last executing test programs: 3m7.048794379s ago: executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, 0x0, 0x0, 0x7}}) 2m34.635979199s ago: executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, 0x0, 0x0, 0x7}}) 1m54.897159741s ago: executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, 0x0, 0x0, 0x7}}) 1m29.976548404s ago: executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, 0x0, 0x0, 0x7}}) 1m14.586484004s ago: executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, 0x0, 0x0, 0x7}}) 31.308306946s ago: executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, 0x0, 0x0, 0x7}}) 7.186347187s ago: executing program 4: r0 = memfd_create(&(0x7f0000000000)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?$^\xe1Ob\xe1Y\xd6\xeb\x91\x83;\xeb\xf1\xd0\xce\xe5\x19T\xff\x01\x00\x00\xe2\x9f\xd9\xae\xcf>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\xaa\xe6\x05\xe4\xc3\x90\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?\x87\x84\\/y\xed\x01#?\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\xa3\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x14M\x8b\xd0\xc0\xb8L\xbd\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\f\xeaH\xd8cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0', 0x0) fallocate(r0, 0x0, 0x0, 0x400001) lseek(r0, 0x0, 0x4) 7.101872761s ago: executing program 4: timerfd_create(0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') read$FUSE(r0, &(0x7f0000002280)={0x2020}, 0x67) 7.024161125s ago: executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') unshare(0x24060680) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x4c, r1, 0x1, 0x0, 0x0, {}, [@GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_I_TEI={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @local}, @GTPA_O_TEI={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}]}, 0x4c}}, 0x0) 3.167036388s ago: executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000240)=0x6, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f00000002c0)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) 3.06023389s ago: executing program 4: syz_mount_image$bcachefs(&(0x7f00000005c0), &(0x7f0000005dc0)='./file0\x00', 0x10800, &(0x7f0000000940)=ANY=[@ANYBLOB="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", @ANYRESDEC, @ANYBLOB="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", @ANYRES64], 0x1, 0x5d69, &(0x7f0000006600)="$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") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x3004000, &(0x7f00000001c0)={[{@errors_remount}, {@resuid}, {@block_validity}, {@min_batch_time={'min_batch_time', 0x3d, 0x7}}, {@nobarrier}, {@noblock_validity}, {@dioread_nolock}]}, 0x1, 0x790, &(0x7f0000001740)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0xe1, &(0x7f00000001c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 1.842604399s ago: executing program 2: r0 = syz_io_uring_setup(0x231, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0xffffffffffffffff, 0x0}) io_uring_enter(r0, 0x7a98, 0x0, 0x0, 0x0, 0x0) 1.719512166s ago: executing program 2: r0 = socket$kcm(0x28, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x28, 0x2, 0x0, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000002000)={0x0, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000020000000000000000000000d77d201308009f33"], 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x18, 0x8, 0x40, 0x42, 0x1}, 0x48) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x40100, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000006311f7ffffff000007000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffff6b}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r1}, 0x38) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000001600)={r1, &(0x7f0000000580), &(0x7f0000001580)=""/92}, 0x20) 1.555154559s ago: executing program 4: syz_mount_image$bcachefs(&(0x7f0000005b00), &(0x7f0000005b40)='./file0\x00', 0x0, &(0x7f0000002180)=ANY=[@ANYBLOB="24e512fbe500a0196b613b8ae3057700"], 0x1, 0x5b60, &(0x7f000000b700)="$eJzs3Q2MHNWdIPCq7hnPjMc2YxLAMR8ewPgMF2CMyQEWUQZOAXKJCYHEJIFgO3hshvgDPHYMTogNUkhEOM7SnRIuUhBCicQJIXKLNpuPjUy0hGjDRrGUZU12N0sEiTbsihgRSLwYZVYzXTXTXVOvq6e7x9jw+8memqp+/X/v/+pNTdXrmu4IAACAt4WnvjjyxysXvv+ndw29tuuK72+6M+otj2/vTgv0Jcvb3qwWcjh1dSwYX2bHxZ7BWU+9794PPfuNT33r+RfmL132zZsvO3TrnJX33DP4iwsO/ezPdxTFTcfTmZPr8UtxFJ3886VfvfvHT58wti2Ooqgc9+2Oovlx6Ufz40yIgdejKFo30c7aBx9/bfn6seXur3RFg1Xbj8kEMd7f3rqTcfalH2456XfnXPbs3l9e+tpA9+tbd08WiburxlMUzVtT/fzOKIp6kv9jupLlgvTJyfKqKIpmVz3vwoJ2ndZg+88OrC9MlrOSZW9BnPTxUzPrnQ22oyOz7G7wec0qzXD8VLr/5sxw/dmDW7ae+cnyO8nyzGnGL6f/46gURx0T1W2MJ8dIVLXf4ige3/eT66WasRBnxkYcRXFmvZRZL3dm8hqvNxlo5Tiu3Z6Wy2zvT7Z3JNtPLRhr1wS2vyvNN/lBPZjJPxu0d8o3E3mNS9v16/ynHzalqmNQ3va0vd3JzuhNtvXGx055zmiO9LFVL9z32PM7H1jcF2hH/O04iR83Ff+ZTRftX7LzVwcWhOKvKSXxS03FHznnlUdfvPonJwTj70njl5uK/9z5S772g107Dgb75+W0fzqail9ecdahZXcNrAq2/8E0fndT8R+69JGvz3vPk48G2z+Q9k9Pc/0zvP2N6x4+7kAwfpTGn91U/EtePf6MFVse2RCM/0TaP71NxX96ZHjl3Tct2tEfir8vjT+3qfin/eb66/buH3ou2P7BtH/6mor/3sWXXLXywOZ7Q8epePfh+g0L8Nb0juQc68vJerPXma2qul64vy+unPPNSf7PbWdFGWP1zJvB+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC8PT3Ut27oz9875Y2OZL0r+eaUcmWZbp8VRXFPFEUj29Zu3Ta8eUP/zVu2b928dmP/2m39Q5u3bb29//x3928dumXj2tvHHh04e3nlecdGcWUZnzyl7tHR0dFSX+22tL7PXPC/H+8/Zf8/RtHAcb84pSPY/g/fsfC/z8/5mhEPjm78X2fc8OKcv91e2dCXtKsv0K4o0K6LH35pxe++3/M/o2jg+Hrt+tell/+4pkHjGybjJEpdUWn8m654dm47JlqdtCftr471wxuHBor7txzI47cH/+JjO0Zu3F3p3+5gHg32b8/g6J82f/eJGy/eeVVlw5G634v6O80ibV/af91Jf89L8poXyKsjkNfdZ5z6L//wfze9tDsa6PjDoql1F+XVmQyAzvhdDdWb1jA7ru2T7qR8usfT5527bdMt547cvvPs4U1rNwxtGNq8fPnyC89fft4F5/23c8dTr3xtW/5p/f+lwfwPz3jacsHgcPq1sfFU1K6i/hhrV3F/VLco9PP3zo9e/k93/uWeqysbisZ5WnrieJIsZ4/t5mVR1Xib2ld5eRX1Q2egHzZc0/v/Xu3f8h9Fx6HqPVP9NSMeHP3D8N+9b87e02+obDgsx/nqBjV5nJ9oddKezurjzrKc/o07ap7/ZvVvV1RO8urNzev0u175+N9/L+6faN+sWdFta7dt27qs8vUwjZt3XvP59uZ14ZJ/v3XnmjvnT8nrvMrXOUlL58Qn5rYruzXNa9H413KUdEu6iLpLacnOmud1RpX2ZX8vpM/L9mpv8lhvfGxuXlnpY6teuO+x53c+sDjU0/G3KzX2RHMry/ikQMmNmSeWJxqcV3/R+IiiaE31trQfn/ju/+nf+9P5mwrHR2VkTPmaTW9w9AsXzfntyLX7VlY2HJ7jSlWD6hxXuuocVyZaPdme8f4aP66cd+Tk8ebt51J1sXhwdO9J796w/K+3JT/2RcftidJ5/bs8ioqOA4sy640fB2oVHQey9UyWz4/Xn1nvjcpNHTeeO3/J136wa8fBqXtmVqV9Lzd63Ph8zVq5xeNGPLafdk1uS/t9/xf+/58+t/+ZD7TvuPGBJeVP/vOi5UmHHik/b93JuO4OjOuJViftiavH9Tk3btm4rrL9yD3/TZYF1z/p7++R23d+Zu3GjUNbRxrLq9HzkrSebC83e16S/vQdW5BXur8m85q5bxrprzhw/M7+vKXtX5ftryZ/3iBPbxQ39fvsmU0X7V+y81cH+gJx4zWlJH6pqfgj57zy6ItX/+SEYPw9afyOpuKXV5x1aNldA6uC8R+Mk/jdTcV/6NJHvj7vPU8+Gow/kLa/p7nzieHtb1z38HHh/o/S+L2VS+Rpxn96ZHjl3Tct2hGMvy9O6hk7t4uix19bvr6yHo9fmXVXtaOzpl1Rdj3OrJcy6+Xq9VJ6xpRUUI7j2u1puWT7qVVtyXNtYHt69ti9oLI8mK5H2W/qbz/SlKrOCfK2F51fA8BbSfr6f3qukb7+vyj5hVj1+n9lGc+qef6C5HxqweSm8eu8O/srv0inO6+XtiM7r5fGX3p6bYxm5/WK5uVOy6yn7VqU9EranjrnDXOiBublptZTf14uk37xvFn/lzMbOsbn9kL7rTOZqch7nTnT3jljEcbPs5s4j0/Psxfkt3riPDs07rLzHenr9HGD4y57X0S6f7P3RaTxF2Ym0Jq9L6LVcZdOa9QZd+OZFc+nTh0XUZ1+nRwX+dGy42Ia46ivMo5m9nWpo/96v93z70n8l9P+MZ+QGz/5PXKkX++n29PjQ0eD8wCrAtvbNQ+QHi7Sdv26TlsOB/MAADB5/Z+eU4xd/4/9ru7PnOcXXbdkrzLSeMH7WMr57Sm6/p16P9vsps77Lnn1+DNWbHlkQ/C8+IlG70u5pWZtdsF9KUX9uDizXtiPgVtBiuYdlmTK90Zzm+rH035z/XV79w89F+zHwcqJVHE/7qlZm9tiPy7NrBf2Y2d+q4r6MVtP0fg9M7Pem9wRNN1+f+/iS65aeWDzvcF+391ovz9Ys9ZX0O+u0wPxXacfEdfpMz0f+abNAyTz1jM1D3BNYPt05wF6p3wzkde4o24eIPB7AQCOZun1/8T98sn1/99kyrV6fRg8bxtsz/2swfO2ifPa1s7Lg+2fOC9v7booGH/iuqi165Zg/0xct7R23RWMP3Hd1do8TbB/nkj7p7Xz/sk/F6g94UvP+4/+66KZnWdwXZSsR9lvKlwXAQBwJEiv/9PT1fT+/yeT9ey58cxf5870dehMX0fP9DzDTM+THO3XuUfLPEMm/sQ8w0zPs5kHMA9QzDwAAMBbw/uT5Q0Nlu8Yv4c4ij59403nrV439NnV67cODY3csvbGodXDm4e3TZTrHL/ymnqfdKi+ovuk88rPrlN+dTB+bXsuC5QPaTX/UH1F+eeVr5f/mmD82vZcHigf0mr+ofqK8s8rn+Q/9Rl3RtHaYPza9lyRLLPlQ1rNP1RfUf555evt/08H49e25wOB8iGt5h+qryj/vPL18r8xGL+2Pf8jUD6k1fxD9RXln1e+Xv7Z98sM5f/BQPmQVvMfqy+O67Wv8Xzq5T8UjF/bng8Fyoe0mn+ovqL888rXy399MH5te1YGyoe0mn+ovqL888rXy39DMH5te64MlA9pNf9QfUX555Wvl/9Nwfi17flwoHxIq/mH6ivKP698vfyHg/Fr23NVoHxIq/mH6ivKP698vfxvDsavbc9HAuVDWs0/VF9R/nnl6+X/mWD82vZcHSgf0mr+ofrq5z/1j6OL8t8YjF/bnmsC5UNazT9UX9H+zytfL/9Nwfi17flooHxIq/mH6ivKP698vfw3B+PXtudjgfIhreYfqq8o/7zy9fLfEoxf255VgfIhreYfqq8o/7zy9fK/JRi/tj3XBsqHtJp/qL6i/PPK18v/1mD82vZ8PFA+pNX8Q/UV5Z9Xvl7+W4Pxa9vziUD5kFbzD9VXlH9e+Xr5jwTj17bnk4HyIa3mH6qvKP+88vXy3xaMX9ue6wLlQ1rNP1RfUf555evlvz0Yv7Y91wfKh7Saf6i+ovzzytfL/7PB+LXt+VSgfEir+YfqK8o/r3y9/HcE49e254ZA+ZBW8w/VV5R/Xvl6+d8WjF/bntWB8iET+W/bOjS0evst69ZuG1q9ecu6oZHVO7YOb9s2lJyotXpfYvC+suS+xM6oo27+CzPrxyTvD3RM4P2BsuXTsCeOfzP1/YGy1XYUvE9O0f7K1p+/vzrqls8bb6H9W3Q8aHQ8ZNX8fFQGyfDmkaGtU4/fPXX7o3pMROO3zfVUlvHxDZXPvl1noJpCjefTXTef7Oau5EbArvi4hspHgc+Dm67G84mD+eS1Y7qfY5eGndbn2GW+TJHzHq01+a4fGT9ID6/dOLxzaGr7Zx8B7X9z+rE0pR1F+z/OtGN+0pL5oc97C7R7x3f+7aHf//6vPhhFA8eVT2qp/+LB0TUHj//0zy/uOnes/aW67Z8omX6ucsHnH2bLp/l0bNwysu2/rt+yfXP+K2jp/c6lifUZut85ybPc4P3Lofs9pnv/cjzlmyNTo/cvAwAAvF2kf/+fXq8uSP4GdX5miqDxeeDW/j46OA+8r7F54OxsRNE8cLZ8mnaj88C9Lc4DZ+sPzdOW6pSv97pLo/PAnwyUn67Gx0lr7wMQHCdJTxWNk+zf4ReNk2z56Y6TnhbHSbb+onGSV77e69ONjpNrA+VDGh8Prb3vRHA8DDQ2HrKfq1k0HrLlpzseulscD9n6i8ZDXvl69+s0Oh4+GijfqMbHR2vvCxMcH2vS8dFVt7+zn5dSND6y5ac7PuIWx0e2/qLxkVe+3v2MjY6PjwTKpxrf/629b09w/+9p7PiQ/dyWov2fLT/d/V9qcf9n6y/a/3nl693P3ej+vzJQPlW7/8d2/Ph+H1q9Y8vW6numZ/pzW0Iab9/Mfm5Nsxpv/8y+79PMt39m31dq5tvf2nVTsP37Wnulq/H2z+znEjXrsL0em7zZVOj9p9Jqil6n/URg+3Rfp5015Zsjk9dpAQAAYOalr/+n7ziRvj/8V5Jl4GP6m3b0f763z9/Ojd+mz98umsc8UubzSg3+3cURMp83uqupp02f+TwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID26OpYML586osjf7xy4ft/etfQa7uu+P6mO/cMznrqffd+6NlvfOpbz78wf+myb9582aFb56y8557BX1xw6Gd/vqMwcF9lcWay2h1F8UtxFJ3886VfvfvHT58wti2Ooqgc9+2Oovlx6Ufz40yEgdejKFo30c7aBx9/bfn6seXur3TVbD8mEySbV9RbTttT087otsKMOAp1J+PsSz/cctLvzrns2b2/vPS1ge7Xt+6eLBJ3V42nKJq3pvr5nVEU9ST/x6SjbUH65GR5VRRFs6ued2FBu05rsP1nB9YXJstZybK3IE76+KmZ9c5kmf3hy+rILLsLyreqNMPxU2nec2a4/lD/pvXMT5bfSZZnTjN+Of0fR6U46piobmM8OUaiqv0WR/H4vp9cL02MhbS9mfU4s17KrJc7M3mN15sMtHIc125Py2W29yfbO5LtpxaMtWsC29+V5pv8oB7M5J8N2jvlm4m8xqXt+nWdthwOpapjUN72tL3dyc7oTbb1xsdOec5ojvSxVS/c99jzOx9Y3BdoR/ztOIkfNxX/mU0X7V+y81cHFoTirykl8UtNxR8555VHX7z6JycE4+9J45ebiv/c+Uu+9oNdOw4G++fltH86mopfXnHWoWV3DawKtv/BNH53U/EfuvSRr897z5OPBts/kPZPT3P9M7z9jesePu5AMH6Uxp/dVPxLXj3+jBVbHtkQjP9E2j+9TcV/emR45d03LdrRH4q/L40/t6n4p/3m+uv27h96Ltj+wbR/+pqK/97Fl1y18sDme0PHznj34foNC/DW9I7kHOvLyXqz15mtqrpeuL8vrpzzzUn+z21nRRlj9cybwfgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALw1DV1+/67L962+oiOOojhQZjRH+lh51uBgfxP1llecdWjZXQOrqrctaCIOAAAAUCy9Di9NbOmOFkQ74p7oxNzy6RzBielaXLs9O4fQM1myLXFKbYpTblOcjjbF6WxTnFltitPVpjjdBXG6o8bi9NSNU2q4PbPbFKe3TXHmtCnO3DbFmdemOMe0KU5f3TiNj8P5bYpzbJvivKNNcd7ZpjjHtSnO8W2Kc0Kb4mTnlKc7DucmJReG4ox/Uy6M0xGXJx7Im09P6zk587zSNOvpbbCeypz9aLnZenoarOf0FvPpbrCeJS3WEzdYz5kt1lMqqCcdt7dl25fWk641OP5vb1OcnW2K87k2xfl8m+Lc0aY4X2hTnF0txgFoVHr9P3nd2Bd1dVwczU6OONlZgPR6d1Hl2VOOR93ZC/REGu+kzPZZRfGyF+qZeIva3L7TMts7a+J1ROm9DnXi9VXHW5x5sDDf7IRCpn1LpxsvO7EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADNo6PL7d12+b/UVURyN/cs1miN9rDxrcLC/iXpXvXDfY8/vfGBx9baujiYC8Z/s2l2MXGX5APD37HyyLfyn/0AdSKEjpRUj0tJF+UgNB72YJQYlgNGA6W4pQ92w3UV2m8KKrPWCeKGBRBNXrwxXGMKFGhSVZLnQGJSETRSbCIoXEkUDJEBCTUzG7M4589WZzjKCbfH3u3jPnPd93uc552zT5DkzAAAAMFDah+eaM8VQyO4M+SjfEVdM3gMUk/NMqXGMKiNrx9Fo0wnjs0n8zvmDd+2cu3fhw1MH9x2oHajNjI2NXXn52O4rdn905x1T07VdjTEUBuTLJfnm7l24c9/0dO3uucZ593WXk33l1tTk6nAkue7/H1AnSuJbdd69D4P/WgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcHLVqkuL1ZWJ8dEohKhPTL2HdC2Tj+PKEHWvfXPz9qtnHz3QPlfIDpEIAAAAGCjtw3PNmWIoZDMhE85dO7uwFVoKodX3AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/3tq1aXF6srE+IYohKhPTL2HdC2Tj+PKEHV/Mzd1/QNf2Hq4fa48RB4AAABgsLQPH2nOFEM5bAu56NyOuPTdwHld+7vj0jznrzOu+91Bv7ht64zbsc64Dw6I+1RyvCcAAADA6S/t/7PNmVIoZM/s2/8P6uvTuK1dcZnkOMxvBQAAAID/TNr/55sz5VDIlpv9+nr7/Qu74tL9g763T/cP+t4+jbu4T53u7/MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgFNXrbq0WF2ZGM9EIUR9Yuo9pGuZfBxXhqj74uU7vv3zxcPH2ucK2SESAQAAAAOlfXir9S6GQnY05MKGtb7/yh3/+OLC5JFNuVKynM+He/bNz9+9uzGmcdu++vrnfvfTqHJc3GWN8aTcHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8I6qVZcWqysT42dEIUR9Yuo9pGuZfBxXhqj74tShf936yDmvtc+Vh8gDAAAADJb24a3evxjKIR/yYfPaWXuvv2qka3+/dwYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAe8fcvQt37puert3tgw8+nCYf/rz13a91sv9nAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAThW16tJidWVivBiFEPWJqfeQrmXycVwZou7DH3/0u2d95BePtc+Vh8gDAAAADJb24a3evxjKIRdy4Zy1s17vBNb6/9J/8SIBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBTQq26tFhdmRg/Mwoh6hNT7yFdy+TjuDJE3Qv/8vlbl4/WXmyfK2SHSAQAAAAMlPbh+eZMMRSyl4VC2JKcT3duiDLJsfd7gda+uzq2ja57330d+zLr3ve1rjvLJnfT2FdM85Uax+a+yvH7KiGEcrKv3FqY7NgXHurYdea6r/N7HftKA/YFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAXVqkuL1ZWJ8SgKIeoTU+8hXcvk47gyRN3nDl51dMfCH19rnysPkQcAAAAYLO3DW71/MZTD+eGscP5a3x9KnfFp3J5HXrn6bz874xsh7Nr82wuyffP/9eLqL7uHEEY6g0ZC+L+kXtSn3uEf//3hV1/9ySdD2HVOZsvbrdeZMq5PHtt827N7CjtP8GAAAADgPSTt/3PNmVIoZGf69v9p5/22+v/Zs2+6b1MyJh15146RUlJvpE+9O6/45o8qFxz9w2r/f6J6n/7yeZ/YFGaviKfSsTHTJYrr0w9u3/vyxqcPpXfdqJ/pqp8+l5eO/fAzh+f2f6VRvxiKyfx52V71jx+7nBHX35p54qn9exZu6Kyf7XP/D2x//59+/52Dr6zWf2PraLP+B05w/yeuf/bN1eePPP7QjZ31c33qH7hpw/ffrMz+s/v+R7sSJ0++8Qdv+yuEqONBRXH9jalnrtm4vG1vZ/0QwmR7YPr8n3riW5XlX286mNZPfyty8bau+m3/1BrjkWRlpKv+8pZLDow9Ob+hs37UVT+96qP3/+CtLx197rru+7+9+/6Pq98Yu0Rx/bodmVte2Do2zI9nAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABOA7Xq0mJ1ZWI8ZEKI+sTUe0jXMvk4rgxR92MXXXvD9a/NfL19rpAdIhEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwjqlVlxarKxPjI1EIUZ+Yeg/pWiYfx5Uh6s5d+vpjL9/4q/e1z5WHyAMAAAAMlvbhrd6/GMohH/JhdK3vnzy2+bZn9xR2hlJjNUqO2enZufkP3TF7aOb2k3TlAAAAwHql/X+2OVMKhexFIZf0/8tbLjkw9uT8hrT/DyFMrg7FO6ama2Oh+Z7guh2ZW17YOlZpvidoj7t0/+x08pogzXv/VRtfmvvsyvU98+5uxb0x9cw1G5e37U3jcslxLe6yVtz0g9v3vrzx6UNp3Ej6nmI1blcr7q2ZJ57av2fhhnQ9056vLe7sm6vPH3n8oRubeZLjaFIXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP7NDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFfbrKESq6o8D+Dkzs+7orPuf/Ue5SZGKiQbJSkUlRKuQ9NBGFPhigQ9ZGZnUEoYQbkIWJuFTRVBEFAQiBUEPRVhQBkkURGgPYWgP9RAb0Ya4UTG79+zOXL3temsN5POB4ew5c+/3/O65Z+7OAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/63uWv9Ee/ip4d9uX3zLZ7u3jO269b1tT+4fnHf45n23HXv5njdOnOxbueb1BzeMP9IztHfv4FfXj3/+xxMzBj8+2azKuvUQ4k8xhMu/WPn8nk+OLGqNxRBCNTZHQuiLlY/6Yi5h4HQI4d6pOjvffGfsmvta7ciz3R3j/8uF5K8rNKqpnknNznq5sNSzffb0B9sv+2H1hmOHvlk/NlA//ejI9CGx3rafQujd3H5+VwhhfvZqSbutP53cduyCtr9vmKGuZbOs/+qC/uKsnZe1jRly0vtLc/2uWdZRy7X1WZ5XVmWO85N0/3rmeP78wy0/T1/Wvpu1q84xv5peMVRiqE1N91Cc3iOh7b7FECfu/XS/0rEXYm5vxBBirl/J9atdueuamDfbaNUYO8fTcbnxJdl4LRtfOsNeu6tg/NJ0vdkH9VTu+vOhjTP+mLquCamu7/6mlvOh0vYMOtt4qree3YxGNtaI/z/jnD/PIr238eRzb53Y+cryZkEd8e2Y5cdcfves8r/eduPRFTu/He0vyt9cyfIrpeofXv3LwR/v/HRRYf7+lF8tlX/82hUvvL9rx6nC9fk5rU+tVH517VXja3YPbCys/9WUXy+V/9r6Ay/1XvfxwcL6B9L6zC+3Plsf+33TmxePFuaHlL+gVP66Xy+5cu32A/cX5n+Y1qdRKv/I8NahPQ9csWNJUf6XKX/hOee3PjHLvr9706GjW44X1j+Y1qdZqv6blq+7Y2j04X1Fz844cr7+wwJcmC7KvmM9k/XL/s78p9p+L7zYjJPf+Xqy18J/c6Kc1jy9c5gPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8xQ4ckAAAAAAI+v+6HYECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAUwEAAP//d1FZJA==") 1.446485546s ago: executing program 2: connect$tipc(0xffffffffffffffff, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x5}}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x80000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000000)={0x18, 0x0, {0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'macvlan1\x00'}}, 0x1e) sendmmsg(r3, &(0x7f000000d180), 0x4000000000000eb, 0x0) 1.220846912s ago: executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x28, r1, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}]}, 0x28}, 0x4, 0x700000000000000}, 0x0) 1.196704533s ago: executing program 0: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000008400000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 530.31499ms ago: executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) clock_gettime(0x4, &(0x7f0000000540)) sendmmsg$nfc_llcp(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000180)={0x27, 0x0, 0x0, 0x6, 0x5, 0x2, "7262a5d12061a90d9d88d2dbde26f3f1e2330fca461482039dd62e57e45dd48bc865160c7506588b0d5043300b132aed5dc2635d8a36e510ddc26c56e22df1"}, 0x60, &(0x7f0000000300)=[{&(0x7f0000000200)}, {&(0x7f0000000240)="1c2d3721d3257d3c4b9291e07d61a503cbe17cb68a7f84eca96c7fba25ed5428abcd9d6e72bc02debbe2c6291f49961eb25330c78f224e67b2a1f9362055cac4ed340951b6a44b097397fd0cbd82ab4d338d516d216484bb3c9d2a9c1c32ea396b57e20708094425672c722d39ad297a8f7dea50d652ef22ac5da87e0417efcdb849befa3d8bcee9f80a13c0ca2485cb150b94c3f35ab820120998bb7f1c6006764f4011862484ad9d31bd869f3278ceb3bc2e0ff9c7eee3c3ec7a", 0xbb}], 0x2, &(0x7f00000003c0)={0x30, 0x11, 0xb924, "e921ce8a5eb7c5fe65ba3a97629110ae222fc52fc5d8e1e1658d1bd23741c442"}, 0x30, 0x41}], 0x1, 0x20044000) r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0x9e, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) setsockopt$inet_msfilter(r1, 0x0, 0x23, &(0x7f0000004b00)=ANY=[@ANYBLOB="e0000808ac1414"], 0x10) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11}}}}}, 0x0) 517.062657ms ago: executing program 0: timer_create(0x3, 0x0, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x77359400}}, 0x0) timer_create(0x3, 0x0, &(0x7f0000000200)=0x0) timer_settime(r0, 0x1, &(0x7f0000000340)={{0x0, 0x3938700}, {0x77359400}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x77359400}}, 0x0) timer_delete(0x0) 496.382641ms ago: executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000540), 0x0, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc02c5625, &(0x7f0000000580)={0xf0f000, 0x18, "40191df9a9dda8f1fce6b8da4d0ecb854e64b3a1573640154ca4642f8f4b05a1"}) 446.022507ms ago: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') unshare(0x24060680) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x4c, r1, 0x1, 0x0, 0x0, {}, [@GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_I_TEI={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @local}, @GTPA_O_TEI={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}]}, 