last executing test programs: 1m59.325090287s ago: executing program 2 (id=182): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x23, &(0x7f0000000040)=""/32, &(0x7f00000000c0)=0x3b) 1m58.700205932s ago: executing program 2 (id=187): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/4\x00') read$char_usb(r0, 0x0, 0x0) 1m58.616084192s ago: executing program 2 (id=188): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x34, r1, 0x1, 0x0, 0x0, {0x34}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) 1m58.468127299s ago: executing program 2 (id=190): syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x1010d1, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x2081c80, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000340)='./file0/file0\x00', 0x0) move_mount(r0, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x160) 1m58.407207936s ago: executing program 2 (id=191): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000080)=@s={0x5, @generic=0xd, 0x1d, 0x3}) 1m57.738301279s ago: executing program 2 (id=194): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TCFLSH(r0, 0x540b, 0x1) 1m57.666270368s ago: executing program 32 (id=194): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TCFLSH(r0, 0x540b, 0x1) 7.980318888s ago: executing program 1 (id=1410): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) r0 = getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) 7.080511745s ago: executing program 1 (id=1414): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000cc0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/233, 0xe9}], 0x1, &(0x7f0000001d00)=""/4080, 0xff0}, 0x0) close(r0) 6.92951605s ago: executing program 1 (id=1419): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14, r1, 0x32b, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x8000) 6.190170168s ago: executing program 1 (id=1420): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r2, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}}, 0x0) 5.908803202s ago: executing program 1 (id=1424): syz_mount_image$bcachefs(&(0x7f00000058c0), &(0x7f0000005900)='./file0\x00', 0x10000, &(0x7f0000000480)=ANY=[@ANYBLOB='fsck,inline_data,nocow,degraded,str_hash=siphash,norecovery,discard,reconstruct_alloc,erasure_code,acl,no_splitbrain_check,hash,uid=', @ANYRESDEC=0x0, @ANYBLOB="ef3ef0c23683a9582d18944a1e2fcc21bd7f0512bef3e04b71c9d70c26"], 0x1, 0x58b4, &(0x7f0000005980)="$eJzs3W2QXFXdIPBzu3synZm8TAJIBJkMgSiCmglvhS+l0fWtAKlYWErYKAxkgtEkpJIgEFCCCy4UYKGlpagf0EJq0WhRBatESuRlE1ZRitWltpBa3UU/+BTykBLIQ1k+5qmZvqfTc6fv3J7unpDA71fJ3D6nb//PueeevtP/Mz3TAQAAgNeE3ddv2XvOUR/41RdHX7rmwz/bcG3oL4/XV+MOA+n2ileqhxxIvZVF49vsvHjTVT/489DF7/vl3X3ff3nXmmPX/v79h118/2fO3Hnbtx96ce69/3ymKG6cTyfuLyfPJSFUf77n61/a9diRY3VJCKGcDGwPYUGy8KEFSSbE8N9DCGvSwqLMnfe8dMrase21N/VOqJ+f2c98f22rpvNs297LTwp/eO+q636z+Mc/6tnx7Pb9uyTVhvkUwrwLGx/fE0KYnf4fE2dbnI9x0q4MIfQ1PO6Mgn4d12L/l+WUj063s9Jtf0GceP+STLmU2S9bjnoy276C9jqV14929ysyJ1POXow6ldfPWL8g3f403Z44zfjl+D8JpSRU6t1fn+yfI6HhvCUhGT+X1Xq5VD+3IT3+TDnJlEuZcrknc1zj7aYTrZwkE+vjfpn6eDmupPXHNl6rmzg3p/716baaPlFfjuWQvVHTP+lG/bjGxX7tmaIvB0Kp4RrUrL5+4tOT0Z/W9ScLJz1mXxPxvl2rbl5aXv3w7oGcfiR3J2n8pK342369YM6nfnjjZdnv6/X4F5bS+KW24v/xrMefP//G730rN/6tMX65rfgnP9D33FmPXL8kd3z2xPGptBV/5JlHb1l8+EU7cvt/e4xfbSv+ip2P987d+8CDuf0fjuMzu634T7/zg3+668n7ns2NH2L8vrbir9656cu9g3tPyI3/YByf/vbmzws7Tn9qcPAvQ3nxn4jx57YV/87tt73jjvk3nZl7flfG8RloK/7Zx99/3Zy99x2Td+1Mbu/Wd06A16bD0tdYN6TldvPMTjXkC98cqtRe881J/8/tZkMZY+3Mm8H4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALw2HXHS//zQ///4wHOVtNyb3ni6VNvG+lkhJLNDCFu2jmzeum7jJUOfufSyzRtH1g+NbB0a3bh185VDp75laPPopvUjV47dO/zWU2qPWxiS2jY5ZlLb+/bt21camFgX2/tPx+/4w9Iz/uWvIQwf8bvBSm7/l9224Y7Dm3zNSFbse8+Gy8753WnfTY9rIO3XQE6/Qk6//vW8f9zx1T1/PiGE4ddN1a9Hn373LyZ0aLxif5xUqTfUOtSb9DXtR73XaX/ieFXWrls/Olw8vuWc4/jPVz3797VXfOUftfGt5h5Hi+M7e8W+9aVvrDr7379xda3iYD3vReMdjyL2L45fNR3veelxzcs5rkrOcV3/mwef/PlRN764PQxXXlg8ue2i4+pJJ0BP8vqW2o0t9CULJtRX0/3jGY+PW7Z1w6ZlW67c9tZ1G0YuGb1kdOPbl5+6/PTh004/bdn4kS/r8vHH9t/Y4vEfmPk0/3Pbfxq/tjafivpVNB5j/Soej8Ye5T3/+s790tfeftsj59QqiuZ53Lt+PUm3fWPneXlomG+Tx6rZcRWNQwhhqNk4PP/imeHI/7PuuqLrUOOZafyakazY99iSv333jO8selet4oBc5xs71OZ1vt7r/f0ZH69qej4O1vHtDeX0uPqb9mv5Y4/03Lz7r5+v92/WrHDFyNatm5fXvs5JezonObppv7K18bgWj38th3RYQn2aNpmvY3pCrX/Z62fcPTuq/el9/cnCpseVFe/btermpeXVD+/OG+nk7lqLs8Pc2jZ5Q86e6zMPLNc73Kz9Q3V+DH7oO/d+/N6fnDppfpxc+1p0XEnOcf34yTu/9v2v/NefdO+4PvTuxwf+9n8/vbRWcahcV+q9TvuTNF5XTg6h6Pm3ODQ/jtznX6n58RQ9/7Lt7N+/ebyhTLk/lNt6vp78QN9zZz1y/ZLc5+ueVp+vV08olQuerwfL/Hnlnl8TJkqyYt8vbzhs+0PXrDyqVlE0r+t7N5vXp7SQf+Qc1y/Of2rw0qH/8r+7d934wVvuueD3Iyu+UKs4WM57NR3fas741nsd887G8X3bxZeuX1OrP3hf/6bbgvwnXkq2XLntsyPr149u3tLacbX6/TS2kx3ldr+fxqvbwoLjKk06rpm70cp4tfp8i/1f0/Z4TXy+9Yekre8L2369YM6nfnjjZQOTHpU2dGEpjV9qK/4fz3r8+fNv/N63cuPfGuNX2oo/8syjtyw+/KIdufFvT9L41bbir9j5eO/cvQ88mBt/OPZ/dlvxn37nB/9015P3PZsbP8T4/e2N/ws7Tn9qcPAvufGfSNJ2xl4jhXDPS6esrZWT0JM+32I/eib0K2TLSaZcypTLjeVSba213kA5SSbWx/3S+mMb+tLMJ3Lq46uw6qLa9uVYDtkbU9cfbEoN1/5m9UWvUwEAXu3iz//ja9D48//R9IVS/koD7NdpHrYoJ27Mw/av58yacP+iNH58fFwHHHxbGB7bXjtUe6E/3XXO+HzIrnPGdk44bmKMdtc5i9bfl2TKsV+19fJKQx6ampzXVEIL6++T25l6/T1z+MXr40M3TOrWUMO6Vfb89aQrZs3e75Dpb2UsQt78yK6LxfdzDM4LK8fba3F+ZN9HE89D9n00sZ2jMhfOdt9H0+n8iN2eYn6Md7n45xuTz1+YYnz3n7/m0bLnbxrnuzq2/0z/fPbQXzec2Z+HWZfMiZ8+wQ72dcNYH4+j0uJ64sdz6ru1nhgvF7Ffe6boy4FgPRF4tYr5f/weMZb/j70A/7fMfkWvQ7OvGmO83PcJlZv3pyjvmPw+vb62vo+v3rnpy72De0/IfZ3zYKvv+9k0odRX8L6fonFcmikXjmPOAk1Rvpdtp2jcs+/L6A9z2xr3O7ff9o475t90Zu64r6x9Iy0e969NKM0tGHf5Qk58+cJBkS/M9PrZK5aPpG98mql85GM59dPNR/om3agf17hDLh/pObD9AgAOHTH/r//8LM3//19mv6K89cRMOcbLzVtzXp/k5a0fSbdXZPbvT3+jYrqvm88+/v7r5uy975jcvOX2VvPQ/zahNFCYh3aWN+fmESu7837x3Dyinmd1lifm9r+eJ3aWp+fGr+fpneXRueNTz6M7WwfIjV9fBzjU89yZXa971ebR6a/PzlQefW5O/XTz6P5JN+rHNU4eDQDwyor5f3wZF/P/RzL7dfq6PTcv6NLr9uzfA6nHf+JA5ZUznffNdN4603n9TK9LHOp58UyvC83sOpm8OC2H7I0aeTEAAAeDmP/PTsv5+X9n+Ulu/lbPT+TnTePLzw+S/PxQX/+S/8v/i8n/AQBe3WL+H3/tMf79v/+RlrN/t16enhNfni5Pn2r+tJynz/Q6m3UA6wDFrAMAALy69IxnSpN/z/6T6Tb7e/Z5v5d/fs7+raqM/459CBdt3Tw6esFlm9aMbB29YOOla0a3XHD55nVbt45urO3Xad6Ym7ekeWNPqKTj0Xy/bN42P/17CPNz/h5Cdv8Y9ujxG5P/HkK22dkFf0dg//lrrb955680xf7N5kfe+c6L/4mc/aP6+b/40ydfsHbLBes2rtu6bmT9um2jE/cby1r7pvG5mXFYpvW5mZkvk5Sm//md3elHaVI/etLxyPt89iTTjwVpTxbkff5BTr9/9b+++rnj9/3jrhCGjyi/oaPxS1bs++/njX5k6+7fbRrrf2nK/tf3TPtV9Hml2f3j8VTWX7pl60lrL71sY/YTJdsT1zNK9fIMrWekT/9yi+sTq3Pqp7s+UZ504+DU8voEAAATxJ//x9ez8eeHX0lfQMX61vP0zn5+nJunD7eWp2c/l6woT8/uH4+31Ty92mGenm2/KE9vtn+zPD0v786L/7Gc/aer9XnS2fs8cufJha3Nk+znGRTNk+z+050nSYfzJNt+0Txptn+zeZJ33vPifzRn/zytz4fO3peTOx9ubW0+vDlTLpoP2f2nOx9KHc6HbPtF86HZ/s3mQ975zYt/Ts7+rZo4P8Ymxvi8GL3g8ks3f7Zhv5n+/IvO+zezn//Rrtb7P7Pv+5r5/s/s+8pmvv+dva8st/9PdLYS1nr/Z/bzXdp1wNZr0zebFb3/rGgdd1VO/XTXcWdNunFwso4Lr5yY/8cf98T8/6Z02+0fAx36n5Pmc8yaxu/S55gVvY7x/XyKxg4Cvp8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAtKa3smh8u/v6LXvPOeoDv/ri6EvXfPhnG65901U/+PPQxe/75d19339515pj1/7+/YddfP9nztx527cfenHuvf98pjDwQG1zYlqshpA8l4RQ/fmer39p12NHjtUlIYRyMrA9hAXJwocWJJkIw38PIayp93Pinfe8dMrase21N/VOqJ+fCZI9rtBfjv2Z0M9wReERcQiqpvNs297LTwp/eO+q636z+Mc/6tnx7Pb9uyTVhvkUwrwLGx/fE0KYnf4fE2fbovjgdLsyhNDX8LgzCvp1XIv9X5ZTPjrdzkq3/QVx4v1LMuVSZr9sOerJbPsK2utUXj/a3a/InEw5ezHqVF4/Y/2CdPvTdHviNOOX4/8klJJQqXd/fbJ/joSG85aEZPxcVuvlUv3chvT4M+UkUy5lyuWezHGNt5tOtHKSTKyP+2Xq4+W4ktYf23itbuLcnPrXp9tq+kR9OZZD9kZN/6Qb9eMaF/u1Z4q+HAilhmtQs/r6iU9PRn9a158snPSYfU3E+3atunlpefXDuwdy+pHcnaTxk7bib/v1gjmf+uGNly3Ki39hKY1faiv+H896/Pnzb/zet3Lj3xrjl9uKf/IDfc+d9cj1S3LHZ08cn0pb8UeeefSWxYdftCO3/7fH+NW24q/Y+Xjv3L0PPJjb/+E4PrPbiv/0Oz/4p7uevO/Z3Pghxu9rK/7qnZu+3Du494Tc+A/G8elvb/68sOP0pwYH/zKUF/+JGH9uW/Hv3H7bO+6Yf9OZued3ZRyfgbbin338/dfN2XvfMXnXzuT2bn3nBHhtOix9jXVDWm43z+xUQ77wzaFK7TXfnPT/3G42lDHWzrwZjA8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwKvTb68+9ZPnveejqypJCEnOPvuaiPeVZ61YMdRGuyPPPHrL4sMv2tFYt6iNOAAAAECxmIeX6jXVsChcnswORzfdP64RHB1LycT67BpCjJNdI2g3TqlLccpdilPpUpyeLsWZ1aU4vV2KUy2IUw2txZk9ZZxSy/3p61Kc/i7FmdOlOHO7FGdel+LM71KcgSnjtD4PF3QpzsIuxTmsS3EO71KcI7oU53VdinNkl+Jk15SnOw/npnselRdn/Ea5ME4lKdfvaLaeHts5psN2+ltsJ/f7cYvtzG6xneMyjytNs51qi+28scN2khbbeXOH7ZQK2onz9ops/2I7sdTi/L+yS3G2dSnOVV2Kc3WX4ny+S3G+0KU413QYB6BVMf/fn+8NhN7Ku0JfesXJrgLEfHfx+NfJ3+/yLkgx3hsy9bOy8bJhsol6Jt7i6fYvu4CQibckU98zIV6lno9MEa/aGG9p5s5Jx5vtX3ZBIdO/EzP1vUXxsgsLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADCDfnv1qZ887z0fXRWSMPavqX1NxPvKs1asGGqj3V2rbl5aXv3w7sa63kobgQAAAIBCMQ/vqddUQ29leehNZk3Yr5quA1TTcnmgth2cF1aObZOh0ni5L1kw5eMq6eOWbd2wadmWK7e9dd2GkUtGLxnd+Pblpy4/ffi0009btnbd+tHh2tcQegvihRDGlx+2XLntsyPr149u3lKrzPZ/Ufq4RWk5SR83+LYwPLa9Nu3/woL2SpPam7kbxWcPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/2DX/kLdPOs4gD9vkpNkZ6uN7F9W1tPQP6Pq0LZm0ulYXhAcbG3pYSDJ9DiKa3F4upatHXXGreA2WxRho1AqvanU4ebwZn/cEPeHQmVWC55aZBu6C71QNp10oxfSEek5eXOSNGlO41i37vO5eN/keX7P88uTiwPf9wQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgA/WVL08Ua2M10ajEKI+NY0ekrl0No5LQ/T9+vNbf5wbO7m8fSyXGWIjAAAAYKAkh4+0RvIhl0mHdLhq+t3i0DYRZnM/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw8TNVL09UK+O1i6MQoj41jR6SuXQ2jktD9H3jnSe/8OrY2D/ax4pD7AMAAAAMluTwVGskH4phSRiJruqoS54NLOha312X7LNwjnXdzw761S2ZY901c6z71IC6dc37jgAAAAAffUn+z7RGCiGXmdc3/w/K9Undoq66dPM+zG8FAAAAgP9Pkv9zrZFiyGWKrbw+17y/uKsuWT/o//bJ+mV91g/6f/7a5t3/6QEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgo2OqXp6oVsZr6SiEqE9No4dkLp2N49IQfVe9MPqvWw49tLh9LJcZYiMAAABgoCSHz0bvfMhlRsNIuHg694/dtP/prz79bDmEMBPzs9mwY8O2bXevmrkmdSuPHBr50eG3vndG3cqZ63k7IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8L6ZqpcnqpXx2kVRCFGfmkYPyVw6G8elIfq+/qWv/O3x48+92T5WHGIfAAAAYLAkh89m/3wohmzIhium37Vn/dNSXev7PTMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALhz3fOe+b2+YnNx4txdeeOFF68X5/ssEAAC83xaFKDTO0ZXrz/enBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPgym6uWJamW8lo9CiPrUNHpI5tLZOC4N0Td+/mhu3skXXmofKw6xDwAAADBYksNns38+FMNIGAmXT7/r9UxgOv8XPsAPCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHyoTNXLE9XKeG1eFELUp6bRQzKXzsZxaYi+j+3c98WD8394c/tYLjPERgAAAMBASQ7PtkbyIZf5dMiFq5vvJzsXROnmvfdzgdl1WzuWjc55Xb1jXXrO63Z1nSzTPM3MunyyX2Hm3lpXOnNdqW1dMbTalzrWhT0dq+YN+JwBAAAAzqMk/+daI4WQy+Tacu7PO+oLci4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0MdUvTxRrYzXoiiEqE9No4dkLp2N49IQfe/7/Scv+cYvdm9vHysOsQ8AAAAwWJLDZ7N/PhTDwvCJsHA694dCZ31S9+/qqYOP/ufvy0NYccWxsUzf/X/7+o0vdl9CSHUWpUKY3+wX9en3uz8+eu/SxqnHQ1hxefrqc+3XuWXceKa6ce22w8e2nuWLAQAAgAtIkv9HWiOFkMvc1Tf/J8n7nPL//Ht3/uqy5rWZyLtWpArNfqk+/b689Mm/Llv9z7dO5/+z9fvcvs0HL+toODPSJYoblc3b1x277kAqOfVM/3RX/+R7+dp33/zvph2PnJrpnw/55viCTK/+Z167XBQ3JlN7a2ve21vv7J/pc/6H/vDS8d8s2P3u6f7vLBpt9b/mLOc/e//RWx/ec/2+Q+s6+4cQSr36v/3uzeHKP9/5YPf5R7s2bv/m269dorhxZPGJA6v3F2/o7B919U++/18ef2zPzx75wbNJ/+S3IsuXzLV/qqv/K7su3fnyA+sXdPZP9Tn/i7e9Oral9P0/dZ//jqHP/8S1T93+2ob4/u4pAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAC8tUvTxRrYzXUlEIUZ+aRg/JXDobx6Uh+r5xy9G3b9v905+0jxWH2AcAAAAYLMnhs9k/H4ohG7JhdDr3P1PduHbb4WNbQ2FmNmreM5Nb7tn2mU1btt91x3n65AAAAMBcJfk/0xophFxmaRhp5v/K5u3rjl13IJXk/1SS/zfdOblxRWjVvbLr0p0vP7B+Qes5QQjTPwvIn677/GzdTTceLZz4y7eW9axbNVt3ZPGJA6v3F29I6kJ73crQej7xxLVP3f7ahvj+1udrr/vsN7dMNh9PJPuO3vrwnuv3HVrXOkfzPtrcN6mbTO2trXlvbz2pSzfv+ea5AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAzTdXLE9XKeC2kQ4j61DR6SObS2TguDdF3zdJfP3jJyecWto/lMkNsBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8jx04EAAAAAAA8n9thKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqirs101oHVUfB+Bz7k3e3OYmbdK+YFRM06oodWFRENGNioq0IgVXlSLV1i5EQRBR6sJUWrFUxY1gdVNEBTVKQcHGYmmVVPwqblyooFBdCKUY0IbiQiXJObc304xXJ1VQnweGc8+Zmd/8Z87J5F4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4R+npGpppD++4f+qWc2746NG7Tjxy0zv3brvo4Ve/G9l03Yd7e186ObF5xZYvr1+2af/da8Z3P3/op/63fjnaMfih2WZV6jZCiMdjCI13J595bOLjs6bHYgihHgdGQxiMSw8NxkLC6p9DCJtbdc7d+eaJy7dMt9t29cwZX1IIKd5XaNZzPbMG5tbLv0sjrbOtUw9eEr6+dv32T5e/8Xr32LHRU4fERtt6CmHxxvbzu0MIi9I2La+2oXxyateFEHrbzruyQ13n/8H6Ly3pn5va/6W22SEn719Z6NcKxxX7WXeh7e1wvYUqq6PqcZ30FfrFl9FCldWZxwdT+3ZqV/3J/HreYqjF0NUq/554ao2EtnmLIc7MZaPVr7XmNqT7L/RjoV8r9OvdhfuauW5aaPUY547n4wrj+XXclcZXtL+r53FryfjZqW2kP9STuR+KH2Y1T/vQuq8Zua7J36nl71BrewfNN96a+DQZzTTWjEtPO+fXeeR9E+ufuLC+4b3DAyV1xL0x5cdK+Vs/Gey7/bWdDwyV5W+spfxapfxv1h754badLzxXmv90zq9Xyr/sQO/xte/vWFn6fCbz8+mqlH/H0Q+eXP7/O8dK69+T8xuV8q8ZP9LTP3XgYGn9q/PzWVQp/6urb/z2lc/3HSvNDzm/t1L+hvH7nuoZnrq4NP9gfj7Nauvnx7Ervhge/n6kLP+znN9fKf/l0d1Xvbhk15rS+V2Xn89ApfybL9i/vW9q33ll786450z95wT4b1qWvmM9nvpVf2cuVNvvhWdHuma/8/Wlrf9MXqhg+jqL/8J8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Dd24IAEAAAAQND/1+0IFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAngoAAP//pkA1WQ==") openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000001a40)='./file1\x00', 0x8c80, &(0x7f0000000340)=ANY=[@ANYBLOB="696f636861727365743d6d61636963656c616e642c6469fbffffff642c6769643d", @ANYRESHEX=0x0, @ANYBLOB=',keep_last_dots,uid=', @ANYRESHEX=0x0, @ANYBLOB=',time_offset=0x000000000000000b,sys_tz,uid=', @ANYRESHEX=0x0, @ANYBLOB=',iocharset=cp869,iocharset=cp936,\x00'], 0x3, 0x1510, &(0x7f0000000440)="$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") mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) ftruncate(r0, 0x2007ff3) read$FUSE(r0, &(0x7f0000001280)={0x2020}, 0x2020) 4.064242485s ago: executing program 5 (id=1449): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) 3.884259131s ago: executing program 5 (id=1451): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000280)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x0, 0xfffffffd}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) sendmsg$tipc(r1, &(0x7f00000004c0)={&(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x2, {0x40, 0x1, 0x3}}, 0x10, 0x0}, 0x20000801) 3.117991094s ago: executing program 1 (id=1456): socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, &(0x7f00000001c0)={0x8}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r1}, 0x0, 0x0}, 0x20) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000240)=0x1) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000380)={0x401, 0x1, 0x0, "eee98fa706178749cb4dfd93e33c9b6b7bd152f35ed734fc70157dcb4f1891e2"}) 2.988889856s ago: executing program 5 (id=1458): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000f40)="bf", 0x1}], 0x1}}], 0x2, 0x0) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000440)={0x3f, 0x7, 0x8, 0x0, 0x1, 0xe, 0xd, 0xa4, 0xa7, 0x2, 0x0, 0x9b, 0xeb, 0xc4}, 0xe) 2.920393479s ago: executing program 5 (id=1459): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x44, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) 2.756907743s ago: executing program 5 (id=1464): r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmmsg$inet(r0, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000012c0)="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", 0x375}, {0x0}], 0x2, 0x0, 0x0, 0x900}}], 0x1, 0x0) 2.636861889s ago: executing program 4 (id=1467): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) fanotify_init(0x200, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) fanotify_mark(r1, 0x4, 0x48000052, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) r2 = fanotify_init(0x4, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="66617374626f6f742c71756f7461000018bbdecde39739fcd1df176dde746ec834120600000000003b814e50a959736d6572462abc30ef5b65c70f73ecea54b5e5bea9836c319f653557e79a002208ce996dda659bd5ba0f4ce5c2080002223dc60000000000000044cd0a1e3686873600000000005493b4b81d5b9fa9b40fe4d76afc3a989c6d60044e89eb96e44d01a1034e3797ffa86870b82939f41ffa0f3d726f085663c29cbdc4c766a7eb77cc36160191acf5ae7469c82ab4145b595b987d75912a0fcd1c061835294cc0c618aba204f8adaa20c80108d356cd88cc86177056b06e7068c40f807d9e539f8f5b64a8ee0725aa8d00000000007cb6020d90ea79b8027cf75964dd86c2ed2b5e75779677aa8c76b848dd03dab190b5f02ec52830a17b01eaae1c3df076000000000000000000000000000083a48a6b926c668b9b90195018ea3619f9d80a0b894e212178e1a19909d764666264fa29e2c055fd7f8e67c2acfb75f0a8d41692f4542a575ee42ed94a0014fba44985cca9df12fe93bfaccf0122a6e7e593613ac0111701b125cc6799c43aa4ff708dc4a00a6decad26f0378072a571da000000b1a6bdf03fd56697e348b5b494f6fddb9f56142a47a40ef81690a7eca421bd0ad198afa58ce69d61c29deaa93c0efea0df04f20020ee84075b4e1a2ad43d1be1138de4668e7b6137545708790c501f1ed7f6a571d500000000000000"], 0x25, 0x5586, &(0x7f00000079c0)="$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") pwritev2(0xffffffffffffffff, 0x0, 0x0, 0xff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) getsockname$l2tp(0xffffffffffffffff, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r7, &(0x7f0000000180), 0x40041) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, 0x0, 0x0) fanotify_mark(r2, 0x101, 0x20, r3, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0xa, 0x1ff}) 2.496748359s ago: executing program 5 (id=1469): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) write$dsp(r0, &(0x7f0000000080)="cd", 0x1) write$dsp(r0, &(0x7f00000000c0)="1359a7b637341adbff62ec6add15460c682304e4fccad9e34173348bfa33359731791967c61a51691f2e3d3d44601d5154e3516d956d4645ec724600"/84, 0x54) write$dsp(r0, &(0x7f0000000040)="80a21fde", 0x4) 2.109363919s ago: executing