last executing test programs: 2m17.848432398s ago: executing program 4 (id=522): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x5, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000001c3a00000010000"], &(0x7f0000000000)='GPL\x00', 0x3, 0xa9, &(0x7f0000000100)=""/169, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) 2m17.440448706s ago: executing program 4 (id=527): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) r2 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) connect$unix(r1, &(0x7f00000002c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 2m17.247180669s ago: executing program 4 (id=529): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_LEARNING={0x5}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@dellink={0x20, 0x11, 0x1, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, 0x8130, 0x412}}, 0x20}, 0x1, 0x0, 0x0, 0x4040084}, 0x4) 2m16.668306589s ago: executing program 4 (id=535): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x2200054, &(0x7f0000000140)={[{@minixdf}, {@nodelalloc}]}, 0x1, 0x23c, &(0x7f0000000540)="$eJzs3T9oJFUcB/DvzO565m6RUxtBUEFENBDOTrA5G4WAhCAiqBARsVESISbYJVY2FlqrpLIJYme0lDTBRhGsoqaIjaDBwqCgxcrsJJI/K4gbd+Tm84FJ5u2+N783zHzfbjNsgNa6muR6kk6S6SS9JMXJDvfU29Wj5sbUzkIyGDz5czHsV7drx+OuJFlP8nCS7bLIy91kdevZ/V93H7//rZXefR9sPTM10ZM8crC/98Th+3Nvfjz70OqXX/84V+R6+qfO6+IVI17rFslt/0Wx/4mi2/QM+CfmX//omyr3tye5d5j/XsrUF+/t5Zu2e3nwvb8b+85PX905ybkCF28w6FWfgesDoHXKJP0U5UySer8sZ2bq7/Dfdi6Xrywtvzb90tLK4otNr1TARekne499eumTK2fy/0Onzj9w46ry/9T85nfV/mGn6dkAk1Tlf/r5tQci/9A68g/tJf/QXvIP7SX/0F7yD+0l/9Be8g/tJf/QTr/JP7TayfwDAO0yuNT0E8hAU5pefwAAAAAAAAAAAAAAAAAAgPM2pnYWjrdJ1fz83eTg0STdUfU7w98jTm4e/r38S1F1+0tRDxvLc3ePeYAxfdjw09e3fN9s/S/uarb+2mKy/kaSa93u+fuvOLr//r1bTzcHa2fe770wZoExPfJ0s/X/2Gy2/uxu8lm1/lwbtf6UuWP4f/T606+u35j1X/19zAMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMX8GAAD//ygdb54=") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x104) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) ioctl$BLKROSET(r1, 0x125d, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20, 0x0, 0x0, {0x3, 0x0, 0x9, 0x82}}, 0x20) 2m16.55877989s ago: executing program 1 (id=537): r0 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x11, @private, 0x0, 0x2, 'lblcr\x00'}, 0x2c) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(r1, 0x0, 0x4000) 2m16.119121842s ago: executing program 4 (id=540): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}}, 0x40000) 2m15.638611071s ago: executing program 1 (id=544): connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000000)={0x0, 'syzkaller0\x00', 0x3}, 0x18) 2m15.359659851s ago: executing program 1 (id=547): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_LEARNING={0x5}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@dellink={0x20, 0x11, 0x1, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, 0x8130, 0x412}}, 0x20}, 0x1, 0x0, 0x0, 0x4040084}, 0x4) 2m14.839423355s ago: executing program 1 (id=552): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x2200054, &(0x7f0000000140)={[{@minixdf}, {@nodelalloc}]}, 0x1, 0x23c, &(0x7f0000000540)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x104) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) ioctl$BLKROSET(r1, 0x125d, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20, 0x0, 0x0, {0x3, 0x0, 0x9, 0x82}}, 0x20) 2m14.361767241s ago: executing program 1 (id=559): connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000000)={0x0, 'syzkaller0\x00', 0x3}, 0x18) 2m13.712579569s ago: executing program 4 (id=564): setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x40, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, 0xffffffffffffffff, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 2m13.148839617s ago: executing program 32 (id=564): setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x40, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, 0xffffffffffffffff, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 2m12.456781901s ago: executing program 1 (id=574): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2m11.439902804s ago: executing program 33 (id=574): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 4.72357466s ago: executing program 0 (id=1452): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, 0x0, 0x44000) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r1, 0x0, 0x20007fffffff}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0x20002003}) epoll_pwait(r2, &(0x7f0000000080)=[{}], 0x1, 0x80000020, 0x0, 0x0) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000cc0), 0x1c1341, 0x0) 4.531373492s ago: executing program 3 (id=1455): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000020000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300000000000085000000ae000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 4.405587239s ago: executing program 0 (id=1459): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000280)=[{0x20, 0x0, 0x77, 0xfffff038}, {0x6, 0x0, 0x0, 0xfffffffe}]}, 0x10) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000140)={0x30000014}) ppoll(&(0x7f0000000200)=[{r4, 0x1}], 0x1, 0x0, 0x0, 0x3) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x80800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f7", 0x1}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r7 = socket$nl_rdma(0x10, 0x3, 0x14) syz_emit_ethernet(0x2a, &(0x7f0000000300)=ANY=[], 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[@ANYBLOB="20000000051421060000000000000000080001"], 0x20}, 0x1, 0x0, 0x0, 0x40c4}, 0x0) 4.332977194s ago: executing program 3 (id=1461): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000440)=0x97f, 0x4) sendmmsg$sock(r0, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) 4.005524058s ago: executing program 6 (id=1462): syz_genetlink_get_family_id$nl80211(&(0x7f0000007c80), 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x3e, &(0x7f00000000c0)=0x9, 0x4) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010040000000000002034400000008000300", @ANYRES32, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140002"], 0x4c}}, 0x0) 3.757942791s ago: executing program 6 (id=1465): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="12000000070000000400000002"], 0x50) socket$inet_dccp(0x2, 0x6, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYBLOB="0a000100000070"], 0x64}}, 0x0) 3.208041604s ago: executing program 3 (id=1468): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) shutdown(r0, 0x1) 2.94554088s ago: executing program 6 (id=1471): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x800, 0x1, 0x1}, 0x20) 2.917023012s ago: executing program 3 (id=1472): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2.631485138s ago: executing program 0 (id=1476): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, &(0x7f0000000800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000040)="000051524cb5005a54c40b7916a1", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 2.631283094s ago: executing program 3 (id=1477): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x4, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x4000042, 0x83f}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10, 0x0}, 0x0) 2.52960148s ago: executing program 6 (id=1479): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) write$tun(0xffffffffffffffff, 0x0, 0x38) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, &(0x7f00000000c0)=""/9, &(0x7f0000000100)=0x9) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000800), 0xffffffffffffffff) r3 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') unshare(0x24020400) socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r3}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x24}}, 0x0) 2.405617554s ago: executing program 0 (id=1482): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000400)=[{0x28, 0x0, 0x0, 0x800}, {0x6, 0x7, 0x0, 0x6}]}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) bind$packet(r1, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) r2 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bind$packet(r2, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) syz_emit_ethernet(0x82, &(0x7f0000000680)=ANY=[], 0x0) 2.405326934s ago: executing program 3 (id=1483): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000380)='./bus\x00', 0x8, &(0x7f00000000c0)={[{@space_cache_v1}, {@autodefrag}, {@ref_verify}, {@compress_algo={'compress', 0x3d, 'no'}}, {@clear_cache}, {@noacl}, {@space_cache_v1}, {@barrier}, {@nospace_cache}]}, 0x1, 0x55ae, &(0x7f000000ac40)="$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") truncate(0x0, 0x4000) syz_usb_connect(0x1, 0x36, 0x0, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x64942, 0x0) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) sendfile(r0, r0, 0x0, 0x1000200201005) openat(0xffffffffffffff9c, 0x0, 0x105042, 0x1ff) ioctl$FITRIM(0xffffffffffffffff, 0xc4009420, &(0x7f0000000180)={0x5}) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) 2.302236442s ago: executing program 2 (id=1484): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="12000000070000000400000002"], 0x50) socket$inet_dccp(0x2, 0x6, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYBLOB="0a000100000070"], 0x64}}, 0x0) 2.274093689s ago: executing program 6 (id=1485): connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) 2.254726173s ago: executing program 7 (id=1486): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000008dc0)={0x0, 0x0, &(0x7f0000008cc0)=[{&(0x7f0000008a40)="7c72bf03f7d9c0fd0826786ffcfb99e55c1272594d5be5c7f1de9562bbf652", 0x1f}, {0x0}], 0x2}, 0x0) setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f0000000080)=0x7, 0x4) 2.096969739s ago: executing program 0 (id=1488): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[@ANYBLOB="20000000051421060000000000000000080001"], 0x20}, 0x1, 0x0, 0x0, 0x40c4}, 0x0) 2.046518415s ago: executing program 7 (id=1489): socket$inet_icmp_raw(0x2, 0x3, 0x1) socket(0x2, 0x3, 0x100000001) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x3, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) 1.991548897s ago: executing program 6 (id=1490): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000c8d6a340ac050a038c65000000010902"], 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_usb_disconnect(r0) 1.980375744s ago: executing program 5 (id=1491): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) 1.860145571s ago: executing program 7 (id=1492): sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010e7010000000000000000000000000a20000000000a03000000000000000000070000000c00044000000000000000021c000000090a010400000000000000000700000008000a4000000003"], 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x40d, 0x70bd25, 0x25ffdbfc, {0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 1.788066496s ago: executing program 0 (id=1493): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000380)='./bus\x00', 0x8, &(0x7f00000000c0)={[{@space_cache_v1}, {@autodefrag}, {@ref_verify}, {@compress_algo={'compress', 0x3d, 'no'}}, {@clear_cache}, {@noacl}, {@space_cache_v1}, {@barrier}, {@nospace_cache}]}, 0x1, 0x55ae, &(0x7f000000ac40)="$eJzs3X9snHUdB/DnruvaFdeWMOuArGwDJFtEOjdNCCR2bNNpYTnphE3I+gNH0DmtY8NVCCtinIERijWMwQoLbn9MEYqucyiJBewqul8IJtNFBbPFNWOkOBExYTG9u+d299zaHhMpwuu1tM/zvc/z/d73njx/3PvW73MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABEHwx+N3TL/t3roJ26+ru++8a85e+2D3kuMX3rq1avND20v2dTz31aNVq1qPLF1w0/2JpkfW93d3BkEs2S+W7t9w2fwrr69vuKI0HLDxc6ltZeVQT5nq+mKqMTbnwcF+uT9NQRAURwYoSm/npXfiOQNkdlfkDzisayf1tE4dP69x28qujc8uu3xL/ktnUOloT2C0pK+rgyeupdrk73jkiEw769KL5Vyiqf7RC+4deREAwFtSk0huMm9H029xM+22aD3Sro202yPt8B1Ce3bjVKTGHTvUPCdH66M0z9pUVCgZcp6Revr8Z9qJaP9IOxI13sI8cw9NR5rSoebZEqmP1jwBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3k0uuH5m/d49D7/8ldbf/u7h17/16sePrGq8ZaC7/qJ1ix/v2PG9vx2tWtV6ZOmCm+5PND2yvr+7Mwgqk/1iqe6xZ6ri8ZkDddseu6e3puFDC9cUpccNt2OyDg72hzsXVwRBc1blYDhsf3kQJHILyWawIb/wpeTOZ8ICAAAA7yVnJn/HM+1UHCzOaceSaTKW/BdKhcVrJ/W0Th0/r3Hbyq6Nzy67fMupj5cYYrzak46XaVee+IllBeMw/kbHO1EPD12RN87woiNG8/zpx/qnNdfdUHrl7gsWzphdv+XS4CfTD3csX3TfhBfHL9nXXpOX/yuHz//hmZP/AQAA+G/I/9FxhjdS/m+uqZh0cOp3ix67rur44fkP/Lyz7/kn4w8VD3Q//dLYcbf9cnVe/p+c85R5+T+ccZj/48Gp5X8AAAB4N/tf5//avHGGN1L+/8X+zZ//98pvTDk84187Xnj69xdvnVI+/7WyGTe8+cSCVxp2tf0pL//XFJb/x2RPO3xwVzjhZRVBUFP4SQUAAAByhP/vfuKjhTCvpz45iOb1y+4qe3LXG+tvjJ/V8o8zFvfPqv7i7tVf37ApNrChc92O5XNX5OX/2sLyf/E783IBAACAAvxm+y13V395ydYtew7N2XFnYvPYS+a+uuennVf1vXwsUfT8zX15+T9RWP4vGZ2XAwAAAJzEU+MmPnfo0UNfm7177YS9q9rmPD5t3+qFD/xz9t+veOnPxzddWJ6X/xsLy/9l6W165UOq087wrxA6KoKgdHCnJVXoC9o/mSkAAAAAb5Mwpzc1revduX7MrNfOPvzDNSuW/2rvpd++a2P1zQd+XXX7ucf2996Yl/9bhr//f3ing3D9f879//LW/2cVUnf9u8SNAQAAAHg/yl/PH94eP/XNBUN9/36h6/8/euaBko7m8ysnx7dVz3rig31Xra1+fVHHRZ/YfusbH46V//VTefm/rbD8X5S9fTu//w8AAABOwf/b9/8tzhtneCPd/79v3DPnrPnsPT+o/WbZU+e+eXfzd9oPTj9v87QzPlJ0fvecmX/4fl7+by8s/4fb07JfXk94fm6vCIKJgzvpuwluDae7LFLoKs4qpE58pEd92CNd6CrJKiS1RHp8rCIIpgzutEUKp4eF9khhoDxd2BQp7A0L6eshU3g0UugJr7R7y9PTjRZ+FhbSCyy6whUUp2WWRER6HBuqx2DhpD0OZJ4cAADgfSUMz+ksW5zbDKJRtis20gFlIx0QH+mAopEOGBM5IHrgUI8HjbmF8PEfz+1e+so1D9b1Xt1w9KzZe5bc0faBnkW9O7/wo55z/nL1Cws/nZf/NxWW/8NTMTa1GWr9fxCu/09/r2Fm/X9jWKiMFLrCQiJ6x4BE+BypsHtn+ByViXSPgYmZAgAAALynhZ8LFI3yPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/sHfvcVJVd4LATzf9oJum6YgBY4ygRkR3aZomGEQcUXRXo4tNJKtjhtAIjXZoAwq4YsyKr3GV6GLUmBjZwY+jJg6r+CDqRIXoiElGJfE5Kz4HnciqS9BR45gs++m+dYqqW112IaC0+/3+0XWqfud569F17r11LgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/P/hsiX3Nrw58H9965ffW/f697409TdTD9m8y19uqHt3yDlPbT5ocN0tbw1asPCNtklnXtsyffk1G1YuDaGlq1xZUrzsoUHl5aP/cMxdt13xcNO0wVPOrcrUm4mHfp1/yjN3Loytvto/hLvLQqhIB0bUJYHKzP26WN8edSF8LmwJZEu01SYl0g2Hh2tCWBa2BLJV3VsTQl1OYMoTD666rDNxVU0I+4YQqtNtvFCdtFGTDgyrSgK16cCciiTw/uZENnBPeRKArVHV3YPxzZB90a9oyc/Q0H1lRV5/lR+3czuZ9PD6xERD8XxvHbaDO5Wj4Lls2aanrduXBttdwdtjtXdbL3i3FWznJZ623C9SmW8om7eEqkP5zLZZ0xd0zI+PlIfGxj7FatpBz/O6TefM2Jp0r3kdxg40bJfX4QO1k+ove3viwStP/uPp+85fO3Vbu/lczibNTe9o1SHzmus1z2M04dP7PNm8LYW3r539aSv4ljTUl64QwvF/+nzZM3Ne2n3jB6+eOPH2Fy6+etrCa6ZMfHbQL8b+47W73D3t8oL5f8NHz//jyznelufljq1+WJ/MzeMjdTGxsT6ZmwMAAECv0Rv2mn519KsvnfrQ3YteXH5cxXfH/eqk3eorzv5+x/G7rhz/xUuvbH98l4L5/9DSjv/HQ/51uaNdHcKErsQFA0LYrevxJPCz2J2TB4SwV1eqJT9wWCqwOoQvdCX2z1aVKtE3lhiaCvy+PhOYkAqsiYGWVODGGFiSClwYAytSgRkxsDoVODwGQnv+OA6oz4yj5EBNDLQmG3FFPAvhnfrYWmpbrctWBQAAsJ1kZoeV+XdzznXY1gxxermipqcM8QzsohmqUzWkZ7DZaVXRGip6qqG8pxqy41700cMvqLmsp5oLTsMoy8/w4ZDvlA+YuPeP7rpxxE3NL0787rtjj//Kn998d/X+//Tf7zln/nUHFMz/mz56/l/dTUfKCo7/hzC562/MXZ6JdGTjrS15GQAAAIBtcNVjS5+84YCj/s99L99355euvaF89dVf/7+vbLxg71HHDS/r+3ffXlEw/59Q2vn/cZ9In5zM4dG4G2L2gBCa8gNJtQcXBpKj3v0yAQAAAOgNssfjs8fC2zO3ySna6fl0Yf6WrcwfD/xP6Db/5Zv++tkvX/vkiQuH7bPhiv925gdlnx/7u12OXTvy8bf2HPYPDX0Lz/9vKe38/9r826QTa2IvrhwQQt+cwCOxl52BLkNj4OVD8wOZ8a+JG2BxrCpzYkK2qsWxRGsMNKUCy4qV+G22xG75gcyTlW38guw42jMlcgIAAADwiYu7A+Jx+Xj+/z2TD/jS/oNeGvPinvcufG3C0hNOrf3hPrfs+vqAjkljDpxwyBHPFMz/W7fu/P+ueXDB6f0d/UIYWRFCn/QPAx6tTRYGjIG6skzi/tqkrj7pqs6rDWF858DSVb2SWf+/Ir3G4BM1SVUxsNveP900rDNxQ00II3MDz3zz+jGdifmpQLbxb9SEMKRztOnGV/ZNGq9MN35N3xD2zAlkqzq5bwidjVWlq3qwOnMdg3RVt1WHMDAnkK3qwOoQFgYAeqn4r3Rm7oPzFp49e3pHR9sZOzAR9+HXhFntHW2NM+Z0zKwu0qeZqT7nLWN0XuGYSr3yzfOZJYqmDrl9eCnp7O8Em3LbyuzHLzhxMHM/fheq7Bpnc2Xe3dHpIQ/fp7CJkPNNqtiQy3fwkGtzK9nyJBbUH/NXhX6h74J5bWc0njV9/vwzRiV/S83enPyNh5mSbTUqva1qu+tbCS+PoqtlpXzcbbVfbiUj5582d+S8hWePaD9t+iltp7R9p3nsqObmMV8dO6Z5ZOeompK/PQx1v+6qTg118/Uljms7DnX3ipxKPolPDQkJid6WmL6k7PwJ0359/7f2WHPaWSft8fd7zBxx0l9d/pu5JzYeMvlX1//l2oL5/9yPnv/HT534yZ9Zn6HY8f+GeJg/eXzLYf7WGFhW6vH/hmJH87MnBgxNBRbFwCKH+QEAAPhsiLsj497MuFf6urp/uvvImTMOef+XJ0y5+m/Hjjv1rPX7Nlx89bFL/sP6d5asOuLtgvn/otJ+/7+d1v/PLl3/tWLL/O8fSzQVW/8/vcx/dv3/RcXW/08v859d/3/Zp7D+/4JsILVJ3rH+PwAA8Fnwya3/3+Py/ukLBBRk6HF5//QFAgoy9LiMf6kXCNjq9f/ndPxF7aDL54w7dMTcHz+yau8lA2/70vMTf73P0oNG3LvylvdG3Vow/19S2vzfwv0AAACw83jol32/ffG7w+5/6pH3jyy79Lcbbzr+r9oOOOQPA5tPmXx0zfdv+reC+f+y0ub/n/z6f6HY+f9DiwVaii0MaP0/AAAAeqli6//dPPDloavnj7jxsZ+/ectLrb+YOf61f7fkB1+ZPqzp5jXrftMwY33B/H9FafP/eNpFeV7u2JsP65M17UJ6TbuN9dmfDAAAAEDvUB4aGytLzJu3MuphH7/NdZmlQD8qnevp+watWlD+0FVl1Rt/cMm0QxrPPfbMOUdetP77tU/+pHZqY/UZBfP/1aXN//N+l/FA7aT6y96eePCHK0/+4+n7zl87dcvxfwAAAGDHKXW/BAAAAAAAAAAAAAAA8Ol7qnXpQR+MOvqNmXuN+tM3jn3hB4u/+M1H/ubaP5/588Pv26t987ApBb//D5O7yhX7/X+87l/8fcGuebljqz2v/5e5P+WYWxd2LVn4aH0I++QGZp8/+3Mhc23+/XIDq6buP7gzcX66xH0vHv5aZ2JaOnDUiF3e60yMTwVa4yKJX0gH4lUV3+ufCsTlFZ9MB+L2WJEOVGUCl/RPxlGW3lYb6pJtVZbeVs/VhTAgJ5DdVnfXJW2UpQd4VSqQHeDp6UAc4KRMoDzdq1v7Jb2KgbpY9G/6Jb0CAGCnFb8FVoZZ7R1tTfErfLzdvSL/Nspbsuy8wmrLSmz++czSZFOH3D68lHSf9HfRLdcarwzVnUMYVfB1NTdLWdcot08tPWy6XYsMuafV3sqLlEvb2k1XVXxENcmIGmfM6ZhZ2ePAR/ecpbmixyyjCiY7uVnKuzZpCbWU0JcSRlTitimhy/F+eWhs7JPKNS4GG0Kenl4Rpf5eP3edv2Kvgtw8f1tz7aV9Bvd5/9/GX/TQgwMqO06d3HbR7o/988BRM3/8wwdbr/l9wfy/obT5f3XuuN7LXAxgUbyy3sEDQmgtcUQAAADw2fc/z11+x4lz1myYtbri2d/9bnb5cSdWbj7nrnPOvui5+xcfdcm/v3lb4yvKntp04hubzvrrN37ylesePuulw2ecddekdYesb6u+8bt/sfzUIQXz/6Glzf/jHqzMoeBkb8fqeP3/CwaE0HVp/YYk8LM43JMHhLBXV6ollkguqP+1WKIpCfws7jDZP5Zobcmvqm8MrEgFfl+fCaxOBdbEQGYvxU9DZlfOFfUhjOlKTc4vMTeWaEgFjouBoalAYww0pQL9Y2BCKvBm/0ygJRX4xxgI7fnb6s7+mW0FAACwNTLzrMr8uyE9z1tR0VOGsp4y1PaUobynDNU9ZSg2inj/jpihMnXySllOpsp0rTWpWgoyxIvhb3W/CjKE3+bnTBcsaDqef5A936AsP8O4H97RetDX5v1408U/evzIAy88csmVb196dL/BVz77v9vP7dd/U23B/L+ptPl/bf5t0vqaOP/fcv2/JPBI7N6V8dTxoTHw8qH5gcyOgTVxsrs4W1VLpkRm0r44lpgQA0NTgbkxMCEVaJ2cCSwbnB/IzLSzjV+Qbbw9UyInAAAAAJ+4uIMg7qaJ8/+V48I7exz5fvPuVw6cO+7xR847YnrNrtU1/zx+7dLxl1Y/tF/fgvn/hNLm/7G9frmNXRh782r/EO4u29KbbGBEXRKI+zHq4s/j96gL4XM5OziyJdpqkxJVqYbDwzXJL9Sr0lXdW5OsMRDvT3niwVWXdSauqglh35y9L9k2XqhO2qhJB4ZVJYHadGBORRKIe36ygXvKkwBss+xewfiCypzqktXQfbkir7/PyjVB08Mr2AfaTb7ufnO1o1SnH8jsU83auqetoDp2iIK3x2rvtt74bmvwbsv9IpX5hrJ5S6g6lM9smzV9Qcf8+EjuL1kL7KDnOfdXqqWkt8PrcNHH723PqtMdaEp9fDR1X67712FZrO6B2kn1l7098eCVJ//x9H3nr51acjeKiD8UPvjWuQc8l7N5d7TqkHnN9brPkxafJ73x38BQT1sIYfkFs5584l/ef75iffN/OXDs8tvefGz5Tw56YNaIL2y45Msb33r3qIL5f0tp8/+K1G2XD+LGnDcghOE5G/fRuPknDkg+B3MCyafkwMJAcsh9fX3RT04AAADY3rK7O7L7C9ozt8kJ4el5cmH+lq3MH/dXTOg2f6n9HjjmH7536FWvf+Pr63e//NGlT637T2++csS0Qx/Y9PSKla83H/v5pwvm/60fPf/vm+qm4/+O/7ODOP7frZ19V3Tf9AOLtmlXdEF17BCO/3drZ3+3Of7fLcf/Hf/vjuP/PXD8v1s7+9NW8C1pri9dIYTWATfc/ova6cP7XXHOt2as/fnT7zSNe6Hu3KPv/B+HLw7XnLfqzwXz/7mlzf+t/9f9on3Z9f9ai63/N7fY+n+LrP8HAADsUEUWmkvP8wpW7yvIkF69ryBDjwsE9rjEoPX/tnr9v9qTzj7plfq39rpm4u3/+c7pFz5/0onP7tvn+RNuP+GmkVcPf+nLGwrm/4tKm//Hl0O/3NZ7y/p/QycXqWpJDMy1MCAAAAA7o2I7CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPh0rXhw8Rc3L97noJue/fxNh//rsjWz9v7VAZtHjzm5cfjigWVX/t2/vDVowcI32iadeW3L9OXXbFi5NIT2rnJlSfGyhwaVl4/+wzF33XbFw03TBk85tzpTb2Xm9ot5uWOrH9aHsCznkbqY2FjfeWdLYMoxty6s6Ew8Wh/CPrmB2efP/lxn4sb6EPbLDayauv/gzsT56RL3vXj4a52JaenAUSN2ea8zMT4TKEt397r+SXfL0t29rH8IA3IC2e5+u39+Vdk2/mMmUJ5u4+a6pI0YqItFf1SXtBEDHbFEe98QRlaE0Cdd1a+rk6r6pKv6++qkqj7pqv5rdQjjQwgV6aperEqqqkiPfG1VUlUM7Lb3TzcN60wsqwphZG7gmW9eP6YzcXoqkG3861UhDOl8yaQbv6Myabwy3fhVlSHsGUKoSpf414qkRFW6xCsVIQzMCWQbP7UihIWBz4T44TMz98F5C8+ePb2jo+2MHZioyrRVE2a1d7Q1zpjTMbM61adiynLSm8/7+GN/ftM5Mzpvpw65fXgp6YpMucquLjdX5t0dvbP3PvarNreSLc9HQf0xf1XoF/oumNd2RuNZ0+fPP2NU8rfU7M3J3z6ZaLKtRvWWbbVfbiUj5582d+S8hWePaD9t+iltp7R9p3nsqObmMV8dO6Z5ZOeompK/22Oo13/yQ929IqeST+IDQEJCorclyvM+3Zp29g/ygi/6WzpaGaq7PqALphW5Wcq6Rrk9Bn3Yxxzxx/me0uOIRhVMHAqyNPecZXTBZGJLlpokS9f3uoLJYW5N5V2bNN4vD42NfYpth4b8u7mb961t2LzrMpuu1DQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPD/2IEDAQAAAAAg/9dGqKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsIOHAgAAAAAAPm/NkJVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVUVduBYAAAAAECYv3UYPRsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAlwIAAP//WKHPZA==") truncate(0x0, 