BTRFS info (device loop1): force clearing of disk cache [ 99.409973][ T6759] BTRFS info (device loop1): turning off barriers [ 99.415586][ T6759] BTRFS info (device loop1): enabling ssd optimizations [ 99.419837][ T6759] BTRFS info (device loop1): using spread ssd allocation scheme [ 99.429278][ T6759] BTRFS info (device loop1): using free space tree [ 99.518483][ T6767] loop4: detected capacity change from 0 to 40427 [ 99.531246][ T6767] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 99.533322][ T6767] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 99.537508][ T6759] BTRFS info (device loop1): rebuilding free space tree [ 99.540692][ T6767] F2FS-fs (loop4): invalid crc value [ 99.583368][ T6767] F2FS-fs (loop4): Found nat_bits in checkpoint [ 99.612968][ T6767] F2FS-fs (loop4): Start checkpoint disabled! [ 99.623275][ T6767] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 99.625260][ T6767] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 99.627733][ T4303] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 99.682065][ T6765] netlink: 'syz.2.875': attribute type 10 has an invalid length. [ 99.719367][ T6765] device veth1_macvtap left promiscuous mode [ 99.836638][ T5218] kworker/u4:7: attempt to access beyond end of device [ 99.836638][ T5218] loop4: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 100.975467][ T6805] loop1: detected capacity change from 0 to 40427 [ 100.991996][ T6805] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 100.998675][ T6805] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 101.029401][ T6805] F2FS-fs (loop1): Found nat_bits in checkpoint [ 101.068126][ T6805] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 101.070029][ T6805] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 101.598186][ T6843] netlink: 12 bytes leftover after parsing attributes in process `syz.0.889'. [ 101.817462][ T6847] loop0: detected capacity change from 0 to 2048 [ 101.840094][ T6847] EXT4-fs: Ignoring removed mblk_io_submit option [ 101.858313][ T6828] loop2: detected capacity change from 0 to 40427 [ 101.877193][ T6828] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 101.879194][ T6828] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 101.899148][ T6847] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 101.955280][ T6847] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=on. [ 101.978411][ T6834] loop4: detected capacity change from 0 to 32768 [ 101.980588][ T6834] XFS: ikeep mount option is deprecated. [ 101.983800][ T6828] F2FS-fs (loop2): Found nat_bits in checkpoint [ 102.094741][ T6828] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 102.110532][ T4294] EXT4-fs (loop0): unmounting filesystem. [ 102.129857][ T6834] XFS (loop4): Mounting V5 Filesystem [ 102.163837][ T6828] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 102.267625][ T6834] XFS (loop4): Ending clean mount [ 102.270174][ T6834] XFS (loop4): Quotacheck needed: Please wait. [ 102.305865][ T6834] XFS (loop4): Quotacheck: Done. [ 102.376659][ T6876] netlink: 8 bytes leftover after parsing attributes in process `syz.0.898'. [ 102.441017][ T4295] XFS (loop4): Unmounting Filesystem [ 102.479967][ T6878] netlink: 'syz.3.899': attribute type 16 has an invalid length. [ 102.490061][ T6878] netlink: 'syz.3.899': attribute type 3 has an invalid length. [ 102.495625][ T6878] netlink: 'syz.3.899': attribute type 1 has an invalid length. [ 102.497501][ T6878] netlink: 'syz.3.899': attribute type 1 has an invalid length. [ 102.499459][ T6878] netlink: 'syz.3.899': attribute type 2 has an invalid length. [ 102.514464][ T6878] netlink: 64006 bytes leftover after parsing attributes in process `syz.3.899'. [ 103.439238][ T6910] netlink: 16 bytes leftover after parsing attributes in process `syz.3.913'. [ 103.452886][ T6908] loop2: detected capacity change from 0 to 1024 [ 103.475682][ T6912] netlink: 4 bytes leftover after parsing attributes in process `syz.4.914'. [ 103.632278][ T5218] hfsplus: b-tree write err: -5, ino 4 [ 103.669964][ T6914] Process accounting resumed [ 104.415884][ T6936] can0: slcan on ttyS3. [ 104.474753][ T6936] can0 (unregistered): slcan off ttyS3. [ 104.855178][ T6953] loop1: detected capacity change from 0 to 16 [ 104.857300][ T6953] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 105.287168][ T6974] loop1: detected capacity change from 0 to 2048 [ 105.300728][ T6974] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 105.387608][ T6971] mkiss: ax0: crc mode is auto. [ 105.475309][ T6980] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5 [ 106.162904][ T7024] loop4: detected capacity change from 0 to 512 [ 106.237548][ T7024] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 106.368843][ T7024] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.957: inode #64: comm syz.4.957: iget: illegal inode # [ 106.385362][ T7024] EXT4-fs (loop4): Remounting filesystem read-only [ 106.387134][ T7024] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.957: error while reading EA inode 64 err=-117 [ 106.397515][ T7040] netlink: 8 bytes leftover after parsing attributes in process `syz.1.963'. [ 106.411567][ T7040] netlink: 8 bytes leftover after parsing attributes in process `syz.1.963'. [ 106.418697][ T7024] EXT4-fs (loop4): Remounting filesystem read-only [ 106.420448][ T7024] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.957: inode #64: comm syz.4.957: iget: illegal inode # [ 106.456931][ T7024] EXT4-fs (loop4): Remounting filesystem read-only [ 106.458710][ T7024] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.957: error while reading EA inode 64 err=-117 [ 106.483090][ T7024] EXT4-fs (loop4): Remounting filesystem read-only [ 106.520546][ T7043] netlink: 4 bytes leftover after parsing attributes in process `syz.0.966'. [ 106.814431][ T4295] EXT4-fs (loop4): unmounting filesystem. [ 106.914635][ T7052] loop1: detected capacity change from 0 to 256 [ 106.928324][ T7052] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 107.328710][ T7070] loop1: detected capacity change from 0 to 128 [ 107.538315][ T7083] loop2: detected capacity change from 0 to 8 [ 107.674182][ T7080] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 107.996778][ T7095] loop0: detected capacity change from 0 to 2048 [ 108.046322][ T7095] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 108.060229][ T7095] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 108.449445][ T7089] loop1: detected capacity change from 0 to 32768 [ 108.490586][ T7093] loop2: detected capacity change from 0 to 32768 [ 108.518079][ T7115] netlink: 16 bytes leftover after parsing attributes in process `syz.0.997'. [ 108.548007][ T7089] XFS (loop1): Mounting V5 Filesystem [ 108.572584][ T7093] XFS (loop2): Mounting V5 Filesystem [ 108.704283][ T7093] XFS (loop2): Ending clean mount [ 108.708930][ T7089] XFS (loop1): Ending clean mount [ 108.710813][ T22] XFS (loop2): Metadata CRC error detected at xfs_inobt_read_verify+0x50/0x108, xfs_finobt block 0x20 [ 108.720180][ T22] XFS (loop2): Unmount and run xfs_repair [ 108.722354][ T22] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 108.724140][ T22] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff FIB3............ [ 108.737707][ T22] 00000010: 00 00 00 00 00 00 00 20 00 00 00 01 00 00 00 40 ....... .......@ [ 108.739926][ T22] 00000020: 9f 1c ad 42 11 bd 4e 12 8f 0b f0 78 76 b8 1d 9a ...B..N....xv... [ 108.768245][ T22] 00000030: 00 00 00 00 8a d2 18 46 00 00 16 80 00 00 40 37 .......F......@7 [ 108.784128][ T22] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00 ................ [ 108.786382][ T22] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 09 00 00 ................ [ 108.808944][ T22] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 108.813748][ T22] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 108.816042][ T7093] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x1f4/0x2f8" at daddr 0x20 len 8 error 74 [ 108.819086][ T7093] XFS (loop2): Failed to initialize disk quotas. [ 108.831883][ T7089] XFS (loop1): Quotacheck needed: Please wait. [ 108.875678][ T7089] XFS (loop1): Quotacheck: Done. [ 108.895581][ T4285] XFS (loop2): Metadata CRC error detected at xfs_inobt_read_verify+0x50/0x108, xfs_finobt block 0x20 [ 108.898648][ T4285] XFS (loop2): Unmount and run xfs_repair [ 108.900209][ T4285] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 108.904932][ T4285] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff FIB3............ [ 108.910264][ T4285] 00000010: 00 00 00 00 00 00 00 20 00 00 00 01 00 00 00 40 ....... .......@ [ 108.925248][ T4285] 00000020: 9f 1c ad 42 11 bd 4e 12 8f 0b f0 78 76 b8 1d 9a ...B..N....xv... [ 108.927615][ T4285] 00000030: 00 00 00 00 8a d2 18 46 00 00 16 80 00 00 40 37 .......F......@7 [ 108.929890][ T4285] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00 ................ [ 108.934135][ T7137] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1003'. [ 108.958175][ T4285] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 09 00 00 ................ [ 108.960749][ T4285] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 108.975875][ T4285] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 108.978240][ T7093] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x1f4/0x2f8" at daddr 0x20 len 8 error 74 [ 109.052821][ T4305] XFS (loop2): Unmounting Filesystem [ 109.076383][ T4303] XFS (loop1): Unmounting Filesystem [ 109.560016][ T7163] loop0: detected capacity change from 0 to 512 [ 109.586313][ T7163] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 109.605893][ T7163] EXT4-fs error (device loop0): ext4_orphan_get:1426: comm syz.0.1014: bad orphan inode 16 [ 109.608893][ T7163] ext4_test_bit(bit=15, block=4) = 0 [ 109.610254][ T7163] EXT4-fs (loop0): 1 orphan inode deleted [ 109.618667][ T7163] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 109.721423][ T4294] EXT4-fs (loop0): unmounting filesystem. [ 109.859832][ T7181] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1021'. [ 110.331039][ T7207] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1034'. [ 110.464783][ T7214] loop0: detected capacity change from 0 to 512 [ 110.486497][ T7214] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 110.608721][ T4294] EXT4-fs (loop0): unmounting filesystem. [ 110.769441][ T7225] loop0: detected capacity change from 0 to 2048 [ 110.788788][ T7225] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 111.018137][ T7231] loop0: detected capacity change from 0 to 256 [ 111.027579][ T7231] MINIX-fs: mounting file system with errors, running fsck is recommended [ 111.356987][ T7241] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1050'. [ 111.368292][ T7241] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1050'. [ 111.475672][ T7249] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1052'. [ 111.750648][ T7259] loop4: detected capacity change from 0 to 512 [ 111.765504][ T7259] EXT4-fs: Ignoring removed i_version option [ 111.767058][ T7259] EXT4-fs: Ignoring removed mblk_io_submit option [ 111.789610][ T7259] EXT4-fs (loop4): Test dummy encryption mode enabled [ 111.807643][ T7259] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c018, mo2=0103] [ 111.810609][ T7259] EXT4-fs error (device loop4): ext4_orphan_get:1400: comm syz.4.1058: inode #13: comm syz.4.1058: iget: illegal inode # [ 111.820334][ T7259] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.1058: couldn't read orphan inode 13 (err -117) [ 111.830064][ T7259] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 111.862535][ T7259] EXT4-fs (loop4): shut down requested (2) [ 111.871704][ T7259] EXT4-fs (loop4): re-mounted. Quota mode: none. [ 111.959303][ T7251] loop0: detected capacity change from 0 to 32768 [ 111.966224][ T7251] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.1065 (7251) [ 111.992818][ T4295] EXT4-fs (loop4): unmounting filesystem. [ 111.994762][ T7251] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 111.997385][ T7251] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 111.999576][ T7251] BTRFS info (device loop0): setting nodatacow, compression disabled [ 112.020703][ T7251] BTRFS info (device loop0): doing ref verification [ 112.030829][ T7251] BTRFS info (device loop0): turning off barriers [ 112.033539][ T7251] BTRFS info (device loop0): enabling ssd optimizations [ 112.035339][ T7251] BTRFS info (device loop0): using spread ssd allocation scheme [ 112.037203][ T7251] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 112.039624][ T7251] BTRFS info (device loop0): force lzo compression, level 0 [ 112.052358][ T7251] BTRFS info (device loop0): turning on sync discard [ 112.058756][ T7251] BTRFS info (device loop0): using free space tree [ 112.101456][ T7270] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1074'. [ 112.166082][ T7245] loop2: detected capacity change from 0 to 40427 [ 112.178091][ T7245] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 112.180235][ T7245] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 112.195445][ T7245] F2FS-fs (loop2): invalid crc value [ 112.214447][ T7245] F2FS-fs (loop2): Found nat_bits in checkpoint [ 112.282334][ T7245] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 112.284266][ T7245] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 112.529848][ T5218] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 112.533812][ T5218] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 112.629574][ T4294] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 112.634661][ T7288] loop4: detected capacity change from 0 to 32768 [ 112.737138][ T7288] XFS (loop4): Mounting V5 Filesystem [ 112.940144][ T7288] XFS (loop4): Ending clean mount [ 112.950213][ T7288] XFS (loop4): Quotacheck needed: Please wait. [ 112.992214][ T7288] XFS (loop4): Quotacheck: Done. [ 113.065712][ T4295] XFS (loop4): Unmounting Filesystem [ 113.133595][ T4296] Bluetooth: hci5: sending frame failed (-49) [ 113.145711][ T4302] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 113.159533][ T7316] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 113.545887][ T7314] loop0: detected capacity change from 0 to 32768 [ 113.548005][ T7314] XFS: ikeep mount option is deprecated. [ 113.549547][ T7314] XFS: ikeep mount option is deprecated. [ 113.648218][ T7314] XFS (loop0): Mounting V5 Filesystem [ 113.829894][ T7314] XFS (loop0): Ending clean mount [ 113.838176][ T7314] XFS (loop0): Quotacheck needed: Please wait. [ 113.863487][ T7348] loop4: detected capacity change from 0 to 64 [ 113.902392][ T7348] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 113.909211][ T7330] loop1: detected capacity change from 0 to 32768 [ 113.919043][ T7314] XFS (loop0): Quotacheck: Done. [ 113.964082][ T7348] MINIX-fs warning: remounting unchecked fs, running fsck is recommended [ 113.976469][ T7348] MINIX-fs warning: remounting unchecked fs, running fsck is recommended [ 114.015818][ T7330] XFS (loop1): Mounting V5 Filesystem [ 114.140847][ T7366] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1085'. [ 114.199968][ T7330] XFS (loop1): Ending clean mount [ 114.203887][ T7330] XFS (loop1): Quotacheck needed: Please wait. [ 114.270591][ T4294] XFS (loop0): Unmounting Filesystem [ 114.316933][ T7330] XFS (loop1): Quotacheck: Done. [ 114.387703][ T4303] XFS (loop1): Unmounting Filesystem [ 114.596138][ T7368] loop2: detected capacity change from 0 to 32768 [ 114.598879][ T7368] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.1088 (7368) [ 114.615032][ T7368] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 114.617681][ T7368] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm [ 114.619941][ T7368] BTRFS info (device loop2): enabling auto defrag [ 114.636736][ T7368] BTRFS info (device loop2): setting nodatasum [ 114.638414][ T7368] BTRFS info (device loop2): use no compression [ 114.639972][ T7368] BTRFS info (device loop2): force clearing of disk cache [ 114.648083][ T7368] BTRFS info (device loop2): max_inline at 0 [ 114.650915][ T7368] BTRFS info (device loop2): disabling free space tree [ 114.920294][ T7368] BTRFS info (device loop2): enabling ssd optimizations [ 114.927434][ T7368] BTRFS info (device loop2): rebuilding free space tree [ 114.947838][ T7368] BTRFS info (device loop2): disabling free space tree [ 114.949758][ T7368] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 114.952825][ T7368] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 115.080600][ T4305] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 115.239529][ T4340] hid-generic 0005:07C0:0009.0003: item fetching failed at offset 0/1 [ 115.261872][ T4340] hid-generic: probe of 0005:07C0:0009.0003 failed with error -22 [ 115.918976][ T7425] loop1: detected capacity change from 0 to 40427 [ 115.946403][ T7425] F2FS-fs (loop1): invalid crc value [ 115.957938][ T7425] F2FS-fs (loop1): Found nat_bits in checkpoint [ 115.989696][ T7425] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 116.042217][ T4303] syz-executor: attempt to access beyond end of device [ 116.042217][ T4303] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 116.251914][ T7437] loop0: detected capacity change from 0 to 65536 [ 116.261004][ T7437] XFS (loop0): Mounting V5 Filesystem [ 116.324005][ T7437] XFS (loop0): Ending clean mount [ 116.505496][ T4294] XFS (loop0): Unmounting Filesystem [ 116.533127][ T7459] loop4: detected capacity change from 0 to 1024 [ 117.158714][ T7468] loop4: detected capacity change from 0 to 40427 [ 117.227889][ T5853] I/O error, dev loop4, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 117.738202][ T27] audit: type=1326 audit(133.703:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7497 comm="syz.4.1132" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ef59a68 code=0x0 [ 118.140259][ T7492] loop2: detected capacity change from 0 to 65536 [ 118.226447][ T7492] XFS (loop2): Mounting V5 Filesystem [ 118.268619][ T7492] XFS (loop2): Ending clean mount [ 118.360636][ T4305] XFS (loop2): Unmounting Filesystem [ 118.731636][ T7535] netlink: 'syz.3.1148': attribute type 1 has an invalid length. [ 118.733762][ T7535] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1148'. [ 119.040382][ T7552] netlink: 47 bytes leftover after parsing attributes in process `syz.3.1159'. [ 119.385124][ T7553] loop0: detected capacity change from 0 to 32768 [ 119.407942][ T7553] ERROR: (device loop0): dbAllocNext: Corrupt dmap page [ 119.407942][ T7553] [ 119.410460][ T7553] ERROR: (device loop0): remounting filesystem as read-only [ 119.412948][ T7553] ialloc: diAlloc returned -5! [ 119.416925][ T7553] ERROR: (device loop0): dbAllocAG: unable to allocate blocks [ 119.416925][ T7553] [ 119.419367][ T7553] ERROR: (device loop0): dbDiscardAG: -EIO [ 119.419367][ T7553] [ 119.683576][ T7579] loop2: detected capacity change from 0 to 256 [ 119.737599][ T7579] FAT-fs (loop2): Directory bread(block 64) failed [ 119.741914][ T7579] FAT-fs (loop2): Directory bread(block 65) failed [ 119.745929][ T7579] FAT-fs (loop2): Directory bread(block 66) failed [ 119.750151][ T7579] FAT-fs (loop2): Directory bread(block 67) failed [ 119.770437][ T7579] FAT-fs (loop2): Directory bread(block 68) failed [ 119.777527][ T7579] FAT-fs (loop2): Directory bread(block 69) failed [ 119.786130][ T7579] FAT-fs (loop2): Directory bread(block 70) failed [ 119.790277][ T7579] FAT-fs (loop2): Directory bread(block 71) failed [ 119.797202][ T7579] FAT-fs (loop2): Directory bread(block 72) failed [ 119.799079][ T7584] loop0: detected capacity change from 0 to 256 [ 119.802297][ T7579] FAT-fs (loop2): Directory bread(block 73) failed [ 119.895552][ T7584] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 120.007345][ T7592] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1177'. [ 120.021888][ T1587] kworker/u4:4: attempt to access beyond end of device [ 120.021888][ T1587] loop2: rw=1, sector=1224, nr_sectors = 8 limit=256 [ 120.720369][ T7627] loop4: detected capacity change from 0 to 1024 [ 120.817130][ T7633] loop0: detected capacity change from 0 to 512 [ 120.878395][ T7633] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz.0.1194: attempt to clear invalid blocks 2 len 1 [ 120.886343][ T7633] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters [ 120.890442][ T7633] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.1194: invalid indirect mapped block 1819239214 (level 0) [ 120.898485][ T7633] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.1194: invalid indirect mapped block 1819239214 (level 1) [ 120.904283][ T7633] EXT4-fs (loop0): 1 truncate cleaned up [ 120.905913][ T7633] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 120.942810][ T7633] EXT4-fs (loop0): shut down requested (2) [ 120.949442][ T7633] EXT4-fs warning (device loop0): dx_probe:833: inode #2: comm syz.0.1194: Unrecognised inode hash code 20 [ 120.966294][ T7633] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.1194: Corrupt directory, running e2fsck is recommended [ 121.015687][ T7629] loop2: detected capacity change from 0 to 32768 [ 121.018558][ T7629] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.1191 (7629) [ 121.037064][ T7629] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 121.050965][ T7629] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm [ 121.054554][ T7629] BTRFS info (device loop2): using free space tree [ 121.070209][ T4294] EXT4-fs (loop0): unmounting filesystem. [ 121.201665][ T7629] BTRFS info (device loop2): enabling ssd optimizations [ 121.278007][ T7629] fs-verity (loop2, inode 261): fs-verity keyring is empty, rejecting signed file! [ 121.330972][ T7638] loop4: detected capacity change from 0 to 40427 [ 121.380231][ T4305] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 121.394107][ T7638] F2FS-fs (loop4): Found nat_bits in checkpoint [ 121.505033][ T7638] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 121.631675][ T4295] syz-executor: attempt to access beyond end of device [ 121.631675][ T4295] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 122.352605][ T7678] loop2: detected capacity change from 0 to 32768 [ 122.360035][ T7678] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by syz.2.1204 (7678) [ 122.402091][ T7678] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 122.405326][ T7678] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 122.407726][ T7678] BTRFS info (device loop2): using free space tree [ 122.610065][ T7678] BTRFS info (device loop2): enabling ssd optimizations [ 122.665839][ T4305] BTRFS info (device loop2): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 122.813316][ T7703] loop1: detected capacity change from 0 to 40427 [ 122.819419][ T7703] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x3ffff [ 122.823035][ T7703] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x2 [ 122.837371][ T7703] F2FS-fs (loop1): invalid crc value [ 122.863682][ T7703] F2FS-fs (loop1): Found nat_bits in checkpoint [ 122.912153][ T7703] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 123.011852][ T7703] syz.1.1217: attempt to access beyond end of device [ 123.011852][ T7703] loop1: rw=34817, sector=77832, nr_sectors = 16 limit=40427 [ 123.106691][ T4303] syz-executor: attempt to access beyond end of device [ 123.106691][ T4303] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 123.201625][ T7754] loop0: detected capacity change from 0 to 256 [ 123.226524][ T7754] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011e5d, chksum : 0x63a11b78, utbl_chksum : 0xe619d30d) [ 123.240068][ T7760] loop2: detected capacity change from 0 to 128 [ 123.636084][ T7760] syz.2.1234: attempt to access beyond end of device [ 123.636084][ T7760] loop2: rw=2049, sector=172, nr_sectors = 192 limit=128 [ 123.672033][ T7775] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1241'. [ 123.814541][ T7780] loop1: detected capacity change from 0 to 16 [ 123.822255][ T7780] erofs: (device loop1): mounted with root inode @ nid 36. [ 123.870938][ T5218] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 124.079429][ T7796] bridge0: port 2(bridge_slave_1) entered learning state [ 124.095416][ T7798] loop1: detected capacity change from 0 to 256 [ 124.115368][ T7796] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.326550][ T7809] loop4: detected capacity change from 0 to 512 [ 124.355846][ T7809] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 124.378384][ T7809] EXT4-fs (loop4): invalid journal inode [ 124.384371][ T7809] EXT4-fs (loop4): can't get journal size [ 124.401822][ T7809] EXT4-fs (loop4): 1 truncate cleaned up [ 124.403371][ T7809] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 124.517848][ T4295] EXT4-fs (loop4): unmounting filesystem. [ 124.574376][ T7814] loop2: detected capacity change from 0 to 8192 [ 124.576954][ T7814] REISERFS warning (device loop2): super-6515 reiserfs_parse_options: journaled quota format not specified. [ 124.667124][ T7806] loop1: detected capacity change from 0 to 32768 [ 124.685936][ T7806] XFS (loop1): Mounting V5 Filesystem [ 124.724116][ T7806] XFS (loop1): Starting recovery (logdev: internal) [ 124.760558][ T7806] XFS (loop1): Ending recovery (logdev: internal) [ 124.813009][ T4303] XFS (loop1): Unmounting Filesystem [ 125.141833][ T4458] usb 1-1: new low-speed USB device number 6 using dummy_hcd [ 125.323390][ T4458] usb 1-1: config 0 has no interfaces? [ 125.325756][ T4458] usb 1-1: config 0 has no interfaces? [ 125.328202][ T4458] usb 1-1: config 0 has no interfaces? [ 125.334135][ T4458] usb 1-1: string descriptor 0 read error: -22 [ 125.335785][ T4458] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 125.338223][ T4458] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.354557][ T4458] usb 1-1: config 0 descriptor?? [ 125.597834][ T6219] usb 1-1: USB disconnect, device number 6 [ 125.942495][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.944162][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.139391][ T7869] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1269'. [ 126.142354][ T7869] IPVS: Error joining to the multicast group [ 126.329544][ T7879] loop1: detected capacity change from 0 to 4096 [ 126.339700][ T7879] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 126.387200][ T7879] ntfs: volume version 3.1. [ 126.805958][ T7901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.808244][ T7901] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.149413][ T7899] loop4: detected capacity change from 0 to 32768 [ 127.169710][ T7899] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.1286 (7899) [ 127.194413][ T7899] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 127.197145][ T7899] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 127.199323][ T7899] BTRFS info (device loop4): using free space tree [ 127.325735][ T7918] input: syz0 as /devices/virtual/input/input6 [ 127.437217][ T7899] BTRFS info (device loop4): enabling ssd optimizations [ 127.486866][ T7899] fs-verity (loop4, inode 261): fs-verity keyring is empty, rejecting signed file! [ 127.539517][ T7936] loop2: detected capacity change from 0 to 128 [ 127.542639][ T7936] VFS: Found a Xenix FS (block size = 1024) on device loop2 [ 127.605356][ T4295] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 127.804398][ T7942] loop2: detected capacity change from 0 to 4096 [ 127.806716][ T7942] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 127.826798][ T7942] ntfs: volume version 3.1. [ 128.048612][ T7956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.050977][ T7956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.378850][ T7972] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.381019][ T7972] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.383638][ T7972] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.385855][ T7972] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.590682][ T7968] loop0: detected capacity change from 0 to 32768 [ 128.618718][ T7968] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.1308 (7968) [ 128.639315][ T7968] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 128.642450][ T7968] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 128.644623][ T7968] BTRFS info (device loop0): setting nodatacow, compression disabled [ 128.646636][ T7968] BTRFS info (device loop0): setting datacow [ 128.661888][ T7968] BTRFS info (device loop0): doing ref verification [ 128.663658][ T7968] BTRFS info (device loop0): force clearing of disk cache [ 128.665460][ T7968] BTRFS info (device loop0): turning off barriers [ 128.667140][ T7968] BTRFS info (device loop0): enabling ssd optimizations [ 128.670524][ T7968] BTRFS info (device loop0): using spread ssd allocation scheme [ 128.679386][ T7968] BTRFS info (device loop0): using free space tree [ 128.893241][ T7968] BTRFS info (device loop0): rebuilding free space tree [ 129.038174][ T4294] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 129.450226][ T8018] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1324'. [ 130.040733][ T8046] loop0: detected capacity change from 0 to 256 [ 130.057761][ T8046] exfat: Deprecated parameter 'utf8' [ 130.059137][ T8046] exfat: Deprecated parameter 'utf8' [ 130.082895][ T8046] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 130.189243][ T8050] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1339'. [ 130.207020][ T8050] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1339'. [ 130.209276][ T8050] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1339'. [ 130.217143][ T8050] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1339'. [ 130.539968][ T8040] loop1: detected capacity change from 0 to 32768 [ 130.559553][ T8040] XFS: ikeep mount option is deprecated. [ 130.648977][ T8040] XFS (loop1): Mounting V5 Filesystem [ 130.831814][ T8040] XFS (loop1): Ending clean mount [ 130.834356][ T8040] XFS (loop1): Quotacheck needed: Please wait. [ 130.880913][ T8075] bridge: RTM_NEWNEIGH with unconfigured vlan 1 on bridge_slave_0 [ 130.928040][ T8040] XFS (loop1): Quotacheck: Done. [ 131.084885][ T8065] loop0: detected capacity change from 0 to 32768 [ 131.123923][ T4303] XFS (loop1): Unmounting Filesystem [ 131.153971][ T8065] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.1346 (8065) [ 131.197061][ T8065] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 131.199884][ T8065] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 131.211277][ T8065] BTRFS info (device loop0): using free space tree [ 131.290639][ T8082] loop4: detected capacity change from 0 to 4096 [ 131.302539][ T8082] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 131.359327][ T8082] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 131.516971][ T8065] BTRFS info (device loop0): enabling ssd optimizations [ 131.548572][ T8102] ptrace attach of "./syz-executor exec"[4305] was attempted by "000000030 36 78 20 80 veth0_vlan\x0afe8000000000000000000000ac141418 4a 40 20 80 sit1\x0a"[8102] [ 131.583245][ T8065] fs-verity (loop0, inode 261): fs-verity keyring is empty, rejecting signed file! [ 131.717817][ T4294] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 132.486521][ T8135] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1366'. [ 132.684085][ T8137] input: syz0 as /devices/virtual/input/input7 [ 132.884362][ T8124] loop0: detected capacity change from 0 to 32768 [ 132.964570][ T8124] XFS (loop0): Mounting V5 Filesystem [ 133.004857][ T8131] loop1: detected capacity change from 0 to 40427 [ 133.009227][ T8131] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 133.011749][ T8131] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 133.073652][ T8131] F2FS-fs (loop1): Found nat_bits in checkpoint [ 133.080716][ T8124] XFS (loop0): Ending clean mount [ 133.097401][ T8124] XFS (loop0): Quotacheck needed: Please wait. [ 133.128034][ T8131] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 133.130123][ T8131] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 133.178768][ T8124] XFS (loop0): Quotacheck: Done. [ 133.322999][ T8133] loop4: detected capacity change from 0 to 32768 [ 133.403631][ T4294] XFS (loop0): Unmounting Filesystem [ 133.426539][ T8133] XFS (loop4): Mounting V5 Filesystem [ 133.555555][ T8133] XFS (loop4): Ending clean mount [ 133.558243][ T8133] XFS (loop4): Quotacheck needed: Please wait. [ 133.601590][ T8133] XFS (loop4): Quotacheck: Done. [ 133.812304][ T4295] XFS (loop4): Unmounting Filesystem [ 134.082351][ T8190] netlink: 'syz.0.1376': attribute type 46 has an invalid length. [ 134.084379][ T8190] netlink: 212868 bytes leftover after parsing attributes in process `syz.0.1376'. [ 134.272156][ T8198] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1390'. [ 134.274652][ T8198] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.435860][ T8186] loop1: detected capacity change from 0 to 40427 [ 134.450409][ T8186] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x3ffff [ 134.466497][ T8186] F2FS-fs (loop1): invalid crc value [ 134.478859][ T8186] F2FS-fs (loop1): Found nat_bits in checkpoint [ 134.515892][ T8186] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 134.548935][ T4302] Bluetooth: hci3: unexpected cc 0x2039 length: 2 > 1 [ 134.786229][ T8204] loop0: detected capacity change from 0 to 32768 [ 134.806842][ T8204] XFS (loop0): Mounting V5 Filesystem [ 134.854653][ T8204] XFS (loop0): Ending clean mount [ 134.857338][ T8204] XFS (loop0): Quotacheck needed: Please wait. [ 134.889453][ T8204] XFS (loop0): Quotacheck: Done. [ 134.977386][ T4294] XFS (loop0): Unmounting Filesystem [ 135.809034][ T8265] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1409'. [ 135.813610][ T8260] loop4: detected capacity change from 0 to 512 [ 135.831666][ T8260] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 135.877189][ T8260] EXT4-fs error (device loop4): ext4_orphan_get:1426: comm syz.4.1408: bad orphan inode 16 [ 135.887740][ T8260] ext4_test_bit(bit=15, block=4) = 0 [ 135.889222][ T8260] EXT4-fs (loop4): 1 orphan inode deleted [ 135.890790][ T8260] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 136.021658][ T4302] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 136.024203][ T4302] Bluetooth: hci0: Injecting HCI hardware error event [ 136.027964][ T4296] Bluetooth: hci0: hardware error 0x00 [ 136.077487][ T4295] EXT4-fs (loop4): unmounting filesystem. [ 136.496366][ T8264] loop1: detected capacity change from 0 to 32768 [ 136.580517][ T8264] XFS (loop1): Mounting V5 Filesystem [ 136.657275][ T8264] XFS (loop1): Ending clean mount [ 136.660197][ T8264] XFS (loop1): Quotacheck needed: Please wait. [ 136.671025][ T8294] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1420'. [ 136.720178][ T8264] XFS (loop1): Quotacheck: Done. [ 136.862821][ T4303] XFS (loop1): Unmounting Filesystem [ 136.921152][ T8305] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1428'. [ 136.928980][ T8305] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.069722][ T8314] loop4: detected capacity change from 0 to 256 [ 137.089033][ T8314] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 137.505347][ T8333] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1441'. [ 137.518271][ T8334] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1442'. [ 137.523314][ T8333] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1441'. [ 137.758277][ T8347] loop1: detected capacity change from 0 to 512 [ 137.785858][ T8347] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 137.818080][ T8347] EXT4-fs error (device loop1): ext4_orphan_get:1426: comm syz.1.1447: bad orphan inode 16 [ 137.821650][ T8347] ext4_test_bit(bit=15, block=4) = 0 [ 137.826677][ T8347] EXT4-fs (loop1): 1 orphan inode deleted [ 137.828230][ T8347] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 137.879564][ T4303] EXT4-fs (loop1): unmounting filesystem. [ 137.907020][ T8326] loop2: detected capacity change from 0 to 32768 [ 137.915244][ T8326] XFS (loop2): Mounting V5 Filesystem [ 137.971630][ T8326] XFS (loop2): Ending clean mount [ 137.974584][ T8326] XFS (loop2): Quotacheck needed: Please wait. [ 138.007443][ T8326] XFS (loop2): Quotacheck: Done. [ 138.073533][ T4305] XFS (loop2): Unmounting Filesystem [ 138.181630][ T4296] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 139.046783][ T8400] loop1: detected capacity change from 0 to 512 [ 139.077920][ T8400] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 139.127470][ T8400] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.1466: inode #64: comm syz.1.1466: iget: illegal inode # [ 139.131887][ T8400] EXT4-fs (loop1): Remounting filesystem read-only [ 139.133547][ T8400] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.1466: error while reading EA inode 64 err=-117 [ 139.168470][ T8400] EXT4-fs (loop1): Remounting filesystem read-only [ 139.177253][ T8400] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.1466: inode #64: comm syz.1.1466: iget: illegal inode # [ 139.213826][ T8400] EXT4-fs (loop1): Remounting filesystem read-only [ 139.215827][ T8408] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input8 [ 139.230389][ T8400] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.1466: error while reading EA inode 64 err=-117 [ 139.266510][ T8400] EXT4-fs (loop1): Remounting filesystem read-only [ 139.423982][ T4303] EXT4-fs (loop1): unmounting filesystem. [ 139.443290][ T8420] loop4: detected capacity change from 0 to 2048 [ 139.460876][ T8420] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 139.920797][ T8416] loop2: detected capacity change from 0 to 32768 [ 139.930690][ T8416] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.1474 (8416) [ 139.984581][ T8416] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 139.987370][ T8416] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm [ 140.003593][ T8416] BTRFS info (device loop2): enabling auto defrag [ 140.005306][ T8416] BTRFS info (device loop2): turning on async discard [ 140.007234][ T8416] BTRFS info (device loop2): max_inline at 4096 [ 140.008917][ T8416] BTRFS info (device loop2): force clearing of disk cache [ 140.010791][ T8416] BTRFS info (device loop2): using free space tree [ 140.029669][ T8438] loop4: detected capacity change from 0 to 16 [ 140.032451][ T8438] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 140.374443][ T8468] can0: slcan on ttyS3. [ 140.376351][ T8416] BTRFS info (device loop2): enabling ssd optimizations [ 140.382465][ T8416] BTRFS info (device loop2): rebuilding free space tree [ 140.399198][ T8416] BTRFS info (device loop2): checking UUID tree [ 140.462251][ T8468] can0 (unregistered): slcan off ttyS3. [ 141.017403][ T4305] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 141.066869][ T8505] mkiss: ax0: crc mode is auto. [ 141.395266][ T8528] Process accounting resumed [ 141.419398][ T8526] loop0: detected capacity change from 0 to 4096 [ 141.425096][ T8526] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 141.436868][ T8526] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 4096) [ 141.473893][ T8529] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 141.582659][ T8533] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1507'. [ 141.619371][ T8535] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1510'. [ 141.781627][ T8546] loop4: detected capacity change from 0 to 1024 [ 141.817137][ T8542] loop2: detected capacity change from 0 to 4096 [ 141.825312][ T8542] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 141.829109][ T8542] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 4096) [ 141.864644][ T8550] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 141.882811][ T5218] hfsplus: b-tree write err: -5, ino 4 [ 142.202765][ T8563] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1530'. [ 142.285264][ T5951] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 142.428628][ T8555] loop1: detected capacity change from 0 to 32768 [ 142.440480][ T5951] usb 1-1: device descriptor read/64, error -71 [ 142.467506][ T8555] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 142.509872][ T8569] mkiss: ax0: crc mode is auto. [ 142.606509][ T4303] ocfs2: Unmounting device (7,1) on (node local) [ 142.724859][ T5951] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 142.881709][ T5951] usb 1-1: device descriptor read/64, error -71 [ 143.012084][ T5951] usb usb1-port1: attempt power cycle [ 143.076976][ T8571] loop2: detected capacity change from 0 to 65536 [ 143.108708][ T8571] XFS (loop2): Mounting V5 Filesystem [ 143.136525][ T8571] XFS (loop2): Ending clean mount [ 143.193809][ T8571] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x50/0x108, xfs_bnobt block 0x8004 [ 143.196743][ T8571] XFS (loop2): Unmount and run xfs_repair [ 143.198257][ T8571] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 143.200103][ T8571] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 143.207445][ T8571] 00000010: 00 00 00 00 00 00 80 04 00 00 00 00 00 00 00 00 ................ [ 143.209731][ T8571] 00000020: e4 65 4a 66 62 e5 49 63 a8 1e 01 2d 9d b5 f2 ff .eJfb.Ic...-.... [ 143.212406][ T8571] 00000030: ff 00 00 01 b6 20 66 c5 00 00 00 05 00 00 00 03 ..... f......... [ 143.214447][ T8571] 00000040: 00 00 04 a4 00 00 3b 5c 00 00 00 00 00 00 00 00 ......;\........ [ 143.216746][ T8571] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 143.218978][ T8571] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 143.221051][ T8571] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 143.223857][ T8571] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x1f4/0x2f8" at daddr 0x8004 len 2 error 74 [ 143.306748][ T8617] loop1: detected capacity change from 0 to 764 [ 143.314299][ T8617] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 143.319123][ T4305] XFS (loop2): Unmounting Filesystem [ 143.441755][ T5951] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 143.472125][ T5951] usb 1-1: device descriptor read/8, error -71 [ 143.534888][ T8626] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1532'. [ 143.756927][ T5951] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 143.800006][ T5951] usb 1-1: device descriptor read/8, error -71 [ 143.921995][ T5951] usb usb1-port1: unable to enumerate USB device [ 144.078976][ T8636] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1546'. [ 144.378672][ T8647] loop4: detected capacity change from 0 to 128 [ 144.395851][ T8647] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 144.452683][ T4295] EXT4-fs (loop4): unmounting filesystem. [ 144.944593][ T8670] loop0: detected capacity change from 0 to 128 [ 144.976134][ T8670] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 145.025848][ T8652] loop1: detected capacity change from 0 to 40427 [ 145.039131][ T8652] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 145.041894][ T8652] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 145.052979][ T8652] F2FS-fs (loop1): invalid crc_offset: 33558524 [ 145.134470][ T8652] F2FS-fs (loop1): Found nat_bits in checkpoint [ 145.175856][ T8652] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 145.177774][ T8652] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 145.192614][ T4294] EXT4-fs (loop0): unmounting filesystem. [ 145.204805][ T8683] loop2: detected capacity change from 0 to 2048 [ 145.232219][ T8683] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 145.236801][ T8683] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 145.299015][ T8652] f2fs_fill_dentries: 25 callbacks suppressed [ 145.299030][ T8652] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 145.300693][ T8652] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 145.316728][ T8652] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 145.318701][ T8652] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 145.331682][ T8652] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 145.335095][ T8652] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 145.341627][ T8652] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 145.347720][ T8652] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 145.352319][ T8652] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 145.354277][ T8652] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 145.386676][ T8677] loop4: detected capacity change from 0 to 32768 [ 145.408499][ T8677] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz.4.1553 (8677) [ 145.419779][ T8677] BTRFS info (device loop4): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 145.427237][ T8677] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 145.430438][ T8677] BTRFS info (device loop4): using free space tree [ 145.580976][ T8677] BTRFS info (device loop4): enabling ssd optimizations [ 145.962813][ T4295] BTRFS info (device loop4): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 146.116728][ T8696] loop2: detected capacity change from 0 to 40427 [ 146.127447][ T8696] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 146.134296][ T8696] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 146.148753][ T8696] F2FS-fs (loop2): invalid crc_offset: 33558524 [ 146.186333][ T8696] F2FS-fs (loop2): Found nat_bits in checkpoint [ 146.214522][ T8696] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 146.216620][ T8696] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 146.295464][ T8723] loop4: detected capacity change from 0 to 8 [ 146.344537][ T8715] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 146.635000][ T8726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.638929][ T8726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.844356][ T8744] loop1: detected capacity change from 0 to 2048 [ 146.850080][ T8744] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 147.292114][ T8751] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 147.598539][ T27] audit: type=1326 audit(187.562:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8737 comm="syz.4.1569" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ef59a68 code=0x7fc00000 [ 147.604606][ T27] audit: type=1326 audit(187.562:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8737 comm="syz.4.1569" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff8ef57f94 code=0x7fc00000 [ 147.614250][ T27] audit: type=1326 audit(187.562:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8737 comm="syz.4.1569" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ef59a68 code=0x7fc00000 [ 147.627587][ T27] audit: type=1326 audit(187.562:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8737 comm="syz.4.1569" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ef59a68 code=0x7fc00000 [ 147.633495][ T27] audit: type=1326 audit(187.562:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8737 comm="syz.4.1569" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ef59a68 code=0x7fc00000 [ 147.639027][ T27] audit: type=1326 audit(187.562:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8737 comm="syz.4.1569" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ef59a68 code=0x7fc00000 [ 147.644795][ T27] audit: type=1326 audit(187.562:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8737 comm="syz.4.1569" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ef59a68 code=0x7fc00000 [ 147.649904][ T27] audit: type=1326 audit(187.562:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8737 comm="syz.4.1569" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ef59a68 code=0x7fc00000 [ 147.656824][ T27] audit: type=1326 audit(187.562:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8737 comm="syz.4.1569" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ef59a68 code=0x7fc00000 [ 147.662598][ T27] audit: type=1326 audit(187.562:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8737 comm="syz.4.1569" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ef59a68 code=0x7fc00000 [ 148.049378][ T8754] loop1: detected capacity change from 0 to 32768 [ 148.115715][ T8754] XFS (loop1): Mounting V5 Filesystem [ 148.136068][ T8759] loop4: detected capacity change from 0 to 40427 [ 148.168261][ T8759] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 148.175643][ T8759] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 148.184196][ T8759] F2FS-fs (loop4): invalid crc_offset: 33558524 [ 148.224887][ T8754] XFS (loop1): Ending clean mount [ 148.227719][ T8754] XFS (loop1): Quotacheck needed: Please wait. [ 148.244794][ T8759] F2FS-fs (loop4): Found nat_bits in checkpoint [ 148.264809][ T8754] XFS (loop1): Quotacheck: Done. [ 148.288102][ T8759] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 148.290135][ T8759] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 148.437599][ T4303] XFS (loop1): Unmounting Filesystem [ 149.180102][ T8798] loop0: detected capacity change from 0 to 32768 [ 149.197886][ T8798] JBD2: Ignoring recovery information on journal [ 149.221015][ T8798] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 149.284619][ T4294] ocfs2: Unmounting device (7,0) on (node local) [ 149.303824][ T4302] Bluetooth: hci5: command 0x1003 tx timeout [ 149.307620][ T4296] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 149.437823][ T8810] netlink: 'syz.4.1597': attribute type 11 has an invalid length. [ 149.553050][ T8817] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1599'. [ 149.555582][ T8817] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1599'. [ 150.088410][ T8841] netlink: 'syz.0.1612': attribute type 11 has an invalid length. [ 150.215789][ T8847] loop1: detected capacity change from 0 to 512 [ 150.226531][ T8847] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 150.293570][ T4303] EXT4-fs (loop1): unmounting filesystem. [ 150.738557][ T8851] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1613'. [ 150.741770][ T8851] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1613'. [ 151.072810][ T4342] kernel write not supported for file /bluetooth/6lowpan_enable (pid: 4342 comm: kworker/1:3) [ 151.229211][ T8881] loop4: detected capacity change from 0 to 512 [ 151.244905][ T8871] loop0: detected capacity change from 0 to 8192 [ 151.262013][ T8871] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 151.266019][ T8871] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 151.269028][ T8871] REISERFS (device loop0): using ordered data mode [ 151.270675][ T8871] reiserfs: using flush barriers [ 151.273219][ T8871] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 151.277403][ T8871] REISERFS (device loop0): checking transaction log (loop0) [ 151.291382][ T8881] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 151.407455][ T8871] REISERFS (device loop0): Using tea hash to sort names [ 151.437552][ T8871] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 151.450122][ T4295] EXT4-fs (loop4): unmounting filesystem. [ 151.658466][ T8513] kernel write not supported for file /bluetooth/6lowpan_enable (pid: 8513 comm: kworker/0:16) [ 152.217982][ T8933] loop1: detected capacity change from 0 to 64 [ 152.241924][ T8933] hfs: invalid btree extent records (0 size) [ 152.247110][ T8933] hfs: unable to open catalog tree [ 152.256284][ T8933] hfs: can't find a HFS filesystem on dev loop1 [ 152.302075][ T8933] netlink: 160 bytes leftover after parsing attributes in process `syz.1.1654'. [ 152.304781][ T8933] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1654'. [ 152.641665][ T8957] netlink: 'syz.0.1661': attribute type 1 has an invalid length. [ 152.701422][ T8957] device bond1 entered promiscuous mode [ 152.703412][ T8957] 8021q: adding VLAN 0 to HW filter on device bond1 [ 153.517553][ T9008] netlink: 'syz.4.1679': attribute type 1 has an invalid length. [ 153.608517][ T9008] device bond1 entered promiscuous mode [ 153.620348][ T9008] 8021q: adding VLAN 0 to HW filter on device bond1 [ 154.048911][ T9043] mkiss: ax0: crc mode is auto. [ 154.247932][ T9047] loop2: detected capacity change from 0 to 2048 [ 154.249648][ T9052] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1694'. [ 154.258786][ T9047] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 154.561082][ T9061] loop4: detected capacity change from 0 to 164 [ 154.578537][ T9061] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 154.624700][ T9061] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 154.644089][ T9061] virtio-fs: tag <> not found [ 154.756188][ T9071] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1716'. [ 155.199114][ T9093] loop0: detected capacity change from 0 to 2048 [ 155.217474][ T9093] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 155.350116][ T9075] loop4: detected capacity change from 0 to 32768 [ 155.356083][ T9075] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.1704 (9075) [ 155.397211][ T9075] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 155.413857][ T9075] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 155.416172][ T9075] BTRFS info (device loop4): enabling auto defrag [ 155.417836][ T9075] BTRFS info (device loop4): setting nodatasum [ 155.419358][ T9075] BTRFS info (device loop4): use no compression [ 155.421000][ T9075] BTRFS info (device loop4): force clearing of disk cache [ 155.442033][ T9075] BTRFS info (device loop4): max_inline at 0 [ 155.443697][ T9075] BTRFS info (device loop4): disabling free space tree [ 155.621611][ T9075] BTRFS info (device loop4): enabling ssd optimizations [ 155.624278][ T9075] BTRFS info (device loop4): rebuilding free space tree [ 155.658894][ T9075] BTRFS info (device loop4): disabling free space tree [ 155.660768][ T9075] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 155.681888][ T9075] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 155.715346][ T9129] netlink: 'syz.1.1723': attribute type 2 has an invalid length. [ 155.842655][ T4295] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 155.868834][ T9136] netlink: 'syz.3.1739': attribute type 2 has an invalid length. [ 155.927531][ T9137] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1740'. [ 156.022206][ T9139] loop2: detected capacity change from 0 to 64 [ 156.070851][ T9139] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 156.083967][ T9139] MINIX-fs warning: remounting unchecked fs, running fsck is recommended [ 156.104239][ T9139] MINIX-fs warning: remounting unchecked fs, running fsck is recommended [ 156.127443][ T9143] loop1: detected capacity change from 0 to 256 [ 156.385424][ T9114] loop0: detected capacity change from 0 to 40427 [ 156.410929][ T9114] F2FS-fs (loop0): invalid crc value [ 156.433225][ T9114] F2FS-fs (loop0): Found nat_bits in checkpoint [ 156.489053][ T9114] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 156.603705][ T4294] syz-executor: attempt to access beyond end of device [ 156.603705][ T4294] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 157.109899][ T9179] loop4: detected capacity change from 0 to 256 [ 157.358005][ T9168] loop1: detected capacity change from 0 to 40427 [ 157.552972][ T6219] hid-generic 0005:07C0:0009.0004: item fetching failed at offset 0/1 [ 157.555499][ T6219] hid-generic: probe of 0005:07C0:0009.0004 failed with error -22 [ 157.669220][ T9175] loop2: detected capacity change from 0 to 32768 [ 157.727815][ T9175] ERROR: (device loop2): dbAllocNext: Corrupt dmap page [ 157.727815][ T9175] [ 157.751715][ T9175] ERROR: (device loop2): remounting filesystem as read-only [ 157.753918][ T9175] ialloc: diAlloc returned -5! [ 157.760259][ T9175] ERROR: (device loop2): dbAllocAG: unable to allocate blocks [ 157.760259][ T9175] [ 157.764441][ T9175] ERROR: (device loop2): dbDiscardAG: -EIO [ 157.764441][ T9175] [ 158.175327][ T9221] loop2: detected capacity change from 0 to 256 [ 158.377938][ T9207] loop4: detected capacity change from 0 to 32768 [ 158.411476][ T9207] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.1763 (9207) [ 158.442154][ T9207] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 158.445010][ T9207] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 158.447253][ T9207] BTRFS info (device loop4): enabling disk space caching [ 158.448985][ T9207] BTRFS info (device loop4): enabling auto defrag [ 158.450696][ T9207] BTRFS info (device loop4): doing ref verification [ 158.467980][ T9207] BTRFS info (device loop4): use no compression [ 158.469573][ T9207] BTRFS info (device loop4): force clearing of disk cache [ 158.478096][ T9207] BTRFS info (device loop4): turning on sync discard [ 158.479883][ T9207] BTRFS info (device loop4): disabling disk space caching [ 158.493472][ T9212] loop1: detected capacity change from 0 to 32768 [ 158.499828][ T9212] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz.1.1764 (9212) [ 158.707413][ T9207] BTRFS info (device loop4): enabling ssd optimizations [ 158.710210][ T9207] BTRFS info (device loop4): rebuilding free space tree [ 158.728402][ T9207] BTRFS info (device loop4): disabling free space tree [ 158.736048][ T9207] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 158.738579][ T9207] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 158.904918][ T4295] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 159.584233][ T9280] loop1: detected capacity change from 0 to 256 [ 159.876196][ T9260] loop4: detected capacity change from 0 to 32768 [ 159.939578][ T9260] ERROR: (device loop4): dbAllocNext: Corrupt dmap page [ 159.939578][ T9260] [ 159.956778][ T9260] ERROR: (device loop4): remounting filesystem as read-only [ 159.958869][ T9260] ialloc: diAlloc returned -5! [ 159.976567][ T9260] ERROR: (device loop4): dbAllocAG: unable to allocate blocks [ 159.976567][ T9260] [ 159.993173][ T9297] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1800'. [ 160.001303][ T9260] ERROR: (device loop4): dbDiscardAG: -EIO [ 160.001303][ T9260] [ 160.629939][ T9295] loop1: detected capacity change from 0 to 32768 [ 160.643405][ T9295] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.1787 (9295) [ 160.692621][ T9295] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 160.695326][ T9295] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 160.697547][ T9295] BTRFS info (device loop1): enabling disk space caching [ 160.699302][ T9295] BTRFS info (device loop1): enabling auto defrag [ 160.700910][ T9295] BTRFS info (device loop1): doing ref verification [ 160.704191][ T9319] loop2: detected capacity change from 0 to 8192 [ 160.716939][ T9295] BTRFS info (device loop1): use no compression [ 160.717515][ T9319] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 160.721891][ T9295] BTRFS info (device loop1): force clearing of disk cache [ 160.721914][ T9295] BTRFS info (device loop1): turning on sync discard [ 160.721934][ T9295] BTRFS info (device loop1): disabling disk space caching [ 160.741793][ T9319] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 160.744391][ T9319] REISERFS (device loop2): using ordered data mode [ 160.746098][ T9319] reiserfs: using flush barriers [ 160.771333][ T9319] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 160.785089][ T9319] REISERFS (device loop2): checking transaction log (loop2) [ 161.017816][ T9295] BTRFS info (device loop1): enabling ssd optimizations [ 161.020564][ T9295] BTRFS info (device loop1): rebuilding free space tree [ 161.068135][ T9295] BTRFS info (device loop1): disabling free space tree [ 161.069946][ T9295] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 161.083024][ T9295] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 161.090708][ T9319] REISERFS (device loop2): Using tea hash to sort names [ 161.099247][ T9319] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 161.240667][ T4303] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 161.371832][ T9367] netlink: 47 bytes leftover after parsing attributes in process `syz.4.1805'. [ 162.177650][ T9377] loop1: detected capacity change from 0 to 32768 [ 162.194688][ T9377] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by syz.1.1810 (9377) [ 162.215631][ T9377] BTRFS info (device loop1): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 162.218403][ T9377] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 162.220810][ T9377] BTRFS info (device loop1): using free space tree [ 162.538334][ T9377] BTRFS info (device loop1): enabling ssd optimizations [ 162.727017][ T4303] BTRFS info (device loop1): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 163.076003][ T9460] loop2: detected capacity change from 0 to 16 [ 163.120417][ T9460] erofs: (device loop2): mounted with root inode @ nid 36. [ 163.158461][ T9460] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 163.181287][ T9460] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -29 in[58, 4038] out[1851] [ 163.183964][ T9460] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-117] [ 163.204270][ T9460] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 163.206580][ T9460] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 163.239528][ T9460] erofs: (device loop2): z_erofs_readahead: readahead error at page 42 @ nid 36 [ 163.241978][ T9460] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 163.244313][ T9460] erofs: (device loop2): z_erofs_readahead: readahead error at page 41 @ nid 36 [ 163.246565][ T9460] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 163.280969][ T9460] erofs: (device loop2): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 163.284556][ T9460] erofs: (device loop2): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 163.300293][ T9460] erofs: (device loop2): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 163.303173][ T9460] erofs: (device loop2): z_erofs_readahead: readahead error at page 36 @ nid 36 [ 163.317805][ T9460] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 