last executing test programs: 7.015112087s ago: executing program 4 (id=588): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000080)={[{@nolazytime}, {}]}, 0x6, 0x4eb, &(0x7f0000000a40)="$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") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f00000008c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@minixdf}, {@orlov}, {@abort}, {@delalloc}, {@data_journal}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f00000001c0)='.\x00', 0x0, 0x10f482a, 0x0) 6.05178619s ago: executing program 4 (id=592): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0xa2602, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000100), 0x2) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x7}, 0x2) 5.031631743s ago: executing program 3 (id=602): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r0, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x80, 0x7}) fcntl$lock(r0, 0x25, &(0x7f0000000140)={0x1, 0x2, 0x8000, 0x80000000}) 4.658943552s ago: executing program 4 (id=603): syz_mount_image$nilfs2(&(0x7f0000000200), &(0x7f0000000040)='./file0\x00', 0x3200c00, &(0x7f0000000240)=ANY=[@ANYRES64=0x0], 0x0, 0xa73, &(0x7f0000000880)="$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") chdir(&(0x7f00000001c0)='./file0\x00') syz_mount_image$vfat(&(0x7f0000000500), &(0x7f0000000040)='./file0\x00', 0x802053, 0x0, 0xfc, 0x0, &(0x7f0000000540)) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) 4.515454s ago: executing program 3 (id=605): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000100)=0x18, &(0x7f0000000140)}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x6, r1}, 0x38) 4.397751236s ago: executing program 0 (id=607): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000001040)='./file1\x00', 0x0, &(0x7f0000001b80)=ANY=[@ANYRES64=0x0], 0x4, 0xc45, &(0x7f0000002080)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0xc0086c43, &(0x7f0000000f40)=0x700) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000f00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 4.093714354s ago: executing program 2 (id=608): prctl$PR_SET_SECUREBITS(0x1c, 0x25) setresuid(0xee01, 0xee01, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f00000002c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f0000000040)={0x0, [[0x9ef8], [0x10000], [0x6]], '\x00', [{}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}], '\x00', 0x1000}) 3.975599966s ago: executing program 3 (id=609): r0 = io_uring_setup(0x4896, &(0x7f0000000340)={0x0, 0xfcd3, 0x3, 0x2}) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x8000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000083c0)={{0x1}}) close_range(r0, 0xffffffffffffffff, 0x0) 3.598550905s ago: executing program 4 (id=611): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) sendmsg$NFC_CMD_ENABLE_SE(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x24, r2, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000854}, 0x40810) 3.476555761s ago: executing program 2 (id=612): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x4, @remote, 0xb}, 0x1c) syz_emit_ethernet(0x7e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x48, 0x11, 0x0, @remote, @local, {[], {0x4e20, 0xe22, 0x48, 0x0, @wg=@cookie={0x3, 0x5, "88c73b21f267636d0900e5712c09941e1cdafbbb43f09c70", "e13808ca72381f41e5fff9620915b6f78670dfaf9a2038083179cf6b7931c9b4"}}}}}}}, 0x0) 3.470374638s ago: executing program 0 (id=613): userfaultfd(0x1) r0 = syz_io_uring_setup(0x4a7, &(0x7f0000000440)={0x0, 0x0, 0x10100, 0x0, 0xcd}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x2def, 0x0, 0x0, 0x0, 0x0) 3.409630748s ago: executing program 3 (id=614): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace(0x10, r0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0x1, 0x0) 3.224533836s ago: executing program 1 (id=615): socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) io_uring_setup(0x203c, &(0x7f00000000c0)={0x0, 0x3bd5, 0x2, 0x400003, 0x28e}) 3.00015197s ago: executing program 4 (id=616): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0x20208}, [@IFLA_MASTER={0x8, 0xa, r2}]}, 0x28}}, 0x0) 2.937305757s ago: executing program 1 (id=617): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) r1 = dup(r0) ioctl$USBDEVFS_DROP_PRIVILEGES(r1, 0x4004551e, &(0x7f0000000000)=0xffdffffe) ioctl$USBDEVFS_CONNECTINFO(r0, 0x8004550f, &(0x7f0000002a40)) 2.842427959s ago: executing program 2 (id=618): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="600000000206050000000000000000000000000005000400000000000900020073797a320000000014"], 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) 2.610412966s ago: executing program 0 (id=619): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f00000001c0)='./file0/../file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 2.475979635s ago: executing program 1 (id=620): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x5c, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x5c}}, 0x0) 2.4757815s ago: executing program 4 (id=621): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2cf6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000000)={0x0, 0xa, 0x7, {0x7, 0x0, "3d7da32915"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x20, 0x1, 0x3, "f395a9"}, 0x0}) 2.391137279s ago: executing program 3 (id=622): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$bcachefs(&(0x7f0000005b00), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="646174615f6368653e5c069b9a2314d73b636b73756d3d63726336342c6a6f75726e616c5f7472616e73616374696f6e5f6e616d65732c6e6f7265636f766572792c73686172645f696e6f05655f6e756d626572732c6a6f75726e616c5f7472616e73616374696f6e5f6e616d65732c62747265655f6effff655f70726566657463682c6261636b67726f756e645f636f7072655434696f6e3d6e6f6e652c7265636f6e7374727563745f616c6c6f632c636f6d7072657373696f6e3d6e6f6e652c726174656c696d69745f658e080000732c00"], 0x1, 0x5949, &(0x7f000000b480)="$eJzs3XuQXFX9IPBzu3synZk8JgEkgkyGQBRBzYRX4aM0ur4KkIqFpYSNwkAmGE1CKgkCASW44EIBFlpaivoHWkgtGi2qYJVIiTw2YRWlWF1qC6mVXfQPt5AlJZClLNf51Uzf09Nzp+/cnp6ekMDnU8ncPqdvf8/33nv69j2ne6YDAAAArwt7r9+2/5yjPvSbLw+/fM1Hf7Hp2tBbHquvxhX60uUVr1aGHEjdlSVjy2y/eMtVP/rLwMUf+PXdPT98Zc+6Y9f/8YOHXXz/587cfdt3H3pp/r3/erYobuxPJ46Xk+eTEKq/3PfNr+x57MjRuiSEUE76doawKFn80KIkE2LwHyGEdWlhSebOe14+Zf3o8tqbuifUL8ysp7+/vlXTfrZj/+UnhT+9f811v1v605907Xpu5/gqSbWhP4Ww4MLGx3eFEOam/0fF3hb7Y+y0q0MIPQ2PO6Mgr+MmlLK9dtyKnPLR6XJOuuwtaC/evyxTLmXWy5ajrsyyp6C9mcrLo931iszLlLMno5nKyzPWL0qXP0+XJ04zfjn+T0IpCZV6+huT8T4SGo5bEpKxY1mtl0v1YxvS7c+Uk0y5lCmXuzLbNdZu2tHKSTKxPq6XqY+n40paf2zjubqJc3Pq35guq+kT9ZVYDtkbNb2TbtS3a0zMa98UuRwIpYZzULP6+oFPD0ZvWtebLJ70mJEm4n171ty8vLz24b19OXkkdydp/KSt+Dt+u2jeZ35842XZ1/V6/AtLafxSJn7SUvxnznr8hfNv/MF3cuPfGuOX28r/5Ad6nj/rkeuX5e6ffXH/VNqKP/Tso7csPfyiXbn53x7jV9uKv2r3493z9z/wYG7+g3H/zG0r/tPv/vCf73ryvudy44cYv6et+Gt3b/lqd//+E3LjPxj3T29b8Z95cdfpT/X3/3Wg8QEnzB+P/0SMP7+t+HfuvO1ddyy86czc47s67p++tuKfffz9183bf98xeefO5PZOvXICvD4dll5j3ZCW2x1nzlTDeOHbA5XaVdK89H/6qrWqIw1lLj5H21nQkcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMO6Ik/7rR/73J/uer6Tl7vTG06XaMtbPCSGZG0LYtn1o6/YNmy8Z+Nyll23dPLRxYGj7wPDm7VuvHDj1bQNbh7dsHLpy9N7Bt59Se9zikNSWyTGT2u4eGRkp9U2si+39u+N3/Wn5Gf/nbyEMHvGH/kpu/itu23TH4U1+ZiSrRt636bJz/nDa99Pt6kvz6muS18jIyEjIyev/nvfPO76+7y8nhDD4hqnyevTp9/5qQkJjFeNxUqXuUEuoO+lpmkc96zSfuL8q6zdsHB6cev+OPr6csx3//qrn/rH+iq/9s7Z/q7nb0eL+nbtqZGPpW2vO/v/furpWUZTXq3Xci/Z33IqYX9x/1XR/L0i3a0HOdlVytuv63z345C+PuvGlnWGw8uLSyW0XbVdX2gG6kje21G5soSdZNKG+mq4fj3h83Irtm7as2Hbljrdv2DR0yfAlw5vfufLUlacPnnb6aSvGtnxFh7c/tv/mFrf/wPSnhV/Y+fP4s7X+VJRX0f4Yzat4fzRmlPf86zn3K994522PnFOrKOrnce36+SRd9owe55Whob9N3lfNtqtoP4QQBprthxdeOjMc+T82XFd0Hmo8Mo0/M5JVI48t+/v3z/jekvfUKg7Ieb4xoTbP8/Wsx/MZ21/V9HiMHKT7tzuU0+3qbZrXysce6bp579++WM9vzpxwxdD27VtX1n7OSzOdlxzdNK9sbdyupWM/yyHdLaHeTZv011FdoZZf9vwZV8/u1d70vt5kcdPtyor37Vlz8/Ly2of35u3p5O5ai3PD/NoyeVPOmhszDyzXE27W/sH6/CvqH/0f+d69n7z3Z6dO6h8n134WbVeSs10/ffLOb/zwa//xZ53bro+89/G+v//Pzy6vVRwq55V61mk+SeN55eQQip5/S0Pz7ch9/pWab0/R8y/bzvj6zeMNZMq9odzW8/XkB3qeP+uR65flPl/3tfp8vXpCqVzwfD1Y+k/2+ZVUJuYxe8+vCR0lWTXy6xsO2/nQNauPqlUU9ev62s369SktjD9ytutX5z/Vf+nAf/jvnTtv/Oht91zwx6FVX6pVtH/cYy6dOe7VdP9Wc/ZvPes47mzcv++4+NKN62r1B+/1b7osGP/EU8m2K3d8fmjjxuGt21rbrlZfT2M72b3c7utpPLstLtiu0qTtmr0breyvVp9vMf91be+vic+33pC09bqw47eL5n3mxzde1jfpUWlDF5bS+KW24j9z1uMvnH/jD76TG//WGL/SVvyhZx+9ZenhF+3KjX97ksavthV/1e7Hu+fvf+DB3PiDMf+5bcV/+t0f/vNdT973XG78EOP3trf/X9x1+lP9/X/Njf9EkrYzeo0Uwj0vn7K+Vk5CV/p8i3l0TcgrZMtJplzKlMuN5VJtrrXeQDlJJtbH9dL6YxtyaeZTOfXxKqy6pLZ8JZZD9sbU9QebUsO5v1l90XUqAMBrXXz/P16Dxvf/h9MLpfyZBhg303HYkpy4cRw2Pp8zZ8L9S9L48fFxHrD/HWFwdHntQO1Cf7rvI8TnQ3aeM7ZzwnETY7Q7z1k0/74sU4551ebLKw3j0NTkcU0ltDD/PrmdqeffM5tfPD8+cMOktAYa5q2yx68rnTFr9nmHTL6V0Qh5/SM7LxY/z9G/IKwea6/F/pH9HE08DtnP0cR2jsqcONv9HM1M+0dMe4r+MZZy8fsbk49fmGL/jh+/5tGyx28ax7s6uv5svz/bgXnDpqe0AzdvOLvvh5mXzImfPsFmed5w9OaM5g1jfdyOSovziZ/Mqa89a3fWy23NJ5bHb8a89k2Ry4FgPhF4rYrj//gaMTr+H70A/3+Z9YquQ7NXjTFe7ueEys3zKRp3TP6cXk9br+Nrd2/5anf//hNyr3MebPVzP1smlHoKPvdTtB+XZ8qF+zFngqZovJdtp2i/Zz+X0Rvmt7Xf79x527vuWHjTmbn7fXXthbR4v39jQml+wX4/BMYLzeMbL7wuxguzPX/2qn2OIf3g02yNRz6RUz/dzzf0TLpR364xh9x4pOvA5gUAHDri+L/+/lk6/v9fcYX0OqJo3Hpiphzj5Y5bc65P8satH0uXV2TW701/o2K6181nH3//dfP233dM7rjl9lbHof9pQqmvcBw6s3Fz7jhidWc+L547jqiPs2Y2TszNvz5OnNk4PTd+fZw+s3F07v6pj6NnNg+QG78+D3Coj3ML5usyjcViq/N1r9lxdPrrs7M1jj43p3664+jeSTfq2zXGOBoA4NUVx//xMi6O/x/JrDfT99lzxwUdum7P/j2QmjkN+c/2uHK2x32zPW6d7XH9bM9LHOrj4tmeF5rdebLX/bg4bdS4GACAg1kc/89Ny/nj/5mNT5qN37omjE+Mz5vGNz4/SMbnh+L81/j71sb/3hdvhfE/AMBrWxz/x197jH//77+k5ezfrTdOz4lvnG6cPlX/aXmc3vl5tuBzAK/uPMDc8fXNAwAA8GroGhspTf49+0+ny+zv2ef9Xv75Oeu3qpJeHl+0fevw8AWXbVk3tH34gs2XrhvedsHlWzds3z68ubbeTMeNueOWdNzYFSrp/mi+XnbctjD9ewgLc/4eQnb9GPbosRuT/x5Cttm5BX9HYPz4tZZv3vErTbF+s/6Rd7zz4n8qZ/2ofvwv/uzJF6zfdsGGzRu2bxjauGHH8MT1RketPdP43sy4W6b1famZH5OUpv/9nZ3JozQpj650f+R9P3uSyWNRmsmivO8/yMn7N//t6184fuSfd4UweET5TTPaf8mqkf983vDHtu/9w5bR/EtT5l9fM82r6PtKs+vH7alsvHTb9pPWX3rZ5uw3SrYnzmeU6uVZms9In/7lFucn1ubUT/dzCuVJNw5OLc9PAAAwQXz/P17PxvcPv5ZeQMX61sfpM3v/OHecPtjaOD37vWRF4/Ts+nF7Wx2nV2c4Ts+2XzROb7Z+s3F63rg7L/4nctafrtb7ycw+55HbTy5srZ9kv8+gqJ9k12/eT0q5/SSZYT/Jtl/UT5qt36yf5B33vPgfz1k/T+v9YWafy8ntD7e21h/emikX9Yfs+tM9b5Rm2B+y7Rf1h2brN+sPecc3L/45Oeu3amL/GO0YY/1i+ILLL936+Yb1Zvv7L2ae3+x+/0e7Ws9/dj/3Nfv5z+7nymY//5l9riw3/ydmNhPWev6z+/0u7Tpg87Xph82KPn9WNI+7Jqd+uvO4cybdODiZx4VXTxz/x7d74vj/pnTZ6beBDv3vSfM9Zk3jd+h7zIquY9LX867X/et5sxfNg4DXcwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDWdFeWjC33Xr9t/zlHfeg3Xx5++ZqP/mLTtW+56kd/Gbj4A7++u+eHr+xZd+z6P37wsIvv/9yZu2/77kMvzb/3X88WBu4b+1k5MS1WQ0ieT0Ko/nLfN7+y57EjR+uSEEI56dsZwqJk8UOLkkyEwX+EENbV85x45z0vn7J+dHntTd0T6hdmgmS3K/SWYz6NeYZwReEWcQiqpv1sx/7LTwp/ev+a63639Kc/6dr13M7xVZJqQ38KYcGFjY/vCiHMTf+Pir1tSXxwulwdQuhpeNwZBXkd12L+K3LKR6fLOemytyBOvH9ZplzKrJctR12ZZU9BezOVl0e76xWZlylnT0Y1lbbj5+UZ6xely5+nyxOnGb8c/yehlIRKPf2NyXgfCQ3HLQnJ2LGs1sul+rEN6fZnykmmXMqUy12Z7RprN+1o5SSZWB/Xy9TH03ElrT92LMdy7nafm1P/xnRZTZ+or8RyyN6o6Z10o75dY2Je+3IzOTBKDeegZvX1A58ejN60rjdZPOkxI03E+/asuXl5ee3De/ty8kjuTtL4SVvxd/x20bzP/PjGy5bkxb+wlMYvtRX/mbMef+H8G3/wndz4t8b45bbin/xAz/NnPXL9stz9sy/un0pb8YeeffSWpYdftCs3/9tr8Z8M1bbir9r9ePf8/Q88mJv/YNw/c9uK//S7P/znu56877nc+CHG72kr/trdW77a3b//hNz4D8b939te/3lx1+lP9ff/dSAv/hMx/vy24t+587Z33bHwpjNzj+/quH/62op/9vH3Xzdv/33HVPPi396pV06A16fD0musG9Jyu+PMmWoYL3x7oFK75puX/p/fyYYyRttZMIvxAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4bfr91ad++rz3fXxNJQkhyVlnpIl4X3nOqlUDbbQ79Oyjtyw9/KJdjXVL2ogDAAAAFIvj8FK9phqWhMuTueHopuvHOYKjYymZWJ+dQ4hxsnME7cYpdShOuUNxKh2K09WhOHM6FKe7Q3GqBXGqobU4c6eIUxntFS3m0zNlPq3H6e1QnHkdijO//TiPrWmIs6AgTpz/K8pnYYe2q2/KOK33w0UdirO4Q3EO61CcwzsU54gOxXlDG3HmNIlzZIfyyc4pT7cfzk/XPCovztiNcmGcSlKu39FsPv3ItJ1jZthOb0E784tej1tsZ26L7RyXeVxpmu1UW2znzTNsJ2mxnbfOsJ1SQTux316RzS+2E0tTt1OJca6cWZz682hHh+Jc1aE4V3cozhc7FOdLHYpzTX6cuc3qs3EAWhXH/+Pjvb7QXXlP6EnPR9lZgDjeXTr2c/LrXd4JKcZ7U6Z+TlG87EA9E2/pdPPLTiBk4i3L1HdNiFepj0emiFdtjLc8c2fh9mYnFDL5nZip7y6Kl51YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBZ9PurT/30ee/7+JqQhNF/TY00Ee8rz1m1aqCNdvesuXl5ee3DexvruittBAIAAAAKxXF4V72mGrorK0N3MmfCetV0HqCalst9tWX/grB6dJkMlMbKPcmiKR9XSR+3YvumLSu2Xbnj7Rs2DV0yfMnw5neuPHXl6YOnnX7aivUbNg4P1n6G0F0QL4QwNv2w7codnx/auHF467ZaZTb/JenjlqTlJH1c/zvC4Ojy2jT/xQXtlSa1N3s3io8eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8G7t2FyLnVcYB/LwzszPTbWNW+jUNzWbIR4laNIlbSbV0XxAstEnIUpDZ6lqCTbC4aUKbSKxjG7CtCYrQEgiRXBiJxdbiTT9sEftBIFKjATcGaYv2Qi+UVitpyYWkjGR3zuzM7ExmHUvTxt/vYt6Zc55znvfMxcL/3QEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHh/TVVHJiqjY+ODSQhJl5paB3Eum0/Tch99v/zc9h8Uhk+vbB4r5PrYCAAAAOgp5vCBxkgxFHLZkA1XTX9aGpomwmzuBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/v9MVUcmKqNj4xcnISRdamodxLlsPk3LffR9/e0nPvPK8PDfmsdKfewDAAAA9BZzeKYxUgylsCwMJFe11MVnA4va1rfXxX0Wz7Ou/dlBt7pl86y7Zp51H+tRt6F+3RUAAADgwy/m/1xjZCgUcgu65v9euT7WLWmry9av/fxWAAAAAPjfxPxfaIyUQiFXauT1+eb9pW11cX2v/9vH9Su6rO/1//z19av/0wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAh8dUdWSiMjo2nk1CSLrU1DqIc9l8mpb76Lvm+cF/3HLkwaXNY4VcHxsBAAAAPcUcPhu9i6GQGwwD4eLp3D9808GnvvjUMyMhhJmYn8+HXZt27Lh7zcxrrFt97MjA94+++e05datnXs/bAQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgPfMVHVkojI6Nn5REkLSpabWQZzL5tO03Eff1z73hb88dvLZN5rHSn3sAwAAAPQWc/hs9i+GUsiHfLhi+lNz1j8r07a+2zMDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4MJxzzfv/fqmycnNd3vjjTfeNN6c779MAADAe21JSELtv3TlxvN91wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwAfBVHVkojI6Nl5MQki61NQ6iHPZfJqW++ibPne8sOD08y82j5X62AcAAADoLebw2exfDKUwEAbC5dOfOj0TmM7/Q+/jTQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfKFPVkYnK6Nj4giSEpEtNrYM4l82nabmPvo/uPvDZwwu/d3PzWCHXx0YAAABATzGH5xsjxVDIfTwUwtX1z5OtC5Js/dr5ucDsuu0tywbnva7asi4773V72k6Wq59mZl0x7jc0c22sK89dV25aVwqN9uWWdWFfy6oFPe4zAAAAwHkU83+hMTIUCrlCU879aUv9kJwLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHQxVR2ZqIyOjSdJCEmXmloHcS6bT9NyH33v/e1HL/nKz/bubB4r9bEPAAAA0FvM4bPZvxhKYXH4SFg8nfvDUGt9rPtn5czhR/7115UhrLrixHCufdsfxTe/fu3GF9pfQsi0VmdCWFjvl3Tp95vfP5JdXjvzWAirLs9ePadfOHe/1i3T2tOVzet3HD2xvceXAwAAABeImP8HGiNDoZC7q2v+j8m7R/5vmA7gC7+x+xeX1V/ribxtRWao3i/Tpd/nlz/x5xVr//7m2fx/rn6fOrD18GUtDWdG2iRpbXTrzg0nrjuUiaee6Z9t6x+/ly99641/b9n18JmZ/sVQrI8vyuU69J/72uaitDaZ2T++7t391db+uS7nf/B3L5781aK975zt//aSwUb/a85x/nP3H7z1oX3XHziyobV/CKHcqf9b79wcrvzjnQ+0n3+wbePmb775tU2S1o4tPXVo7cHSDa39k7b+8fv/+clH9/3k4e8+E/vH34qsXDbf/pm2/i/vuXT3S/dvXNTaP9Pl/C/c9srwtvJ3/tB+/jtads11vYu553/82idvf3VTel/7FAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwIVlqjoyURkdG88kISRdamodxLlsPk3LffR9/Zbjb92298c/bB4r9bEPAAAA0FvM4bPZvxhKIR/yYXA69z9d2bx+x9ET28PQzGxSv+Ymt92z4xNbtu28647zdOcAAADAfMX8n2uMDIVCbnkYqOf/0a07N5y47lAm5v9MzP9b7pzcvCo06l7ec+nul+7fuKjxnCCE6Z8FFM/WfXq27qYbjw+d+tPXVnSsWzNbd2zpqUNrD5ZuiHWhuW51aDyfePzaJ29/dVN6X+P+mus++dVtk/XHE3HfwVsf2nf9gSMbGueoXwfr+8a6ycz+8XXv7q/Gumz9WqyfGwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACYa6o6MlEZHRsP2RCSLjW1DuJcNp+m5T76rlv+ywcuOf3s4uaxQq6PjQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgP+zAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhv35C46jiOIC/t7sx22zSJq1gVEzTqij1YFEQ0YuKirQiBU+VItXWHkRBEFHqwVRasVTFi2D1UkQFNUpBwcZiaZVU/Fe8eFBBoXoQSjGgDcWDkWzebDeTjGsnVdB+PjC8vDcz3/nNvLezWQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOA/pbs22GwP73h48o4LbvnsyftOPHHbBw9uu+zxN38a3nTTp3t7Xjs5vnnFlm9vXrZp//1rxna/fOi3vvf+ONox+LGZZlXq1kOIx2MI9Q8nXnhq/PPzpsdiCKEa+0dCGIhLDw3EXMLq30MIm1t1zt757omrt0y323Z1zxpfkgvJ31doVLN6ZvTPrpf/l3paZ1snH70ifH/j+u1fLn/n7a7RYyOnDon1tvUUwuKN7ed3hRAWpW1attoGs5NTuy6E0NN23rUd6rr4b9Z/ZUH/wtSek9pGh5xs/8pcv5I7Lt/PdOXang7XW6iiOsoe10lvrp9/GS1UUZ3Z+EBq30/tqtPMr2ZbDJUYaq3yH4in1khom7cYYnMu661+pTW3Id1/rh9z/UquX+3K3VfzummhVWOcPZ4dlxvPXse1NL6i/V09jzsLxs9PbT19UE9m/ZD/Y0Zjzh+t+2rK6pr4i1r+DZW2d9B8462JT5PRSGONuHTOOVNz1KayfePrn7m0uuGjw/0FdcS9MeXH08ifauVv/WKg9+63dj4yWJS/sZLyK6Xyf1h75Je7dr7yUmH+81l+tVT+VQd6jq/9eMfKwuczkT2fWqn8e45+8uzyc+8dnW+um/l7svx6qfwbxo50900eOFhY/+rs+Swqlf/d9bf++MbX+44V5ocsv6dU/oaxh57rHpq8vDD/4MxHodFcoSXWz6+j13wzNPTzcFH+V9nz75snP3bMf31k93WvLtm1pnB9rsueT3+p+m+/ZP/23sl9FxW9O+OeM/XNCXB2Wpb+x3o69cv+zlyott8LLw7XZr6BetPWdyYvlDN9ncX/YD4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/MkOHJAAAAAACPr/uh2BAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABPBQAA///ESjEF") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) 