0x4000) syz_usb_connect(0x1, 0x36, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x64942, 0x0) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r1, &(0x7f0000000240)=[{0x0}], 0x1, 0x2000, 0x0, 0x3) sendfile(r0, r0, 0x0, 0x1000200201005) 1.784298856s ago: executing program 5 (id=1494): unshare(0x6a040000) 1.724221377s ago: executing program 2 (id=1495): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x4, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x4000042, 0x83f}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10, 0x0}, 0x0) 1.513709712s ago: executing program 2 (id=1496): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002140)={'wlan0\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r0, 0x0, 0x80) 1.407915952s ago: executing program 2 (id=1497): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) write$tun(0xffffffffffffffff, 0x0, 0x38) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, &(0x7f00000000c0)=""/9, &(0x7f0000000100)=0x9) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000800), 0xffffffffffffffff) r3 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') unshare(0x24020400) socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r3}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x24}}, 0x0) 1.247758756s ago: executing program 7 (id=1498): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @loopback}, @in6={0xa, 0x0, 0x0, @private0}], 0x38) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000080), &(0x7f0000000140)=0x8) 1.197893918s ago: executing program 5 (id=1499): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000000)={0x1, 0x4, 0x8203, 0x8bac, 0xb, 0x8, 0x4, 0x6}, &(0x7f0000000080)=0x20) 1.044918s ago: executing program 2 (id=1500): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000400)=[{0x28, 0x0, 0x0, 0x800}, {0x6, 0x7, 0x0, 0x6}]}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) bind$packet(r1, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) r2 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bind$packet(r2, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) syz_emit_ethernet(0x82, &(0x7f0000000680)=ANY=[], 0x0) 953.048748ms ago: executing program 5 (id=1501): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000008dc0)={0x0, 0x0, &(0x7f0000008cc0)=[{&(0x7f0000008a40)="7c72bf03f7d9c0fd0826786ffcfb99e55c1272594d5be5c7f1de9562bbf652", 0x1f}, {&(0x7f0000008c80)}], 0x2}, 0x0) setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f0000000080)=0x7, 0x4) 210.632851ms ago: executing program 5 (id=1502): connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) 210.469609ms ago: executing program 7 (id=1503): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000000b8a60000000500060001000000050002"], 0x3c}}, 0x0) 209.798889ms ago: executing program 2 (id=1504): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/uts\x00') syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r0 = socket(0x8, 0x6, 0xfffffffd) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0)=[{{0x3, 0x1, 0x1}, {0x3, 0x1, 0x1}}, {{0x4, 0x1, 0x0, 0x1}, {0x2, 0x1, 0x0, 0x1}}, {{0x4, 0x1, 0x1, 0x1}, {0x3, 0x1, 0x1, 0x1}}], 0x18) recvmmsg(r0, &(0x7f00000037c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f00000000000000000000000000009368a9d233420c836ad07a7adb6d8d13af89d182584d70f83db727"], 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) 32.058178ms ago: executing program 5 (id=1505): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000000800000042"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x102}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xd, 0x0, &(0x7f0000000080)="4b97a4c480f2595209562d48ef", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 0s ago: executing program 7 (id=1506): sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[@ANYBLOB="20000000051421060000000000000000080001"], 0x20}, 0x1, 0x0, 0x0, 0x40c4}, 0x0) kernel console output (not intermixed with test programs): .726245][ T5833] BTRFS error (device loop0 state A): Transaction aborted (error -5) [ 123.734663][ T5833] BTRFS: error (device loop0 state A) in __btrfs_free_extent:3205: errno=-5 IO failure [ 123.771027][ T5833] BTRFS info (device loop0 state EA): forced readonly [ 123.790644][ T5833] BTRFS error (device loop0 state EA): failed to run delayed ref for logical 5255168 num_bytes 4096 type 176 action 2 ref_mod 1: -5 [ 123.796192][ T6573] netlink: 16 bytes leftover after parsing attributes in process `syz.1.166'. [ 123.823753][ T5833] BTRFS: error (device loop0 state EA) in btrfs_run_delayed_refs:2154: errno=-5 IO failure [ 123.840536][ T6555] loop3: detected capacity change from 0 to 32768 [ 123.937538][ T6555] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 124.217503][ T5833] BTRFS info (device loop0 state EA): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 124.315545][ T5840] ocfs2: Unmounting device (7,3) on (node local) [ 124.319644][ T6564] loop5: detected capacity change from 0 to 32768 [ 124.581856][ T5947] usb 5-1: USB disconnect, device number 3 [ 124.685645][ T6589] 8021q: VLANs not supported on vcan0 [ 124.981048][ T6597] loop2: detected capacity change from 0 to 128 [ 125.057896][ T6597] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 125.103938][ T6606] netlink: 24 bytes leftover after parsing attributes in process `syz.0.177'. [ 125.201767][ T6566] netlink: 80 bytes leftover after parsing attributes in process `syz.4.162'. [ 125.300271][ T6597] ext4 filesystem being mounted at /35/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 125.354258][ T30] audit: type=1804 audit(1743480056.788:12): pid=6597 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.175" name="/newroot/35/mnt/bus" dev="loop2" ino=12 res=1 errno=0 [ 125.655056][ T5841] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 126.483032][ T6633] IPVS: Unknown mcast interface: syzkaller0 [ 126.732956][ T6618] loop0: detected capacity change from 0 to 32768 [ 126.742024][ T6618] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.182 (6618) [ 126.764532][ T6618] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 126.766859][ T6620] loop2: detected capacity change from 0 to 32768 [ 126.782062][ T6618] BTRFS info (device loop0): using sha256 (sha256-ni) checksum algorithm [ 126.824311][ T6620] BTRFS: device /dev/loop2 (7:2) using temp-fsid 47e2bb5b-2862-49f3-8d8e-c123441ac771 [ 126.847863][ T6620] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.181 (6620) [ 126.870634][ T6656] netlink: 24 bytes leftover after parsing attributes in process `syz.4.191'. [ 126.900837][ T6620] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 126.915335][ T6618] BTRFS info (device loop0): rebuilding free space tree [ 126.930899][ T6620] BTRFS info (device loop2): using sha256 (sha256-ni) checksum algorithm [ 126.978592][ T6618] BTRFS info (device loop0): disabling free space tree [ 126.995993][ T6618] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 127.046550][ T6618] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 127.058394][ T6670] loop1: detected capacity change from 0 to 128 [ 127.134497][ T6670] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 127.156829][ T6620] BTRFS info (device loop2): rebuilding free space tree [ 127.219295][ T6670] ext4 filesystem being mounted at /38/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 127.220604][ T6637] loop5: detected capacity change from 0 to 32768 [ 127.283912][ T6620] BTRFS info (device loop2): disabling free space tree [ 127.319230][ T6620] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 127.340834][ T30] audit: type=1800 audit(1743480058.758:13): pid=6618 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.182" name="bus" dev="loop0" ino=263 res=0 errno=0 [ 127.346919][ T6620] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 127.390763][ T6678] BTRFS error (device loop0): balance: mixed groups data and metadata options must be the same [ 127.422410][ T30] audit: type=1800 audit(1743480058.758:14): pid=6618 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.182" name="bus" dev="loop0" ino=263 res=0 errno=0 [ 127.468088][ T30] audit: type=1804 audit(1743480058.828:15): pid=6678 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.182" name="/newroot/28/bus/file1" dev="loop0" ino=260 res=1 errno=0 [ 127.512424][ T30] audit: type=1804 audit(1743480058.838:16): pid=6670 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.193" name="/newroot/38/mnt/bus" dev="loop1" ino=12 res=1 errno=0 [ 127.572408][ T30] audit: type=1800 audit(1743480058.988:17): pid=6620 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.181" name="bus" dev="loop2" ino=263 res=0 errno=0 [ 127.647930][ T5845] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 127.667170][ T30] audit: type=1800 audit(1743480058.998:18): pid=6620 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.181" name="bus" dev="loop2" ino=263 res=0 errno=0 [ 127.898844][ T5841] BTRFS info (device loop2): last unmount of filesystem 47e2bb5b-2862-49f3-8d8e-c123441ac771 [ 128.310105][ T6698] netlink: 12 bytes leftover after parsing attributes in process `syz.4.202'. [ 128.468310][ T5833] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 128.521206][ T6705] netlink: 8 bytes leftover after parsing attributes in process `syz.4.202'. [ 128.656995][ T6710] netlink: 24 bytes leftover after parsing attributes in process `syz.5.206'. [ 128.745768][ T6712] loop2: detected capacity change from 0 to 128 [ 128.817304][ T6712] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 128.909253][ T6712] ext4 filesystem being mounted at /38/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 128.975260][ T47] IPVS: starting estimator thread 0... [ 129.036028][ T30] audit: type=1804 audit(1743480060.468:19): pid=6712 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.207" name="/newroot/38/mnt/bus" dev="loop2" ino=12 res=1 errno=0 [ 129.115925][ T6721] IPVS: using max 24 ests per chain, 57600 per kthread [ 129.228574][ T5841] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 129.612604][ T6740] netlink: 36 bytes leftover after parsing attributes in process `syz.5.215'. [ 129.933918][ T6722] loop4: detected capacity change from 0 to 32768 [ 129.945180][ T6749] Zero length message leads to an empty skb [ 130.213600][ T6764] netlink: 24 bytes leftover after parsing attributes in process `syz.2.222'. [ 130.600696][ T6745] loop0: detected capacity change from 0 to 32768 [ 130.648054][ T6745] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.218 (6745) [ 130.732547][ T6745] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 130.785628][ T6745] BTRFS info (device loop0): using sha256 (sha256-ni) checksum algorithm [ 130.867811][ T10] IPVS: starting estimator thread 0... [ 130.954936][ T6745] BTRFS info (device loop0): rebuilding free space tree [ 130.995973][ T6790] IPVS: using max 27 ests per chain, 64800 per kthread [ 131.077124][ T6745] BTRFS info (device loop0): disabling free space tree [ 131.117488][ T6745] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 131.159690][ T6745] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 131.246358][ T30] audit: type=1800 audit(1743480062.678:20): pid=6745 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.218" name="bus" dev="loop0" ino=263 res=0 errno=0 [ 131.322934][ T6808] BTRFS error (device loop0): balance: mixed groups data and metadata options must be the same [ 131.344056][ T30] audit: type=1800 audit(1743480062.678:21): pid=6745 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.218" name="bus" dev="loop0" ino=263 res=0 errno=0 [ 131.421809][ T30] audit: type=1804 audit(1743480062.758:22): pid=6808 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.218" name="/newroot/31/bus/file1" dev="loop0" ino=260 res=1 errno=0 [ 131.672638][ T6818] netlink: 12 bytes leftover after parsing attributes in process `syz.4.238'. [ 131.682923][ T6771] loop1: detected capacity change from 0 to 32768 [ 131.708785][ T6771] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.227 (6771) [ 131.724902][ T6771] BTRFS info (device loop1): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 131.761270][ T6771] BTRFS info (device loop1): using crc32c (crc32c-x86_64) checksum algorithm [ 131.806355][ T6771] BTRFS info (device loop1): using free-space-tree [ 132.008754][ T6845] netlink: 24 bytes leftover after parsing attributes in process `syz.2.241'. [ 132.349586][ T5833] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 132.404409][ T6850] loop3: detected capacity change from 0 to 4096 [ 132.438202][ T5845] BTRFS info (device loop1): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 132.454376][ T6850] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 132.587303][ T6850] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 132.698133][ T30] audit: type=1800 audit(1743480064.138:23): pid=6850 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.246" name="bus" dev="loop3" ino=37 res=0 errno=0 [ 133.094878][ T6869] loop0: detected capacity change from 0 to 128 [ 133.146142][ T6869] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 133.172180][ T6871] warning: `syz.4.254' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 133.191424][ T6869] ext4 filesystem being mounted at /32/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 133.256284][ T6879] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 133.439206][ T5833] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 133.547585][ T6885] tun0: tun_chr_ioctl cmd 1074025675 [ 133.562858][ T6885] tun0: persist disabled [ 134.360622][ T6891] loop4: detected capacity change from 0 to 32768 [ 134.384994][ T6913] netlink: 68 bytes leftover after parsing attributes in process `syz.1.270'. [ 134.386476][ T6914] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.415044][ T6891] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.261 (6891) [ 134.495127][ T6914] bridge_slave_1 (unregistering): left allmulticast mode [ 134.509051][ T6891] BTRFS info (device loop4): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 134.525306][ T6914] bridge_slave_1 (unregistering): left promiscuous mode [ 134.546017][ T6891] BTRFS info (device loop4): using crc32c (crc32c-x86_64) checksum algorithm [ 134.554828][ T6891] BTRFS info (device loop4): using free-space-tree [ 134.561888][ T6914] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.605325][ T6918] loop0: detected capacity change from 0 to 128 [ 134.635652][ T6918] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 134.681723][ T6918] ext4 filesystem being mounted at /34/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 134.805752][ T6910] loop2: detected capacity change from 0 to 32768 [ 134.861578][ T5833] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 134.908438][ T5831] BTRFS info (device loop4): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 134.913312][ T6910] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.269 (6910) [ 134.965015][ T6938] loop1: detected capacity change from 0 to 764 [ 135.000730][ T6910] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 135.030759][ T6910] BTRFS info (device loop2): using crc32c (crc32c-x86_64) checksum algorithm [ 135.053098][ T6938] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 135.060803][ T6910] BTRFS info (device loop2): using free-space-tree [ 135.259639][ T6935] overlay: ./file0 is not a directory [ 135.302209][ T30] audit: type=1800 audit(1743480066.738:24): pid=6910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.269" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 135.471009][ T6910] syz.2.269 (6910) used greatest stack depth: 17544 bytes left [ 135.565662][ T5841] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 135.775434][ T6982] netlink: 68 bytes leftover after parsing attributes in process `syz.3.286'. [ 136.064736][ T6953] loop0: detected capacity change from 0 to 32768 [ 136.086192][ T6988] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.097992][ T6953] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.281 (6953) [ 136.148309][ T6988] bridge_slave_1 (unregistering): left allmulticast mode [ 136.160438][ T6988] bridge_slave_1 (unregistering): left promiscuous mode [ 136.169960][ T6988] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.177363][ T6953] BTRFS info (device loop0): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 136.187734][ T6953] BTRFS info (device loop0): using crc32c (crc32c-x86_64) checksum algorithm [ 136.197645][ T6953] BTRFS info (device loop0): using free-space-tree [ 136.878113][ T6990] loop3: detected capacity change from 0 to 32768 [ 136.903571][ T6990] BTRFS: device /dev/loop3 (7:3) using temp-fsid 8558f940-697f-4360-bd5b-4c111f666d16 [ 136.923459][ T6990] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.291 (6990) [ 136.992531][ T6990] BTRFS info (device loop3): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 137.024063][ T6990] BTRFS info (device loop3): using crc32c (crc32c-x86_64) checksum algorithm [ 137.027952][ T5833] BTRFS info (device loop0): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 137.094175][ T6990] BTRFS info (device loop3): using free-space-tree [ 137.465321][ T5840] BTRFS info (device loop3): last unmount of filesystem 8558f940-697f-4360-bd5b-4c111f666d16 [ 137.531125][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 137.577479][ T7044] loop4: detected capacity change from 0 to 4096 [ 137.617690][ T7044] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 137.824639][ T7044] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 137.932013][ T30] audit: type=1800 