0x4c}}, 0x0) 417.90367ms ago: executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000940)={{}, 'syz0\x00', 0x41}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x2) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000000040)={0xf, {"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", 0x93f}}, 0x9af) 411.434169ms ago: executing program 3: r0 = socket$kcm(0x28, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x28, 0x2, 0x0, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000002000)={0x0, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000020000000000000000000000d77d201308009f33"], 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x18, 0x8, 0x40, 0x42, 0x1}, 0x48) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x40100, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000006311f7ffffff000007000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffff6b}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r1}, 0x38) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000001600)={r1, &(0x7f0000000580), &(0x7f0000001580)=""/92}, 0x20) 322.532975ms ago: executing program 0: r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000240)='\x00', 0x1, 0xfffffffffffffffe) r1 = add_key(&(0x7f0000000340)='keyring\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f00000000c0)={r1, r0, r0}, 0x0, 0x0, 0x0) 268.301297ms ago: executing program 0: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x3, &(0x7f0000000040), 0x4) connect$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="081147334d78"}, 0x10) syz_mount_image$hfsplus(&(0x7f00000008c0), &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='nls=iso8859-4,nobarrier,gid=', @ANYRESHEX=0xee01, @ANYBLOB=',uid=', @ANYRESDEC=r0, @ANYBLOB="0000000061746f3631ff00"/25], 0xff, 0x6de, &(0x7f0000000900)="$eJzs3U+IXVcdB/DvffPyJi9COm3TNIqQoYGiDSYzedRWEBJFJIsgQTfdDsmEDJmkZTKVtIh5UVvBlSvpwkVF4qIrERHqSmzXguBGN9kX3AlmoT6599335s3My/xpMvPS9vOB++6575x7zu/8cu99/zLcAJ9Z51/JgW6KnD954Va5fe9uZ/ne3c71QTnJdJJG0uyvUrST4oPkXPpLPl8+WXdXPGicF4v3i+Y773X6W816qdo3ttpvk7Etu8nB4cZUktl+8T876LAxvr9qqfq5tNbfx1QM4y4TdmKQOJi03ibdtcpxp8Z6Oz9vgcfW7f7r5iYzyaH0X13L9wGprw7bXxkmb8trU3f/4gAAAIC9Mvaz/Kgn7ud+buXw/oQDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnw5F/56BRb00BuXZFIP7/7dG7qnfmnC4D+mtK9Xqu09MOhAAAAAAAAAAeCjH7+d+buXwYLtXVL/5P1dtHKkeP5fXczOLWcmp3MpCVrOalcwnmRnpqHVrYXV1ZX7znr9IuWev17td73lm7J5n1sfV3RjouP9psKkRAAAAAAAAAHxm/Sjn137/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAx0GRTPVX1XJkUJ5Jo5nkYJJWMTts3pposI/AnyYdAAAAAOy9dr0+XPyvX+gV1Wf+o9Xn/oN5PTeymqWsZjmLuVx9F9D/1N/4a7ezfO9u53q5bO74G//cVRxVj+l/9zB+5LmqxTPDPc7n2/leTmY2F7OSpXw/C1nNYmbzraq0kCIz9bcXM/futjOIdXO859ZtXdwY2/GRchnfsSqSdq5kqYrtVC61BqE36nbHRkb7QyvZMOKdMjvF2bNnm0nODp8+sGWOLtfrckY/r9ePh5lq5geGGZmrc19m48nRvG/OfXmc3Nn5XDaONJ/G8DuoI2ujlJsbRxrmvLLD8Q6VD/+YquJ7e29zvsuv0tZnovuzcmtw9B3dOufJl//254tXGzeuXb1y8+Tjcxh9TBuPic5IJp7dUSaWy0x0HyITBx8m/kenVWejfxWtrpbNfs32V8vnqn0PZynfyau5nMW8lLnM5+XM5Ws5k07OjOT1ma3zWp1rjd2daye+VBfK16Sfjrw27ZvpB1W0iubI1vorXZnvJ9c9s5alp3aQpaKV8Vn6+9hQml8YRpH8eOQVZ/I2ZmJ+JBNPb52JX/23l+Tm8o1rK1cXXtvheM/X6/K0fWv9tfnXj2RCu1dPtzwPn0p98r2ddUdHWff0oG5Dvlr1Ly7NurN1da1U7376ddudqWVPR++M66lf9+zYUTpV3bGRunXvcvJqlofvQmr7fpICsAOHXjjUan/U/kv73fZP2lfbFw5+c/rl6S+2cuDD5h+nftv4TePrxQt5Nz/M4UlHCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnwY333jz2sLy8uLKZAtlKJuq0thFP1PZvs2d6SSbqgap6D/TGrP78ezV3Af3LnqUPU/Vfe73P+XxsjA9ckQVG9v8buuZtiZx+LXHHRJ7WmhnbFWaD93zv3vbtZnOmKoLw2faSWMYT5Jrj8kN7oC9cHr1+munb77x5leWri982Os7+1Lnq/O3T19ZWl6c6z9OOkpgL6y9DZh0JAAAAAAAAAAAAMBO7ccfPIwZtuhOYK4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAJ9P5V3KgmyLzc6fmyu17dzvL5TIor7VsJmkkKX6QFB8k59JfMjPSXfGgcV786P1fPv/Oe521vpqD9o0N+/3+X73eLmfRrZfMJpmq19ub3lF/l0b6627d4QPiLoYzLBN2YpA4mLT/BwAA///FpADK") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x6002, &(0x7f0000000000)=0x3, 0x7, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e24, @private=0xa010101}}}, &(0x7f0000000100)=0x84) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000140)={r2, 0x1}, 0x8) userfaultfd(0x0) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000000)={0xffc9}) r3 = socket$nl_route(0x10, 0x3, 0x0) mmap$snddsp_control(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000008, 0x10010, r1, 0x83000000) r4 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="00001400000000000a00bbbbbb00000000000000"], 0x2c}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, 0x0) set_mempolicy_home_node(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0) getdents64(r1, &(0x7f0000000680)=""/249, 0xf9) 184.863328ms ago: executing program 3: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_setup(0x1, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f00000005c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x5a4e, r0, 0x0, 0x0, 0x0, 0x0, 0x2}]) 140.042053ms ago: executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r1, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000440)={r2}) r3 = dup(r0) r4 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r5, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000440)={r6, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_GEM_FLINK(r4, 0xc008640a, &(0x7f0000000140)={r7}) ioctl$DRM_IOCTL_GEM_FLINK(r3, 0xc008640a, &(0x7f0000000000)={r7}) 67.988172ms ago: executing program 2: r0 = syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f00000004c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x8000, &(0x7f00000002c0)={[{@barrier}, {@type={'type', 0x3d, "41e78dc6"}}, {}, {@nls={'nls', 0x3d, 'macromanian'}}, {@gid}]}, 0x0, 0x697, &(0x7f0000001e80)="$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") mkdirat(r0, &(0x7f0000000800)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) unlinkat(r0, &(0x7f0000000e00)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x200) 62.755701ms ago: executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x73}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 0s ago: executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000440), 0x1000a) sendfile(r0, r1, &(0x7f0000000000), 0x1) kernel console output (not intermixed with test programs): [ T6284] bcachefs (loop3): marking filesystem clean [ 119.028783][ T6284] bcachefs (loop3): shutdown complete [ 119.045962][ T199] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.087040][ T7913] loop4: detected capacity change from 0 to 512 [ 119.291187][ T199] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.394198][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.396260][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.436370][ T7853] chnl_net:caif_netlink_parms(): no params data found [ 119.486810][ T7932] loop0: detected capacity change from 0 to 512 [ 119.509041][ T2101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.521722][ T2101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.530662][ T7932] syz-executor.0: attempt to access beyond end of device [ 119.530662][ T7932] nbd0: rw=0, sector=2, nr_sectors = 1 limit=0 [ 119.534173][ T7932] hfs: can't find a HFS filesystem on dev nbd0 [ 119.578760][ T7936] loop4: detected capacity change from 0 to 1024 [ 119.646271][ T7941] loop0: detected capacity change from 0 to 256 [ 119.678909][ T7941] FAT-fs (loop0): Directory bread(block 64) failed [ 119.684536][ T7941] FAT-fs (loop0): Directory bread(block 65) failed [ 119.686559][ T7944] loop3: detected capacity change from 0 to 512 [ 119.690031][ T7941] FAT-fs (loop0): Directory bread(block 66) failed [ 119.691784][ T7941] FAT-fs (loop0): Directory bread(block 67) failed [ 119.693472][ T7941] FAT-fs (loop0): Directory bread(block 68) failed [ 119.695150][ T7941] FAT-fs (loop0): Directory bread(block 69) failed [ 119.697006][ T7941] FAT-fs (loop0): Directory bread(block 70) failed [ 119.718580][ T7941] FAT-fs (loop0): Directory bread(block 71) failed [ 119.728373][ T7941] FAT-fs (loop0): Directory bread(block 72) failed [ 119.734764][ T7941] FAT-fs (loop0): Directory bread(block 73) failed [ 119.749838][ T7944] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.801191][ T7948] loop2: detected capacity change from 0 to 4096 [ 119.807767][ T199] bridge_slave_1: left allmulticast mode [ 119.811033][ T199] bridge_slave_1: left promiscuous mode [ 119.812615][ T199] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.845363][ T199] bridge_slave_0: left allmulticast mode [ 119.846873][ T199] bridge_slave_0: left promiscuous mode [ 119.848449][ T199] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.888049][ T7944] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 119.968857][ T7948] overlayfs: upper fs does not support tmpfile. [ 119.972922][ T7948] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 120.034587][ T7952] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 120.121422][ T7469] ntfs3: loop2: failed to convert "0080" to maciceland [ 120.124215][ T4278] hfsplus: b-tree write err: -5, ino 4 [ 120.127866][ T7469] ntfs3: loop2: failed to convert name for inode 1e. [ 120.179736][ T52] Bluetooth: hci2: command tx timeout [ 120.309992][ T6284] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.521997][ T199] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 121.562401][ T199] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 121.602367][ T199] bond0 (unregistering): Released all slaves [ 121.607340][ T7853] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.609236][ T7853] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.612062][ T7853] bridge_slave_0: entered allmulticast mode [ 121.614194][ T7853] bridge_slave_0: entered promiscuous mode [ 121.620683][ T7853] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.622726][ T7853] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.624685][ T7853] bridge_slave_1: entered allmulticast mode [ 121.626875][ T7853] bridge_slave_1: entered promiscuous mode [ 121.816629][ T7853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 121.831309][ T7853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 121.835242][ T7977] loop0: detected capacity change from 0 to 512 [ 121.864961][ T7979] loop4: detected capacity change from 0 to 1024 [ 121.884243][ T7946] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 121.900048][ T7977] syz-executor.0: attempt to access beyond end of device [ 121.900048][ T7977] nbd0: rw=0, sector=2, nr_sectors = 1 limit=0 [ 121.904339][ T7977] hfs: can't find a HFS filesystem on dev nbd0 [ 121.971223][ T7981] PKCS7: Unknown OID: [5] (bad) [ 121.973497][ T7981] PKCS7: Only support pkcs7_signedData type [ 122.036437][ T7976] macsec0: entered promiscuous mode [ 122.046154][ T7976] macsec1: entered promiscuous mode [ 122.147635][ T7991] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 122.149338][ T7991] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 122.154485][ T7853] team0: Port device team_slave_0 added [ 122.157568][ T7853] team0: Port device team_slave_1 added [ 122.161618][ T7991] vhci_hcd vhci_hcd.0: Device attached [ 122.172914][ T7992] vhci_hcd: connection closed [ 122.174391][ T12] vhci_hcd: stop threads [ 122.176709][ T12] vhci_hcd: release socket [ 122.177912][ T12] vhci_hcd: disconnect device [ 122.259641][ T52] Bluetooth: hci2: command tx timeout [ 122.268764][ T6288] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 122.274223][ T6288] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 122.277879][ T6288] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 122.289780][ T6288] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 122.297739][ T6288] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 122.300116][ T6288] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 122.373817][ T7853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 122.377369][ T7853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.394202][ T7853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 122.398486][ T7853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 122.400703][ T7853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.407596][ T7853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 122.473045][ T199] hsr_slave_0: left promiscuous mode [ 122.499861][ T11] hfsplus: b-tree write err: -5, ino 4 [ 122.513275][ T199] hsr_slave_1: left promiscuous mode [ 122.590000][ T199] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.592012][ T199] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.600178][ T199] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.602356][ T199] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.635201][ T199] veth1_macvtap: left promiscuous mode [ 122.636773][ T199] veth0_macvtap: left promiscuous mode [ 122.638274][ T199] veth1_vlan: left promiscuous mode [ 122.640554][ T199] veth0_vlan: left promiscuous mode [ 122.675045][ T8009] loop3: detected capacity change from 0 to 40427 [ 122.685991][ T8009] F2FS-fs (loop3): invalid crc value [ 122.699010][ T8009] F2FS-fs (loop3): Found nat_bits in checkpoint [ 122.725737][ T8009] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 122.757756][ T6284] syz-executor.3: attempt to access beyond end of device [ 122.757756][ T6284] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 122.766666][ T6284] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 122.825639][ T8023] loop0: detected capacity change from 0 to 128 [ 122.830675][ T8023] hpfs: bad mount options. [ 122.860901][ T7946] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 123.159482][ T8031] loop3: detected capacity change from 0 to 32768 [ 123.181312][ T8031] XFS (loop3): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 123.200902][ T8031] XFS (loop3): Ending clean mount [ 123.205336][ T8031] XFS (loop3): Quotacheck needed: Please wait. [ 123.243571][ T8031] XFS (loop3): Quotacheck: Done. [ 123.287772][ T6284] XFS (loop3): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 123.530636][ T8047] input: syz1 as /devices/virtual/input/input3 [ 123.786971][ T8057] loop3: detected capacity change from 0 to 128 [ 123.790335][ T8057] hpfs: bad mount options. [ 123.844350][ T7946] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 124.339749][ T52] Bluetooth: hci0: command tx timeout [ 124.339818][ T6288] Bluetooth: hci2: command tx timeout [ 124.523319][ T199] team0 (unregistering): Port device team_slave_1 removed [ 124.714933][ T199] team0 (unregistering): Port device team_slave_0 removed [ 125.950005][ T2293] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.951821][ T2293] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.419693][ T52] Bluetooth: hci0: command tx timeout [ 126.419785][ T6288] Bluetooth: hci2: command tx timeout [ 127.071115][ T7853] hsr_slave_0: entered promiscuous mode [ 127.120232][ T7853] hsr_slave_1: entered promiscuous mode [ 127.160230][ T7853] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 127.162314][ T7853] Cannot create hsr debugfs directory [ 127.205682][ T8094] loop3: detected capacity change from 0 to 512 [ 127.308735][ T8094] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.327648][ T8084] loop0: detected capacity change from 0 to 32768 [ 127.343910][ T8084] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor.0 (8084) [ 127.355688][ T8084] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 127.368400][ T8084] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm [ 127.381779][ T8094] EXT4-fs error (device loop3): ext4_do_update_inode:5075: inode #2: comm syz-executor.3: corrupted inode contents [ 127.387339][ T8084] BTRFS info (device loop0): disk space caching is enabled [ 127.396813][ T8094] EXT4-fs error (device loop3): ext4_dirty_inode:5935: inode #2: comm syz-executor.3: mark_inode_dirty error [ 127.413855][ T8094] EXT4-fs error (device loop3): ext4_do_update_inode:5075: inode #2: comm syz-executor.3: corrupted inode contents [ 127.425849][ T8094] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #2: comm syz-executor.3: mark_inode_dirty error [ 127.498768][ T7999] chnl_net:caif_netlink_parms(): no params data found [ 127.583408][ T8084] BTRFS info (device loop0): rebuilding free space tree [ 127.601464][ T8142] loop4: detected capacity change from 0 to 512 [ 127.604071][ T8142] EXT4-fs: Ignoring removed orlov option [ 127.624913][ T8142] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 127.634060][ T8094] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 127.638397][ T8084] BTRFS info (device loop0): disabling free space tree [ 127.644559][ T8084] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 127.647118][ T8084] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 127.651337][ T8142] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 127.654641][ T8142] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e128, mo2=0002] [ 127.660167][ T8142] System zones: 0-1, 15-15, 18-18, 34-34 [ 127.661960][ T8142] EXT4-fs (loop4): orphan cleanup on readonly fs [ 127.663656][ T8142] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=0 [ 127.666191][ T8142] EXT4-fs warning (device loop4): ext4_enable_quotas:7078: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 127.666227][ T8133] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 127.670047][ T8142] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 127.687354][ T8142] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz-executor.4: bg 0: block 40: padding at end of block bitmap is not set [ 127.704621][ T8142] EXT4-fs (loop4): Remounting filesystem read-only [ 127.706513][ T8133] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 127.711029][ T8142] EXT4-fs (loop4): 1 truncate cleaned up [ 127.730996][ T8142] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 127.751599][ T7999] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.753505][ T7999] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.755479][ T7999] bridge_slave_0: entered allmulticast mode [ 127.757580][ T7999] bridge_slave_0: entered promiscuous mode [ 127.766681][ T6284] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.803181][ T7272] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.817461][ T6940] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 127.912645][ T7999] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.914548][ T7999] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.916509][ T7999] bridge_slave_1: entered allmulticast mode [ 127.955356][ T7999] bridge_slave_1: entered promiscuous mode [ 127.966007][ T8148] warning: `syz-executor.3' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 127.975507][ T8150] : renamed from ipvlan1 [ 128.197855][ T7999] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 128.229248][ T7999] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 128.276590][ T8170] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 128.276784][ T7999] team0: Port device team_slave_0 added [ 128.278686][ T8170] netlink: 112860 bytes leftover after parsing attributes in process `syz-executor.4'. [ 128.285160][ T8170] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 128.304624][ T7999] team0: Port device team_slave_1 added [ 128.474654][ T8184] loop3: detected capacity change from 0 to 4096 [ 128.499909][ T52] Bluetooth: hci0: command tx timeout [ 128.736271][ T199] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.748058][ T8180] loop4: detected capacity change from 0 to 32768 [ 128.757465][ T7999] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 128.759327][ T7999] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.761043][ T8199] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 128.770416][ T8180] bcachefs (/dev/loop4): error validating superblock: Invalid superblock section downgrade: downgrade entry with mismatched major version (0 != 1) [ 128.770416][ T8180] downgrade (size 640): [ 128.770416][ T8180] version: 0.0: (unknown version) [ 128.770416][ T8180] recovery passes: [ 128.770416][ T8180] errors: [ 128.770416][ T8180] version: 0.0: (unknown version) [ 128.770416][ T8180] recovery passes: [ 128.770416][ T8180] errors: [ 128.770416][ T8180] version: 0.34: (unknown version) [ 128.770416][ T8180] recovery passes: [ 128.770416][ T8180] errors: [ 128.770416][ T8180] version: 0.0: (unknown version) [ 128.770416][ T8180] recovery passes: [ 128.770416][ T8180] errors: [ 128.770416][ T8180] version: 0.45: (unknown version) [ 128.770416][ T8180] recovery passes: [ 128.770416][ T8180] errors: [ 128.770416][ T8180] version: 0.0: (unknown version) [ 128.770416][ T8180] recovery passes: check_snapshot_trees,check_snapshots,check_subvols [ 128.770416][ T8180] errors: [ 128.770416][ T8180] version: 0.11: inode_btree_change [ 128.770416][ T8180] recovery passes: [ 128.770416][ T8180] errors: [ 128.770416][ T8180] version: 0.0: (unknown version) [ 128.770416][ T8180] recovery passes: [ 128.770416][ T8180] errors: [ 128.770416][ T8180] version: 0.33: (unknown version) [ 128.770416][ T8180] recovery passes: [ 128.770416][ T8180] errors: [ 128.770416][ T8180] version: 0.0: (unknown version) [ 128.770416][ T8180] recovery passes: [ 128.770416][ T8180] errors: [ 128.770416][ T8180] version: 0.0: (unknown version) [ 128.770416][ T8180] recovery passes: [ 128.770416][ T8180] errors: [ 128.770416][ T8180] version: 0.0: (unknown version) [ 128.770416][ T8180] recovery passes: check_snapshot_trees [ 128.770416][ T8180] errors: [ 128.770416][ T8180] [ 128.774789][ T8199] netlink: 112860 bytes leftover after parsing attributes in process `syz-executor.3'. [ 128.822980][ T7999] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 128.829895][ T8199] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 128.837460][ T7999] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 128.843767][ T7999] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.864365][ T7999] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 129.025191][ T199] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.099240][ T8214] loop3: detected capacity change from 0 to 4096 [ 129.142678][ T199] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.202056][ T7999] hsr_slave_0: entered promiscuous mode [ 129.235648][ T7999] hsr_slave_1: entered promiscuous mode [ 129.287839][ T8212] loop0: detected capacity change from 0 to 32768 [ 129.289794][ T7999] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 129.292827][ T7999] Cannot create hsr debugfs directory [ 129.299694][ T7853] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 129.305245][ T7853] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 129.313378][ T8212] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor.0 (8212) [ 129.331171][ T8212] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 129.334015][ T8212] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm [ 129.336298][ T8212] BTRFS info (device loop0): disk space caching is enabled [ 129.414776][ T199] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.431703][ T8212] BTRFS info (device loop0): rebuilding free space tree [ 129.471896][ T8212] BTRFS info (device loop0): disabling free space tree [ 129.473797][ T8212] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 129.476290][ T8212] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 129.497734][ T7853] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 129.530302][ T7853] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 129.537839][ T8246] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 129.542526][ T8246] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 129.651930][ T8236] loop4: detected capacity change from 0 to 32768 [ 129.664325][ T8236] bcachefs (/dev/loop4): error validating superblock: Invalid superblock section downgrade: downgrade entry with mismatched major version (0 != 1) [ 129.664325][ T8236] downgrade (size 640): [ 129.664325][ T8236] version: 0.0: (unknown version) [ 129.664325][ T8236] recovery passes: [ 129.664325][ T8236] errors: [ 129.664325][ T8236] version: 0.0: (unknown version) [ 129.664325][ T8236] recovery passes: [ 129.664325][ T8236] errors: [ 129.664325][ T8236] version: 0.34: (unknown version) [ 129.664325][ T8236] recovery passes: [ 129.664325][ T8236] errors: [ 129.664325][ T8236] version: 0.0: (unknown version) [ 129.664325][ T8236] recovery passes: [ 129.664325][ T8236] errors: [ 129.664325][ T8236] version: 0.45: (unknown version) [ 129.664325][ T8236] recovery passes: [ 129.664325][ T8236] errors: [ 129.664325][ T8236] version: 0.0: (unknown version) [ 129.664325][ T8236] recovery passes: check_snapshot_trees,check_snapshots,check_subvols [ 129.664325][ T8236] errors: [ 129.664325][ T8236] version: 0.11: inode_btree_change [ 129.664325][ T8236] recovery passes: [ 129.664325][ T8236] errors: [ 129.664325][ T8236] version: 0.0: (unknown version) [ 129.664325][ T8236] recovery passes: [ 129.664325][ T8236] errors: [ 129.664325][ T8236] version: 0.33: (unknown version) [ 129.664325][ T8236] recovery passes: [ 129.664325][ T8236] errors: [ 129.664325][ T8236] version: 0.0: (unknown version) [ 129.664325][ T8236] recovery passes: [ 129.664325][ T8236] errors: [ 129.664325][ T8236] version: 0.0: (unknown version) [ 129.664325][ T8236] recovery passes: [ 129.664325][ T8236] errors: [ 129.664325][ T8236] version: 0.0: (unknown version) [ 129.664325][ T8236] recovery passes: check_snapshot_trees [ 129.664325][ T8236] errors: [ 129.664325][ T8236] [ 129.741323][ T6940] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 129.882053][ T199] bridge_slave_1: left allmulticast mode [ 129.883749][ T199] bridge_slave_1: left promiscuous mode [ 129.885329][ T199] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.905693][ T8265] loop4: detected capacity change from 0 to 4096 [ 129.919697][ T8265] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [ 130.122232][ T199] bridge_slave_0: left allmulticast mode [ 130.125379][ T199] bridge_slave_0: left promiscuous mode [ 130.161711][ T8265] ntfs3: loop4: $Secure::$SII is corrupted. [ 130.177933][ T199] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.219949][ T8265] ntfs3: loop4: Failed to initialize $Secure (-22). [ 130.580434][ T52] Bluetooth: hci0: command tx timeout [ 130.901992][ T8296] Bluetooth: MGMT ver 1.22 [ 130.916973][ T8286] loop0: detected capacity change from 0 to 32768 [ 130.928944][ T8286] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor.0 (8286) [ 130.959748][ T8286] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 130.969889][ T8286] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm [ 130.972230][ T8286] BTRFS info (device loop0): using free-space-tree [ 131.027881][ T6940] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 131.400445][ T8318] loop0: detected capacity change from 0 to 32768 [ 131.409082][ T8318] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor.0 (8318) [ 131.426354][ T8318] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 131.431496][ T8318] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm [ 131.434304][ T8318] BTRFS info (device loop0): disk space caching is enabled [ 131.531199][ T8318] BTRFS info (device loop0): rebuilding free space tree [ 131.547173][ T8318] BTRFS info (device loop0): disabling free space tree [ 131.553538][ T8318] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 131.560868][ T8318] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 131.710656][ T6940] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 131.932804][ T8337] loop0: detected capacity change from 0 to 32768 [ 131.942116][ T8337] bcachefs (/dev/loop0): error validating superblock: Invalid superblock section downgrade: downgrade entry with mismatched major version (0 != 1) [ 131.942116][ T8337] downgrade (size 640): [ 131.942116][ T8337] version: 0.0: (unknown version) [ 131.942116][ T8337] recovery passes: [ 131.942116][ T8337] errors: [ 131.942116][ T8337] version: 0.0: (unknown version) [ 131.942116][ T8337] recovery passes: [ 131.942116][ T8337] errors: [ 131.942116][ T8337] version: 0.34: (unknown version) [ 131.942116][ T8337] recovery passes: [ 131.942116][ T8337] errors: [ 131.942116][ T8337] version: 0.0: (unknown version) [ 131.942116][ T8337] recovery passes: [ 131.942116][ T8337] errors: [ 131.942116][ T8337] version: 0.45: (unknown version) [ 131.942116][ T8337] recovery passes: [ 131.942116][ T8337] errors: [ 131.942116][ T8337] version: 0.0: (unknown version) [ 131.942116][ T8337] recovery passes: check_snapshot_trees,check_snapshots,check_subvols [ 131.942116][ T8337] errors: [ 131.942116][ T8337] version: 0.11: inode_btree_change [ 131.942116][ T8337] recovery passes: [ 131.942116][ T8337] errors: [ 131.942116][ T8337] version: 0.0: (unknown version) [ 131.942116][ T8337] recovery passes: [ 131.942116][ T8337] errors: [ 131.942116][ T8337] version: 0.33: (unknown version) [ 131.942116][ T8337] recovery passes: [ 131.942116][ T8337] errors: [ 131.942116][ T8337] version: 0.0: (unknown version) [ 131.942116][ T8337] recovery passes: [ 131.942116][ T8337] errors: [ 131.942116][ T8337] version: 0.0: (unknown version) [ 131.942116][ T8337] recovery passes: [ 131.942116][ T8337] errors: [ 131.942116][ T8337] version: 0.0: (unknown version) [ 131.942116][ T8337] recovery passes: check_snapshot_trees [ 131.942116][ T8337] errors: [ 131.942116][ T8337] [ 132.144457][ T8341] loop0: detected capacity change from 0 to 4096 [ 132.147210][ T8341] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 132.179093][ T8341] ntfs3: loop0: $Secure::$SII is corrupted. [ 132.183532][ T8341] ntfs3: loop0: Failed to initialize $Secure (-22). [ 132.273381][ T199] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 132.322464][ T199] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 132.415535][ T199] bond0 (unregistering): Released all slaves [ 133.047396][ T7853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 133.129986][ T7853] 8021q: adding VLAN 0 to HW filter on device team0 [ 133.230474][ T8368] ALSA: seq fatal error: cannot create timer (-22) [ 133.270680][ T8370] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 133.272435][ T8370] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 133.282221][ T8370] vhci_hcd vhci_hcd.0: Device attached [ 133.308852][ T8378] loop0: detected capacity change from 0 to 256 [ 133.325077][ T8375] vhci_hcd: connection closed [ 133.331196][ T4426] vhci_hcd: stop threads [ 133.335711][ T4426] vhci_hcd: release socket [ 133.336979][ T4426] vhci_hcd: disconnect device [ 133.396550][ T6336] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.398466][ T6336] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.408301][ T6336] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.410235][ T6336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.458075][ T8391] loop3: detected capacity change from 0 to 512 [ 133.465137][ T8391] EXT4-fs: Ignoring removed orlov option [ 133.469140][ T8391] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 133.488617][ T199] hsr_slave_0: left promiscuous mode [ 133.505316][ T8391] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 133.507353][ T8391] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e128, mo2=0002] [ 133.509375][ T8391] System zones: 0-1, 15-15, 18-18, 34-34 [ 133.515560][ T8391] EXT4-fs (loop3): orphan cleanup on readonly fs [ 133.517314][ T8391] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0 [ 133.520486][ T8391] EXT4-fs warning (device loop3): ext4_enable_quotas:7078: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 133.524348][ T199] hsr_slave_1: left promiscuous mode [ 133.526215][ T8391] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 133.528482][ T8391] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz-executor.3: bg 0: block 40: padding at end of block bitmap is not set [ 133.535139][ T8391] EXT4-fs (loop3): Remounting filesystem read-only [ 133.536875][ T8391] EXT4-fs (loop3): 1 truncate cleaned up [ 133.538741][ T8391] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 133.561354][ T6284] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.600659][ T199] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 133.602694][ T199] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 133.605469][ T199] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 133.607609][ T199] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 133.621709][ T199] veth1_macvtap: left promiscuous mode [ 133.623268][ T199] veth0_macvtap: left promiscuous mode [ 133.624709][ T199] veth1_vlan: left promiscuous mode [ 133.626131][ T199] veth0_vlan: left promiscuous mode [ 133.848850][ T8401] loop3: detected capacity change from 0 to 32768 [ 133.855622][ T8401] bcachefs (/dev/loop3): error validating superblock: Invalid superblock section downgrade: downgrade entry with mismatched major version (0 != 1) [ 133.855622][ T8401] downgrade (size 640): [ 133.855622][ T8401] version: 0.0: (unknown version) [ 133.855622][ T8401] recovery passes: [ 133.855622][ T8401] errors: [ 133.855622][ T8401] version: 0.0: (unknown version) [ 133.855622][ T8401] recovery passes: [ 133.855622][ T8401] errors: [ 133.855622][ T8401] version: 0.34: (unknown version) [ 133.855622][ T8401] recovery passes: [ 133.855622][ T8401] errors: [ 133.855622][ T8401] version: 0.0: (unknown version) [ 133.855622][ T8401] recovery passes: [ 133.855622][ T8401] errors: [ 133.855622][ T8401] version: 0.45: (unknown version) [ 133.855622][ T8401] recovery passes: [ 133.855622][ T8401] errors: [ 133.855622][ T8401] version: 0.0: (unknown version) [ 133.855622][ T8401] recovery passes: check_snapshot_trees,check_snapshots,check_subvols [ 133.855622][ T8401] errors: [ 133.855622][ T8401] version: 0.11: inode_btree_change [ 133.855622][ T8401] recovery passes: [ 133.855622][ T8401] errors: [ 133.855622][ T8401] version: 0.0: (unknown version) [ 133.855622][ T8401] recovery passes: [ 133.855622][ T8401] errors: [ 133.855622][ T8401] version: 0.33: (unknown version) [ 133.855622][ T8401] recovery passes: [ 133.855622][ T8401] errors: [ 133.855622][ T8401] version: 0.0: (unknown version) [ 133.855622][ T8401] recovery passes: [ 133.855622][ T8401] errors: [ 133.855622][ T8401] version: 0.0: (unknown version) [ 133.855622][ T8401] recovery passes: [ 133.855622][ T8401] errors: [ 133.855622][ T8401] version: 0.0: (unknown version) [ 133.855622][ T8401] recovery passes: check_snapshot_trees [ 133.855622][ T8401] errors: [ 133.855622][ T8401] [ 134.948447][ T8413] ALSA: seq fatal error: cannot create timer (-22) [ 135.855294][ T199] team0 (unregistering): Port device team_slave_1 removed [ 136.029315][ T8420] loop3: detected capacity change from 0 to 32768 [ 136.034705][ T8420] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (8420) [ 136.048320][ T8420] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 136.051825][ T8420] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 136.054098][ T8420] BTRFS info (device loop3): using free-space-tree [ 136.100679][ T199] team0 (unregistering): Port device team_slave_0 removed [ 136.227339][ T6284] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 136.481089][ T8438] loop3: detected capacity change from 0 to 32768 [ 136.491988][ T8438] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (8438) [ 136.506411][ T8438] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 136.509300][ T8438] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 136.519006][ T8438] BTRFS info (device loop3): using