last executing test programs: 1.877616727s ago: executing program 2 (id=2870): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000040)={'tunl0\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x67, 0x0, 0x4, 0x2f, 0x0, @empty, @empty}}}}) 1.758994616s ago: executing program 4 (id=2874): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0285628, &(0x7f0000000080)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 1.674960666s ago: executing program 2 (id=2877): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@ipv4_newroute={0x34, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x4}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @SEG6_LOCAL_SRH={0xc, 0x8}}]}, 0x34}}, 0x0) 1.653396646s ago: executing program 4 (id=2879): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x800, &(0x7f00000003c0)={[{@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'macroman'}}, {@utf8}, {}, {@gid}, {@sys_tz}, {@keep_last_dots}, {@discard}, {@errors_continue}, {@keep_last_dots}, {@utf8}]}, 0x5, 0x1510, &(0x7f00000037c0)="$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") syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) 1.588509066s ago: executing program 2 (id=2880): r0 = socket$igmp6(0xa, 0x3, 0x2) sendmsg$inet6(r0, &(0x7f0000000780)={&(0x7f0000000200)={0xa, 0x0, 0x6e1f, @empty, 0x7ff}, 0x1c, 0x0, 0x0, &(0x7f00000030c0)=[@hoplimit_2292={{0x14}}, @tclass={{0x14, 0x29, 0x43, 0x4}}, @flowinfo={{0x14, 0x29, 0xb, 0x400}}], 0x48}, 0x0) 1.429828945s ago: executing program 4 (id=2883): syz_emit_vhci(&(0x7f0000000780)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0xa) syz_emit_vhci(&(0x7f00000007c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x9, 0x674, 0x0, 0x7}}]}}, 0x15) 1.315864735s ago: executing program 4 (id=2885): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xe2000, 0x0) preadv2(r0, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0xffe00}], 0x5, 0x0, 0x0, 0x1f) 1.314977385s ago: executing program 4 (id=2886): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x3}]}}}]}, 0x3c}}, 0x0) 1.290536395s ago: executing program 2 (id=2887): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newtaction={0x74, 0x30, 0xb25, 0x0, 0x0, {}, [{0x60, 0x1, [@m_vlan={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) 1.119224984s ago: executing program 2 (id=2893): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f00000004c0)={0x0, 0x0}) 1.010862704s ago: executing program 4 (id=2895): syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x1, 0x470b, &(0x7f0000008f40)="$eJzs212IXFcBB/BzJ6vZpMl2P9ImafoxSQQXLcumT9X6ENeqjabNh7bVVFlnN9vN6uzMujujBYPUIIiCoARBxQ+qQulLLYiBvtQiFPxAWoVSUbS+iBSq4INBG+jKzNybnXtntneyk0Rsfz9oZ++595x7Zv97z51zz6QQq51aWCkurBRLlWJ19sGV24qfqZbri3OhcJX8r89Pb65ETu1thsEQZH/1HHnP+z50320h/O7YVz6wurq6GhqGQ1cH2n4+/8/Ts+2viUKmTqPd7q21/L7+2Cs/fdNrHZHnRAhhR0e/GjaFED7ysxA2hxBG4rLR+HVLCGFbCCEKITz+q3/8cLCfLrQ5e/9LLxw7c3jfmaknn3juwvzRdQ+MQvh2efet84sv7990x4tvu0ynBwCA1/T+40fuPTp5IDwdhaFzA52f13fGr8nn47vf8ol7Hh1Y279KbzZdxVABAAAgY23+Pxy92mW9LllZS5YEn3roxL3PRGv7TWz/vx2658id7508EK//Rh37b4+L/v7uTc011Oy6b3b9dyRTv/v679p5Hv3y8z+vvHnj/U/6l5x3OESFidR2oTAxEcKxqdb2rmhroVxdqb39wWq9cnLj5329SOefXb1fW9DvNf/RTPW89f/dH/vsT7YM9PMOxkL2r7axXez8U6aLdP7rj+U/+kLUU/5jmXp5+d/17Pbzv9jczzvInpFLkc6/dSHuaz+g2BoAGvl/fSA//x2Z9vPy/+7UucdPbOD7P41xZjhq9HUwNQK8Gpev8xUmMtL5t4JIDZ3xL3K96/8/mfyvy7Sfl//d1b/95i993P/XG//Hp/pp840jnX8riGLqiLXrf6SQf/1fn2k/L/9fn/rj8x/v617dmX+j/+Pu/z1J5x/fiNODZ/M32ev4vzPTfl7+u8YeeGRhA/3+4Ja4n0NRGGv71um5xi1saG29ujmlaexe2sBJ3gDS+bd+a6lLZ6j10rz+h/PH/12Z9vPyf2TPV991uq/v/3Yf/yeN/z1J57+lWXYp+b+SyX93pv28/L9/+q9/euAyj/+N7YPy70k6/60d+9ee/xR6mv/dkKmf9/xn3+gzj/25j/l/0r/kvMnzn+Q5xHjUev5Dd+n8r1n3uF7v/3sy9fKu/2/868Vn9/cz/keDngD0IZ3/tlZhlwlgr/nfmGk/L//P3ffFj/5hA/O/5ie+wST/tvn/5lb5UeN/T9L5b28Vpv4x1MPN/zfv/1Fn7v/O5H9Tpv28/C8cmhj40mW+/zf6P97lUTad0vkPrXtcI//f9nD/vzlTLy//z+/98cu39vX5P4RJc/0NS+d/7brHNa//wfz8b8nUy8v/W1/75VMP99H/t/ZRl2z+rXt96nKKP5v3Ov8vZtrPy/8H4+fP7r8C87/b3f97ks6/tWp+Kfln5/97M+3n5f+dI99bHrgCz3/ukj8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCGjMavwyEqTKS2C4WJiRDG4u1dYWs0Uzo5PVOuzn5qJYQdcXkxjEbz5epMqTy9UKmenJsulcvV2RCui/fvCIPRSrlam14sLV1/sa0t0am50nJtZq5UCyHsjMtvDNuTtmYWaoulpeaxSZ1rotKn69VaaaK+Mrccdl8s35aUzy9X60s3XGzr2kJ1eelUqTJ9cmH5nZOTk5Nhz8U+j0RzD9XmKrVWb1t7G3WSusNR25tp7r6p7XyfrNaXK6Vys/zmtjrl6myp3Fbnlrbz1ZbrldlSbW66XJ1Pzldsq9v23pq798b7xsNI6v0ldbMOxq93Hjr+4eOHD3TsL0bpvCv1xbnJ7d3/JgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4/Xr6jnd8M4Qw0NoqhBAOJj9E8X8pZ+9/6YVjZw7vOzP15BPPXZg/2u0YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/7IDBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWFnft3jaKJ4wA8u3nvjULQBJuAKYVICCHpgkTBX4hBzUWMpY21oJUBIygKkYhYKgiCoJ2oIFgJav4C0SKlldpoYRFBBJVNdk24DZzcoaPZ54Fldtm72S8s3M3OZxkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/h6nty12Ze2FHRuXtu7+EDrzc/+HEEaT5f2PuztCTwjh86eZk2GNttDT0P+rybnx8lWTn3t7x+9fHU1ar7/4bnHd7pCkQ6uOtydpOjTUev/r1a3BJ9ODSQhp7EKIYmHs0alaCKEjdiFE8f39/Pns9/2/2IUQRf+7213Z/a/FLoQoNu/80FfLx3hUz9n6ucHV//3NhuBtDNH5zVoZw70+fulN6qZW3vP8+T/JN8+D1TB77NDbp7GLIJrZuanDsWsAAAD+rDNN8v+waXn/7sUk9HSXc/8vDfl/b0P/a+f/K+5svTY201YIsaU0N5kdD+9pp8/178TA5Zsva+Z7qkr+X23y/2qT/1eb/L/a5P/VJv8n80L+X0kPr+9afBa7CKKR/wMAQPUcODoxVR8eyR7+N3zrLOf1fXlbz/P0ezemBx6smjeSH/7bDh6Z2Ld/eCS/7+UJwZX1H9Kls1/z9z0a28Jkw3sXzdZ/6H28MH+ls/yJ+i++v1HUV1zX+g8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8YHfuaRgEozCMfrcVURutiiYs/CT4QAMjApDCjAZ0MGEABkJAAQM5Z7k3eZYXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDn+1d5XXx/aYz0WiPSVHbZtX+Op9nP3LfD8j573LgVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGBjBw5kAAAAAIT5W+fRfgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgqQAAAP//LEbJ2A==") quotactl$Q_SETQUOTA(0xffffffff80000900, &(0x7f0000000c80)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 963.597514ms ago: executing program 2 (id=2898): r0 = syz_mount_image$btrfs(&(0x7f0000000080), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000003a40), 0x0, 0x559e, &(0x7f0000005680)="$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") ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x5000940e, 0x0) 677.791343ms ago: executing program 0 (id=2902): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000003200)={'ip6tnl0\x00', &(0x7f0000003180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) 676.898402ms ago: executing program 3 (id=2903): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x5c, 0x30, 0x1, 0x0, 0x0, {}, [{0x48, 0x1, [@m_bpf={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) 592.297232ms ago: executing program 1 (id=2904): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000280)={'bond_slave_0\x00', &(0x7f00000002c0)=@ethtool_rxfh_indir={0x48}}) 552.634902ms ago: executing program 3 (id=2905): r0 = add_key$fscrypt_v1(&(0x7f0000000700), &(0x7f0000000740)={'fscrypt:', @desc3}, &(0x7f0000000780)={0x0, "12941c00c2bfd0eca5e36cf19a717b3a1d3c51385a666db314610fa353525f11cdeefdd0698fd799d9c512015d1f89a90f427d46ce3c1b909ef41bec01dec977", 0x37}, 0x48, 0xfffffffffffffffc) keyctl$get_keyring_id(0x0, r0, 0x0) 543.176742ms ago: executing program 0 (id=2906): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) listen(r0, 0x0) 436.473302ms ago: executing program 1 (id=2907): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x83, &(0x7f00000043c0)={'broute\x00'}, &(0x7f00000001c0)=0xa8) 435.459891ms ago: executing program 3 (id=2908): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x6) 347.037802ms ago: executing program 0 (id=2909): r0 = socket(0x2b, 0x80801, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) 328.585982ms ago: executing program 1 (id=2910): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x54, 0x2, 0x6, 0x401, 0x6c, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x80}]}]}, 0x54}}, 0x0) 310.959691ms ago: executing program 3 (id=2911): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 242.998051ms ago: executing program 0 (id=2912): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f00000003c0)={0x0, @in={{0x2, 0x0, @multicast2}}}, 0x90) 205.811371ms ago: executing program 1 (id=2913): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc040564a, &(0x7f0000000140)={0x0, 0x1, @value=0x1014}) 161.472961ms ago: executing program 3 (id=2914): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000001200)=@newsa={0xf0, 0x10, 0x1, 0x0, 0x0, {{@in=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@mcast2, 0x0, 0x6c}, @in=@loopback, {}, {}, {0x0, 0x4}, 0x0, 0x0, 0x2}}, 0xf0}}, 0x0) 107.00676ms ago: executing program 0 (id=2915): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021c080406037c09e8fe55a10a0015400200142603600e122f00160004000400a8000600200005400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ed50c3e7867a9d3026cd0a23394d78c24cbee5de6ccd40dd6e4edef3d93", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x20000000) 102.598071ms ago: executing program 1 (id=2916): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x18, 0x1418, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x10}]}, 0x18}}, 0x0) 84.82023ms ago: executing program 3 (id=2917): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x401c2103, &(0x7f00000001c0)={0x0, 0x0, 0xffffffffffffffff, 0x0, 0x300}) 983.41µs ago: executing program 1 (id=2918): r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000040)=""/53, &(0x7f0000000080)=0x35) 0s ago: executing program 0 (id=2919): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x48, 0x16, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELFLOWTABLE={0x5c, 0x16, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x30, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond0\x00'}, {0x14, 0x1, 'veth0_to_team\x00'}]}]}]}], {0x14, 0x10}}, 0xec}}, 0x0) kernel console output (not intermixed with test programs): 705404][ T6082] loop2: detected capacity change from 0 to 512 [ 68.712826][ T6083] loop1: detected capacity change from 0 to 1024 [ 68.731636][ T6079] loop0: detected capacity change from 0 to 1024 [ 68.742633][ T6079] EXT4-fs (loop0): bad geometry: first data block is 0 with a 1k block and cluster size [ 68.750423][ T6082] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8803e028, mo2=0002] [ 68.773129][ T6082] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.753: invalid indirect mapped block 2683928664 (level 1) [ 68.782603][ T6082] EXT4-fs (loop2): Remounting filesystem read-only [ 68.787445][ T6082] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.753: bg 0: block 361: padding at end of block bitmap is not set [ 68.787960][ T6082] EXT4-fs (loop2): Remounting filesystem read-only [ 68.787980][ T6082] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 68.788282][ T6082] EXT4-fs (loop2): Remounting filesystem read-only [ 68.788502][ T6082] EXT4-fs (loop2): 1 truncate cleaned up [ 68.788529][ T6082] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 68.837899][ T6079] tmpfs: Bad value for 'mpol' [ 68.845724][ T4856] hfsplus: b-tree write err: -5, ino 4 [ 68.949753][ T4300] EXT4-fs (loop2): unmounting filesystem. [ 69.151675][ T6099] loop4: detected capacity change from 0 to 512 [ 69.284838][ T6099] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 69.408083][ T4309] EXT4-fs (loop4): unmounting filesystem. [ 69.506063][ T6122] loop4: detected capacity change from 0 to 512 [ 69.527366][ T6122] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 69.544885][ T6122] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2186: inode #15: comm syz.4.766: corrupted in-inode xattr [ 69.553667][ T6122] EXT4-fs (loop4): Remounting filesystem read-only [ 69.555237][ T6122] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.766: couldn't read orphan inode 15 (err -117) [ 69.582156][ T6122] EXT4-fs (loop4): Remounting filesystem read-only [ 69.583598][ T6122] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 69.604799][ T7] cfg80211: failed to load regulatory.db [ 69.630278][ T6118] loop3: detected capacity change from 0 to 4096 [ 69.633637][ T6118] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 69.637944][ T6118] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 69.645462][ T6118] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 69.648168][ T6118] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 69.657241][ T6118] ntfs: (device loop3): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 69.659532][ T6118] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 69.663441][ T6118] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 69.706440][ T6118] ntfs: volume version 3.1. [ 69.714275][ T6118] ntfs: (device loop3): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 69.717067][ T6118] ntfs: (device loop3): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 69.761517][ T6137] syz.1.772 (6137): drop_caches: 0 [ 69.770369][ T4309] EXT4-fs (loop4): unmounting filesystem. [ 70.041163][ T6154] netlink: 116376 bytes leftover after parsing attributes in process `syz.3.778'. [ 70.049124][ T6154] netlink: zone id is out of range [ 70.482382][ T4302] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 70.722131][ T6211] usb usb1: usbfs: process 6211 (syz.4.788) did not claim interface 0 before use [ 70.781131][ T6208] xt_CT: No such helper "syz1" [ 70.925176][ T6219] binder: 6217:6219 ioctl c0046209 9999999999999999 returned -22 [ 71.191156][ T6223] loop3: detected capacity change from 0 to 4096 [ 71.199367][ T6151] loop0: detected capacity change from 0 to 32768 [ 71.201142][ T6151] XFS: noikeep mount option is deprecated. [ 71.222004][ T6223] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 71.224125][ T6191] loop1: detected capacity change from 0 to 32768 [ 71.237993][ T6191] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.781 (6191) [ 71.247231][ T6223] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 71.267561][ T6191] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 71.269571][ T6191] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 71.275490][ T6191] BTRFS info (device loop1): force clearing of disk cache [ 71.277111][ T6191] BTRFS info (device loop1): setting nodatasum [ 71.278408][ T6191] BTRFS info (device loop1): use zlib compression, level 3 [ 71.279613][ T6151] XFS (loop0): Mounting V5 Filesystem [ 71.291839][ T6191] BTRFS info (device loop1): allowing degraded mounts [ 71.293999][ T6191] BTRFS info (device loop1): enabling disk space caching [ 71.300495][ T6191] BTRFS info (device loop1): disk space caching is enabled [ 71.332802][ T6240] loop4: detected capacity change from 0 to 128 [ 71.344447][ T4363] XFS (loop0): Metadata CRC error detected at xfs_agf_read_verify+0x190/0x24c, xfs_agf block 0x1 [ 71.346965][ T4363] XFS (loop0): Unmount and run xfs_repair [ 71.348136][ T4363] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 71.349622][ T4363] 00000000: 58 41 47 46 00 00 00 00 00 00 00 00 00 00 10 00 XAGF............ [ 71.351714][ T4363] 00000010: 00 00 00 01 00 00 00 02 00 00 00 00 00 00 00 01 ................ [ 71.368195][ T4363] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 71.370047][ T4363] 00000030: 00 00 00 04 00 00 0b a2 00 00 0b a0 00 00 00 00 ................ [ 71.371776][ T4363] 00000040: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 71.381000][ T6240] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000ea7) [ 71.390484][ T4363] 00000050: 00 00 00 00 00 00 00 01 00 00 00 05 00 00 00 01 ................ [ 71.400940][ T6240] FAT-fs (loop4): Filesystem has been set read-only [ 71.405473][ T4363] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 71.407955][ T4363] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 71.426493][ T6151] XFS (loop0): metadata I/O error in "xfs_read_agf+0x288/0x684" at daddr 0x1 len 1 error 74 [ 71.428815][ T6151] XFS (loop0): Error -117 reserving per-AG metadata reserve pool. [ 71.430670][ T6151] XFS (loop0): Corruption of in-memory data (0x8) detected at xfs_fs_reserve_ag_blocks+0x1cc/0x1f8 (fs/xfs/xfs_fsops.c:584). Shutting down filesystem. [ 71.434161][ T6151] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [ 71.435970][ T6151] XFS (loop0): Ending clean mount [ 71.437291][ T6151] XFS (loop0): Failed to initialize disk quotas. [ 71.637186][ T6191] BTRFS info (device loop1): enabling ssd optimizations [ 71.639848][ T6191] BTRFS info (device loop1): rebuilding free space tree [ 71.665480][ T4305] XFS (loop0): Unmounting Filesystem [ 71.689292][ T6191] BTRFS info (device loop1): disabling free space tree [ 71.690720][ T6191] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 71.707734][ T6191] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 71.802353][ T6270] random: crng reseeded on system resumption [ 71.882132][ T6191] BTRFS info (device loop1): balance: start -f -susage=0..4294967295,vrange=0..8589934592,stripes=1..255 [ 71.884654][ T6191] BTRFS info (device loop1): balance: ended with status: 0 [ 71.977147][ T6275] loop2: detected capacity change from 0 to 256 [ 72.006187][ T6275] FAT-fs (loop2): Directory bread(block 64) failed [ 72.007587][ T6275] FAT-fs (loop2): Directory bread(block 65) failed [ 72.009404][ T6275] FAT-fs (loop2): Directory bread(block 66) failed [ 72.009538][ T4301] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 72.010901][ T6275] FAT-fs (loop2): Directory bread(block 67) failed [ 72.019343][ T6275] FAT-fs (loop2): Directory bread(block 68) failed [ 72.027410][ T6275] FAT-fs (loop2): Directory bread(block 69) failed [ 72.031191][ T6275] FAT-fs (loop2): Directory bread(block 70) failed [ 72.033994][ T6275] FAT-fs (loop2): Directory bread(block 71) failed [ 72.037851][ T6275] FAT-fs (loop2): Directory bread(block 72) failed [ 72.041005][ T6275] FAT-fs (loop2): Directory bread(block 73) failed [ 72.536242][ T6293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.538194][ T6293] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.848394][ T6305] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 73.170449][ T6323] netlink: 8 bytes leftover after parsing attributes in process `syz.4.826'. [ 73.201321][ T6301] loop0: detected capacity change from 0 to 32768 [ 73.216595][ T6301] JBD2: Ignoring recovery information on journal [ 73.302961][ T6301] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 73.406522][ T6332] device bridge2 entered promiscuous mode [ 73.414676][ T4305] ocfs2: Unmounting device (7,0) on (node local) [ 73.507225][ T6337] netlink: 8 bytes leftover after parsing attributes in process `syz.4.833'. [ 73.509216][ T6337] netlink: 8 bytes leftover after parsing attributes in process `syz.4.833'. [ 73.541931][ T6339] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 73.559062][ T6343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.561053][ T6343] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.755380][ T6351] loop0: detected capacity change from 0 to 1024 [ 73.809399][ T6351] hfsplus: bad catalog entry type [ 73.816893][ T6357] netlink: 32 bytes leftover after parsing attributes in process `syz.1.841'. [ 73.818805][ T6357] netlink: 7 bytes leftover after parsing attributes in process `syz.1.841'. [ 74.091366][ T6376] xt_time: unknown flags 0x18 [ 74.160240][ T6381] netlink: 16 bytes leftover after parsing attributes in process `syz.4.850'. [ 74.170248][ T6381] netlink: 16 bytes leftover after parsing attributes in process `syz.4.850'. [ 74.179546][ T6381] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 74.235366][ T6381] 8021q: adding VLAN 0 to HW filter on device bond1 [ 74.318822][ T6393] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 74.359918][ T6395] loop1: detected capacity change from 0 to 256 [ 74.415072][ T6395] FAT-fs (loop1): Directory bread(block 64) failed [ 74.416596][ T6395] FAT-fs (loop1): Directory bread(block 65) failed [ 74.419485][ T6395] FAT-fs (loop1): Directory bread(block 66) failed [ 74.425786][ T6395] FAT-fs (loop1): Directory bread(block 67) failed [ 74.429618][ T6395] FAT-fs (loop1): Directory bread(block 68) failed [ 74.433326][ T6395] FAT-fs (loop1): Directory bread(block 69) failed [ 74.436048][ T6395] FAT-fs (loop1): Directory bread(block 70) failed [ 74.439734][ T6395] FAT-fs (loop1): Directory bread(block 71) failed [ 74.453244][ T6395] FAT-fs (loop1): Directory bread(block 72) failed [ 74.458100][ T6395] FAT-fs (loop1): Directory bread(block 73) failed [ 74.480505][ T6403] tmpfs: Bad value for 'mpol' [ 74.659382][ T6412] loop2: detected capacity change from 0 to 1024 [ 74.691279][ T6412] hfsplus: bad catalog entry type [ 74.748263][ T4891] hfsplus: b-tree write err: -5, ino 4 [ 74.995875][ T6433] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 75.108087][ T6441] netlink: 32 bytes leftover after parsing attributes in process `syz.1.879'. [ 75.110318][ T6441] netlink: 32 bytes leftover after parsing attributes in process `syz.1.879'. [ 75.348293][ T6459] netlink: 1 bytes leftover after parsing attributes in process `syz.1.887'. [ 75.357510][ T6461] loop2: detected capacity change from 0 to 256 [ 75.357927][ T6461] exfat: Deprecated parameter 'utf8' [ 75.399282][ T6461] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d) [ 75.638213][ T6475] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 75.699270][ T6481] capability: warning: `syz.2.898' uses 32-bit capabilities (legacy support in use) [ 75.717467][ T6477] netlink: 16 bytes leftover after parsing attributes in process `syz.0.896'. [ 75.719416][ T6477] netlink: 16 bytes leftover after parsing attributes in process `syz.0.896'. [ 75.721568][ T6477] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 75.765694][ T6477] 8021q: adding VLAN 0 to HW filter on device bond1 [ 75.822128][ T6485] netlink: 16 bytes leftover after parsing attributes in process `syz.2.899'. [ 75.935442][ T6463] loop3: detected capacity change from 0 to 40427 [ 76.027908][ T6463] F2FS-fs (loop3): Found nat_bits in checkpoint [ 76.034319][ T6496] xt_HMARK: spi-set and port-set can't be combined [ 76.070292][ T6463] F2FS-fs (loop3): Cannot turn on quotas: -2 on 2 [ 76.084576][ T6463] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 76.187008][ T6505] netlink: 'syz.2.905': attribute type 10 has an invalid length. [ 76.239870][ T6508] netlink: 24 bytes leftover after parsing attributes in process `syz.0.907'. [ 76.242162][ T6508] netlink: 24 bytes leftover after parsing attributes in process `syz.0.907'. [ 76.253330][ T6509] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 76.254827][ T6509] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 76.258152][ T6509] vhci_hcd vhci_hcd.0: Device attached [ 76.266109][ T6508] netlink: 16 bytes leftover after parsing attributes in process `syz.0.907'. [ 76.283857][ T6510] usbip_core: unknown command [ 76.284897][ T6510] vhci_hcd: unknown pdu 0 [ 76.285826][ T6510] usbip_core: unknown command [ 76.292846][ T39] vhci_hcd: stop threads [ 76.293662][ T39] vhci_hcd: release socket [ 76.294557][ T39] vhci_hcd: disconnect device [ 76.367830][ T6514] loop2: detected capacity change from 0 to 512 [ 76.428169][ T6514] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 76.562098][ T4302] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 76.564210][ T4302] Bluetooth: hci1: Injecting HCI hardware error event [ 76.567520][ T4311] Bluetooth: hci1: hardware error 0x00 [ 76.581282][ T6528] netlink: 'syz.3.914': attribute type 1 has an invalid length. [ 76.635814][ T4300] EXT4-fs (loop2): unmounting filesystem. [ 76.748054][ T6538] netlink: 32 bytes leftover after parsing attributes in process `syz.3.919'. [ 76.793937][ T6540] loop0: detected capacity change from 0 to 4096 [ 76.814869][ T6540] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 76.850650][ T6540] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 77.255635][ T6572] loop0: detected capacity change from 0 to 128 [ 77.283832][ T6572] FAT-fs (loop0): FAT read failed (blocknr 234) [ 77.423889][ T6580] loop0: detected capacity change from 0 to 256 [ 77.441449][ T6576] loop2: detected capacity change from 0 to 4096 [ 77.480542][ T6576] ntfs3: loop2: try to read out of volume at offset 0x3fffffc0c00 [ 77.487412][ T6576] ntfs3: loop2: try to read out of volume at offset 0x3fffffc0c00 [ 77.489054][ T6576] ntfs3: loop2: try to read out of volume at offset 0x3fffffc0c00 [ 77.490838][ T6576] ntfs3: loop2: try to read out of volume at offset 0x3fffffc0c00 [ 77.495869][ T6576] ntfs3: loop2: try to read out of volume at offset 0x3fffffc1c00 [ 77.497410][ T6576] ntfs3: loop2: try to read out of volume at offset 0x3fffffc2c00 [ 77.499000][ T6576] ntfs3: loop2: try to read out of volume at offset 0x3fffffc4c00 [ 77.500733][ T6576] ntfs3: loop2: try to read out of volume at offset 0x3fffffc8c00 [ 77.532615][ T6576] ntfs3: loop2: try to read out of volume at offset 0x3fffffd0c00 [ 77.534470][ T6576] ntfs3: loop2: try to read out of volume at offset 0x3fffffe0c00 [ 77.602235][ T4302] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 77.604323][ T4302] Bluetooth: hci0: Injecting HCI hardware error event [ 77.607456][ T4308] Bluetooth: hci0: hardware error 0x00 [ 77.974244][ T6563] loop1: detected capacity change from 0 to 40427 [ 77.977292][ T6563] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 77.978875][ T6563] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 77.988440][ T6563] F2FS-fs (loop1): invalid crc value [ 78.013235][ T6563] F2FS-fs (loop1): Found nat_bits in checkpoint [ 78.078140][ T6563] F2FS-fs (loop1): Start checkpoint disabled! [ 78.100812][ T6563] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 78.103396][ T6563] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 78.128859][ T6621] trusted_key: encrypted_key: master key parameter is missing [ 78.262601][ T39] kworker/u4:2: attempt to access beyond end of device [ 78.262601][ T39] loop1: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 78.314973][ T6631] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 78.515557][ T6643] netlink: 'syz.0.968': attribute type 10 has an invalid length. [ 78.679995][ T6655] netlink: 'syz.3.974': attribute type 3 has an invalid length. [ 78.722440][ T4311] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 79.189556][ T6692] loop0: detected capacity change from 0 to 64 [ 79.259871][ T6692] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 79.388127][ T6704] device ipvlan1 entered promiscuous mode [ 79.389465][ T6704] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 79.696406][ T6729] loop0: detected capacity change from 0 to 256 [ 79.698392][ T6729] exfat: Deprecated parameter 'namecase' [ 79.710273][ T6729] exfat: Deprecated parameter 'utf8' [ 79.726407][ T6729] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 79.772029][ T4308] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 79.945972][ T6747] nvme_fabrics: unknown parameter or missing value '�' in ctrl creation request [ 80.386636][ T6774] hfs: can't find a HFS filesystem on dev nullb0 [ 80.710244][ T6783] loop2: detected capacity change from 0 to 8192 [ 80.743037][ T6783] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 80.745960][ T6783] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 80.747951][ T6783] REISERFS (device loop2): using ordered data mode [ 80.753721][ T6783] reiserfs: using flush barriers [ 80.755451][ T6789] loop3: detected capacity change from 0 to 4096 [ 80.763528][ T6789] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 80.769577][ T6783] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 80.801834][ T6789] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 80.808450][ T6783] REISERFS (device loop2): checking transaction log (loop2) [ 80.818685][ T6783] REISERFS (device loop2): Using r5 hash to sort names [ 80.820479][ T6783] REISERFS (device loop2): using 3.5.x disk format [ 80.824250][ T6783] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 80.942977][ T6804] libceph: resolve '0' (ret=-3): failed [ 81.001544][ T178] ntfs3: loop3: ntfs3_write_inode r=5 failed, -22. [ 81.008193][ T4310] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 81.078162][ T4896] I/O error, dev loop2, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 81.168178][ T6816] __nla_validate_parse: 10 callbacks suppressed [ 81.168193][ T6816] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1052'. [ 81.171219][ T6816] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1052'. [ 81.330486][ T6829] loop4: detected capacity change from 0 to 512 [ 81.365211][ T6829] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 81.368020][ T6829] EXT4-fs (loop4): group descriptors corrupted! [ 81.424692][ T6829] loop4: detected capacity change from 0 to 256 [ 81.583242][ T6846] netlink: 'syz.3.1067': attribute type 1 has an invalid length. [ 81.714948][ T6858] xt_l2tp: missing protocol rule (udp|l2tpip) [ 81.753144][ T6857] loop4: detected capacity change from 0 to 2048 [ 81.757815][ T6857] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 81.760130][ T6857] NILFS (loop4): mounting unchecked fs [ 81.761456][ T6857] NILFS (loop4): recovery required for readonly filesystem [ 81.780336][ T6857] NILFS (loop4): write access will be enabled during recovery [ 81.793003][ T6857] NILFS (loop4): norecovery option specified, skipping roll-forward recovery [ 81.801589][ T4454] udevd[4454]: incorrect nilfs2 checksum on /dev/loop4 [ 81.814290][ T6861] loop1: detected capacity change from 0 to 512 [ 81.831856][ T6857] NILFS (loop4): couldn't remount because the filesystem is in an incomplete recovery state [ 81.850082][ T6861] EXT2-fs (loop1): warning: mounting ext3 filesystem as ext2 [ 81.862691][ T6861] EXT2-fs (loop1): error: revision level too high, forcing read-only mode [ 81.882752][ T6861] EXT2-fs (loop1): error: ext2_valid_block_bitmap: Invalid block bitmap - block_group = 0, block = 13 [ 81.885088][ T6861] EXT2-fs (loop1): error: ext2_free_blocks: Freeing blocks in system zones - Block = 13, count = 1 [ 81.887222][ T6861] EXT2-fs (loop1): error: ext2_free_inode: reserved or nonexistent inode 2 [ 81.920024][ T4454] udevd[4454]: incorrect nilfs2 checksum on /dev/loop4 [ 81.952121][ T6870] loop0: detected capacity change from 0 to 1024 [ 81.987059][ T6870] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 82.073214][ T6878] loop3: detected capacity change from 0 to 256 [ 82.074985][ T6878] exfat: Deprecated parameter 'namecase' [ 82.076393][ T6878] exfat: Deprecated parameter 'utf8' [ 82.140907][ T6878] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 82.187224][ T6882] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1083'. [ 82.195616][ T6882] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1083'. [ 82.220623][ T4305] EXT4-fs (loop0): unmounting filesystem. [ 82.231259][ T6882] IPv6: sit1: Disabled Multicast RS [ 82.660460][ T6916] loop4: detected capacity change from 0 to 1024 [ 82.701247][ T6917] loop0: detected capacity change from 0 to 1764 [ 82.780522][ T6917] iso9660: Corrupted directory entry in block 0 of inode 1792 [ 82.933008][ T6937] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1110'. [ 83.150324][ T6951] loop3: detected capacity change from 0 to 8 [ 83.305320][ T6960] overlayfs: unrecognized mount option "\" or missing value [ 83.363325][ T6966] loop3: detected capacity change from 0 to 1024 [ 83.402688][ T6966] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 83.463576][ T6974] misc userio: The device must be registered before sending interrupts [ 83.530819][ T4310] EXT4-fs (loop3): unmounting filesystem. [ 83.614945][ T6987] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1133'. [ 83.859962][ T7005] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1142'. [ 83.867487][ T7005] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1142'. [ 83.881257][ T7005] IPv6: sit3: Disabled Multicast RS [ 83.903607][ T7002] loop0: detected capacity change from 0 to 2048 [ 83.917498][ T7002] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 83.919396][ T7002] NILFS (loop0): mounting unchecked fs [ 83.926877][ T7002] NILFS (loop0): recovery required for readonly filesystem [ 83.928484][ T7002] NILFS (loop0): write access will be enabled during recovery [ 83.958444][ T7002] NILFS (loop0): norecovery option specified, skipping roll-forward recovery [ 83.997961][ T7002] NILFS (loop0): couldn't remount because the filesystem is in an incomplete recovery state [ 84.094185][ T7013] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1148'. [ 84.129396][ T4456] udevd[4456]: incorrect nilfs2 checksum on /dev/loop0 [ 84.421536][ T7028] hsr0: VLAN not yet supported [ 84.556431][ T6990] loop3: detected capacity change from 0 to 40427 [ 84.582530][ T6990] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 84.584025][ T6990] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 84.597252][ T6990] F2FS-fs (loop3): invalid crc value [ 84.627875][ T6990] F2FS-fs (loop3): Found nat_bits in checkpoint [ 84.659415][ T6990] F2FS-fs (loop3): Start checkpoint disabled! [ 84.672218][ T6990] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 84.673839][ T6990] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 84.690471][ T7045] loop2: detected capacity change from 0 to 512 [ 84.756238][ T7045] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 84.758246][ T7045] ext4 filesystem being mounted at /235/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.827210][ T7056] xt_hashlimit: max too large, truncated to 1048576 [ 84.837661][ T4300] EXT4-fs (loop2): unmounting filesystem. [ 84.903087][ T7061] loop0: detected capacity change from 0 to 64 [ 84.910832][ T39] kworker/u4:2: attempt to access beyond end of device [ 84.910832][ T39] loop3: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 85.210200][ T7081] tmpfs: Bad value for 'size' [ 85.250794][ T7085] Illegal XDP return value 3622818376 on prog (id 34) dev N/A, expect packet loss! [ 85.414200][ T7091] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1181'. [ 85.533238][ T7098] set match