audit(1743480069.368:25): pid=7044 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.301" name="bus" dev="loop4" ino=37 res=0 errno=0 [ 138.039866][ T7022] loop5: detected capacity change from 0 to 32768 [ 138.087053][ T7022] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.296 (7022) [ 138.140422][ T7022] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 138.171890][ T7022] BTRFS info (device loop5): using crc32c (crc32c-x86_64) checksum algorithm [ 138.216811][ T7022] BTRFS info (device loop5): using free-space-tree [ 138.247314][ T7056] netlink: 68 bytes leftover after parsing attributes in process `syz.3.303'. [ 138.504303][ T30] audit: type=1800 audit(1743480069.928:26): pid=7022 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.296" name="file1" dev="loop5" ino=260 res=0 errno=0 [ 138.637728][ T7050] loop0: detected capacity change from 0 to 32768 [ 138.678714][ T5853] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 138.758547][ T7050] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 138.989931][ T7050] XFS (loop0): Ending clean mount [ 139.016653][ T7050] XFS (loop0): Quotacheck needed: Please wait. [ 139.096718][ T7050] XFS (loop0): Quotacheck: Done. [ 139.204923][ T30] audit: type=1804 audit(1743480070.638:27): pid=7050 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.298" name="/newroot/37/file0/bus" dev="loop0" ino=9291 res=1 errno=0 [ 139.332308][ T5833] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 139.359695][ T5947] XFS (loop0): metadata I/O error in "xfs_buf_ioerror_alert_ratelimited+0x7b/0x1e0" at daddr 0x0 len 1 error 5 [ 139.390701][ T5947] XFS (loop0): Metadata I/O Error (0x1) detected at xfs_buf_ioend_handle_error+0x806/0xda0 (fs/xfs/xfs_buf.c:1136). Shutting down filesystem. [ 139.408853][ T7083] loop1: detected capacity change from 0 to 32768 [ 139.410733][ T5947] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [ 139.442523][ T7083] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.309 (7083) [ 139.494815][ T7083] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 139.522960][ T7083] BTRFS info (device loop1): using sha256 (sha256-ni) checksum algorithm [ 139.703592][ T7083] BTRFS info (device loop1): rebuilding free space tree [ 139.769980][ T7083] BTRFS info (device loop1): disabling free space tree [ 139.797996][ T7083] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 139.838671][ T7083] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 139.892931][ T7123] tun0: tun_chr_ioctl cmd 1074025675 [ 139.900015][ T7123] tun0: persist disabled [ 139.916013][ T5947] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 139.958031][ T30] audit: type=1800 audit(1743480071.398:28): pid=7083 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.309" name="bus" dev="loop1" ino=263 res=0 errno=0 [ 140.005593][ T7083] BTRFS error (device loop1): balance: mixed groups data and metadata options must be the same [ 140.007170][ T30] audit: type=1800 audit(1743480071.418:29): pid=7083 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.309" name="bus" dev="loop1" ino=263 res=0 errno=0 [ 140.094860][ T5947] usb 4-1: New USB device found, idVendor=0a5c, idProduct=bd1f, bcdDevice=53.1a [ 140.100995][ T30] audit: type=1804 audit(1743480071.438:30): pid=7083 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.309" name="/newroot/62/bus/file1" dev="loop1" ino=260 res=1 errno=0 [ 140.150049][ T5947] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.158541][ T5947] usb 4-1: Product: syz [ 140.165037][ T5947] usb 4-1: Manufacturer: syz [ 140.180050][ T5947] usb 4-1: SerialNumber: syz [ 140.204592][ T5947] usb 4-1: config 0 descriptor?? [ 140.437929][ T7115] loop3: detected capacity change from 0 to 8 [ 140.463796][ T7115] SQUASHFS error: zlib decompression failed, data probably corrupt [ 140.488819][ T7115] SQUASHFS error: Failed to read block 0x9b: -5 [ 140.505383][ T7115] SQUASHFS error: Unable to read metadata cache entry [99] [ 140.524306][ T7115] SQUASHFS error: Unable to read inode 0x127 [ 140.751019][ T5845] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 141.097398][ T7158] netlink: 24 bytes leftover after parsing attributes in process `syz.0.330'. [ 141.837382][ T7146] loop5: detected capacity change from 0 to 32768 [ 143.093368][ T7182] loop0: detected capacity change from 0 to 32768 [ 143.184796][ T7180] loop1: detected capacity change from 0 to 32768 [ 143.229905][ T7189] loop2: detected capacity change from 0 to 512 [ 143.285738][ T7180] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.339 (7180) [ 143.302775][ T7189] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 143.358931][ T7180] BTRFS info (device loop1): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 143.414094][ T7180] BTRFS info (device loop1): using crc32c (crc32c-x86_64) checksum algorithm [ 143.440997][ T7189] EXT4-fs (loop2): 1 orphan inode deleted [ 143.447057][ T7180] BTRFS info (device loop1): using free-space-tree [ 143.455413][ T7189] EXT4-fs (loop2): 1 truncate cleaned up [ 143.469361][ T7189] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.801494][ T7202] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 143.885884][ T7202] EXT4-fs (loop2): Remounting filesystem read-only [ 143.893013][ T7187] loop4: detected capacity change from 0 to 32768 [ 144.059810][ T5841] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.260850][ T5845] BTRFS info (device loop1): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 144.862174][ T7204] loop5: detected capacity change from 0 to 32768 [ 146.104231][ T7247] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.307275][ T7247] bridge_slave_1 (unregistering): left allmulticast mode [ 146.314380][ T7247] bridge_slave_1 (unregistering): left promiscuous mode [ 146.348284][ T7247] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.858062][ T7233] loop0: detected capacity change from 0 to 32768 [ 147.437440][ T7261] loop2: detected capacity change from 0 to 32768 [ 147.741984][ T7281] netlink: 12 bytes leftover after parsing attributes in process `syz.0.372'. [ 148.778528][ T7291] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.886661][ T7278] loop5: detected capacity change from 0 to 512 [ 148.916610][ T7291] bridge_slave_1 (unregistering): left allmulticast mode [ 148.952063][ T7291] bridge_slave_1 (unregistering): left promiscuous mode [ 148.966205][ T7291] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.431264][ T7305] netlink: 24 bytes leftover after parsing attributes in process `syz.0.379'. [ 149.472671][ T5938] usb 4-1: USB disconnect, device number 3 [ 149.946389][ T7286] loop4: detected capacity change from 0 to 32768 [ 149.967838][ T7286] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.373 (7286) [ 150.024501][ T7286] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 150.080832][ T7286] BTRFS info (device loop4): using sha256 (sha256-ni) checksum algorithm [ 150.106073][ T7286] BTRFS info (device loop4): using free-space-tree [ 151.374567][ T7307] loop5: detected capacity change from 0 to 32768 [ 151.385551][ T5831] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 151.862078][ T7317] loop2: detected capacity change from 0 to 32768 [ 151.903365][ T7317] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.384 (7317) [ 151.958225][ T7317] BTRFS info (device loop2): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 152.030137][ T7317] BTRFS info (device loop2): using crc32c (crc32c-x86_64) checksum algorithm [ 152.058213][ T7317] BTRFS info (device loop2): using free-space-tree [ 152.236629][ T7321] loop1: detected capacity change from 0 to 32768 [ 152.447210][ T7376] netlink: 24 bytes leftover after parsing attributes in process `syz.4.394'. [ 152.650798][ T5841] BTRFS info (device loop2): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 153.261057][ T7396] loop1: detected capacity change from 0 to 2048 [ 154.073589][ T7396] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 154.529418][ T7386] loop4: detected capacity change from 0 to 32768 [ 154.544765][ T7416] UDF-fs: error (device loop1): udf_read_inode: (ino 1345) failed !bh [ 154.617713][ T7386] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.400 (7386) [ 154.783678][ T7386] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 154.803813][ T7386] BTRFS info (device loop4): using sha256 (sha256-ni) checksum algorithm [ 154.845982][ T7386] BTRFS info (device loop4): using free-space-tree [ 155.108307][ T7393] loop0: detected capacity change from 0 to 32768 [ 155.291694][ T7386] BTRFS warning (device loop4): failed to trim 1 device(s), last error -512 [ 155.360917][ T5831] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 155.419267][ T7415] loop5: detected capacity change from 0 to 32768 [ 155.691497][ T7418] loop3: detected capacity change from 0 to 32768 [ 155.785427][ T7442] netlink: 24 bytes leftover after parsing attributes in process `syz.4.412'. [ 155.852457][ T7420] loop2: detected capacity change from 0 to 32768 [ 155.890913][ T7420] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.410 (7420) [ 155.975945][ T7420] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 155.988795][ T7420] BTRFS info (device loop2): using sha256 (sha256-ni) checksum algorithm [ 156.211536][ T7420] BTRFS info (device loop2): rebuilding free space tree [ 156.373838][ T7420] BTRFS info (device loop2): disabling free space tree [ 156.426007][ T7420] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 156.435681][ T7420] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 156.588932][ T30] audit: type=1800 audit(1743480088.028:31): pid=7420 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.410" name="bus" dev="loop2" ino=263 res=0 errno=0 [ 156.890871][ T5841] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 157.786322][ T7503] netlink: 24 bytes leftover after parsing attributes in process `syz.1.429'. [ 158.200406][ T7511] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.252039][ T7497] loop0: detected capacity change from 0 to 32768 [ 158.327914][ T7511] bridge_slave_1 (unregistering): left allmulticast mode [ 158.335035][ T7511] bridge_slave_1 (unregistering): left promiscuous mode [ 158.355962][ T7511] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.444644][ T7494] loop4: detected capacity change from 0 to 32768 [ 158.484753][ T7494] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.425 (7494) [ 158.521008][ T7491] loop5: detected capacity change from 0 to 32768 [ 158.559420][ T7494] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 158.592488][ T7494] BTRFS info (device loop4): using sha256 (sha256-ni) checksum algorithm [ 158.730580][ T7494] BTRFS info (device loop4): rebuilding free space tree [ 158.837952][ T7512] loop2: detected capacity change from 0 to 32768 [ 158.854223][ T7494] BTRFS info (device loop4): disabling free space tree [ 158.879412][ T7512] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.428 (7512) [ 158.880869][ T7494] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 158.921820][ T7494] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 158.955667][ T7512] BTRFS info (device loop2): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 158.989901][ T7512] BTRFS info (device loop2): using crc32c (crc32c-x86_64) checksum algorithm [ 159.009367][ T7512] BTRFS info (device loop2): using free-space-tree [ 159.031760][ T30] audit: type=1800 audit(1743480090.448:32): pid=7494 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.425" name="bus" dev="loop4" ino=263 res=0 errno=0 [ 159.034875][ T7494] BTRFS error (device loop4): balance: mixed groups data and metadata options must be the same [ 159.139294][ T30] audit: type=1804 audit(1743480090.468:33): pid=7494 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.425" name="/newroot/83/bus/file1" dev="loop4" ino=260 res=1 errno=0 [ 159.176315][ T7551] 8021q: VLANs not supported on vcan0 [ 159.249536][ T7491] loop5: detected capacity change from 0 to 4096 [ 159.495159][ T5841] BTRFS info (device loop2): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 159.872154][ T7571] netlink: 24 bytes leftover after parsing attributes in process `syz.5.444'. [ 160.230982][ T5831] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 160.287905][ T10] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 160.473354][ T10] usb 2-1: New USB device found, idVendor=0a5c, idProduct=bd1f, bcdDevice=53.1a [ 160.494316][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.527969][ T10] usb 2-1: Product: syz [ 160.543621][ T10] usb 2-1: Manufacturer: syz [ 160.553378][ T10] usb 2-1: SerialNumber: syz [ 160.574366][ T7580] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.583582][ T10] usb 2-1: config 0 descriptor?? [ 160.602659][ T7578] loop0: detected capacity change from 0 to 764 [ 160.671267][ T7578] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 160.717701][ T7580] bridge_slave_1 (unregistering): left allmulticast mode [ 160.736562][ T7580] bridge_slave_1 (unregistering): left promiscuous mode [ 160.757732][ T7578] overlay: ./file0 is not a directory [ 160.765168][ T7580] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.236078][ T7598] 8021q: VLANs not supported on vcan0 [ 162.866360][ T0] NOHZ tick-stop error: local softirq work is pending, handler #102!!! [ 162.876236][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 163.651741][ T7583] loop3: detected capacity change from 0 to 32768 [ 163.772079][ T7613] loop0: detected capacity change from 0 to 512 [ 164.040134][ T10] usb 2-1: USB disconnect, device number 3 [ 164.285927][ T7617] loop0: detected capacity change from 0 to 128 [ 164.396574][ T7619] netlink: 24 bytes leftover after parsing attributes in process `syz.4.461'. [ 164.750383][ T7621] loop1: detected capacity change from 0 to 764 [ 164.781752][ T7621] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 164.867207][ T7621] overlay: ./file0 is not a directory [ 164.885654][ T7600] loop2: detected capacity change from 0 to 32768 [ 164.942343][ T7600] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.455 (7600) [ 165.008062][ T7600] BTRFS info (device loop2): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 165.035421][ T7602] loop5: detected capacity change from 0 to 32768 [ 165.052505][ T7600] BTRFS info (device loop2): using crc32c (crc32c-x86_64) checksum algorithm [ 165.094816][ T7626] loop4: detected capacity change from 0 to 2048 [ 165.106295][ T7600] BTRFS info (device loop2): using free-space-tree [ 165.155589][ T7626] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 165.209441][ T7600] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 165.482400][ T7600] BTRFS error (device loop2): open_ctree failed: -12 [ 165.668824][ T7655] UDF-fs: error (device loop4): udf_read_inode: (ino 1345) failed !bh [ 165.927006][ T7658] netlink: 12 bytes leftover after parsing attributes in process `syz.3.471'. [ 166.475760][ T7669] 8021q: VLANs not supported on vcan0 [ 167.444194][ T7662] loop1: detected capacity change from 0 to 32768 [ 167.474326][ T7662] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.472 (7662) [ 167.511246][ T7662] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 167.526340][ T7662] BTRFS info (device loop1): using sha256 (sha256-ni) checksum algorithm [ 167.577605][ T7690] netlink: 24 bytes leftover after parsing attributes in process `syz.4.476'. [ 167.688702][ T7662] BTRFS info (device loop1): rebuilding free space tree [ 167.730787][ T7694] loop0: detected capacity change from 0 to 764 [ 167.783853][ T7662] BTRFS info (device loop1): disabling free space tree [ 167.805123][ T7694] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 167.824344][ T7662] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 167.851807][ T7662] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 167.896350][ T7694] overlay: ./file0 is not a directory [ 167.930857][ T7665] loop3: detected capacity change from 0 to 32768 [ 167.972438][ T30] audit: type=1800 audit(1743480099.398:34): pid=7662 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.472" name="bus" dev="loop1" ino=263 res=0 errno=0 [ 168.132474][ T5845] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 168.432320][ T7711] loop2: detected capacity change from 0 to 764 [ 168.502644][ T7716] 8021q: VLANs not supported on vcan0 [ 168.522851][ T7711] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 168.689180][ T7719] Symlink component flag not implemented [ 168.695123][ T7719] Symlink component flag not implemented [ 168.757665][ T7719] Symlink component flag not implemented (128) [ 168.764241][ T7719] Symlink component flag not implemented (122) [ 168.933181][ T7725] loop5: detected capacity change from 0 to 512 [ 170.291775][ T7736] loop5: detected capacity change from 0 to 128 [ 170.319646][ T7737] netlink: 24 bytes leftover after parsing attributes in process `syz.0.490'. [ 170.482692][ T7705] loop4: detected capacity change from 0 to 32768 [ 170.520442][ T7705] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.481 (7705) [ 170.639521][ T7705] BTRFS info (device loop4): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 170.669349][ T7705] BTRFS info (device loop4): using crc32c (crc32c-x86_64) checksum algorithm [ 170.686447][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 170.737682][ T7705] BTRFS info (device loop4): using free-space-tree [ 170.880546][ T7762] IPVS: Unknown mcast interface: syzkaller0 [ 171.294120][ T7771] 8021q: VLANs not supported on vcan0 [ 171.298031][ T5831] BTRFS info (device loop4): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 171.487322][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 172.436375][ T7811] 8021q: VLANs not supported on vcan0 [ 172.587048][ T7810] loop4: detected capacity change from 0 to 4096 [ 172.663246][ T7815] loop5: detected capacity change from 0 to 128 [ 172.694076][ T30] audit: type=1800 audit(1743480104.128:35): pid=7810 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.517" name="bus" dev="loop4" ino=33 res=0 errno=0 [ 172.754721][ T7817] loop0: detected capacity change from 0 to 764 [ 172.833761][ T7817] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 172.955373][ T7822] Symlink component flag not implemented [ 172.974488][ T7822] Symlink component flag not implemented [ 172.978026][ T5947] IPVS: starting estimator thread 0... [ 173.004886][ T7822] Symlink component flag not implemented (128) [ 173.011652][ T7822] Symlink component flag not implemented (122) [ 173.116998][ T7792] loop2: detected capacity