program 3 (id=1478): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@filter={'filter\x00', 0xe, 0x0, 0xc0, [0x0, 0x20000040, 0x20000070, 0x200000a0], 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="000000000000e818042bd44d2c7cb500000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00"/192]}, 0x138) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="240000004a00010000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000004050000f80020003a5c4745494aa8075080629383f03222c5f164f206e888923ccc98948c315721f09b8cc7bb4452f86090f8fc2b6e9194140365b386e5f254d3c2deca769092c7434271cf36ca857a910a6ba40d30a23f8e2d7ec1095f0fa55459198ce3c96eba45934fefb4e66a28aef92954ee091acaaeb6d51d7cd1bc00"/147], 0x24}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r4) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r4, &(0x7f0000000200)={0x0, 0x700, &(0x7f0000000240)={&(0x7f0000000000)={0x20, r5, 0x3e8c4ddb697c9f8f, 0x0, 0x0, {0x4}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x20}}, 0x0) r6 = syz_genetlink_get_family_id$auto(&(0x7f00000000c0)='\x00', r4) sendmsg$autorun(r4, &(0x7f00000001c0)=@policy55={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x64, r6, 0x100, 0x70bd2d, 0x25dfdbfb, {0x20}, [@TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_PARMS={0x14}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008845}, 0x800) sendmsg$autorun(r3, &(0x7f0000000880)=@policy510={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000700)={0x104, r6, 0x4, 0x70bd27, 0x25dfdbfd, {0x16}, [@OVS_USERSPACE_ATTR_PID]}, 0x104}, 0x1, 0x0, 0x0, 0x40}, 0x20000080) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r2) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r8) r9 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r9, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e20, @multicast1}, 0x2, 0x0, 0x0, 0x2}}, 0x2e) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000140)="0988406ea193eb07de9da5bcee652cc5", 0x10) ioctl$PPPIOCGL2TPSTATS(r9, 0x40047452, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000680)=ANY=[@ANYRES32=r10, @ANYRES32, @ANYRES32=r11], 0x20) r12 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90724fc60", 0x14}], 0x1}, 0x0) 1.405218742s ago: executing program 0 (id=1480): r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmmsg$inet(r0, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000012c0)="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", 0x375}, {0x0}], 0x2, 0x0, 0x0, 0x900}}], 0x1, 0x0) 1.402925479s ago: executing program 3 (id=1481): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) socket$caif_stream(0x25, 0x1, 0x2) syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x3a6}, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0) r3 = socket(0x10, 0x80003, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="1800000016000119"], 0x78}}, 0x0) recvmmsg(r3, &(0x7f0000001140)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x3}, {{&(0x7f0000000700)=@ieee802154={0x24, @long}, 0x80, 0x0}}], 0x4, 0x0, 0x0) 1.352386043s ago: executing program 4 (id=1482): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000039000000080003", @ANYRES32=r2], 0x30}}, 0x0) 1.345725926s ago: executing program 0 (id=1483): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000cc0)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000740)="3de652c5982c0f4af3971cdaf08c44aaf0bdf95d98badd5d3c57e96ff0b8c340616bc68bb5a60f6ba780e8a700e93153e857378fd572fdb2c811241768b2a1a3649c1a9c015c63a58b967241c860e45dc550ce40449c6b694ba0da307e00fcd36aaa0465997ba6111d22e562a73c055bfd3f8cdd0504c6823b0d00"/135, 0x87}, {&(0x7f0000000440)="63301fbbe982716c8def3cd8ff3fd571ff4de2dfcb5e342ec7e29b20390ac060158a54831705c069c98391e92029a67cdb12a63ccc2ae533a97bf033f100433f721d9e2b521d70be1d6892d2bf40fb7510a7bb0d384f838b0baf4bf8cc459a1f0900000034a20bbef8432fd74c4d3cd5c4cbac16ab064d00", 0x78}, {&(0x7f0000000100)="12e5ce490b0d000000000000008b718fd0bcecd452f977707fa19b6cd3f51b5b2119d5c00ee022f61c6f6a9effa471df3850102a315992e8b0aaf2a6e51c45eccb65524338bd8ffeb72246ad1159f04754765113add6bd4997b9f32fe5acd4a16552c20db1bd650367ddb257d5958b24e8fbd092b9ac0003ba6900", 0x7b}, {&(0x7f00000004c0)="2c855adcc4c9adb94980ed1e16ac94da372ff484669aa64426b28563d3c7203f4055e4694075b0039f12a370beda103bb0c99099512f13159b560540b4cd40733e183a7974dc607aa984ec67e3245e7f06b1a901277318518d9c0de7084e64ce95d3844e4a94807f2228221bd74831bd1d9e47345b13496cedc92b319380999c5a1a54087ca313b51b99f8d3e57a22ef5e84c3afc387073641c58c95bdda636dfb9cf2e4e9b276ce50b92a4ab181ed27b799c86d162b3ef29cba0027731967a061d5fb84cb10a401f472eee67bed1492dc883fb3d226890cd2ef2b07f718d05917678254fec7ebf84d87642e66de5857c77a43f552ae0dd1c8f29359662511cc779bf523db1069fad4bc5bccd97791bede61e9a0c0ba3fd44a9185c3fd4bcfbd25c62c2bac7e04912325aedce11a4f3fedd3ee812530d4e5f76999a798b3c3435601141f7844d9d893e18b92ff45dd50c0f2c2e064ea5c0bb66f846280527108", 0x160}], 0x4}, 0x24040000) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/233, 0xe9}], 0x1, &(0x7f0000001d00)=""/4080, 0xff0}, 0x0) close(r0) 1.227227142s ago: executing program 0 (id=1484): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'veth1_to_bridge\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000007c0)=ANY=[@ANYBLOB, @ANYBLOB="010026bd6000000000002d9300000c", @ANYRES32=r2], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x20040814) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c20000edaaaa6b58b7b6502c081f95aaaaaa0008004500001c00e60000020290"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0xc0}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@dellink={0x20, 0x11, 0x101}, 0x20}}, 0x20008040) 1.192297486s ago: executing program 0 (id=1485): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x11, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x3a6}, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r3 = socket(0x10, 0x80003, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="1800000016000119"], 0x78}}, 0x0) recvmmsg(r3, &(0x7f0000001140)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x3}, {{&(0x7f0000000700)=@ieee802154={0x24, @long}, 0x80, 0x0}}], 0x4, 0x0, 0x0) 376.576568ms ago: executing program 3 (id=1486): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, 0x0, 0x24044884) 331.54984ms ago: executing program 3 (id=1487): r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = socket$kcm(0x29, 0x2, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x2c, 0x0, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048040}, 0x20000802) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) sendmmsg$inet(r2, &(0x7f0000001500)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)=ANY=[], 0xd0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 324.688963ms ago: executing program 4 (id=1488): r0 = socket$rds(0x15, 0x5, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)='D', 0x1, 0x1, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0xa}, {0xffffffffffffffff, 0x1020}, {0xffffffffffffffff, 0x2004}, {0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x200}, {r0, 0x2004}, {r1, 0x440}, {0xffffffffffffffff, 0x8002}], 0x8, &(0x7f0000000200), 0x0, 0x0) 235.419423ms ago: executing program 0 (id=1489): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) 234.89811ms ago: executing program 3 (id=1490): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) sendmsg$tipc(r0, &(0x7f0000000340)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x41, 0x2}, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x24028000}, 0x0) 158.195258ms ago: executing program 4 (id=1491): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x18}}], 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x11, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_SIOCBRDELBR(r1, 0x89a2, &(0x7f0000000200)='bridge0\x00') ioctl$sock_SIOCBRDELBR(r0, 0x89a3, &(0x7f0000000200)='bridge0\x00') 81.657726ms ago: executing program 4 (id=1492): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$llc_int(r0, 0x10c, 0x0, &(0x7f0000000240), &(0x7f0000000280)=0x4) 45.25427ms ago: executing program 0 (id=1493): socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r2, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(r5, 0x84, 0x84, 0x0, &(0x7f0000000280)) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r4], 0x38}}, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000038000000000000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r6}, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)}, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2102}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_vlan\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000880)={0x1c, r7, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) 417.589µs ago: executing program 3 (id=1494): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000cc0)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000740)="3de652c5982c0f4af3971cdaf08c44aaf0bdf95d98badd5d3c57e96ff0b8c340616bc68bb5a60f6ba780e8a700e93153e857378fd572fdb2c811241768b2a1a3649c1a9c015c63a58b967241c860e45dc550ce40449c6b694ba0da307e00fcd36aaa0465997ba6111d22e562a73c055bfd3f8cdd0504c6823b0d00"/135, 0x87}, {&(0x7f0000000440)="63301fbbe982716c8def3cd8ff3fd571ff4de2dfcb5e342ec7e29b20390ac060158a54831705c069c98391e92029a67cdb12a63ccc2ae533a97bf033f100433f721d9e2b521d70be1d6892d2bf40fb7510a7bb0d384f838b0baf4bf8cc459a1f0900000034a20bbef8432fd74c4d3cd5c4cbac16ab064d00", 0x78}, {&(0x7f0000000100)="12e5ce490b0d000000000000008b718fd0bcecd452f977707fa19b6cd3f51b5b2119d5c00ee022f61c6f6a9effa471df3850102a315992e8b0aaf2a6e51c45eccb65524338bd8ffeb72246ad1159f04754765113add6bd4997b9f32fe5acd4a16552c20db1bd650367ddb257d5958b24e8fbd092b9ac0003ba6900", 0x7b}, {&(0x7f00000004c0)="2c855adcc4c9adb94980ed1e16ac94da372ff484669aa64426b28563d3c7203f4055e4694075b0039f12a370beda103bb0c99099512f13159b560540b4cd40733e183a7974dc607aa984ec67e3245e7f06b1a901277318518d9c0de7084e64ce95d3844e4a94807f2228221bd74831bd1d9e47345b13496cedc92b319380999c5a1a54087ca313b51b99f8d3e57a22ef5e84c3afc387073641c58c95bdda636dfb9cf2e4e9b276ce50b92a4ab181ed27b799c86d162b3ef29cba0027731967a061d5fb84cb10a401f472eee67bed1492dc883fb3d226890cd2ef2b07f718d05917678254fec7ebf84d87642e66de5857c77a43f552ae0dd1c8f29359662511cc779bf523db1069fad4bc5bccd97791bede61e9a0c0ba3fd44a9185c3fd4bcfbd25c62c2bac7e04912325aedce11a4f3fedd3ee812530d4e5f76999a798b3c3435601141f7844d9d893e18b92ff45dd50c0f2c2e064ea5c0bb66f846280527108", 0x160}], 0x4}, 0x24040000) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/233, 0xe9}], 0x1, &(0x7f0000001d00)=""/4080, 0xff0}, 0x0) close(r0) 0s ago: executing program 4 (id=1495): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'veth1_to_bridge\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000007c0)=ANY=[@ANYBLOB, @ANYBLOB="010026bd6000000000002d9300000c", @ANYRES32=r2], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x20040814) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c20000edaaaa6b58b7b6502c081f95aaaaaa0008004500001c00e60000020290"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0xc0}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@dellink={0x20, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x20}}, 0x20008040) kernel console output (not intermixed with test programs): On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 59.039833][ T6774] OCFS2: Returning error to the calling process. [ 59.062183][ T6774] (syz.1.71,6774,1):ocfs2_claim_suballoc_bits:2038 ERROR: status = -5 [ 59.067961][ T6774] (syz.1.71,6774,1):__ocfs2_claim_clusters:2412 ERROR: status = -5 [ 59.069746][ T6774] (syz.1.71,6774,1):__ocfs2_claim_clusters:2420 ERROR: status = -5 [ 59.084930][ T6774] (syz.1.71,6774,1):ocfs2_block_group_alloc_contig:437 ERROR: status = -5 [ 59.088885][ T6774] (syz.1.71,6774,1):ocfs2_block_group_alloc:709 ERROR: status = -5 [ 59.098157][ T6774] (syz.1.71,6774,1):ocfs2_block_group_alloc:762 ERROR: status = -5 [ 59.110694][ T6774] (syz.1.71,6774,0):ocfs2_reserve_suballoc_bits:837 ERROR: status = -5 [ 59.130817][ T6774] (syz.1.71,6774,1):ocfs2_reserve_suballoc_bits:854 ERROR: status = -5 [ 59.132779][ T6774] (syz.1.71,6774,1):ocfs2_reserve_new_metadata_blocks:994 ERROR: status = -5 [ 59.134713][ T6774] (syz.1.71,6774,1):ocfs2_reserve_new_metadata_blocks:1017 ERROR: status = -5 [ 59.137387][ T6774] (syz.1.71,6774,1):ocfs2_mknod:348 ERROR: status = -5 [ 59.139219][ T6774] (syz.1.71,6774,1):ocfs2_mknod:500 ERROR: status = -5 [ 59.142325][ T6774] (syz.1.71,6774,1):ocfs2_mkdir:657 ERROR: status = -5 [ 59.202321][ T6426] ocfs2: Unmounting device (7,1) on (node local) [ 60.087837][ T6827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.173912][ T6827] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.281248][ T5989] Bluetooth: hci1: unexpected event for opcode 0x0000 [ 60.407736][ T6839] netlink: 8 bytes leftover after parsing attributes in process `syz.1.84'. [ 60.914399][ T6844] loop0: detected capacity change from 0 to 4096 [ 60.958051][ T6844] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 61.018736][ T6848] loop3: detected capacity change from 0 to 2048 [ 61.090662][ T6848] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.101520][ T6848] EXT4-fs: Ignoring removed mblk_io_submit option [ 61.165712][ T6842] loop1: detected capacity change from 0 to 32768 [ 61.246767][ T6848] EXT4-fs (loop3): changing journal_checksum during remount not supported; ignoring [ 61.248861][ T6848] EXT4-fs (loop3): can't enable nombcache during remount [ 61.355629][ T6429] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.356324][ T6842] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 61.466345][ T6842] XFS (loop1): Ending clean mount [ 61.470810][ T6842] XFS (loop1): Quotacheck needed: Please wait. [ 61.496196][ T6842] XFS (loop1): Quotacheck: Done. [ 61.542643][ T6426] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 61.670331][ T5989] Bluetooth: hci1: unexpected event for opcode 0x0000 [ 61.773578][ T6874] binder: 6873:6874 IncRefs 0 refcount change on invalid ref 3 ret -22 [ 62.129849][ T6884] loop2: detected capacity change from 0 to 4096 [ 62.136649][ T6884] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 62.242044][ T6879] loop3: detected capacity change from 0 to 40427 [ 62.244644][ T6879] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x1fffff [ 62.247467][ T6879] F2FS-fs (loop3): invalid crc value [ 62.264474][ T6879] F2FS-fs (loop3): Found nat_bits in checkpoint [ 62.276231][ T6879] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 62.305514][ T6429] syz-executor: attempt to access beyond end of device [ 62.305514][ T6429] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 62.317410][ T6429] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 62.402412][ T6437] Bluetooth: hci2: unexpected event for opcode 0x0000 [ 62.429969][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 62.712535][ T6901] netlink: 'syz.2.115': attribute type 1 has an invalid length. [ 62.714536][ T6901] netlink: 24 bytes leftover after parsing attributes in process `syz.2.115'. [ 62.875699][ T6905] loop3: detected capacity change from 0 to 32768 [ 62.928020][ T6917] loop0: detected capacity change from 0 to 4096 [ 62.934270][ T6917] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 62.974036][ T6905] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 63.043221][ T6927] loop1: detected capacity change from 0 to 4096 [ 63.047786][ T6927] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 63.160844][ T6905] XFS (loop3): Ending clean mount [ 63.191046][ T6905] XFS (loop3): Quotacheck needed: Please wait. [ 63.229336][ T6905] XFS (loop3): Quotacheck: Done. [ 63.287289][ T6429] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 63.421772][ T6437] Bluetooth: hci2: unexpected event for opcode 0x202f [ 63.478607][ T6939] loop1: detected capacity change from 0 to 32768 [ 63.502885][ T6947] loop4: detected capacity change from 0 to 2048 [ 63.527996][ T6939] ERROR: (device loop1): txAbort: [ 63.527996][ T6939] [ 63.532785][ T6939] ERROR: (device loop1): remounting filesystem as read-only [ 63.536738][ T6947] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.578053][ T6430] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.498255][ T2344] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.500002][ T2344] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.803315][ T6969] loop2: detected capacity change from 0 to 128 [ 65.451320][ T6969] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 65.626430][ T6975] loop4: detected capacity change from 0 to 4096 [ 65.635474][ T6975] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 65.658062][ T6436] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 65.905492][ T6961] loop1: detected capacity change from 0 to 32768 [ 65.962434][ T6961] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 66.059928][ T6961] XFS (loop1): Ending clean mount [ 66.064388][ T6961] XFS (loop1): Quotacheck needed: Please wait. [ 66.124019][ T6961] XFS (loop1): Quotacheck: Done. [ 66.208034][ T6426] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 66.362439][ T6977] loop2: detected capacity change from 0 to 32768 [ 66.389738][ T6994] loop0: detected capacity change from 0 to 512 [ 66.417765][ T6994] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 66.420805][ T6994] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 66.569183][ T6994] EXT4-fs (loop0): 1 orphan inode deleted [ 66.571071][ T6994] EXT4-fs (loop0): 1 truncate cleaned up [ 66.572892][ T6994] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.221666][ T6977] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 67.283594][ T6994] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.302760][ T6977] XFS (loop2): Ending clean mount [ 67.324687][ T6977] XFS (loop2): Quotacheck needed: Please wait. [ 67.381544][ T7006] loop1: detected capacity change from 0 to 32768 [ 67.385053][ T7006] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.142 (7006) [ 67.428154][ T7020] loop3: detected capacity change from 0 to 4096 [ 67.436627][ T7020] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 67.447041][ T7006] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 67.449356][ T7006] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 67.451295][ T7006] BTRFS info (device loop1): using free-space-tree [ 67.453396][ T6977] XFS (loop2): Quotacheck: Done. [ 67.516360][ T6436] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 67.650822][ T8] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 67.934263][ T8] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 67.936382][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 67.965398][ T8] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 67.968498][ T8] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 67.976206][ T8] usb 1-1: Manufacturer: syz [ 68.051371][ T8] usb 1-1: config 0 descriptor?? [ 68.104769][ T8] Registered IR keymap rc-hauppauge [ 68.180588][ T8] rc_core: Loaded IR protocol module ir-rc5-decoder, but protocol rc-5 still not available [ 68.183487][ T6437] Bluetooth: hci3: command 0x0406 tx timeout [ 68.205460][ T8] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 68.229298][ T8] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input4 [ 68.345906][ T8] usb 1-1: USB disconnect, device number 2 [ 68.366964][ T6426] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 68.375547][ T5989] Bluetooth: hci2: unexpected event for opcode 0x202f [ 68.488642][ T7062] loop2: detected capacity change from 0 to 1024 [ 68.528152][ T7064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.531902][ T7062] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 68.544465][ T7062] JBD2: no valid journal superblock found [ 68.545728][ T7062] EXT4-fs (loop2): Could not load journal inode [ 68.622146][ T7064] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.897290][ T7069] xt_l2tp: v2 doesn't support IP mode [ 69.550501][ T7071] loop3: detected capacity change from 0 to 8192 [ 69.564973][ T7071] REISERFS warning (device loop3): jmacd-7 reiserfs_fill_super: resize option for remount only [ 69.629868][ T10] cfg80211: failed to load regulatory.db [ 69.657653][ T7082] loop2: detected capacity change from 0 to 64 [ 69.783404][ T7066] loop4: detected capacity change from 0 to 40427 [ 69.805749][ T7066] F2FS-fs (loop4): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 69.807423][ T7066] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 69.921428][ T7066] F2FS-fs (loop4): invalid crc value [ 70.158192][ T7066] F2FS-fs (loop4): Found nat_bits in checkpoint [ 70.269753][ T7066] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 70.274705][ T7066] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 70.392661][ T7086] loop3: detected capacity change from 0 to 32768 [ 70.397580][ T7086] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.161 (7086) [ 70.450596][ T7086] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 70.452862][ T7086] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 70.454925][ T7086] BTRFS info (device loop3): using free-space-tree [ 71.015042][ T7111] loop0: detected capacity change from 0 to 256 [ 71.044835][ T7096] loop2: detected capacity change from 0 to 32768 [ 71.048770][ T6430] syz-executor: attempt to access beyond end of device [ 71.048770][ T6430] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 71.055417][ T6430] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 71.061334][ T7111] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 71.070791][ T7096] (syz.2.165,7096,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 71.081023][ T7096] (syz.2.165,7096,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 71.085896][ T7096] (syz.2.165,7096,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x656d756e, computed 0xcf4efb9e. Applying ECC. [ 71.089693][ T7096] (syz.2.165,7096,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x656d756e, computed 0xcf4efb9e [ 71.099614][ T7096] (syz.2.165,7096,0):ocfs2_validate_dir_block:452 ERROR: Checksum failed for dinode 288 [ 71.101934][ T7096] (syz.2.165,7096,0):ocfs2_read_virt_blocks:1019 ERROR: status = -5 [ 71.103741][ T7096] (syz.2.165,7096,0):ocfs2_read_dir_block:511 ERROR: status = -5 [ 71.105386][ T7096] (syz.2.165,7096,0):ocfs2_find_entry_el:728 ERROR: reading directory 18, offset 0 [ 71.108508][ T7096] (syz.2.165,7096,0):ocfs2_init_global_system_inodes:461 ERROR: status = -22 [ 71.129715][ T7096] (syz.2.165,7096,0):ocfs2_init_global_system_inodes:463 ERROR: Unable to load system inode 1, possibly corrupt fs? [ 71.129746][ T7096] (syz.2.165,7096,0):ocfs2_init_global_system_inodes:472 ERROR: status = -22 [ 71.202832][ T7096] (syz.2.165,7096,1):ocfs2_initialize_super:2250 ERROR: status = -22 [ 71.204636][ T7096] (syz.2.165,7096,1):ocfs2_fill_super:1178 ERROR: status = -22 [ 71.572150][ T7126] loop2: detected capacity change from 0 to 64 [ 71.594641][ T7126] hfs: get root inode failed [ 71.981703][ T6429] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 72.072286][ T7132] loop2: detected capacity change from 0 to 64 [ 72.868118][ T7145] loop3: detected capacity change from 0 to 8192 [ 72.903680][ T7145] REISERFS warning (device loop3): jmacd-7 reiserfs_fill_super: resize option for remount only [ 73.156349][ T7144] warning: `syz.4.168' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 73.304149][ T7138] loop2: detected capacity change from 0 to 32768 [ 73.309800][ T7138] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.172 (7138) [ 73.364803][ T7138] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 73.369650][ T7138] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm [ 73.377045][ T7138] BTRFS info (device loop2): using free-space-tree [ 74.457164][ T7187] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 74.462949][ T7187] CIFS mount error: No usable UNC path provided in device string! [ 74.462949][ T7187] [ 74.465308][ T7187] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 74.612062][ T6436] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 74.903188][ T5989] Bluetooth: Fragment is too long (len 22, expected 2) [ 75.238510][ T7233] loop1: detected capacity change from 0 to 1024 [ 75.265240][ T7233] hfsplus: invalid extent max_key_len 7 [ 75.267368][ T7233] hfsplus: failed to load extents file [ 75.936619][ T7214] loop4: detected capacity change from 0 to 32768 [ 76.580019][ T7214] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,no_data_io [ 76.601288][ T7214] bcachefs (loop4): recovering from clean shutdown, journal seq 10 [ 76.611755][ T7214] bcachefs (loop4): Version upgrade required: [ 76.611755][ T7214] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 76.611755][ T7214] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.13: inode_has_child_snapshots [ 76.611755][ T7214] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 76.624415][ T44] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.628805][ T44] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 76.632895][ T6437] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.637142][ T6437] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.641244][ T6437] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.663996][ T6437] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.667207][ T7214] bcachefs (loop4): dropping and reconstructing all alloc info [ 76.675744][ T6437] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 76.677986][ T6437] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.727769][ T7214] bcachefs (loop4): check_topology... done [ 76.729237][ T7214] bcachefs (loop4): accounting_read... done [ 76.787603][ T7214] bcachefs (loop4): alloc_read... done [ 76.791033][ T7214] bcachefs (loop4): stripes_read... done [ 76.793363][ T7214] bcachefs (loop4): snapshots_read... done [ 76.797095][ T7214] bcachefs (loop4): check_allocations... done [ 76.912805][ T44] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.917888][ T44] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 76.926808][ T7214] bcachefs (loop4): going read-write [ 76.945228][ T7214] bcachefs (loop4): done starting filesystem [ 77.022759][ T6430] bcachefs (loop4): shutting down [ 77.024243][ T6430] bcachefs (loop4): going read-only [ 77.026405][ T6430] bcachefs (loop4): finished waiting for writes to stop [ 77.067696][ T44] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.069842][ T44] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 77.074268][ T7319] loop0: detected capacity change from 0 to 1024 [ 77.107103][ T7319] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.146321][ T6440] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.166258][ T6430] bcachefs (loop4): flushing journal and stopping allocators, journal seq 10 [ 77.168408][ T6430] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 10 [ 77.191763][ T7317] loop3: detected capacity change from 0 to 40427 [ 77.194772][ T7317] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 77.195798][ T6430] bcachefs (loop4): unshutdown complete, journal seq 11 [ 77.196405][ T7317] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 77.201290][ T7317] F2FS-fs (loop3): invalid crc value [ 77.202150][ T6430] bcachefs (loop4): done going read-only, filesystem not clean [ 77.207019][ T7317] F2FS-fs (loop3): Found nat_bits in checkpoint [ 77.254164][ T7328] loop0: detected capacity change from 0 to 128 [ 77.261573][ T6430] bcachefs (loop4): shutdown complete [ 77.276830][ T7317] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 77.278288][ T7317] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 77.328823][ T7328] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 77.383306][ T44] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.388966][ T44] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 77.444993][ T6440] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 77.579726][ T7341] syz.3.200: attempt to access beyond end of device [ 77.579726][ T7341] loop3: rw=2049, sector=77824, nr_sectors = 520 limit=40427 [ 78.135958][ T7315] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 78.137495][ T7315] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 78.307274][ T7288] chnl_net:caif_netlink_parms(): no params data found [ 78.351851][ T7315] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 78.353082][ T7315] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 78.457153][ T7315] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 78.458379][ T7315] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 78.507472][ T7288] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.517083][ T7288] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.518734][ T7288] bridge_slave_0: entered allmulticast mode [ 78.541534][ T7288] bridge_slave_0: entered promiscuous mode [ 78.563514][ T7288] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.565015][ T7288] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.566541][ T7288] bridge_slave_1: entered allmulticast mode [ 78.572218][ T7288] bridge_slave_1: entered promiscuous mode [ 78.587634][ T7315] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 78.588905][ T7315] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 78.652403][ T44] bridge_slave_1: left allmulticast mode [ 78.653781][ T44] bridge_slave_1: left promiscuous mode [ 78.656169][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.675008][ T44] bridge_slave_0: left allmulticast mode [ 78.676299][ T44] bridge_slave_0: left promiscuous mode [ 78.678457][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.744411][ T6437] Bluetooth: hci3: command tx timeout [ 79.290596][ T6516] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 79.450503][ T6516] usb 1-1: Using ep0 maxpacket: 8 [ 79.454952][ T6516] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 79.457003][ T6516] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.458704][ T6516] usb 1-1: Product: syz [ 79.459741][ T6516] usb 1-1: Manufacturer: syz [ 79.467455][ T6516] usb 1-1: SerialNumber: syz [ 79.472165][ T6516] usb 1-1: config 0 descriptor?? [ 79.650940][ T7392] ieee802154 phy0 wpan0: encryption failed: -22 [ 79.683903][ T6516] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 80.056220][ T7398] loop3: detected capacity change from 0 to 32768 [ 80.147803][ T7398] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,no_data_io [ 80.152583][ T7398] bcachefs (loop3): recovering from clean shutdown, journal seq 10 [ 80.154315][ T7398] bcachefs (loop3): Version upgrade required: [ 80.154315][ T7398] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 80.154315][ T7398] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.13: inode_has_child_snapshots [ 80.154315][ T7398] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 80.178659][ T7398] bcachefs (loop3): dropping and reconstructing all alloc info [ 80.190365][ T7398] bcachefs (loop3): check_topology... done [ 80.192048][ T7398] bcachefs (loop3): accounting_read... done [ 80.241882][ T7398] bcachefs (loop3): alloc_read... done [ 80.243200][ T7398] bcachefs (loop3): stripes_read... done [ 80.244505][ T7398] bcachefs (loop3): snapshots_read... done [ 80.249250][ T7398] bcachefs (loop3): check_allocations... done [ 80.271555][ T7398] bcachefs (loop3): going read-write [ 80.276005][ T7398] bcachefs (loop3): done starting filesystem [ 80.312736][ T6429] bcachefs (loop3): shutting down [ 80.313907][ T6429] bcachefs (loop3): going read-only [ 80.315751][ T6429] bcachefs (loop3): finished waiting for writes to stop [ 80.370622][ T6429] bcachefs (loop3): flushing journal and stopping allocators, journal seq 10 [ 80.372532][ T6429] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 10 [ 80.378065][ T6429] bcachefs (loop3): unshutdown complete, journal seq 11 [ 80.380043][ T6429] bcachefs (loop3): done going read-only, filesystem not clean [ 80.395114][ T6429] bcachefs (loop3): shutdown complete [ 80.419554][ T7411] loop4: detected capacity change from 0 to 128 [ 80.432698][ T7411] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 80.457252][ T6430] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 80.645147][ T44] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 80.683481][ T44] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 80.697899][ T7414] loop4: detected capacity change from 0 to 32768 [ 80.701870][ T7414] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.215 (7414) [ 80.710520][ T7414] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 80.712697][ T7414] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 80.714478][ T7414] BTRFS info (device loop4): using free-space-tree [ 80.723694][ T44] bond0 (unregistering): Released all slaves [ 80.810529][ T6437] Bluetooth: hci3: command tx timeout [ 81.069256][ T7288] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.073248][ T7288] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.333122][ T7288] team0: Port device team_slave_0 added [ 81.391907][ T6430] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 81.392538][ T6516] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 81.396210][ T6516] dvbdev: DVB: registering new adapter (TerraTec NOXON DAB Stick) [ 81.401933][ T6516] usb 1-1: media controller created [ 81.407516][ T6516] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 81.447491][ T6516] i2c i2c-1: Added multiplexed i2c bus 2 [ 81.448824][ T6516] rtl2832 1-0010: Realtek RTL2832 successfully attached [ 81.452942][ T6516] usb 1-1: DVB: registering adapter 1 frontend 0 (Realtek RTL2832 (DVB-T))... [ 81.455170][ T6516] dvbdev: dvb_create_media_entity: media entity 'Realtek RTL2832 (DVB-T)' registered. [ 81.626204][ T6516] usb 1-1: USB disconnect, device number 3 [ 81.651036][ T7288] team0: Port device team_slave_1 added [ 81.792066][ T7288] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.793483][ T7288] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.805738][ T7288] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.821284][ T7288] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.822803][ T7288] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.828115][ T7288] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.849769][ T7450] loop3: detected capacity change from 0 to 1024 [ 81.871848][ T7450] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.939414][ T6429] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.016746][ T7315] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 82.017992][ T7315] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 82.141880][ T7288] hsr_slave_0: entered promiscuous mode [ 82.199775][ T7462] loop3: detected capacity change from 0 to 32768 [ 82.202372][ T7288] hsr_slave_1: entered promiscuous mode [ 82.250489][ T7462] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.222 (7462) [ 82.269651][ T7460] loop4: detected capacity change from 0 to 32768 [ 82.374401][ T7288] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.376007][ T7288] Cannot create hsr debugfs directory [ 82.389353][ T7460] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.221 (7460) [ 82.400481][ T7462] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 82.402559][ T7462] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 82.556041][ T7474] loop0: detected capacity change from 0 to 32768 [ 82.558534][ T7460] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 82.568984][ T7474] BTRFS: device /dev/loop0 (7:0) using temp-fsid 3398c9fd-8bd2-4cbd-96c1-1236b54a99c6 [ 82.571191][ T7474] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.225 (7474) [ 82.579624][ T7474] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 82.582188][ T7474] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 82.583716][ T7460] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 82.584145][ T7474] BTRFS info (device loop0): using free-space-tree [ 82.586295][ T7460] BTRFS info (device loop4): using free-space-tree [ 82.605105][ T7489] netlink: 80 bytes leftover after parsing attributes in process `syz.1.226'. [ 82.829974][ T7514] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 82.926810][ T6429] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 82.969269][ T6430] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 83.096565][ T6440] BTRFS info (device loop0): last unmount of filesystem 3398c9fd-8bd2-4cbd-96c1-1236b54a99c6 [ 84.938116][ T7288] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 84.995913][ T7288] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 85.011913][ T7288] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 85.036572][ T7569] loop3: detected capacity change from 0 to 4096 [ 85.080089][ T7569] ntfs3(loop3): Different NTFS sector size (2048) and media sector size (512). [ 85.122204][ T7288] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 85.168855][ T7569] ntfs3(loop3): Failed to initialize $Extend/$ObjId. [ 85.245976][ T44] hsr_slave_0: left promiscuous mode [ 85.280753][ T44] hsr_slave_1: left promiscuous mode [ 85.398772][ T7562] loop4: detected capacity change from 0 to 32768 [ 85.430323][ T7567] loop0: detected capacity change from 0 to 32768 [ 85.580959][ T44] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.582651][ T44] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 85.584997][ T44] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.586558][ T44] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 85.603858][ T44] veth1_macvtap: left promiscuous mode [ 85.605329][ T44] veth0_macvtap: left promiscuous mode [ 85.606510][ T44] veth1_vlan: left promiscuous mode [ 85.607763][ T44] veth0_vlan: left promiscuous mode [ 85.749153][ T7567] XFS (loop0): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 85.755984][ T7562] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 86.300569][ T7583] loop1: detected capacity change from 0 to 32768 [ 86.304115][ T7583] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.240 (7583) [ 86.309112][ T7583] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 86.311628][ T7583] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 86.317046][ T7583] BTRFS info (device loop1): using free-space-tree [ 86.416590][ T7567] XFS (loop0): Ending clean mount [ 86.420002][ T7567] XFS (loop0): Quotacheck needed: Please wait. [ 86.452743][ T7562] XFS (loop4): Ending clean mount [ 86.456196][ T7562] XFS (loop4): Quotacheck needed: Please wait. [ 86.505365][ T7567] XFS (loop0): Quotacheck: Done. [ 86.535163][ T7562] XFS (loop4): Quotacheck: Done. [ 87.217586][ T6430] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 87.320552][ T6426] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 87.345930][ T6440] XFS (loop0): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 87.827525][ T7654] loop0: detected capacity change from 0 to 32768 [ 87.897483][ T7654] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,erasure_code,degraded,no_splitbrain_check,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,nocow [ 87.902538][ T7654] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 87.904298][ T7654] bcachefs (loop0): Version upgrade required: [ 87.904298][ T7654] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 87.904298][ T7654] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.13: inode_has_child_snapshots [ 87.904298][ T7654] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 87.925318][ T7654] bcachefs (loop0): dropping and reconstructing all alloc info [ 87.938651][ T7654] bcachefs (loop0): check_topology... done [ 87.939838][ T7654] bcachefs (loop0): accounting_read... done [ 87.985885][ T7654] bcachefs (loop0): alloc_read... done [ 87.986990][ T7654] bcachefs (loop0): stripes_read... done [ 87.988109][ T7654] bcachefs (loop0): snapshots_read... done [ 87.989354][ T7654] bcachefs (loop0): check_allocations... done [ 88.004920][ T7654] bcachefs (loop0): going read-write [ 88.009231][ T7654] bcachefs (loop0): done starting filesystem [ 88.112143][ T6440] bcachefs (loop0): shutting down [ 88.113370][ T6440] bcachefs (loop0): going read-only [ 88.114608][ T6440] bcachefs (loop0): finished waiting for writes to stop [ 88.140826][ T6440] bcachefs (loop0): flushing journal and stopping allocators, journal seq 12 [ 88.228372][ T619] bcachefs (loop0): bch2_write_super(): fatal error loop0: Superblock write was silently dropped! (seq 0 expected 55) [ 88.233164][ T619] bcachefs (loop0): fatal error - emergency read only [ 88.234851][ T6440] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 15 [ 88.237829][ T6440] bcachefs (loop0): unshutdown complete, journal seq 15 [ 88.240047][ T6440] bcachefs (loop0): done going read-only, filesystem not clean [ 88.250176][ T6440] bcachefs (loop0): shutdown complete [ 88.888318][ T44] team0 (unregistering): Port device team_slave_1 removed [ 89.054056][ T44] team0 (unregistering): Port device team_slave_0 removed [ 90.394287][ T7677] loop0: detected capacity change from 0 to 32768 [ 90.410210][ T7677] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 90.466239][ T7677] XFS (loop0): Ending clean mount [ 90.471629][ T7677] XFS (loop0): Quotacheck needed: Please wait. [ 90.495441][ T7677] XFS (loop0): Quotacheck: Done. [ 90.513763][ T6440] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 90.855233][ T10] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 91.006881][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.008860][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 91.011532][ T10] usb 1-1: New USB device found, idVendor=0c70, idProduct=f011, bcdDevice= 0.00 [ 91.013351][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.016435][ T10] usb 1-1: config 0 descriptor?? [ 91.434968][ T10] aquacomputer_d5next 0003:0C70:F011.0001: unknown main item tag 0x0 [ 91.436637][ T10] aquacomputer_d5next 0003:0C70:F011.0001: unknown main item tag 0x0 [ 91.438419][ T10] aquacomputer_d5next 0003:0C70:F011.0001: unknown main item tag 0x0 [ 91.440124][ T10] aquacomputer_d5next 0003:0C70:F011.0001: unknown main item tag 0x0 [ 91.446216][ T10] aquacomputer_d5next 0003:0C70:F011.0001: unknown main item tag 0x0 [ 91.452824][ T10] aquacomputer_d5next 0003:0C70:F011.0001: hidraw0: USB HID v0.00 Device [HID 0c70:f011] on usb-dummy_hcd.0-1/input0 [ 91.648286][ T8] usb 1-1: USB disconnect, device number 4 [ 91.800802][ T7288] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.808737][ T7288] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.844209][ T7288] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 91.846476][ T7288] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 91.855856][ T2072] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.857411][ T2072] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.859807][ T2072] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.861377][ T2072] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.049852][ T7690] loop1: detected capacity change from 0 to 32768 [ 92.055164][ T7690] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.255 (7690) [ 92.060045][ T7696] loop3: detected capacity change from 0 to 32768 [ 92.063413][ T7690] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 92.065558][ T7690] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 92.067627][ T7690] BTRFS info (device loop1): using free-space-tree [ 92.176967][ T7288] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.240188][ T7696] XFS (loop3): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 93.042335][ T7288] veth0_vlan: entered promiscuous mode [ 93.048003][ T7288] veth1_vlan: entered promiscuous mode [ 93.067805][ T7288] veth0_macvtap: entered promiscuous mode [ 93.093253][ T7288] veth1_macvtap: entered promiscuous mode [ 93.099759][ T7288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.113934][ T7288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.115953][ T7288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.117976][ T7288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.120063][ T7288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.127974][ T7288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.130021][ T7288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.131572][ T7696] XFS (loop3): Ending clean mount [ 93.133281][ T7288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.134245][ T7288] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.138563][ T7288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.139720][ T7696] XFS (loop3): Quotacheck needed: Please wait. [ 93.140790][ T7288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.140804][ T7288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.140815][ T7288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.140823][ T7288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.140833][ T7288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.140843][ T7288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.140852][ T7288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.158993][ T7288] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.166516][ T7288] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.168334][ T7288] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.170187][ T7288] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.172249][ T7288] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.191607][ T7696] XFS (loop3): Quotacheck: Done. [ 93.316409][ T30] audit: type=1326 audit(93.290:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7768 comm="syz.4.264" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb754afa8 code=0x7ffc0000 [ 93.344310][ T30] audit: type=1326 audit(93.300:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7768 comm="syz.4.264" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb754afa8 code=0x7ffc0000 [ 93.358784][ T30] audit: type=1326 audit(93.310:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7768 comm="syz.4.264" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=199 compat=0 ip=0xffffb754afa8 code=0x7ffc0000 [ 93.376959][ T30] audit: type=1326 audit(93.310:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7768 comm="syz.4.264" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb754afa8 code=0x7ffc0000 [ 93.389845][ T6426] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 93.394287][ T30] audit: type=1326 audit(93.310:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7768 comm="syz.4.264" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb754afa8 code=0x7ffc0000 [ 93.425903][ T30] audit: type=1326 audit(93.310:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7768 comm="syz.4.264" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=208 compat=0 ip=0xffffb754afa8 code=0x7ffc0000 [ 93.444354][ T30] audit: type=1326 audit(93.310:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7768 comm="syz.4.264" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb754afa8 code=0x7ffc0000 [ 93.449964][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.453733][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.491896][ T2072] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.493646][ T2072] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.653450][ T6429] XFS (loop3): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 94.668436][ T7758] loop0: detected capacity change from 0 to 32768 [ 94.755914][ T7758] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 94.878722][ T7758] XFS (loop0): Ending clean mount [ 95.141644][ T7758] XFS (loop0): Quotacheck needed: Please wait. [ 95.607584][ T7758] XFS (loop0): Quotacheck: Done. [ 95.638676][ T6440] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 95.656801][ T7813] loop1: detected capacity change from 0 to 32768 [ 95.821854][ T7804] loop4: detected capacity change from 0 to 32768 [ 95.849420][ T7804] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.274 (7804) [ 95.855356][ T7840] loop3: detected capacity change from 0 to 2048 [ 95.889048][ T7804] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 95.891341][ T7804] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 95.893223][ T7804] BTRFS info (device loop4): using free-space-tree [ 95.981317][ T7855] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 96.304337][ T7840] NILFS (loop3): DAT doesn't have a block to manage vblocknr = 8796093022222 [ 96.306569][ T7840] NILFS error (device loop3): nilfs_bmap_truncate: broken bmap (inode number=16) [ 96.347059][ T7838] loop0: detected capacity change from 0 to 32768 [ 96.374735][ T7840] Remounting filesystem read-only [ 96.375960][ T7840] NILFS (loop3): error -5 truncating bmap (ino=16) [ 96.404333][ T44] BTRFS info (device loop4): qgroup scan completed (inconsistency flag cleared) [ 96.469902][ T6430] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 96.482209][ T6429] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer [ 96.520812][ T7877] loop5: detected capacity change from 0 to 32768 [ 96.522639][ T7877] XFS: ikeep mount option is deprecated. [ 96.568365][ T7887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.593213][ T7887] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.649209][ T7838] XFS (loop0): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 96.752302][ T7890] loop1: detected capacity change from 0 to 32768 [ 96.779395][ T7877] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 96.804419][ T7838] XFS (loop0): Ending clean mount [ 96.806540][ T7838] XFS (loop0): Quotacheck needed: Please wait. [ 96.831859][ T7890] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 96.845447][ T7877] XFS (loop5): Ending clean mount [ 96.848376][ T7877] XFS (loop5): Quotacheck needed: Please wait. [ 96.875434][ T7838] XFS (loop0): Quotacheck: Done. [ 96.912731][ T7877] XFS (loop5): Quotacheck: Done. [ 97.008218][ T7927] loop4: detected capacity change from 0 to 1024 [ 97.013582][ T7890] XFS (loop1): Ending clean mount [ 97.016043][ T7890] XFS (loop1): Quotacheck needed: Please wait. [ 97.038178][ T7927] hfsplus: unable to parse mount options [ 97.043009][ T7288] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 97.058703][ T7890] XFS (loop1): Quotacheck: Done. [ 97.138213][ T6426] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 97.263729][ T7935] loop4: detected capacity change from 0 to 512 [ 97.418353][ T6440] XFS (loop0): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 97.430807][ T7938] loop3: detected capacity change from 0 to 