163.320258][ T9460] erofs: (device loop2): z_erofs_readahead: readahead error at page 31 @ nid 36 [ 163.332938][ T9460] erofs: (device loop2): z_erofs_readahead: readahead error at page 25 @ nid 36 [ 163.335362][ T9460] erofs: (device loop2): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 163.341417][ T9460] erofs: (device loop2): z_erofs_readahead: readahead error at page 19 @ nid 36 [ 163.354143][ T9460] syz.2.1835: attempt to access beyond end of device [ 163.354143][ T9460] loop2: rw=524288, sector=784, nr_sectors = 64 limit=16 [ 163.361420][ T9460] syz.2.1835: attempt to access beyond end of device [ 163.361420][ T9460] loop2: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 163.370471][ T9460] syz.2.1835: attempt to access beyond end of device [ 163.370471][ T9460] loop2: rw=524288, sector=13478624032, nr_sectors = 48 limit=16 [ 163.375167][ T9460] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -29 in[58, 4038] out[2639] [ 163.398811][ T9460] erofs: (device loop2): z_erofs_readahead: readahead error at page 87 @ nid 36 [ 163.411801][ T9460] erofs: (device loop2): z_erofs_readahead: readahead error at page 86 @ nid 36 [ 163.414399][ T9460] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 163.416755][ T9460] erofs: (device loop2): z_erofs_readahead: readahead error at page 83 @ nid 36 [ 163.425785][ T9460] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 163.428199][ T9460] erofs: (device loop2): z_erofs_readahead: readahead error at page 82 @ nid 36 [ 163.436127][ T9460] erofs: (device loop2): z_erofs_readahead: readahead error at page 79 @ nid 36 [ 163.438609][ T9460] erofs: (device loop2): z_erofs_readahead: readahead error at page 78 @ nid 36 [ 163.446671][ T9460] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 163.449142][ T9460] erofs: (device loop2): z_erofs_readahead: readahead error at page 76 @ nid 36 [ 163.457147][ T9460] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 163.459724][ T9460] erofs: (device loop2): z_erofs_readahead: readahead error at page 75 @ nid 36 [ 163.468605][ T9460] erofs: (device loop2): z_erofs_readahead: readahead error at page 74 @ nid 36 [ 163.470995][ T9460] erofs: (device loop2): z_erofs_readahead: readahead error at page 72 @ nid 36 [ 163.479103][ T9460] erofs: (device loop2): z_erofs_readahead: readahead error at page 71 @ nid 36 [ 163.484650][ T9460] erofs: (device loop2): z_erofs_readahead: readahead error at page 70 @ nid 36 [ 163.493982][ T9460] erofs: (device loop2): z_erofs_readahead: readahead error at page 63 @ nid 36 [ 163.496364][ T9460] erofs: (device loop2): z_erofs_readahead: readahead error at page 61 @ nid 36 [ 163.504001][ T9460] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 163.506495][ T9460] erofs: (device loop2): z_erofs_readahead: readahead error at page 59 @ nid 36 [ 163.520349][ T9460] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 163.523220][ T9460] erofs: (device loop2): z_erofs_readahead: readahead error at page 58 @ nid 36 [ 163.530152][ T9460] erofs: (device loop2): z_erofs_readahead: readahead error at page 56 @ nid 36 [ 163.535874][ T9460] erofs: (device loop2): z_erofs_readahead: readahead error at page 54 @ nid 36 [ 163.538366][ T9460] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 163.548739][ T9460] erofs: (device loop2): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 163.559786][ T9460] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 163.562688][ T9460] erofs: (device loop2): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 163.570694][ T9460] erofs: (device loop2): z_erofs_readahead: readahead error at page 45 @ nid 36 [ 163.575253][ T9460] syz.2.1835: attempt to access beyond end of device [ 163.575253][ T9460] loop2: rw=524288, sector=32, nr_sectors = 64 limit=16 [ 163.588235][ T9460] syz.2.1835: attempt to access beyond end of device [ 163.588235][ T9460] loop2: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 163.595563][ T9460] syz.2.1835: attempt to access beyond end of device [ 163.595563][ T9460] loop2: rw=524288, sector=14425508768, nr_sectors = 8 limit=16 [ 163.608225][ T9460] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -29 in[58, 4038] out[4275] [ 163.861722][ T4296] Bluetooth: hci2: command 0x0406 tx timeout [ 163.863383][ T4296] Bluetooth: hci1: command 0x0406 tx timeout [ 164.093165][ T9493] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1843'. [ 164.246445][ T9498] mkiss: ax0: crc mode is auto. [ 164.397249][ T9503] loop4: detected capacity change from 0 to 8192 [ 164.425405][ T9503] REISERFS warning (device loop4): super-6515 reiserfs_parse_options: journaled quota format not specified. [ 164.621311][ T4416] I/O error, dev loop4, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 164.632230][ T9518] input: syz0 as /devices/virtual/input/input9 [ 164.779472][ T9487] loop2: detected capacity change from 0 to 40427 [ 164.799670][ T9487] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 164.802272][ T9487] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 164.805345][ T9487] F2FS-fs (loop2): invalid crc value [ 164.818840][ T9523] netlink: 'syz.4.1860': attribute type 16 has an invalid length. [ 164.837675][ T9487] F2FS-fs (loop2): Found nat_bits in checkpoint [ 164.839466][ T9523] netlink: 'syz.4.1860': attribute type 1 has an invalid length. [ 164.852497][ T9523] netlink: 'syz.4.1860': attribute type 2 has an invalid length. [ 164.874257][ T9487] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 164.876094][ T9487] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 164.978604][ T4305] syz-executor: attempt to access beyond end of device [ 164.978604][ T4305] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 165.062114][ T9510] loop0: detected capacity change from 0 to 32768 [ 165.069503][ T9510] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 scanned by syz.0.1851 (9510) [ 165.089584][ T9510] BTRFS info (device loop0): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 165.100460][ T9510] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 165.105396][ T9510] BTRFS info (device loop0): using free space tree [ 165.247524][ T9510] BTRFS info (device loop0): enabling ssd optimizations [ 165.344883][ T4294] BTRFS info (device loop0): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 165.405859][ T9530] loop4: detected capacity change from 0 to 32768 [ 165.421034][ T9530] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz.4.1862 (9530) [ 165.541660][ T4416] I/O error, dev loop4, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 165.826537][ T9576] netlink: 'syz.2.1873': attribute type 16 has an invalid length. [ 165.828611][ T9576] netlink: 'syz.2.1873': attribute type 1 has an invalid length. [ 165.830870][ T9576] netlink: 'syz.2.1873': attribute type 2 has an invalid length. [ 166.026509][ T9589] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.028953][ T9589] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.031416][ T9589] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.033820][ T9589] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.209176][ T9599] loop4: detected capacity change from 0 to 1024 [ 166.280227][ T9599] hfsplus: catalog searching failed [ 166.342267][ T11] hfsplus: b-tree write err: -5, ino 4 [ 166.790829][ T9585] loop1: detected capacity change from 0 to 40427 [ 166.801637][ T9585] F2FS-fs (loop1): Small segment_count (9 < 1 * 24) [ 166.803417][ T9585] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 166.832660][ T9585] F2FS-fs (loop1): Found nat_bits in checkpoint [ 166.857497][ T9585] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 166.859388][ T9585] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 166.958531][ T9585] syz.1.1879: attempt to access beyond end of device [ 166.958531][ T9585] loop1: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 166.980845][ T9585] F2FS-fs (loop1): Unrecognized mount option "ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ017777777777777777777771844674407370955161501777777777777777777777ÿÿÿÿÿÿÿÿÿ" or missing value [ 167.001665][ T9607] loop2: detected capacity change from 0 to 32768 [ 167.009555][ T9610] loop0: detected capacity change from 0 to 32768 [ 167.021345][ T9610] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.1889 (9610) [ 167.033815][ T9610] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 167.036617][ T9610] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 167.046771][ T9610] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 167.049216][ T9610] BTRFS info (device loop0): use lzo compression, level 0 [ 167.051078][ T9610] BTRFS info (device loop0): using free space tree [ 167.085671][ T4303] syz-executor: attempt to access beyond end of device [ 167.085671][ T4303] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 167.101636][ T9607] XFS (loop2): Mounting V5 Filesystem [ 167.202401][ T9607] XFS (loop2): Ending clean mount [ 167.205263][ T9607] XFS (loop2): Quotacheck needed: Please wait. [ 167.272581][ T9610] BTRFS info (device loop0): enabling ssd optimizations [ 167.306762][ T9607] XFS (loop2): Quotacheck: Done. [ 167.473299][ T4305] XFS (loop2): Unmounting Filesystem [ 167.489802][ T9631] loop4: detected capacity change from 0 to 32768 [ 167.506898][ T4294] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 167.508587][ T9631] JBD2: Ignoring recovery information on journal [ 167.576489][ T9631] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 167.687222][ T9655] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1897'. [ 167.689641][ T9655] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1897'. [ 167.692334][ T9655] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1897'. [ 167.694786][ T9655] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1897'. [ 167.805826][ T9656] OCFS2: ERROR (device loop4): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Invalid dinode #65: signature = [ 167.809638][ T9656] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 167.822236][ T9656] OCFS2: File system is now read-only. [ 167.826360][ T9656] (syz.4.1898,9656,1):ocfs2_assign_bh:2414 ERROR: status = -30 [ 167.829836][ T9656] (syz.4.1898,9656,1):ocfs2_inode_lock_full_nested:2509 ERROR: status = -30 [ 167.835869][ T9656] (syz.4.1898,9656,1):ocfs2_inode_lock_atime:2601 ERROR: status = -30 [ 167.839518][ T9663] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1903'. [ 167.842077][ T9656] (syz.4.1898,9656,1):ocfs2_readdir:1952 ERROR: status = -30 [ 167.911946][ T4295] ocfs2: Unmounting device (7,4) on (node local) [ 168.177742][ T9675] loop2: detected capacity change from 0 to 1024 [ 168.252106][ T9675] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 168.300630][ T4305] EXT4-fs (loop2): unmounting filesystem. [ 168.480552][ T9683] loop4: detected capacity change from 0 to 32768 [ 168.482851][ T9683] XFS: ikeep mount option is deprecated. [ 168.498497][ T9683] XFS (loop4): Mounting V5 Filesystem [ 168.549329][ T9683] XFS (loop4): Ending clean mount [ 168.557399][ T9683] XFS (loop4): Quotacheck needed: Please wait. [ 168.585512][ T9683] XFS (loop4): Quotacheck: Done. [ 168.682472][ T9694] loop2: detected capacity change from 0 to 1024 [ 168.741767][ T9694] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 168.786747][ T9702] loop0: detected capacity change from 0 to 1024 [ 168.788969][ T9702] EXT4-fs: Ignoring removed bh option [ 168.803417][ T4295] XFS (loop4): Unmounting Filesystem [ 168.880583][ T4305] EXT4-fs (loop2): unmounting filesystem. [ 168.890865][ T9702] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 168.912938][ T9702] EXT4-fs (loop0): orphan cleanup on readonly fs [ 168.937025][ T9700] loop1: detected capacity change from 0 to 32768 [ 168.958499][ T9702] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5885: Corrupt filesystem [ 169.011571][ T9710] loop2: detected capacity change from 0 to 4096 [ 169.014192][ T9710] ntfs3: Unknown parameter 'al' [ 169.024396][ T9702] EXT4-fs (loop0): Remounting filesystem read-only [ 169.026183][ T9702] EXT4-fs error (device loop0): ext4_dirty_inode:6089: inode #3: comm syz.0.1921: mark_inode_dirty error [ 169.048409][ T9702] EXT4-fs (loop0): Remounting filesystem read-only [ 169.050498][ T9702] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:477: comm syz.0.1921: Invalid block bitmap block 3 in block_group 0 [ 169.058020][ T9702] EXT4-fs (loop0): Remounting filesystem read-only [ 169.059914][ T9702] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5885: Corrupt filesystem [ 169.060030][ T9700] XFS (loop1): Mounting V5 Filesystem [ 169.071047][ T9702] EXT4-fs (loop0): Remounting filesystem read-only [ 169.091159][ T9702] EXT4-fs error (device loop0): ext4_dirty_inode:6089: inode #3: comm syz.0.1921: mark_inode_dirty error [ 169.096899][ T5853] I/O error, dev loop2, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 169.100930][ T9702] EXT4-fs (loop0): Remounting filesystem read-only [ 169.102695][ T9702] __quota_error: 58 callbacks suppressed [ 169.102705][ T9702] Quota error (device loop0): write_blk: dquota write failed [ 169.105817][ T9702] EXT4-fs error (device loop0): ext4_map_blocks:634: inode #3: block 1: comm syz.0.1921: lblock 6 mapped to illegal pblock 1 (length 1) [ 169.119558][ T9702] EXT4-fs (loop0): Remounting filesystem read-only [ 169.123095][ T9720] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1916'. [ 169.125431][ T9702] Quota error (device loop0): write_blk: dquota write failed [ 169.127232][ T9702] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 169.129569][ T9702] EXT4-fs error (device loop0): ext4_map_blocks:634: inode #3: block 48: comm syz.0.1921: lblock 0 mapped to illegal pblock 48 (length 1) [ 169.147787][ T9702] EXT4-fs (loop0): Remounting filesystem read-only [ 169.149443][ T9702] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 169.180519][ T9702] EXT4-fs error (device loop0): ext4_acquire_dquot:6795: comm syz.0.1921: Failed to acquire dquot type 0 [ 169.208226][ T9700] XFS (loop1): Ending clean mount [ 169.210022][ T9702] EXT4-fs (loop0): Remounting filesystem read-only [ 169.231336][ T9702] EXT4-fs error (device loop0): ext4_map_blocks:634: inode #3: block 49: comm syz.0.1921: lblock 1 mapped to illegal pblock 49 (length 1) [ 169.247763][ T9700] XFS (loop1): Quotacheck needed: Please wait. [ 169.262168][ T9702] EXT4-fs (loop0): Remounting filesystem read-only [ 169.263823][ T9702] Quota error (device loop0): do_insert_tree: Can't read tree quota block 1 [ 169.266115][ T9702] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 169.268572][ T9702] EXT4-fs error (device loop0): ext4_acquire_dquot:6795: comm syz.0.1921: Failed to acquire dquot type 0 [ 169.307477][ T9702] EXT4-fs (loop0): Remounting filesystem read-only [ 169.309480][ T9702] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5885: Corrupt filesystem [ 169.313579][ T9700] XFS (loop1): Quotacheck: Done. [ 169.341734][ T9702] EXT4-fs (loop0): Remounting filesystem read-only [ 169.343362][ T9702] EXT4-fs error (device loop0): ext4_evict_inode:279: inode #15: comm syz.0.1921: mark_inode_dirty error [ 169.349986][ T9726] netlink: 'syz.4.1913': attribute type 46 has an invalid length. [ 169.351636][ T9702] EXT4-fs (loop0): Remounting filesystem read-only [ 169.361426][ T9702] EXT4-fs warning (device loop0): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 169.362650][ T9726] netlink: 212868 bytes leftover after parsing attributes in process `syz.4.1913'. [ 169.364158][ T9702] EXT4-fs (loop0): 1 orphan inode deleted [ 169.368217][ T9702] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 169.485621][ T4303] XFS (loop1): Unmounting Filesystem [ 169.577935][ T9733] loop2: detected capacity change from 0 to 2048 [ 169.592861][ T4294] EXT4-fs (loop0): unmounting filesystem. [ 169.618532][ T9733] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 169.620695][ T9733] UDF-fs: Scanning with blocksize 512 failed [ 169.638332][ T9733] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 169.759487][ T9740] loop0: detected capacity change from 0 to 1024 [ 169.829693][ T9740] hfsplus: catalog searching failed [ 169.913074][ T9] hfsplus: b-tree write err: -5, ino 4 [ 170.340340][ T9762] loop2: detected capacity change from 0 to 1024 [ 170.370306][ T9762] EXT4-fs: Ignoring removed bh option [ 170.416468][ T9762] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 170.419136][ T9762] EXT4-fs (loop2): orphan cleanup on readonly fs [ 170.472782][ T9762] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5885: Corrupt filesystem [ 170.491321][ T9762] EXT4-fs (loop2): Remounting filesystem read-only [ 170.493098][ T9762] EXT4-fs error (device loop2): ext4_dirty_inode:6089: inode #3: comm syz.2.1937: mark_inode_dirty error [ 170.524328][ T9757] loop4: detected capacity change from 0 to 32768 [ 170.530352][ T9762] EXT4-fs (loop2): Remounting filesystem read-only [ 170.536600][ T9762] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:477: comm syz.2.1937: Invalid block bitmap block 3 in block_group 0 [ 170.562723][ T9762] EXT4-fs (loop2): Remounting filesystem read-only [ 170.564472][ T9762] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5885: Corrupt filesystem [ 170.580040][ T9762] EXT4-fs (loop2): Remounting filesystem read-only [ 170.623259][ T9756] loop0: detected capacity change from 0 to 32768 [ 170.626153][ T9762] EXT4-fs error (device loop2): ext4_dirty_inode:6089: inode #3: comm syz.2.1937: mark_inode_dirty error [ 170.648510][ T9756] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz.0.1934 (9756) [ 170.654748][ T9762] EXT4-fs (loop2): Remounting filesystem read-only [ 170.672245][ T9757] XFS (loop4): Mounting V5 Filesystem [ 170.675417][ T9762] Quota error (device loop2): write_blk: dquota write failed [ 170.696104][ T9762] EXT4-fs error (device loop2): ext4_map_blocks:634: inode #3: block 1: comm syz.2.1937: lblock 6 mapped to illegal pblock 1 (length 1) [ 170.705189][ T9756] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 170.708884][ T9756] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 170.741027][ T9756] BTRFS info (device loop0): force zlib compression, level 3 [ 170.751140][ T9756] BTRFS info (device loop0): force clearing of disk cache [ 170.753202][ T9762] EXT4-fs (loop2): Remounting filesystem read-only [ 170.754901][ T9762] Quota error (device loop2): write_blk: dquota write failed [ 170.756784][ T9762] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 170.778833][ T9756] BTRFS info (device loop0): setting nodatasum [ 170.780449][ T9756] BTRFS info (device loop0): doing ref verification [ 170.798994][ T9756] BTRFS info (device loop0): allowing degraded mounts [ 170.800820][ T9756] BTRFS info (device loop0): enabling disk space caching [ 170.801776][ T9778] loop1: detected capacity change from 0 to 2048 [ 170.806522][ T9762] EXT4-fs error (device loop2): ext4_map_blocks:634: inode #3: block 48: comm syz.2.1937: lblock 0 mapped to illegal pblock 48 (length 1) [ 170.811407][ T9757] XFS (loop4): Ending clean mount [ 170.814120][ T9757] XFS (loop4): Quotacheck needed: Please wait. [ 170.842008][ T9756] BTRFS info (device loop0): disk space caching is enabled [ 170.852873][ T9778] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 170.854939][ T9778] UDF-fs: Scanning with blocksize 512 failed [ 170.855866][ T9762] EXT4-fs (loop2): Remounting filesystem read-only [ 170.858077][ T9762] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 170.871352][ T9762] EXT4-fs error (device loop2): ext4_acquire_dquot:6795: comm syz.2.1937: Failed to acquire dquot type 0 [ 170.881706][ T9762] EXT4-fs (loop2): Remounting filesystem read-only [ 170.883490][ T9762] EXT4-fs error (device loop2): ext4_map_blocks:634: inode #3: block 49: comm syz.2.1937: lblock 1 mapped to illegal pblock 49 (length 1) [ 170.890403][ T9757] XFS (loop4): Quotacheck: Done. [ 170.901495][ T9762] EXT4-fs (loop2): Remounting filesystem read-only [ 170.903240][ T9762] EXT4-fs error (device loop2): ext4_acquire_dquot:6795: comm syz.2.1937: Failed to acquire dquot type 0 [ 170.944931][ T9762] EXT4-fs (loop2): Remounting filesystem read-only [ 170.946689][ T9762] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5885: Corrupt filesystem [ 170.958871][ T9778] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 170.972415][ T9762] EXT4-fs (loop2): Remounting filesystem read-only [ 170.974173][ T9762] EXT4-fs error (device loop2): ext4_evict_inode:279: inode #15: comm syz.2.1937: mark_inode_dirty error [ 171.003684][ T9762] EXT4-fs (loop2): Remounting filesystem read-only [ 171.005448][ T9762] EXT4-fs warning (device loop2): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 171.008066][ T9762] EXT4-fs (loop2): 1 orphan inode deleted [ 171.015647][ T9762] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 171.061568][ T4295] XFS (loop4): Unmounting Filesystem [ 171.184386][ T4305] EXT4-fs (loop2): unmounting filesystem. [ 171.320495][ T9756] BTRFS info (device loop0): enabling ssd optimizations [ 171.332219][ T9756] BTRFS info (device loop0): rebuilding free space tree [ 171.353032][ T9756] BTRFS info (device loop0): disabling free space tree [ 171.354857][ T9756] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 171.357539][ T9756] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 171.517366][ T4294] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 171.668605][ T9822] loop4: detected capacity change from 0 to 1024 [ 171.754737][ T9822] hfsplus: catalog searching failed [ 171.800666][ T11] hfsplus: b-tree write err: -5, ino 4 [ 171.943576][ T9828] loop4: detected capacity change from 0 to 4096 [ 171.983017][ T9828] NILFS (loop4): invalid segment: Checksum error in segment payload [ 171.985091][ T9828] NILFS (loop4): trying rollback from an earlier position [ 172.037731][ T9828] NILFS (loop4): recovery complete [ 172.075876][ T9829] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 172.133517][ T9833] tap0: tun_chr_ioctl cmd 1074025677 [ 172.143645][ T9833] tap0: linktype set to 776 [ 172.151409][ T9820] loop1: detected capacity change from 0 to 32768 [ 172.171383][ T9820] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.1955 (9820) [ 172.196971][ T9820] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 172.204092][ T9820] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 172.212030][ T9820] BTRFS info (device loop1): turning on flush-on-commit [ 172.216190][ T9820] BTRFS info (device loop1): enabling auto defrag [ 172.220126][ T9820] BTRFS info (device loop1): doing ref verification [ 172.230297][ T9820] BTRFS info (device loop1): max_inline at 0 [ 172.233281][ T9820] BTRFS info (device loop1): force clearing of disk cache [ 172.237979][ T9820] BTRFS info (device loop1): turning on sync discard [ 172.242100][ T9820] BTRFS info (device loop1): disabling free space tree [ 172.326927][ T9820] BTRFS info (device loop1): enabling ssd optimizations [ 172.334142][ T9820] BTRFS info (device loop1): rebuilding free space tree [ 172.369039][ T9820] BTRFS info (device loop1): disabling free space tree [ 172.376404][ T9820] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 172.388014][ T9858] loop4: detected capacity change from 0 to 4096 [ 172.388869][ T9820] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 172.393490][ T9858] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 172.442231][ T9820] Process accounting resumed [ 172.503240][ T4303] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 173.022432][ T9835] loop2: detected capacity change from 0 to 40427 [ 173.027947][ T9835] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 173.038417][ T9835] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 173.056714][ T9835] F2FS-fs (loop2): invalid crc value [ 173.069190][ T9835] F2FS-fs (loop2): Found nat_bits in checkpoint [ 173.128409][ T9835] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 173.130282][ T9835] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 173.155973][ T9885] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1971'. [ 173.236838][ T9889] loop4: detected capacity change from 0 to 256 [ 173.242670][ T4305] syz-executor: attempt to access beyond end of device [ 173.242670][ T4305] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 173.549438][ T9893] loop0: detected capacity change from 0 to 256 [ 173.611367][ T5853] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 174.084628][ T9907] loop1: detected capacity change from 0 to 32768 [ 174.096407][ T9907] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.1984 (9907) [ 174.109843][ T9907] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 