change from 0 to 32768 [ 173.137968][ T7792] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.511 (7792) [ 173.146177][ T7824] IPVS: using max 23 ests per chain, 55200 per kthread [ 173.175720][ T7792] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 173.204624][ T7801] loop1: detected capacity change from 0 to 32768 [ 173.223752][ T7792] BTRFS info (device loop2): using crc32c (crc32c-x86_64) checksum algorithm [ 173.248703][ T7792] BTRFS info (device loop2): using free-space-tree [ 173.255748][ T7801] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.513 (7801) [ 173.316445][ T7801] BTRFS info (device loop1): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 173.376556][ T7801] BTRFS info (device loop1): using crc32c (crc32c-x86_64) checksum algorithm [ 173.385647][ T7801] BTRFS info (device loop1): using free-space-tree [ 173.676548][ T7874] 8021q: VLANs not supported on vcan0 [ 173.815028][ T5841] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 174.139793][ T7883] loop4: detected capacity change from 0 to 128 [ 174.179934][ T5845] BTRFS info (device loop1): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 174.229163][ T7883] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 174.290218][ T7883] ext4 filesystem being mounted at /97/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 174.332138][ T47] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 174.549975][ T47] usb 6-1: no configurations [ 174.554624][ T47] usb 6-1: can't read configurations, error -22 [ 174.573311][ T5831] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:376: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 174.650531][ T5831] EXT4-fs error (device loop4): ext4_readdir:224: inode #11: comm syz-executor: path /97/mnt/lost+found: directory fails checksum at offset 10240 [ 174.707751][ T5831] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:376: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 174.737073][ T47] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 174.760735][ T5831] EXT4-fs error (device loop4): ext4_empty_dir:3107: inode #11: block 10: comm syz-executor: Directory block failed checksum [ 174.822552][ T5831] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:376: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 174.860414][ T5831] EXT4-fs error (device loop4): ext4_readdir:224: inode #11: comm syz-executor: path /97/mnt/lost+found: directory fails checksum at offset 10240 [ 174.898853][ T5831] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:376: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 174.901771][ T47] usb 6-1: no configurations [ 174.962817][ T47] usb 6-1: can't read configurations, error -22 [ 174.965442][ T5831] EXT4-fs error (device loop4): ext4_empty_dir:3107: inode #11: block 10: comm syz-executor: Directory block failed checksum [ 175.009824][ T47] usb usb6-port1: attempt power cycle [ 175.043961][ T5831] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:376: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 175.132990][ T5831] EXT4-fs error (device loop4): ext4_readdir:224: inode #11: comm syz-executor: path /97/mnt/lost+found: directory fails checksum at offset 10240 [ 175.163999][ T5831] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:376: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 175.212191][ T5831] EXT4-fs error (device loop4): ext4_empty_dir:3107: inode #11: block 10: comm syz-executor: Directory block failed checksum [ 175.300937][ T5831] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:376: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 175.326222][ T5831] EXT4-fs error (device loop4): ext4_readdir:224: inode #11: comm syz-executor: path /97/mnt/lost+found: directory fails checksum at offset 10240 [ 175.363464][ T5831] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:376: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 175.379614][ T5831] EXT4-fs error (device loop4): ext4_empty_dir:3107: inode #11: block 10: comm syz-executor: Directory block failed checksum [ 175.393774][ T5831] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:376: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 175.395985][ T47] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 175.409710][ T5831] EXT4-fs error (device loop4): ext4_readdir:224: inode #11: comm syz-executor: path /97/mnt/lost+found: directory fails checksum at offset 10240 [ 175.529887][ T5831] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:376: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 175.553830][ T47] usb 6-1: no configurations [ 175.564070][ T47] usb 6-1: can't read configurations, error -22 [ 175.583312][ T5831] EXT4-fs error (device loop4): ext4_empty_dir:3107: inode #11: block 10: comm syz-executor: Directory block failed checksum [ 175.726155][ T47] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 175.765763][ T47] usb 6-1: no configurations [ 175.770921][ T47] usb 6-1: can't read configurations, error -22 [ 175.796333][ T47] usb usb6-port1: unable to enumerate USB device [ 175.844370][ T7897] loop3: detected capacity change from 0 to 32768 [ 175.896416][ T7897] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.542 (7897) [ 175.907808][ T7924] loop1: detected capacity change from 0 to 128 [ 175.918124][ T7897] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 175.934041][ T7897] BTRFS info (device loop3): using sha256 (sha256-ni) checksum algorithm [ 175.943445][ T7897] BTRFS info (device loop3): using free-space-tree [ 175.977461][ T7924] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 176.019253][ T7924] ext4 filesystem being mounted at /100/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 176.253112][ T5845] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:376: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 176.310663][ T5845] EXT4-fs error (device loop1): ext4_readdir:224: inode #11: comm syz-executor: path /100/mnt/lost+found: directory fails checksum at offset 10240 [ 176.353129][ T5845] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:376: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 176.402196][ T5845] EXT4-fs error (device loop1): ext4_empty_dir:3107: inode #11: block 10: comm syz-executor: Directory block failed checksum [ 176.421318][ T5845] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:376: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 176.437684][ T5845] EXT4-fs error (device loop1): ext4_readdir:224: inode #11: comm syz-executor: path /100/mnt/lost+found: directory fails checksum at offset 10240 [ 176.458966][ T5845] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:376: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 176.474771][ T5845] EXT4-fs error (device loop1): ext4_empty_dir:3107: inode #11: block 10: comm syz-executor: Directory block failed checksum [ 176.495084][ T5840] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 176.517124][ T5845] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:376: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 176.554841][ T5845] EXT4-fs error (device loop1): ext4_readdir:224: inode #11: comm syz-executor: path /100/mnt/lost+found: directory fails checksum at offset 10240 [ 176.580339][ T5845] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:376: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 176.604182][ T5845] EXT4-fs error (device loop1): ext4_empty_dir:3107: inode #11: block 10: comm syz-executor: Directory block failed checksum [ 176.630469][ T5845] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:376: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 176.679075][ T5845] EXT4-fs error (device loop1): ext4_readdir:224: inode #11: comm syz-executor: path /100/mnt/lost+found: directory fails checksum at offset 10240 [ 176.724622][ T5845] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:376: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 176.726080][ T5831] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 176.786138][ T5845] EXT4-fs error (device loop1): ext4_empty_dir:3107: inode #11: block 10: comm syz-executor: Directory block failed checksum [ 176.814793][ T5845] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:376: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 176.831168][ T5845] EXT4-fs error (device loop1): ext4_readdir:224: inode #11: comm syz-executor: path /100/mnt/lost+found: directory fails checksum at offset 10240 [ 176.916020][ T5845] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:376: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 176.996669][ T5845] EXT4-fs error (device loop1): ext4_empty_dir:3107: inode #11: block 10: comm syz-executor: Directory block failed checksum [ 177.037398][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.338902][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.439982][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.598411][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.962626][ T7981] loop2: detected capacity change from 0 to 764 [ 178.005750][ T13] bridge_slave_0: left allmulticast mode [ 178.011640][ T13] bridge_slave_0: left promiscuous mode [ 178.024598][ T7981] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 178.038317][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.127664][ T5845] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 178.166558][ T7988] Symlink component flag not implemented [ 178.172253][ T7988] Symlink component flag not implemented [ 178.191462][ T7988] Symlink component flag not implemented (128) [ 178.201375][ T7988] Symlink component flag not implemented (122) [ 178.761043][ T5847] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 178.770134][ T5847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 178.777830][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 178.786143][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 178.793795][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 178.900873][ T7971] loop0: detected capacity change from 0 to 32768 [ 179.532436][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 179.567271][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 179.617984][ T13] bond0 (unregistering): Released all slaves [ 180.329965][ T7998] loop5: detected capacity change from 0 to 32768 [ 180.343141][ T8006] syzkaller1: entered promiscuous mode [ 180.354265][ T8006] syzkaller1: entered allmulticast mode [ 180.367488][ T5847] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 180.377816][ T5847] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 180.385476][ T5847] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 180.394054][ T5847] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 180.402787][ T5847] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 180.622173][ T13] hsr_slave_0: left promiscuous mode [ 180.682037][ T13] hsr_slave_1: left promiscuous mode [ 180.697210][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 180.717674][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 180.753039][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 180.774770][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 180.849088][ T13] veth1_macvtap: left promiscuous mode [ 180.870287][ T13] veth0_macvtap: left promiscuous mode [ 180.901049][ T5144] Bluetooth: hci0: command tx timeout [ 180.911330][ T13] veth1_vlan: left promiscuous mode [ 180.995119][ T7998] loop5: detected capacity change from 0 to 4096 [ 181.026197][ T13] veth0_vlan: left promiscuous mode [ 181.630210][ T13] team0 (unregistering): Port device team_slave_1 removed [ 181.662801][ T13] team0 (unregistering): Port device team_slave_0 removed [ 182.354715][ T8048] loop5: detected capacity change from 0 to 764 [ 182.354756][ T7994] chnl_net:caif_netlink_parms(): no params data found [ 182.383040][ T8048] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 182.489852][ T5144] Bluetooth: hci4: command tx timeout [ 182.507643][ T8055] Symlink component flag not implemented [ 182.513464][ T8055] Symlink component flag not implemented [ 182.543616][ T8055] Symlink component flag not implemented (128) [ 182.550256][ T8055] Symlink component flag not implemented (122) [ 182.871705][ T8043] loop0: detected capacity change from 0 to 32768 [ 182.977400][ T5144] Bluetooth: hci0: command tx timeout [ 182.987300][ T8016] chnl_net:caif_netlink_parms(): no params data found [ 183.397159][ T7994] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.423539][ T7994] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.454792][ T7994] bridge_slave_0: entered allmulticast mode [ 183.481258][ T7994] bridge_slave_0: entered promiscuous mode [ 183.509272][ T8073] netlink: 12 bytes leftover after parsing attributes in process `syz.3.593'. [ 183.557683][ T7994] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.575084][ T7994] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.587649][ T7994] bridge_slave_1: entered allmulticast mode [ 183.642018][ T7994] bridge_slave_1: entered promiscuous mode [ 183.788219][ T8075] syzkaller1: entered promiscuous mode [ 183.801345][ T8075] syzkaller1: entered allmulticast mode [ 184.106088][ T8016] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.133204][ T8016] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.156244][ T8016] bridge_slave_0: entered allmulticast mode [ 184.183704][ T8016] bridge_slave_0: entered promiscuous mode [ 184.216636][ T8016] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.223772][ T8016] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.238870][ T8089] netlink: 24 bytes leftover after parsing attributes in process `syz.0.596'. [ 184.263804][ T8016] bridge_slave_1: entered allmulticast mode [ 184.302600][ T8016] bridge_slave_1: entered promiscuous mode [ 184.329258][ T7994] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 184.513731][ T7994] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 184.539882][ T8016] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 184.566263][ T5144] Bluetooth: hci4: command tx timeout [ 184.668127][ T8081] loop3: detected capacity change from 0 to 32768 [ 184.679340][ T8081] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.594 (8081) [ 184.686592][ T8016] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 184.709589][ T8081] BTRFS info (device loop3): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 184.740468][ T8081] BTRFS info (device loop3): using crc32c (crc32c-x86_64) checksum algorithm [ 184.754096][ T8081] BTRFS info (device loop3): using free-space-tree [ 184.805308][ T7994] team0: Port device team_slave_0 added [ 184.903583][ T7994] team0: Port device team_slave_1 added [ 184.978527][ T8016] team0: Port device team_slave_0 added [ 185.020234][ T8016] team0: Port device team_slave_1 added [ 185.046174][ T5144] Bluetooth: hci0: command tx timeout [ 185.216618][ T30] audit: type=1800 audit(1743480116.658:36): pid=8081 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.594" name="bus" dev="loop3" ino=263 res=0 errno=0 [ 185.262289][ T7994] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 185.278290][ T7994] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.350664][ T5840] BTRFS info (device loop3): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 185.370381][ T7994] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 185.397391][ T8016] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 185.444868][ T8016] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.525758][ T8132] netlink: 12 bytes leftover after parsing attributes in process `syz.2.606'. [ 185.532811][ T8016] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 185.661046][ T7994] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 185.677460][ T7994] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.764664][ T7994] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 185.809574][ T8016] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 185.819258][ T8016] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.854348][ T8016] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 185.956694][ T8140] loop0: detected capacity change from 0 to 764 [ 185.976983][ T8140] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 186.078762][ T8145] Symlink component flag not implemented [ 186.085050][ T7994] hsr_slave_0: entered promiscuous mode [ 186.091159][ T8147] netlink: 24 bytes leftover after parsing attributes in process `syz.2.610'. [ 186.094723][ T8145] Symlink component flag not implemented [ 186.128317][ T7994] hsr_slave_1: entered promiscuous mode [ 186.134320][ T8145] Symlink component flag not implemented (128) [ 186.154761][ T8145] Symlink component flag not implemented (122) [ 186.358690][ T8016] hsr_slave_0: entered promiscuous mode [ 186.387726][ T8016] hsr_slave_1: entered promiscuous mode [ 186.406812][ T8016] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 186.454989][ T8016] Cannot create hsr debugfs directory [ 186.656382][ T5144] Bluetooth: hci4: command tx timeout [ 187.126041][ T5144] Bluetooth: hci0: command tx timeout [ 187.584488][ T7994] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 187.616662][ T7994] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 187.830342][ T7994] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 187.840074][ T8165] loop2: detected capacity change from 0 to 32768 [ 187.855653][ T8165] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.615 (8165) [ 187.898679][ T8165] BTRFS info (device loop2): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 187.910437][ T8165] BTRFS info (device loop2): using crc32c (crc32c-x86_64) checksum algorithm [ 187.938717][ T8165] BTRFS info (device loop2): using free-space-tree [ 188.393678][ T7994] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 188.726031][ T5144] Bluetooth: hci4: command tx timeout [ 188.735345][ T8016] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 188.775404][ T8016] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 188.836467][ T8016] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 188.913917][ T8016] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 189.151513][ T7994] 8021q: adding VLAN 0 to HW filter on device bond0 [ 189.183518][ T30] audit: type=1800 audit(1743480120.618:37): pid=8165 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.615" name="bus" dev="loop2" ino=263 res=0 errno=0 [ 189.247718][ T8199] netlink: 60 bytes leftover after parsing attributes in process `syz.3.622'. [ 189.300510][ T7994] 8021q: adding VLAN 0 to HW filter on