2.282261275s ago: executing program 2 (id=623): syz_mount_image$minix(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x800401, &(0x7f0000000400)=ANY=[], 0xfe, 0x228, &(0x7f00000004c0)="$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") mount(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x2012024, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8080c61) 2.123707611s ago: executing program 0 (id=624): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0xf0b, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x1, 0x9}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_TARGET={0x8, 0x1, 0x100}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2004c0c4}, 0x0) 1.989919319s ago: executing program 1 (id=625): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syz_tun\x00'}]}]}]}], {0x14}}, 0x80}}, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000640)={@empty, @empty, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x4, 0x58, 0x64, 0x0, 0x8, 0x2f, 0x0, @local, @broadcast}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x1}, {0x1, 0x0, 0x0, 0x1}, {0x8, 0x88be, 0x5, {{0x1, 0x1, 0xbf, 0x0, 0x0, 0x2, 0x4, 0x9}, 0x1, {0x4}}}, {0x8, 0x22eb, 0x6, {{0x6, 0x2, 0x1, 0x3, 0x0, 0x1, 0x1, 0x4}, 0x2, {0x9, 0x9, 0x3, 0x1f, 0x0, 0x0, 0x3, 0x0, 0x1}}}}}}}}, 0x0) 1.118960398s ago: executing program 1 (id=626): r0 = open(&(0x7f00000005c0)='./bus\x00', 0x147842, 0x0) r1 = io_uring_setup(0x619b, &(0x7f0000000100)={0x0, 0x4000, 0x800, 0x2, 0x0, 0x0, r0}) io_uring_register$IORING_REGISTER_BUFFERS2(r1, 0x14, &(0x7f0000003480)={0x4, 0x0, 0x4, &(0x7f00000001c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x0}, 0x2) io_uring_enter(r1, 0xcbffffff, 0x0, 0x11, 0x0, 0x0) 1.118764013s ago: executing program 2 (id=627): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x7, 0x6, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081130000bfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071104900000000001d300500000000004704000001ed00000f030000000000001d44020000000000620a00fe040400007203000000000000b500f7ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a8641aa05a1336b3b4c4becea710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3380d28e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51bf900000000000000d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343cccc953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93020000000000000080e69db384ac7eeedcf2ba3a9508f9d6aba582a896a9f1e096df6ecea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6032399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c9102"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 798.312642ms ago: executing program 0 (id=628): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000580)=ANY=[@ANYBLOB="a0000000210001002dbd7000fedbdf25fe880000000000000000000000000101e00000020000000000000000000000004e248001000700010a0080a03b000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="af6b6e000100000050001100ff010000000000000000000000000001fe8000000000000000000000000000bbac1414bb000000000000000000000000fc010000000000000000000000000001330000020000000002"], 0xa0}, 0x1, 0x0, 0x0, 0x400c000}, 0x20000000) 276.538559ms ago: executing program 3 (id=629): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x58, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @key_params=[@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "d17b00305f"}], @NL80211_ATTR_AUTH_TYPE={0x8}]}, 0x58}}, 0x0) 140.895098ms ago: executing program 0 (id=630): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a0004"], 0x68}}, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 48.977329ms ago: executing program 1 (id=631): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'veth1_to_team\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCRYPT={0x5, 0xf, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}}, 0x20000000) 0s ago: executing program 2 (id=632): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000ec0)={'batadv0\x00', 0x0}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, r2, 0x303, 0x0, 0x0, {0xa}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}]}, 0x1c}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.117' (ED25519) to the list of known hosts. [ 197.596561][ T5765] cgroup: Unknown subsys name 'net' [ 197.748319][ T5765] cgroup: Unknown subsys name 'cpuset' [ 197.763545][ T5765] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 229.464206][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 229.471390][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 251.566841][ T5765] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 255.874670][ T5785] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 255.883672][ T5785] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 255.895443][ T5791] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 255.910848][ T5794] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 255.919175][ T5785] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 255.931137][ T5785] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 255.940024][ T5785] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 255.958772][ T5789] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 255.968658][ T5796] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 255.980046][ T5785] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 255.992430][ T5785] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 256.004335][ T5796] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 256.015697][ T5796] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 256.023732][ T5796] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 256.032222][ T5785] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 256.035193][ T5789] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 256.048059][ T5795] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 256.051553][ T5796] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 256.064666][ T5796] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 256.065710][ T5789] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 256.080514][ T5796] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 256.083007][ T5789] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 256.100473][ T5789] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 256.115197][ T5789] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 256.135740][ T5080] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 256.158320][ T5789] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 256.170896][ T5789] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 256.193137][ T5789] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 256.202828][ T5789] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 256.226124][ T5796] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 257.417023][ T5784] chnl_net:caif_netlink_parms(): no params data found [ 257.697875][ T5788] chnl_net:caif_netlink_parms(): no params data found [ 257.739789][ T5781] chnl_net:caif_netlink_parms(): no params data found [ 258.170435][ T5796] Bluetooth: hci2: command tx timeout [ 258.176992][ T5796] Bluetooth: hci1: command tx timeout [ 258.251535][ T5794] Bluetooth: hci0: command tx timeout [ 258.335399][ T5796] Bluetooth: hci3: command tx timeout [ 258.341077][ T5796] Bluetooth: hci4: command tx timeout [ 258.369856][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.377757][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.385777][ T5784] bridge_slave_0: entered allmulticast mode [ 258.395534][ T5784] bridge_slave_0: entered promiscuous mode [ 258.499583][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.508122][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.516114][ T5784] bridge_slave_1: entered allmulticast mode [ 258.525919][ T5784] bridge_slave_1: entered promiscuous mode [ 258.666523][ T5793] chnl_net:caif_netlink_parms(): no params data found [ 258.691795][ T5782] chnl_net:caif_netlink_parms(): no params data found [ 258.789900][ T5784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 258.922520][ T5784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 259.152421][ T5788] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.160509][ T5788] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.168704][ T5788] bridge_slave_0: entered allmulticast mode [ 259.178215][ T5788] bridge_slave_0: entered promiscuous mode [ 259.333581][ T5784] team0: Port device team_slave_0 added [ 259.354250][ T5788] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.362709][ T5788] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.370745][ T5788] bridge_slave_1: entered allmulticast mode [ 259.379992][ T5788] bridge_slave_1: entered promiscuous mode [ 259.396178][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.403931][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.414588][ T5781] bridge_slave_0: entered allmulticast mode [ 259.426329][ T5781] bridge_slave_0: entered promiscuous mode [ 259.491149][ T5784] team0: Port device team_slave_1 added [ 259.500952][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.508980][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.516849][ T5781] bridge_slave_1: entered allmulticast mode [ 259.526394][ T5781] bridge_slave_1: entered promiscuous mode [ 259.736717][ T5788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 259.753514][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 259.760951][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.787364][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 259.981217][ T5788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 260.026941][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 260.034211][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.060727][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 260.111772][ T5781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 260.132335][ T5781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 260.220774][ T5793] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.228795][ T5793] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.236525][ T5793] bridge_slave_0: entered allmulticast mode [ 260.244784][ T5793] bridge_slave_0: entered promiscuous mode [ 260.256907][ T5794] Bluetooth: hci1: command tx timeout [ 260.262784][ T5796] Bluetooth: hci2: command tx timeout [ 260.297565][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.305666][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.313395][ T5782] bridge_slave_0: entered allmulticast mode [ 260.322627][ T5782] bridge_slave_0: entered promiscuous mode [ 260.335692][ T5794] Bluetooth: hci0: command tx timeout [ 260.343064][ T5788] team0: Port device team_slave_0 added [ 260.351103][ T5782] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.360974][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.368877][ T5782] bridge_slave_1: entered allmulticast mode [ 260.378284][ T5782] bridge_slave_1: entered promiscuous mode [ 260.392673][ T5793] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.401105][ T5793] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.409024][ T5793] bridge_slave_1: entered allmulticast mode [ 260.414526][ T5794] Bluetooth: hci4: command tx timeout [ 260.421045][ T5793] bridge_slave_1: entered promiscuous mode [ 260.421698][ T5796] Bluetooth: hci3: command tx timeout [ 260.479159][ T5788] team0: Port device team_slave_1 added [ 260.626270][ T5781] team0: Port device team_slave_0 added [ 260.750957][ T5782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 260.800450][ T5781] team0: Port device team_slave_1 added [ 260.821398][ T5784] hsr_slave_0: entered promiscuous mode [ 260.832033][ T5784] hsr_slave_1: entered promiscuous mode [ 260.853581][ T5793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 260.906734][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 260.916400][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.942737][ T5788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 260.963381][ T5782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 