32768 [ 97.465520][ T7935] EXT4-fs error (device loop4): ext4_orphan_get:1388: inode #15: comm syz.4.294: casefold flag without casefold feature [ 97.599646][ T7935] EXT4-fs error (device loop4): ext4_orphan_get:1393: comm syz.4.294: couldn't read orphan inode 15 (err -117) [ 97.613277][ T7935] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.649608][ T7938] XFS (loop3): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 97.712529][ T7938] XFS (loop3): Ending clean mount [ 97.747410][ T7947] loop5: detected capacity change from 0 to 32768 [ 97.755701][ T7947] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.296 (7947) [ 97.768062][ T7947] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 97.773932][ T6430] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.816500][ T6429] XFS (loop3): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 97.823029][ T7966] loop4: detected capacity change from 0 to 8 [ 97.832814][ T7947] BTRFS info (device loop5): using sha256 (sha256-ce) checksum algorithm [ 97.834674][ T7947] BTRFS info (device loop5): using free-space-tree [ 97.948053][ T7966] SQUASHFS error: Failed to read block 0x6e6: -5 [ 97.949712][ T7966] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 97.957286][ T7966] SQUASHFS error: read_indexes: reading block [6e4:0] [ 97.980537][ T7966] SQUASHFS error: Failed to read block 0x0: -5 [ 97.981935][ T7966] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 97.983846][ T7966] SQUASHFS error: read_indexes: reading block [6e4:0] [ 97.985725][ T7966] SQUASHFS error: Failed to read block 0x0: -5 [ 97.987015][ T7966] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 97.988452][ T7966] SQUASHFS error: read_indexes: reading block [6e4:0] [ 97.989859][ T7966] SQUASHFS error: Failed to read block 0x0: -5 [ 97.991458][ T7966] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 97.992911][ T7966] SQUASHFS error: read_indexes: reading block [6e4:0] [ 97.994907][ T7966] SQUASHFS error: Failed to read block 0x0: -5 [ 97.996284][ T7966] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 97.997906][ T7966] SQUASHFS error: read_indexes: reading block [6e4:0] [ 98.002901][ T7966] SQUASHFS error: Failed to read block 0x0: -5 [ 98.004139][ T7966] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 98.010548][ T7966] SQUASHFS error: read_indexes: reading block [6e4:0] [ 98.011951][ T7966] SQUASHFS error: Failed to read block 0x0: -5 [ 98.013249][ T7966] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 98.014761][ T7966] SQUASHFS error: read_indexes: reading block [6e4:0] [ 98.020466][ T7966] SQUASHFS error: Failed to read block 0x0: -5 [ 98.046763][ T7966] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 98.050564][ T7966] SQUASHFS error: read_indexes: reading block [6e4:0] [ 98.052094][ T7966] SQUASHFS error: Failed to read block 0x0: -5 [ 98.053478][ T7966] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 98.062236][ T7966] SQUASHFS error: read_indexes: reading block [6e4:0] [ 98.063607][ T7966] SQUASHFS error: Failed to read block 0x0: -5 [ 98.065016][ T7966] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 98.080514][ T7966] SQUASHFS error: read_indexes: reading block [6e4:0] [ 98.081982][ T7966] SQUASHFS error: Failed to read block 0x0: -5 [ 98.083390][ T7966] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 98.084962][ T7966] SQUASHFS error: read_indexes: reading block [6e4:0] [ 98.114273][ T7966] SQUASHFS error: Failed to read block 0x0: -5 [ 98.115616][ T7966] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 98.117257][ T7966] SQUASHFS error: read_indexes: reading block [6e4:0] [ 98.118715][ T7966] SQUASHFS error: Failed to read block 0x0: -5 [ 98.120213][ T7966] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 98.145367][ T7966] SQUASHFS error: read_indexes: reading block [6e4:0] [ 98.153975][ T7288] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 98.155257][ T11] BTRFS info (device loop5): qgroup scan completed (inconsistency flag cleared) [ 98.157399][ T7966] SQUASHFS error: Failed to read block 0x0: -5 [ 98.161052][ T7966] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 98.180505][ T7966] SQUASHFS error: read_indexes: reading block [6e4:0] [ 98.181946][ T7966] SQUASHFS error: Failed to read block 0x0: -5 [ 98.183359][ T7966] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 98.185030][ T7966] SQUASHFS error: read_indexes: reading block [6e4:0] [ 98.186151][ T7966] SQUASHFS error: Failed to read block 0x0: -5 [ 98.187216][ T7966] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 98.188697][ T7966] SQUASHFS error: read_indexes: reading block [6e4:0] [ 98.190197][ T7966] SQUASHFS error: Failed to read block 0x0: -5 [ 98.201125][ T7966] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 98.202627][ T7966] SQUASHFS error: read_indexes: reading block [6e4:0] [ 98.204036][ T7966] SQUASHFS error: Failed to read block 0x0: -5 [ 98.205223][ T7966] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 98.206935][ T7966] SQUASHFS error: read_indexes: reading block [6e4:0] [ 98.236633][ T7966] SQUASHFS error: Failed to read block 0x0: -5 [ 98.238136][ T7966] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 98.250635][ T7966] SQUASHFS error: read_indexes: reading block [6e4:0] [ 98.252156][ T7966] SQUASHFS error: Failed to read block 0x0: -5 [ 98.253496][ T7966] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 98.255039][ T7966] SQUASHFS error: read_indexes: reading block [6e4:0] [ 98.257228][ T7966] SQUASHFS error: Failed to read block 0x0: -5 [ 98.258736][ T7966] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 98.260285][ T7966] SQUASHFS error: read_indexes: reading block [6e4:0] [ 98.284841][ T7966] SQUASHFS error: Failed to read block 0x0: -5 [ 98.286239][ T7966] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 98.287780][ T7966] SQUASHFS error: read_indexes: reading block [6e4:0] [ 98.289134][ T7966] SQUASHFS error: Failed to read block 0x0: -5 [ 98.306728][ T7966] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 98.308190][ T7966] SQUASHFS error: read_indexes: reading block [6e4:0] [ 98.309550][ T7966] SQUASHFS error: Failed to read block 0x0: -5 [ 98.316758][ T7966] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 98.318447][ T7966] SQUASHFS error: read_indexes: reading block [6e4:0] [ 98.320021][ T7966] SQUASHFS error: Failed to read block 0x0: -5 [ 98.325994][ T7966] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 98.327576][ T7966] SQUASHFS error: read_indexes: reading block [6e4:0] [ 98.333649][ T7966] SQUASHFS error: Failed to read block 0x0: -5 [ 98.335080][ T7966] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 98.345212][ T7966] SQUASHFS error: read_indexes: reading block [6e4:0] [ 98.346643][ T7966] SQUASHFS error: Failed to read block 0x0: -5 [ 98.347880][ T7966] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 98.349478][ T7966] SQUASHFS error: read_indexes: reading block [6e4:0] [ 98.358384][ T7966] SQUASHFS error: Failed to read block 0x0: -5 [ 98.359719][ T7966] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 98.368237][ T7966] SQUASHFS error: read_indexes: reading block [6e4:0] [ 98.370213][ T7966] SQUASHFS error: Failed to read block 0x0: -5 [ 98.371939][ T7966] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 98.375565][ T7966] SQUASHFS error: read_indexes: reading block [6e4:0] [ 98.377073][ T7966] SQUASHFS error: Failed to read block 0x0: -5 [ 98.378383][ T7966] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 98.379830][ T7966] SQUASHFS error: read_indexes: reading block [6e4:0] [ 98.391874][ T7966] SQUASHFS error: Failed to read block 0x0: -5 [ 98.393354][ T7966] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 98.398494][ T7966] SQUASHFS error: read_indexes: reading block [6e4:0] [ 98.400030][ T7966] SQUASHFS error: Failed to read block 0x0: -5 [ 98.420588][ T7966] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 98.423100][ T7966] SQUASHFS error: read_indexes: reading block [6e4:0] [ 98.424514][ T7966] SQUASHFS error: Failed to read block 0x0: -5 [ 98.429776][ T7966] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 98.431588][ T7966] SQUASHFS error: read_indexes: reading block [6e4:0] [ 98.434324][ T7966] SQUASHFS error: Failed to read block 0x0: -5 [ 98.437594][ T7966] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 98.439164][ T7966] SQUASHFS error: read_indexes: reading block [6e4:0] [ 98.442618][ T7966] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 98.445044][ T7966] SQUASHFS error: read_indexes: reading block [6e4:0] [ 98.446638][ T7966] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 98.448292][ T7966] SQUASHFS error: read_indexes: reading block [6e4:0] [ 98.449881][ T7966] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 98.456063][ T7966] SQUASHFS error: read_indexes: reading block [6e4:0] [ 98.525081][ T7981] loop3: detected capacity change from 0 to 32768 [ 98.583686][ T7981] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 98.608211][ T7992] loop1: detected capacity change from 0 to 32768 [ 98.681424][ T7992] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 98.685078][ T8011] loop0: detected capacity change from 0 to 2048 [ 98.718290][ T8011] syz.0.293: attempt to access beyond end of device [ 98.718290][ T8011] loop0: rw=0, sector=4398046511186, nr_sectors = 2 limit=2048 [ 98.728047][ T8011] NILFS (loop0): I/O error reading meta-data file (ino=5, block-offset=0) [ 98.731380][ T8011] NILFS (loop0): error -5 while loading super root [ 98.751589][ T8026] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.798092][ T7992] XFS (loop1): Ending clean mount [ 98.800295][ T7992] XFS (loop1): Quotacheck needed: Please wait. [ 98.831548][ T7992] XFS (loop1): Quotacheck: Done. [ 99.127743][ T8038] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 99.144777][ T8038] loop5: detected capacity change from 0 to 8 [ 99.764434][ T8038] SQUASHFS error: Failed to read block 0x1ea: -5 [ 99.765967][ T8038] unable to read xattr id index table [ 99.930055][ T7981] XFS (loop3): Ending clean mount [ 99.938023][ T7981] XFS (loop3): Quotacheck needed: Please wait. [ 100.036429][ T7981] XFS (loop3): Quotacheck: Done. [ 100.078821][ T6426] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 100.156059][ T6429] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 101.099000][ T8066] loop3: detected capacity change from 0 to 128 [ 101.493286][ T8077] netlink: 8 bytes leftover after parsing attributes in process `syz.3.326'. [ 101.532213][ T8077] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 101.534599][ T8077] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 102.061140][ T8056] loop1: detected capacity change from 0 to 32768 [ 102.067595][ T8056] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.314 (8056) [ 102.078025][ T8056] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 102.080524][ T8056] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 102.082285][ T8056] BTRFS info (device loop1): using free-space-tree [ 102.173451][ T8067] loop0: detected capacity change from 0 to 32768 [ 102.827704][ T8067] XFS (loop0): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 103.003041][ T8074] loop4: detected capacity change from 0 to 32768 [ 103.005919][ T8074] BTRFS: device /dev/loop4 (7:4) using temp-fsid 063c1a6c-1887-43a9-9256-4b2c73e2b37d [ 103.007939][ T8074] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.327 (8074) [ 103.060877][ T8067] XFS (loop0): Ending clean mount [ 103.064361][ T8067] XFS (loop0): Quotacheck needed: Please wait. [ 103.078372][ T8067] XFS (loop0): Quotacheck: Done. [ 103.104407][ T8074] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 103.130531][ T8074] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 103.132397][ T8074] BTRFS info (device loop4): using free-space-tree [ 103.171658][ T154] BTRFS info (device loop1): qgroup scan completed (inconsistency flag cleared) [ 103.268265][ T6426] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 103.421506][ T6430] BTRFS info (device loop4): last unmount of filesystem 063c1a6c-1887-43a9-9256-4b2c73e2b37d [ 103.498279][ T6440] XFS (loop0): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 104.800443][ T30] audit: type=1326 audit(104.770:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8152 comm="syz.0.339" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb0d4afa8 code=0x7fc00000 [ 104.808050][ T8147] loop4: detected capacity change from 0 to 32768 [ 104.891902][ T8147] XFS (loop4): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 105.015520][ T8147] XFS (loop4): Ending clean mount [ 105.022349][ T8147] XFS (loop4): Quotacheck needed: Please wait. [ 105.048674][ T8158] loop5: detected capacity change from 0 to 32768 [ 105.076611][ T8173] loop1: detected capacity change from 0 to 32768 [ 105.079753][ T8158] XFS: ikeep mount option is deprecated. [ 105.080286][ T8173] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.344 (8173) [ 105.150518][ T8173] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 105.152674][ T8173] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 105.154488][ T8173] BTRFS info (device loop1): using free-space-tree [ 105.173301][ T8158] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 105.185918][ T8147] XFS (loop4): Quotacheck: Done. [ 105.270510][ T8158] XFS (loop5): Ending clean mount [ 105.346666][ T8114] loop3: detected capacity change from 0 to 131072 [ 105.352090][ T8114] F2FS-fs (loop3): Invalid log sectorsize (67108873) [ 105.353610][ T8114] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 105.400515][ T8114] F2FS-fs (loop3): invalid crc value [ 105.465846][ T8114] F2FS-fs (loop3): Found nat_bits in checkpoint [ 105.497606][ T619] BTRFS info (device loop1): qgroup scan completed (inconsistency flag cleared) [ 105.505220][ T6426] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 105.520258][ T8183] loop0: detected capacity change from 0 to 32768 [ 105.521312][ T6430] XFS (loop4): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 105.545679][ T8114] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 105.547164][ T8114] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 105.559361][ T8183] XFS (loop0): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 105.615248][ T8114] F2FS-fs (loop3): dec_valid_node_count: inconsistent i_blocks, ino:7, iblocks:0 [ 105.699225][ T8183] XFS (loop0): Ending clean mount [ 105.704780][ T8183] XFS (loop0): Quotacheck needed: Please wait. [ 105.743019][ T8183] XFS (loop0): Quotacheck: Done. [ 105.749684][ T7288] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 105.846941][ T6440] XFS (loop0): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 106.267682][ T8244] loop1: detected capacity change from 0 to 136 [ 106.271289][ T8244] iso9660: Bad value for 'gid' [ 106.272412][ T8244] iso9660: Bad value for 'gid' [ 106.560083][ T8254] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 107.379932][ T8263] loop3: detected capacity change from 0 to 32768 [ 107.393077][ T8270] netlink: 'syz.5.361': attribute type 21 has an invalid length. [ 107.394930][ T8270] netlink: 44 bytes leftover after parsing attributes in process `syz.5.361'. [ 107.396745][ T8270] netlink: 16 bytes leftover after parsing attributes in process `syz.5.361'. [ 107.443837][ T8263] XFS (loop3): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 107.498909][ T8263] XFS (loop3): Ending clean mount [ 107.501406][ T8263] XFS (loop3): Quotacheck needed: Please wait. [ 107.545291][ T8255] loop0: detected capacity change from 0 to 32768 [ 107.548327][ T8255] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.356 (8255) [ 107.548460][ T8263] XFS (loop3): Quotacheck: Done. [ 107.564256][ T8255] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 107.566367][ T8255] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 107.575855][ T8255] BTRFS info (device loop0): using free-space-tree [ 107.598508][ T6429] XFS (loop3): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 107.668809][ T8295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.723034][ T8295] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.728028][ T8302] usb usb8: usbfs: process 8302 (syz.5.371) did not claim interface 0 before use [ 107.992374][ T11] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared) [ 107.997065][ T6440] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 108.031231][ T8324] loop4: detected capacity change from 0 to 8192 [ 108.038276][ T8324] REISERFS warning (device loop4): jmacd-7 reiserfs_fill_super: resize option for remount only [ 108.884742][ T8349] loop1: detected capacity change from 0 to 32768 [ 109.066234][ T8350] loop5: detected capacity change from 0 to 32768 [ 109.090031][ T8350] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.381 (8350) [ 109.094262][ T8349] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 109.144959][ T8350] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 109.173267][ T8350] BTRFS info (device loop5): using sha256 (sha256-ce) checksum algorithm [ 109.182853][ T8349] XFS (loop1): Ending clean mount [ 109.185659][ T8349] XFS (loop1): Quotacheck needed: Please wait. [ 109.207932][ T8350] BTRFS info (device loop5): using free-space-tree [ 109.298402][ T8349] XFS (loop1): Quotacheck: Done. [ 109.402286][ T6426] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 109.420997][ T7288] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 109.669922][ T8391] loop4: detected capacity change from 0 to 32768 [ 109.685443][ T8391] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.384 (8391) [ 109.713692][ T8391] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 109.719103][ T8391] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 109.739647][ T8391] BTRFS info (device loop4): using free-space-tree [ 109.987384][ T8437] loop5: detected capacity change from 0 to 8192 [ 110.035287][ T8437] REISERFS warning (device loop5): jmacd-7 reiserfs_fill_super: resize option for remount only [ 110.205845][ T11] BTRFS info (device loop4): qgroup scan completed (inconsistency flag cleared) [ 110.252243][ T6430] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 110.370553][ T8471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.410778][ T8471] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.535618][ T8451] loop3: detected capacity change from 0 to 32768 [ 110.577968][ T8451] XFS (loop3): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 110.605762][ T8451] XFS (loop3): Ending clean mount [ 110.688210][ T8490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.757420][ T8490] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.780695][ T8451] XFS (loop3): Quotacheck needed: Please wait. [ 110.899901][ T8451] XFS (loop3): Quotacheck: Done. [ 111.012647][ T6429] XFS (loop3): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 111.617244][ T8556] loop5: detected capacity change from 0 to 8192 [ 111.629573][ T8556] REISERFS warning (device loop5): jmacd-7 reiserfs_fill_super: resize option for remount only [ 112.553564][ T8533] loop4: detected capacity change from 0 to 32768 [ 112.635634][ T8533] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.410 (8533) [ 112.756859][ T8599] loop1: detected capacity change from 0 to 8192 [ 112.789204][ T8599] REISERFS warning (device loop1): jmacd-7 reiserfs_fill_super: resize option for remount only [ 112.809967][ T8533] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 112.812610][ T8533] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 112.815139][ T8533] BTRFS info (device loop4): using free-space-tree [ 113.785452][ T8639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.857065][ T8639] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.953044][ T154] BTRFS info (device loop4): qgroup scan completed (inconsistency flag cleared) [ 113.955907][ T6430] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 114.017517][ T8660] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 114.019031][ T8660] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 114.032749][ T8660] vhci_hcd vhci_hcd.0: Device attached [ 114.158212][ T8669] loop1: detected capacity change from 0 to 8192 [ 114.177069][ T8669] REISERFS warning (device loop1): jmacd-7 reiserfs_fill_super: resize option for remount only [ 114.308734][ T6480] vhci_hcd: vhci_device speed not set [ 114.969669][ T8687] tipc: Started in network mode [ 114.980982][ T6480] usb 2-1: new full-speed USB device number 2 using vhci_hcd [ 114.983737][ T2252] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 114.987451][ T8687] tipc: Node identity fc, cluster identity 4711 [ 114.988768][ T8687] tipc: Enabling of bearer rejected, failed to enable media [ 115.143079][ T2252] usb 1-1: Using ep0 maxpacket: 8 [ 115.158075][ T2252] usb 1-1: config 0 has no interfaces? [ 115.159246][ T2252] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 115.161765][ T2252] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.165101][ T2252] usb 1-1: config 0 descriptor?? [ 115.347741][ T8721] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.350313][ T8720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.370720][ T8721] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.373924][ T8661] usb 2-1: recv xbuf, 0 [ 115.377150][ T2252] usb 1-1: USB disconnect, device number 5 [ 115.390766][ T8720] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.410105][ T8718] loop3: detected capacity change from 0 to 8192 [ 115.423496][ T8701] loop4: detected capacity change from 0 to 32768 [ 115.434280][ T8701] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.453 (8701) [ 115.437448][ T619] vhci_hcd: stop threads [ 115.439123][ T619] vhci_hcd: release socket [ 115.442505][ T619] vhci_hcd: disconnect device [ 115.444949][ T8718] REISERFS warning (device loop3): jmacd-7 reiserfs_fill_super: resize option for remount only [ 115.447889][ T8701] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 115.450170][ T8701] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 115.452197][ T8701] BTRFS info (device loop4): using free-space-tree [ 115.456120][ T6480] vhci_hcd: vhci_device speed not set [ 115.596064][ T8721] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.640711][ T8721] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.211829][ T2111] BTRFS info (device loop4): qgroup scan completed (inconsistency flag cleared) [ 116.214439][ T6430] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 116.624244][ T8766] TCP: request_sock_TCPv6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 116.797288][ T8780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.832602][ T8780] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.050314][ T8761] loop5: detected capacity change from 0 to 32768 [ 117.076741][ T8761] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.473 (8761) [ 117.081526][ T8761] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 117.083757][ T8761] BTRFS info (device loop5): using sha256 (sha256-ce) checksum algorithm [ 117.085765][ T8761] BTRFS info (device loop5): using free-space-tree [ 117.311362][ T2111] BTRFS info (device loop5): qgroup scan completed (inconsistency flag cleared) [ 117.318388][ T7288] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 117.422701][ T8813] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.481989][ T8813] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.607225][ T8818] loop3: detected capacity change from 0 to 8 [ 118.098937][ T8850] loop1: detected capacity change from 0 to 8 [ 118.607631][ T8868] netlink: 'syz.4.511': attribute type 27 has an invalid length. [ 118.830909][ T8880] loop3: detected capacity change from 0 to 8 [ 119.025114][ T8860] loop1: detected capacity change from 0 to 32768 [ 119.038022][ T8860] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.508 (8860) [ 119.058633][ T8860] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 119.064573][ T8860] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 119.073242][ T8860] BTRFS info (device loop1): using free-space-tree [ 119.278914][ T6426] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 119.510998][ T8925] loop3: detected capacity change from 0 to 8 [ 120.169122][ T8940] dccp_invalid_packet: pskb_may_pull failed [ 120.198934][ T8940] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.241006][ T8940] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.392309][ T8952] loop5: detected capacity change from 0 to 8 [ 120.884246][ T8962] loop5: detected capacity change from 0 to 32768 [ 120.916501][ T8962] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.545 (8962) [ 120.990579][ T8962] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 120.993122][ T8962] BTRFS info (device loop5): using sha256 (sha256-ce) checksum algorithm [ 120.995108][ T8962] BTRFS info (device loop5): using free-space-tree [ 121.559947][ T7288] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 121.980115][ T9010] Zero length message leads to an empty skb [ 122.569142][ T9019] loop5: detected capacity change from 0 to 32768 [ 122.573032][ T9019] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.562 (9019) [ 122.598324][ T9019] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 122.600862][ T9019] BTRFS info (device loop5): using sha256 (sha256-ce) checksum algorithm [ 122.603213][ T9019] BTRFS info (device loop5): using free-space-tree [ 122.700639][ T6480] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 122.867572][ T6480] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.879788][ T6480] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 122.882041][ T6480] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.887836][ T6480] usb 1-1: Product: syz [ 122.888802][ T6480] usb 1-1: Manufacturer: syz [ 122.889966][ T6480] usb 1-1: SerialNumber: syz [ 123.129381][ T7288] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 124.549108][ T6480] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 124.550637][ T6480] cdc_ncm 1-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 124.552162][ T6480] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 124.706785][ T6480] cdc_ncm 1-1:1.0: setting tx_max = 32 [ 124.719419][ T6480] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 124.726658][ T6480] usb 1-1: USB disconnect, device number 6 [ 124.729229][ T6480] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 125.068422][ T9085] loop4: detected capacity change from 0 to 32768 [ 125.086083][ T9085] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.578 (9085) [ 125.090313][ T9085] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 125.094338][ T9085] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 125.120885][ T9085] BTRFS info (device loop4): using free-space-tree [ 125.187650][ T9086] loop1: detected capacity change from 0 to 32768 [ 125.195218][ T9086] BTRFS: device /dev/loop1 (7:1) using temp-fsid 5afe3330-8ef0-4a98-b2ce-f20c9a87fc2b [ 125.198271][ T9086] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.581 (9086) [ 125.210051][ T9086] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 125.219091][ T9086] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 125.222057][ T9086] BTRFS info (device loop1): using free-space-tree [ 125.358947][ T6426] BTRFS info (device loop1): last unmount of filesystem 5afe3330-8ef0-4a98-b2ce-f20c9a87fc2b [ 125.817844][ T6430] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 125.941907][ T2344] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.943200][ T2344] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.070967][ T9151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.117451][ T9151] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.557421][ T9167] loop1: detected capacity change from 0 to 32768 [ 126.581051][ T9167] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.602 (9167) [ 126.610940][ T9167] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 126.613282][ T9167] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 126.615086][ T9167] BTRFS info (device loop1): using free-space-tree [ 127.411869][ T9192] loop4: detected capacity change from 0 to 64 [ 128.153345][ T9209] loop5: detected capacity change from 0 to 32768 [ 128.163432][ T9209] BTRFS: device /dev/loop5 (7:5) using temp-fsid 551c0822-6cbc-4a75-9173-71a74d470b7b [ 128.166526][ T9209] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.611 (9209) [ 128.204530][ T9209] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 128.206916][ T9209] BTRFS info (device loop5): using sha256 (sha256-ce) checksum algorithm [ 128.208686][ T9209] BTRFS info (device loop5): using free-space-tree [ 128.216329][ T6426] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 128.558464][ T7288] BTRFS info (device loop5): last unmount of filesystem 551c0822-6cbc-4a75-9173-71a74d470b7b [ 128.758589][ T9247] loop5: detected capacity change from 0 to 8 [ 129.314910][ T9266] netlink: 36 bytes leftover after parsing attributes in process `syz.5.627'. [ 129.456196][ T9275] loop4: detected capacity change from 0 to 8 [ 129.586238][ T9269] loop3: detected capacity change from 0 to 32768 [ 129.588116][ T9269] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.629 (9269) [ 129.609304][ T9269] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 129.611601][ T9269] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 129.613409][ T9269] BTRFS info (device loop3): using free-space-tree [ 129.887066][ T9315] loop1: detected capacity change from 0 to 8 [ 130.075958][ T6429] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 130.098251][ T9323] netlink: 36 bytes leftover after parsing attributes in process `syz.4.644'. [ 130.266861][ T9332] netlink: 'syz.0.648': attribute type 27 has an invalid length. [ 130.672208][ T9322] loop1: detected capacity change from 0 to 32768 [ 130.766905][ T9322] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 130.849383][ T9371] netlink: 36 bytes leftover after parsing attributes in process `syz.4.659'. [ 130.947034][ T9378] loop5: detected capacity change from 0 to 8 [ 130.967895][ T9322] XFS (loop1): Ending clean mount [ 130.996479][ T9322] XFS (loop1): Quotacheck needed: Please wait. [ 131.036341][ T9322] XFS (loop1): Quotacheck: Done. [ 131.091381][ T6426] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 131.306336][ T9397] loop4: detected capacity change from 0 to 64 [ 131.645680][ T9422] netlink: 'syz.5.679': attribute type 1 has an invalid length. [ 131.661987][ T9422] netlink: 24 bytes leftover after parsing attributes in process `syz.5.679'. [ 131.699153][ T9429] loop1: detected capacity change from 0 to 64 [ 131.704193][ T9431] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.758023][ T9431] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.308923][ T9466] loop3: detected capacity change from 0 to 64 [ 132.398233][ T9474] netlink: 28 bytes leftover after parsing attributes in process `syz.3.702'. [ 132.529594][ T9489] loop3: detected capacity change from 0 to 2048 [ 132.565759][ T9493] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 132.869176][ T9520] loop5: detected capacity change from 0 to 2048 [ 132.886497][ T9522] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 133.033509][ T9531] loop1: detected capacity change from 0 to 64 [ 134.534746][ T9590] netlink: 4 bytes leftover after parsing attributes in process `syz.4.750'. [ 135.094102][ T9623] loop3: detected capacity change from 0 to 2048 [ 135.115696][ T9626] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 135.155473][ T9623] NILFS (loop3): DAT doesn't have a block to manage vblocknr = 8796093022222 [ 135.159266][ T9623] NILFS error (device loop3): nilfs_bmap_truncate: broken bmap (inode number=16) [ 135.173226][ T9623] Remounting filesystem read-only [ 135.180345][ T9623] NILFS (loop3): error -5 truncating bmap (ino=16) [ 135.224096][ T6429] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer [ 135.303114][ T9632] netlink: 36 bytes leftover after parsing attributes in process `syz.4.769'. [ 135.398233][ T9641] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.431875][ T9641] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.629671][ T9663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.664942][ T9665] netlink: 36 bytes leftover after parsing attributes in process `syz.0.780'. [ 135.670999][ T9663] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.000818][ T9683] netlink: 12 bytes leftover after parsing attributes in process `syz.3.785'. [ 136.268249][ T9690] loop3: detected capacity change from 0 to 40427 [ 136.271429][ T9690] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 136.273043][ T9690] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 136.278087][ T9690] F2FS-fs (loop3): invalid crc value [ 136.286672][ T9690] F2FS-fs (loop3): Found nat_bits in checkpoint [ 136.316608][ T9690] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 136.318112][ T9690] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 136.440886][ T9705] netlink: 36 bytes leftover after parsing attributes in process `syz.1.791'. [ 136.622939][ T9714] syz.3.788: attempt to access beyond end of device [ 136.622939][ T9714] loop3: rw=2049, sector=77824, nr_sectors = 520 limit=40427 [ 137.638353][ T9746] netlink: 40 bytes leftover after parsing attributes in process `syz.0.808'. [ 137.660217][ T9754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.681124][ T9754] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.998872][ T9775] netlink: 36 