device team0 [ 189.346923][ T8205] netlink: 24 bytes leftover after parsing attributes in process `syz.0.623'. [ 189.355389][ T5841] BTRFS info (device loop2): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 189.380561][ T8179] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.387776][ T8179] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.492727][ T8179] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.500042][ T8179] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.599848][ T8016] 8021q: adding VLAN 0 to HW filter on device bond0 [ 189.743500][ T8016] 8021q: adding VLAN 0 to HW filter on device team0 [ 189.814554][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.821799][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.138158][ T7994] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 190.155929][ T7994] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 190.957759][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.965367][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.615691][ T8253] netlink: 68 bytes leftover after parsing attributes in process `syz.0.636'. [ 191.630716][ T7994] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 191.754318][ T8258] netlink: 20 bytes leftover after parsing attributes in process `syz.3.637'. [ 191.766153][ T5947] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 191.802289][ T8260] netlink: 20 bytes leftover after parsing attributes in process `syz.3.637'. [ 191.842912][ T8016] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 191.927374][ T5947] usb 3-1: no configurations [ 191.932034][ T5947] usb 3-1: can't read configurations, error -22 [ 192.118607][ T8273] loop0: detected capacity change from 0 to 764 [ 192.202306][ T8273] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 192.296560][ T5947] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 192.481153][ T5947] usb 3-1: no configurations [ 192.576309][ T5947] usb 3-1: can't read configurations, error -22 [ 192.744491][ T5947] usb usb3-port1: attempt power cycle [ 193.098381][ T8273] overlay: ./file0 is not a directory [ 193.256237][ T7994] veth0_vlan: entered promiscuous mode [ 193.336389][ T5947] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 193.347087][ T7994] veth1_vlan: entered promiscuous mode [ 193.377492][ T5947] usb 3-1: no configurations [ 193.383652][ T5947] usb 3-1: can't read configurations, error -22 [ 193.540938][ T5947] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 193.581986][ T8302] netlink: 68 bytes leftover after parsing attributes in process `syz.5.648'. [ 193.589825][ T5947] usb 3-1: no configurations [ 193.599230][ T8016] veth0_vlan: entered promiscuous mode [ 193.611917][ T5947] usb 3-1: can't read configurations, error -22 [ 193.618709][ T7994] veth0_macvtap: entered promiscuous mode [ 193.644457][ T5947] usb usb3-port1: unable to enumerate USB device [ 193.657731][ T7994] veth1_macvtap: entered promiscuous mode [ 193.668158][ T8016] veth1_vlan: entered promiscuous mode [ 193.732619][ T7994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 193.765464][ T7994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.776909][ T7994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 193.787550][ T7994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.799335][ T7994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 193.811049][ T7994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.821761][ T7994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 193.833167][ T7994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.837903][ T8312] loop5: detected capacity change from 0 to 764 [ 193.843064][ T7994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 193.860998][ T7994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.875422][ T8312] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 193.882502][ T7994] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 193.993506][ T8016] veth0_macvtap: entered promiscuous mode [ 194.010820][ T8307] Symlink component flag not implemented [ 194.016547][ T8307] Symlink component flag not implemented [ 194.022218][ T8307] Symlink component flag not implemented (128) [ 194.028422][ T8307] Symlink component flag not implemented (122) [ 194.043264][ T8016] veth1_macvtap: entered promiscuous mode [ 194.058185][ T7994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.076087][ T7994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.086324][ T7994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.098183][ T7994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.115888][ T7994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.137126][ T7994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.148169][ T7994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.158796][ T7994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.169367][ T7994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.180004][ T7994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.192984][ T7994] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 194.254402][ T7994] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.265006][ T7994] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.275675][ T7994] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.285095][ T7994] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.312553][ T8016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.340936][ T8016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.352387][ T8016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.370305][ T8016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.382124][ T8016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.400498][ T8016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.425870][ T8016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.447022][ T8016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.462951][ T8016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.474705][ T8016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.490610][ T8016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.504663][ T8016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.562122][ T8016] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 194.617244][ T8016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.945177][ T8016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.120486][ T8016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.253152][ T8016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.275885][ T8016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.295837][ T8016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.305667][ T8016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.323881][ T8016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.343819][ T8016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.354554][ T8016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.376341][ T8016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.392746][ T8016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.526781][ T8016] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 195.669040][ T8016] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.707099][ T8016] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.737773][ T8016] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.747482][ T8016] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.904506][ T8326] loop3: detected capacity change from 0 to 32768 [ 195.976883][ T8326] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.654 (8326) [ 196.012247][ T8326] BTRFS info (device loop3): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 196.030338][ T8326] BTRFS info (device loop3): using crc32c (crc32c-x86_64) checksum algorithm [ 196.040571][ T8326] BTRFS info (device loop3): using free-space-tree [ 196.069001][ T966] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.102699][ T966] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.156071][ T8349] netlink: 68 bytes leftover after parsing attributes in process `syz.2.660'. [ 196.170520][ T8346] netlink: 24 bytes leftover after parsing attributes in process `syz.5.659'. [ 196.242191][ T8179] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.283906][ T8179] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.431799][ T8175] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.447234][ T8175] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.462499][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.481740][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.495610][ T30] audit: type=1800 audit(1743480127.928:38): pid=8326 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.654" name="bus" dev="loop3" ino=263 res=0 errno=0 [ 196.665508][ T5840] BTRFS info (device loop3): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 196.940913][ T1531] IPVS: starting estimator thread 0... [ 197.051543][ T5898] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 197.106092][ T8386] IPVS: using max 24 ests per chain, 57600 per kthread [ 197.290037][ T5898] usb 1-1: no configurations [ 197.335489][ T5898] usb 1-1: can't read configurations, error -22 [ 197.647655][ T5898] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 197.846745][ T5898] usb 1-1: no configurations [ 197.851407][ T5898] usb 1-1: can't read configurations, error -22 [ 197.883146][ T5898] usb usb1-port1: attempt power cycle [ 197.967625][ T8399] netlink: 24 bytes leftover after parsing attributes in process `syz.7.672'. [ 198.159159][ T8406] bridge0: entered promiscuous mode [ 198.172663][ T8406] vlan3: entered promiscuous mode [ 198.260171][ T5898] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 198.298060][ T5898] usb 1-1: no configurations [ 198.302903][ T5898] usb 1-1: can't read configurations, error -22 [ 198.457449][ T5898] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 198.498015][ T5898] usb 1-1: no configurations [ 198.503460][ T5898] usb 1-1: can't read configurations, error -22 [ 198.526333][ T5898] usb usb1-port1: unable to enumerate USB device [ 198.547525][ T8420] loop2: detected capacity change from 0 to 764 [ 198.579814][ T8420] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 198.595310][ T8420] Symlink component flag not implemented [ 198.601020][ T8420] Symlink component flag not implemented [ 198.607333][ T8420] Symlink component flag not implemented (128) [ 198.613478][ T8420] Symlink component flag not implemented (122) [ 198.970806][ T8436] netlink: 'syz.5.686': attribute type 63 has an invalid length. [ 198.979627][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.025221][ T8443] netlink: 'syz.5.686': attribute type 63 has an invalid length. [ 199.074363][ T8444] netlink: 24 bytes leftover after parsing attributes in process `syz.3.688'. [ 199.159185][ T8436] netlink: 8 bytes leftover after parsing attributes in process `syz.5.686'. [ 199.375642][ T8443] netlink: 8 bytes leftover after parsing attributes in process `syz.5.686'. [ 199.953079][ T8451] 8021q: VLANs not supported on vcan0 [ 200.216996][ T8463] loop7: detected capacity change from 0 to 764 [ 200.286421][ T8463] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 200.324996][ T8463] Symlink component flag not implemented [ 200.331961][ T8463] Symlink component flag not implemented [ 200.337951][ T8463] Symlink component flag not implemented (128) [ 200.344889][ T8463] Symlink component flag not implemented (122) [ 200.788400][ T8487] netlink: 'syz.7.706': attribute type 63 has an invalid length. [ 200.815959][ T8487] netlink: 8 bytes leftover after parsing attributes in process `syz.7.706'. [ 200.876574][ T8490] netlink: 'syz.7.706': attribute type 63 has an invalid length. [ 200.905577][ T8488] netlink: 24 bytes leftover after parsing attributes in process `syz.0.705'. [ 200.926222][ T8490] netlink: 8 bytes leftover after parsing attributes in process `syz.7.706'. [ 201.056857][ T5898] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 201.266849][ T5898] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 201.373740][ T5898] usb 6-1: can't read configurations, error -61 [ 201.576499][ T8459] loop2: detected capacity change from 0 to 32768 [ 201.666086][ T5898] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 201.735938][ T8459] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.694 (8459) [ 201.816210][ T8459] BTRFS info (device loop2): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 201.833068][ T8459] BTRFS info (device loop2): using crc32c (crc32c-x86_64) checksum algorithm [ 201.842467][ T8459] BTRFS info (device loop2): using free-space-tree [ 201.860210][ T5898] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 201.870899][ T8503] netlink: 12 bytes leftover after parsing attributes in process `syz.0.710'. [ 201.874954][ T8499] 8021q: VLANs not supported on vcan0 [ 201.881375][ T5898] usb 6-1: can't read configurations, error -61 [ 201.893647][ T5898] usb usb6-port1: attempt power cycle [ 202.103768][ T8523] loop3: detected capacity change from 0 to 764 [ 202.144990][ T8523] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 202.185277][ T8523] Symlink component flag not implemented [ 202.191598][ T8523] Symlink component flag not implemented [ 202.197315][ T8523] Symlink component flag not implemented (128) [ 202.203453][ T8523] Symlink component flag not implemented (122) [ 202.266132][ T5898] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 202.299141][ T5898] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 202.308754][ T5898] usb 6-1: can't read configurations, error -61 [ 202.336323][ T8531] IPVS: Unknown mcast interface: syzkaller0 [ 202.466168][ T5898] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 202.516195][ T5898] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 202.537283][ T5898] usb 6-1: can't read configurations, error -61 [ 202.564572][ T8540] netlink: 'syz.7.720': attribute type 63 has an invalid length. [ 202.574806][ T5898] usb usb6-port1: unable to enumerate USB device [ 202.600444][ T8540] netlink: 8 bytes leftover after parsing attributes in process `syz.7.720'. [ 202.628505][ T8542] netlink: 'syz.7.720': attribute type 63 has an invalid length. [ 202.674167][ T8542] netlink: 8 bytes leftover after parsing attributes in process `syz.7.720'. [ 202.679470][ T5841] BTRFS info (device loop2): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 202.736928][ T8547] netlink: 12 bytes leftover after parsing attributes in process `syz.0.724'. [ 202.892143][ T8549] 8021q: VLANs not supported on vcan0 [ 203.990098][ T8565] tun0: tun_chr_ioctl cmd 1074025675 [ 204.009142][ T8565] tun0: persist disabled [ 204.054532][ T8578] netlink: 12 bytes leftover after parsing attributes in process `syz.0.732'. [ 204.158043][ T8580] IPVS: Unknown mcast interface: syzkaller0 [ 204.357972][ T8589] netlink: 12 bytes leftover after parsing attributes in process `syz.3.738'. [ 204.430953][ T8591] bridge0: entered promiscuous mode [ 204.451684][ T8591] vlan2: entered promiscuous mode [ 204.735896][ T8601] loop5: detected capacity change from 0 to 8 [ 205.786275][ T5938] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 207.026242][ T5938] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 207.033907][ T5938] usb 4-1: can't read configurations, error -61 [ 207.166270][ T8585] loop2: detected capacity change from 0 to 32768 [ 207.176244][ T8585] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.735 (8585) [ 207.213406][ T5938] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 207.289470][ T8611] netlink: 12 bytes leftover after parsing attributes in process `syz.6.748'. [ 207.385621][ T5938] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 207.406185][ T5938] usb 4-1: can't read configurations, error -61 [ 207.436369][ T5938] usb usb4-port1: attempt power cycle [ 207.640177][ T8615] tun0: tun_chr_ioctl cmd 1074025675 [ 207.645517][ T8615] tun0: persist disabled [ 207.683499][ T8617] IPVS: Unknown mcast interface: syzkaller0 [ 207.982941][ T8627] netlink: 12 bytes leftover after parsing attributes in process `syz.3.756'. [ 208.286532][ T8639] loop0: detected capacity change from 0 to 764 [ 208.328524][ T8639] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 208.378938][ T8643] netlink: 12 bytes leftover after parsing attributes in process `syz.2.763'. [ 208.502402][ T8633] overlay: ./file0 is not a directory [ 208.835906][ T6047] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 209.026228][ T6047] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 209.040859][ T8662] tun0: tun_chr_ioctl cmd 1074025675 [ 209.044138][ T6047] usb 3-1: can't read configurations, error -61 [ 209.072995][ T8662] tun0: persist disabled [ 209.099179][ T8641] loop3: detected capacity change from 0 to 32768 [ 209.113949][ T8641] BTRFS: device /dev/loop3 (7:3) using temp-fsid 9f192352-7594-411e-b144-61adbf184e3a [ 209.124678][ T8641] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.762 (8641) [ 209.193258][ T8641] BTRFS info (device loop3): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 209.211643][ T6047] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 209.222087][ T8641] BTRFS info (device loop3): using crc32c (crc32c-x86_64) checksum algorithm [ 209.266046][ T8641] BTRFS info (device loop3): using free-space-tree [ 209.367017][ T8675] netlink: 12 bytes leftover after parsing attributes in process `syz.7.774'. [ 209.408342][ T6047] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 209.443386][ T6047] usb 3-1: can't read configurations, error -61 [ 209.496902][ T6047] usb usb3-port1: attempt power cycle [ 209.646030][ T8692] netlink: 12 bytes leftover after parsing attributes in process `syz.7.777'. [ 209.705325][ T8658] loop0: detected capacity change from 0 to 32768 [ 209.837962][ T8664] loop5: detected capacity change from 0 to 32768 [ 209.876113][ T6047] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 209.937319][ T6047] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 209.944919][ T6047] usb 3-1: can't read configurations, error -61 [ 210.096583][ T6047] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 210.150902][ T6047] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 210.176227][ T6047] usb 3-1: can't read configurations, error -61 [ 210.183976][ T5840] BTRFS info (device loop3): last unmount of filesystem 9f192352-7594-411e-b144-61adbf184e3a [ 210.207107][ T6047] usb usb3-port1: unable to enumerate USB device [ 210.646925][ T8706] tun0: tun_chr_ioctl cmd 1074025675 [ 210.655228][ T8706] tun0: persist disabled [ 210.887381][ T8718] loop3: detected capacity change from 0 to 764 [ 210.912221][ T8718] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 210.962751][ T8721] netlink: 12 bytes leftover after parsing attributes in process `syz.5.789'. [ 211.013605][ T8725] loop0: detected capacity change from 0 to 8 [ 211.039262][ T8712] overlay: ./file0 is not a directory [ 211.286147][ T5847] Bluetooth: hci3: command 0x0406 tx timeout [ 211.292275][ T5847] Bluetooth: hci1: command 0x0406 tx timeout [ 211.301062][ T5847] Bluetooth: hci5: command 0x0406 tx timeout [ 211.307155][ T5847] Bluetooth: hci2: command 0x0406 tx timeout [ 212.821374][ T8727] loop7: detected capacity change from 0 to 32768 [ 212.831310][ T8727] BTRFS: device /dev/loop7 (7:7) using temp-fsid 993a3214-10fc-411d-8fab-8276165cce52 [ 212.853771][ T8727] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.792 (8727) [ 213.057469][ T8754] tun0: tun_chr_ioctl cmd 1074025675 [ 213.079031][ T8754] tun0: persist disabled [ 213.327035][ T8727] BTRFS info (device loop7): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 213.625965][ T8727] BTRFS info (device loop7): using crc32c (crc32c-x86_64) checksum algorithm [ 213.647148][ T8727] BTRFS info (device loop7): using free-space-tree [ 214.121887][ T8727] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 214.186004][ T8727] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 214.302401][ T8727] BTRFS error (device loop7): open_ctree failed: -12 [ 214.491720][ T8782] loop6: detected capacity change from 0 to 1024 [ 214.559330][ T8782] EXT4-fs: Ignoring removed nobh option [ 214.564941][ T8782] EXT4-fs: Ignoring removed bh option [ 214.738677][ T8782] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.926181][ T6047] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 215.110987][ T6047] usb 6-1: config 0 has no interfaces? [ 215.120084][ T6047] usb 6-1: New USB device found, idVendor=05ac, idProduct=030a, bcdDevice=65.8c [ 215.153276][ T6047] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.185436][ T6047] usb 6-1: config 0 descriptor?? [ 215.367050][ T8805] loop2: detected capacity change from 0 to 8 [ 215.377605][ T8761] loop0: detected capacity change from 0 to 32768 [ 215.401843][ T8805] SQUASHFS error: zlib decompression failed, data probably corrupt [ 215.414806][ T8805] SQUASHFS error: Failed to read block 0x9b: -5 [ 215.432206][ T8805] SQUASHFS error: Unable to read metadata cache entry [99] [ 215.455882][ T8805] SQUASHFS error: Unable to read inode 0x127 [ 216.358885][ T5909] usb 6-1: USB disconnect, device number 11 [ 217.003204][ T8819] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4115: comm syz.6.808: Allocating blocks 497-513 which overlap fs metadata [ 217.056463][ T8819] EXT4-fs (loop6): pa ffff88807af90bc8: logic 256, phys. 385, len 8 [ 217.064731][ T8819] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 1 [ 217.119917][ T8822] EXT4-fs error (device loop6): mb_free_blocks:1948: group 0, inode 15: block 129:freeing already freed block (bit 8); block bitmap corrupt. [ 217.771660][ T8815] tun0: tun_chr_ioctl cmd 1074025675 [ 217.789948][ T8815] tun0: persist disabled [ 219.862309][ T8832] loop3: detected capacity change from 0 to 32768 [ 219.913658][ T8832] BTRFS: device /dev/loop3 (7:3) using temp-fsid c093eb6b-b660-4073-bcd9-fc74d4a07cb9 [ 219.941348][ T8832] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.825 (8832) [ 219.996458][ T8832] BTRFS info (device loop3): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 220.045980][ T8832] BTRFS info (device loop3): using crc32c (crc32c-x86_64) checksum algorithm [ 220.054818][ T8832] BTRFS info (device loop3): using free-space-tree [ 220.142409][ T7994] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.450722][ T8847] loop7: detected capacity change from 0 to 32768 [ 220.465968][ T8847] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.833 (8847) [ 220.490804][ T8872] loop0: detected capacity change from 0 to 764 [ 220.503914][ T8847] BTRFS info (device loop7): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 220.550981][ T8872] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 220.615985][ T8847] BTRFS info (device loop7): using sha256 (sha256-ni) checksum algorithm [ 220.685000][ T8881] loop6: detected capacity change from 0 to 8 [ 220.717417][ T8881] SQUASHFS error: zlib decompression failed, data probably corrupt [ 220.732466][ T8881] SQUASHFS error: Failed to read block 0x9b: -5 [ 220.743212][ T8881] SQUASHFS error: Unable to read metadata cache entry [99] [ 220.751896][ T8881] SQUASHFS error: Unable to read inode 0x127 [ 221.019996][ T8865] overlay: ./file0 is not a directory [ 221.291122][ T8847] BTRFS info (device loop7): rebuilding free space tree [ 221.435941][ T8847] BTRFS info (device loop7): disabling free space tree [ 221.484249][ T8847] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 221.516799][ T8903] loop0: detected capacity change from 0 to 128 [ 221.575562][ T8847] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 221.609952][ T5840] BTRFS info (device loop3): last unmount of filesystem c093eb6b-b660-4073-bcd9-fc74d4a07cb9 [ 221.822743][ T30] audit: type=1800 audit(1743480153.258:39): pid=8847 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.833" name="bus" dev="loop7" ino=263 res=0 errno=0 [ 221.977386][ T30] audit: type=1800 audit(1743480153.288:40): pid=8847 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.833" name="bus" dev="loop7" ino=263 res=0 errno=0 [ 223.262176][ T8911] tun0: tun_chr_ioctl cmd 1074025675 [ 223.280772][ T8911] tun0: persist disabled [ 223.654457][ T8016] BTRFS info (device loop7): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 224.419057][ T8929] loop3: detected capacity change from 0 to 764 [ 224.522142][ T8929] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 224.745477][ T8928] overlay: ./file0 is not a directory [ 224.992105][ T8923] loop0: detected capacity change from 0 to 32768 [ 225.311981][ T8950] loop3: detected capacity change from 0 to 128 [ 225.386662][ T47] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 225.565697][ T8936] loop5: detected capacity change from 0 to 32768 [ 225.582950][ T47] usb 8-1: config 0 has no interfaces? [ 225.588926][ T47] usb 8-1: New USB device found, idVendor=05ac, idProduct=030a, bcdDevice=65.8c [ 225.608466][ T47] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.747768][ T47] usb 8-1: config 0 descriptor?? [ 225.847512][ T8956] loop6: detected capacity change from 0 to 1024 [ 225.880501][ T8956] EXT4-fs: Ignoring removed nobh option [ 225.900281][ T8956] EXT4-fs: Ignoring removed bh option [ 226.027317][ T8959] loop2: detected capacity change from 0 to 128 [ 226.692142][ T8959] FAT-fs (loop2): Directory bread(block 32) failed [ 226.699024][ T8959] FAT-fs (loop2): Directory bread(block 33) failed [ 226.705625][ T8959] FAT-fs (loop2): Directory bread(block 34) failed [ 226.712243][ T8959] FAT-fs (loop2): Directory bread(block 35) failed [ 226.718882][ T8959] FAT-fs (loop2): Directory bread(block 36) failed [ 226.725413][ T8959] FAT-fs (loop2): Directory bread(block 37) failed [ 226.732070][ T8959] FAT-fs (loop2): Directory bread(block 38) failed [ 226.738663][ T8959] FAT-fs (loop2): Directory bread(block 39) failed [ 226.745251][ T8959] FAT-fs (loop2): Directory bread(block 40) failed [ 226.751936][ T8959] FAT-fs (loop2): Directory bread(block 41) failed [ 226.853711][ T8957] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 226.861614][ T8957] FAT-fs (loop2): Filesystem has been set read-only [ 226.881434][ T8964] process 'syz.3.863' launched './file0' with NULL argv: empty string added [ 226.906236][ T8956] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 227.632054][ T6047] usb 8-1: USB disconnect, device number 2 [ 228.690192][ T8993] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4115: comm syz.6.852: Allocating blocks 497-513 which overlap fs metadata [ 228.714902][ T8993] EXT4-fs (loop6): pa ffff888077bf4658: logic 256, phys. 385, len 8 [ 228.722981][ T8993] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 1 [ 228.767481][ T8995] EXT4-fs error (device loop6): mb_free_blocks:1948: group 0, inode 15: block 129:freeing already freed block (bit 8); block bitmap corrupt. [ 229.052622][ T9002] loop0: detected capacity change from 0 to 512 [ 229.428196][ T9012] loop0: detected capacity change from 0 to 128 [ 231.019571][ T9043] loop7: detected capacity change from 0 to 128 [ 231.056003][ T5938] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 231.137953][ T5838] Bluetooth: hci4: command 0x0405 tx timeout [ 231.203316][ T7994] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.238975][ T5938] usb 4-1: config 0 has no interfaces? [ 231.255155][ T5938] usb 4-1: New USB device found, idVendor=05ac, idProduct=030a, bcdDevice=65.8c [ 231.286001][ T5938] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.315672][ T5938] usb 4-1: config 0 descriptor?? [ 231.340100][ T9050] loop2: detected capacity change from 0 to 512 [ 231.353794][ T9050] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 231.388093][ T9050] EXT4-fs (loop2): 1 truncate cleaned up [ 231.397787][ T9050] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 232.217262][ T5938] usb 4-1: USB disconnect, device number 7 [ 232.467330][ T5841] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.697293][ T9058] loop5: detected capacity change from 0 to 32768 [ 233.761798][ T9072] loop2: detected capacity change from 0 to 32768 [ 233.897224][ T9072] BTRFS info (device loop2): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 233.938440][ T9072] BTRFS info (device loop2): using crc32c (crc32c-x86_64) checksum algorithm [ 233.980745][ T9072] BTRFS info (device loop2): using free-space-tree [ 234.206329][ T9056] netlink: 'syz.5.897': attribute type 49 has an invalid length. [ 234.549248][ T9131] loop5: detected capacity change from 0 to 128 [ 234.724603][ T5841] BTRFS info (device loop2): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 234.992627][ T9107] loop3: detected capacity change from 0 to 32768 [ 235.030315][ T9107] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.912 (9107) [ 235.075016][ T9107] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 235.133063][ T9107] BTRFS info (device loop3): using sha256 (sha256-ni) checksum algorithm [ 235.319348][ T9107] BTRFS info (device loop3): rebuilding free space tree [ 235.388782][ T9107] BTRFS info (device loop3): disabling free space tree [ 235.423074][ T9107] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 235.477561][ T9107] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 235.660945][ T30] audit: type=1800 audit(1743480167.098:41): pid=9107 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.912" name="bus" dev="loop3" ino=263 res=0 errno=0 [ 235.825676][ T30] audit: type=1800 audit(1743480167.218:42): pid=9158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.912" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 236.226216][ T5898] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 236.404509][ T5898] usb 8-1: config 0 has no interfaces? [ 236.410421][ T5898] usb 8-1: New USB device found, idVendor=05ac, idProduct=030a, bcdDevice=65.8c [ 236.432372][ T5898] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.463658][ T5898] usb 8-1: config 0 descriptor?? [ 236.624711][ T5840] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 236.672879][ T9183] bridge_slave_0: left allmulticast mode [ 236.692552][ T9183] bridge_slave_0: left promiscuous mode [ 236.714692][ T9183] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.877797][ T9183] bond0: (slave bond_slave_0): Releasing backup interface [ 236.941536][ T9183] bond0: (slave bond_slave_1): Releasing backup interface [ 237.040824][ T5938] usb 8-1: USB disconnect, device number 3 [ 237.645594][ T9183] team0: Port device team_slave_0 removed [ 237.689151][ T9183] team0: Port device team_slave_1 removed [ 237.717838][ T9168] loop5: detected capacity change from 0 to 32768 [ 237.744557][ T9183] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 237.781083][ T9183] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 237.809355][ T9183] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 237.863402][ T9183] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 237.985894][ T47] hid-generic 0005:07C0:0007.0001: item fetching failed at offset 0/1 [ 237.995098][ T47] hid-generic 0005:07C0:0007.0001: probe with driver hid-generic failed with error -22 [ 238.196670][ T9196] loop2: detected capacity change from 0 to 128 [ 238.567659][ T5848] Bluetooth: hci4: command 0x0405 tx timeout [ 240.720252][ T9259] netlink: 24 bytes leftover after parsing attributes in process `syz.5.960'. [ 241.374552][ T9267] loop6: detected capacity change from 0 to 128 [ 241.487451][ T9271] loop2: detected capacity change from 0 to 1024 [ 241.497330][ T9271] EXT4-fs: Ignoring removed nobh option [ 241.502916][ T9271] EXT4-fs: Ignoring removed bh option [ 241.566881][ T9271] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 241.850153][ T9279] loop5: detected capacity change from 0 to 764 [ 241.883295][ T9279] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 241.980987][ T9278] overlay: ./file0 is not a directory [ 242.391932][ T9285] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4115: comm syz.2.966: Allocating blocks 497-513 which overlap fs metadata [ 242.464332][ T9285] EXT4-fs (loop2): pa ffff88807af90ae0: logic 256, phys. 385, len 8 [ 242.472487][ T9285] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 1 [ 242.503536][ T9287] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 15: block 129:freeing already freed block (bit 8); block bitmap corrupt. [ 243.389200][ T5841] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.277998][ T9340] loop2: detected capacity change from 0 to 1024 [ 245.285318][ T9340] EXT4-fs: Ignoring removed nobh option [ 245.330230][ T9344] loop5: detected capacity change from 0 to 128 [ 245.341836][ T9340] EXT4-fs: Ignoring removed bh option [ 245.472712][ T9340] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 246.432598][ T9339] loop7: detected capacity change from 0 to 32768 [ 246.547268][ T9339] XFS (loop7): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 246.803729][ T9339] XFS (loop7): Ending clean mount [ 246.862965][ T9339] XFS (loop7): Quotacheck needed: Please wait. [ 246.933151][ T9339] XFS (loop7): Quotacheck: Done. [ 247.045076][ T9376] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4115: comm syz.2.986: Allocating blocks 497-513 which overlap fs metadata [ 247.122813][ T9376] EXT4-fs (loop2): pa ffff888077bf41d0: logic 256, phys. 385, len 8 [ 247.131365][ T9376] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 1 [ 247.142837][ T30] audit: type=1804 audit(1743480178.548:43): pid=9339 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.987" name="/newroot/50/file0/bus" dev="loop7" ino=9291 res=1 errno=0 [ 247.186501][ T10] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 247.215143][ T9378] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 15: block 129:freeing already freed block (bit 8); block bitmap corrupt. [ 247.230019][ T9377] 8021q: VLANs not supported on vcan0 [ 247.249006][ T8016] XFS (loop7): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 247.423125][ T10] usb 1-1: config 0 has no interfaces? [ 247.428873][ T10] usb 1-1: New USB device found, idVendor=05ac, idProduct=030a, bcdDevice=65.8c [ 247.519423][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.556969][ T10] usb 1-1: config 0 descriptor?? [ 248.133434][ T5898] usb 1-1: USB disconnect, device number 6 [ 249.384320][ T9388] loop5: detected capacity change from 0 to 32768 [ 249.411508][ T5841] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.646057][ T9412] 8021q: VLANs not supported on vcan0 [ 250.045877][ T5938] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 250.181733][ T5938] usb 3-1: device descriptor read/64, error -71 [ 250.466240][ T5938] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 250.528654][ T9436] loop6: detected capacity change from 0 to 1024 [ 250.555039][ T9436] EXT4-fs: Ignoring removed nobh option [ 250.581447][ T9436] EXT4-fs: Ignoring removed bh option [ 250.605886][ T5938] usb 3-1: device descriptor read/64, error -71 [ 250.716233][ T5938] usb usb3-port1: attempt power cycle [ 250.729319][ T9436] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 250.753646][ T9423] loop7: detected capacity change from 0 to 32768 [ 250.838870][ T9423] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.1017 (9423) [ 250.892174][ T9423] BTRFS info (device loop7): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 250.914947][ T9423] BTRFS info (device loop7): using crc32c (crc32c-x86_64) checksum algorithm [ 250.944459][ T9423] BTRFS info (device loop7): using free-space-tree [ 251.085872][ T5938] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 251.107412][ T5938] usb 3-1: device descriptor read/8, error -71 [ 251.365854][ T5938] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 251.443798][ T5938] usb 3-1: device descriptor read/8, error -71 [ 251.539868][ T9444] loop5: detected capacity change from 0 to 32768 [ 251.586515][ T5938] usb usb3-port1: unable to enumerate USB device [ 251.787027][ T9465] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4115: comm syz.6.1023: Allocating blocks 497-513 which overlap fs metadata [ 251.825445][ T8016] BTRFS info (device loop7): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 251.897681][ T9441] netlink: 'syz.5.1024': attribute type 49 has an invalid length. [ 251.919372][ T9465] EXT4-fs (loop6): pa ffff888077bf4828: logic 256, phys. 385, len 8 [ 251.927529][ T9465] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 1 [ 251.997835][ T9467] EXT4-fs error (device loop6): mb_free_blocks:1948: group 0, inode 15: block 129:freeing already freed block (bit 8); block bitmap corrupt. [ 252.063627][ T9471] 8021q: VLANs not supported on vcan0 [ 252.633843][ T5947] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 252.845281][ T5947] usb 6-1: config 0 has no interfaces? [ 252.855045][ T5947] usb 6-1: New USB device found, idVendor=05ac, idProduct=030a, bcdDevice=65.8c [ 252.895531][ T5947] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.922494][ T5947] usb 6-1: config 0 descriptor?? [ 253.475343][ T5947] usb 6-1: USB disconnect, device number 12 [ 254.222302][ T9505] loop7: detected capacity change