260.975484][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 260.982661][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.009270][ T5788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 261.066720][ T5793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 261.327562][ T5782] team0: Port device team_slave_0 added [ 261.338355][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 261.345738][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.372226][ T5781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 261.391372][ T5793] team0: Port device team_slave_0 added [ 261.401027][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 261.408541][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.435261][ T5781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 261.514395][ T5782] team0: Port device team_slave_1 added [ 261.565287][ T5793] team0: Port device team_slave_1 added [ 261.685692][ T5788] hsr_slave_0: entered promiscuous mode [ 261.695340][ T5788] hsr_slave_1: entered promiscuous mode [ 261.704661][ T5788] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 261.712495][ T5788] Cannot create hsr debugfs directory [ 261.809408][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 261.816924][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.843427][ T5793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 261.977448][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 261.984624][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.011158][ T5793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 262.057215][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 262.064395][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.091027][ T5782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 262.195137][ T5781] hsr_slave_0: entered promiscuous mode [ 262.207612][ T5781] hsr_slave_1: entered promiscuous mode [ 262.216783][ T5781] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 262.224562][ T5781] Cannot create hsr debugfs directory [ 262.233503][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 262.241130][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.267596][ T5782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 262.345308][ T5794] Bluetooth: hci2: command tx timeout [ 262.351049][ T5794] Bluetooth: hci1: command tx timeout [ 262.412694][ T5796] Bluetooth: hci0: command tx timeout [ 262.455592][ T5793] hsr_slave_0: entered promiscuous mode [ 262.465945][ T5793] hsr_slave_1: entered promiscuous mode [ 262.474501][ T5793] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 262.482519][ T5793] Cannot create hsr debugfs directory [ 262.490044][ T5796] Bluetooth: hci4: command tx timeout [ 262.495955][ T5794] Bluetooth: hci3: command tx timeout [ 263.014399][ T5782] hsr_slave_0: entered promiscuous mode [ 263.025493][ T5782] hsr_slave_1: entered promiscuous mode [ 263.034122][ T5782] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 263.042429][ T5782] Cannot create hsr debugfs directory [ 263.366530][ T5784] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 263.468257][ T5784] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 263.585716][ T5784] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 263.633611][ T5784] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 263.894083][ T5793] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 263.948847][ T5793] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 263.972650][ T5793] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 263.991857][ T5788] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 264.061799][ T5793] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 264.087814][ T5788] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 264.210463][ T5788] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 264.342071][ T5788] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 264.407480][ T5796] Bluetooth: hci1: command tx timeout [ 264.413164][ T5796] Bluetooth: hci2: command tx timeout [ 264.419623][ T5781] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 264.487222][ T5796] Bluetooth: hci0: command tx timeout [ 264.534405][ T5781] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 264.580382][ T5796] Bluetooth: hci4: command tx timeout [ 264.581579][ T5794] Bluetooth: hci3: command tx timeout [ 264.667481][ T5781] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 264.691464][ T5781] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 264.878351][ T5782] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 264.950891][ T5782] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 265.070089][ T5782] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 265.169808][ T5782] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 265.383551][ T5793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 265.665742][ T5788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 265.691475][ T5793] 8021q: adding VLAN 0 to HW filter on device team0 [ 265.759912][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 265.811979][ T3773] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.819809][ T3773] bridge0: port 1(bridge_slave_0) entered forwarding state [ 265.917081][ T3773] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.924809][ T3773] bridge0: port 2(bridge_slave_1) entered forwarding state [ 266.037060][ T5788] 8021q: adding VLAN 0 to HW filter on device team0 [ 266.116158][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 266.131304][ T5784] 8021q: adding VLAN 0 to HW filter on device team0 [ 266.231229][ T1142] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.239076][ T1142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 266.367180][ T1142] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.374861][ T1142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 266.396049][ T1142] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.403759][ T1142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 266.462658][ T1142] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.470940][ T1142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 266.573825][ T5781] 8021q: adding VLAN 0 to HW filter on device team0 [ 266.748223][ T1142] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.756169][ T1142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 266.855079][ T5782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 266.873137][ T5788] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 267.026360][ T1142] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.034090][ T1142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.189668][ T5782] 8021q: adding VLAN 0 to HW filter on device team0 [ 267.316626][ T3828] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.324397][ T3828] bridge0: port 1(bridge_slave_0) entered forwarding state [ 267.447858][ T3828] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.455668][ T3828] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.867343][ T5793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 269.086971][ T5788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 269.441825][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 269.510414][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 269.548853][ T5793] veth0_vlan: entered promiscuous mode [ 269.707443][ T5793] veth1_vlan: entered promiscuous mode [ 269.722554][ T5788] veth0_vlan: entered promiscuous mode [ 269.838349][ T5788] veth1_vlan: entered promiscuous mode [ 269.899693][ T5782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 270.174732][ T5781] veth0_vlan: entered promiscuous mode [ 270.243497][ T5793] veth0_macvtap: entered promiscuous mode [ 270.279371][ T5788] veth0_macvtap: entered promiscuous mode [ 270.341172][ T5793] veth1_macvtap: entered promiscuous mode [ 270.361559][ T5781] veth1_vlan: entered promiscuous mode [ 270.378423][ T5788] veth1_macvtap: entered promiscuous mode [ 270.558448][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 270.636278][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.649281][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.665371][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 270.708645][ T5782] veth0_vlan: entered promiscuous mode [ 270.729101][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 270.824485][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 270.836548][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.851160][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 270.880799][ T5782] veth1_vlan: entered promiscuous mode [ 270.972589][ T5793] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.983537][ T5793] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.993013][ T5793] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.002129][ T5793] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.022472][ T5788] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.031713][ T5788] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.041067][ T5788] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.050302][ T5788] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.142514][ T5781] veth0_macvtap: entered promiscuous mode [ 271.263251][ T5781] veth1_macvtap: entered promiscuous mode [ 271.363169][ T5782] veth0_macvtap: entered promiscuous mode [ 271.460861][ T5782] veth1_macvtap: entered promiscuous mode [ 271.561542][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.572665][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.582955][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.593818][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.608943][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 271.703192][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.714508][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.724766][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.735594][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.745798][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.756581][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.771390][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 271.846898][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.857825][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.868117][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.879220][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.893910][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 272.038043][ T5781] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.047383][ T5781] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.056763][ T5781] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.065973][ T5781] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.102401][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.113657][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.124103][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.135071][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.145358][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.156212][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.171957][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 272.269501][ T5782] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.278793][ T5782] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.288128][ T5782] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.297494][ T5782] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.860061][ T5784] veth0_vlan: entered promiscuous mode [ 272.991868][ T5784] veth1_vlan: entered promiscuous mode [ 273.371040][ T5784] veth0_macvtap: entered promiscuous mode [ 273.433998][ T5784] veth1_macvtap: entered promiscuous mode [ 273.616558][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.627426][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.637645][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.650224][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.660456][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.671231][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.681487][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.693787][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.709363][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 273.942397][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.953582][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.965265][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.976173][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.986369][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.997128][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.008685][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.019961][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.034581][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 274.267848][ T5784] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.278771][ T5784] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.288045][ T5784] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.297205][ T5784] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.434197][ T4662] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.442514][ T4662] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.735321][ T4662] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.743524][ T4662] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.922964][ T3708] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.931364][ T3708] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.170091][ T3708] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.178663][ T3708] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.201719][ T5793] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 279.648890][ T4090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.657150][ T4090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.895503][ T4017] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.903493][ T4017] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.053555][ T5964] pimreg: entered allmulticast mode [ 280.088700][ T3828] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.097258][ T3828] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.136356][ T5967] pimreg: left allmulticast mode [ 280.451020][ T3828] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.461450][ T3828] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.206910][ T5975] loop1: detected capacity change from 0 to 24 [ 281.278947][ T5975] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 281.404641][ T3935] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.414213][ T3935] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.428414][ T5978] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3'. [ 281.653144][ T3935] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.661932][ T3935] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.322591][ T5984] loop2: detected capacity change from 0 to 1024 [ 283.031642][ T3828] hfsplus: b-tree write err: -5, ino 4 [ 284.270265][ T25] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 284.527642][ T25] usb 2-1: Using ep0 maxpacket: 32 [ 284.591148][ T25] usb 2-1: config 0 interface 0 has no altsetting 0 [ 284.686831][ T25] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 284.696859][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.705400][ T25] usb 2-1: Product: syz [ 284.709816][ T25] usb 2-1: Manufacturer: syz [ 284.714653][ T25] usb 2-1: SerialNumber: syz [ 284.916421][ T6006] loop0: detected capacity change from 0 to 32768 [ 284.938582][ T6006] (syz.0.19,6006,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 284.953296][ T6006] (syz.0.19,6006,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 285.004293][ T25] usb 2-1: config 0 descriptor?? [ 285.016215][ T6006] JBD2: Ignoring recovery information on journal [ 285.288889][ T6006] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 285.579394][ T25] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 285.762695][ T5782] ocfs2: Unmounting device (7,0) on (node local) [ 285.799365][ T25] gs_usb 2-1:0.0: Couldn't get bit timing const for channel 0 (-EREMOTEIO) [ 285.809905][ T25] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -121 [ 285.912942][ T6018] loop2: detected capacity change from 0 to 2048 [ 286.017742][ T25] usb 2-1: USB disconnect, device number 2 [ 286.173189][ T6018] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 286.186428][ T6018] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 286.271727][ T6027] loop4: detected capacity change from 0 to 256 [ 286.426888][ T29] audit: type=1800 audit(1737411983.375:2): pid=6018 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.24" name="file0" dev="loop2" ino=13 res=0 errno=0 [ 286.460427][ T6018] fs-verity (loop2, inode 13): Unknown hash algorithm number: 0 [ 286.558577][ T6027] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 286.569533][ T6027] FAT-fs (loop4): Filesystem has been set read-only [ 286.576922][ T6027] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 286.587561][ T6027] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 286.603874][ T29] audit: type=1800 audit(1737411983.505:3): pid=6027 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.28" name="file1" dev="loop4" ino=1048600 res=0 errno=0 [ 286.645306][ T6027] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 286.656168][ T6027] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 286.922825][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.998648][ T6027] syz.4.28 (6027) used greatest stack depth: 4336 bytes left [ 287.596932][ T6040] block nbd2: shutting down sockets [ 287.935301][ T25] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 288.115496][ T25] usb 2-1: Using ep0 maxpacket: 16 [ 288.141767][ T25] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 288.152696][ T25] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 288.207358][ T25] usb 2-1: New USB device found, idVendor=0a2c, idProduct=0008, bcdDevice=b4.25 [ 288.217318][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.225968][ T25] usb 2-1: Product: syz [ 288.230364][ T25] usb 2-1: Manufacturer: syz [ 288.235339][ T25] usb 2-1: SerialNumber: syz [ 288.304639][ T25] usb 2-1: config 0 descriptor?? [ 288.569033][ T25] usb 2-1: USB disconnect, device number 3 [ 288.673792][ T6053] syz.2.39: attempt to access beyond end of device [ 288.673792][ T6053] loop2: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 288.688777][ T6053] XFS (loop2): SB validate failed with error -5. [ 288.699937][ T6060] loop4: detected capacity change from 0 to 1024 [ 288.865527][ T97] I/O error, dev loop2, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 0 [ 288.939658][ T6060] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 289.566357][ T6066] loop0: detected capacity change from 0 to 8 [ 289.646869][ T6066] SQUASHFS error: zlib decompression failed, data probably corrupt [ 289.655445][ T6066] SQUASHFS error: Failed to read block 0x9b: -5 [ 289.661899][ T6066] SQUASHFS error: Unable to read metadata cache entry [99] [ 289.669513][ T6066] SQUASHFS error: Unable to read inode 0x127 [ 290.052157][ T6076] loop1: detected capacity change from 0 to 128 [ 290.097371][ T6076] EXT4-fs: Ignoring removed nobh option [ 290.203771][ T6076] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 290.283594][ T6076] ext4 filesystem being mounted at /8/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 290.479206][ T6080] loop0: detected capacity change from 0 to 512 [ 290.569202][ T6070] loop3: detected capacity change from 0 to 8192 [ 290.653589][ T6080] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 290.667046][ T6080] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 290.754099][ T5788] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 290.911212][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 290.918430][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 291.087618][ T5782] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.375818][ T25] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 291.585615][ T25] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 291.594835][ T25] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 291.605731][ T25] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 291.614887][ T25] usb 2-1: config 1 has no interface number 0 [ 291.624301][ T25] usb 2-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 291.636392][ T25] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 291.725344][ T5839] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 291.762073][ T6096] loop4: detected capacity change from 0 to 2048 [ 291.781445][ T25] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 291.791105][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.799594][ T25] usb 2-1: Product: syz [ 291.804001][ T25] usb 2-1: Manufacturer: syz [ 291.809016][ T25] usb 2-1: SerialNumber: syz [ 291.857494][ T6098] netlink: 8 bytes leftover after parsing attributes in process `syz.0.58'. [ 291.866970][ T6098] netlink: 12 bytes leftover after parsing attributes in process `syz.0.58'. [ 291.895278][ T6099] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 291.906780][ T5839] usb 3-1: Using ep0 maxpacket: 16 [ 291.928882][ T5839] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 291.940584][ T5839] usb 3-1: config 0 interface 0 has no altsetting 0 [ 291.948098][ T5839] usb 3-1: New USB device found, idVendor=046d, idProduct=c517, bcdDevice= 0.00 [ 291.957795][ T5839] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.975884][ T29] audit: type=1800 audit(1737411988.925:4): pid=6096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.56" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 292.019395][ T5839] usb 3-1: config 0 descriptor?? [ 292.030409][ T6101] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 292.056018][ T6099] NILFS (loop4): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 292.067471][ T6099] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=4) [ 292.111586][ T6099] Remounting filesystem read-only [ 292.396259][ T6104] netlink: 'syz.0.59': attribute type 15 has an invalid length. [ 292.434156][ T2149] usb 2-1: USB disconnect, device number 4 [ 292.488536][ T5784] NILFS (loop4): disposed unprocessed dirty file(s) when stopping log writer [ 292.522025][ T5839] logitech-djreceiver 0003:046D:C517.0001: hidraw0: USB HID v0.05 Device [HID 046d:c517] on usb-dummy_hcd.2-1/input0 [ 292.691334][ T5839] usb 3-1: USB disconnect, device number 2 [ 292.941437][ T6106] loop3: detected capacity change from 0 to 512 [ 293.070385][ T6114] @: renamed from vlan0 (while UP) [ 293.080419][ T6106] EXT4-fs error (device loop3): ext4_quota_enable:7108: comm syz.3.61: Bad quota inum: 1, type: 2 [ 293.127762][ T6106] EXT4-fs warning (device loop3): ext4_enable_quotas:7156: Failed to enable quota tracking (type=2, err=-117, ino=1). Please run e2fsck to fix. [ 293.189500][ T6106] EXT4-fs (loop3): mount failed [ 293.673985][ T6120] netlink: 56 bytes leftover after parsing attributes in process `syz.4.66'. [ 293.965220][ T6125] Bluetooth: MGMT ver 1.23 [ 293.987079][ T6126] netlink: 'syz.1.69': attribute type 1 has an invalid length. [ 294.215712][ T6130] loop4: detected capacity change from 0 to 16 [ 294.346924][ T6122] loop2: detected capacity change from 0 to 4096 [ 294.356425][ T6122] ======================================================= [ 294.356425][ T6122] WARNING: The mand mount option has been deprecated and [ 294.356425][ T6122] and is ignored by this kernel. Remove the mand [ 294.356425][ T6122] option from the mount to silence this warning. [ 294.356425][ T6122] ======================================================= [ 295.016724][ T6141] netlink: 'syz.3.76': attribute type 3 has an invalid length. [ 295.137934][ T6138] loop4: detected capacity change from 0 to 2048 [ 295.250147][ T6138] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 295.274500][ T6138] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 296.626026][ T2149] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 296.847132][ T2149] usb 5-1: Using ep0 maxpacket: 16 [ 296.879583][ T2149] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 296.891725][ T2149] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 296.902044][ T2149] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 296.915350][ T2149] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 296.924703][ T2149] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.006839][ T2149] usb 5-1: config 0 descriptor?? [ 297.023432][ T6174] capability: warning: `syz.3.88' uses deprecated v2 capabilities in a way that may be insecure [ 297.522853][ T2149] microsoft 0003:045E:07DA.0002: No inputs registered, leaving [ 297.555218][ T2149] microsoft 0003:045E:07DA.0002: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 297.577131][ T2149] microsoft 0003:045E:07DA.0002: no inputs found [ 297.583832][ T2149] microsoft 0003:045E:07DA.0002: could not initialize ff, continuing anyway [ 297.739161][ T2149] usb 5-1: USB disconnect, device number 2 [ 298.415918][ T6192] capability: warning: `syz.0.98' uses 32-bit capabilities (legacy support in use) [ 299.851332][ T6216] loop0: detected capacity change from 0 to 256 [ 300.112706][ T6216] FAT-fs (loop0): Directory bread(block 64) failed [ 300.127039][ T6216] FAT-fs (loop0): Directory bread(block 65) failed [ 300.134035][ T6216] FAT-fs (loop0): Directory bread(block 66) failed [ 300.143296][ T6216] FAT-fs (loop0): Directory bread(block 67) failed [ 300.150485][ T6216] FAT-fs (loop0): Directory bread(block 68) failed [ 300.157449][ T6216] FAT-fs (loop0): Directory bread(block 69) failed [ 300.164397][ T6216] FAT-fs (loop0): Directory bread(block 70) failed [ 300.172038][ T6216] FAT-fs (loop0): Directory bread(block 71) failed [ 300.179209][ T6216] FAT-fs (loop0): Directory bread(block 72) failed [ 300.186194][ T6216] FAT-fs (loop0): Directory bread(block 73) failed [ 301.255711][ T6234] warning: `syz.1.117' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 301.666027][ T6240] loop2: detected capacity change from 0 to 2048 [ 301.779176][ T6245] IPVS: dh: SCTP 172.20.20.187:0 - no destination available [ 301.790070][ T5839] IPVS: starting estimator thread 0... [ 301.842529][ T6240] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 301.887491][ T6246] IPVS: using max 192 ests per chain, 9600 per kthread [ 302.437024][ T6254] loop3: detected capacity change from 0 to 512 [ 302.462897][ T6254] EXT4-fs: Ignoring removed nobh option [ 302.502716][ T6254] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 302.618939][ T6254] loop3: detected capacity change from 0 to 256 [ 302.664825][ T6254] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 302.692993][ T6254] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 302.703619][ T6254] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 302.711829][ T6254] UDF-fs: Scanning with blocksize 512 failed [ 302.770327][ T6254] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 302.848227][ T6261] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 302.854351][ T6254] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 304.108176][ T6283] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 304.902249][ T6293] loop2: detected capacity change from 0 to 512 [ 304.921663][ T6296] tap0: tun_chr_ioctl cmd 1074025677 [ 304.927832][ T6296] tap0: linktype set to 0 [ 304.975767][ T6293] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 304.990488][ T6293] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 305.153681][ T6293] EXT4-fs (loop2): 1 orphan inode deleted [ 305.160108][ T6293] EXT4-fs (loop2): 1 truncate cleaned up [ 305.167902][ T6293] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 305.587561][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.939306][ T6311] loop4: detected capacity change from 0 to 256 [ 305.977942][ T6311] exfat: Deprecated parameter 'utf8' [ 305.982048][ T6312] loop2: detected capacity change from 0 to 128 [ 305.983974][ T6311] exfat: Deprecated parameter 'namecase' [ 305.996608][ T6311] exfat: Deprecated parameter 'utf8' [ 306.048650][ T6312] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 306.110725][ T6311] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d) [ 306.135231][ T6312] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 306.372239][ T6317] exFAT-fs (loop4): start_clu is invalid cluster(0x400) [ 306.713079][ T6326] loop1: detected capacity change from 0 to 64 [ 306.796259][ T6326] hfs: unable to locate alternate MDB [ 306.801888][ T6326] hfs: continuing without an alternate MDB [ 306.897892][ T29] audit: type=1326 audit(1737412003.845:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6327 comm="syz.2.