free-space-tree [ 136.644227][ T6284] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 136.754605][ T8456] loop3: detected capacity change from 0 to 4096 [ 136.768901][ T8456] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 136.780300][ T8456] ntfs3: loop3: $Secure::$SII is corrupted. [ 136.782020][ T8456] ntfs3: loop3: Failed to initialize $Secure (-22). [ 137.887244][ T8472] ALSA: seq fatal error: cannot create timer (-22) [ 138.563907][ T8474] loop3: detected capacity change from 0 to 131072 [ 138.590396][ T8474] F2FS-fs (loop3): Found nat_bits in checkpoint [ 138.601499][ T8474] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 139.174334][ T8487] loop4: detected capacity change from 0 to 1024 [ 139.224828][ T8487] hfsplus: found bad thread record in catalog [ 139.226836][ T8487] hfsplus: catalog searching failed [ 139.264622][ T7853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 139.275271][ T8489] loop0: detected capacity change from 0 to 4096 [ 139.299441][ T7999] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 139.310830][ T8489] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 139.319419][ T7999] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 139.330250][ T7999] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 139.339079][ T7999] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 139.376195][ T7853] veth0_vlan: entered promiscuous mode [ 139.378554][ T8489] ntfs3: loop0: $Secure::$SII is corrupted. [ 139.384744][ T8489] ntfs3: loop0: Failed to initialize $Secure (-22). [ 139.386422][ T7853] veth1_vlan: entered promiscuous mode [ 139.442583][ T7853] veth0_macvtap: entered promiscuous mode [ 139.510850][ T7853] veth1_macvtap: entered promiscuous mode [ 139.546297][ T7853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.554758][ T7853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.564072][ T7853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.572406][ T7853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.577263][ T7853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.581968][ T7853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.644502][ T7853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 139.664047][ T7853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.669396][ T7853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.679288][ T7853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.686578][ T7853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.697971][ T7853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.722465][ T7853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.735756][ T8512] loop4: detected capacity change from 0 to 512 [ 139.736975][ T7853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 139.748776][ T8512] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 139.757573][ T7999] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.377286][ T7853] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.389871][ T7853] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.407924][ T8512] EXT4-fs (loop4): 1 truncate cleaned up [ 140.410393][ T7853] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.412710][ T7853] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.413193][ T8512] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.451234][ T7999] 8021q: adding VLAN 0 to HW filter on device team0 [ 140.484700][ T8512] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.4: corrupted in-inode xattr: overlapping e_value [ 140.542582][ T6077] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.543100][ T8512] EXT4-fs (loop4): Remounting filesystem read-only [ 140.544522][ T6077] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.548781][ T6077] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.550697][ T6077] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.561941][ T8512] EXT4-fs warning (device loop4): ext4_xattr_set_entry:1766: inode #15: comm syz-executor.4: unable to update i_inline_off [ 140.643187][ T7272] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.681198][ T4426] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.683757][ T4426] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.726611][ T4426] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.729248][ T4426] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.816180][ T8533] loop0: detected capacity change from 0 to 1024 [ 140.831247][ T7999] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 140.878197][ T7999] veth0_vlan: entered promiscuous mode [ 140.885919][ T8521] loop3: detected capacity change from 0 to 32768 [ 140.897348][ T7999] veth1_vlan: entered promiscuous mode [ 140.898883][ T8521] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (8521) [ 140.912570][ T8521] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 140.915335][ T8521] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 140.917514][ T8521] BTRFS info (device loop3): using free-space-tree [ 140.945635][ T7999] veth0_macvtap: entered promiscuous mode [ 140.953757][ T8545] loop4: detected capacity change from 0 to 1764 [ 140.977687][ T7999] veth1_macvtap: entered promiscuous mode [ 141.102905][ T6284] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 141.117412][ T8533] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 141.135540][ T7999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.139445][ T8533] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.0'. [ 141.143412][ T8558] loop4: detected capacity change from 0 to 1024 [ 141.157687][ T7999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.163624][ T7999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.166704][ T7999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.167560][ T8558] hfsplus: found bad thread record in catalog [ 141.169248][ T7999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.174078][ T7999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.174243][ T8558] hfsplus: catalog searching failed [ 141.176624][ T7999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.187857][ T7999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.200940][ T7999] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 141.231173][ T7999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.234150][ T7999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.236688][ T7999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.239414][ T7999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.248476][ T7999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.261707][ T7999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.264408][ T7999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.273728][ T7999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.280032][ T7999] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 141.283625][ T7999] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.285884][ T7999] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.288150][ T7999] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.309634][ T7999] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.396875][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.399133][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.414804][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.417096][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.699817][ T8575] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.4'. [ 142.422960][ T8589] loop0: detected capacity change from 0 to 1024 [ 142.646656][ T8589] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 142.659302][ T8589] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.0'. [ 142.666012][ T8581] loop3: detected capacity change from 0 to 32768 [ 142.813356][ T8581] bcachefs (loop3): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=zstd,nojournal_transaction_names [ 142.840831][ T8581] bcachefs (loop3): recovering from clean shutdown, journal seq 10 [ 142.864802][ T8583] loop2: detected capacity change from 0 to 65536 [ 142.871908][ T8583] XFS (loop2): Mounting V5 Filesystem e4654a66-62e5-4963-a81e-012d9d4871af [ 142.888948][ T8583] XFS (loop2): Ending clean mount [ 142.908250][ T8581] bcachefs (loop3): alloc_read... done [ 142.914990][ T8581] bcachefs (loop3): stripes_read... done [ 142.916536][ T8581] bcachefs (loop3): snapshots_read... done [ 142.919093][ T8581] bcachefs (loop3): journal_replay... done [ 142.925153][ T8581] bcachefs (loop3): resume_logged_ops... done [ 142.933882][ T8581] bcachefs (loop3): going read-write [ 142.949681][ T8581] bcachefs (loop3): done starting filesystem [ 143.006063][ T6288] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 143.015111][ T6288] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 143.021696][ T6288] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 143.032273][ T6288] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 143.038930][ T6288] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 143.051750][ T6291] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 143.078716][ T6284] bcachefs (loop3): shutting down [ 143.080250][ T6284] bcachefs (loop3): going read-only [ 143.088889][ T6284] bcachefs (loop3): finished waiting for writes to stop [ 143.133608][ T7999] XFS (loop2): Unmounting Filesystem e4654a66-62e5-4963-a81e-012d9d4871af [ 143.165626][ T199] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.227228][ T6284] bcachefs (loop3): flushing journal and stopping allocators, journal seq 11 [ 143.270192][ T6284] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 12 [ 143.277665][ T6284] bcachefs (loop3): shutdown complete, journal seq 13 [ 143.467506][ T8629] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. [ 143.697036][ T6284] bcachefs (loop3): marking filesystem clean [ 143.884751][ T6284] bcachefs (loop3): shutdown complete [ 143.904913][ T8619] chnl_net:caif_netlink_parms(): no params data found [ 144.125561][ T8619] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.127505][ T8619] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.129482][ T8619] bridge_slave_0: entered allmulticast mode [ 144.169880][ T8619] bridge_slave_0: entered promiscuous mode [ 144.173567][ T8619] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.175501][ T8619] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.177476][ T8619] bridge_slave_1: entered allmulticast mode [ 144.192959][ T8619] bridge_slave_1: entered promiscuous mode [ 144.234516][ T8643] loop4: detected capacity change from 0 to 1024 [ 144.268459][ T8645] loop2: detected capacity change from 0 to 1024 [ 144.271670][ T8619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 144.327454][ T8619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 144.373331][ T8619] team0: Port device team_slave_0 added [ 144.377012][ T8619] team0: Port device team_slave_1 added [ 144.484984][ T8619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 144.486893][ T8619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.515005][ T8619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 144.570322][ T8645] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 144.572483][ T8645] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.2'. [ 144.652445][ T199] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.660392][ T8619] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 144.662250][ T8619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.669011][ T8619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 144.839394][ T199] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.897961][ T8619] hsr_slave_0: entered promiscuous mode [ 144.966439][ T8651] loop0: detected capacity change from 0 to 32768 [ 144.980768][ T8619] hsr_slave_1: entered promiscuous mode [ 145.222605][ T8665] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. [ 145.333362][ T52] Bluetooth: hci2: command tx timeout [ 145.577934][ T8619] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 145.582313][ T8619] Cannot create hsr debugfs directory [ 145.717999][ T8672] loop3: detected capacity change from 0 to 2048 [ 145.721593][ T199] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.739440][ T8674] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 145.763586][ T8651] bcachefs (loop0): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=zstd,nojournal_transaction_names [ 145.767870][ T8651] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 145.823120][ T8661] loop2: detected capacity change from 0 to 32768 [ 145.829625][ T8661] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (8661) [ 145.833862][ T8651] bcachefs (loop0): alloc_read... done [ 145.841561][ T8661] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 145.849826][ T8651] bcachefs (loop0): stripes_read... done [ 145.851407][ T8651] bcachefs (loop0): snapshots_read... done [ 145.854656][ T8661] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm [ 145.858651][ T8661] BTRFS info (device loop2): using free-space-tree [ 145.859713][ T8651] bcachefs (loop0): journal_replay... done [ 145.862014][ T8651] bcachefs (loop0): resume_logged_ops... done [ 145.900551][ T8651] bcachefs (loop0): going read-write [ 145.910369][ T8651] bcachefs (loop0): done starting filesystem [ 146.010577][ T6940] bcachefs (loop0): shutting down [ 146.011992][ T6940] bcachefs (loop0): going read-only [ 146.013320][ T6940] bcachefs (loop0): finished waiting for writes to stop [ 146.076146][ T199] bridge_slave_1: left allmulticast mode [ 146.077648][ T199] bridge_slave_1: left promiscuous mode [ 146.079284][ T199] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.088006][ T6940] bcachefs (loop0): flushing journal and stopping allocators, journal seq 11 [ 146.104557][ T6940] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 13 [ 146.109147][ T6940] bcachefs (loop0): shutdown complete, journal seq 14 [ 146.112979][ T6940] bcachefs (loop0): marking filesystem clean [ 146.143066][ T199] bridge_slave_0: left allmulticast mode [ 146.151396][ T8655] loop4: detected capacity change from 0 to 65536 [ 146.154704][ T199] bridge_slave_0: left promiscuous mode [ 146.156278][ T199] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.178563][ T6940] bcachefs (loop0): shutdown complete [ 146.183056][ T8655] XFS (loop4): Mounting V5 Filesystem e4654a66-62e5-4963-a81e-012d9d4871af [ 146.221451][ T8655] XFS (loop4): Ending clean mount [ 146.307551][ T7999] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 146.323283][ T7272] XFS (loop4): Unmounting Filesystem e4654a66-62e5-4963-a81e-012d9d4871af [ 146.701226][ T8714] loop0: detected capacity change from 0 to 1024 [ 147.379999][ T52] Bluetooth: hci2: command tx timeout [ 148.025168][ T199] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 148.073365][ T199] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 148.111956][ T199] bond0 (unregistering): Released all slaves [ 148.139939][ T8728] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.142717][ T8728] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.145027][ T8728] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.147366][ T8728] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.691254][ T8776] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.693839][ T8776] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.696187][ T8776] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.698527][ T8776] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 149.116222][ T199] hsr_slave_0: left promiscuous mode [ 149.141079][ T199] hsr_slave_1: left promiscuous mode [ 149.235859][ T8807] loop0: detected capacity change from 0 to 32768 [ 149.238374][ T8807] XFS: noikeep mount option is deprecated. [ 149.240090][ T199] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 149.242094][ T199] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 149.249731][ T199] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 149.251643][ T199] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 149.253740][ T8807] XFS: attr2 mount option is deprecated. [ 149.273987][ T8807] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 149.285467][ T199] veth1_macvtap: left promiscuous mode [ 149.286926][ T199] veth0_macvtap: left promiscuous mode [ 149.302905][ T199] veth1_vlan: left promiscuous mode [ 149.304445][ T199] veth0_vlan: left promiscuous mode [ 149.332467][ T8807] XFS (loop0): Ending clean mount [ 149.335045][ T8807] XFS (loop0): Quotacheck needed: Please wait. [ 149.376645][ T8807] XFS (loop0): Quotacheck: Done. [ 149.415197][ T6940] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 149.477061][ T52] Bluetooth: hci2: command tx timeout [ 151.135701][ T199] team0 (unregistering): Port device team_slave_1 removed [ 151.292755][ T199] team0 (unregistering): Port device team_slave_0 removed [ 151.540023][ T52] Bluetooth: hci2: command tx timeout [ 153.514070][ T8842] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.516495][ T8842] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.519031][ T8842] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.521611][ T8842] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.551225][ T8843] pim6reg: entered allmulticast mode [ 153.573003][ T8843] pim6reg: left allmulticast mode [ 153.655956][ T8619] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 153.666564][ T8619] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 153.691391][ T8619] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 153.714325][ T8619] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 153.767638][ T8868] loop4: detected capacity change from 0 to 2048 [ 153.800077][ T8876] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 153.815076][ T8619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.856220][ T8619] 8021q: adding VLAN 0 to HW filter on device team0 [ 153.873137][ T27] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.875023][ T27] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.885070][ T27] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.886978][ T27] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.907477][ T30] audit: type=1400 audit(153.880:11): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="rwat" object="_" requested=w pid=8880 comm="syz-executor.0" saddr=::ffff:172.30.0.1 daddr=fe80::aa dest=20002 netif=wpan0 [ 153.970462][ T8887] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.0'. [ 154.088562][ T8619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 154.166942][ T8901] pim6reg: entered allmulticast mode [ 154.171470][ T8619] veth0_vlan: entered promiscuous mode [ 154.176162][ T8619] veth1_vlan: entered promiscuous mode [ 154.188715][ T8904] loop3: detected capacity change from 0 to 2048 [ 154.192956][ T8901] pim6reg: left allmulticast mode [ 154.234694][ T8904] Alternate GPT is invalid, using primary GPT. [ 154.236874][ T8904] loop3: p1 p2 p3 [ 154.254906][ T8904] Mount JFS Failure: -5 [ 154.257425][ T8904] jfs_mount failed w/return code = -5 [ 154.300432][ T6284] __loop_clr_fd: partition scan of loop3 failed (rc=-16) [ 154.304384][ T8853] I/O error, dev loop3, sector 34 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 154.310798][ T8853] I/O error, dev loop3, sector 34 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 154.312559][ T8846] I/O error, dev loop3, sector 56 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 154.315722][ T8846] I/O error, dev loop3, sector 56 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 154.318248][ T8846] I/O error, dev loop3, sector 57 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 154.322689][ T8853] Buffer I/O error on dev loop3p1, logical block 0, async page read [ 154.335532][ T8853] I/O error, dev loop3, sector 36 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 154.336266][ T8619] veth0_macvtap: entered promiscuous mode [ 154.349251][ T8853] Buffer I/O error on dev loop3p1, logical block 1, async page read [ 154.361761][ T8619] veth1_macvtap: entered promiscuous mode [ 154.367387][ T8870] I/O error, dev loop3, sector 105 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 154.373317][ T8870] I/O error, dev loop3, sector 105 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 154.373802][ T8619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.378598][ T8619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.382688][ T8853] I/O error, dev loop3, sector 38 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 154.385161][ T8846] Buffer I/O error on dev loop3p2, logical block 9, async page read [ 154.392813][ T8870] Buffer I/O error on dev loop3p3, logical block 8, async page read [ 154.395061][ T8853] Buffer I/O error on dev loop3p1, logical block 2, async page read [ 154.397399][ T8846] I/O error, dev loop3, sector 58 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 154.407996][ T8619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.413627][ T8870] Buffer I/O error on dev loop3p3, logical block 9, async page read [ 154.417879][ T8853] Buffer I/O error on dev loop3p1, logical block 3, async page read [ 154.419725][ T8619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.422882][ T8619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.425671][ T8619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.428198][ T8619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.428748][ T8846] Buffer I/O error on dev loop3p2, logical block 10, async page read [ 154.442649][ T8870] Buffer I/O error on dev loop3p3, logical block 10, async page read [ 154.446460][ T8619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.459024][ T8870] Buffer I/O error on dev loop3p3, logical block 11, async page read [ 154.459410][ T8619] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 154.476081][ T8619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.478949][ T8619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.493723][ T8619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.496479][ T8619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.499126][ T8619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.512656][ T8619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.519354][ T30] audit: type=1400 audit(154.490:12): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="rwat" object="_" requested=w pid=8913 comm="syz-executor.4" saddr=::ffff:172.30.0.5 daddr=fe80::aa dest=20002 netif=wpan0 [ 154.532057][ T8619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.534817][ T8619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.538320][ T8619] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 154.576291][ T8619] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.578568][ T8619] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.587249][ T8853] udevd[8853]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 154.597317][ T8905] loop0: detected capacity change from 0 to 32768 [ 154.600034][ T8619] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.602370][ T8619] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.632331][ T8846] udevd[8846]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 154.666922][ T8870] udevd[8870]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 154.743571][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.745654][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.786158][ T8905] bcachefs (loop0): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,nojournal_transaction_names [ 154.790889][ T199] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.796725][ T199] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.808018][ T8905] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 154.824626][ T8931] XFS (nullb0): Invalid superblock magic number [ 154.882068][ T8905] bcachefs (loop0): flagging btree inodes lost data [ 154.910532][ T8905] error reading btree root inodes l=0: btree_node_read_error, shutting down [ 154.913059][ T8905] bcachefs (loop0): inconsistency detected - emergency read only at journal seq 10 [ 154.915460][ T8905] bcachefs (loop0): bch2_fs_recovery(): error fsck_errors_not_fixed [ 154.917509][ T8905] bcachefs (loop0): bch2_fs_start(): error starting filesystem fsck_errors_not_fixed [ 154.924269][ T8905] bcachefs (loop0): shutting down [ 154.965124][ T8905] bcachefs (loop0): shutdown complete [ 155.048324][ T8846] udevd[8846]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 155.072205][ T8946] udevd[8946]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 155.095920][ T8853] udevd[8853]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 155.107699][ T30] audit: type=1400 audit(155.080:13): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="rwat" object="_" requested=w pid=8956 comm="syz-executor.2" saddr=::ffff:172.30.0.3 daddr=fe80::aa dest=20002 netif=wpan0 [ 155.539005][ T8972] XFS (nullb0): Invalid superblock magic number [ 155.846548][ T30] audit: type=1400 audit(155.820:14): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="rwat" object="_" requested=w pid=8989 comm="syz-executor.0" saddr=::ffff:172.30.0.1 daddr=fe80::aa dest=20002 netif=wpan0 [ 156.057003][ T9001] loop2: detected capacity change from 0 to 256 [ 156.075461][ T9001] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 156.234178][ T8992] loop0: detected capacity change from 0 to 32768 [ 156.237477][ T8992] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor.0 (8992) [ 156.248563][ T8992] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 156.252510][ T8992] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 156.254829][ T8992] BTRFS info (device loop0): using free-space-tree [ 156.308595][ T30] audit: type=1400 audit(156.270:15): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="rwat" object="_" requested=w pid=9017 comm="syz-executor.3" saddr=::ffff:172.30.0.4 daddr=fe80::aa dest=20002 netif=wpan0 [ 156.368915][ T8992] BTRFS info (device loop0): rebuilding free space tree [ 156.478245][ T6940] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 156.482399][ T9023] loop4: detected capacity change from 0 to 8192 [ 156.487905][ T9023] REISERFS warning (device loop4): super-6515 reiserfs_parse_options: journaled quota format not specified. [ 156.511964][ T6327] kernel write not supported for file 9035/task/9036/clear_refs (pid: 6327 comm: kworker/0:4) [ 156.627813][ T9041] exFAT-fs (loop2): hint_cluster is invalid (1), rewind to the first cluster [ 156.674002][ T9043] XFS (nullb0): Invalid superblock magic number [ 156.838390][ T30] audit: type=1400 audit(156.810:16): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="rwat" object="_" requested=w pid=9062 comm="syz-executor.4" saddr=::ffff:172.30.0.5 daddr=fe80::aa dest=20002 netif=wpan0 [ 156.931341][ T6327] kernel write not supported for file 9071/task/9072/clear_refs (pid: 6327 comm: kworker/0:4) [ 157.045514][ T9073] loop3: detected capacity change from 0 to 8192 [ 157.056589][ T9078] loop0: detected capacity change from 0 to 256 [ 157.058562][ T9073] REISERFS warning (device loop3): super-6515 reiserfs_parse_options: journaled quota format not specified. [ 157.190208][ T9081] loop3: detected capacity change from 0 to 256 [ 157.275328][ T9069] loop4: detected capacity change from 0 to 32768 [ 157.315438][ T9069] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (9069) [ 157.320194][ T9088] loop0: detected capacity change from 0 to 256 [ 157.330849][ T9069] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 157.333677][ T9069] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 157.335965][ T9069] BTRFS info (device loop4): using free-space-tree [ 157.533626][ T9069] BTRFS info (device loop4): rebuilding free space tree [ 157.613781][ T9113] loop0: detected capacity change from 0 to 512 [ 157.840223][ T9113] EXT4-fs error (device loop0): ext4_orphan_get:1420: comm syz-executor.0: bad orphan inode 12 [ 157.843834][ T9113] EXT4-fs (loop0): Remounting filesystem read-only [ 157.850047][ T9113] EXT4-fs (loop0): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.216911][ T7272] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 158.341152][ T9121] loop3: detected capacity change from 0 to 256 [ 158.361202][ T6940] EXT4-fs (loop0): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 158.445025][ T550] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.478660][ T9127] loop4: detected capacity change from 0 to 256 [ 158.598161][ T9128] loop0: detected capacity change from 0 to 8192 [ 158.625987][ T9128] REISERFS warning (device loop0): super-6515 reiserfs_parse_options: journaled quota format not specified. [ 158.631927][ T9136] loop2: detected capacity change from 0 to 256 [ 158.700804][ T6288] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 158.706370][ T6288] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 158.711401][ T6288] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 158.715034][ T6288] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 158.718037][ T6288] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 158.722232][ T6288] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 158.739954][ T6288] Bluetooth: hci3: command 0x0406 tx timeout [ 158.851355][ T9154] pim6reg: entered allmulticast mode [ 158.871414][ T9158] loop4: detected capacity change from 0 to 1024 [ 158.880840][ T9154] pim6reg: left allmulticast mode [ 158.916643][ T9161] loop0: detected capacity change from 0 to 256 [ 159.131481][ T9159] loop2: detected capacity change from 0 to 32768 [ 159.138096][ T9159] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (9159) [ 159.142933][ T9140] chnl_net:caif_netlink_parms(): no params data found [ 159.156017][ T9159] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 159.164586][ T9174] loop4: detected capacity change from 0 to 256 [ 159.169890][ T9159] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm [ 159.172171][ T9159] BTRFS info (device loop2): using free-space-tree [ 159.235749][ T9159] BTRFS info (device loop2): rebuilding free space tree [ 159.247905][ T9191] bridge0: entered promiscuous mode [ 159.290141][ T9191] bridge0: left promiscuous mode [ 159.312214][ T7999] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 159.384563][ T9198] loop4: detected capacity change from 0 to 4096 [ 159.387960][ T9198] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 159.428906][ T9198] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 159.449650][ T9140] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.451790][ T9140] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.453747][ T9140] bridge_slave_0: entered allmulticast mode [ 159.455908][ T9140] bridge_slave_0: entered promiscuous mode [ 159.467132][ T9140] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.469035][ T9140] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.471300][ T9140] bridge_slave_1: entered allmulticast mode [ 159.473420][ T9140] bridge_slave_1: entered promiscuous mode [ 159.519026][ T9140] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 159.537720][ T9140] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 159.567910][ T9208] loop2: detected capacity change from 0 to 1024 [ 159.607195][ T9140] team0: Port device team_slave_0 added [ 159.612060][ T9140] team0: Port device team_slave_1 added [ 159.708828][ T9216] loop2: detected capacity change from 0 to 2048 [ 159.710217][ T9140] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 159.712350][ T9140] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.725568][ T9216] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 159.739334][ T9140] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 159.758922][ T9140] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 159.761350][ T9216] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 159.766544][ T9140] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.788999][ T9140] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 159.798634][ T9219] loop4: detected capacity change from 0 to 256 [ 159.821847][ T9221] loop3: detected capacity change from 0 to 256 [ 159.924788][ T8946] blk_print_req_error: 15 callbacks suppressed [ 159.924808][ T8946] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 159.939116][ T9140] hsr_slave_0: entered promiscuous mode [ 159.972235][ T9225] loop4: detected capacity change from 0 to 256 [ 159.980643][ T9225] exfat: Deprecated parameter 'namecase' [ 159.990208][ T9140] hsr_slave_1: entered promiscuous mode [ 160.014396][ T9225] exFAT-fs (loop4): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 160.031416][ T9140] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 160.033601][ T9140] Cannot create hsr debugfs directory [ 160.175929][ T9223] loop2: detected capacity change from 0 to 32768 [ 160.185801][ T9212] loop0: detected capacity change from 0 to 32768 [ 160.191680][ T9227] bridge0: entered promiscuous mode [ 160.198752][ T9212] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 160.201263][ T9212] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 160.203199][ T9223] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (9223) [ 160.216806][ T9223] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 160.231583][ T9223] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm [ 160.234082][ T9223] BTRFS info (device loop2): using free-space-tree [ 160.236352][ T9227] bridge0: left promiscuous mode [ 160.248152][ T9212] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 160.260336][ T6327] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 160.262670][ T6327] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 160.296202][ T9223] BTRFS info (device loop2): rebuilding free space tree [ 160.316814][ T6327] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 54ms [ 160.318985][ T6327] gfs2: fsid=syz:syz.0: jid=0: Done [ 160.320716][ T9212] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 160.415904][ T9252] loop4: detected capacity change from 0 to 512 [ 160.620713][ T9252] EXT4-fs error (device loop4): ext4_orphan_get:1420: comm syz-executor.4: bad orphan inode 12 [ 160.627906][ T9252] EXT4-fs (loop4): Remounting filesystem read-only [ 160.632324][ T9252] EXT4-fs (loop4): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.831414][ T52] Bluetooth: hci2: command tx timeout [ 161.010096][ T7999] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 161.133936][ T550] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.144936][ T7272] EXT4-fs (loop4): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 161.221311][ T9259] loop3: detected capacity change from 0 to 1024 [ 161.337279][ T9262] loop4: detected capacity change from 0 to 256 [ 161.340589][ T9262] exfat: Unknown parameter '0x0000000000000000' [ 161.399284][ T8955] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 161.404591][ T550] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.443785][ T9264] loop3: detected capacity change from 0 to 2048 [ 161.449369][ T9264] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 161.485488][ T9266] loop4: detected capacity change from 0 to 2048 [ 161.520142][ T9264] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 161.581944][ T550] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.610429][ T9266] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.651244][ T9266] EXT4-fs (loop4): Online resizing not supported with bigalloc [ 161.671245][ T7272] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.687261][ T9273] pim6reg: entered allmulticast mode [ 161.710495][ T9273] pim6reg: left allmulticast mode [ 161.717737][ T9260] loop2: detected capacity change from 0 to 40427 [ 161.754649][ T9260] F2FS-fs (loop2): Found nat_bits in checkpoint [ 161.759244][ T9278] loop4: detected capacity change from 0 to 256 [ 161.810476][ T9260] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 161.868766][ T7999] syz-executor.2: attempt to access beyond end of device [ 161.868766][ T7999] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 161.882915][ T7999] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 161.903894][ T550] bridge_slave_1: left allmulticast mode [ 161.905464][ T550] bridge_slave_1: left promiscuous mode [ 161.907064][ T550] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.921346][ T550] bridge_slave_0: left allmulticast mode [ 161.922904][ T550] bridge_slave_0: left promiscuous mode [ 161.928259][ T550] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.076069][ T9271] loop3: detected capacity change from 0 to 32768 [ 162.082731][ T9271] jfs: Unrecognized mount option "wiD=0x0000000000000000" or missing value [ 162.106361][ T9285] loop2: detected capacity change from 0 to 256 [ 162.108802][ T9285] exfat: Deprecated parameter 'namecase' [ 162.127739][ T9285] exFAT-fs (loop2): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 162.222895][ T9291] loop4: detected capacity change from 0 to 128 [ 162.245356][ T9291] affs: Unrecognized mount option "ŽŒ!