bytes leftover after parsing attributes in process `syz.1.822'. [ 138.889222][ T9800] loop1: detected capacity change from 0 to 2048 [ 139.026467][ T9805] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 139.037686][ T9800] NILFS (loop1): DAT doesn't have a block to manage vblocknr = 8796093022222 [ 139.039620][ T9800] NILFS error (device loop1): nilfs_bmap_truncate: broken bmap (inode number=16) [ 139.053631][ T9807] bond0: (slave bridge1): Enslaving as an active interface with an up link [ 139.058620][ T9800] Remounting filesystem read-only [ 139.059802][ T9800] NILFS (loop1): error -5 truncating bmap (ino=16) [ 139.083995][ T6426] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer [ 139.262663][ T10] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 139.299102][ T9820] netlink: 36 bytes leftover after parsing attributes in process `syz.5.839'. [ 139.420730][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 139.533219][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 139.614846][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 139.698639][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 139.741615][ T10] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 139.834552][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 139.907277][ T10] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 139.909216][ T10] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 139.916698][ T10] usb 1-1: Manufacturer: syz [ 139.929228][ T10] usb 1-1: config 0 descriptor?? [ 140.051878][ T9831] netlink: 8 bytes leftover after parsing attributes in process `syz.3.844'. [ 140.055067][ T9831] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 140.067444][ T9831] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 140.115670][ T9838] loop1: detected capacity change from 0 to 2048 [ 140.151081][ T10] Registered IR keymap rc-hauppauge [ 140.167989][ T9844] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 140.179767][ T9838] NILFS (loop1): DAT doesn't have a block to manage vblocknr = 8796093022222 [ 140.188163][ T9838] NILFS error (device loop1): nilfs_bmap_truncate: broken bmap (inode number=16) [ 140.192521][ T9838] Remounting filesystem read-only [ 140.193648][ T9838] NILFS (loop1): error -5 truncating bmap (ino=16) [ 140.203542][ T10] rc_core: Loaded IR protocol module ir-rc5-decoder, but protocol rc-5 still not available [ 140.206058][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 140.217087][ T6426] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer [ 140.230558][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 140.256587][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 140.266539][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input5 [ 140.279152][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 140.296421][ T9853] syzkaller1: entered promiscuous mode [ 140.298670][ T9853] syzkaller1: entered allmulticast mode [ 140.305434][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 140.325035][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 140.350771][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 140.370975][ T9804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.372902][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 140.391420][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 140.410650][ T9804] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.423261][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 140.440578][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 140.471308][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 140.504285][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 140.521288][ T10] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 140.523088][ T10] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 140.705845][ T2252] usb 1-1: USB disconnect, device number 7 [ 141.653791][ T9887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.680653][ T9887] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.704340][ T9898] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.868'. [ 141.706673][ T9896] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.868'. [ 142.436501][ T9903] netlink: 20 bytes leftover after parsing attributes in process `syz.1.870'. [ 143.485546][ T9929] loop1: detected capacity change from 0 to 2048 [ 143.495335][ T9931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.539176][ T9932] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 143.547179][ T9931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.661715][ T9936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.702851][ T9915] loop3: detected capacity change from 0 to 32768 [ 143.721178][ T9936] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.469870][ T9915] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,erasure_code,degraded,no_splitbrain_check,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,nocow [ 144.475911][ T9915] bcachefs (loop3): recovering from clean shutdown, journal seq 10 [ 144.477700][ T9915] bcachefs (loop3): Version upgrade required: [ 144.477700][ T9915] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 144.477700][ T9915] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.13: inode_has_child_snapshots [ 144.477700][ T9915] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 144.497907][ T9915] bcachefs (loop3): dropping and reconstructing all alloc info [ 144.616197][ T9915] bcachefs (loop3): check_topology... done [ 144.617480][ T9915] bcachefs (loop3): accounting_read... done [ 144.652029][ T9915] bcachefs (loop3): alloc_read... done [ 144.653289][ T9915] bcachefs (loop3): stripes_read... done [ 144.654475][ T9915] bcachefs (loop3): snapshots_read... done [ 144.656678][ T9915] bcachefs (loop3): check_allocations... done [ 144.690113][ T9915] bcachefs (loop3): going read-write [ 144.711413][ T9915] bcachefs (loop3): done starting filesystem [ 144.886535][ T6429] bcachefs (loop3): shutting down [ 144.887641][ T6429] bcachefs (loop3): going read-only [ 144.888902][ T6429] bcachefs (loop3): finished waiting for writes to stop [ 144.943422][ T6429] bcachefs (loop3): flushing journal and stopping allocators, journal seq 12 [ 145.052350][ T154] bcachefs (loop3): bch2_write_super(): fatal error loop3: Superblock write was silently dropped! (seq 0 expected 55) [ 145.189810][ T154] bcachefs (loop3): fatal error - emergency read only [ 145.307608][ T6429] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 15 [ 145.345374][ T6429] bcachefs (loop3): unshutdown complete, journal seq 15 [ 145.427907][ T6429] bcachefs (loop3): done going read-only, filesystem not clean [ 145.732570][ T6429] bcachefs (loop3): shutdown complete [ 145.863803][ T9977] loop5: detected capacity change from 0 to 32768 [ 145.899111][ T9977] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 145.961940][T10015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.980243][T10016] netlink: 20 bytes leftover after parsing attributes in process `syz.4.912'. [ 145.987927][ T9977] XFS (loop5): Ending clean mount [ 145.991421][T10015] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.003455][ T9977] XFS (loop5): Quotacheck needed: Please wait. [ 146.032233][T10018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.050315][ T9977] XFS (loop5): Quotacheck: Done. [ 146.065075][T10018] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.069765][ T7288] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 147.571017][T10069] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.616182][T10069] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.643862][T10052] loop5: detected capacity change from 0 to 32768 [ 147.683278][T10052] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 147.742759][T10052] XFS (loop5): Ending clean mount [ 147.747316][T10052] XFS (loop5): Quotacheck needed: Please wait. [ 147.783654][T10052] XFS (loop5): Quotacheck: Done. [ 147.812066][ T7288] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 148.992912][T10100] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.061649][T10100] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.344178][T10111] loop5: detected capacity change from 0 to 32768 [ 149.487213][T10111] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 149.528523][T10111] XFS (loop5): Ending clean mount [ 149.531912][T10111] XFS (loop5): Quotacheck needed: Please wait. [ 149.564663][T10111] XFS (loop5): Quotacheck: Done. [ 149.717663][ T7288] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 149.791896][T10155] ALSA: mixer_oss: invalid OSS volume '' [ 150.084980][T10174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.111009][T10174] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.193212][ T6002] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 153.370956][ T6002] usb 1-1: Using ep0 maxpacket: 8 [ 153.376238][ T6002] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 153.378737][ T6002] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xED, changing to 0x8D [ 153.384207][ T6002] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 153.393035][ T6002] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 153.403667][ T6002] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 153.405639][ T6002] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 153.407365][ T6002] usb 1-1: Product: syz [ 153.408261][ T6002] usb 1-1: Manufacturer: syz [ 153.429599][ T6002] usb 1-1: SerialNumber: syz [ 153.441248][ T6002] usb 1-1: config 0 descriptor?? [ 153.649633][ T6002] radio-si470x 1-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 153.651848][ T6002] radio-si470x 1-1:0.0: probe with driver radio-si470x failed with error -5 [ 153.655679][ T6002] usb 1-1: USB disconnect, device number 8 [ 153.694733][T10276] loop5: detected capacity change from 0 to 32768 [ 153.861337][T10276] bcachefs (loop5): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,erasure_code,degraded,no_splitbrain_check,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,nocow [ 153.883912][T10276] bcachefs (loop5): recovering from clean shutdown, journal seq 10 [ 153.888393][T10281] loop1: detected capacity change from 0 to 32768 [ 153.896243][T10276] bcachefs (loop5): Version upgrade required: [ 153.896243][T10276] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 153.896243][T10276] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.13: inode_has_child_snapshots [ 153.896243][T10276] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 153.921006][T10281] XFS: attr2 mount option is deprecated. [ 153.922466][T10281] XFS: ikeep mount option is deprecated. [ 153.923707][T10281] XFS: noikeep mount option is deprecated. [ 153.940767][T10276] bcachefs (loop5): dropping and reconstructing all alloc info [ 153.949216][T10281] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 153.960508][T10276] bcachefs (loop5): check_topology... done [ 153.961978][T10276] bcachefs (loop5): accounting_read... [ 153.989136][T10281] XFS (loop1): Ending clean mount [ 153.998482][T10281] XFS (loop1): Quotacheck needed: Please wait. [ 154.000738][T10276] done [ 154.001441][T10276] bcachefs (loop5): alloc_read... done [ 154.002630][T10276] bcachefs (loop5): stripes_read... done [ 154.003852][T10276] bcachefs (loop5): snapshots_read... done [ 154.005257][T10276] bcachefs (loop5): check_allocations... done [ 154.038531][T10276] bcachefs (loop5): going read-write [ 154.046461][T10276] bcachefs (loop5): done starting filesystem [ 154.129389][T10307] capability: warning: `syz.4.1021' uses 32-bit capabilities (legacy support in use) [ 154.145658][T10281] XFS (loop1): Quotacheck: Done. [ 154.189605][ T7288] bcachefs (loop5): shutting down [ 154.190799][ T7288] bcachefs (loop5): going read-only [ 154.191847][ T7288] bcachefs (loop5): finished waiting for writes to stop [ 154.211641][ T6426] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 154.236065][ T7288] bcachefs (loop5): flushing journal and stopping allocators, journal seq 12 [ 154.239249][T10311] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1025'. [ 154.358991][ T2111] bcachefs (loop5): bch2_write_super(): fatal error loop5: Superblock write was silently dropped! (seq 0 expected 54) [ 154.363209][ T2111] bcachefs (loop5): fatal error - emergency read only [ 154.370081][ T7288] bcachefs (loop5): flushing journal and stopping allocators complete, journal seq 14 [ 154.372746][ T7288] bcachefs (loop5): unshutdown complete, journal seq 14 [ 154.374741][ T7288] bcachefs (loop5): done going read-only, filesystem not clean [ 154.402401][T10319] loop9: detected capacity change from 0 to 7 [ 154.434214][T10319] Dev loop9: unable to read RDB block 7 [ 154.435711][T10319] loop9: unable to read partition table [ 154.437093][T10319] loop9: partition table beyond EOD, truncated [ 154.438453][T10319] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 154.438453][T10319] ) failed (rc=-5) [ 154.444921][ T7288] bcachefs (loop5): shutdown complete [ 156.720922][ T6002] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 156.893310][ T6002] usb 1-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 156.895408][ T6002] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.897130][ T6002] usb 1-1: Product: syz [ 156.898061][ T6002] usb 1-1: Manufacturer: syz [ 156.899088][ T6002] usb 1-1: SerialNumber: syz [ 156.921665][ T6002] usb 1-1: config 0 descriptor?? [ 156.934629][ T6002] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 157.599657][ T6002] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 157.602627][ T6002] sq905c 1-1:0.0: probe with driver sq905c failed with error -71 [ 158.087801][ T6002] usb 1-1: USB disconnect, device number 9 [ 158.188614][T10388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.251576][T10388] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.539651][T10392] loop1: detected capacity change from 0 to 32768 [ 158.553825][T10392] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1056 (10392) [ 158.639716][T10392] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 158.654468][T10392] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 158.656279][T10392] BTRFS info (device loop1): using free-space-tree [ 158.672766][T10411] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1062'. [ 158.675083][T10411] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 158.677138][T10411] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 158.842954][T10415] loop4: detected capacity change from 0 to 40427 [ 158.849108][T10415] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 158.850881][T10415] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 158.866980][T10415] F2FS-fs (loop4): invalid crc value [ 158.871113][T10415] F2FS-fs (loop4): Found nat_bits in checkpoint [ 158.923124][T10415] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 158.924685][T10415] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 159.198520][T10443] syz.4.1067: attempt to access beyond end of device [ 159.198520][T10443] loop4: rw=2049, sector=77824, nr_sectors = 520 limit=40427 [ 159.559645][ T6426] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 159.793656][T10450] Bluetooth: MGMT ver 1.23 [ 160.231994][T10469] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1083'. [ 161.941506][ T10] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 162.800449][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 162.802781][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 162.805810][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 162.808168][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 162.810338][ T10] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 162.816965][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 162.820285][ T10] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 162.822801][ T10] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 162.824586][ T10] usb 1-1: Manufacturer: syz [ 162.826782][ T10] usb 1-1: config 0 descriptor?? [ 163.035458][ T10] Registered IR keymap rc-hauppauge [ 163.237824][T10501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.261271][T10501] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.263062][ T10] rc_core: Loaded IR protocol module ir-rc5-decoder, but protocol rc-5 still not available [ 163.265225][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 163.280538][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 163.309869][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 163.318075][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input6 [ 163.323360][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 163.344824][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 163.370688][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 