dimension is over the limit! [ 85.941067][ T7083] loop4: detected capacity change from 0 to 32768 [ 85.967830][ T7083] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.1178 (7083) [ 85.971645][ T7117] loop3: detected capacity change from 0 to 4096 [ 85.979298][ T7083] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 85.982203][ T7117] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 85.992538][ T7083] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 85.994287][ T7083] BTRFS info (device loop4): using free space tree [ 86.041687][ T7132] loop0: detected capacity change from 0 to 256 [ 86.081557][ T7133] loop1: detected capacity change from 0 to 2048 [ 86.155418][ T7133] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 86.258682][ T7083] BTRFS info (device loop4): enabling ssd optimizations [ 86.406021][ T7162] No such timeout policy "syz0" [ 86.407666][ T4309] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 86.541452][ T7158] loop1: detected capacity change from 0 to 8192 [ 86.561533][ T7158] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 86.581406][ T7158] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 86.595765][ T7158] REISERFS (device loop1): using ordered data mode [ 86.597061][ T7158] reiserfs: using flush barriers [ 86.619349][ T7171] netlink: 'syz.3.1213': attribute type 1 has an invalid length. [ 86.623022][ T7158] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 86.626335][ T7158] REISERFS (device loop1): checking transaction log (loop1) [ 86.629882][ T7158] REISERFS (device loop1): Using r5 hash to sort names [ 86.631279][ T7158] REISERFS (device loop1): using 3.5.x disk format [ 86.673234][ T7158] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 86.785569][ T7174] No such timeout policy "syz0" [ 86.916143][ T7183] loop0: detected capacity change from 0 to 764 [ 86.935093][ T7186] loop4: detected capacity change from 0 to 256 [ 86.973105][ T7186] FAT-fs (loop4): Directory bread(block 64) failed [ 86.974533][ T7186] FAT-fs (loop4): Directory bread(block 65) failed [ 86.975982][ T7186] FAT-fs (loop4): Directory bread(block 66) failed [ 86.977286][ T7186] FAT-fs (loop4): Directory bread(block 67) failed [ 86.978691][ T7186] FAT-fs (loop4): Directory bread(block 68) failed [ 86.988646][ T7186] FAT-fs (loop4): Directory bread(block 69) failed [ 86.994332][ T7186] FAT-fs (loop4): Directory bread(block 70) failed [ 86.995676][ T7186] FAT-fs (loop4): Directory bread(block 71) failed [ 86.996982][ T7186] FAT-fs (loop4): Directory bread(block 72) failed [ 86.998277][ T7186] FAT-fs (loop4): Directory bread(block 73) failed [ 87.020138][ T7188] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1221'. [ 87.136051][ T7196] loop2: detected capacity change from 0 to 512 [ 87.188199][ T7196] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 87.189822][ T7196] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 87.191332][ T7196] System zones: 0-1, 15-15, 18-18, 34-34 [ 87.200535][ T7196] EXT4-fs (loop2): orphan cleanup on readonly fs [ 87.210088][ T7196] __quota_error: 9 callbacks suppressed [ 87.210102][ T7196] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 87.261773][ T7196] EXT4-fs warning (device loop2): ext4_enable_quotas:7029: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 87.270899][ T7196] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 87.282653][ T7196] EXT4-fs error (device loop2): ext4_orphan_get:1426: comm syz.2.1224: bad orphan inode 16 [ 87.289518][ T7196] ext4_test_bit(bit=15, block=18) = 1 [ 87.290676][ T7196] is_bad_inode(inode)=0 [ 87.291544][ T7196] NEXT_ORPHAN(inode)=0 [ 87.328192][ T7196] max_ino=32 [ 87.328978][ T7196] i_nlink=2 [ 87.329696][ T7196] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 87.399562][ T7196] fscrypt (loop2, inode 16): Error -61 getting encryption context [ 87.473950][ T4300] EXT4-fs (loop2): unmounting filesystem. [ 87.867502][ T7205] loop0: detected capacity change from 0 to 32768 [ 87.916682][ T7205] XFS (loop0): Mounting V5 Filesystem [ 88.053332][ T7205] XFS (loop0): Ending clean mount [ 88.184637][ T7260] loop3: detected capacity change from 0 to 128 [ 88.227247][ T4305] XFS (loop0): Unmounting Filesystem [ 88.280453][ T7263] netlink: 'syz.1.1253': attribute type 7 has an invalid length. [ 88.516019][ T7278] loop3: detected capacity change from 0 to 128 [ 88.595344][ T7276] loop2: detected capacity change from 0 to 4096 [ 88.619453][ T7276] ntfs3: loop2: try to read out of volume at offset 0x3fffffc0c00 [ 88.621871][ T7276] ntfs3: loop2: try to read out of volume at offset 0x3fffffc0c00 [ 88.624221][ T7276] ntfs3: loop2: try to read out of volume at offset 0x3fffffc0c00 [ 88.625827][ T7276] ntfs3: loop2: try to read out of volume at offset 0x3fffffc0c00 [ 88.639421][ T7276] ntfs3: loop2: try to read out of volume at offset 0x3fffffc1c00 [ 88.641093][ T7276] ntfs3: loop2: try to read out of volume at offset 0x3fffffc2c00 [ 88.667345][ T7276] ntfs3: loop2: try to read out of volume at offset 0x3fffffc4c00 [ 88.668969][ T7276] ntfs3: loop2: try to read out of volume at offset 0x3fffffc8c00 [ 88.670538][ T7276] ntfs3: loop2: try to read out of volume at offset 0x3fffffd0c00 [ 88.673443][ T7276] ntfs3: loop2: try to read out of volume at offset 0x3fffffe0c00 [ 88.759963][ T7286] netlink: 708 bytes leftover after parsing attributes in process `syz.1.1265'. [ 88.850481][ T7290] loop3: detected capacity change from 0 to 1024 [ 89.086333][ T7306] netlink: 252 bytes leftover after parsing attributes in process `syz.4.1275'. [ 89.088274][ T7306] netlink: 252 bytes leftover after parsing attributes in process `syz.4.1275'. [ 89.090091][ T7306] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1275'. [ 89.180312][ T7312] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 89.345820][ T7322] loop1: detected capacity change from 0 to 256 [ 89.375828][ T7324] loop0: detected capacity change from 0 to 256 [ 89.384650][ T7322] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d) [ 89.403792][ T7324] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 89.416214][ T7324] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 89.429364][ T7329] lo speed is unknown, defaulting to 1000 [ 89.433378][ T7324] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 89.441282][ T7329] lo speed is unknown, defaulting to 1000 [ 89.449544][ T7324] UDF-fs: Scanning with blocksize 512 failed [ 89.458159][ T7329] lo speed is unknown, defaulting to 1000 [ 89.468265][ T7324] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 89.488288][ T7324] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 89.602367][ T5529] lo speed is unknown, defaulting to 1000 [ 89.607561][ T7329] infiniband syz2: set active [ 89.609057][ T7329] infiniband syz2: added lo [ 89.765837][ T7329] RDS/IB: syz2: added [ 89.782742][ T7329] smc: adding ib device syz2 with port count 1 [ 89.784228][ T7329] smc: ib device syz2 port 1 has pnetid [ 89.808729][ T6276] lo speed is unknown, defaulting to 1000 [ 89.814374][ T7329] lo speed is unknown, defaulting to 1000 [ 90.021449][ T7329] lo speed is unknown, defaulting to 1000 [ 90.150119][ T7329] lo speed is unknown, defaulting to 1000 [ 90.184717][ T7369] loop1: detected capacity change from 0 to 512 [ 90.202320][ T7369] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 90.273960][ T7369] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 90.275955][ T7369] ext4 filesystem being mounted at /246/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.279156][ T7373] Error parsing options; rc = [-22] [ 90.287682][ T7369] EXT4-fs (loop1): unmounting filesystem. [ 90.295202][ T7329] lo speed is unknown, defaulting to 1000 [ 90.331710][ T7329] lo speed is unknown, defaulting to 1000 [ 90.409275][ T4456] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 90.414099][ T7382] loop0: detected capacity change from 0 to 8 [ 90.490756][ T7382] SQUASHFS error: Failed to read block 0x2d7: -5 [ 90.492392][ T7382] SQUASHFS error: Unable to read metadata cache entry [2d5] [ 90.959986][ T7422] ksmbd: Unknown IPC event: 4, ignore. [ 91.127081][ T7436] loop4: detected capacity change from 0 to 1024 [ 91.432205][ T7458] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 91.661499][ T7475] netlink: 'syz.2.1352': attribute type 1 has an invalid length. [ 91.668579][ T7475] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1352'. [ 91.674331][ T7474] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1351'. [ 91.674682][ T7477] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 91.678867][ T7475] netlink: 'syz.2.1352': attribute type 1 has an invalid length. [ 92.050810][ T7502] ipt_ECN: cannot use operation on non-tcp rule [ 92.089142][ T7505] autofs4:pid:7505:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(3.1), cmd(0xc0189371) [ 92.095441][ T7505] autofs4:pid:7505:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189371) [ 92.122632][ T7503] device bond1 entered promiscuous mode [ 92.124033][ T7503] 8021q: adding VLAN 0 to HW filter on device bond1 [ 92.366457][ T7515] loop4: detected capacity change from 0 to 8 [ 92.368311][ T7515] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 92.383663][ T7514] xt_recent: hitcount (456) is larger than allowed maximum (255) [ 92.489410][ T7516] loop2: detected capacity change from 0 to 4096 [ 92.520810][ T7516] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 92.528050][ T7497] loop1: detected capacity change from 0 to 32768 [ 92.540832][ T7497] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 92.543068][ T7497] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 92.608968][ T7497] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 92.615014][ T6276] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 92.616676][ T6276] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 92.622660][ T7516] ntfs3: loop2: failed to convert "c46c" to macroman [ 92.679468][ T7524] overlayfs: missing 'lowerdir' [ 92.693562][ T6276] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 76ms [ 92.704969][ T6276] gfs2: fsid=syz:syz.0: jid=0: Done [ 92.707022][ T7497] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 92.750064][ T7528] loop3: detected capacity change from 0 to 256 [ 92.751830][ T7528] exfat: Deprecated parameter 'namecase' [ 92.798182][ T7528] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 93.256844][ T7558] loop4: detected capacity change from 0 to 1024 [ 93.272096][ T7561] infiniband syz2: set down [ 93.273599][ T7561] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 93.294241][ T5532] lo speed is unknown, defaulting to 1000 [ 93.296133][ T5532] lo speed is unknown, defaulting to 1000 [ 93.320668][ T7558] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 93.327774][ T7558] ext4 filesystem being mounted at /287/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.560089][ T4309] EXT4-fs (loop4): unmounting filesystem. [ 93.580310][ T7581] loop0: detected capacity change from 0 to 256 [ 93.638551][ T7581] Non-string source [ 93.673848][ T7587] loop3: detected capacity change from 0 to 64 [ 93.697792][ T7587] hfs: unable to open extent tree [ 93.699009][ T7587] hfs: can't find a HFS filesystem on dev loop3 [ 93.858897][ T7598] A link change request failed with some changes committed already. Interface veth0_to_team may have been left with an inconsistent configuration, please check. [ 94.216640][ T7621] [U] [ 94.217499][ T7621] [U] [ 94.218036][ T7621] [U] [ 94.218553][ T7621] [U] [ 94.219256][ T7621] [U] [ 94.219802][ T7621] [U] [ 94.220392][ T7621] [U] [ 94.220913][ T7621] [U] [ 94.236615][ T7621] [U] [ 94.237224][ T7621] [U] [ 94.237712][ T7621] [U] [ 94.238204][ T7621] [U] [ 94.238909][ T7621] [U] [ 94.239464][ T7621] [U] [ 94.240025][ T7621] [U] [ 94.240510][ T7621] [U] [ 94.241149][ T7621] [U] [ 94.241720][ T7621] [U] [ 94.242326][ T7621] [U] [ 94.242924][ T7621] [U] [ 94.254459][ T7621] [U] [ 94.255133][ T7621] [U] [ 94.255715][ T7621] [U] [ 94.256277][ T7621] [U] [ 94.256880][ T7621] [U] [ 94.257362][ T7621] [U] [ 94.257908][ T7621] [U] [ 94.258419][ T7621] [U] [ 94.258997][ T7621] [U] [ 94.259516][ T7621] [U] [ 94.260001][ T7621] [U] [ 94.260523][ T7621] [U] [ 94.261135][ T7621] [U] [ 94.261694][ T7621] [U] [ 94.262235][ T7621] [U] [ 94.262752][ T7621] [U] [ 94.284934][ T7621] [U] [ 94.285485][ T7621] [U] [ 94.286078][ T7621] [U] [ 94.286600][ T7621] [U] [ 94.298499][ T7621] [U] [ 94.299085][ T7621] [U] [ 94.299623][ T7621] [U] [ 94.300155][ T7621] [U] [ 94.300878][ T7621] [U] [ 94.301409][ T7621] [U] [ 94.301964][ T7621] [U] [ 94.302521][ T7621] [U] [ 94.318305][ T7585] loop2: detected capacity change from 0 to 32768 [ 94.327367][ T7621] [U] [ 94.327891][ T7621] [U] [ 94.328444][ T7621] [U] [ 94.328983][ T7621] [U] [ 94.329644][ T7621] [U] [ 94.330180][ T7621] [U] [ 94.330640][ T7621] [U] [ 94.331153][ T7621] [U] [ 94.331865][ T7621] [U] [ 94.332421][ T7621] [U] [ 94.333003][ T7621] [U] [ 94.333582][ T7621] [U] [ 94.335899][ T7625] loop4: detected capacity change from 0 to 64 [ 94.363216][ T7621] [U] [ 94.363831][ T7621] [U] [ 94.364383][ T7621] [U] [ 94.364987][ T7621] [U] [ 94.372620][ T7621] [U] [ 94.373230][ T7621] [U] [ 94.373788][ T7621] [U] [ 94.374423][ T7621] [U] [ 94.381000][ T7621] [U] [ 94.381594][ T7621] [U] [ 94.382115][ T7621] [U] [ 94.382735][ T7621] [U] [ 94.387437][ T7621] [U] [ 94.388104][ T7621] [U] [ 94.388753][ T7621] [U] [ 94.389316][ T7621] [U] [ 94.396807][ T7621] [U] [ 94.397472][ T7621] [U] [ 94.398014][ T7621] [U] [ 94.398583][ T7621] [U] [ 94.423878][ T7585] XFS (loop2): Mounting V5 Filesystem [ 94.426254][ T7621] [U] [ 94.426895][ T7621] [U] [ 94.427466][ T7621] [U] [ 94.428059][ T7621] [U] [ 94.438051][ T7621] [U] [ 94.438675][ T7621] [U] [ 94.439241][ T7621] [U] [ 94.439826][ T7621] [U] [ 94.440548][ T7621] [U] [ 94.441135][ T7621] [U] [ 94.441674][ T7621] [U] [ 94.442212][ T7621] [U] [ 94.457669][ T7621] [U] [ 94.458203][ T7621] [U] [ 94.458784][ T7621] [U] [ 94.459425][ T7621] [U] [ 94.462341][ T7621] [U] [ 94.462988][ T7621] [U] [ 94.463553][ T7621] [U] [ 94.464170][ T7621] [U] [ 94.464863][ T7621] [U] [ 94.465424][ T7621] [U] [ 94.465868][ T7621] [U] [ 94.466414][ T7621] [U] [ 94.467144][ T7621] [U] [ 94.467642][ T7621] [U] [ 94.468143][ T7621] [U] [ 94.468746][ T7621] [U] [ 94.535102][ T7621] [U] [ 94.535693][ T7621] [U] [ 94.536278][ T7621] [U] [ 94.536795][ T7621] [U] [ 94.537489][ T7621] [U] [ 94.538077][ T7621] [U] [ 94.538615][ T7621] [U] [ 94.539183][ T7621] [U] [ 94.543159][ T7621] [U] [ 94.543755][ T7621] [U] [ 94.544314][ T7621] [U] [ 94.544851][ T7621] [U] [ 94.556990][ T7621] [U] [ 94.557641][ T7621] [U] [ 94.558242][ T7621] [U] [ 94.558779][ T7621] [U] [ 94.570637][ T7621] [U] [ 94.571293][ T7621] [U] [ 94.571831][ T7621] [U] [ 94.577599][ T7614] [U] [ 94.589242][ T7585] XFS (loop2): Ending clean mount [ 94.736078][ T7652] loop0: detected capacity change from 0 to 128 [ 94.751846][ T4300] XFS (loop2): Unmounting Filesystem [ 94.963492][ T7656] loop3: detected capacity change from 0 to 4096 [ 95.002443][ T7666] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1442'. [ 95.062546][ T7667] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 95.085770][ T7669] device bond2 entered promiscuous mode [ 95.087382][ T7669] 8021q: adding VLAN 0 to HW filter on device bond2 [ 95.111868][ T7656] NILFS (loop3): DAT doesn't have a block to manage vblocknr = 648518346341351424 [ 95.112023][ T7656] NILFS error (device loop3): nilfs_bmap_truncate: broken bmap (inode number=12) [ 95.116969][ T7656] Remounting filesystem read-only [ 95.116983][ T7656] NILFS (loop3): error -5 truncating bmap (ino=12) [ 95.139969][ T7674] A link change request failed with some changes committed already. Interface veth0_to_team may have been left with an inconsistent configuration, please check. [ 95.168752][ T4310] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer [ 95.168854][ T4310] NILFS (loop3): discard dirty page: offset=0, ino=2 [ 95.168887][ T4310] NILFS (loop3): discard dirty block: blocknr=14, size=4096 [ 95.169175][ T4310] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 95.169286][ T4310] NILFS (loop3): discard dirty block: blocknr=23, size=4096 [ 95.169384][ T4310] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 95.169399][ T4310] NILFS (loop3): discard dirty block: blocknr=24, size=4096 [ 95.169418][ T4310] NILFS (loop3): discard dirty page: offset=8192, ino=6 [ 95.169432][ T4310] NILFS (loop3): discard dirty block: blocknr=25, size=4096 [ 95.417002][ T7688] tmpfs: Bad value for 'mpol' [ 95.546665][ T7698] loop2: detected capacity change from 0 to 128 [ 95.554624][ T7697] netlink: 'syz.3.1455': attribute type 21 has an invalid length. [ 95.556327][ T7697] netlink: 160 bytes leftover after parsing attributes in process `syz.3.1455'. [ 95.569205][ T7698] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 95.574789][ T7698] ext4 filesystem being mounted at /287/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 95.661305][ T7709] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1460'. [ 95.669620][ T4300] EXT4-fs (loop2): unmounting filesystem. [ 95.922632][ T7727] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1468'. [ 95.958898][ T7730] loop3: detected capacity change from 0 to 512 [ 95.990831][ T7730] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 95.997967][ T7730] ext4 filesystem being mounted at /295/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.104718][ T4310] EXT4-fs (loop3): unmounting filesystem. [ 96.320321][ T7755] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1481'. [ 96.651468][ T7778] loop0: detected capacity change from 0 to 256 [ 96.665360][ T7778] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 96.700108][ T7783] loop3: detected capacity change from 0 to 64 [ 96.752045][ T7783] Bad inode number on dev loop3: 6 is out of range [ 97.041770][ T7800] loop2: detected capacity change from 0 to 1024 [ 97.090819][ T7800] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 97.101214][ T7803] netlink: 'syz.1.1505': attribute type 10 has an invalid length. [ 97.131642][ T7803] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1505'. [ 97.135063][ T7803] device dummy0 entered promiscuous mode [ 97.138795][ T7803] bridge0: port 3(dummy0) entered blocking state [ 97.140420][ T7803] bridge0: port 3(dummy0) entered disabled state [ 97.143158][ T7803] bridge0: port 3(dummy0) entered blocking state [ 97.145681][ T7803] bridge0: port 3(dummy0) entered forwarding state [ 97.148794][ T7805] xt_TPROXY: Can be used only with -p tcp or -p udp [ 97.229906][ T4300] EXT4-fs (loop2): unmounting filesystem. [ 97.513741][ T7825] netlink: 'syz.1.1515': attribute type 22 has an invalid length. [ 97.517859][ T7825] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1515'. [ 98.015823][ T7862] loop3: detected capacity change from 0 to 128 [ 98.056665][ T7862] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 98.058552][ T7862] FAT-fs (loop3): Filesystem has been set read-only [ 98.116985][ T7868] vhci_hcd: invalid port number 254 [ 98.118260][ T7868] vhci_hcd: invalid port number 254 [ 98.132600][ T4310] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 98.345093][ T7867] loop4: detected capacity change from 0 to 8192 [ 98.362297][ T7867] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 98.364860][ T7867] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 98.366742][ T7867] REISERFS (device loop4): using writeback data mode [ 98.368018][ T7867] reiserfs: using flush barriers [ 98.415104][ T7867] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 98.454118][ T7867] REISERFS (device loop4): checking transaction log (loop4) [ 98.460905][ T7867] REISERFS (device loop4): Using r5 hash to sort names [ 98.466025][ T7891] loop0: detected capacity change from 0 to 512 [ 98.505916][ T7867] reiserfs: enabling write barrier flush mode [ 98.530300][ T7891] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 98.531132][ T7867] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 98.538433][ T7891] ext4 filesystem being mounted at /316/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.552311][ T7867] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 98.636449][ T4305] EXT4-fs (loop0): unmounting filesystem. [ 98.641375][ T7893] loop2: detected capacity change from 0 to 8192 [ 98.692407][ T7893] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 98.695091][ T7893] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 98.697073][ T7893] REISERFS (device loop2): using ordered data mode [ 98.713487][ T7893] reiserfs: using flush barriers [ 98.777848][ T7893] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 98.781295][ T7893] REISERFS (device loop2): checking transaction log (loop2) [ 98.871269][ T7912] loop4: detected capacity change from 0 to 4096 [ 98.907563][ T7913] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 98.965322][ T7912] NILFS (loop4): DAT doesn't have a block to manage vblocknr = 648518346341351424 [ 98.967450][ T7912] NILFS error (device loop4): nilfs_bmap_truncate: broken bmap (inode number=12) [ 98.982191][ T7912] Remounting filesystem read-only [ 98.983463][ T7912] NILFS (loop4): error -5 truncating bmap (ino=12) [ 99.039828][ T7893] REISERFS (device loop2): Using tea hash to sort names [ 99.041542][ T7893] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 99.057117][ T7893] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 99.079907][ T4309] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer [ 99.082124][ T4309] NILFS (loop4): discard dirty page: offset=0, ino=2 [ 99.083505][ T4309] NILFS (loop4): discard dirty block: blocknr=14, size=4096 [ 99.096768][ T4309] NILFS (loop4): discard dirty page: offset=0, ino=6 [ 99.098290][ T4309] NILFS (loop4): discard dirty block: blocknr=23, size=4096 [ 99.099903][ T4309] NILFS (loop4): discard dirty page: offset=4096, ino=6 [ 99.101317][ T4309] NILFS (loop4): discard dirty block: blocknr=24, size=4096 [ 99.106433][ T4309] NILFS (loop4): discard dirty page: offset=8192, ino=6 [ 99.107902][ T4309] NILFS (loop4): discard dirty block: blocknr=25, size=4096 [ 99.287214][ T7929] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1563'. [ 99.294440][ T7929] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1563'. [ 99.299390][ T7929] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1563'. [ 99.683024][ T4308] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 99.685134][ T4308] Bluetooth: hci3: Injecting HCI hardware error event [ 99.687993][ T4308] Bluetooth: hci3: hardware error 0x00 [ 99.725383][ T7922] loop0: detected capacity change from 0 to 32768 [ 99.748789][ T7922] JBD2: Ignoring recovery information on journal [ 99.823083][ T7922] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 99.848651][ T7949] loop1: detected capacity change from 0 to 4096 [ 99.924061][ T7962] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 99.959556][ T7949] NILFS (loop1): DAT doesn't have a block to manage vblocknr = 648518346341351424 [ 99.961771][ T7949] NILFS error (device loop1): nilfs_bmap_truncate: broken bmap (inode number=12) [ 99.970317][ T7949] Remounting filesystem read-only [ 99.971420][ T7949] NILFS (loop1): error -5 truncating bmap (ino=12) [ 100.015522][ T7968] loop4: detected capacity change from 0 to 128 [ 100.024450][ T4305] ocfs2: Unmounting device (7,0) on (node local) [ 100.039415][ T4301] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer [ 100.044233][ T4301] NILFS (loop1): discard dirty page: offset=0, ino=2 [ 100.045766][ T4301] NILFS (loop1): discard dirty block: blocknr=14, size=4096 [ 100.047598][ T4301] NILFS (loop1): discard dirty page: offset=0, ino=6 [ 100.049035][ T4301] NILFS (loop1): discard dirty block: blocknr=23, size=4096 [ 100.050501][ T4301] NILFS (loop1): discard dirty page: offset=4096, ino=6 [ 100.079728][ T4301] NILFS (loop1): discard dirty block: blocknr=24, size=4096 [ 100.081424][ T4301] NILFS (loop1): discard dirty page: offset=8192, ino=6 [ 100.082437][ T7968] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 100.086106][ T7968] FAT-fs (loop4): Filesystem has been set read-only [ 100.090918][ T4301] NILFS (loop1): discard dirty block: blocknr=25, size=4096 [ 100.175234][ T4309] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 100.387114][ T7988] loop1: detected capacity change from 0 to 512 [ 100.436993][ T7988] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.1591: invalid indirect mapped block 256 (level 2) [ 100.447865][ T7988] EXT4-fs (loop1): 2 truncates cleaned up [ 100.449093][ T7988] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 100.504714][ T4301] EXT4-fs (loop1): unmounting filesystem. [ 100.688129][ T8011] netlink: 'syz.4.1601': attribute type 11 has an invalid length. [ 100.965035][ T8035] netlink: 'syz.3.1613': attribute type 1 has an invalid length. [ 101.298664][ T8059] loop4: detected capacity change from 0 to 164 [ 101.328145][ T8059] Unsupported NM flag settings (8) [ 101.576758][ T8079] x_tables: ip6_tables: SNPT target: used from hooks FORWARD, but only usable from INPUT/POSTROUTING [ 101.638957][ T8083] sctp: [Deprecated]: syz.2.1636 (pid 8083) Use of int in max_burst socket option. [ 101.638957][ T8083] Use struct sctp_assoc_value instead [ 101.922502][ T4308] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 101.931564][ T8101] loop1: detected capacity change from 0 to 1024 [ 102.007116][ T8107] loop0: detected capacity change from 0 to 1024 [ 102.394856][ T8125] loop1: detected capacity change from 0 to 1024 [ 102.396611][ T8125] EXT4-fs: Ignoring removed nomblk_io_submit option [ 102.467775][ T8139] loop3: detected capacity change from 0 to 16 [ 102.499540][ T8139] erofs: (device loop3): mounted with root inode @ nid 36. [ 102.512070][ T8125] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 102.642377][ T4301] EXT4-fs (loop1): unmounting filesystem. [ 102.893740][ T8170] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 102.954128][ T8174] loop2: detected capacity change from 0 to 256 [ 103.146347][ T8178] loop0: detected capacity change from 0 to 4096 [ 103.155529][ T8178] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 103.194242][ T8182] __nla_validate_parse: 2 callbacks suppressed [ 103.194257][ T8182] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1684'. [ 103.227484][ T8178] ntfs3: loop0: failed to convert "c46c" to macgaelic [ 103.327427][ T8186] sctp: [Deprecated]: syz.4.1686 (pid 8186) Use of int in maxseg socket option. [ 103.327427][ T8186] Use struct sctp_assoc_value instead [ 103.412119][ T8190] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1688'. [ 103.418479][ T8190] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1688'. [ 103.615834][ T8160] loop3: detected capacity change from 0 to 32768 [ 103.647950][ T8192] loop0: detected capacity change from 0 to 4096 [ 103.679247][ T8198] loop4: detected capacity change from 0 to 128 [ 103.684934][ T8192] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 103.687329][ T8192] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 103.696845][ T8192] ntfs: (device loop0): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 103.698084][ T8198] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 103.699151][ T8192] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 103.711974][ T8192] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 103.718239][ T8192] ntfs: volume version 3.1. [ 103.720744][ T8192] ntfs: (device loop0): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 103.754297][ T8192] ntfs: (device loop0): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 103.766539][ T8198] EXT4-fs (loop4): re-mounted. Quota mode: none. [ 103.768016][ T8198] ext4 filesystem being remounted at /344/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 103.771307][ T8192] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 103.790784][ T8192] ntfs: (device loop0): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 103.793382][ T8184] loop2: detected capacity change from 0 to 32768 [ 103.812376][ T8192] ntfs: (device loop0): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 103.821382][ T8184] JBD2: Ignoring recovery information on journal [ 103.882175][ T8204] netlink: 'syz.1.1695': attribute type 4 has an invalid length. [ 103.933014][ T8184] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 103.984623][ T4309] EXT4-fs (loop4): unmounting filesystem. [ 104.084779][ T4300] ocfs2: Unmounting device (7,2) on (node local) [ 104.140375][ T8219] netlink: 'syz.2.1700': attribute type 1 has an invalid length. [ 104.203486][ T8224] loop0: detected capacity change from 0 to 128 [ 104.207953][ T8225] netlink: 'syz.4.1703': attribute type 32 has an invalid length. [ 104.217530][ T8224] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 104.242184][ T8224] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 104.438056][ T8237] loop2: detected capacity change from 0 to 1024 [ 104.760346][ T8259] loop0: detected capacity change from 0 to 4096 [ 104.791667][ T8259] NILFS (loop0): invalid segment: Checksum error in segment payload [ 104.795526][ T8259] NILFS (loop0): trying rollback from an earlier position [ 104.829213][ T8259] NILFS (loop0): recovery complete [ 104.860545][ T8267] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 104.918968][ T8272] loop3: detected capacity change from 0 to 1024 [ 104.932591][ T8259] NILFS (loop0): the device already has a read/write mount. [ 105.098114][ T8282] loop1: detected capacity change from 0 to 1764 [ 105.260172][ T8291] netlink: 'syz.3.1733': attribute type 16 has an invalid length. [ 105.281330][ T8291] netlink: 'syz.3.1733': attribute type 17 has an invalid length. [ 105.324287][ T8291] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 105.326236][ T8291] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 105.348369][ T8291] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 105.363303][ T8291] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 105.694875][ T8320] loop1: detected capacity change from 0 to 512 [ 105.723870][ T8324] loop4: detected capacity change from 0 to 1024 [ 105.748727][ T8328] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 105.750734][ T8328] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 105.752148][ T8320] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 105.756065][ T8320] ext4 filesystem being mounted at /336/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.982281][ T4301] EXT4-fs (loop1): unmounting filesystem. [ 106.018022][ T8342] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1758'. [ 106.180214][ T8355] binder: 8354 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 106.180240][ T8355] binder: 8354:8355 ioctl c018620c 20000640 returned -22 [ 106.763749][ T8387] loop3: detected capacity change from 0 to 1024 [ 106.845638][ T8387] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 106.847491][ T8387] ext4 filesystem being mounted at /361/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.849878][ T8353] loop2: detected capacity change from 0 to 32768 [ 106.866289][ T8353] (syz.2.1761,8353,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 106.885071][ T8353] (syz.2.1761,8353,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 106.913846][ T8387] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.1779: inode #458752: comm syz.3.1779: iget: illegal inode # [ 106.922230][ T8387] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.1779: error while reading EA inode 458752 err=-117 [ 106.928140][ T8353] JBD2: Ignoring recovery information on journal [ 107.032857][ T8404] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 107.039285][ T4310] EXT4-fs (loop3): unmounting filesystem. [ 107.040922][ T8353] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 107.250673][ T4300] ocfs2: Unmounting device (7,2) on (node local) [ 107.371187][ T8417] loop4: detected capacity change from 0 to 4096 [ 107.389492][ T8417] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 107.502366][ T8417] ntfs3: loop4: failed to convert "c46c" to macgaelic [ 107.857554][ T8443] loop1: detected capacity change from 0 to 1764 [ 107.918603][ T8443] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 107.943718][ T8447] netlink: 'syz.2.1807': attribute type 13 has an invalid length. [ 107.990696][ T8449] loop4: detected capacity change from 0 to 2048 [ 107.995720][ T8409] loop3: detected capacity change from 0 to 40427 [ 108.005763][ T8409] F2FS-fs (loop3): invalid crc value [ 108.032616][ T8409] F2FS-fs (loop3): Found nat_bits in checkpoint [ 108.045639][ T8449] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 108.077959][ T8409] F2FS-fs (loop3): Start checkpoint disabled! [ 108.089759][ T8454] loop2: detected capacity change from 0 to 1764 [ 108.111993][ T8409] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 108.119233][ T8454] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 108.143554][ T8409] F2FS-fs (loop3): disabling checkpoint not compatible with read-only [ 108.595752][ T8453] loop0: detected capacity change from 0 to 32768 [ 108.610421][ T8478] netlink: 'syz.2.1821': attribute type 21 has an invalid length. [ 108.618114][ T8478] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1821'. [ 108.620001][ T8478] netlink: 'syz.2.1821': attribute type 4 has an invalid length. [ 108.621450][ T8478] netlink: 'syz.2.1821': attribute type 5 has an invalid length. [ 108.628635][ T8478] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1821'. [ 108.669718][ T8453] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 108.877253][ T27] kauditd_printk_skb: 6 callbacks suppressed [ 108.877266][ T27] audit: type=1400 audit(2000000028.102:6): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=8490 comm="syz.1.1827" [ 108.895578][ T4305] ocfs2: Unmounting device (7,0) on (node local) [ 108.944193][ T8496] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1830'. [ 108.967787][ T8496] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1830'. [ 108.977355][ T8496] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 108.980624][ T8498] netlink: 'syz.0.1829': attribute type 11 has an invalid length. [ 109.102624][ T8509] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1836'. [ 109.105288][ T8509] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (511) [ 109.118287][ T8509] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 109.334476][ T8521] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1842'. [ 109.336431][ T8521] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1842'. [ 109.523330][ T8527] xt_CT: You must specify a L4 protocol and not use inversions on it [ 109.735110][ T8533] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1849'. [ 109.773517][ T8508] loop3: detected capacity change from 0 to 32768 [ 109.788418][ T8508] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.1835 (8508) [ 109.806363][ T8508] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 109.808513][ T8508] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 109.810554][ T8508] BTRFS info (device loop3): force zlib compression, level 3 [ 109.827506][ T8508] BTRFS info (device loop3): force clearing of disk cache [ 109.828988][ T8508] BTRFS info (device loop3): setting nodatasum [ 109.830342][ T8508] BTRFS info (device loop3): use zlib compression, level 3 [ 109.831715][ T8508] BTRFS info (device loop3): allowing degraded mounts [ 109.841446][ T8508] BTRFS info (device loop3): enabling disk space caching [ 109.848301][ T8508] BTRFS info (device loop3): disk space caching is enabled [ 109.975960][ T8519] loop2: detected capacity change from 0 to 32768 [ 109.998388][ T8514] loop0: detected capacity change from 0 to 40427 [ 110.029123][ T8514] F2FS-fs (loop0): invalid crc value [ 110.030313][ T8514] F2FS-fs (loop0): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 110.038244][ T8519] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 110.068302][ T8514] F2FS-fs (loop0): Found nat_bits in checkpoint [ 110.083096][ T8519] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 110.089401][ T8565] loop1: detected capacity change from 0 to 256 [ 110.097087][ T8508] BTRFS info (device loop3): enabling ssd optimizations [ 110.099220][ T8508] BTRFS info (device loop3): rebuilding free space tree [ 110.108140][ T8519] (syz.2.1841,8519,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is smaller than minimal - offset=0, inode=9223372036854775873, rec_len=0, name_len=0 [ 110.110464][ T8514] F2FS-fs (loop0): recover fsync data on readonly fs [ 110.111779][ T8519] (syz.2.1841,8519,0):ocfs2_prepare_dir_for_insert:4294 ERROR: status = -2 [ 110.113368][ T8514] F2FS-fs (loop0): Cannot turn on quotas: -2 on 0 [ 110.116433][ T8514] F2FS-fs (loop0): Cannot turn on quotas: -2 on 1 [ 110.118073][ T8514] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 110.154685][ T8508] BTRFS info (device loop3): disabling free space tree [ 110.156158][ T8508] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 110.158107][ T8508] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 110.164289][ T8519] (syz.2.1841,8519,0):ocfs2_mknod:298 ERROR: status = -2 [ 110.165835][ T8519] (syz.2.1841,8519,0):ocfs2_mknod:502 ERROR: status = -2 [ 110.167190][ T8519] (syz.2.1841,8519,0):ocfs2_mkdir:659 ERROR: status = -2 [ 110.185590][ T8565] FAT-fs (loop1): Directory bread(block 64) failed [ 110.186947][ T8565] FAT-fs (loop1): Directory bread(block 65) failed [ 110.188339][ T8565] FAT-fs (loop1): Directory bread(block 66) failed [ 110.212143][ T8565] FAT-fs (loop1): Directory bread(block 67) failed [ 110.213633][ T8565] FAT-fs (loop1): Directory bread(block 68) failed [ 110.215040][ T8565] FAT-fs (loop1): Directory bread(block 69) failed [ 110.216428][ T8565] FAT-fs (loop1): Directory bread(block 70) failed [ 110.217694][ T8565] FAT-fs (loop1): Directory bread(block 71) failed [ 110.219042][ T8565] FAT-fs (loop1): Directory bread(block 72) failed [ 110.269436][ T8565] FAT-fs (loop1): Directory bread(block 73) failed [ 110.288075][ T4300] ocfs2: Unmounting device (7,2) on (node local) [ 110.294479][ T8570] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1856'. [ 110.397346][ T4310] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 110.569005][ T8585] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1860'. [ 110.609466][ T8590] loop0: detected capacity change from 0 to 256 [ 110.725656][ T8591] loop4: detected capacity change from 0 to 4096 [ 110.749097][ T8591] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 110.786785][ T8601] loop0: detected capacity change from 0 to 8 [ 110.788516][ T8601] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 110.874502][ T8601] cramfs: Error -3 while decompressing! [ 110.875874][ T8601] cramfs: 0000000025b8955b(1306)->00000000d8a553c2(4096) [ 110.877344][ T8601] cramfs: bad data blocksize 3221485966 [ 110.878644][ T8601] cramfs: Error -3 while decompressing! [ 110.890761][ T8601] cramfs: 0000000025b8955b(1306)->00000000d8a553c2(4096) [ 110.969312][ T4309] EXT4-fs (loop4): unmounting filesystem. [ 112.063400][ T8685] loop0: detected capacity change from 0 to 1764 [ 112.138226][ T8691] overlayfs: missing 'lowerdir' [ 112.172977][ T8693] device bridge2 entered promiscuous mode [ 112.360778][ T78] block nbd0: Attempted send on invalid socket [ 112.363261][ T78] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 112.377737][ T78] block nbd0: Attempted send on invalid socket [ 112.379115][ T78] I/O error, dev nbd0, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 112.629375][ T8721] netlink: 'syz.1.1928': attribute type 8 has an invalid length. [ 113.017315][ T8752] netlink: 'syz.0.1944': attribute type 3 has an invalid length. [ 113.019062][ T8752] netlink: 'syz.0.1944': attribute type 27 has an invalid length. [ 113.116342][ T8758] netlink: 'syz.2.1947': attribute type 8 has an invalid length. [ 113.887247][ T8800] loop4: detected capacity change from 0 to 1764 [ 114.100674][ T8811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.102881][ T8811] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.190692][ T8818] ieee802154 phy0 wpan0: encryption failed: -22 [ 114.521566][ T8841] loop4: detected capacity change from 0 to 1024 [ 114.570245][ T8841] syz.4.1987: attempt to access beyond end of device [ 114.570245][ T8841] loop4: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 114.744607][ T8855] __nla_validate_parse: 9 callbacks suppressed [ 114.744622][ T8855] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1996'. [ 114.769230][ T8855] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1996'. [ 114.941264][ T8867] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2003'. [ 115.215158][ T8881] loop4: detected capacity change from 0 to 512 [ 115.273807][ T8881] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 115.277328][ T8881] EXT4-fs (loop4): Remounting filesystem read-only [ 115.290556][ T8881] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.2007: invalid indirect mapped block 4278190080 (level 0) [ 115.326279][ T8873] loop3: detected capacity change from 0 to 32768 [ 115.329752][ T8881] EXT4-fs (loop4): Remounting filesystem read-only [ 115.331193][ T8881] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.2007: invalid indirect mapped block 1 (level 1) [ 115.349806][ T8873] (syz.3.2002,8873,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 115.353788][ T8873] (syz.3.2002,8873,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 115.354044][ T8881] EXT4-fs (loop4): Remounting filesystem read-only [ 115.378538][ T8881] EXT4-fs (loop4): 1 truncate cleaned up [ 115.379667][ T8881] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 115.405527][ T8873] JBD2: Ignoring recovery information on journal [ 115.447479][ T8881] EXT4-fs error (device loop4): ext4_lookup:1850: inode #2: comm syz.4.2007: bad inode number: 1 [ 115.462787][ T8881] EXT4-fs (loop4): Remounting filesystem read-only [ 115.485806][ T8873] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 115.579968][ T4309] EXT4-fs (loop4): unmounting filesystem. [ 115.684603][ T4310] ocfs2: Unmounting device (7,3) on (node local) [ 115.765810][ T8900] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2016'. [ 115.905069][ T8905] loop4: detected capacity change from 0 to 4096 [ 115.912019][ T8905] ntfs: (device loop4): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 115.914278][ T8905] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 115.918096][ T8905] ntfs: (device loop4): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 115.920245][ T8905] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 115.938401][ T8905] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 115.947567][ T8885] loop0: detected capacity change from 0 to 32768 [ 115.949348][ T8905] ntfs: volume version 3.1. [ 115.951725][ T8905] ntfs: (device loop4): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 115.954845][ T8905] ntfs: (device loop4): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 115.973220][ T8905] ntfs: (device loop4): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 115.975649][ T8905] ntfs: (device loop4): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 115.977976][ T8905] ntfs: (device loop4): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 116.048852][ T8885] XFS (loop0): Mounting V5 Filesystem [ 116.162302][ T8885] XFS (loop0): Ending clean mount [ 116.166625][ T8885] XFS (loop0): Quotacheck needed: Please wait. [ 116.254334][ T8885] XFS (loop0): Quotacheck: Done. [ 116.305897][ T8930] loop2: detected capacity change from 0 to 1024 [ 116.363612][ T8930] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 116.397748][ T4305] XFS (loop0): Unmounting Filesystem [ 116.431289][ T8904] loop1: detected capacity change from 0 to 32768 [ 116.436129][ T8904] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by syz.1.2017 (8904) [ 116.450028][ T8904] BTRFS info (device loop1): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 116.468086][ T8904] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 116.470151][ T8904] BTRFS info (device loop1): turning off barriers [ 116.471456][ T8904] BTRFS info (device loop1): max_inline at 0 [ 116.475362][ T8904] BTRFS info (device loop1): enabling all of the rescue options [ 116.479754][ T8904] BTRFS info (device loop1): ignoring data csums [ 116.483071][ T8904] BTRFS info (device loop1): ignoring bad roots [ 116.486086][ T8904] BTRFS info (device loop1): disabling log replay at mount time [ 116.490337][ T8904] BTRFS info (device loop1): force zlib compression, level 3 [ 116.501515][ T8904] BTRFS info (device loop1): allowing degraded mounts [ 116.503844][ T8935] device vlan0 entered promiscuous mode [ 116.545540][ T8904] BTRFS info (device loop1): using free space tree [ 116.546953][ T8904] workqueue: max_active 2097158 requested for btrfs-worker is out of range, clamping between 1 and 512 [ 116.552214][ T51] block nbd2: Attempted send on invalid socket [ 116.553466][ T51] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 116.589821][ T8904] workqueue: max_active 2097158 requested for btrfs-worker-high is out of range, clamping between 1 and 512 [ 116.630303][ T8904] workqueue: max_active 2097158 requested for btrfs-delalloc is out of range, clamping between 1 and 512 [ 116.696673][ T8904] workqueue: max_active 2097158 requested for btrfs-endio is out of range, clamping between 1 and 512 [ 116.704958][ T8904] workqueue: max_active 2097158 requested for btrfs-endio-meta is out of range, clamping between 1 and 512 [ 116.712307][ T8904] workqueue: max_active 2097158 requested for btrfs-endio-raid56 is out of range, clamping between 1 and 512 [ 116.719413][ T8927] loop3: detected capacity change from 0 to 40427 [ 116.738390][ T8904] workqueue: max_active 2097158 requested for btrfs-rmw is out of range, clamping between 1 and 512 [ 116.738724][ T8927] F2FS-fs (loop3): Invalid Fs Meta Ino: node(1) meta(262146) root(3) [ 116.742955][ T8927] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 116.753983][ T8904] workqueue: max_active 2097158 requested for btrfs-endio-write is out of range, clamping between 1 and 512 [ 116.787757][ T8904] workqueue: max_active 2097158 requested for btrfs-compressed-write is out of range, clamping between 1 and 512 [ 116.808022][ T8927] F2FS-fs (loop3): Found nat_bits in checkpoint [ 116.883915][ T8927] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 116.885462][ T8927] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 116.890778][ T4891] BTRFS warning (device loop1: state C): checksum verify failed on logical 5328896 mirror 1 wanted 0xe27e479340067083b74b333c1de55c530774f48d9bb4dbb5f2229db663324412 found 0x95f62be744ba79d2c7edda0b7f35c3ed250500c283e6cfbf6ba5d84a2ae65a3d level 1 [ 116.907559][ T4300] EXT4-fs (loop2): unmounting filesystem. [ 116.939065][ T8965] loop4: detected capacity change from 0 to 256 [ 116.969748][ T8904] BTRFS info (device loop1: state C): enabling ssd optimizations [ 117.000579][ T8904] BTRFS info (device loop1: state MC): max_inline at 0 [ 117.002941][ T8904] BTRFS info (device loop1: state MC): enabling all of the rescue options [ 117.004633][ T8904] BTRFS info (device loop1: state MC): allowing degraded mounts [ 117.048863][ T8965] FAT-fs (loop4): Directory bread(block 64) failed [ 117.050202][ T8965] FAT-fs (loop4): Directory bread(block 65) failed [ 117.051601][ T8965] FAT-fs (loop4): Directory bread(block 66) failed [ 117.052950][ T8973] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2035'. [ 117.052983][ T8973] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2035'. [ 117.090798][ T8965] FAT-fs (loop4): Directory bread(block 67) failed [ 117.093903][ T4301] BTRFS info (device loop1: state C): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 117.096232][ T8965] FAT-fs (loop4): Directory bread(block 68) failed [ 117.097712][ T8965] FAT-fs (loop4): Directory bread(block 69) failed [ 117.099196][ T8965] FAT-fs (loop4): Directory bread(block 70) failed [ 117.100449][ T8965] FAT-fs (loop4): Directory bread(block 71) failed [ 117.119264][ T8965] FAT-fs (loop4): Directory bread(block 72) failed [ 117.120668][ T8965] FAT-fs (loop4): Directory bread(block 73) failed [ 117.263933][ T8965] FAT-fs (loop4): error, invalid access to FAT (entry 0x00006c61) [ 117.400770][ T8982] loop1: detected capacity change from 0 to 64 [ 117.549559][ T8988] 8021q: adding VLAN 0 to HW filter on device bond2 [ 117.696953][ T8978] loop0: detected capacity change from 0 to 32768 [ 117.699345][ T8978] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz.0.2038 (8978) [ 117.710814][ T8978] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 117.713055][ T8995] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2044'. [ 117.715006][ T8978] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 117.716993][ T8978] BTRFS info (device loop0): force clearing of disk cache [ 117.718419][ T8978] BTRFS info (device loop0): setting nodatasum [ 117.719672][ T8978] BTRFS info (device loop0): use zlib compression, level 3 [ 117.721107][ T8978] BTRFS info (device loop0): allowing degraded mounts [ 117.737253][ T8978] BTRFS info (device loop0): enabling disk space caching [ 117.738675][ T8978] BTRFS info (device loop0): disk space caching is enabled [ 117.958330][ T8978] BTRFS info (device loop0): enabling ssd optimizations [ 117.962057][ T8978] BTRFS info (device loop0): rebuilding free space tree [ 117.968592][ T8978] BTRFS info (device loop0): disabling free space tree [ 117.970040][ T8978] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 118.010647][ T8978] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 118.078887][ T8978] BTRFS info (device loop0): balance: start -f -susage=18446744069414584320,usage=0..4294967295,devid=0,drange=4398046511104..0,limit=2194728288274,stripes=261..255 [ 118.102258][ T8978] BTRFS info (device loop0): balance: ended with status: 0 [ 118.110843][ T8991] loop3: detected capacity change from 0 to 32768 [ 118.128662][ T8991] XFS: attr2 mount option is deprecated. [ 118.208165][ T4305] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 118.351842][ T8991] XFS (loop3): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent. [ 118.429005][ T8991] XFS (loop3): Quotacheck needed: Please wait. [ 118.523629][ T8991] XFS (loop3): Quotacheck: Done. [ 118.692373][ T4310] XFS (loop3): Unmounting Filesystem [ 118.729600][ T9062] loop4: detected capacity change from 0 to 4096 [ 118.779768][ T9062] ntfs3: loop4: Failed to load $Extend. [ 119.028916][ T9072] netlink: 'syz.1.2070': attribute type 1 has an invalid length. [ 119.119569][ T9077] loop1: detected capacity change from 0 to 256 [ 119.190972][ T9077] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 119.284965][ T9058] loop0: detected capacity change from 0 to 32768 [ 119.362888][ T9082] loop2: detected capacity change from 0 to 4096 [ 119.365416][ T9082] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 119.384398][ T9086] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 119.482254][ T9082] ntfs3: loop2: failed to convert "c46c" to cp865 [ 119.502366][ T9092] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2079'. [ 119.606851][ T9095] delete_channel: no stack [ 119.648970][ T9100] xt_cluster: node mask cannot exceed total number of nodes [ 119.818063][ T9113] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2088'. [ 119.819939][ T9113] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2088'. [ 119.857962][ T9113] IPv6: sit1: Disabled Multicast RS [ 119.896788][ T9119] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2092'. [ 119.910667][ T9120] loop2: detected capacity change from 0 to 1764 [ 120.034288][ T9128] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 120.371420][ T9154] sctp: [Deprecated]: syz.1.2107 (pid 9154) Use of struct sctp_assoc_value in delayed_ack socket option. [ 120.371420][ T9154] Use struct sctp_sack_info instead [ 120.524645][ T9164] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2111'. [ 120.556370][ T9167] ieee802154 phy0 wpan0: encryption failed: -22 [ 121.271272][ T9219] xt_CT: You must specify a L4 protocol and not use inversions on it [ 121.329297][ T9225] loop1: detected capacity change from 0 to 256 [ 121.376479][ T9228] loop0: detected capacity change from 0 to 256 [ 121.402959][ T9228] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 121.714533][ T9250] netlink: 'syz.1.2152': attribute type 32 has an invalid length. [ 121.810117][ T9258] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 121.812147][ T9258] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 121.960213][ T9255] loop4: detected capacity change from 0 to 8192 [ 121.984882][ T9270] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2161'. [ 122.010818][ T9255] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 122.013766][ T9255] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 122.015648][ T9255] REISERFS (device loop4): using ordered data mode [ 122.016947][ T9255] reiserfs: using flush barriers [ 122.058896][ T9255] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 122.084634][ T9255] REISERFS (device loop4): checking transaction log (loop4) [ 122.105692][ T9255] REISERFS (device loop4): Using r5 hash to sort names [ 122.109455][ T9255] REISERFS (device loop4): using 3.5.x disk format [ 122.111011][ T9255] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 122.487748][ T9295] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 122.489466][ T9295] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 122.505025][ T9297] netlink: 'syz.0.2173': attribute type 1 has an invalid length. [ 122.511567][ T9295] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 122.600424][ T9299] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.950034][ T9291] loop4: detected capacity change from 0 to 32768 [ 122.954340][ T9291] XFS: attr2 mount option is deprecated. [ 122.983293][ T9294] loop3: detected capacity change from 0 to 32768 [ 122.985994][ T9294] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 123.012419][ T9291] XFS (loop4): Mounting V5 Filesystem [ 123.021168][ T9294] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 123.029775][ T9294] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 123.050476][ T4363] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 123.052830][ T4363] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 123.117387][ T9291] XFS (loop4): Ending clean mount [ 123.119859][ T1516] XFS (loop4): Metadata CRC error detected at xfs_inobt_read_verify+0x50/0x108, xfs_finobt block 0x20 [ 123.127601][ T1516] XFS (loop4): Unmount and run xfs_repair [ 123.128761][ T1516] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 123.130312][ T1516] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff FIB3............ [ 123.150226][ T1516] 00000010: 00 00 00 00 00 00 00 20 00 00 00 01 00 00 00 40 ....... .......@ [ 123.166615][ T1516] 00000020: 9f 1c ad 42 11 bd 4e 12 8f 0b f0 78 76 b8 1d 9a ...B..N....xv... [ 123.167317][ T4363] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 114ms [ 123.169553][ T1516] 00000030: 00 00 00 00 8a d2 18 46 00 00 16 80 00 00 40 37 .......F......@7 [ 123.170454][ T4363] gfs2: fsid=syz:syz.0: jid=0: Done [ 123.173929][ T9294] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 123.179661][ T1516] 00000040: ff ff ff ff ff ff 01 00 00 00 00 00 00 00 00 00 ................ [ 123.182008][ T1516] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 123.202437][ T1516] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 123.204330][ T1516] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 123.206112][ T9291] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x1f4/0x2f8" at daddr 0x20 len 8 error 74 [ 123.209108][ T9291] XFS (loop4): Failed to initialize disk quotas. [ 123.310652][ T1516] XFS (loop4): Metadata CRC error detected at xfs_inobt_read_verify+0x50/0x108, xfs_finobt block 0x20 [ 123.314898][ T1516] XFS (loop4): Unmount and run xfs_repair [ 123.316126][ T1516] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 123.317648][ T1516] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff FIB3............ [ 123.319491][ T1516] 00000010: 00 00 00 00 00 00 00 20 00 00 00 01 00 00 00 40 ....... .......@ [ 123.321260][ T1516] 00000020: 9f 1c ad 42 11 bd 4e 12 8f 0b f0 78 76 b8 1d 9a ...B..N....xv... [ 123.352040][ T1516] 00000030: 00 00 00 00 8a d2 18 46 00 00 16 80 00 00 40 37 .......F......@7 [ 123.353749][ T1516] 00000040: ff ff ff ff ff ff 01 00 00 00 00 00 00 00 00 00 ................ [ 123.355485][ T1516] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 123.379303][ T1516] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 123.390587][ T1516] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 123.398464][ T9291] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x1f4/0x2f8" at daddr 0x20 len 8 error 74 [ 123.469441][ T4309] XFS (loop4): Unmounting Filesystem [ 123.889677][ T9323] loop0: detected capacity change from 0 to 32768 [ 123.910511][ T9323] XFS: attr2 mount option is deprecated. [ 123.918891][ T9343] deleting an unspecified loop device is not supported. [ 124.000189][ T9323] XFS (loop0): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent. [ 124.056050][ T9323] XFS (loop0): Quotacheck needed: Please wait. [ 124.105176][ T9355] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2196'. [ 124.134829][ T9323] XFS (loop0): Quotacheck: Done. [ 124.180795][ T4305] XFS (loop0): Unmounting Filesystem [ 124.471280][ T9368] IPv6: sit2: Disabled Multicast RS [ 124.798232][ T9390] netlink: 'syz.0.2198': attribute type 27 has an invalid length. [ 124.810180][ T9390] netlink: 'syz.0.2198': attribute type 3 has an invalid length. [ 124.816370][ T9390] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2198'. [ 125.013622][ T9395] infiniband syz!: set active [ 125.014872][ T9395] infiniband syz!: added team_slave_0 [ 125.075864][ T9395] RDS/IB: syz!: added [ 125.076812][ T9395] smc: adding ib device syz! with port count 1 [ 125.120764][ T9395] smc: ib device syz! port 1 has pnetid [ 125.130909][ T9412] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2224'. [ 125.133116][ T9412] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2224'. [ 125.754635][ T9415] loop0: detected capacity change from 0 to 32768 [ 125.772693][ T9415] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 scanned by syz.0.2225 (9415) [ 125.783672][ T9415] BTRFS info (device loop0): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 125.803421][ T9415] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 125.805329][ T9415] BTRFS info (device loop0): turning off barriers [ 125.806722][ T9415] BTRFS info (device loop0): max_inline at 0 [ 125.807944][ T9415] BTRFS info (device loop0): enabling all of the rescue options [ 125.831777][ T9415] BTRFS info (device loop0): ignoring data csums [ 125.857718][ T9415] BTRFS info (device loop0): ignoring bad roots [ 125.859016][ T9415] BTRFS info (device loop0): disabling log replay at mount time [ 125.860677][ T9415] BTRFS info (device loop0): force zlib compression, level 3 [ 125.867821][ T9415] BTRFS info (device loop0): allowing degraded mounts [ 125.869287][ T9415] BTRFS info (device loop0): using free space tree [ 125.870758][ T9415] workqueue: max_active 2097158 requested for btrfs-worker is out of range, clamping between 1 and 512 [ 125.894996][ T9415] workqueue: max_active 2097158 requested for btrfs-worker-high is out of range, clamping between 1 and 512 [ 125.903193][ T9415] workqueue: max_active 2097158 requested for btrfs-delalloc is out of range, clamping between 1 and 512 [ 125.922566][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.923825][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 125.933550][ T9415] workqueue: max_active 2097158 requested for btrfs-endio is out of range, clamping between 1 and 512 [ 125.939463][ T9415] workqueue: max_active 2097158 requested for btrfs-endio-meta is out of range, clamping between 1 and 512 [ 125.961732][ T9415] workqueue: max_active 2097158 requested for btrfs-endio-raid56 is out of range, clamping between 1 and 512 [ 125.965362][ T9438] loop4: detected capacity change from 0 to 8192 [ 125.983823][ T9458] loop1: detected capacity change from 0 to 64 [ 125.991868][ T9415] workqueue: max_active 2097158 requested for btrfs-rmw is out of range, clamping between 1 and 512 [ 126.007615][ T9415] workqueue: max_active 2097158 requested for btrfs-endio-write is out of range, clamping between 1 and 512 [ 126.017663][ T9438] loop4: p1 < > p4 < > [ 126.047747][ T9415] workqueue: max_active 2097158 requested for btrfs-compressed-write is out of range, clamping between 1 and 512 [ 126.071301][ T9458] Trying to free block not in datazone [ 126.086232][ T4881] BTRFS warning (device loop0: state C): checksum verify failed on logical 5328896 mirror 1 wanted 0xe27e479340067083b74b333c1de55c530774f48d9bb4dbb5f2229db663324412 found 0x95f62be744ba79d2c7edda0b7f35c3ed250500c283e6cfbf6ba5d84a2ae65a3d level 1 [ 126.111067][ T9415] BTRFS info (device loop0: state C): enabling ssd optimizations [ 126.203041][ T9415] BTRFS info (device loop0: state MC): max_inline at 0 [ 126.204493][ T9415] BTRFS info (device loop0: state MC): enabling all of the rescue options [ 126.206445][ T9415] BTRFS info (device loop0: state MC): allowing degraded mounts [ 126.312523][ T4305] BTRFS info (device loop0: state C): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 126.371593][ T9484] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2251'. [ 126.380743][ T9484] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2251'. [ 126.407580][ T4896] udevd[4896]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 126.427540][ T4456] udevd[4456]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 126.598629][ T9497] mmap: syz.1.2256 (9497): VmData 175906816 exceed data ulimit 3626. Update limits or use boot option ignore_rlimit_data. [ 126.837900][ T9511] mmap: syz.4.2262 (9511) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 126.847187][ T9514] trusted_key: encrypted_key: insufficient parameters specified [ 126.999734][ T9525] loop1: detected capacity change from 0 to 128 [ 127.002644][ T9521] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 127.009099][ T9527] xt_l2tp: missing protocol rule (udp|l2tpip) [ 127.022632][ T9525] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 127.024745][ T9525] ext4 filesystem being mounted at /447/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 127.113683][ T4301] EXT4-fs (loop1): unmounting filesystem. [ 127.207968][ T9540] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2275'. [ 127.261471][ T9543] (unnamed net_device) (uninitialized): option mode: invalid value (81) [ 127.358327][ T9551] loop1: detected capacity change from 0 to 16 [ 127.372320][ T9551] erofs: (device loop1): mounted with root inode @ nid 36. [ 127.448690][ T9558] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2284'. [ 127.652331][ T9574] xt_l2tp: unknown flags: 3b [ 128.056169][ T9603] kAFS: Can only specify source 'none' with -o dyn [ 128.225943][ T9615] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 128.227658][ T9615] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 128.363260][ T9624] autofs4:pid:9624:validate_dev_ioctl: invalid path supplied for cmd(0xc018937e) [ 128.529143][ T9635] loop4: detected capacity change from 0 to 2048 [ 128.534039][ T9638] kcapi: manufacturer command 3 unknown. [ 128.579071][ T9640] loop0: detected capacity change from 0 to 128 [ 128.586184][ T9635] loop4: p1 < > p3 p4 < > [ 128.588795][ T9635] loop4: p3 start 4284289 is beyond EOD, truncated [ 128.616567][ T9640] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 128.619828][ T9640] ext4 filesystem being mounted at /468/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 128.641023][ T9635] VFS: unable to read V7 FS superblock on device loop4p4. [ 128.659820][ T9644] tmpfs: Bad value for 'mpol' [ 128.660955][ T9635] VFS: could not find a valid V7 on loop4p4. [ 128.664798][ T4305] EXT4-fs (loop0): unmounting filesystem. [ 128.785216][ T9652] loop3: detected capacity change from 0 to 8 [ 129.101410][ T9675] i2c i2c-0: Invalid block write size 34 [ 129.161796][ T9677] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 129.551548][ T9708] loop4: detected capacity change from 0 to 128 [ 129.601085][ T9708] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 129.603494][ T9708] ext4 filesystem being mounted at /482/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 129.721765][ T4309] EXT4-fs (loop4): unmounting filesystem. [ 130.048903][ T9743] loop2: detected capacity change from 0 to 256 [ 130.059164][ T9743] exfat: Deprecated parameter 'utf8' [ 130.081264][ T9743] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 130.178933][ T9751] device gtp0 entered promiscuous mode [ 130.225173][ T9755] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2381'. [ 130.530745][ T9774] loop4: detected capacity change from 0 to 64 [ 130.568974][ T9778] loop1: detected capacity change from 0 to 256 [ 130.601196][ T9778] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36e06c6e, utbl_chksum : 0xe619d30d) [ 130.828783][ T9796] loop4: detected capacity change from 0 to 16 [ 130.830591][ T9796] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 130.840135][ T9794] loop2: detected capacity change from 0 to 1024 [ 130.865383][ T9794] hfsplus: found bad thread record in catalog [ 130.935274][ T4387] hfsplus: b-tree write err: -5, ino 4 [ 131.151349][ T9815] netlink: 'syz.0.2410': attribute type 9 has an invalid length. [ 131.177234][ T9815] netlink: 'syz.0.2410': attribute type 6 has an invalid length. [ 131.300504][ T4456] udevd[4456]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 131.433810][ T4456] udevd[4456]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 131.632361][ T9842] tmpfs: Bad value for 'mpol' [ 131.956577][ T9855] loop3: detected capacity change from 0 to 2048 [ 132.014317][ T9855] loop3: p1 < > p3 p4 < > [ 132.016002][ T9855] loop3: p3 start 4284289 is beyond EOD, truncated [ 132.057390][ T9855] VFS: unable to read V7 FS superblock on device loop3p4. [ 132.058866][ T9855] VFS: could not find a valid V7 on loop3p4. [ 132.417368][ T9875] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 132.482956][ T9878] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2441'. [ 132.686402][ T9850] loop0: detected capacity change from 0 to 40427 [ 132.688455][ T9889] loop3: detected capacity change from 0 to 128 [ 132.708980][ T9850] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 132.710488][ T9850] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 132.723373][ T9850] F2FS-fs (loop0): build fault injection attr: rate: 17008, type: 0x3ffff [ 132.725385][ T9850] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x6 [ 132.758454][ T9850] F2FS-fs (loop0): invalid crc value [ 132.809723][ T9850] F2FS-fs (loop0): Found nat_bits in checkpoint [ 132.902570][ T9850] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 132.904244][ T9850] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 133.009372][ T4305] syz-executor: attempt to access beyond end of device [ 133.009372][ T4305] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 133.140733][ T9915] netlink: 'syz.2.2459': attribute type 2 has an invalid length. [ 133.162750][ T9915] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2459'. [ 133.697182][ T9947] loop0: detected capacity change from 0 to 1024 [ 133.741293][ T9951] netlink: 399 bytes leftover after parsing attributes in