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62ab385d29 code=0x7ffc0000 [ 306.920597][ T29] audit: type=1326 audit(1737412003.845:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6327 comm="syz.2.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62ab385d29 code=0x7ffc0000 [ 306.943447][ T29] audit: type=1326 audit(1737412003.875:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6327 comm="syz.2.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f62ab385d29 code=0x7ffc0000 [ 306.966607][ T29] audit: type=1326 audit(1737412003.875:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6327 comm="syz.2.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62ab385d29 code=0x7ffc0000 [ 306.995789][ T29] audit: type=1326 audit(1737412003.895:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6327 comm="syz.2.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f62ab385d29 code=0x7ffc0000 [ 307.020672][ T29] audit: type=1326 audit(1737412003.895:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6327 comm="syz.2.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f62ab385d63 code=0x7ffc0000 [ 307.205899][ T6328] loop2: detected capacity change from 0 to 1024 [ 307.219926][ T29] audit: type=1800 audit(1737412004.005:11): pid=6326 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.156" name="file1" dev="loop1" ino=18 res=0 errno=0 [ 307.241475][ T29] audit: type=1326 audit(1737412004.045:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6327 comm="syz.2.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f62ab3847df code=0x7ffc0000 [ 307.264664][ T29] audit: type=1326 audit(1737412004.155:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6327 comm="syz.2.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f62ab385db7 code=0x7ffc0000 [ 307.293394][ T29] audit: type=1326 audit(1737412004.155:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6327 comm="syz.2.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f62ab384690 code=0x7ffc0000 [ 307.776468][ T3828] hfsplus: b-tree write err: -5, ino 4 [ 307.895374][ T2149] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 308.096163][ T2149] usb 1-1: Using ep0 maxpacket: 16 [ 308.137427][ T2149] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 308.149193][ T2149] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 308.158743][ T2149] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.203050][ T2149] usb 1-1: config 0 descriptor?? [ 308.373538][ T6344] sg_write: process 80 (syz.1.164) changed security contexts after opening file descriptor, this is not allowed. [ 308.446486][ T6345] program syz.1.164 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 308.660460][ T6347] loop3: detected capacity change from 0 to 256 [ 308.728863][ T2149] mcp2221 0003:04D8:00DD.0003: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 309.084599][ T5839] usb 1-1: USB disconnect, device number 2 [ 310.186535][ T6371] loop4: detected capacity change from 0 to 128 [ 310.264078][ T6371] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 310.362866][ T6371] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 310.731570][ T5784] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 311.116568][ T6386] netlink: 8 bytes leftover after parsing attributes in process `syz.4.180'. [ 311.135463][ T6382] loop3: detected capacity change from 0 to 1024 [ 311.239367][ T6382] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 311.466579][ T6382] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 311.529381][ T6382] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 16384 with max blocks 1 with error 28 [ 311.543219][ T6382] EXT4-fs (loop3): This should not happen!! Data will be lost [ 311.543219][ T6382] [ 311.560049][ T6382] EXT4-fs (loop3): Total free blocks count 0 [ 311.566745][ T6382] EXT4-fs (loop3): Free/Dirty block details [ 311.572987][ T6382] EXT4-fs (loop3): free_blocks=68451041280 [ 311.579173][ T6382] EXT4-fs (loop3): dirty_blocks=16 [ 311.584526][ T6382] EXT4-fs (loop3): Block reservation details [ 311.598080][ T6382] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 311.816906][ T6396] netlink: 'syz.0.186': attribute type 14 has an invalid length. [ 311.825282][ T6396] netlink: 48 bytes leftover after parsing attributes in process `syz.0.186'. [ 311.844673][ T6394] loop4: detected capacity change from 0 to 512 [ 311.960462][ T6394] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 312.310871][ T5793] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.450961][ T6404] netlink: 4 bytes leftover after parsing attributes in process `syz.0.188'. [ 312.488319][ T5784] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.763412][ T6407] loop3: detected capacity change from 0 to 512 [ 312.806635][ T6407] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 312.819295][ T6407] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 312.864576][ T6407] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 312.955198][ T6407] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 312.963843][ T6407] System zones: 0-2, 18-18, 34-34 [ 313.075769][ T6407] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1145: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 313.153849][ T6407] EXT4-fs (loop3): 1 truncate cleaned up [ 313.161756][ T6407] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 313.568347][ T5793] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.573877][ T6417] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 313.584262][ T6417] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 313.592544][ T6417] vhci_hcd vhci_hcd.0: Device attached [ 313.853427][ T6422] loop0: detected capacity change from 0 to 2048 [ 313.857718][ T5845] vhci_hcd: vhci_device speed not set [ 313.909032][ T6422] loop0: p1 < > p4 [ 313.927048][ T6422] loop0: p4 size 8388608 extends beyond EOD, truncated [ 313.935356][ T2149] usb 2-1: new low-speed USB device number 5 using dummy_hcd [ 313.965214][ T5845] usb 35-1: new full-speed USB device number 2 using vhci_hcd [ 314.035607][ T6426] loop3: detected capacity change from 0 to 164 [ 314.081307][ T6426] ISOFS: unable to read i-node block [ 314.174771][ T2149] usb 2-1: config 0 has no interfaces? [ 314.180849][ T2149] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 314.190475][ T2149] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.266808][ T2149] usb 2-1: config 0 descriptor?? [ 314.482261][ T5839] usb 2-1: USB disconnect, device number 5 [ 314.493273][ T6418] usb 35-1: recv xbuf, -104 [ 314.499957][ T4129] vhci_hcd: stop threads [ 314.504538][ T4129] vhci_hcd: release socket [ 314.509478][ T4129] vhci_hcd: disconnect device [ 314.595449][ T5845] vhci_hcd: vhci_device speed not set [ 314.719623][ T6432] netlink: 104 bytes leftover after parsing attributes in process `syz.2.199'. [ 314.894283][ T6435] loop0: detected capacity change from 0 to 256 [ 315.447952][ T6439] loop2: detected capacity change from 0 to 1024 [ 315.661533][ T6439] hfsplus: bad catalog entry type [ 315.851731][ T5796] Bluetooth: hci2: command tx timeout [ 315.956021][ T3935] hfsplus: b-tree write err: -5, ino 4 [ 317.893809][ T6473] loop4: detected capacity change from 0 to 64 [ 318.069584][ T6473] Process accounting resumed [ 318.133814][ T6475] netlink: 12 bytes leftover after parsing attributes in process `syz.2.219'. [ 318.388098][ T6481] loop1: detected capacity change from 0 to 164 [ 318.410588][ T6480] loop0: detected capacity change from 0 to 1024 [ 318.759546][ T6484] loop2: detected capacity change from 0 to 1024 [ 318.814572][ T6484] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 319.341368][ T5845] IPVS: starting estimator thread 0... [ 319.376601][ T6494] IPVS: dh: SCTP 172.20.20.187:0 - no destination available [ 319.446297][ T6496] IPVS: using max 240 ests per chain, 12000 per kthread [ 319.852998][ T6503] netlink: 201400 bytes leftover after parsing attributes in process `syz.3.232'. [ 319.868126][ T6503] netlink: zone id is out of range [ 319.873535][ T6503] netlink: zone id is out of range [ 319.878980][ T6503] netlink: zone id is out of range [ 319.893210][ T6503] netlink: zone id is out of range [ 319.898701][ T6503] netlink: zone id is out of range [ 319.904069][ T6503] netlink: zone id is out of range [ 319.909547][ T6503] netlink: zone id is out of range [ 319.914872][ T6503] netlink: zone id is out of range [ 319.922169][ T6503] netlink: zone id is out of range [ 320.036848][ T6506] process 'syz.0.234' launched './file1' with NULL argv: empty string added [ 320.204149][ T6511] sctp: [Deprecated]: syz.2.236 (pid 6511) Use of int in max_burst socket option. [ 320.204149][ T6511] Use struct sctp_assoc_value instead [ 320.615808][ T6514] netlink: 12 bytes leftover after parsing attributes in process `syz.3.238'. [ 320.676266][ T6515] hsr0: entered promiscuous mode [ 321.387065][ T6527] netlink: 276 bytes leftover after parsing attributes in process `syz.4.243'. [ 321.396598][ T6527] netlink: 40 bytes leftover after parsing attributes in process `syz.4.243'. [ 321.468333][ T6529] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 321.894140][ T6533] loop0: detected capacity change from 0 to 64 [ 322.058090][ T6533] syz.0.246: attempt to access beyond end of device [ 322.058090][ T6533] loop0: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 322.068685][ T6537] loop4: detected capacity change from 0 to 256 [ 322.071768][ T6533] Buffer I/O error on dev loop0, logical block 512, async page read [ 322.086562][ T6533] syz.0.246: attempt to access beyond end of device [ 322.086562][ T6533] loop0: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 322.100385][ T6533] Buffer I/O error on dev loop0, logical block 56576, async page read [ 323.315594][ T5845] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 323.328809][ T6550] loop1: detected capacity change from 0 to 1024 [ 323.347785][ T6550] EXT4-fs: Ignoring removed orlov option [ 323.353840][ T6550] EXT4-fs: Ignoring removed nomblk_io_submit option [ 323.441637][ T6550] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8843c118, mo2=0002] [ 323.502542][ T6550] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 323.515365][ T5845] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 323.522341][ T6554] loop3: detected capacity change from 0 to 1024 [ 323.528919][ T5845] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 323.529067][ T5845] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 323.529307][ T5845] usb 5-1: New USB device found, idVendor=056a, idProduct=00f0, bcdDevice= 0.00 [ 323.529448][ T5845] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.616988][ T5845] usb 5-1: config 0 descriptor?? [ 323.659327][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 323.659549][ T29] audit: type=1800 audit(1737412020.615:28): pid=6550 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.254" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 324.068665][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.163741][ T5845] wacom 0003:056A:00F0.0004: hidraw0: USB HID v0.04 Device [HID 056a:00f0] on usb-dummy_hcd.4-1/input0 [ 324.278365][ T5845] usb 5-1: USB disconnect, device number 3 [ 324.353169][ T6563] loop0: detected capacity change from 0 to 2048 [ 324.394811][ T6563] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 324.504503][ T6568] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 325.055224][ T29] audit: type=1400 audit(1737412021.985:29): apparmor="DENIED" operation="change_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3AA009F5 pid=6573 comm="syz.3.262" [ 325.647792][ T6588] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 326.162244][ T6592] netlink: 8 bytes leftover after parsing attributes in process `syz.0.270'. [ 327.007489][ T6610] loop1: detected capacity change from 0 to 256 [ 327.192686][ T6610] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 327.301157][ T6610] exFAT-fs (loop1): error, in sector 160, dentry 15 should be unused, but 0x85 [ 327.310722][ T6610] exFAT-fs (loop1): Filesystem has been set read-only [ 327.443590][ T6614] loop2: detected capacity change from 0 to 1024 [ 327.472341][ T6616] netlink: 8 bytes leftover after parsing attributes in process `syz.0.281'. [ 327.481810][ T6616] netlink: 8 bytes leftover after parsing attributes in process `syz.0.281'. [ 327.806933][ T6620] loop4: detected capacity change from 0 to 512 [ 327.816003][ T6620] EXT4-fs: Ignoring removed i_version option [ 327.898620][ T6620] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 328.004338][ T6620] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 328.152612][ T6620] EXT4-fs (loop4): 1 truncate cleaned up [ 328.160683][ T6620] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 328.318976][ T6620] EXT4-fs warning (device loop4): ext4_group_add:1736: No reserved GDT blocks, can't resize [ 328.690822][ T5784] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.835269][ T29] audit: type=1326 audit(1737412025.785:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6635 comm="syz.1.289" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3d49b85d29 code=0x0 [ 328.962878][ T6639] loop2: detected capacity change from 0 to 128 [ 329.178183][ T6643] loop4: detected capacity change from 0 to 1024 [ 329.242723][ T6643] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 329.342361][ T6643] EXT4-fs error (device loop4): ext4_ext_check_inode:524: inode #11: comm syz.4.292: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 329.388700][ T6643] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.292: couldn't read orphan inode 11 (err -117) [ 329.466219][ T6643] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 329.564769][ T6643] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.292: Invalid block bitmap block 0 in block_group 0 [ 329.649371][ T6643] Quota error (device loop4): write_blk: dquota write failed [ 329.657408][ T6643] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 329.668075][ T6643] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.292: Failed to acquire dquot type 0 [ 330.094266][ T6643] syz.4.292 (6643) used greatest stack depth: 4176 bytes left [ 330.183735][ T5784] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.772156][ T6661] loop3: detected capacity change from 0 to 1024 [ 330.862389][ T6661] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 331.017727][ T6661] EXT4-fs error (device loop3): ext4_xattr_inode_iget:440: inode #11: comm syz.3.300: missing EA_INODE flag [ 331.045838][ T29] audit: type=1800 audit(1737412027.975:31): pid=6661 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.300" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 331.063675][ T6669] vlan2: entered promiscuous mode [ 331.071728][ T6669] vlan2: entered allmulticast mode [ 331.105512][ T6661] EXT4-fs (loop3): Remounting filesystem read-only [ 331.475842][ T5793] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.706219][ T29] audit: type=1326 audit(1737412028.645:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6677 comm="syz.0.