from 0 to 764 [ 254.274242][ T7994] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.284364][ T9505] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 254.483990][ T9503] overlay: ./file0 is not a directory [ 254.586279][ T9495] loop3: detected capacity change from 0 to 32768 [ 254.611843][ T9495] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1038 (9495) [ 254.696581][ T9495] BTRFS info (device loop3): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 254.720402][ T9495] BTRFS info (device loop3): using crc32c (crc32c-x86_64) checksum algorithm [ 254.735287][ T9495] BTRFS info (device loop3): using free-space-tree [ 254.950390][ T9528] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1044'. [ 255.280859][ T5947] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 255.482879][ T5947] usb 7-1: no configurations [ 255.492618][ T5947] usb 7-1: can't read configurations, error -22 [ 255.646258][ T5947] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 255.737855][ T9557] loop7: detected capacity change from 0 to 1024 [ 255.760511][ T9557] EXT4-fs: Ignoring removed nobh option [ 255.767540][ T9557] EXT4-fs: Ignoring removed bh option [ 255.815186][ T5947] usb 7-1: no configurations [ 255.822089][ T5947] usb 7-1: can't read configurations, error -22 [ 255.823387][ T9557] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.850173][ T9561] loop5: detected capacity change from 0 to 764 [ 255.866477][ T5840] BTRFS info (device loop3): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 255.879885][ T5947] usb usb7-port1: attempt power cycle [ 255.945358][ T9561] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 256.017512][ T9560] overlay: ./file0 is not a directory [ 256.044425][ T9569] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1059'. [ 256.089154][ T9569] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1059'. [ 256.256461][ T5947] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 256.287716][ T5947] usb 7-1: no configurations [ 256.294524][ T5947] usb 7-1: can't read configurations, error -22 [ 256.446119][ T5947] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 256.493543][ T5947] usb 7-1: no configurations [ 256.506105][ T5947] usb 7-1: can't read configurations, error -22 [ 256.536028][ T5947] usb usb7-port1: unable to enumerate USB device [ 257.271291][ T9594] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4115: comm syz.7.1055: Allocating blocks 497-513 which overlap fs metadata [ 257.488913][ T9594] EXT4-fs (loop7): pa ffff888077bf4910: logic 256, phys. 385, len 8 [ 257.497191][ T9594] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 1 [ 257.631703][ T9597] EXT4-fs error (device loop7): mb_free_blocks:1948: group 0, inode 15: block 129:freeing already freed block (bit 8); block bitmap corrupt. [ 258.074614][ T9584] loop2: detected capacity change from 0 to 32768 [ 258.186055][ T9609] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1073'. [ 258.264657][ T9614] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1073'. [ 258.442444][ T8016] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.610751][ T9620] loop5: detected capacity change from 0 to 764 [ 258.654138][ T9620] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 258.752675][ T9619] overlay: ./file0 is not a directory [ 258.831151][ T9582] netlink: 'syz.2.1063': attribute type 49 has an invalid length. [ 259.260433][ T9647] netlink: 'syz.2.1088': attribute type 63 has an invalid length. [ 259.301310][ T9651] loop0: detected capacity change from 0 to 1024 [ 259.312428][ T9651] EXT4-fs: Ignoring removed nobh option [ 259.318226][ T9651] EXT4-fs: Ignoring removed bh option [ 259.335926][ T47] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 259.496974][ T47] usb 6-1: no configurations [ 259.504056][ T47] usb 6-1: can't read configurations, error -22 [ 259.645877][ T47] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 259.816772][ T47] usb 6-1: no configurations [ 259.821508][ T47] usb 6-1: can't read configurations, error -22 [ 259.836214][ T47] usb usb6-port1: attempt power cycle [ 259.998224][ T9673] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1098'. [ 260.012422][ T9673] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1098'. [ 260.112550][ T9673] team0: entered promiscuous mode [ 260.120252][ T9673] team0: left promiscuous mode [ 260.206068][ T47] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 260.237130][ T47] usb 6-1: no configurations [ 260.250832][ T47] usb 6-1: can't read configurations, error -22 [ 260.411129][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.420130][ T47] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 260.509204][ T47] usb 6-1: no configurations [ 260.527725][ T47] usb 6-1: can't read configurations, error -22 [ 260.568268][ T47] usb usb6-port1: unable to enumerate USB device [ 260.993997][ T9674] loop6: detected capacity change from 0 to 32768 [ 261.137942][ T9686] loop2: detected capacity change from 0 to 32768 [ 261.147979][ T9686] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1102 (9686) [ 261.189355][ T9686] BTRFS info (device loop2): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 261.199838][ T9686] BTRFS info (device loop2): using crc32c (crc32c-x86_64) checksum algorithm [ 261.209115][ T9686] BTRFS info (device loop2): using free-space-tree [ 261.303412][ T9670] netlink: 'syz.6.1096': attribute type 49 has an invalid length. [ 263.245329][ T5841] BTRFS info (device loop2): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 263.504938][ T9749] loop3: detected capacity change from 0 to 1024 [ 263.566814][ T9749] EXT4-fs: Ignoring removed nobh option [ 263.572445][ T9749] EXT4-fs: Ignoring removed bh option [ 263.671296][ T9749] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 264.169717][ T5898] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 264.392468][ T5898] usb 6-1: no configurations [ 264.510237][ T5898] usb 6-1: can't read configurations, error -22 [ 264.865971][ T5898] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 265.100310][ T5898] usb 6-1: no configurations [ 265.115138][ T5898] usb 6-1: can't read configurations, error -22 [ 265.142322][ T5898] usb usb6-port1: attempt power cycle [ 265.467406][ T9787] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4115: comm syz.3.1119: Allocating blocks 497-513 which overlap fs metadata [ 265.516007][ T5898] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 265.560864][ T9787] EXT4-fs (loop3): pa ffff888077bf4cb0: logic 256, phys. 385, len 8 [ 265.569178][ T9787] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 1 [ 265.606017][ T5898] usb 6-1: no configurations [ 265.610668][ T5898] usb 6-1: can't read configurations, error -22 [ 265.620622][ T9757] loop0: detected capacity change from 0 to 32768 [ 265.628818][ T9789] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 15: block 129:freeing already freed block (bit 8); block bitmap corrupt. [ 265.745918][ T5898] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 265.791732][ T5898] usb 6-1: no configurations [ 265.796533][ T5898] usb 6-1: can't read configurations, error -22 [ 266.026067][ T5898] usb usb6-port1: unable to enumerate USB device [ 266.092155][ T9784] loop7: detected capacity change from 0 to 32768 [ 266.119590][ T9784] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.1129 (9784) [ 266.164420][ T9784] BTRFS info (device loop7): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 266.201569][ T9784] BTRFS info (device loop7): using crc32c (crc32c-x86_64) checksum algorithm [ 266.207649][ T9755] netlink: 'syz.0.1120': attribute type 49 has an invalid length. [ 266.237241][ T9784] BTRFS info (device loop7): using free-space-tree [ 267.727974][ T8016] BTRFS info (device loop7): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 267.732279][ T5840] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.515921][ T10] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 268.678225][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 268.722574][ T10] usb 4-1: config 0 has no interfaces? [ 268.742253][ T10] usb 4-1: New USB device found, idVendor=0a5c, idProduct=bd1f, bcdDevice=53.1a [ 269.442846][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.455806][ T10] usb 4-1: Product: syz [ 269.578894][ T10] usb 4-1: Manufacturer: syz [ 269.583546][ T10] usb 4-1: SerialNumber: syz [ 269.593583][ T10] usb 4-1: config 0 descriptor?? [ 269.727252][ T9888] loop6: detected capacity change from 0 to 1024 [ 269.765081][ T9888] EXT4-fs: Ignoring removed nobh option [ 269.785835][ T9888] EXT4-fs: Ignoring removed bh option [ 269.814056][ T9867] loop3: detected capacity change from 0 to 8 [ 269.853972][ T9867] SQUASHFS error: zlib decompression failed, data probably corrupt [ 269.863509][ T9888] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 269.887506][ T9867] SQUASHFS error: Failed to read block 0x9b: -5 [ 269.893902][ T9867] SQUASHFS error: Unable to read metadata cache entry [99] [ 269.901420][ T9867] SQUASHFS error: Unable to read inode 0x127 [ 269.902016][ T9851] loop5: detected capacity change from 0 to 32768 [ 271.480226][ T9886] loop7: detected capacity change from 0 to 32768 [ 271.542322][ T9886] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.1159 (9886) [ 272.343866][ T10] usb 4-1: USB disconnect, device number 8 [ 272.353171][ T9886] BTRFS info (device loop7): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 272.366855][ T9886] BTRFS info (device loop7): using crc32c (crc32c-x86_64) checksum algorithm [ 272.506236][ T9886] BTRFS info (device loop7): using free-space-tree [ 272.565366][ T9886] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 272.566020][ T9886] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 272.643817][ T9886] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 272.768947][ T9886] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 272.804008][ T9925] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4115: comm syz.6.1160: Allocating blocks 497-513 which overlap fs metadata [ 272.816299][ T9886] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 272.856258][ T9925] EXT4-fs (loop6): pa ffff888077bf4488: logic 256, phys. 385, len 8 [ 272.873388][ T9925] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 1 [ 272.896890][ T9927] EXT4-fs error (device loop6): mb_free_blocks:1948: group 0, inode 15: block 129:freeing already freed block (bit 8); block bitmap corrupt. [ 273.016498][ T9886] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 273.016899][ T9886] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 273.044162][ T9886] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 273.158185][ T9886] BTRFS error (device loop7): open_ctree failed: -12 [ 274.274841][ T9915] loop2: detected capacity change from 0 to 32768 [ 274.326213][ T9915] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1169 (9915) [ 274.394879][ T9915] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 274.434428][ T9915] BTRFS info (device loop2): using sha256 (sha256-ni) checksum algorithm [ 274.499911][ T9915] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 274.500807][ T9915] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 274.536331][ T9915] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 274.546231][ T9915] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 274.577651][ T9915] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 274.648504][ T9915] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 274.845204][ T9915] BTRFS error (device loop2): open_ctree failed: -12 [ 274.885984][ T1531] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 275.065103][ T1531] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 275.096157][ T1531] usb 1-1: config 0 has no interfaces? [ 275.104436][ T1531] usb 1-1: New USB device found, idVendor=0a5c, idProduct=bd1f, bcdDevice=53.1a [ 275.126111][ T1531] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.135130][ T1531] usb 1-1: Product: syz [ 275.168310][ T1531] usb 1-1: Manufacturer: syz [ 275.188480][ T1531] usb 1-1: SerialNumber: syz [ 275.224456][ T1531] usb 1-1: config 0 descriptor?? [ 275.477199][ T9984] loop0: detected capacity change from 0 to 8 [ 275.493427][ T7994] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.501295][ T9975] loop5: detected capacity change from 0 to 32768 [ 278.570629][T10004] loop7: detected capacity change from 0 to 32768 [ 278.663217][ T5947] usb 1-1: USB disconnect, device number 7 [ 279.417195][T10033] loop6: detected capacity change from 0 to 32768 [ 279.632397][T10033] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.1199 (10033) [ 280.136377][T10033] BTRFS info (device loop6): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 280.251571][T10033] BTRFS info (device loop6): using sha256 (sha256-ni) checksum algorithm [ 280.571570][T10033] BTRFS info (device loop6): rebuilding free space tree [ 280.658179][T10033] BTRFS info (device loop6): disabling free space tree [ 280.665143][T10033] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 280.707391][T10085] loop3: detected capacity change from 0 to 128 [ 280.736097][T10033] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 280.825971][ T30] audit: type=1800 audit(1743480212.258:44): pid=10033 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1199" name="bus" dev="loop6" ino=263 res=0 errno=0 [ 280.895885][ T30] audit: type=1800 audit(1743480212.288:45): pid=10033 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1199" name="file1" dev="loop6" ino=260 res=0 errno=0 [ 281.063196][T10054] loop2: detected capacity change from 0 to 32768 [ 281.092662][T10094] loop0: detected capacity change from 0 to 1024 [ 281.117376][T10094] EXT4-fs: Ignoring removed nobh option [ 281.122983][T10094] EXT4-fs: Ignoring removed bh option [ 281.287352][T10098] loop5: detected capacity change from 0 to 512 [ 281.580568][ T7994] BTRFS info (device loop6): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 281.694873][T10102] loop5: detected capacity change from 0 to 128 [ 284.974690][T10129] loop2: detected capacity change from 0 to 764 [ 285.088267][T10129] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 285.298335][T10128] overlay: ./file0 is not a directory [ 285.352235][T10141] loop6: detected capacity change from 0 to 512 [ 285.395880][T10141] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 285.464682][T10141] EXT4-fs (loop6): 1 truncate cleaned up [ 285.508194][T10141] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 286.481269][T10153] EXT4-fs error (device loop6): ext4_read_inline_dir:1501: inode #12: block 7: comm syz.6.1234: path /97/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=40, inode=2085390, rec_len=0, size=80 fake=0 [ 286.506380][T10153] EXT4-fs (loop6): Remounting filesystem read-only [ 286.886722][ T7994] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.056829][T10142] loop5: detected capacity change from 0 to 32768 [ 288.101107][T10187] loop3: detected capacity change from 0 to 128 [ 288.148909][T10188] loop7: detected capacity change from 0 to 764 [ 288.243045][T10188] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 288.384887][T10181] overlay: ./file0 is not a directory [ 288.466910][T10195] loop6: detected capacity change from 0 to 512 [ 288.516851][T10195] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 288.562835][T10195] EXT4-fs (loop6): 1 truncate cleaned up [ 288.610270][T10195] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 288.630897][T10199] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 289.115255][T10219] EXT4-fs error (device loop6): ext4_read_inline_dir:1501: inode #12: block 7: comm syz.6.1254: path /99/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=40, inode=2085390, rec_len=0, size=80 fake=0 [ 289.149664][T10219] EXT4-fs (loop6): Remounting filesystem read-only [ 289.830963][ T7994] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.989065][T10237] loop5: detected capacity change from 0 to 764 [ 290.078828][T10237] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 290.308908][T10233] overlay: ./file0 is not a directory [ 290.574681][T10256] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1276'. [ 290.922829][T10269] loop2: detected capacity change from 0 to 512 [ 290.954458][T10269] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 291.012201][T10269] EXT4-fs (loop2): 1 truncate cleaned up [ 291.044351][T10269] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 291.063681][T10240] loop6: detected capacity change from 0 to 32768 [ 292.063578][ T5841] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.244362][T10295] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1293'. [ 292.299797][T10295] vlan2: entered promiscuous mode [ 292.332003][T10295] bond0: entered promiscuous mode [ 292.337385][T10295] bond_slave_0: entered promiscuous mode [ 292.356262][T10295] bond_slave_1: entered promiscuous mode [ 292.522002][T10310] loop2: detected capacity change from 0 to 764 [ 292.641558][T10310] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 293.400860][T10301] overlay: ./file0 is not a directory [ 293.471148][T10321] loop3: detected capacity change from 0 to 512 [ 293.497622][T10321] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 293.549146][T10321] EXT4-fs (loop3): 1 truncate cleaned up [ 293.573384][T10321] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 294.098477][T10343] EXT4-fs error (device loop3): ext4_read_inline_dir:1501: inode #12: block 7: comm syz.3.1301: path /230/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=40, inode=2085390, rec_len=0, size=80 fake=0 [ 294.124838][T10343] EXT4-fs (loop3): Remounting filesystem read-only [ 294.612178][ T5840] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.917153][T10367] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1318'. [ 296.138571][T10331] loop0: detected capacity change from 0 to 32768 [ 296.355638][T10390] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 296.383885][T10390] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 296.499969][ T5838] Bluetooth: hci4: link tx timeout [ 296.505671][ T5838] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 296.515026][ T5848] Bluetooth: hci4: link tx timeout [ 296.520547][ T5848] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 296.536144][ T5848] Bluetooth: hci4: link tx timeout [ 296.541325][ T5848] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 296.549179][ T5848] Bluetooth: hci4: link tx timeout [ 