process `syz.2.2476'. [ 133.753180][ T9951] openvswitch: netlink: ufid size 36 bytes exceeds the range (1, 16) [ 133.754911][ T9951] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 133.850686][ T4387] hfsplus: b-tree write err: -5, ino 4 [ 134.300319][ T9980] loop4: detected capacity change from 0 to 256 [ 134.480487][ T9984] loop3: detected capacity change from 0 to 2048 [ 134.585268][ T9957] loop1: detected capacity change from 0 to 32768 [ 134.588309][ T9957] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop1 scanned by syz.1.2479 (9957) [ 134.604621][ T9991] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 134.637477][ T9957] BTRFS info (device loop1): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 134.639643][ T9957] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 134.641640][ T9957] BTRFS info (device loop1): enabling ssd optimizations [ 134.644598][ T9984] NILFS error (device loop3): nilfs_lookup: deleted inode referenced: 12 [ 134.654100][ T9957] BTRFS info (device loop1): turning off barriers [ 134.655362][ T9957] BTRFS info (device loop1): use no compression [ 134.656590][ T9957] BTRFS info (device loop1): using free space tree [ 134.662389][ T9984] Remounting filesystem read-only [ 134.973724][ T9974] loop0: detected capacity change from 0 to 32768 [ 134.998000][ T9974] BTRFS: device fsid 3a492a15-ac49-4ce6-945e-cef7a687c6c9 devid 1 transid 8 /dev/loop0 scanned by syz.0.2488 (9974) [ 135.028983][ T9974] BTRFS info (device loop0): first mount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 135.031119][ T9974] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm [ 135.042317][ T9974] BTRFS info (device loop0): using free space tree [ 135.095092][ T4301] BTRFS info (device loop1): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 135.106624][T10031] netlink: 'syz.2.2503': attribute type 11 has an invalid length. [ 135.187851][T10041] loop3: detected capacity change from 0 to 512 [ 135.190881][T10041] EXT4-fs: Ignoring removed nomblk_io_submit option [ 135.224950][T10041] [EXT4 FS bs=4096, gc=1, bpg=71, ipg=32, mo=a842c028, mo2=0000] [ 135.226634][T10041] System zones: 0-2, 18-18, 34-34 [ 135.277195][T10041] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.2508: couldn't read orphan inode 16 (err -116) [ 135.286942][T10041] EXT4-fs (loop3): Remounting filesystem read-only [ 135.288261][T10041] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 135.290003][T10041] ext4 filesystem being mounted at /496/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.378812][T10041] EXT4-fs error (device loop3): ext4_xattr_block_list:719: inode #15: comm syz.3.2508: corrupted xattr block 19 [ 135.391538][T10041] EXT4-fs (loop3): Remounting filesystem read-only [ 135.422319][ T9974] BTRFS info (device loop0): enabling ssd optimizations [ 135.550944][ T4305] BTRFS info (device loop0): last unmount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 135.573204][ T4310] EXT4-fs (loop3): unmounting filesystem. [ 135.885875][T10094] loop3: detected capacity change from 0 to 1024 [ 135.951202][T10099] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2528'. [ 135.971069][T10099] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2528'. [ 135.981984][T10099] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2528'. [ 135.994829][ T4891] hfsplus: b-tree write err: -5, ino 4 [ 136.049687][T10102] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2529'. [ 136.062108][T10102] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2529'. [ 136.110062][T10108] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2532'. [ 136.132876][T10108] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2532'. [ 136.137226][T10108] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2532'. [ 136.212121][T10111] delete_channel: no stack [ 136.220443][T10116] loop2: detected capacity change from 0 to 64 [ 136.306136][ T7057] udevd[7057]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 136.344737][ T4454] udevd[4454]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 136.367423][T10122] netlink: 'syz.2.2539': attribute type 10 has an invalid length. [ 136.425620][T10122] team0: Port device vlan0 added [ 136.453116][T10124] loop4: detected capacity change from 0 to 2048 [ 136.508419][T10127] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 136.602823][T10131] loop2: detected capacity change from 0 to 1024 [ 136.625702][T10093] loop0: detected capacity change from 0 to 32768 [ 136.643122][T10129] loop1: detected capacity change from 0 to 4096 [ 136.649792][T10129] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 136.659247][T10131] kAFS: unparsable volume name [ 136.670459][T10093] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 136.694320][T10133] loop3: detected capacity change from 0 to 4096 [ 136.696018][T10093] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 136.710690][T10133] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 136.718884][T10127] NILFS (loop4): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 136.720144][T10093] (syz.0.2515,10093,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: directory entry overrun - offset=0, inode=65, rec_len=1296, name_len=0 [ 136.729193][T10093] (syz.0.2515,10093,0):ocfs2_prepare_dir_for_insert:4294 ERROR: status = -2 [ 136.729676][T10127] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=4) [ 136.731131][T10093] (syz.0.2515,10093,0):ocfs2_symlink:1864 ERROR: status = -2 [ 136.735048][T10093] (syz.0.2515,10093,0):ocfs2_symlink:2065 ERROR: status = -2 [ 136.774285][ T4305] ocfs2: Unmounting device (7,0) on (node local) [ 136.799193][T10129] ntfs3: loop1: failed to convert "c46c" to macinuit [ 136.841474][ T4891] hfsplus: b-tree write err: -5, ino 4 [ 136.844727][T10133] ntfs3: loop3: failed to convert "c46c" to cp860 [ 136.853169][T10127] Remounting filesystem read-only [ 136.854371][ T39] NILFS (loop4): discard dirty page: offset=4096, ino=6 [ 136.855799][ T39] NILFS (loop4): discard dirty block: blocknr=39, size=1024 [ 136.857340][ T39] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 136.859196][ T39] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 136.861137][ T39] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 136.888888][ T39] NILFS (loop4): discard dirty page: offset=0, ino=2 [ 136.890180][ T39] NILFS (loop4): discard dirty block: blocknr=18, size=1024 [ 136.891633][ T39] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 136.902021][ T39] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 136.914137][ T39] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 136.916211][ T4309] NILFS (loop4): disposed unprocessed dirty file(s) when stopping log writer [ 136.918068][ T4309] NILFS (loop4): discard dirty page: offset=0, ino=6 [ 136.919396][ T4309] NILFS (loop4): discard dirty block: blocknr=35, size=1024 [ 136.921412][ T4309] NILFS (loop4): discard dirty block: blocknr=36, size=1024 [ 136.923274][ T4309] NILFS (loop4): discard dirty block: blocknr=37, size=1024 [ 136.926580][ T4309] NILFS (loop4): discard dirty block: blocknr=38, size=1024 [ 136.928745][ T4309] NILFS (loop4): discard dirty page: offset=0, ino=5 [ 136.930013][ T4309] NILFS (loop4): discard dirty block: blocknr=41, size=1024 [ 136.931443][ T4309] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 136.947257][ T4309] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 136.949045][ T4309] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 136.950925][ T4309] NILFS (loop4): discard dirty page: offset=0, ino=4 [ 136.972370][ T4309] NILFS (loop4): discard dirty block: blocknr=40, size=1024 [ 136.973976][ T4309] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 136.979973][ T4309] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 136.982229][ T4309] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 136.993533][ T4309] NILFS (loop4): discard dirty page: offset=0, ino=3 [ 136.995011][ T4309] NILFS (loop4): discard dirty block: blocknr=42, size=1024 [ 136.996443][ T4309] NILFS (loop4): discard dirty block: blocknr=43, size=1024 [ 136.997889][ T4309] NILFS (loop4): discard dirty block: blocknr=44, size=1024 [ 137.019451][ T4309] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 137.021185][ T4309] NILFS (loop4): discard dirty page: offset=196608, ino=3 [ 137.028653][ T4309] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 137.030454][ T4309] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 137.046016][ T4309] NILFS (loop4): discard dirty block: blocknr=49, size=1024 [ 137.047431][ T4309] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 137.833963][T10192] netlink: 192 bytes leftover after parsing attributes in process `syz.4.2573'. [ 138.072514][T10157] loop1: detected capacity change from 0 to 32768 [ 138.099679][T10205] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 138.145273][T10157] XFS (loop1): Mounting V5 Filesystem [ 138.157908][T10200] loop2: detected capacity change from 0 to 2048 [ 138.163752][T10200] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 138.182656][T10200] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 138.211318][T10181] loop3: detected capacity change from 0 to 32768 [ 138.276209][T10219] loop4: detected capacity change from 0 to 47 [ 138.307923][T10157] XFS (loop1): Ending clean mount [ 138.483002][ T4301] XFS (loop1): Unmounting Filesystem [ 138.879842][T10247] IPv6: sit4: Disabled Multicast RS [ 139.236596][T10229] loop0: detected capacity change from 0 to 32768 [ 139.279386][T10267] netlink: 'syz.2.2607': attribute type 4 has an invalid length. [ 139.380038][T10229] XFS (loop0): Mounting V5 Filesystem [ 139.431313][T10288] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2610'. [ 139.593568][T10229] XFS (loop0): Ending clean mount [ 139.612652][T10229] XFS (loop0): Quotacheck needed: Please wait. [ 139.660396][T10229] XFS (loop0): Quotacheck: Done. [ 139.742888][T10306] 0�X���: renamed from caif0 [ 139.764671][T10308] loop3: detected capacity change from 0 to 128 [ 139.780212][ T4305] XFS (loop0): Unmounting Filesystem [ 139.812271][T10306] A link change request failed with some changes committed already. Interface 60�X��� may have been left with an inconsistent configuration, please check. [ 139.816127][T10308] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 139.822069][T10308] ext4 filesystem being mounted at /520/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 139.947353][ T4310] EXT4-fs (loop3): unmounting filesystem. [ 140.055905][T10320] xt_TPROXY: Can be used only with -p tcp or -p udp [ 140.058614][T10316] device netdevsim0 entered promiscuous mode [ 140.079141][T10316] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 140.616941][T10304] loop4: detected capacity change from 0 to 40427 [ 140.619229][T10304] F2FS-fs (loop4): Invalid log sectors per block(3) log sectorsize(10) [ 140.621229][T10304] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 140.625401][T10347] loop1: detected capacity change from 0 to 64 [ 140.678740][T10304] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241045589454292453) [ 140.769380][T10304] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 140.770869][T10304] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 140.994729][T10366] netlink: 'syz.1.2646': attribute type 1 has an invalid length. [ 140.996327][T10366] netlink: 'syz.1.2646': attribute type 2 has an invalid length. [ 141.090733][T10370] loop3: detected capacity change from 0 to 512 [ 141.127245][T10372] __nla_validate_parse: 3 callbacks suppressed [ 141.127260][T10372] netlink: 424 bytes leftover after parsing attributes in process `syz.1.2652'. [ 141.181782][T10370] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 141.194552][T10370] ext4 filesystem being mounted at /528/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 141.196702][T10341] loop2: detected capacity change from 0 to 32768 [ 141.199958][T10341] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.2635 (10341) [ 141.211229][T10341] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 141.220186][T10341] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 141.222660][T10341] BTRFS info (device loop2): force zlib compression, level 3 [ 141.224290][T10341] BTRFS info (device loop2): force clearing of disk cache [ 141.225852][T10341] BTRFS info (device loop2): setting nodatasum [ 141.227108][T10341] BTRFS info (device loop2): use zlib compression, level 3 [ 141.228579][T10341] BTRFS info (device loop2): allowing degraded mounts [ 141.230089][T10341] BTRFS info (device loop2): enabling disk space caching [ 141.265549][T10376] overlayfs: missing 'lowerdir' [ 141.268593][T10341] BTRFS info (device loop2): disk space caching is enabled [ 141.368523][ T4310] EXT4-fs (loop3): unmounting filesystem. [ 141.488558][T10407] device netdevsim0 entered promiscuous mode [ 141.519367][T10407] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 141.524492][T10341] BTRFS info (device loop2): enabling ssd optimizations [ 141.526836][T10341] BTRFS info (device loop2): rebuilding free space tree [ 141.559266][T10341] BTRFS info (device loop2): disabling free space tree [ 141.560841][T10341] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 141.563658][T10341] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 141.642539][T10416] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2661'. [ 141.670669][T10341] BTRFS info (device loop2): balance: start -f -sprofiles=NONE,usage=32769 [ 141.672639][T10341] BTRFS info (device loop2): balance: ended with status: 0 [ 141.676471][T10419] loop3: detected capacity change from 0 to 256 [ 141.696925][T10419] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x909a8a77, utbl_chksum : 0xe619d30d) [ 141.782526][ T4300] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 141.807168][T10425] IPv6: sit2: Disabled Multicast RS [ 141.969912][T10432] netlink: 'syz.3.2668': attribute type 12 has an invalid length. [ 142.075646][T10438] A link change request failed with some changes committed already. Interface bond_slave_1 may have been left with an inconsistent configuration, please check. [ 142.084454][T10434] lo speed is unknown, defaulting to 1000 [ 142.351472][T10453] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2676'. [ 142.357125][T10453] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2676'. [ 142.636567][T10472] netlink: 452 bytes leftover after parsing attributes in process `syz.3.2688'. [ 142.666019][T10474] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2687'. [ 142.669737][T10474] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 143.110922][T10494] lo speed is unknown, defaulting to 1000 [ 143.158830][T10505] dlm: no locking on control device [ 143.296329][T10511] loop3: detected capacity change from 0 to 2048 [ 143.324986][T10511] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 143.681138][T10529] loop3: detected capacity change from 0 to 4096 [ 143.698873][T10529] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 143.749046][T10529] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 143.758646][T10529] ntfs3: loop3: mft corrupted [ 143.759682][T10529] ntfs3: loop3: Failed to load $Extend. [ 143.826381][T10529] ntfs3: loop3: ino=1b, "file0" attr_set_size [ 144.315301][T10569] IPv6: NLM_F_CREATE should be specified when creating new route [ 144.470686][T10575] ipt_CLUSTERIP: no config found for 224.0.0.2, need 'new' [ 144.516865][T10573] lo speed is unknown, defaulting to 1000 [ 144.735122][T10585] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2741'. [ 145.536067][T10590] loop0: detected capacity change from 0 to 32768 [ 145.547489][T10590] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop0 scanned by syz.0.2743 (10590) [ 145.558717][T10625] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2762'. [ 145.561147][T10590] BTRFS info (device loop0): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 145.561163][T10625] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2762'. [ 145.564008][T10590] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 145.566714][T10590] BTRFS info (device loop0): turning on flush-on-commit [ 145.587302][T10590] BTRFS info (device loop0): turning off barriers [ 145.588736][T10590] BTRFS info (device loop0): turning on sync discard [ 145.590132][T10590] BTRFS info (device loop0): using free space tree [ 145.714871][T10638] loop2: detected capacity change from 0 to 4096 [ 145.747995][T10640] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 145.792916][T10631] loop3: detected capacity change from 0 to 4096 [ 145.802276][T10631] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 146.063288][ T4305] BTRFS info (device loop0): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 146.151733][T10672] loop1: detected capacity change from 0 to 1024 [ 146.271311][ T39] hfsplus: b-tree write err: -5, ino 4 [ 