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89e1385d29 code=0x7ffc0000 [ 331.729294][ T29] audit: type=1326 audit(1737412028.645:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6677 comm="syz.0.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89e1385d29 code=0x7ffc0000 [ 331.752122][ T29] audit: type=1326 audit(1737412028.655:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6677 comm="syz.0.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f89e1385d29 code=0x7ffc0000 [ 331.985189][ T29] audit: type=1326 audit(1737412028.785:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6677 comm="syz.0.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89e1385d29 code=0x7ffc0000 [ 332.859298][ T6683] loop3: detected capacity change from 0 to 32768 [ 332.878204][ T6683] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.308 (6683) [ 332.986448][ T6683] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 333.000955][ T6683] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 333.011079][ T6683] BTRFS info (device loop3): disk space caching is enabled [ 333.018680][ T6683] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 333.201914][ T6708] loop0: detected capacity change from 0 to 256 [ 333.221737][ T6683] BTRFS info (device loop3): rebuilding free space tree [ 333.265999][ T6683] BTRFS info (device loop3): disabling free space tree [ 333.273471][ T6683] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 333.283795][ T6683] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 333.408068][ T6683] BTRFS info (device loop3): balance: start -susage=12582912,drange=8796093022212..7,limit=10376293541461622786,limit=2..2415919104 [ 333.422752][ T6683] BTRFS info (device loop3): left=0, need=98304, flags=2 [ 333.430395][ T6683] BTRFS info (device loop3): space_info SYSTEM has 0 free, is not full [ 333.439222][ T6683] BTRFS info (device loop3): space_info total=4194304, used=4096, pinned=0, reserved=0, may_use=0, readonly=4190208 zone_unusable=0 [ 333.453378][ T6683] BTRFS info (device loop3): global_block_rsv: size 1048576 reserved 1048576 [ 333.462701][ T6683] BTRFS info (device loop3): trans_block_rsv: size 0 reserved 0 [ 333.470907][ T6683] BTRFS info (device loop3): chunk_block_rsv: size 0 reserved 0 [ 333.478953][ T6683] BTRFS info (device loop3): delayed_block_rsv: size 0 reserved 0 [ 333.487323][ T6683] BTRFS info (device loop3): delayed_refs_rsv: size 0 reserved 0 [ 333.503154][ T6683] BTRFS error (device loop3): allocation failed flags 12, wanted 4096 tree-log 0, relocation: 0 [ 333.514157][ T6683] BTRFS info (device loop3): space_info DATA+METADATA has 2240512 free, is full [ 333.523681][ T6683] BTRFS info (device loop3): space_info total=3276800, used=49152, pinned=0, reserved=0, may_use=987136, readonly=0 zone_unusable=0 [ 333.537870][ T6683] BTRFS info (device loop3): global_block_rsv: size 983040 reserved 983040 [ 333.547045][ T6683] BTRFS info (device loop3): trans_block_rsv: size 0 reserved 0 [ 333.555243][ T6683] BTRFS info (device loop3): chunk_block_rsv: size 0 reserved 0 [ 333.563162][ T6683] BTRFS info (device loop3): delayed_block_rsv: size 0 reserved 0 [ 333.571392][ T6683] BTRFS info (device loop3): delayed_refs_rsv: size 196608 reserved 0 [ 333.579981][ T6683] BTRFS info (device loop3): block group 5242880 has 1638400 bytes, 49152 used 0 pinned 0 reserved 0 delalloc 0 super 0 zone_unusable (1589248 bytes available) [ 333.596741][ T6683] BTRFS critical (device loop3): entry offset 5242880, bytes 12288, bitmap no [ 333.609534][ T6683] BTRFS critical (device loop3): entry offset 5259264, bytes 8192, bitmap no [ 333.619853][ T6683] BTRFS critical (device loop3): entry offset 5271552, bytes 16384, bitmap no [ 333.629312][ T6683] BTRFS critical (device loop3): entry offset 5316608, bytes 32768, bitmap no [ 333.638708][ T6683] BTRFS critical (device loop3): entry offset 5353472, bytes 12288, bitmap no [ 333.648041][ T6683] BTRFS critical (device loop3): entry offset 5373952, bytes 1507328, bitmap no [ 333.657538][ T6683] BTRFS info (device loop3): block group has cluster?: no [ 333.665122][ T6683] BTRFS info (device loop3): 6 free space entries at or bigger than 4096 bytes [ 333.674363][ T6683] BTRFS info (device loop3): block group 6881280 has 1638400 bytes, 0 used 0 pinned 0 reserved 0 delalloc 0 super 0 zone_unusable (1638400 bytes available) [ 333.690988][ T6683] BTRFS critical (device loop3): entry offset 6881280, bytes 1638400, bitmap no [ 333.700460][ T6683] BTRFS info (device loop3): block group has cluster?: no [ 333.711770][ T6683] BTRFS info (device loop3): 1 free space entries at or bigger than 4096 bytes [ 333.722146][ T6683] BTRFS info (device loop3): 3227648 bytes available across all block groups [ 333.726632][ T6708] FAT-fs (loop0): Directory bread(block 64) failed [ 333.731463][ T6683] ------------[ cut here ]------------ [ 333.738367][ T6708] FAT-fs (loop0): Directory bread(block 65) failed [ 333.743241][ T6683] BTRFS: Transaction aborted (error -28) [ 333.745477][ T6683] WARNING: CPU: 1 PID: 6683 at fs/btrfs/block-group.c:2752 btrfs_create_pending_block_groups+0x231b/0x2560 [ 333.750293][ T6708] FAT-fs (loop0): Directory bread(block 66) failed [ 333.755689][ T6683] Modules linked in: [ 333.771090][ T6708] FAT-fs (loop0): Directory bread(block 67) failed [ 333.780038][ T6683] CPU: 1 UID: 0 PID: 6683 Comm: syz.3.308 Not tainted 6.13.0-syzkaller-00164-g100ceb4817a2 #0 [ 333.780192][ T6683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 333.780289][ T6683] RIP: 0010:btrfs_create_pending_block_groups+0x231b/0x2560 [ 333.780572][ T6683] Code: 89 a0 68 09 00 00 48 c7 80 80 0c 00 00 00 00 00 00 45 85 ff 0f 85 75 01 00 00 48 c7 c7 24 ae 13 91 44 89 f6 e8 b6 3a 6e fc 90 <0f> 0b 90 90 e9 fa fa ff ff e8 a7 a5 64 fd 45 85 ff 0f 84 d3 fa ff [ 333.780698][ T6683] RSP: 0018:ffff8881259e74f8 EFLAGS: 00010283 [ 333.780823][ T6683] RAX: ffffffff815df451 RBX: 0000000081002701 RCX: 0000000000080000 [ 333.780925][ T6683] RDX: ffffc90008c80000 RSI: 0000000000024e1f RDI: 0000000000024e20 [ 333.781024][ T6683] RBP: ffff8881259e7690 R08: ffffffff815df42f R09: 0000000000000000 [ 333.781125][ T6683] R10: ffff888237e10a4c R11: 0000000000000004 R12: 0000000000000000 [ 333.785433][ T6708] FAT-fs (loop0): Directory bread(block 68) failed [ 333.791788][ T6683] R13: ffff88804f184cb8 R14: 00000000ffffffe4 R15: 0000000000000000 [ 333.802262][ T6708] FAT-fs (loop0): Directory bread(block 69) failed [ 333.816221][ T6683] FS: 00007fe1f4da46c0(0000) GS:ffff88813fd00000(0000) knlGS:0000000000000000 [ 333.816361][ T6683] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 333.816457][ T6683] CR2: 0000001b2d319ff8 CR3: 000000012e96a000 CR4: 00000000003526f0 [ 333.816567][ T6683] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 333.816649][ T6683] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 333.816737][ T6683] Call Trace: [ 333.816784][ T6683] [ 333.816834][ T6683] ? show_trace_log_lvl+0x268/0x3d0 [ 333.817034][ T6683] ? __btrfs_end_transaction+0x188/0xb50 [ 333.817257][ T6683] ? show_regs+0xb4/0xe0 [ 333.817442][ T6683] ? __warn+0x2c7/0x780 [ 333.817615][ T6683] ? btrfs_create_pending_block_groups+0x231b/0x2560 [ 333.817851][ T6683] ? report_bug+0x929/0xbd0 [ 333.818034][ T6683] ? btrfs_create_pending_block_groups+0x231b/0x2560 [ 333.818266][ T6683] ? handle_bug+0x6d/0x90 [ 333.818450][ T6683] ? exc_invalid_op+0x1f/0x50 [ 333.818630][ T6683] ? asm_exc_invalid_op+0x1f/0x30 [ 333.818792][ T6683] ? __warn_printk+0x43f/0x470 [ 333.818972][ T6683] ? __warn_printk+0x461/0x470 [ 333.819154][ T6683] ? btrfs_create_pending_block_groups+0x231b/0x2560 [ 333.819384][ T6683] ? btrfs_create_pending_block_groups+0x231a/0x2560 [ 333.829340][ T6708] FAT-fs (loop0): Directory bread(block 70) failed [ 333.848566][ T6683] ? kmsan_get_metadata+0x13e/0x1c0 [ 333.854099][ T6708] FAT-fs (loop0): Directory bread(block 71) failed [ 333.862248][ T6683] ? btrfs_trans_release_metadata+0x305/0xa60 [ 333.870581][ T6708] FAT-fs (loop0): Directory bread(block 72) failed [ 333.878604][ T6683] __btrfs_end_transaction+0x188/0xb50 [ 333.886815][ T6708] FAT-fs (loop0): Directory bread(block 73) failed [ 333.893373][ T6683] btrfs_end_transaction+0x2f/0x40 [ 334.092578][ T6683] btrfs_inc_block_group_ro+0xebb/0xf70 [ 334.098616][ T6683] btrfs_relocate_block_group+0x608/0x1a00 [ 334.104810][ T6683] ? mutex_unlock+0x29/0x50 [ 334.109856][ T6683] btrfs_relocate_chunk+0xe8/0x630 [ 334.118665][ T6683] ? kmsan_get_metadata+0x13e/0x1c0 [ 334.125245][ T6683] __btrfs_balance+0x3301/0x3810 [ 334.130556][ T6683] ? kfree+0x3ad/0xdb0 [ 334.135203][ T6683] btrfs_balance+0x14fc/0x1d70 [ 334.140335][ T6683] btrfs_ioctl_balance+0x852/0xe00 [ 334.145910][ T6683] btrfs_ioctl+0xf78/0x1380 [ 334.150747][ T6683] ? __pfx_btrfs_ioctl+0x10/0x10 [ 334.156182][ T6683] __se_sys_ioctl+0x246/0x440 [ 334.161202][ T6683] __x64_sys_ioctl+0x96/0xe0 [ 334.166452][ T6683] x64_sys_call+0x19f0/0x3c30 [ 334.171472][ T6683] do_syscall_64+0xcd/0x1e0 [ 334.176455][ T6683] ? clear_bhb_loop+0x25/0x80 [ 334.181453][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.187826][ T6683] RIP: 0033:0x7fe1f3f85d29 [ 334.192511][ T6683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 334.212634][ T6683] RSP: 002b:00007fe1f4da4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 334.226062][ T6683] RAX: ffffffffffffffda RBX: 00007fe1f4175fa0 RCX: 00007fe1f3f85d29 [ 334.234330][ T6683] RDX: 0000000020000c40 RSI: 00000000c4009420 RDI: 0000000000000003 [ 334.242732][ T6683] RBP: 00007fe1f4001b08 R08: 0000000000000000 R09: 0000000000000000 [ 334.251156][ T6683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 334.259515][ T6683] R13: 0000000000000000 R14: 00007fe1f4175fa0 R15: 00007fffdc4453b8 [ 334.268011][ T6683] [ 334.271252][ T6683] ---[ end trace 0000000000000000 ]--- [ 334.277098][ T6683] BTRFS info (device loop3 state A): dumping space info: [ 334.284383][ T6683] BTRFS info (device loop3 state A): space_info DATA+METADATA has 2240512 free, is full [ 334.294673][ T6683] BTRFS info (device loop3 state A): space_info total=3276800, used=49152, pinned=0, reserved=0, may_use=987136, readonly=0 zone_unusable=0 [ 334.309523][ T6683] BTRFS info (device loop3 state A): space_info SYSTEM has 8253440 free, is not full [ 334.322464][ T6683] BTRFS info (device loop3 state A): space_info total=12451840, used=4096, pinned=0, reserved=4096, may_use=0, readonly=4190208 zone_unusable=0 [ 334.338617][ T6683] BTRFS info (device loop3 state A): global_block_rsv: size 983040 reserved 983040 [ 334.348398][ T6683] BTRFS info (device loop3 state A): trans_block_rsv: size 0 reserved 0 [ 334.357231][ T6683] BTRFS info (device loop3 state A): chunk_block_rsv: size 0 reserved 0 [ 334.366036][ T6683] BTRFS info (device loop3 state A): delayed_block_rsv: size 0 reserved 0 [ 334.374826][ T6683] BTRFS info (device loop3 state A): delayed_refs_rsv: size 196608 reserved 4096 [ 334.384365][ T6683] BTRFS: error (device loop3 state A) in btrfs_create_pending_block_groups:2752: errno=-28 No space left [ 334.396058][ T6683] BTRFS info (device loop3 state EA): forced readonly [ 334.403211][ T6683] BTRFS error (device loop3 state EA): allocation failed flags 12, wanted 4096 tree-log 0, relocation: 0 [ 334.420427][ T6683] BTRFS info (device loop3 state EA): space_info DATA+METADATA has 2240512 free, is full [ 334.440086][ T6683] BTRFS info (device loop3 state EA): space_info total=3276800, used=49152, pinned=0, reserved=0, may_use=987136, readonly=0 zone_unusable=0 [ 334.456091][ T6683] BTRFS info (device loop3 state EA): global_block_rsv: size 983040 reserved 978944 [ 334.466045][ T6683] BTRFS info (device loop3 state EA): trans_block_rsv: size 0 reserved 0 [ 334.474740][ T6683] BTRFS info (device loop3 state EA): chunk_block_rsv: size 0 reserved 0 [ 334.483666][ T6683] BTRFS info (device loop3 state EA): delayed_block_rsv: size 0 reserved 0 [ 334.492828][ T6683] BTRFS info (device loop3 state EA): delayed_refs_rsv: size 196608 reserved 4096 [ 334.502520][ T6683] BTRFS info (device loop3 state EA): block group 5242880 has 1638400 bytes, 49152 used 0 pinned 0 reserved 0 delalloc 0 super 0 zone_unusable (1589248 bytes available) [ 334.520041][ T6683] BTRFS critical (device loop3 state EA): entry offset 5242880, bytes 12288, bitmap no [ 334.533458][ T6683] BTRFS