296.554324][ T5848] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 297.806427][T10415] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1339'. [ 298.019266][T10423] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1343'. [ 298.070485][T10423] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1343'. [ 298.586651][ T5848] Bluetooth: hci4: command 0x0405 tx timeout [ 299.500319][T10458] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1358'. [ 299.851997][T10471] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1363'. [ 299.861074][T10471] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1363'. [ 300.730359][T10512] netlink: 'syz.0.1383': attribute type 1 has an invalid length. [ 300.755963][T10512] netlink: 'syz.0.1383': attribute type 1 has an invalid length. [ 300.772642][T10511] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1382'. [ 300.962596][T10518] bridge_slave_0: left allmulticast mode [ 300.968827][T10518] bridge_slave_0: left promiscuous mode [ 300.998345][T10518] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.084295][T10518] bond0: (slave bond_slave_0): Releasing backup interface [ 301.115709][T10518] bond0: (slave bond_slave_1): Releasing backup interface [ 301.257147][T10518] team0: Failed to send options change via netlink (err -105) [ 301.265203][T10518] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 301.287334][T10536] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1394'. [ 301.316463][T10518] team0: Port device team_slave_0 removed [ 301.347848][T10518] team0: Failed to send options change via netlink (err -105) [ 301.377955][T10518] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 301.390188][T10518] team0: Port device team_slave_1 removed [ 301.397632][T10518] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 301.405617][T10518] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 301.440259][T10518] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 301.450288][T10518] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 303.447958][ T5838] Bluetooth: hci0: command 0x0406 tx timeout [ 303.574385][T10636] loop7: detected capacity change from 0 to 512 [ 303.615168][T10636] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 303.644818][T10636] EXT4-fs (loop7): 1 truncate cleaned up [ 303.694870][T10636] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 304.129593][T10653] EXT4-fs error (device loop7): ext4_read_inline_dir:1501: inode #12: block 7: comm syz.7.1436: path /129/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=40, inode=2085390, rec_len=0, size=80 fake=0 [ 304.204271][T10653] EXT4-fs (loop7): Remounting filesystem read-only [ 304.641773][ T8016] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.714035][T10706] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1459'. [ 306.985021][T10715] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1465'. [ 307.020162][T10715] vlan2: entered promiscuous mode [ 307.065520][T10684] loop5: detected capacity change from 0 to 32768 [ 308.482842][T10758] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1484'. [ 308.541085][T10758] vlan3: entered promiscuous mode [ 308.583973][T10758] bond0: entered promiscuous mode [ 308.669405][T10766] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1488'. [ 308.946200][T10776] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1492'. [ 309.005855][ T5947] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 309.020695][T10776] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 309.029850][T10776] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 309.038586][T10776] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 309.047315][T10776] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 309.059329][T10754] loop3: detected capacity change from 0 to 32768 [ 309.068023][T10754] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1483 (10754) [ 309.094156][T10754] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 309.114721][T10754] BTRFS info (device loop3): using sha256 (sha256-ni) checksum algorithm [ 309.123550][T10776] netdevsim netdevsim7 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 309.132989][T10776] netdevsim netdevsim7 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 309.141934][T10776] netdevsim netdevsim7 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 309.150890][T10776] netdevsim netdevsim7 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 309.169523][ T5947] usb 7-1: config 0 has no interfaces? [ 309.176067][ T5947] usb 7-1: New USB device found, idVendor=05ac, idProduct=030a, bcdDevice=65.8c [ 309.202677][ T5947] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.228487][ T5947] usb 7-1: config 0 descriptor?? [ 309.335994][T10754] BTRFS info (device loop3): rebuilding free space tree [ 309.415620][T10754] BTRFS info (device loop3): disabling free space tree [ 309.436335][T10754] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 309.457293][T10754] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 309.669865][ T30] audit: type=1800 audit(1743480241.108:46): pid=10754 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1483" name="bus" dev="loop3" ino=263 res=0 errno=0 [ 309.818586][ T5938] usb 7-1: USB disconnect, device number 6 [ 309.882266][T10778] loop0: detected capacity change from 0 to 32768 [ 310.028582][ T30] audit: type=1800 audit(1743480241.158:47): pid=10754 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1483" name="bus" dev="loop3" ino=263 res=0 errno=0 [ 310.674032][T10823] lo speed is unknown, defaulting to 1000 [ 310.694820][T10823] lo speed is unknown, defaulting to 1000 [ 310.714545][T10823] lo speed is unknown, defaulting to 1000 [ 310.743236][T10823] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 310.764300][T10823] [ 310.766635][T10823] ====================================================== [ 310.773653][T10823] WARNING: possible circular locking dependency detected [ 310.780840][T10823] 6.14.0-syzkaller-11125-g609706855d90 #0 Not tainted [ 310.787774][T10823] ------------------------------------------------------ [ 310.794790][T10823] syz.2.1504/10823 is trying to acquire lock: [ 310.800849][T10823] ffff8880250d7518 (sk_lock-AF_INET){+.+.}-{0:0}, at: sock_set_reuseaddr+0x17/0x60 [ 310.810208][T10823] [ 310.810208][T10823] but task is already holding lock: [ 310.817567][T10823] ffffffff8fe7dce8 (lock#7){+.+.}-{4:4}, at: cma_add_one+0x6c1/0xce0 [ 310.825709][T10823] [ 310.825709][T10823] which lock already depends on the new lock. [ 310.825709][T10823] [ 310.836110][T10823] [ 310.836110][T10823] the existing dependency chain (in reverse order) is: [ 310.845111][T10823] [ 310.845111][T10823] -> #3 (lock#7){+.+.}-{4:4}: [ 310.851992][T10823] lock_acquire+0x116/0x2f0 [ 310.857019][T10823] __mutex_lock+0x1a5/0x10c0 [ 310.862121][T10823] cma_init+0x1e/0x140 [ 310.866715][T10823] do_one_initcall+0x24c/0x940 [ 310.872005][T10823] do_initcall_level+0x157/0x210 [ 310.877473][T10823] do_initcalls+0x71/0xd0 [ 310.882326][T10823] kernel_init_freeable+0x432/0x5d0 [ 310.888050][T10823] kernel_init+0x1d/0x2b0 [ 310.892904][T10823] ret_from_fork+0x4d/0x80 [ 310.897837][T10823] ret_from_fork_asm+0x1a/0x30 [ 310.903114][T10823] [ 310.903114][T10823] -> #2 (rtnl_mutex){+.+.}-{4:4}: [ 310.910337][T10823] lock_acquire+0x116/0x2f0 [ 310.915362][T10823] __mutex_lock+0x1a5/0x10c0 [ 310.920466][T10823] ip_mroute_setsockopt+0x161/0x11f0 [ 310.926286][T10823] do_ip_setsockopt+0x1114/0x39c0 [ 310.931824][T10823] ip_setsockopt+0x63/0x100 [ 310.936931][T10823] smc_setsockopt+0x25e/0xd50 [ 310.942136][T10823] do_sock_setsockopt+0x3b3/0x710 [ 310.947685][T10823] __x64_sys_setsockopt+0x1ee/0x280 [ 310.953405][T10823] do_syscall_64+0xf3/0x230 [ 310.958420][T10823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.964826][T10823] [ 310.964826][T10823] -> #1 (&smc->clcsock_release_lock){+.+.}-{4:4}: [ 310.973441][T10823] lock_acquire+0x116/0x2f0 [ 310.978463][T10823] __mutex_lock+0x1a5/0x10c0 [ 310.983569][T10823] smc_switch_to_fallback+0x35/0xda0 [ 310.989382][T10823] smc_sendmsg+0x11f/0x530 [ 310.994321][T10823] __sock_sendmsg+0x223/0x270 [ 310.999514][T10823] __sys_sendto+0x365/0x4c0 [ 311.004539][T10823] __x64_sys_sendto+0xde/0x100 [ 311.009822][T10823] do_syscall_64+0xf3/0x230 [ 311.014839][T10823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.021248][T10823] [ 311.021248][T10823] -> #0 (sk_lock-AF_INET){+.+.}-{0:0}: [ 311.028910][T10823] validate_chain+0xa69/0x24e0 [ 311.034192][T10823] __lock_acquire+0xad5/0xd80 [ 311.039384][T10823] lock_acquire+0x116/0x2f0 [ 311.044401][T10823] lock_sock_nested+0x48/0x100 [ 311.049705][T10823] sock_set_reuseaddr+0x17/0x60 [ 311.055076][T10823] siw_create_listen+0x19f/0x1250 [ 311.060624][T10823] iw_cm_listen+0x160/0x230 [ 311.065646][T10823] rdma_listen+0xb51/0xe40 [ 311.070573][T10823] cma_listen_on_dev+0x3e0/0x6f0 [ 311.076027][T10823] cma_add_one+0x7dc/0xce0 [ 311.080961][T10823] add_client_context+0x540/0x8b0 [ 311.086495][T10823] enable_device_and_get+0x1de/0x450 [ 311.092305][T10823] ib_register_device+0x1138/0x1460 [ 311.098027][T10823] siw_newlink+0x938/0xda0 [ 311.102966][T10823] nldev_newlink+0x5ef/0x680 [ 311.108079][T10823] rdma_nl_rcv+0x6e7/0x9e0 [ 311.113015][T10823] netlink_unicast+0x7fa/0x9a0 [ 311.118292][T10823] netlink_sendmsg+0x8c3/0xcd0 [ 311.123574][T10823] __sock_sendmsg+0x223/0x270 [ 311.128769][T10823] ____sys_sendmsg+0x523/0x860 [ 311.134063][T10823] __sys_sendmsg+0x271/0x360 [ 311.139351][T10823] do_syscall_64+0xf3/0x230 [ 311.144370][T10823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.150780][T10823] [ 311.150780][T10823] other info that might help us debug this: [ 311.150780][T10823] [ 311.160995][T10823] Chain exists of: [ 311.160995][T10823] sk_lock-AF_INET --> rtnl_mutex --> lock#7 [ 311.160995][T10823] [ 311.172845][T10823] Possible unsafe locking scenario: [ 311.172845][T10823] [ 311.180283][T10823] CPU0 CPU1 [ 311.185660][T10823] ---- ---- [ 311.191011][T10823] lock(lock#7); [ 311.194656][T10823] lock(rtnl_mutex); [ 311.201155][T10823] lock(lock#7); [ 311.207317][T10823] lock(sk_lock-AF_INET); [ 311.211756][T10823] [ 311.211756][T10823] *** DEADLOCK *** [ 311.211756][T10823] [ 311.219890][T10823] 6 locks held by syz.2.1504/10823: [ 311.225077][T10823] #0: ffffffff9aadedb8 (&rdma_nl_types[idx].sem){.+.+}-{4:4}, at: rdma_nl_rcv+0x32f/0x9e0 [ 311.235133][T10823] #1: ffffffff8fe69eb0 (link_ops_rwsem){++++}-{4:4}, at: nldev_newlink+0x456/0x680 [ 311.244560][T10823] #2: ffffffff8fe5c950 (devices_rwsem){++++}-{4:4}, at: enable_device_and_get+0x130/0x450 [ 311.254603][T10823] #3: ffffffff8fe5cc50 (clients_rwsem){++++}-{4:4}, at: enable_device_and_get+0x18e/0x450 [ 311.264731][T10823] #4: ffff88806b1ec5f0 (&device->client_data_rwsem){++++}-{4:4}, at: add_client_context+0x4fa/0x8b0 [ 311.275628][T10823] #5: ffffffff8fe7dce8 (lock#7){+.+.}-{4:4}, at: cma_add_one+0x6c1/0xce0 [ 311.284201][T10823] [ 311.284201][T10823] stack backtrace: [ 311.290079][T10823] CPU: 1 UID: 0 PID: 10823 Comm: syz.2.1504 Not tainted 6.14.0-syzkaller-11125-g609706855d90 #0 PREEMPT(full) [ 311.290107][T10823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 311.290121][T10823] Call Trace: [ 311.290129][T10823] [ 311.290137][T10823] dump_stack_lvl+0x241/0x360 [ 311.290173][T10823] ? __pfx_dump_stack_lvl+0x10/0x10 [ 311.290205][T10823] ? __pfx__printk+0x10/0x10 [ 311.290236][T10823] ? print_lock+0x171/0x1a0 [ 311.290264][T10823] print_circular_bug+0x2e1/0x300 [ 311.290295][T10823] check_noncircular+0x142/0x160 [ 311.290328][T10823] validate_chain+0xa69/0x24e0 [ 311.290361][T10823] ? srso_alias_return_thunk+0x5/0xfbef5 [ 311.290386][T10823] ? look_up_lock_class+0x7b/0x170 [ 311.290422][T10823] ? srso_alias_return_thunk+0x5/0xfbef5 [ 311.290446][T10823] ? register_lock_class+0x54/0x330 [ 311.290470][T10823] __lock_acquire+0xad5/0xd80 [ 311.290497][T10823] lock_acquire+0x116/0x2f0 [ 311.290517][T10823] ? sock_set_reuseaddr+0x17/0x60 [ 311.290552][T10823] lock_sock_nested+0x48/0x100 [ 311.290577][T10823] ? sock_set_reuseaddr+0x17/0x60 [ 311.290605][T10823] sock_set_reuseaddr+0x17/0x60 [ 311.290632][T10823] siw_create_listen+0x19f/0x1250 [ 311.290665][T10823] ? srso_alias_return_thunk+0x5/0xfbef5 [ 311.290693][T10823] ? __pfx_siw_create_listen+0x10/0x10 [ 311.290725][T10823] ? srso_alias_return_thunk+0x5/0xfbef5 [ 311.290755][T10823] iw_cm_listen+0x160/0x230 [ 311.290783][T10823] rdma_listen+0xb51/0xe40 [ 311.290807][T10823] ? __pfx_rdma_listen+0x10/0x10 [ 311.290830][T10823] ? srso_alias_return_thunk+0x5/0xfbef5 [ 311.290855][T10823] ? srso_alias_return_thunk+0x5/0xfbef5 [ 311.290879][T10823] ? rdma_restrack_add+0x28a/0x7b0 [ 311.290904][T10823] ? _cma_attach_to_dev+0x295/0x490 [ 311.290933][T10823] cma_listen_on_dev+0x3e0/0x6f0 [ 311.290962][T10823] cma_add_one+0x7dc/0xce0 [ 311.290994][T10823] ? __pfx_cma_add_one+0x10/0x10 [ 311.291023][T10823] ? srso_alias_return_thunk+0x5/0xfbef5 [ 311.291047][T10823] ? _raw_spin_unlock+0x28/0x50 [ 311.291079][T10823] add_client_context+0x540/0x8b0 [ 311.291103][T10823] ? __pfx_add_client_context+0x10/0x10 [ 311.291124][T10823] ? __pfx_ib_setup_port_attrs+0x10/0x10 [ 311.291153][T10823] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 311.291177][T10823] enable_device_and_get+0x1de/0x450 [ 311.291212][T10823] ? __pfx_enable_device_and_get+0x10/0x10 [ 311.291249][T10823] ? srso_alias_return_thunk+0x5/0xfbef5 [ 311.291273][T10823] ? device_add+0x460/0xbf0 [ 311.291299][T10823] ib_register_device+0x1138/0x1460 [ 311.291338][T10823] ? __pfx_ib_register_device+0x10/0x10 [ 311.291373][T10823] ? srso_alias_return_thunk+0x5/0xfbef5 [ 311.291398][T10823] ? xa_load+0x2df/0x350 [ 311.291418][T10823] ? xa_load+0x149/0x350 [ 311.291440][T10823] ? __pfx_xa_load+0x10/0x10 [ 311.291465][T10823] ? srso_alias_return_thunk+0x5/0xfbef5 [ 311.291494][T10823] ? ib_device_set_netdev+0x5c5/0x6c0 [ 311.291517][T10823] ? srso_alias_return_thunk+0x5/0xfbef5 [ 311.291541][T10823] ? __raw_spin_lock_init+0x45/0x100 [ 311.291574][T10823] siw_newlink+0x938/0xda0 [ 311.291609][T10823] nldev_newlink+0x5ef/0x680 [ 311.291640][T10823] ? __pfx_nldev_newlink+0x10/0x10 [ 311.291711][T10823] ? srso_alias_return_thunk+0x5/0xfbef5 [ 311.291736][T10823] ? aa_get_newest_label+0x101/0x6f0 [ 311.291766][T10823] ? srso_alias_return_thunk+0x5/0xfbef5 [ 311.291791][T10823] ? __pfx_aa_get_newest_label+0x10/0x10 [ 311.291821][T10823] ? __pfx_aa_get_newest_label+0x10/0x10 [ 311.291856][T10823] ? apparmor_capable+0x13b/0x1b0 [ 311.291877][T10823] ? srso_alias_return_thunk+0x5/0xfbef5 [ 311.291905][T10823] ? srso_alias_return_thunk+0x5/0xfbef5 [ 311.291930][T10823] ? security_capable+0x7e/0x2d0 [ 311.291960][T10823] ? srso_alias_return_thunk+0x5/0xfbef5 [ 311.291984][T10823] ? __pfx_nldev_newlink+0x10/0x10 [ 311.292014][T10823] rdma_nl_rcv+0x6e7/0x9e0 [ 311.292051][T10823] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 311.292084][T10823] ? srso_alias_return_thunk+0x5/0xfbef5 [ 311.292108][T10823] ? __lock_acquire+0xad5/0xd80 [ 311.292137][T10823] ? srso_alias_return_thunk+0x5/0xfbef5 [ 311.292163][T10823] ? netlink_deliver_tap+0x2e/0x1b0 [ 311.292191][T10823] ? netlink_deliver_tap+0x2e/0x1b0 [ 311.292218][T10823] netlink_unicast+0x7fa/0x9a0 [ 311.292245][T10823] ? __pfx_netlink_unicast+0x10/0x10 [ 311.292268][T10823] ? skb_put+0x114/0x1f0 [ 311.292300][T10823] netlink_sendmsg+0x8c3/0xcd0 [ 311.292334][T10823] ? __pfx_netlink_sendmsg+0x10/0x10 [ 311.292362][T10823] ? srso_alias_return_thunk+0x5/0xfbef5 [ 311.292387][T10823] ? aa_sock_msg_perm+0x91/0x160 [ 311.292417][T10823] ? srso_alias_return_thunk+0x5/0xfbef5 [ 311.292443][T10823] ? __pfx_netlink_sendmsg+0x10/0x10 [ 311.292469][T10823] __sock_sendmsg+0x223/0x270 [ 311.292495][T10823] ____sys_sendmsg+0x523/0x860 [ 311.292527][T10823] ? srso_alias_return_thunk+0x5/0xfbef5 [ 311.292556][T10823] ? __pfx_____sys_sendmsg+0x10/0x10 [ 311.292587][T10823] ? __fget_files+0x2a/0x420 [ 311.292615][T10823] ? __fget_files+0x2a/0x420 [ 311.292645][T10823] __sys_sendmsg+0x271/0x360 [ 311.292681][T10823] ? __pfx___sys_sendmsg+0x10/0x10 [ 311.292741][T10823] ? srso_alias_return_thunk+0x5/0xfbef5 [ 311.292768][T10823] do_syscall_64+0xf3/0x230 [ 311.292792][T10823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.292813][T10823] RIP: 0033:0x7efe7ef8d169 [ 311.292832][T10823] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 311.292850][T10823] RSP: 002b:00007efe7fdaf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 311.292871][T10823] RAX: ffffffffffffffda RBX: 00007efe7f1a6160 RCX: 00007efe7ef8d169 [ 311.292888][T10823] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000006 [ 311.292905][T10823] RBP: 00007efe7f00e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 311.292920][T10823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 311.292933][T10823] R13: 0000000000000000 R14: 00007efe7f1a6160 R15: 00007ffdb891ffe8 [ 311.292957][T10823] [ 311.981427][T10823] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 312.009291][ T5840] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 312.009396][T10823] lo speed is unknown, defaulting to 1000 [ 312.028874][T10823] lo speed is unknown, defaulting to 1000 [ 312.036766][T10823] lo speed is unknown, defaulting to 1000 [ 312.043688][T10823] lo speed is unknown, defaulting to 1000 [ 312.050571][T10823] lo speed is unknown, defaulting to 1000 [ 312.057266][T10823] lo speed is unknown, defaulting to 1000 [ 312.064225][T10823] lo speed is unknown, defaulting to 1000 [ 312.070847][T10823] lo speed is unknown, defaulting to 1000 [ 312.078703][T10823] lo speed is unknown, defaulting to 1000 [ 312.085351][T10823] lo speed is unknown, defaulting to 1000 [ 312.092456][T10823] lo speed is unknown, defaulting to 1000 [ 312.099726][T10823] lo speed is unknown, defaulting to 1000 [ 312.106422][T10823] lo speed is unknown, defaulting to 1000 [ 312.112968][T10823] lo speed is unknown, defaulting to 1000 [ 312.119568][T10823] lo speed is unknown, defaulting to 1000 [ 312.126303][T10823] lo speed is unknown, defaulting to 1000 [ 312.132854][T10823] lo speed is unknown, defaulting to 1000 [ 312.139421][T10823] lo speed is unknown, defaulting to 1000 [ 312.146009][T10823] lo speed is unknown, defaulting to 1000 [ 312.152562][T10823] lo speed is unknown, defaulting to 1000 [ 312.159143][T10823] lo speed is unknown, defaulting to 1000 [ 312.166271][T10823] lo speed is unknown, defaulting to 1000 [ 312.172832][T10823] lo speed is unknown, defaulting to 1000 [ 312.179423][T10823] lo speed is unknown, defaulting to 1000