146.403309][T10685] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 146.423944][T10685] CIFS mount error: No usable UNC path provided in device string! [ 146.423944][T10685] [ 146.426263][T10685] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 146.587272][T10698] loop0: detected capacity change from 0 to 128 [ 146.591291][T10698] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 146.709302][ T4859] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 146.857834][T10710] loop4: detected capacity change from 0 to 512 [ 146.898950][T10710] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 146.901077][T10710] ext4 filesystem being mounted at /580/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.946521][T10710] EXT4-fs (loop4): unmounting filesystem. [ 147.276814][T10734] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 147.291540][T10683] loop1: detected capacity change from 0 to 40427 [ 147.304878][T10683] F2FS-fs (loop1): Corrupted extension count (64 + 1 > 64) [ 147.306401][T10683] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 147.320060][T10740] netlink: 'syz.2.2809': attribute type 15 has an invalid length. [ 147.359262][T10683] F2FS-fs (loop1): Found nat_bits in checkpoint [ 147.453088][T10683] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 147.454598][T10683] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 147.749288][T10766] loop0: detected capacity change from 0 to 1024 [ 147.790455][T10766] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 147.962183][ T4305] EXT4-fs (loop0): unmounting filesystem. [ 148.048415][T10782] 9pnet_fd: Insufficient options for proto=fd [ 148.441538][T10815] loop1: detected capacity change from 0 to 512 [ 148.457882][T10815] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 148.529322][T10815] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 148.531384][T10815] ext4 filesystem being mounted at /544/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.645484][ T4301] EXT4-fs (loop1): unmounting filesystem. [ 148.741306][T10807] loop4: detected capacity change from 0 to 32768 [ 148.760233][T10807] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 scanned by syz.4.2840 (10807) [ 148.783858][T10807] BTRFS info (device loop4): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 148.785984][T10807] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 148.787950][T10807] BTRFS info (device loop4): force zlib compression, level 3 [ 148.789494][T10807] BTRFS info (device loop4): force clearing of disk cache [ 148.790973][T10807] BTRFS info (device loop4): setting nodatasum [ 148.803400][T10807] BTRFS info (device loop4): allowing degraded mounts [ 148.805218][T10807] BTRFS info (device loop4): enabling disk space caching [ 148.817191][T10807] BTRFS info (device loop4): disk space caching is enabled [ 149.088031][T10807] BTRFS info (device loop4): rebuilding free space tree [ 149.102982][T10807] BTRFS info (device loop4): disabling free space tree [ 149.104538][T10807] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 149.143579][T10807] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 149.292488][ T4309] BTRFS info (device loop4): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 149.636203][T10893] vhci_hcd: GetPortErrorCount req not supported for USB 2.0 roothub [ 149.741014][T10899] loop0: detected capacity change from 0 to 512 [ 149.755974][T10899] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 149.819822][T10899] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 149.821723][T10899] ext4 filesystem being mounted at /560/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.890828][T10911] loop1: detected capacity change from 0 to 512 [ 149.917303][T10911] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 149.918959][T10911] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c01c, mo2=0002] [ 149.921100][T10911] EXT4-fs (loop1): orphan cleanup on readonly fs [ 149.963735][T10911] EXT4-fs warning (device loop1): ext4_block_to_path:107: block 3279949761 > max in inode 13 [ 149.966272][T10911] EXT4-fs warning (device loop1): ext4_block_to_path:107: block 3279949762 > max in inode 13 [ 149.968947][T10911] EXT4-fs (loop1): 1 truncate cleaned up [ 149.997732][T10911] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 150.054690][ T4305] EXT4-fs (loop0): unmounting filesystem. [ 150.078379][T10911] EXT4-fs warning (device loop1): dx_probe:893: inode #2: comm syz.1.2881: dx entry: limit 65535 != root limit 120 [ 150.081231][T10911] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.2881: Corrupt directory, running e2fsck is recommended [ 150.159778][ T4301] EXT4-fs (loop1): unmounting filesystem. [ 150.304390][T10933] loop1: detected capacity change from 0 to 764 [ 150.323191][T10933] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 150.333498][T10933] Symlink component flag not implemented [ 150.334658][T10933] Symlink component flag not implemented [ 150.336334][T10933] Symlink component flag not implemented (128) [ 150.337546][T10933] Symlink component flag not implemented (122) [ 150.537004][T10951] random: crng reseeded on system resumption [ 150.580790][T10949] loop1: detected capacity change from 0 to 4096 [ 150.590878][T10949] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 150.644956][T10953] nft_compat: unsupported protocol 5 [ 150.735272][T10949] ntfs3: loop1: failed to convert "c46c" to cp866 [ 151.170602][T10946] loop2: detected capacity change from 0 to 32768 [ 151.182666][T10946] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.2898 (10946) [ 151.196448][T10944] loop4: detected capacity change from 0 to 32768 [ 151.208598][T10946] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 151.210764][T10946] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm [ 151.218097][T10946] BTRFS info (device loop2): using free space tree [ 151.218660][T10944] (syz.4.2895,10944,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 151.245230][T10944] (syz.4.2895,10944,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 151.310579][T10987] netlink: 'syz.0.2915': attribute type 21 has an invalid length. [ 151.312276][T10944] JBD2: Ignoring recovery information on journal [ 151.323903][T10987] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2915'. [ 151.325745][T10987] netlink: 'syz.0.2915': attribute type 4 has an invalid length. [ 151.404257][T10944] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 151.435690][T11004] IPVS: length: 53 != 8 [ 151.446490][T10946] BTRFS info (device loop2): enabling ssd optimizations [ 151.451037][T10944] [ 151.451478][T10944] ====================================================== [ 151.452883][T10944] WARNING: possible circular locking dependency detected [ 151.454315][T10944] 6.1.127-syzkaller #0 Not tainted [ 151.455457][T10944] ------------------------------------------------------ [ 151.457045][T10944] syz.4.2895/10944 is trying to acquire lock: [ 151.458305][T10944] ffff0000f42389c8 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{3:3}, at: ocfs2_lock_global_qf+0x1b8/0x260 [ 151.461018][T10944] [ 151.461018][T10944] but task is already holding lock: [ 151.462635][T10944] ffff0000df6960a8 (&dquot->dq_lock){+.+.}-{3:3}, at: ocfs2_acquire_dquot+0x270/0xb1c [ 151.464881][T10944] [ 151.464881][T10944] which lock already depends on the new lock. [ 151.464881][T10944] [ 151.467011][T10944] [ 151.467011][T10944] the existing dependency chain (in reverse order) is: [ 151.468941][T10944] [ 151.468941][T10944] -> #6 (&dquot->dq_lock){+.+.}-{3:3}: [ 151.470420][T10944] __mutex_lock_common+0x190/0x21a0 [ 151.471653][T10944] mutex_lock_nested+0x38/0x44 [ 151.472782][T10944] dquot_commit+0x54/0x240 [ 151.473757][T10944] ext4_write_dquot+0x1b4/0x314 [ 151.474883][T10944] ext4_mark_dquot_dirty+0xe8/0x140 [ 151.476089][T10944] mark_all_dquot_dirty+0x108/0x424 [ 151.477251][T10944] __dquot_free_space+0x840/0xce4 [ 151.478398][T10944] ext4_free_blocks+0x1b14/0x2b64 [ 151.479575][T10944] ext4_ext_remove_space+0x1bd0/0x4544 [ 151.480878][T10944] ext4_ext_truncate+0x168/0x210 [ 151.482063][T10944] ext4_truncate+0xa08/0x1178 [ 151.483165][T10944] ext4_evict_inode+0xc3c/0x12cc [ 151.484273][T10944] evict+0x418/0x894 [ 151.485258][T10944] iput+0x7c0/0x8a4 [ 151.486270][T10944] do_unlinkat+0x530/0x70c [ 151.487316][T10944] __arm64_sys_unlinkat+0xcc/0xfc [ 151.488392][T10944] invoke_syscall+0x98/0x2bc [ 151.489503][T10944] el0_svc_common+0x138/0x258 [ 151.490459][T10944] do_el0_svc+0x58/0x13c [ 151.491493][T10944] el0_svc+0x58/0x168 [ 151.492361][T10944] el0t_64_sync_handler+0x84/0xf0 [ 151.493561][T10944] el0t_64_sync+0x18c/0x190 [ 151.494617][T10944] [ 151.494617][T10944] -> #5 (&ei->i_data_sem){++++}-{3:3}: [ 151.496216][T10944] down_write+0x5c/0x88 [ 151.497163][T10944] ext4_map_blocks+0x77c/0x1810 [ 151.498350][T10944] ext4_writepages+0x1050/0x32b4 [ 151.499392][T10944] do_writepages+0x2e8/0x56c [ 151.500549][T10944] __writeback_single_inode+0x16c/0x1770 [ 151.501735][T10944] writeback_sb_inodes+0x978/0x1718 [ 151.503010][T10944] __writeback_inodes_wb+0x110/0x39c [ 151.504328][T10944] wb_writeback+0x428/0x1130 [ 151.505358][T10944] wb_workfn+0xc98/0x1034 [ 151.506514][T10944] process_one_work+0x7ac/0x1404 [ 151.507691][T10944] worker_thread+0x8e4/0xfec [ 151.508829][T10944] kthread+0x250/0x2d8 [ 151.509726][T10944] ret_from_fork+0x10/0x20 [ 151.510674][T10944] [ 151.510674][T10944] -> #4 (jbd2_handle){++++}-{0:0}: [ 151.512249][T10944] start_this_handle+0x1140/0x13ac [ 151.513465][T10944] jbd2__journal_start+0x298/0x544 [ 151.514692][T10944] jbd2_journal_start+0x3c/0x4c [ 151.515769][T10944] ocfs2_start_trans+0x3e8/0x73c [ 151.516960][T10944] ocfs2_shutdown_local_alloc+0x1d8/0x8d8 [ 151.518341][T10944] ocfs2_dismount_volume+0x1fc/0x99c [ 151.519565][T10944] ocfs2_put_super+0x110/0x3e8 [ 151.520719][T10944] generic_shutdown_super+0x130/0x328 [ 151.521995][T10944] kill_block_super+0x70/0xdc [ 151.523073][T10944] deactivate_locked_super+0xac/0x124 [ 151.524375][T10944] deactivate_super+0xf0/0x110 [ 151.525465][T10944] cleanup_mnt+0x394/0x41c [ 151.526453][T10944] __cleanup_mnt+0x20/0x30 [ 151.527546][T10944] task_work_run+0x240/0x2f0 [ 151.528584][T10944] do_notify_resume+0x2080/0x2cb8 [ 151.529750][T10944] el0_svc+0x9c/0x168 [ 151.530662][T10944] el0t_64_sync_handler+0x84/0xf0 [ 151.531950][T10944] el0t_64_sync+0x18c/0x190 [ 151.533119][T10944] [ 151.533119][T10944] -> #3 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 151.534896][T10944] down_read+0x64/0x308 [ 151.535873][T10944] ocfs2_start_trans+0x3dc/0x73c [ 151.537006][T10944] ocfs2_shutdown_local_alloc+0x1d8/0x8d8 [ 151.538287][T10944] ocfs2_dismount_volume+0x1fc/0x99c [ 151.539533][T10944] ocfs2_put_super+0x110/0x3e8 [ 151.540696][T10944] generic_shutdown_super+0x130/0x328 [ 151.541955][T10944] kill_block_super+0x70/0xdc [ 151.542969][T10944] deactivate_locked_super+0xac/0x124 [ 151.544191][T10944] deactivate_super+0xf0/0x110 [ 151.545282][T10944] cleanup_mnt+0x394/0x41c [ 151.546339][T10944] __cleanup_mnt+0x20/0x30 [ 151.547397][T10944] task_work_run+0x240/0x2f0 [ 151.548540][T10944] do_notify_resume+0x2080/0x2cb8 [ 151.549686][T10944] el0_svc+0x9c/0x168 [ 151.550665][T10944] el0t_64_sync_handler+0x84/0xf0 [ 151.551832][T10944] el0t_64_sync+0x18c/0x190 [ 151.552938][T10944] [ 151.552938][T10944] -> #2 (sb_internal#2){.+.+}-{0:0}: [ 151.554494][T10944] ocfs2_start_trans+0x260/0x73c [ 151.555616][T10944] ocfs2_write_info+0x114/0x354 [ 151.556629][T10944] dquot_set_dqinfo+0x398/0x5f4 [ 151.557846][T10944] quota_setinfo+0x3b0/0x4fc [ 151.558910][T10944] do_quotactl+0x4c0/0x698 [ 151.559877][T10944] __arm64_sys_quotactl+0x2d8/0x7a0 [ 151.561142][T10944] invoke_syscall+0x98/0x2bc [ 151.562154][T10944] el0_svc_common+0x138/0x258 [ 151.563176][T10944] do_el0_svc+0x58/0x13c [ 151.564170][T10944] el0_svc+0x58/0x168 [ 151.565156][T10944] el0t_64_sync_handler+0x84/0xf0 [ 151.566376][T10944] el0t_64_sync+0x18c/0x190 [ 151.567488][T10944] [ 151.567488][T10944] -> #1 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}: [ 151.569191][T10944] down_write+0x5c/0x88 [ 151.570146][T10944] ocfs2_lock_global_qf+0x1d4/0x260 [ 151.571468][T10944] ocfs2_write_info+0xdc/0x354 [ 151.572576][T10944] dquot_set_dqinfo+0x398/0x5f4 [ 151.573670][T10944] quota_setinfo+0x3b0/0x4fc [ 151.574673][T10944] do_quotactl+0x4c0/0x698 [ 151.575741][T10944] __arm64_sys_quotactl+0x2d8/0x7a0 [ 151.576929][T10944] invoke_syscall+0x98/0x2bc [ 151.578021][T10944] el0_svc_common+0x138/0x258 [ 151.579047][T10944] do_el0_svc+0x58/0x13c [ 151.579975][T10944] el0_svc+0x58/0x168 [ 151.580905][T10944] el0t_64_sync_handler+0x84/0xf0 [ 151.582036][T10944] el0t_64_sync+0x18c/0x190 [ 151.583160][T10944] [ 151.583160][T10944] -> #0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{3:3}: [ 151.585360][T10944] __lock_acquire+0x3338/0x7680 [ 151.586403][T10944] lock_acquire+0x26c/0x7cc [ 151.587530][T10944] down_write+0x5c/0x88 [ 151.588509][T10944] ocfs2_lock_global_qf+0x1b8/0x260 [ 151.589735][T10944] ocfs2_acquire_dquot+0x27c/0xb1c [ 151.591061][T10944] dqget+0x660/0xcec [ 151.591963][T10944] dquot_get_next_dqblk+0xb8/0x348 [ 151.593147][T10944] quota_getnextquota+0x264/0x650 [ 151.594260][T10944] do_quotactl+0x52c/0x698 [ 151.595268][T10944] __arm64_sys_quotactl+0x2d8/0x7a0 [ 151.596406][T10944] invoke_syscall+0x98/0x2bc [ 151.597476][T10944] el0_svc_common+0x138/0x258 [ 151.598585][T10944] do_el0_svc+0x58/0x13c [ 151.599494][T10944] el0_svc+0x58/0x168 [ 151.600328][T10944] el0t_64_sync_handler+0x84/0xf0 [ 151.601443][T10944] el0t_64_sync+0x18c/0x190 [ 151.602497][T10944] [ 151.602497][T10944] other info that might help us debug this: [ 151.602497][T10944] [ 151.604562][T10944] Chain exists of: [ 151.604562][T10944] &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5 --> &ei->i_data_sem --> &dquot->dq_lock [ 151.604562][T10944] [ 151.608073][T10944] Possible unsafe locking scenario: [ 151.608073][T10944] [ 151.609634][T10944] CPU0 CPU1 [ 151.610798][T10944] ---- ---- [ 151.611918][T10944] lock(&dquot->dq_lock); [ 151.612854][T10944] lock(&ei->i_data_sem); [ 151.614288][T10944] lock(&dquot->dq_lock); [ 151.615847][T10944] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5); [ 151.617569][T10944] [ 151.617569][T10944] *** DEADLOCK *** [ 151.617569][T10944] [ 151.619270][T10944] 2 locks held by syz.4.2895/10944: [ 151.620314][T10944] #0: ffff0000de42a0e0 (&type->s_umount_key#54){++++}-{3:3}, at: user_get_super+0x11c/0x240 [ 151.622341][T10944] #1: ffff0000df6960a8 (&dquot->dq_lock){+.+.}-{3:3}, at: ocfs2_acquire_dquot+0x270/0xb1c [ 151.624320][T10944] [ 151.624320][T10944] stack backtrace: [ 151.625551][T10944] CPU: 1 PID: 10944 Comm: syz.4.2895 Not tainted 6.1.127-syzkaller #0 [ 151.627310][T10944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 151.629364][T10944] Call trace: [ 151.630084][T10944] dump_backtrace+0x1c8/0x1f4 [ 151.631257][T10944] show_stack+0x2c/0x3c [ 151.632098][T10944] dump_stack_lvl+0x108/0x170 [ 151.633051][T10944] dump_stack+0x1c/0x5c [ 151.633959][T10944] print_circular_bug+0x150/0x1b8 [ 151.635061][T10944] check_noncircular+0x2cc/0x378 [ 151.636120][T10944] __lock_acquire+0x3338/0x7680 [ 151.637115][T10944] lock_acquire+0x26c/0x7cc [ 151.638121][T10944] down_write+0x5c/0x88 [ 151.639018][T10944] ocfs2_lock_global_qf+0x1b8/0x260 [ 151.640318][T10944] ocfs2_acquire_dquot+0x27c/0xb1c [ 151.641587][T10944] dqget+0x660/0xcec [ 151.642348][T10944] dquot_get_next_dqblk+0xb8/0x348 [ 151.643372][T10944] quota_getnextquota+0x264/0x650 [ 151.644382][T10944] do_quotactl+0x52c/0x698 [ 151.645278][T10944] __arm64_sys_quotactl+0x2d8/0x7a0 [ 151.646346][T10944] invoke_syscall+0x98/0x2bc [ 151.647298][T10944] el0_svc_common+0x138/0x258 [ 151.648246][T10944] do_el0_svc+0x58/0x13c [ 151.649170][T10944] el0_svc+0x58/0x168 [ 151.649988][T10944] el0t_64_sync_handler+0x84/0xf0 [ 151.651000][T10944] el0t_64_sync+0x18c/0x190 [ 151.651949][ C1] vkms_vblank_simulate: vblank timer overrun [ 151.670865][T10944] (syz.4.2895,10944,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xdf8356d3, computed 0x5b86c303. Applying ECC. [ 151.674543][T10944] (syz.4.2895,10944,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0xdf8356d3, computed 0x4bf4182b [ 151.682403][T10944] (syz.4.2895,10944,1):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 151.684089][T10944] (syz.4.2895,10944,1):ocfs2_quota_read:201 ERROR: status = -5 [ 151.685654][T10944] __quota_error: 5 callbacks suppressed [ 151.685662][T10944] Quota error (device loop4): find_block_dqentry: Can't read quota tree block 6 [ 151.688596][T10944] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 151.690497][T10944] (syz.4.2895,10944,1):ocfs2_acquire_dquot:873 ERROR: status = -5 [ 151.698347][ T4300] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 151.725632][ T4309] ocfs2: Unmounting device (7,4) on (node local) [ 158.722012][ T4311] Bluetooth: hci4: command 0x0406 tx timeout