critical (device loop3 state EA): entry offset 5259264, bytes 8192, bitmap no [ 334.544515][ T6683] BTRFS critical (device loop3 state EA): entry offset 5271552, bytes 16384, bitmap no [ 334.554694][ T6683] BTRFS critical (device loop3 state EA): entry offset 5316608, bytes 32768, bitmap no [ 334.564791][ T6683] BTRFS critical (device loop3 state EA): entry offset 5353472, bytes 12288, bitmap no [ 334.575221][ T6683] BTRFS critical (device loop3 state EA): entry offset 5373952, bytes 1507328, bitmap no [ 334.585489][ T6683] BTRFS info (device loop3 state EA): block group has cluster?: no [ 334.593630][ T6683] BTRFS info (device loop3 state EA): 6 free space entries at or bigger than 4096 bytes [ 334.603996][ T6683] BTRFS info (device loop3 state EA): block group 6881280 has 1638400 bytes, 0 used 0 pinned 0 reserved 0 delalloc 0 super 0 zone_unusable (1638400 bytes available) [ 334.621110][ T6683] BTRFS critical (device loop3 state EA): entry offset 6881280, bytes 1638400, bitmap no [ 334.635948][ T6683] BTRFS info (device loop3 state EA): block group has cluster?: no [ 334.644136][ T6683] BTRFS info (device loop3 state EA): 1 free space entries at or bigger than 4096 bytes [ 334.654361][ T6683] BTRFS info (device loop3 state EA): 3227648 bytes available across all block groups [ 334.664541][ T6683] BTRFS: error (device loop3 state EA) in btrfs_create_pending_block_groups:2764: errno=-28 No space left [ 334.676757][ T6683] BTRFS info (device loop3 state EA): balance: ended with status: -30 [ 334.846006][ T5793] BTRFS info (device loop3 state EA): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 335.577750][ T6724] loop0: detected capacity change from 0 to 1764 [ 336.545468][ T6734] loop0: detected capacity change from 0 to 1024 [ 336.711838][ T6735] loop4: detected capacity change from 0 to 2048 [ 336.737234][ T6738] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 337.052641][ T6735] Alternate GPT is invalid, using primary GPT. [ 337.060885][ T6735] loop4: p2 p3 p7 [ 338.906965][ T6757] loop2: detected capacity change from 0 to 4096 [ 338.960624][ T6757] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512). [ 339.192940][ T6760] loop1: detected capacity change from 0 to 1024 [ 339.245861][ T6760] EXT4-fs: Mount option(s) incompatible with ext2 [ 339.775459][ T5796] Bluetooth: hci1: unexpected cc 0x203e length: 2 > 1 [ 340.435841][ T6777] netlink: 44 bytes leftover after parsing attributes in process `syz.3.344'. [ 340.445774][ T6777] netlink: 43 bytes leftover after parsing attributes in process `syz.3.344'. [ 340.454871][ T6777] netlink: 'syz.3.344': attribute type 5 has an invalid length. [ 340.466130][ T6777] netlink: 43 bytes leftover after parsing attributes in process `syz.3.344'. [ 341.622029][ T6795] netlink: 16 bytes leftover after parsing attributes in process `syz.3.353'. [ 341.632407][ T6795] netlink: 52 bytes leftover after parsing attributes in process `syz.3.353'. [ 341.641720][ T6795] netlink: 12 bytes leftover after parsing attributes in process `syz.3.353'. [ 341.651166][ T6795] vlan0: entered allmulticast mode [ 341.656722][ T6795] veth0_vlan: entered allmulticast mode [ 341.894165][ T6797] loop4: detected capacity change from 0 to 256 [ 342.449441][ T6806] loop0: detected capacity change from 0 to 64 [ 342.608221][ T6806] hfs: request for non-existent node 131072 in B*Tree [ 342.618816][ T6806] hfs: request for non-existent node 131072 in B*Tree [ 343.850116][ T5796] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 343.858874][ T5796] Bluetooth: hci1: Injecting HCI hardware error event [ 343.866721][ T5796] Bluetooth: hci1: hardware error 0x00 [ 344.498616][ T6828] loop0: detected capacity change from 0 to 256 [ 345.115218][ T29] audit: type=1800 audit(1737412042.065:36): pid=6828 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.366" name="file1" dev="loop0" ino=1048627 res=0 errno=0 [ 345.236641][ T6838] loop3: detected capacity change from 0 to 128 [ 345.385332][ T6838] FAT-fs (loop3): Directory bread(block 162) failed [ 345.392372][ T6838] FAT-fs (loop3): Directory bread(block 163) failed [ 345.399500][ T6838] FAT-fs (loop3): Directory bread(block 164) failed [ 345.406699][ T6838] FAT-fs (loop3): Directory bread(block 165) failed [ 345.420330][ T6838] FAT-fs (loop3): Directory bread(block 166) failed [ 345.422264][ T6842] vlan2: entered allmulticast mode [ 345.427375][ T6838] FAT-fs (loop3): Directory bread(block 167) failed [ 345.427513][ T6838] FAT-fs (loop3): Directory bread(block 168) failed [ 345.427647][ T6838] FAT-fs (loop3): Directory bread(block 169) failed [ 345.453982][ T6842] bridge0: entered allmulticast mode [ 345.467225][ T6842] bridge0: port 3(vlan2) entered blocking state [ 345.474247][ T6842] bridge0: port 3(vlan2) entered disabled state [ 345.552848][ T6838] FAT-fs (loop3): Directory bread(block 162) failed [ 345.560280][ T6838] FAT-fs (loop3): Directory bread(block 163) failed [ 345.594512][ T6842] bridge0: left allmulticast mode [ 345.629365][ T6838] syz.3.370: attempt to access beyond end of device [ 345.629365][ T6838] loop3: rw=3, sector=226, nr_sectors = 6 limit=128 [ 345.643173][ T6838] syz.3.370: attempt to access beyond end of device [ 345.643173][ T6838] loop3: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 345.925940][ T5796] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 347.391803][ T6872] netlink: 12 bytes leftover after parsing attributes in process `syz.0.384'. [ 348.047086][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 348.545206][ T6890] netlink: 104 bytes leftover after parsing attributes in process `syz.4.393'. [ 348.769605][ T29] audit: type=1326 audit(1737412045.725:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6893 comm="syz.2.394" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f62ab385d29 code=0x0 [ 350.176619][ T6916] netlink: 72 bytes leftover after parsing attributes in process `syz.2.404'. [ 350.186203][ T6916] netlink: 72 bytes leftover after parsing attributes in process `syz.2.404'. [ 350.247418][ T6907] loop1: detected capacity change from 0 to 4096 [ 350.348761][ T6907] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 350.630150][ T6907] ntfs3(loop1): Failed to load $Extend (-22). [ 350.636709][ T6907] ntfs3(loop1): Failed to initialize $Extend. [ 350.723733][ T6907] Process accounting resumed [ 351.379559][ T6934] netlink: 4 bytes leftover after parsing attributes in process `syz.1.411'. [ 351.426469][ T6934] veth0_macvtap: left promiscuous mode [ 351.791601][ T6937] netlink: 92 bytes leftover after parsing attributes in process `syz.2.415'. [ 351.942623][ T6942] loop3: detected capacity change from 0 to 256 [ 352.133267][ T6942] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 352.309951][ T6947] nbd: nbd4 already in use [ 352.360332][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 352.367557][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 352.793244][ T6954] loop0: detected capacity change from 0 to 256 [ 353.896913][ T6968] netlink: 56 bytes leftover after parsing attributes in process `syz.2.430'. [ 354.137920][ T6970] loop1: detected capacity change from 0 to 1024 [ 354.233740][ T6970] hfsplus: bad catalog entry type [ 354.587508][ T3708] hfsplus: b-tree write err: -5, ino 4 [ 355.299568][ T6986] loop4: detected capacity change from 0 to 1024 [ 355.434055][ T6986] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 355.625509][ T6994] loop2: detected capacity change from 0 to 128 [ 356.331352][ T5784] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.412494][ T6999] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.420174][ T6999] bridge0: port 1(bridge_slave_0) entered forwarding state [ 357.167980][ T7008] netlink: 12 bytes leftover after parsing attributes in process `syz.0.449'. [ 357.192682][ T7008] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 357.200194][ T7008] macvlan2: entered allmulticast mode [ 357.206862][ T7008] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 357.292441][ T7008] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 357.299828][ T7008] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 357.419719][ T7013] loop2: detected capacity change from 0 to 2048 [ 357.491339][ T7013] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 357.542083][ T7013] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 357.565983][ T29] audit: type=1800 audit(1737412054.485:38): pid=7013 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.451" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 358.002031][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.003787][ T7022] loop1: detected capacity change from 0 to 256 [ 358.725793][ T5796] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 358.734634][ T5796] Bluetooth: hci2: Injecting HCI hardware error event [ 358.745488][ T5796] Bluetooth: hci2: hardware error 0x00 [ 358.788354][ T7035] loop1: detected capacity change from 0 to 1024 [ 358.811269][ T7038] bridge0: entered allmulticast mode [ 358.985441][ T7035] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 359.262937][ T7045] netlink: 40 bytes leftover after parsing attributes in process `syz.0.464'. [ 360.805260][ T5796] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 360.914176][ T7069] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 361.495581][ T7078] loop2: detected capacity change from 0 to 1024 [ 361.535689][ T7078] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 361.545223][ T7078] EXT4-fs (loop2): The Hurd can't support 64-bit file systems [ 361.736265][ T7082] trusted_key: encrypted_key: keyword 'tfs' not recognized [ 362.152906][ T7086] netlink: 8 bytes leftover after parsing attributes in process `syz.1.480'. [ 362.924153][ T7102] loop2: detected capacity change from 0 to 1024 [ 363.151070][ T7102] hfsplus: bad catalog entry type [ 363.359722][ T7105] loop0: detected capacity change from 0 to 1024 [ 363.381138][ T7105] EXT4-fs: Ignoring removed bh option [ 363.497542][ T7105] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 363.543319][ T3708] hfsplus: b-tree write err: -5, ino 4 [ 363.895590][ T5782] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 363.985151][ T7115] netlink: 16 bytes leftover after parsing attributes in process `syz.1.491'. [ 364.246947][ T7121] loop4: detected capacity change from 0 to 512 [ 364.270220][ T7122] loop0: detected capacity change from 0 to 128 [ 364.309398][ T7122] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 364.447381][ T7122] syz.0.493: attempt to access beyond end of device [ 364.447381][ T7122] loop0: rw=3, sector=6950, nr_sectors = 2 limit=128 [ 364.461167][ T7122] syz.0.493: attempt to access beyond end of device [ 364.461167][ T7122] loop0: rw=2051, sector=6952, nr_sectors = 942 limit=128 [ 365.055374][ T7130] loop0: detected capacity change from 0 to 8 [ 365.219730][ T7134] netlink: 'syz.1.500': attribute type 2 has an invalid length. [ 365.407061][ T25] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 365.593564][ T25] usb 5-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 365.603271][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.670613][ T25] usb 5-1: config 0 descriptor?? [ 365.754179][ T7144] loop3: detected capacity change from 0 to 128 [ 365.923095][ T25] kaweth 5-1:0.0: Firmware present in device. [ 366.147026][ T25] kaweth 5-1:0.0: Statistics collection: 0 [ 366.153500][ T25] kaweth 5-1:0.0: Multicast filter limit: 0 [ 366.160244][ T25] kaweth 5-1:0.0: MTU: 0 [ 366.168584][ T25] kaweth 5-1:0.0: Read MAC address 00:00:00:00:00:00 [ 366.489084][ T25] kaweth 5-1:0.0: probe with driver kaweth failed with error -5 [ 366.525840][ T25] usb 5-1: USB disconnect, device number 4 [ 366.893673][ T7154] loop3: detected capacity change from 0 to 2048 [ 366.976897][ T7154] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 367.989693][ T7169] loop3: detected capacity change from 0 to 16 [ 368.051427][ T7169] erofs (device loop3): mounted with root inode @ nid 36. [ 368.635998][ T5140] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 368.716041][ T7179] loop3: detected capacity change from 0 to 128 [ 368.757566][ T7179] EXT4-fs: Ignoring removed nobh option [ 368.825980][ T5140] usb 3-1: Using ep0 maxpacket: 8 [ 368.848934][ T7179] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 368.884093][ T7179] ext4 filesystem being mounted at /95/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 368.895318][ T5140] usb 3-1: config 0 has no interfaces? [ 368.985711][ T5140] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 368.995284][ T5140] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.003563][ T5140] usb 3-1: Product: syz [ 369.008398][ T5140] usb 3-1: Manufacturer: syz [ 369.013338][ T5140] usb 3-1: SerialNumber: syz [ 369.123759][ T5140] usb 3-1: config 0 descriptor?? [ 369.376433][ T5140] usb 3-1: USB disconnect, device number 3 [ 369.400181][ T5793] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 370.102086][ T7197] loop4: detected capacity change from 0 to 128 [ 371.139237][ T7205] loop0: detected capacity change from 0 to 4096 [ 371.173245][ T7205] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512). [ 371.733187][ T7205] ntfs3(loop0): Failed to load $Extend (-22). [ 371.740714][ T7205] ntfs3(loop0): Failed to initialize $Extend. [ 372.042502][ T7222] loop1: detected capacity change from 0 to 512 [ 372.098847][ T7222] EXT4-fs: Ignoring removed oldalloc option [ 372.130131][ T7224] program syz.2.539 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 372.156183][ T7222] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 372.277926][ T7222] EXT4-fs (loop1): 1 truncate cleaned up [ 372.286436][ T7222] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 373.097162][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.251457][ T7218] loop3: detected capacity change from 0 to 65536 [ 373.361703][ T7218] XFS (loop3): DAX unsupported by block device. Turning off DAX. [ 373.373703][ T7218] XFS (loop3): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 