Št³wWÃ)¶ÑRÉ÷|" or missing value [ 162.252170][ T9291] affs: Error parsing options [ 162.254063][ T9271] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 162.258317][ T9271] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 162.332751][ T9297] loop4: detected capacity change from 0 to 256 [ 162.335360][ T9297] exfat: Unknown parameter '0x0000000000000000' [ 162.370501][ T9299] loop3: detected capacity change from 0 to 128 [ 162.382652][ T9299] VFS: Found a Xenix FS (block size = 512) on device loop3 [ 162.390481][ T8955] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 162.394416][ T9299] sysv_free_block: trying to free block not in datazone [ 162.404921][ T9299] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 162.481346][ T9305] loop4: detected capacity change from 0 to 1024 [ 162.518500][ T9299] loop3: detected capacity change from 0 to 256 [ 162.535997][ T9299] exfat: Unknown parameter 'ÿ0xffffffffffffffff' [ 162.546389][ T43] hfsplus: b-tree write err: -5, ino 4 [ 162.756680][ T9301] loop0: detected capacity change from 0 to 40427 [ 162.768514][ T9301] F2FS-fs (loop0): Found nat_bits in checkpoint [ 162.803243][ T9301] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 162.863498][ T6940] syz-executor.0: attempt to access beyond end of device [ 162.863498][ T6940] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 162.867548][ T6940] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 162.910358][ T52] Bluetooth: hci2: command tx timeout [ 163.034726][ T9323] loop0: detected capacity change from 0 to 128 [ 163.037611][ T9323] affs: Unrecognized mount option "ŽŒ!Št³wWÃ)¶ÑRÉ÷|" or missing value [ 163.044307][ T9323] affs: Error parsing options [ 163.082732][ T8955] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 163.215863][ T9319] loop4: detected capacity change from 0 to 32768 [ 163.332918][ T9325] loop0: detected capacity change from 0 to 32768 [ 163.335714][ T9325] jfs: Unrecognized mount option "wiD=0x0000000000000000" or missing value [ 163.384189][ T8955] I/O error, dev loop0, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 163.438891][ T9325] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 163.441844][ T9325] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 163.516695][ T9329] loop0: detected capacity change from 0 to 256 [ 163.530522][ T9329] exfat: Unknown parameter '0x0000000000000000' [ 163.754292][ T9331] loop0: detected capacity change from 0 to 32768 [ 163.767894][ T9331] bcachefs (/dev/loop0): error validating superblock: Not a bcachefs superblock layout [ 163.816503][ T9337] loop4: detected capacity change from 0 to 64 [ 163.854897][ T9337] Driver unsupported XDP return value 0 on prog (id 53) dev N/A, expect packet loss! [ 163.893037][ T550] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 163.932216][ T550] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 163.949321][ T9342] loop4: detected capacity change from 0 to 1024 [ 163.979730][ T43] hfsplus: b-tree write err: -5, ino 4 [ 163.988694][ T550] bond0 (unregistering): Released all slaves [ 164.185167][ T9339] loop0: detected capacity change from 0 to 32768 [ 164.198298][ T9339] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 164.205634][ T9339] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 164.232891][ T9347] bridge0: entered promiscuous mode [ 164.274698][ T9347] bridge0: left promiscuous mode [ 164.295936][ T9339] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 164.304429][ T6077] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 164.306429][ T6077] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 164.356787][ T6077] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 50ms [ 164.361517][ T6077] gfs2: fsid=syz:syz.0: jid=0: Done [ 164.367387][ T9339] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 164.431344][ T9344] loop4: detected capacity change from 0 to 32768 [ 164.445868][ T9344] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (9344) [ 164.463874][ T9344] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 164.469820][ T9344] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 164.479123][ T9344] BTRFS info (device loop4): using free-space-tree [ 164.637918][ T7272] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 164.975604][ T9389] loop2: detected capacity change from 0 to 512 [ 165.004879][ T52] Bluetooth: hci2: command tx timeout [ 165.069626][ T9389] EXT4-fs error (device loop2): ext4_orphan_get:1420: comm syz-executor.2: bad orphan inode 12 [ 165.074657][ T9389] EXT4-fs (loop2): Remounting filesystem read-only [ 165.078891][ T9389] EXT4-fs (loop2): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.525579][ T9394] loop4: detected capacity change from 0 to 2048 [ 165.546519][ T7999] EXT4-fs (loop2): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 165.591780][ T9394] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.630016][ T9394] EXT4-fs (loop4): Online resizing not supported with bigalloc [ 165.676739][ T9398] loop2: detected capacity change from 0 to 2048 [ 165.686732][ T9398] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 165.708550][ T9398] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 165.709571][ T7272] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.787773][ T9400] loop0: detected capacity change from 0 to 1024 [ 165.853826][ T9405] loop2: detected capacity change from 0 to 128 [ 165.856373][ T9405] affs: Unrecognized mount option "ŽŒ!Št³wWÃ)¶ÑRÉ÷|" or missing value [ 165.858713][ T9405] affs: Error parsing options [ 165.867343][ T550] hsr_slave_0: left promiscuous mode [ 165.949465][ T550] hsr_slave_1: left promiscuous mode [ 166.049449][ T9418] loop0: detected capacity change from 0 to 128 [ 166.051979][ T550] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 166.054034][ T550] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 166.066166][ T550] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 166.071663][ T550] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 166.115943][ T9418] VFS: Found a Xenix FS (block size = 512) on device loop0 [ 166.118607][ T550] veth1_macvtap: left promiscuous mode [ 166.122402][ T550] veth0_macvtap: left promiscuous mode [ 166.125322][ T9418] sysv_free_block: trying to free block not in datazone [ 166.127456][ T550] veth1_vlan: left promiscuous mode [ 166.131358][ T550] veth0_vlan: left promiscuous mode [ 166.139710][ T9418] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 166.225899][ T9418] loop0: detected capacity change from 0 to 256 [ 166.238124][ T9418] exfat: Unknown parameter 'ÿ0xffffffffffffffff' [ 166.348655][ T9408] loop4: detected capacity change from 0 to 32768 [ 166.374375][ T9408] bcachefs (/dev/loop4): error validating superblock: Not a bcachefs superblock layout [ 166.573613][ T9429] loop3: detected capacity change from 0 to 256 [ 166.576033][ T9429] exfat: Unknown parameter '0x0000000000000000' [ 166.604768][ T8955] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 166.901565][ T9433] loop3: detected capacity change from 0 to 32768 [ 166.925830][ T9433] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 166.928027][ T9433] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 166.942246][ T9433] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 166.946132][ T25] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 166.947991][ T25] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 166.990369][ T25] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 42ms [ 167.005131][ T25] gfs2: fsid=syz:syz.0: jid=0: Done [ 167.006617][ T9433] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 167.059905][ T52] Bluetooth: hci2: command tx timeout [ 167.458546][ T9441] loop3: detected capacity change from 0 to 512 [ 167.667888][ T9441] EXT4-fs error (device loop3): ext4_orphan_get:1420: comm syz-executor.3: bad orphan inode 12 [ 167.672617][ T9441] EXT4-fs (loop3): Remounting filesystem read-only [ 167.676837][ T9441] EXT4-fs (loop3): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.211353][ T6284] EXT4-fs (loop3): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 168.289957][ T9444] loop3: detected capacity change from 0 to 2048 [ 168.305289][ T9444] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.330541][ T9444] EXT4-fs (loop3): Online resizing not supported with bigalloc [ 168.344263][ T6284] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.458137][ T9450] loop3: detected capacity change from 0 to 2048 [ 168.467400][ T9450] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 168.472033][ T9450] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 168.546486][ T9452] loop3: detected capacity change from 0 to 1024 [ 168.636341][ T550] team0 (unregistering): Port device team_slave_1 removed [ 168.654264][ T9458] loop3: detected capacity change from 0 to 64 [ 168.822892][ T550] team0 (unregistering): Port device team_slave_0 removed [ 171.164882][ T9427] bridge0: entered promiscuous mode [ 171.199692][ T9427] bridge0: left promiscuous mode [ 171.337203][ T9468] loop2: detected capacity change from 0 to 32768 [ 171.346455][ T9468] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (9468) [ 171.363371][ T9468] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 171.363520][ T9140] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 171.366223][ T9468] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm [ 171.392703][ T9468] BTRFS info (device loop2): using free-space-tree [ 171.399446][ T9140] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 171.441586][ T9469] loop0: detected capacity change from 0 to 32768 [ 171.444095][ T9469] XFS: noikeep mount option is deprecated. [ 171.445757][ T9469] XFS: attr2 mount option is deprecated. [ 171.449232][ T9140] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 171.467415][ T9140] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 171.476539][ T9469] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 171.646955][ T7999] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 171.730469][ T9469] XFS (loop0): Ending clean mount [ 171.746754][ T9469] XFS (loop0): Quotacheck needed: Please wait. [ 171.759153][ T9140] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.776039][ T9509] loop2: detected capacity change from 0 to 1024 [ 171.786699][ T9140] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.815029][ T27] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.817016][ T27] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.821623][ T9469] XFS (loop0): Quotacheck: Done. [ 171.827038][ T27] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.828971][ T27] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.946894][ T6940] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 171.984017][ T8955] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 172.144133][ T9516] loop2: detected capacity change from 0 to 512 [ 172.326254][ T9516] EXT4-fs error (device loop2): ext4_orphan_get:1420: comm syz-executor.2: bad orphan inode 12 [ 172.329693][ T9516] EXT4-fs (loop2): Remounting filesystem read-only [ 172.333780][ T9516] EXT4-fs (loop2): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.867941][ T7999] EXT4-fs (loop2): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 173.047131][ T9530] loop2: detected capacity change from 0 to 1024 [ 173.117234][ T42] hfsplus: b-tree write err: -5, ino 4 [ 173.219166][ T9532] loop2: detected capacity change from 0 to 64 [ 173.658028][ T9543] loop3: detected capacity change from 0 to 8192 [ 173.699170][ T9543] REISERFS warning (device loop3): sh-2011 read_super_block: can't find a reiserfs filesystem on (dev loop3, block 16, size 4096) [ 173.707760][ T9543] REISERFS warning (device loop3): sh-2021 reiserfs_fill_super: can not find reiserfs on loop3 [ 174.003867][ T9546] loop3: detected capacity change from 0 to 40427 [ 174.014612][ T9546] F2FS-fs (loop3): Found nat_bits in checkpoint [ 174.038765][ T9546] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 174.082037][ T6284] syz-executor.3: attempt to access beyond end of device [ 174.082037][ T6284] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 174.086320][ T6284] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 184.342002][ T6288] Bluetooth: hci4: command 0x0406 tx timeout [ 184.503741][ T9140] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 184.506962][ T9140] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 184.577759][ T9570] loop0: detected capacity change from 0 to 1024 [ 184.665573][ T9140] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 184.684325][ T268] hfsplus: b-tree write err: -5, ino 4 [ 184.718881][ T9579] loop4: detected capacity change from 0 to 8192 [ 184.722894][ T9140] veth0_vlan: entered promiscuous mode [ 184.745728][ T9579] REISERFS warning (device loop4): sh-2011 read_super_block: can't find a reiserfs filesystem on (dev loop4, block 16, size 4096) [ 184.746881][ T9140] veth1_vlan: entered promiscuous mode [ 184.749424][ T9579] REISERFS warning (device loop4): sh-2021 reiserfs_fill_super: can not find reiserfs on loop4 [ 184.809673][ T9565] I/O error, dev loop4, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 184.834911][ T9140] veth0_macvtap: entered promiscuous mode [ 184.842610][ T9140] veth1_macvtap: entered promiscuous mode [ 184.858679][ T9140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.862019][ T9140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.864638][ T9140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.867596][ T9140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.874935][ T9140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.878294][ T9140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.881381][ T9140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.884437][ T9140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.891425][ T9140] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 185.942445][ T9615] loop3: detected capacity change from 0 to 1024 [ 185.984821][ T11] hfsplus: b-tree write err: -5, ino 4 [ 186.120771][ T6288] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 186.125151][ T6288] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 186.127927][ T6288] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 186.131519][ T6288] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 186.133741][ T6288] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 186.135909][ T6288] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 187.380052][ T2293] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.381798][ T2293] ieee802154 phy1 wpan1: encryption failed: -22 [ 188.179706][ T6288] Bluetooth: hci5: command tx timeout [ 190.259664][ T6288] Bluetooth: hci5: command tx timeout [ 192.339728][ T6288] Bluetooth: hci5: command tx timeout [ 194.419618][ T6288] Bluetooth: hci5: command tx timeout [ 196.589796][ T9140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.592571][ T9140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.595230][ T9140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.597972][ T9140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.601399][ T9140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.604129][ T9140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.606691][ T9140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.609467][ T9140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.614413][ T9140] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 196.667061][ T9621] loop2: detected capacity change from 0 to 1024 [ 196.703071][ T550] hfsplus: b-tree write err: -5, ino 4 [ 196.723463][ T9140] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.730103][ T9140] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.732483][ T9140] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.734837][ T9140] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.841838][ T9627] loop2: detected capacity change from 0 to 8192 [ 196.862168][ T9627] REISERFS warning (device loop2): sh-2011 read_super_block: can't find a reiserfs filesystem on (dev loop2, block 16, size 4096) [ 196.869350][ T9627] REISERFS warning (device loop2): sh-2021 reiserfs_fill_super: can