174.113392][ T9907] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 174.116834][ T9907] BTRFS info (device loop1): force zlib compression, level 3 [ 174.119241][ T9907] BTRFS info (device loop1): force clearing of disk cache [ 174.121923][ T9907] BTRFS info (device loop1): setting nodatasum [ 174.123697][ T9907] BTRFS info (device loop1): doing ref verification [ 174.125523][ T9907] BTRFS info (device loop1): allowing degraded mounts [ 174.129284][ T9916] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1987'. [ 174.139935][ T9907] BTRFS info (device loop1): enabling disk space caching [ 174.149933][ T9907] BTRFS info (device loop1): disk space caching is enabled [ 174.218096][ T9907] BTRFS info (device loop1): enabling ssd optimizations [ 174.221018][ T9907] BTRFS info (device loop1): rebuilding free space tree [ 174.236221][ T9907] BTRFS info (device loop1): disabling free space tree [ 174.238400][ T9907] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 174.245831][ T9907] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 174.340517][ T4303] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 174.371478][ T9910] tap0: tun_chr_ioctl cmd 1074025677 [ 174.373078][ T9910] tap0: linktype set to 776 [ 174.844287][ T9956] loop4: detected capacity change from 0 to 1024 [ 174.846458][ T9956] EXT4-fs: Ignoring removed mblk_io_submit option [ 174.848151][ T9956] EXT4-fs: Ignoring removed orlov option [ 174.871985][ T9956] EXT4-fs (loop4): Test dummy encryption mode enabled [ 174.894992][ T9956] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 174.950142][ T9956] EXT4-fs (loop4): re-mounted. Quota mode: writeback. [ 174.998207][ T9956] EXT4-fs (loop4): re-mounted. Quota mode: writeback. [ 175.016079][ T9964] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2001'. [ 175.150760][ T9974] tap0: tun_chr_ioctl cmd 1074025677 [ 175.156772][ T9974] tap0: linktype set to 776 [ 175.164864][ T4295] EXT4-fs (loop4): unmounting filesystem. [ 175.303342][ T9984] loop0: detected capacity change from 0 to 1024 [ 175.319783][ T9984] EXT4-fs: Ignoring removed mblk_io_submit option [ 175.323274][ T9986] netlink: 'syz.1.2010': attribute type 21 has an invalid length. [ 175.325283][ T9986] netlink: 'syz.1.2010': attribute type 1 has an invalid length. [ 175.340715][ T9984] EXT4-fs: Ignoring removed orlov option [ 175.347270][ T9984] EXT4-fs (loop0): Test dummy encryption mode enabled [ 175.369326][ T9984] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 175.430372][ T9991] loop1: detected capacity change from 0 to 4096 [ 175.456381][ T9991] NILFS (loop1): invalid segment: Checksum error in segment payload [ 175.458535][ T9991] NILFS (loop1): trying rollback from an earlier position [ 175.472298][ T9984] EXT4-fs (loop0): re-mounted. Quota mode: writeback. [ 175.482769][ T9991] NILFS (loop1): recovery complete [ 175.501378][ T9984] EXT4-fs (loop0): re-mounted. Quota mode: writeback. [ 175.509964][ T9993] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 175.663752][ T4294] EXT4-fs (loop0): unmounting filesystem. [ 175.874636][T10008] loop1: detected capacity change from 0 to 256 [ 175.919628][T10006] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 175.921138][T10006] syzkaller1: group set to 0 [ 175.949514][ T5853] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 176.018899][T10003] loop4: detected capacity change from 0 to 8192 [ 176.030708][T10003] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 176.034165][T10003] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 176.036683][T10003] REISERFS (device loop4): using ordered data mode [ 176.038309][T10003] reiserfs: using flush barriers [ 176.040180][T10003] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 176.062947][T10003] REISERFS (device loop4): checking transaction log (loop4) [ 176.069658][T10003] REISERFS (device loop4): Using rupasov hash to sort names [ 176.072488][T10003] REISERFS (device loop4): using 3.5.x disk format [ 176.074391][T10003] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 176.084462][T10003] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 176.087202][T10003] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 176.131800][T10003] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 176.169833][T10003] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 176.179204][T10003] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 176.433709][T10023] loop2: detected capacity change from 0 to 4096 [ 176.466185][T10023] NILFS (loop2): invalid segment: Checksum error in segment payload [ 176.468254][T10023] NILFS (loop2): trying rollback from an earlier position [ 176.507820][T10023] NILFS (loop2): recovery complete [ 176.521865][T10028] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 176.599779][T10016] loop0: detected capacity change from 0 to 40427 [ 176.617655][T10016] F2FS-fs (loop0): invalid crc value [ 176.626918][T10016] F2FS-fs (loop0): Found nat_bits in checkpoint [ 176.700372][T10016] F2FS-fs (loop0): Start checkpoint disabled! [ 176.703791][T10016] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 176.779938][ T5222] kworker/u4:8: attempt to access beyond end of device [ 176.779938][ T5222] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 176.987038][T10018] loop1: detected capacity change from 0 to 40427 [ 176.995639][T10018] F2FS-fs (loop1): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 176.997699][T10018] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 177.012571][T10018] F2FS-fs (loop1): invalid crc value [ 177.049385][T10018] F2FS-fs (loop1): Found nat_bits in checkpoint [ 177.107346][T10055] loop2: detected capacity change from 0 to 256 [ 177.128123][T10018] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 177.129875][T10018] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 177.155778][T10055] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x726052d3, utbl_chksum : 0xe619d30d) [ 177.301334][T10064] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2043'. [ 177.356107][T10064] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2043'. [ 177.387943][ T4303] syz-executor: attempt to access beyond end of device [ 177.387943][ T4303] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 177.726179][T10085] bridge0: port 3(gretap1) entered blocking state [ 177.731780][T10085] bridge0: port 3(gretap1) entered disabled state [ 177.734232][T10085] device gretap1 entered promiscuous mode [ 177.736109][T10085] bridge0: port 3(gretap1) entered blocking state [ 177.737792][T10085] bridge0: port 3(gretap1) entered forwarding state [ 177.783595][ T22] [ 177.784287][ T22] ============================================ [ 177.785816][ T22] WARNING: possible recursive locking detected [ 177.787431][ T22] 6.1.128-syzkaller #0 Not tainted [ 177.788811][ T22] -------------------------------------------- [ 177.790374][ T22] kworker/1:0/22 is trying to acquire lock: [ 177.791907][ T22] ffff0000c39cf218 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock){+...}-{2:2}, at: __dev_queue_xmit+0x1b38/0x34d0 [ 177.795280][ T22] [ 177.795280][ T22] but task is already holding lock: [ 177.797359][ T22] ffff0000f127a258 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock){+...}-{2:2}, at: __dev_queue_xmit+0xf04/0x34d0 [ 177.800420][ T22] [ 177.800420][ T22] other info that might help us debug this: [ 177.802523][ T22] Possible unsafe locking scenario: [ 177.802523][ T22] [ 177.804397][ T22] CPU0 [ 177.805234][ T22] ---- [ 177.806024][ T22] lock(dev->qdisc_tx_busylock ?: &qdisc_tx_busylock); [ 177.807735][ T22] lock(dev->qdisc_tx_busylock ?: &qdisc_tx_busylock); [ 177.809507][ T22] [ 177.809507][ T22] *** DEADLOCK *** [ 177.809507][ T22] [ 177.811637][ T22] May be due to missing lock nesting notation [ 177.811637][ T22] [ 177.813889][ T22] 9 locks held by kworker/1:0/22: [ 177.815181][ T22] #0: ffff0000d598ed38 ((wq_completion)mld){+.+.}-{0:0}, at: process_one_work+0x664/0x1404 [ 177.817872][ T22] #1: ffff80001d2c7c20 ((work_completion)(&(&idev->mc_ifc_work)->work)){+.+.}-{0:0}, at: process_one_work+0x6a8/0x1404 [ 177.821029][ T22] #2: ffff0000cb432538 (&idev->mc_lock){+.+.}-{3:3}, at: mld_ifc_work+0x3c/0xc20 [ 177.823584][ T22] #3: ffff800015c65360 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x10/0x4c [ 177.825999][ T22] #4: ffff800015c65360 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x10/0x4c [ 177.826803][T10090] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2054'. [ 177.828481][ T22] #5: ffff800015c653c0 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x18/0x54 [ 177.833464][ T22] #6: ffff0000f127a258 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock){+...}-{2:2}, at: __dev_queue_xmit+0xf04/0x34d0 [ 177.836771][ T22] #7: ffff800015c65360 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x10/0x4c [ 177.839342][ T22] #8: ffff800015c653c0 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x18/0x54 [ 177.841915][ T22] [ 177.841915][ T22] stack backtrace: [ 177.843474][ T22] CPU: 1 PID: 22 Comm: kworker/1:0 Not tainted 6.1.128-syzkaller #0 [ 177.845547][ T22] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 177.848194][ T22] Workqueue: mld mld_ifc_work [ 177.849499][ T22] Call trace: [ 177.850334][ T22] dump_backtrace+0x1c8/0x1f4 [ 177.851632][ T22] show_stack+0x2c/0x3c [ 177.852749][ T22] dump_stack_lvl+0x108/0x170 [ 177.853991][ T22] dump_stack+0x1c/0x5c [ 177.855045][ T22] __lock_acquire+0x6310/0x7680 [ 177.856275][ T22] lock_acquire+0x26c/0x7cc [ 177.857463][ T22] _raw_spin_lock+0x54/0x6c [ 177.858700][ T22] __dev_queue_xmit+0x1b38/0x34d0 [ 177.859975][ T22] ip_finish_output2+0xc6c/0x11b8 [ 177.861344][ T22] __ip_finish_output+0x1b0/0x458 [ 177.862643][ T22] ip_finish_output+0x40/0x268 [ 177.863872][ T22] ip_output+0x330/0x49c [ 177.864928][ T22] ip_local_out+0x120/0x160 [ 177.866078][ T22] iptunnel_xmit+0x40c/0x8ec [ 177.867276][ T22] ip_tunnel_xmit+0x198c/0x204c [ 177.868499][ T22] gre_tap_xmit+0x414/0x600 [ 177.869668][ T22] dev_hard_start_xmit+0x25c/0x9a4 [ 177.871077][ T22] sch_direct_xmit+0x234/0x548 [ 177.872332][ T22] __dev_queue_xmit+0x1438/0x34d0 [ 177.873595][ T22] neigh_resolve_output+0x558/0x658 [ 177.874885][ T22] ip6_finish_output2+0xdb8/0x1b54 [ 177.876221][ T22] ip6_finish_output+0x5a4/0x940 [ 177.877510][ T22] ip6_output+0x274/0x594 [ 177.878647][ T22] NF_HOOK+0x160/0x4f0 [ 177.879689][ T22] mld_sendpack+0x90c/0x1364 [ 177.880891][ T22] mld_ifc_work+0x848/0xc20 [ 177.882182][ T22] process_one_work+0x7ac/0x1404 [ 177.883587][ T22] worker_thread+0x8e4/0xfec [ 177.884773][ T22] kthread+0x250/0x2d8 [ 177.885802][ T22] ret_from_fork+0x10/0x20 [ 177.887393][ C1] bridge0: received packet on gretap1 with own address as source address (addr:ba:84:9e:70:13:b0, vlan:0) [ 177.890498][ C1] bridge0: received packet on gretap1 with own address as source address (addr:ba:84:9e:70:13:b0, vlan:0) [ 178.161535][ C1] bridge0: received packet on gretap1 with own address as source address (addr:ba:84:9e:70:13:b0, vlan:0) [ 178.164649][ C1] bridge0: received packet on gretap1 with own address as source address (addr:ba:84:9e:70:13:b0, vlan:0) [ 178.662778][ C1] bridge0: received packet on gretap1 with own address as source address (addr:ba:84:9e:70:13:b0, vlan:0) [ 178.665825][ C1] bridge0: received packet on gretap1 with own address as source address (addr:ba:84:9e:70:13:b0, vlan:0) [ 179.223088][ C1] bridge0: received packet on gretap1 with own address as source address (addr:ba:84:9e:70:13:b0, vlan:0) [ 179.226160][ C1] bridge0: received packet on gretap1 with own address as source address (addr:ba:84:9e:70:13:b0, vlan:0) [ 179.229611][ C1] bridge0: received packet on gretap1 with own address as source address (addr:ba:84:9e:70:13:b0, vlan:0) [ 179.232851][ C1] bridge0: received packet on gretap1 with own address as source address (addr:ba:84:9e:70:13:b0, vlan:0) [ 183.061649][ C1] net_ratelimit: 2 callbacks suppressed [ 183.061667][ C1] bridge0: received packet on gretap1 with own address as source address (addr:ba:84:9e:70:13:b0, vlan:0) [ 183.065836][ C1] bridge0: received packet on gretap1 with own address as source address (addr:ba:84:9e:70:13:b0, vlan:0) [ 187.382299][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.384043][ T2059] ieee802154 phy1 wpan1: encryption failed: -22