373.523985][ T7218] XFS (loop3): Ending clean mount [ 373.699984][ T5793] XFS (loop3): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 374.054014][ T7237] loop4: detected capacity change from 0 to 4096 [ 374.117576][ T7237] ntfs3(loop4): Different NTFS sector size (2048) and media sector size (512). [ 374.492078][ T7237] ntfs3(loop4): Failed to initialize $Extend/$ObjId. [ 374.620091][ T5140] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 374.888531][ T5140] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 374.898279][ T5140] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.906851][ T5140] usb 3-1: Product: syz [ 374.911263][ T5140] usb 3-1: Manufacturer: syz [ 374.916387][ T5140] usb 3-1: SerialNumber: syz [ 374.979641][ T5140] usb 3-1: config 0 descriptor?? [ 375.461373][ T5140] usb 3-1: Firmware: major: 0, minor: 11, hardware type: ATUSB (0) [ 375.696388][ T5140] usb 3-1: failed to fetch extended address, random address set [ 375.875642][ T5140] usb 3-1: USB disconnect, device number 4 [ 376.381381][ T7264] netlink: 836 bytes leftover after parsing attributes in process `syz.0.551'. [ 376.896951][ T5845] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 377.104196][ T5845] usb 4-1: Using ep0 maxpacket: 32 [ 377.159624][ T5845] usb 4-1: config 0 interface 0 has no altsetting 0 [ 377.193895][ T5845] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 377.203742][ T5845] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.212482][ T5845] usb 4-1: Product: syz [ 377.216996][ T5845] usb 4-1: Manufacturer: syz [ 377.221829][ T5845] usb 4-1: SerialNumber: syz [ 377.264657][ T5845] usb 4-1: config 0 descriptor?? [ 377.725868][ T5845] gs_usb 4-1:0.0: Configuring for 1 interfaces [ 377.922537][ T7285] loop0: detected capacity change from 0 to 2048 [ 377.929182][ T5845] gs_usb 4-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 377.957618][ T5845] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -22 [ 378.058783][ T7295] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 378.139360][ T5845] usb 4-1: USB disconnect, device number 2 [ 378.319178][ T7295] NILFS (loop0): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 378.330743][ T7295] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=4) [ 378.382565][ T7295] Remounting filesystem read-only [ 378.817542][ T7304] netlink: 104 bytes leftover after parsing attributes in process `syz.0.565'. [ 379.224363][ T7307] loop0: detected capacity change from 0 to 64 [ 379.792736][ T7315] Attempt to restore checkpoint with obsolete wellknown handles [ 379.804370][ T7318] loop3: detected capacity change from 0 to 16 [ 379.869118][ T7318] erofs (device loop3): mounted with root inode @ nid 36. [ 380.007682][ T5794] Bluetooth: hci4: command 0x0406 tx timeout [ 380.013978][ T5794] Bluetooth: hci3: command 0x0406 tx timeout [ 380.021729][ T5794] Bluetooth: hci0: command 0x0406 tx timeout [ 381.220183][ T7342] netlink: 36 bytes leftover after parsing attributes in process `syz.3.583'. [ 381.231519][ T7342] netlink: 24 bytes leftover after parsing attributes in process `syz.3.583'. [ 381.708259][ T7351] loop4: detected capacity change from 0 to 512 [ 381.852988][ T7351] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 381.866914][ T7351] ext4 filesystem being mounted at /115/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 381.915869][ T7351] EXT4-fs: Ignoring removed orlov option [ 381.922137][ T7351] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 381.932900][ T7351] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 381.995914][ T7351] EXT4-fs error (device loop4): __ext4_remount:6749: comm syz.4.588: Abort forced by user [ 382.054181][ T7357] bond0: entered promiscuous mode [ 382.059688][ T7357] bond_slave_0: entered promiscuous mode [ 382.066864][ T7357] bond_slave_1: entered promiscuous mode [ 382.082161][ T7351] EXT4-fs (loop4): Remounting filesystem read-only [ 382.089100][ T7351] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 382.108685][ T7357] batadv0: entered promiscuous mode [ 382.123033][ T7357] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 382.148503][ T7351] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 382.487548][ T5784] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.923070][ T7367] misc userio: Can't change port type on an already running userio instance [ 384.252189][ T7385] loop4: detected capacity change from 0 to 2048 [ 384.331524][ T7394] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 384.435393][ T7385] NILFS error (device loop4): nilfs_lookup: deleted inode referenced: 12 [ 384.480884][ T7385] Remounting filesystem read-only [ 384.537767][ T7393] loop0: detected capacity change from 0 to 2048 [ 384.636983][ T7393] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 386.448718][ T5140] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 386.530309][ T7430] loop2: detected capacity change from 0 to 256 [ 386.674169][ T7430] MINIX-fs: mounting file system with errors, running fsck is recommended [ 386.687102][ T5140] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 386.698813][ T5140] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 386.709172][ T5140] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 386.718831][ T5140] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.834156][ T7430] MINIX-fs warning: remounting fs with errors, running fsck is recommended [ 386.991932][ T5140] usb 5-1: config 0 descriptor?? [ 387.144333][ T7428] loop3: detected capacity change from 0 to 32768 [ 387.397337][ T7428] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,norecovery,reconstruct_alloc [ 387.412238][ T7428] bcachefs (loop3): recovering from clean shutdown, journal seq 10 [ 387.420832][ T7428] bcachefs (loop3): superblock requires following recovery passes to be run: [ 387.420832][ T7428] check_directory_structure [ 387.436229][ T7428] bcachefs (loop3): Version upgrade required: [ 387.436229][ T7428] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 387.436229][ T7428] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.13: inode_has_child_snapshots [ 387.436229][ T7428] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_nlinks,set_fs_needs_rebalance [ 387.521924][ T7428] bcachefs (loop3): dropping and reconstructing all alloc info [ 387.606444][ T5140] pyra 0003:1E7D:2CF6.0005: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.4-1/input0 [ 387.710548][ T7428] bcachefs (loop3): accounting_read... done [ 387.719962][ T7428] bcachefs (loop3): alloc_read... done [ 387.725986][ T7428] bcachefs (loop3): stripes_read... done [ 387.732082][ T7428] bcachefs (loop3): snapshots_read... done [ 387.739001][ T7428] bcachefs (loop3): check_allocations... done [ 387.897929][ T7428] bcachefs (loop3): going read-write [ 387.926495][ T5140] pyra 0003:1E7D:2CF6.0005: couldn't init struct pyra_device [ 387.934360][ T5140] pyra 0003:1E7D:2CF6.0005: couldn't install mouse [ 387.963906][ T5140] pyra 0003:1E7D:2CF6.0005: probe with driver pyra failed with error -71 [ 387.993965][ T5140] usb 5-1: USB disconnect, device number 5 [ 388.006161][ T7428] bcachefs (loop3): done starting filesystem [ 388.237833][ T5793] bcachefs (loop3): shutting down [ 388.243371][ T5793] bcachefs (loop3): going read-only [ 388.249183][ T5793] bcachefs (loop3): finished waiting for writes to stop [ 388.317208][ T5793] bcachefs (loop3): flushing journal and stopping allocators, journal seq 11 [ 388.556550][ T7442] ===================================================== [ 388.563921][ T7442] BUG: KMSAN: uninit-value in bch2_inode_v3_validate+0x481/0x5a0 [ 388.572467][ T7442] bch2_inode_v3_validate+0x481/0x5a0 [ 388.578253][ T7442] bch2_bkey_val_validate+0x2b5/0x440 [ 388.583861][ T7442] validate_bset_keys+0x1531/0x2080 [ 388.589423][ T7442] validate_bset_for_write+0x142/0x290 [ 388.599644][ T7442] __bch2_btree_node_write+0x53df/0x6830 [ 388.605680][ T7442] bch2_btree_node_write+0xa5/0x2e0 [ 388.611167][ T7442] __btree_node_flush+0x606/0x680 [ 388.616598][ T7442] bch2_btree_node_flush1+0x38/0x60 [ 388.622155][ T7442] journal_flush_pins+0xce6/0x1780 [ 388.627782][ T7442] __bch2_journal_reclaim+0xda8/0x1670 [ 388.633482][ T7442] bch2_journal_reclaim_thread+0x18e/0x760 [ 388.639784][ T7442] kthread+0x3e2/0x540 [ 388.644130][ T7442] ret_from_fork+0x6d/0x90 [ 388.649644][ T7442] ret_from_fork_asm+0x1a/0x30 [ 388.654709][ T7442] [ 388.657438][ T7442] Uninit was stored to memory at: [ 388.662919][ T7442] bch2_sort_keys_keep_unwritten_whiteouts+0x12d5/0x19d0 [ 388.670477][ T7442] __bch2_btree_node_write+0x3ae8/0x6830 [ 388.676590][ T7442] bch2_btree_node_write+0xa5/0x2e0 [ 388.682042][ T7442] __btree_node_flush+0x606/0x680 [ 388.687566][ T7442] bch2_btree_node_flush1+0x38/0x60 [ 388.696514][ T7442] journal_flush_pins+0xce6/0x1780 [ 388.702787][ T7442] __bch2_journal_reclaim+0xda8/0x1670 [ 388.708788][ T7442] bch2_journal_reclaim_thread+0x18e/0x760 [ 388.715150][ T7442] kthread+0x3e2/0x540 [ 388.719443][ T7442] ret_from_fork+0x6d/0x90 [ 388.724099][ T7442] ret_from_fork_asm+0x1a/0x30 [ 388.729428][ T7442] [ 388.731873][ T7442] Uninit was created at: [ 388.736665][ T7442] ___kmalloc_large_node+0x22c/0x370 [ 388.742249][ T7442] __kmalloc_large_node_noprof+0x3f/0x1e0 [ 388.748395][ T7442] __kmalloc_node_noprof+0xc96/0x1250 [ 388.754032][ T7442] __kvmalloc_node_noprof+0xc0/0x2d0 [ 388.759813][ T7442] btree_node_sort+0x78a/0x1d30 [ 388.765080][ T7442] bch2_btree_post_write_cleanup+0x1b0/0xf20 [ 388.771300][ T7442] bch2_btree_node_write+0x21c/0x2e0 [ 388.777499][ T7442] __btree_node_flush+0x606/0x680 [ 388.782775][ T7442] bch2_btree_node_flush0+0x35/0x60 [ 388.788403][ T7442] journal_flush_pins+0xce6/0x1780 [ 388.793818][ T7442] __bch2_journal_reclaim+0xda8/0x1670 [ 388.803040][ T7442] bch2_journal_reclaim_thread+0x18e/0x760 [ 388.810356][ T7442] kthread+0x3e2/0x540 [ 388.814635][ T7442] ret_from_fork+0x6d/0x90 [ 388.819436][ T7442] ret_from_fork_asm+0x1a/0x30 [ 388.824471][ T7442] [ 388.827117][ T7442] CPU: 1 UID: 0 PID: 7442 Comm: bch-reclaim/loo Tainted: G W 6.13.0-syzkaller-00164-g100ceb4817a2 #0 [ 388.839802][ T7442] Tainted: [W]=WARN [ 388.843799][ T7442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 388.854294][ T7442] ===================================================== [ 388.861560][ T7442] Disabling lock debugging due to kernel taint [ 388.868084][ T7442] Kernel panic - not syncing: kmsan.panic set ... [ 388.874683][ T7442] CPU: 1 UID: 0 PID: 7442 Comm: bch-reclaim/loo Tainted: G B W 6.13.0-syzkaller-00164-g100ceb4817a2 #0 [ 388.887194][ T7442] Tainted: [B]=BAD_PAGE, [W]=WARN [ 388.892358][ T7442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 388.902598][ T7442] Call Trace: [ 388.906028][ T7442] [ 388.909102][ T7442] dump_stack_lvl+0x216/0x2d0 [ 388.914051][ T7442] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 388.920092][ T7442] dump_stack+0x1e/0x24 [ 388.924494][ T7442] panic+0x4e2/0xcf0 [ 388.928638][ T7442] ? kmsan_get_metadata+0x101/0x1c0 [ 388.934079][ T7442] kmsan_report+0x2c7/0x2d0 [ 388.938791][ T7442] ? kmsan_get_metadata+0x13e/0x1c0 [ 388.944208][ T7442] ? kmsan_get_metadata+0x13e/0x1c0 [ 388.949621][ T7442] ? __msan_warning+0x95/0x120 [ 388.954656][ T7442] ? bch2_inode_v3_validate+0x481/0x5a0 [ 388.960420][ T7442] ? bch2_bkey_val_validate+0x2b5/0x440 [ 388.966199][ T7442] ? validate_bset_keys+0x1531/0x2080 [ 388.971805][ T7442] ? validate_bset_for_write+0x142/0x290 [ 388.977687][ T7442] ? __bch2_btree_node_write+0x53df/0x6830 [ 388.983741][ T7442] ? bch2_btree_node_write+0xa5/0x2e0 [ 388.989382][ T7442] ? __btree_node_flush+0x606/0x680 [ 388.994851][ T7442] ? bch2_btree_node_flush1+0x38/0x60 [ 389.000490][ T7442] ? journal_flush_pins+0xce6/0x1780 [ 389.006031][ T7442] ? __bch2_journal_reclaim+0xda8/0x1670 [ 389.011918][ T7442] ? bch2_journal_reclaim_thread+0x18e/0x760 [ 389.018164][ T7442] ? kthread+0x3e2/0x540 [ 389.022629][ T7442] ? ret_from_fork+0x6d/0x90 [ 389.027452][ T7442] ? ret_from_fork_asm+0x1a/0x30 [ 389.032635][ T7442] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 389.038652][ T7442] ? kmsan_get_metadata+0x13e/0x1c0 [ 389.044109][ T7442] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 389.050696][ T7442] ? kmsan_get_metadata+0x13e/0x1c0 [ 389.056070][ T7442] ? kmsan_get_metadata+0x13e/0x1c0 [ 389.061454][ T7442] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 389.067450][ T7442] ? kmsan_get_metadata+0x13e/0x1c0 [ 389.072831][ T7442] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 389.078832][ T7442] ? kmsan_get_metadata+0x13e/0x1c0 [ 389.084214][ T7442] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 389.090216][ T7442] __msan_warning+0x95/0x120 [ 389.095042][ T7442] bch2_inode_v3_validate+0x481/0x5a0 [ 389.100619][ T7442] ? __pfx_bch2_inode_v3_validate+0x10/0x10 [ 389.106715][ T7442] bch2_bkey_val_validate+0x2b5/0x440 [ 389.112333][ T7442] validate_bset_keys+0x1531/0x2080 [ 389.117781][ T7442] validate_bset_for_write+0x142/0x290 [ 389.123454][ T7442] __bch2_btree_node_write+0x53df/0x6830 [ 389.129314][ T7442] ? __update_load_avg_se+0xbb0/0x11a0 [ 389.135062][ T7442] bch2_btree_node_write+0xa5/0x2e0 [ 389.140467][ T7442] __btree_node_flush+0x606/0x680 [ 389.145716][ T7442] ? __btree_node_flush+0xd3/0x680 [ 389.151068][ T7442] ? __pfx_bch2_btree_node_flush1+0x10/0x10 [ 389.157201][ T7442] bch2_btree_node_flush1+0x38/0x60 [ 389.162648][ T7442] journal_flush_pins+0xce6/0x1780 [ 389.168019][ T7442] __bch2_journal_reclaim+0xda8/0x1670 [ 389.173708][ T7442] ? __try_to_del_timer_sync+0x3d3/0x420 [ 389.179598][ T7442] bch2_journal_reclaim_thread+0x18e/0x760 [ 389.185658][ T7442] kthread+0x3e2/0x540 [ 389.189911][ T7442] ? __pfx_bch2_journal_reclaim_thread+0x10/0x10 [ 389.196472][ T7442] ? __pfx_kthread+0x10/0x10 [ 389.201242][ T7442] ret_from_fork+0x6d/0x90 [ 389.205872][ T7442] ? __pfx_kthread+0x10/0x10 [ 389.210664][ T7442] ret_from_fork_asm+0x1a/0x30 [ 389.215679][ T7442] [ 389.218995][ T7442] Kernel Offset: disabled [ 389.223402][ T7442] Rebooting in 86400 seconds..