not find reiserfs on loop2 [ 197.038990][ T9646] loop4: detected capacity change from 0 to 1024 [ 197.067895][ T4278] hfsplus: b-tree write err: -5, ino 4 [ 197.144535][ T268] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.219951][ T4278] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.225470][ T4278] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.256548][ T9653] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 197.261453][ T4278] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.269625][ T4278] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.365087][ T9658] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 197.474886][ T268] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.992558][ T9661] loop0: detected capacity change from 0 to 8192 [ 197.996770][ T9661] REISERFS warning (device loop0): sh-2011 read_super_block: can't find a reiserfs filesystem on (dev loop0, block 16, size 4096) [ 198.002853][ T268] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.010779][ T9661] REISERFS warning (device loop0): sh-2021 reiserfs_fill_super: can not find reiserfs on loop0 [ 198.045048][ T9617] chnl_net:caif_netlink_parms(): no params data found [ 198.179032][ T268] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.223519][ T9676] loop4: detected capacity change from 0 to 4096 [ 198.232016][ T9676] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 198.258898][ T9676] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 198.273027][ T9672] mac80211_hwsim hwsim30 wlan0: entered promiscuous mode [ 198.277842][ T9672] macvlan2: entered promiscuous mode [ 198.282219][ T9672] mac80211_hwsim hwsim30 wlan0: left promiscuous mode [ 198.423524][ T9680] loop0: detected capacity change from 0 to 4096 [ 198.427371][ T9680] ntfs3: loop0: ino=3, Correct links count -> 2. [ 198.429101][ T9680] ntfs3: loop0: Failed to load $Volume (-22). [ 198.431023][ T9617] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.443978][ T9683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.449563][ T9617] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.451928][ T9683] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.455240][ T9617] bridge_slave_0: entered allmulticast mode [ 198.457306][ T9617] bridge_slave_0: entered promiscuous mode [ 198.472730][ T9617] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.474641][ T9617] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.478562][ T9617] bridge_slave_1: entered allmulticast mode [ 198.481610][ T9619] I/O error, dev loop0, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 198.490209][ T9617] bridge_slave_1: entered promiscuous mode [ 198.551094][ T9689] loop0: detected capacity change from 0 to 8 [ 198.555797][ T9617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 198.570086][ T9689] SQUASHFS error: Unable to read inode 0x11f [ 198.580857][ T9617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 198.608765][ T9617] team0: Port device team_slave_0 added [ 198.612079][ T9617] team0: Port device team_slave_1 added [ 198.631562][ T9617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 198.633513][ T9617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 198.648377][ T9617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 198.653018][ T268] bridge_slave_1: left allmulticast mode [ 198.654695][ T268] bridge_slave_1: left promiscuous mode [ 198.656377][ T268] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.661366][ T268] bridge_slave_0: left allmulticast mode [ 198.662785][ T268] bridge_slave_0: left promiscuous mode [ 198.664413][ T268] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.385962][ T9696] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 200.038151][ T9704] loop4: detected capacity change from 0 to 4096 [ 200.050788][ T9704] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 200.068372][ T9704] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 200.831784][ T268] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 200.872372][ T268] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 200.912785][ T268] bond0 (unregistering): Released all slaves [ 200.918656][ T9617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 200.925262][ T9617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.932993][ T9617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 201.052893][ T9719] loop4: detected capacity change from 0 to 8 [ 201.086806][ T9719] SQUASHFS error: xz decompression failed, data probably corrupt [ 201.088919][ T9719] SQUASHFS error: Failed to read block 0x108: -5 [ 201.091216][ T9719] SQUASHFS error: Unable to read metadata cache entry [106] [ 201.093222][ T9719] SQUASHFS error: Unable to read inode 0x7ff [ 201.101739][ T9617] hsr_slave_0: entered promiscuous mode [ 201.150449][ T9617] hsr_slave_1: entered promiscuous mode [ 201.193713][ T9617] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 201.199945][ T9617] Cannot create hsr debugfs directory [ 201.254646][ T9715] loop2: detected capacity change from 0 to 40427 [ 201.382971][ T9727] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 201.652656][ T9715] F2FS-fs (loop2): Found nat_bits in checkpoint [ 201.901815][ T9715] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 202.018504][ T7999] syz-executor.2: attempt to access beyond end of device [ 202.018504][ T7999] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 202.045945][ T7999] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 202.068150][ T9737] loop0: detected capacity change from 0 to 8 [ 202.094555][ T9737] SQUASHFS error: Unable to read directory block [629:46] [ 202.331249][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 202.336822][ T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 202.339823][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 202.342345][ T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 202.346086][ T52] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 202.348937][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 202.372007][ T9741] loop4: detected capacity change from 0 to 128 [ 202.412910][ T9741] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 202.427181][ T9741] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 202.467773][ T268] hsr_slave_0: left promiscuous mode [ 202.500817][ T268] hsr_slave_1: left promiscuous mode [ 202.569696][ T268] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 202.571933][ T268] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 202.574526][ T268] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 202.576653][ T268] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 202.596474][ T268] veth1_macvtap: left promiscuous mode [ 202.598072][ T268] veth0_macvtap: left promiscuous mode [ 202.599846][ T268] veth1_vlan: left promiscuous mode [ 202.601460][ T268] veth0_vlan: left promiscuous mode [ 203.506953][ T30] audit: type=1400 audit(203.482:17): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="rwat" requested=w pid=9788 comm="syz-executor.2" daddr=::ffff:127.0.0.1 dest=20000 [ 203.700587][ T9791] loop2: detected capacity change from 0 to 32768 [ 203.733900][ T9791] ERROR: (device loop2): xtSearch: XT_GETPAGE: xtree page corrupt [ 203.733900][ T9791] [ 203.738771][ T9791] ERROR: (device loop2): remounting filesystem as read-only [ 203.740884][ T9791] xtLookup: xtSearch returned -5 [ 203.744538][ T9791] ERROR: (device loop2): xtSearch: XT_GETPAGE: xtree page corrupt [ 203.744538][ T9791] [ 203.748930][ T9791] ERROR: (device loop2): xtSearch: XT_GETPAGE: xtree page corrupt [ 203.748930][ T9791] [ 203.753222][ T9791] xtLookup: xtSearch returned -5 [ 203.754486][ T9791] ERROR: (device loop2): xtTruncate: XT_GETPAGE: xtree page corrupt [ 203.754486][ T9791] [ 204.429639][ T6288] Bluetooth: hci2: command tx timeout [ 204.619567][ T268] team0 (unregistering): Port device team_slave_1 removed [ 204.793189][ T268] team0 (unregistering): Port device team_slave_0 removed [ 206.502457][ T6288] Bluetooth: hci2: command tx timeout [ 207.196058][ T9800] loop0: detected capacity change from 0 to 8 [ 207.211412][ T9800] SQUASHFS error: Unable to read directory block [629:46] [ 207.281333][ T9795] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 207.357247][ T9809] loop4: detected capacity change from 0 to 2048 [ 207.507971][ T9814] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 208.075034][ T9816] loop2: detected capacity change from 0 to 2048 [ 208.112953][ T9816] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 208.142182][ T9816] fs-verity: sha512 using implementation "sha512-arm64" [ 208.231574][ T9760] chnl_net:caif_netlink_parms(): no params data found [ 208.256255][ T9617] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 208.270638][ T9617] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 208.308666][ T7999] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.344838][ T9617] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 208.355781][ T9617] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 208.497760][ T9760] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.510608][ T9760] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.512654][ T9760] bridge_slave_0: entered allmulticast mode [ 208.514834][ T9760] bridge_slave_0: entered promiscuous mode [ 208.542755][ T9805] loop4: detected capacity change from 0 to 32768 [ 208.545215][ T9805] jfs: Unrecognized mount option "error" or missing value [ 208.551072][ T9760] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.559644][ T9760] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.566526][ T9760] bridge_slave_1: entered allmulticast mode [ 208.568711][ T9760] bridge_slave_1: entered promiscuous mode [ 208.574866][ T9795] I/O error, dev loop4, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 208.579769][ T52] Bluetooth: hci2: command tx timeout [ 208.644260][ T9760] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.667721][ T9855] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 208.767844][ T9861] loop0: detected capacity change from 0 to 4096 [ 208.771210][ T9861] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 208.794177][ T9861] ntfs3: loop0: Failed to initialize $Extend/$Reparse. [ 208.811362][ T9861] ntfs3: loop0: ino=1b, "file0" attr_set_size [ 208.815127][ T9861] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 208.944126][ T9875] ebt_among: wrong size: 1048 against expected 710676, rounded to 710680 [ 209.004686][ T268] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.015415][ T9760] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 209.043041][ T9760] team0: Port device team_slave_0 added [ 209.046807][ T9760] team0: Port device team_slave_1 added [ 209.142101][ T268] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.178052][ T9760] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.180054][ T9760] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.187002][ T9760] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.269857][ T268] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.274485][ T9760] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.276323][ T9760] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.283577][ T9760] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.521863][ T9902] loop4: detected capacity change from 0 to 16 [ 209.531929][ T9902] erofs: (device loop4): mounted with root inode @ nid 36. [ 210.021205][ T52] Bluetooth: hci1: command 0x0406 tx timeout [ 210.659654][ T6288] Bluetooth: hci2: command tx timeout [ 220.573662][ T9617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.636207][ T9915] loop0: detected capacity change from 0 to 256 [ 220.638652][ T9915] exfat: Deprecated parameter 'utf8' [ 220.648654][ T268] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.648870][ T9915] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 220.716390][ T9919] loop4: detected capacity change from 0 to 256 [ 220.758719][ T9760] hsr_slave_0: entered promiscuous mode [ 220.810300][ T9760] hsr_slave_1: entered promiscuous mode [ 220.857297][ T9760] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 220.859342][ T9760] Cannot create hsr debugfs directory [ 220.901219][ T9617] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.932309][ T6330] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.934286][ T6330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.941885][ T6330] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.943791][ T6330] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.055165][ T9917] loop2: detected capacity change from 0 to 32768 [ 221.150927][ T268] bridge_slave_1: left allmulticast mode [ 221.152513][ T268] bridge_slave_1: left promiscuous mode [ 221.154735][ T268] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.171053][ T268] bridge_slave_0: left allmulticast mode [ 221.172672][ T268] bridge_slave_0: left promiscuous mode [ 221.174180][ T268] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.196378][ T9917] bcachefs (loop2): mounting version 1.7: mi_btree_bitmap opts=data_checksum=crc64,str_hash=crc64,nojournal_transaction_names,nocow [ 221.226426][ T9917] bcachefs (loop2): recovering from clean shutdown, journal seq 10 [ 221.272530][ T9917] bcachefs (loop2): alloc_read... done [ 221.274027][ T9917] bcachefs (loop2): stripes_read... done [ 221.275510][ T9917] bcachefs (loop2): snapshots_read... done [ 221.278064][ T9917] bcachefs (loop2): journal_replay... done [ 221.285895][ T9917] bcachefs (loop2): resume_logged_ops... done [ 221.287712][ T9917] bcachefs (loop2): going read-write [ 221.306702][ T9917] bcachefs (loop2): done starting filesystem [ 221.332330][ T9941] loop4: detected capacity change from 0 to 32768 [ 221.424809][ T7999] bcachefs (loop2): shutting down [ 221.427773][ T7999] bcachefs (loop2): going read-only [ 221.429199][ T7999] bcachefs (loop2): finished waiting for writes to stop [ 221.432499][ T9941] bcachefs (loop4): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,nojournal_transaction_names [ 221.436302][ T9941] bcachefs (loop4): recovering from clean shutdown, journal seq 8 [ 221.466689][ T9941] bcachefs (loop4): alloc_read... done [ 221.468210][ T9941] bcachefs (loop4): stripes_read... done [ 221.469893][ T9941] bcachefs (loop4): snapshots_read... done [ 221.473386][ T7999] bcachefs (loop2): flushing journal and stopping allocators, journal seq 11 [ 221.473970][ T9941] bcachefs (loop4): journal_replay... done [ 221.477499][ T9941] bcachefs (loop4): resume_logged_ops... done [ 221.479143][ T9941] bcachefs (loop4): going read-write [ 221.490751][ T7999] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 15 [ 221.495891][ T7999] bcachefs (loop2): shutdown complete, journal seq 16 [ 221.495983][ T9941] bcachefs (loop4): done starting filesystem [ 221.498359][ T7999] bcachefs (loop2): marking filesystem clean [ 221.539836][ T7999] bcachefs (loop2): shutdown complete [ 222.583721][ T7272] bcachefs (loop4): shutting down [ 222.585235][ T7272] bcachefs (loop4): going read-only [ 222.586697][ T7272] bcachefs (loop4): finished waiting for writes to stop [ 222.638879][ T7272] bcachefs (loop4): flushing journal and stopping allocators, journal seq 8 [ 222.642330][ T7272] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 8 [ 222.657549][ T7272] bcachefs (loop4): shutdown complete, journal seq 9 [ 222.664168][ T7272] bcachefs (loop4): marking filesystem clean [ 222.689849][ T7272] bcachefs (loop4): shutdown complete [ 223.115578][ T9980] hfsplus: unable to find HFS+ superblock [ 223.270818][ T9988] loop4: detected capacity change from 0 to 256 [ 223.289908][ T9988] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 223.303396][ T9988] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 223.305934][ T9988] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 223.307956][ T9988] UDF-fs: Scanning with blocksize 512 failed [ 223.323055][ T9988] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 223.369559][ T9988] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 223.417392][ T9994] loop2: detected capacity change from 0 to 16 [ 223.427203][ T9994] erofs: (device loop2): mounted with root inode @ nid 36. [ 223.545709][ T30] audit: type=1400 audit(223.517:18): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="rwat" requested=w pid=9997 comm="syz-executor.2" daddr=::ffff:172.20.20.0 [ 223.803175][T10002] loop2: detected capacity change from 0 to 32768 [ 223.805766][T10002] XFS: attr2 mount option is deprecated. [ 223.807290][T10002] XFS: ikeep mount option is deprecated. [ 223.808797][T10002] XFS: noikeep mount option is deprecated. [ 223.848755][T10002] XFS (loop2): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 223.874869][T10002] XFS (loop2): Ending clean mount [ 223.879781][ T268] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 223.884051][T10002] XFS (loop2): Quotacheck needed: Please wait. [ 223.925063][ T268] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 223.927901][T10002] XFS (loop2): Quotacheck: Done. [ 223.952655][ T268] bond0 (unregistering): Released all slaves [ 223.987501][ T9617] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 224.205566][ T7999] XFS (loop2): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 224.412858][ T9617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.487409][T10049] loop4: detected capacity change from 0 to 256 [ 224.501398][T10049] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 224.505011][T10049] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 224.507521][T10049] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 224.510176][T10049] UDF-fs: Scanning with blocksize 512 failed [ 224.516527][T10049] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 224.525915][T10049] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 224.563560][ T30] audit: type=1400 audit(224.537:19): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="rwat" requested=w pid=10050 comm="syz-executor.2" daddr=::ffff:172.20.20.0 [ 224.740024][ T9617] veth0_vlan: entered promiscuous mode [ 224.744807][ T9617] veth1_vlan: entered promiscuous mode [ 224.772353][ T9617] veth0_macvtap: entered promiscuous mode [ 224.775574][ T9617] veth1_macvtap: entered promiscuous mode [ 224.887804][ T268] hsr_slave_0: left promiscuous mode [ 224.990313][ T268] hsr_slave_1: left promiscuous mode [ 225.001969][T10057] loop0: detected capacity change from 0 to 32768 [ 225.079733][ T268] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 225.083129][ T268] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 225.094224][ T268] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 225.096538][ T268] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 225.097563][T10057] bcachefs (loop0): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=crc64,data_checksum=xxhash,compression=lz4,str_hash=crc32c,nojournal_transaction_names [ 225.103356][T10057] bcachefs (loop0): recovering from clean shutdown, journal seq 7 [ 225.122350][ T268] veth1_macvtap: left promiscuous mode [ 225.123940][ T268] veth0_macvtap: left promiscuous mode [ 225.125551][ T268] veth1_vlan: left promiscuous mode [ 225.127102][ T268] veth0_vlan: left promiscuous mode [ 225.165806][T10057] bcachefs (loop0): alloc_read... done [ 225.167348][T10057] bcachefs (loop0): stripes_read... done [ 225.168904][T10057] bcachefs (loop0): snapshots_read... done [ 225.175821][T10057] bcachefs (loop0): journal_replay... done [ 225.177362][T10057] bcachefs (loop0): resume_logged_ops... done [ 225.179014][T10057] bcachefs (loop0): going read-write [ 225.199637][T10057] bcachefs (loop0): done starting filesystem [ 225.282393][T10057] bcachefs: bch2_parse_mount_opts() Invalid mount option errors: invalid selection [ 225.310293][ T6940] bcachefs (loop0): shutting down [ 225.311704][ T6940] bcachefs (loop0): going read-only [ 225.313068][ T6940] bcachefs (loop0): finished waiting for writes to stop [ 225.360148][ T6940] bcachefs (loop0): flushing journal and stopping allocators, journal seq 7 [ 225.362651][ T6940] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 7 [ 225.377963][ T6940] bcachefs (loop0): shutdown complete, journal seq 8 [ 225.395550][ T6940] bcachefs (loop0): marking filesystem clean [ 225.407987][T10098] loop4: detected capacity change from 0 to 256 [ 225.411791][T10098] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 225.415130][T10098] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 225.417686][T10098] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 225.420451][T10098] UDF-fs: Scanning with blocksize 512 failed [ 225.424731][ T6940] bcachefs (loop0): shutdown complete [ 225.430330][T10098] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 225.457319][T10098] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 227.044499][ T268] team0 (unregistering): Port device team_slave_1 removed [ 227.223039][ T268] team0 (unregistering): Port device team_slave_0 removed [ 229.541626][ T9617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.544492][ T9617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.547005][ T9617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.552729][ T9617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.555300][ T9617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.561049][ T9617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.565105][ T9617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 229.601955][ T9617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.604674][ T9617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.607249][ T9617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.618970][ T9617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.621210][T10117] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 229.622510][ T9617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.625387][T10117] netlink: 9344 bytes leftover after parsing attributes in process `syz-executor.0'. [ 229.626806][ T9617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.635291][T10117] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 229.637551][T10117] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 229.652558][ T9617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 229.785703][ T9760] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 229.806859][ T9760] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 230.417711][ T9760] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 230.431443][ T9617] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.433826][ T9617] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.450150][ T9617] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.454715][ T9617] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.462363][ T9760] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 230.624074][ T4278] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.626666][ T4278] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.700551][ T9760] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.706624][T10131] loop2: detected capacity change from 0 to 256 [ 230.715906][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.718073][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.734902][T10122] loop4: detected capacity change from 0 to 32768 [ 230.748569][T10131] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 230.761983][ T9760] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.765285][T10131] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 230.767831][T10131] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 230.768801][ T27] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.771828][ T27] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.784022][T10131] UDF-fs: Scanning with blocksize 512 failed [ 230.787367][T10131] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 230.795362][T10131] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 230.845660][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.846457][T10138] loop0: detected capacity change from 0 to 16 [ 230.847660][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.877507][T10138] erofs: (device loop0): mounted with root inode @ nid 36. [ 230.913031][ T9760] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 230.920714][T10122] bcachefs (loop4): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=crc64,data_checksum=xxhash,compression=lz4,str_hash=crc32c,nojournal_transaction_names [ 230.928967][T10122] bcachefs (loop4): recovering from clean shutdown, journal seq 7 [ 230.956155][T10141] input: syz0 as /devices/virtual/input/input4 [ 231.043632][T10150] loop0: detected capacity change from 0 to 1024 [ 231.044611][T10122] bcachefs (loop4): alloc_read... done [ 231.044667][T10122] bcachefs (loop4): stripes_read... done [ 231.044696][T10122] bcachefs (loop4): snapshots_read... done [ 231.045658][T10122] bcachefs (loop4): journal_replay... done [ 231.045699][T10122] bcachefs (loop4): resume_logged_ops... done [ 231.045749][T10122] bcachefs (loop4): going read-write [ 231.055301][T10122] bcachefs (loop4): done starting filesystem [ 231.082443][ T9760] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 231.150789][ T9760] veth0_vlan: entered promiscuous mode [ 231.154591][ T9760] veth1_vlan: entered promiscuous mode [ 231.165761][T10122] bcachefs: bch2_parse_mount_opts() Invalid mount option errors: invalid selection [ 231.194030][ T9760] veth0_macvtap: entered promiscuous mode [ 231.199373][ T7272] bcachefs (loop4): shutting down [ 231.201568][ T7272] bcachefs (loop4): going read-only [ 231.202926][ T7272] bcachefs (loop4): finished waiting for writes to stop [ 231.206028][ T9760] veth1_macvtap: entered promiscuous mode [ 231.217101][ T9760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.228201][ T9760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.235123][ T9760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.237985][ T9760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.242323][ T9760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.245040][ T9760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.249432][ T7272] bcachefs (loop4): flushing journal and stopping allocators, journal seq 7 [ 231.251322][ T9760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.254413][ T9760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.255623][ T7272] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 7 [ 231.258103][ T9760] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 231.277736][ T7272] bcachefs (loop4): shutdown complete, journal seq 8 [ 231.284173][ T9760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.287122][ T9760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.290775][ T7272] bcachefs (loop4): marking filesystem clean [ 231.291793][ T9760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.295108][ T9760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.297927][ T9760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.301619][ T9760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.304206][ T9760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.307031][ T9760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.311136][ T9760] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 231.315778][ T9760] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.318048][ T9760] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.320608][ T9760] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.322971][ T9760] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.357453][ T7272] bcachefs (loop4): shutdown complete [ 231.444807][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.446910][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.487402][ T2101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.489706][ T2101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.388433][T10190] input: syz0 as /devices/virtual/input/input5 [ 232.617785][T10194] loop0: detected capacity change from 0 to 1024 [ 232.724714][T10202] loop2: detected capacity change from 0 to 1024 [ 232.749107][T10194] [ 232.749784][T10194] ====================================================== [ 232.751644][T10194] WARNING: possible circular locking dependency detected 1970/01/01 00:03:52 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 232.753528][T10194] 6.10.0-rc3-syzkaller-gac2193b4b460 #0 Tainted: G W [ 232.755588][T10194] ------------------------------------------------------ [ 232.757436][T10194] syz-executor.0/10194 is trying to acquire lock: [ 232.759132][T10194] ffff0000d9832188 (&mm->mmap_lock){++++}-{3:3}, at: __might_fault+0x9c/0x124 [ 232.761499][T10194] [ 232.761499][T10194] but task is already holding lock: [ 232.763510][T10194] ffff0000c52cc0b0 (&tree->tree_lock){+.+.}-{3:3}, at: hfsplus_find_init+0x144/0x1bc [ 232.765981][T10194] [ 232.765981][T10194] which lock already depends on the new lock. [ 232.765981][T10194] [ 232.768770][T10194] [ 232.768770][T10194] the existing dependency chain (in reverse order) is: [ 232.771174][T10194] [ 232.771174][T10194] -> #3 (&tree->tree_lock){+.+.}-{3:3}: [ 232.773246][T10194] __mutex_lock_common+0x190/0x21a0 [ 232.774738][T10194] mutex_lock_nested+0x2c/0x38 [ 232.776120][T10194] hfsplus_file_truncate+0x62c/0x9b8 [ 232.777683][T10194] hfsplus_write_failed+0x88/0xa4 [ 232.779140][T10194] hfsplus_write_begin+0xe0/0xe4 [ 232.780597][T10194] generic_perform_write+0x28c/0x588 [ 232.782118][T10194] __generic_file_write_iter+0xfc/0x204 [ 232.783724][T10194] generic_file_write_iter+0xb8/0x2b4 [ 232.785373][T10194] vfs_write+0x828/0xc78 [ 232.786633][T10194] ksys_write+0x15c/0x26c [ 232.787882][T10194] __arm64_sys_write+0x7c/0x90 [ 232.789276][T10194] invoke_syscall+0x98/0x2b8 [ 232.790606][T10194] el0_svc_common+0x130/0x23c [ 232.792007][T10194] do_el0_svc+0x48/0x58 [ 232.793279][T10194] el0_svc+0x54/0x168 [ 232.794479][T10194] el0t_64_sync_handler+0x84/0xfc [ 232.795916][T10194] el0t_64_sync+0x190/0x194 [ 232.797284][T10194] [ 232.797284][T10194] -> #2 (&hip->extents_lock){+.+.}-{3:3}: [ 232.799343][T10194] __mutex_lock_common+0x190/0x21a0 [ 232.800879][T10194] mutex_lock_nested+0x2c/0x38 [ 232.802262][T10194] hfsplus_get_block+0x2c4/0x1168 [ 232.803717][T10194] block_read_full_folio+0x3e0/0xc6c [ 232.805253][T10194] hfsplus_read_folio+0x28/0x38 [ 232.806647][T10194] read_pages+0x4b8/0x694 [ 232.807892][T10194] page_cache_ra_unbounded+0x484/0x584 [ 232.809428][T10194] page_cache_ra_order+0x790/0x990 [ 232.810946][T10194] do_sync_mmap_readahead+0x3a8/0x834 [ 232.812492][T10194] filemap_fault+0x5b4/0x10a0 [ 232.813819][T10194] __do_fault+0x11c/0x374 [ 232.815107][T10194] do_pte_missing+0x858/0x3aec [ 232.816540][T10194] handle_mm_fault+0x1468/0x331c [ 232.817959][T10194] do_page_fault+0x38c/0xb1c [ 232.819313][T10194] do_translation_fault+0xc4/0x114 [ 232.820792][T10194] do_mem_abort+0x74/0x200 [ 232.822095][T10194] el0_da+0x60/0x178 [ 232.823288][T10194] el0t_64_sync_handler+0xcc/0xfc [ 232.824853][T10194] el0t_64_sync+0x190/0x194 [ 232.826199][T10194] [ 232.826199][T10194] -> #1 (mapping.invalidate_lock#7){.+.+}-{3:3}: [ 232.828408][T10194] down_read+0x58/0x2fc [ 232.829664][T10194] filemap_fault+0x528/0x10a0 [ 232.831031][T10194] __do_fault+0x11c/0x374 [ 232.832310][T10194] do_pte_missing+0x1944/0x3aec [ 232.833700][T10194] handle_mm_fault+0x1468/0x331c [ 232.835109][T10194] do_page_fault+0x428/0xb1c [ 232.836465][T10194] do_translation_fault+0xc4/0x114 [ 232.837933][T10194] do_mem_abort+0x74/0x200 [ 232.839265][T10194] el1_abort+0x3c/0x5c [ 232.840536][T10194] el1h_64_sync_handler+0x60/0xac [ 232.842010][T10194] el1h_64_sync+0x64/0x68 [ 232.843277][T10194] __arch_copy_from_user+0x1b4/0x230 [ 232.844828][T10194] netlink_sendmsg+0x598/0xa84 [ 232.846195][T10194] ____sys_sendmsg+0x56c/0x840 [ 232.847587][T10194] __sys_sendmsg+0x26c/0x33c [ 232.848929][T10194] __arm64_sys_sendmsg+0x80/0x94 [ 232.850392][T10194] invoke_syscall+0x98/0x2b8 [ 232.851796][T10194] el0_svc_common+0x130/0x23c [ 232.853158][T10194] do_el0_svc+0x48/0x58 [ 232.854358][T10194] el0_svc+0x54/0x168 [ 232.855549][T10194] el0t_64_sync_handler+0x84/0xfc [ 232.857041][T10194] el0t_64_sync+0x190/0x194 [ 232.858386][T10194] [ 232.858386][T10194] -> #0 (&mm->mmap_lock){++++}-{3:3}: [ 232.858984][T10200] loop4: detected capacity change from 0 to 32768 [ 232.860394][T10194] __lock_acquire+0x3384/0x763c [ 232.860415][T10194] lock_acquire+0x240/0x728 [ 232.860428][T10194] __might_fault+0xc4/0x124 [ 232.860443][T10194] filldir64+0x2d4/0x948 [ 232.865982][T10200] bcachefs (/dev/loop4): error validating superblock: Filesystem has incompatible features [ 232.866148][T10194] hfsplus_readdir+0x398/0xf28 [ 232.871531][T10194] iterate_dir+0x4b8/0x640 [ 232.872831][T10194] __arm64_sys_getdents64+0x1c4/0x4a0 [ 232.874444][T10194] invoke_syscall+0x98/0x2b8 [ 232.875762][T10194] el0_svc_common+0x130/0x23c [ 232.877169][T10194] do_el0_svc+0x48/0x58 [ 232.878443][T10194] el0_svc+0x54/0x168 [ 232.879658][T10194] el0t_64_sync_handler+0x84/0xfc [ 232.881169][T10194] el0t_64_sync+0x190/0x194 [ 232.882455][T10194] [ 232.882455][T10194] other info that might help us debug this: [ 232.882455][T10194] [ 232.885231][T10194] Chain exists of: [ 232.885231][T10194] &mm->mmap_lock --> &hip->extents_lock --> &tree->tree_lock [ 232.885231][T10194] [ 232.888821][T10194] Possible unsafe locking scenario: [ 232.888821][T10194] [ 232.890815][T10194] CPU0 CPU1 [ 232.892251][T10194] ---- ---- [ 232.893667][T10194] lock(&tree->tree_lock); [ 232.894887][T10194] lock(&hip->extents_lock); [ 232.896801][T10194] lock(&tree->tree_lock); [ 232.898674][T10194] rlock(&mm->mmap_lock); [ 232.899933][T10194] [ 232.899933][T10194] *** DEADLOCK *** [ 232.899933][T10194] [ 232.902169][T10194] 3 locks held by syz-executor.0/10194: [ 232.903729][T10194] #0: ffff0000d5be1748 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x218/0x2a4 [ 232.906204][T10194] #1: ffff0000c7ec75c0 (&type->i_mutex_dir_key#11){++++}-{3:3}, at: iterate_dir+0x400/0x640 [ 232.908929][T10194] #2: ffff0000c52cc0b0 (&tree->tree_lock){+.+.}-{3:3}, at: hfsplus_find_init+0x144/0x1bc [ 232.911699][T10194] [ 232.911699][T10194] stack backtrace: [ 232.913347][T10194] CPU: 1 PID: 10194 Comm: syz-executor.0 Tainted: G W 6.10.0-rc3-syzkaller-gac2193b4b460 #0 [ 232.916352][T10194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 232.919056][T10194] Call trace: [ 232.919920][T10194] dump_backtrace+0x1b8/0x1e4 [ 232.921223][T10194] show_stack+0x2c/0x3c [ 232.922374][T10194] dump_stack_lvl+0xe4/0x150 [ 232.923621][T10194] dump_stack+0x1c/0x28 [ 232.924706][T10194] print_circular_bug+0x150/0x1b8 [ 232.926037][T10194] check_noncircular+0x310/0x404 [ 232.927342][T10194] __lock_acquire+0x3384/0x763c [ 232.928658][T10194] lock_acquire+0x240/0x728 [ 232.929922][T10194] __might_fault+0xc4/0x124 [ 232.931130][T10194] filldir64+0x2d4/0x948 [ 232.932305][T10194] hfsplus_readdir+0x398/0xf28 [ 232.933604][T10194] iterate_dir+0x4b8/0x640 [ 232.934826][T10194] __arm64_sys_getdents64+0x1c4/0x4a0 [ 232.936283][T10194] invoke_syscall+0x98/0x2b8 [ 232.937494][T10194] el0_svc_common+0x130/0x23c [ 232.938744][T10194] do_el0_svc+0x48/0x58 [ 232.939827][T10194] el0_svc+0x54/0x168 [ 232.940945][T10194] el0t_64_sync_handler+0x84/0xfc [ 232.942330][T10194] el0t_64_sync+0x190/0x194 [ 232.943648][ C1] vkms_vblank_simulate: vblank timer overrun