163.403066][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 163.420498][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 163.440466][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 163.464785][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 163.489139][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 163.510991][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 164.176068][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 164.199492][ T10] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 164.202626][ T10] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 164.238756][ T10] usb 1-1: USB disconnect, device number 10 [ 164.463279][T10569] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1118'. [ 164.536894][T10569] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1118'. [ 164.760788][T10593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.822018][T10593] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.972575][ T10] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 165.120563][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 165.126828][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 165.130010][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 165.134668][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 165.144893][ T10] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 165.148072][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 165.159260][ T10] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 165.163574][ T10] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 165.167440][ T10] usb 1-1: Manufacturer: syz [ 165.172307][ T10] usb 1-1: config 0 descriptor?? [ 165.411051][ T10] Registered IR keymap rc-hauppauge [ 166.470549][ T10] rc_core: Loaded IR protocol module ir-rc5-decoder, but protocol rc-5 still not available [ 166.472922][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 166.490522][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 166.510780][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 166.513863][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input7 [ 166.517748][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 166.534230][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 166.558010][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 166.578676][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 166.750505][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 166.761512][T10625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.770663][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 166.790488][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 166.810636][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 166.830272][T10625] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.832170][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 166.850686][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 166.871127][ T10] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 166.872743][ T10] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 166.886403][ T10] usb 1-1: USB disconnect, device number 11 [ 168.006700][T10639] loop4: detected capacity change from 0 to 32768 [ 168.015570][T10639] XFS: attr2 mount option is deprecated. [ 168.018861][T10639] XFS: ikeep mount option is deprecated. [ 168.026705][T10639] XFS: noikeep mount option is deprecated. [ 168.069947][T10639] XFS (loop4): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 168.535857][T10639] XFS (loop4): Ending clean mount [ 168.690301][T10643] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 168.695583][T10639] XFS (loop4): Quotacheck needed: Please wait. [ 168.697635][T10643] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 168.758229][T10639] XFS (loop4): Quotacheck: Done. [ 168.778796][T10672] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.867069][ T6430] XFS (loop4): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 168.913204][T10672] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.989302][T10706] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1165'. [ 169.992463][T10701] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1165'. [ 171.131751][T10724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.180752][T10724] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.947468][T10729] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1176'. [ 172.089536][T10746] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1178'. [ 172.096748][T10740] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1178'. [ 172.308372][T10756] loop3: detected capacity change from 0 to 32768 [ 172.443098][T10756] XFS (loop3): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 172.476935][T10756] XFS (loop3): Ending clean mount [ 172.479358][T10756] XFS (loop3): Quotacheck needed: Please wait. [ 172.493175][T10756] XFS (loop3): Quotacheck: Done. [ 172.544894][ T6429] XFS (loop3): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 172.679909][T10790] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1190'. [ 172.784520][T10798] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.1195'. [ 172.786845][T10795] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.1195'. [ 173.263233][T10824] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1208'. [ 173.323992][T10830] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1209'. [ 173.755317][T10849] loop1: detected capacity change from 0 to 32768 [ 173.799033][T10849] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 173.838976][T10849] XFS (loop1): Ending clean mount [ 173.844356][T10849] XFS (loop1): Quotacheck needed: Please wait. [ 173.910300][T10849] XFS (loop1): Quotacheck: Done. [ 173.947496][ T6426] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 174.323393][T10884] bond0: (slave bond_slave_1): Releasing backup interface [ 174.574994][T10904] loop3: detected capacity change from 0 to 32768 [ 174.622522][T10914] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.632764][T10904] XFS (loop3): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 174.680079][T10904] XFS (loop3): Ending clean mount [ 174.680693][T10914] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.686890][T10904] XFS (loop3): Quotacheck needed: Please wait. [ 174.746953][T10904] XFS (loop3): Quotacheck: Done. [ 174.811762][ T6429] XFS (loop3): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 174.939894][T10937] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 207 [ 175.083821][T10951] __nla_validate_parse: 7 callbacks suppressed [ 175.083837][T10951] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1250'. [ 175.398257][T10957] loop1: detected capacity change from 0 to 32768 [ 175.425862][T10957] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 175.462997][T10957] XFS (loop1): Ending clean mount [ 175.469578][T10957] XFS (loop1): Quotacheck needed: Please wait. [ 175.506266][T10957] XFS (loop1): Quotacheck: Done. [ 175.562407][ T6426] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 175.573057][T10985] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1261'. [ 175.782120][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 176.143408][T11011] netlink: 'syz.5.1269': attribute type 11 has an invalid length. [ 176.344186][T11017] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1272'. [ 176.389892][T11021] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1273'. [ 176.434367][T11025] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1274'. [ 176.439848][T11020] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1274'. [ 176.794897][T11050] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1284'. [ 176.802447][T11052] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1285'. [ 176.940520][T11058] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1286'. [ 176.942782][T11057] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1286'. [ 178.226127][T11107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.261512][T11107] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.671019][T11125] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 178.673202][T11125] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 180.178918][T11197] __nla_validate_parse: 3 callbacks suppressed [ 180.178937][T11197] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1339'. [ 180.182481][T11197] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 180.184426][T11197] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 180.404957][T11201] netlink: 'syz.4.1341': attribute type 1 has an invalid length. [ 180.569094][T11215] syzkaller1: entered promiscuous mode [ 180.573545][T11215] syzkaller1: entered allmulticast mode [ 181.031912][T11228] loop3: detected capacity change from 0 to 32768 [ 181.043638][T11228] XFS (loop3): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 181.068385][T11228] XFS (loop3): Ending clean mount [ 181.076447][T11228] XFS (loop3): Quotacheck needed: Please wait. [ 181.103367][T11228] XFS (loop3): Quotacheck: Done. [ 181.137683][ T6429] XFS (loop3): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 181.344365][T11249] bridge0: port 3(gretap0) entered blocking state [ 181.346076][T11249] bridge0: port 3(gretap0) entered disabled state [ 181.347954][T11249] gretap0: entered allmulticast mode [ 181.350257][T11249] gretap0: entered promiscuous mode [ 181.356315][T11249] bridge0: port 3(gretap0) entered blocking state [ 181.357946][T11249] bridge0: port 3(gretap0) entered forwarding state [ 181.367092][T11249] gretap0: left allmulticast mode [ 181.368342][T11249] gretap0: left promiscuous mode [ 181.370819][T11249] bridge0: port 3(gretap0) entered disabled state [ 181.579756][T11261] syzkaller1: entered promiscuous mode [ 181.587675][T11261] syzkaller1: entered allmulticast mode [ 181.626163][T11266] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1362'. [ 181.696340][T11272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.874366][T11272] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.875044][T11270] loop4: detected capacity change from 0 to 40427 [ 181.885198][T11270] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 181.887861][T11270] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 181.902563][T11270] F2FS-fs (loop4): invalid crc value [ 181.908671][T11270] F2FS-fs (loop4): Found nat_bits in checkpoint [ 181.924370][T11283] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1370'. [ 181.935338][T11283] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 181.937264][T11283] IPv6: NLM_F_CREATE should be set when creating new route [ 181.962509][T11270] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 181.963960][T11270] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 183.462893][T11312] syzkaller1: entered promiscuous mode [ 183.464212][T11312] syzkaller1: entered allmulticast mode [ 184.570957][T11333] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 184.701014][T11344] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 185.505394][T11328] loop3: detected capacity change from 0 to 32768 [ 185.713988][T11328] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,erasure_code,degraded,no_splitbrain_check,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,nocow [ 185.718888][T11328] bcachefs (loop3): recovering from clean shutdown, journal seq 10 [ 185.720759][T11328] bcachefs (loop3): Version upgrade required: [ 185.720759][T11328] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 185.720759][T11328] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.13: inode_has_child_snapshots [ 185.720759][T11328] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 185.741171][T11328] bcachefs (loop3): dropping and reconstructing all alloc info [ 185.775093][T11328] bcachefs (loop3): check_topology... done [ 185.776281][T11328] bcachefs (loop3): accounting_read... done [ 185.892127][T11328] bcachefs (loop3): alloc_read... done [ 185.893357][T11328] bcachefs (loop3): stripes_read... done [ 185.895182][T11328] bcachefs (loop3): snapshots_read... done [ 185.896542][T11328] bcachefs (loop3): check_allocations... done [ 185.924088][T11328] bcachefs (loop3): going read-write [ 186.045371][T11328] bcachefs (loop3): done starting filesystem [ 186.855064][ T6429] bcachefs (loop3): shutting down [ 186.856214][ T6429] bcachefs (loop3): going read-only [ 186.857796][ T6429] bcachefs (loop3): finished waiting for writes to stop [ 186.880868][ T6429] bcachefs (loop3): flushing journal and stopping allocators, journal seq 11 [ 187.044816][ T154] bcachefs (loop3): bch2_write_super(): fatal error loop3: Superblock write was silently dropped! (seq 0 expected 54) [ 187.049295][ T154] bcachefs (loop3): fatal error - emergency read only [ 187.066167][ T6429] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 13 [ 187.072669][T11403] team0: Device veth0_vlan failed to register rx_handler [ 187.084704][ T6429] bcachefs (loop3): unshutdown complete, journal seq 13 [ 187.119076][ T6429] bcachefs (loop3): done going read-only, filesystem not clean [ 187.727350][ T2344] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.728855][ T2344] ieee802154 phy1 wpan1: encryption failed: -22 [ 187.760071][ T6429] bcachefs (loop3): shutdown complete [ 188.036676][T11432] netlink: 'syz.0.1425': attribute type 10 has an invalid length. [ 188.039230][T11432] bond0: (slave wlan1): Opening slave failed [ 188.399964][T11446] loop4: detected capacity change from 0 to 40427 [ 188.402215][T11446] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 188.403781][T11446] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 188.406953][T11446] F2FS-fs (loop4): invalid crc value [ 188.414598][T11446] F2FS-fs (loop4): Found nat_bits in checkpoint [ 188.427554][T11446] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 188.429050][T11446] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 188.446334][T11433] loop1: detected capacity change from 0 to 32768 [ 188.778976][T11464] syz.4.1432: attempt to access beyond end of device [ 188.778976][T11464] loop4: rw=2049, sector=77824, nr_sectors = 520 limit=40427 [ 189.506032][T11482] vlan0: entered promiscuous mode [ 189.524364][T11482] team0: Port device vlan0 added [ 189.976703][T11433] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,erasure_code,degraded,no_splitbrain_check,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,nocow [ 189.987988][T11433] bcachefs (loop1): recovering from clean shutdown, journal seq 10 [ 190.004247][T11433] bcachefs (loop1): Version upgrade required: [ 190.004247][T11433] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 190.004247][T11433] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.13: inode_has_child_snapshots [ 190.004247][T11433] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 190.039115][T11495] loop4: detected capacity change from 0 to 40427 [ 190.041930][T11495] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 190.043547][T11495] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 190.051682][T11495] F2FS-fs (loop4): invalid crc value [ 190.053492][T11433] bcachefs (loop1): dropping and reconstructing all alloc info [ 190.068602][T11433] bcachefs (loop1): check_topology... done [ 190.069900][T11433] bcachefs (loop1): accounting_read... [ 190.079453][T11495] F2FS-fs (loop4): Found nat_bits in checkpoint [ 190.105603][T11495] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 190.107175][T11495] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 190.198285][T11433] done [ 190.198918][T11433] bcachefs (loop1): alloc_read... done [ 190.204866][T11433] bcachefs (loop1): stripes_read... done [ 190.210349][T11433] bcachefs (loop1): snapshots_read... done [ 190.216200][T11433] bcachefs (loop1): check_allocations... done [ 190.237780][T11433] bcachefs (loop1): going read-write [ 190.252614][T11433] bcachefs (loop1): done starting filesystem [ 190.278802][T11520] netlink: 'syz.0.1454': attribute type 9 has an invalid length. [ 190.280733][T11520] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1454'. [ 190.426302][T11522] syz.4.1448: attempt to access beyond end of device [ 190.426302][T11522] loop4: rw=2049, sector=77824, nr_sectors = 520 limit=40427 [ 190.826374][ T6426] bcachefs (loop1): shutting down [ 190.827549][ T6426] bcachefs (loop1): going read-only [ 190.828666][ T6426] bcachefs (loop1): finished waiting for writes to stop [ 190.846187][T11520] netlink: 'syz.0.1454': attribute type 9 has an invalid length. [ 190.860642][T11520] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1454'. [ 190.892218][ T6426] bcachefs (loop1): flushing journal and stopping allocators, journal seq 12 [ 190.975444][ T462] bcachefs (loop1): bch2_write_super(): fatal error loop1: Superblock write was silently dropped! (seq 0 expected 54) [ 190.989906][ T462] bcachefs (loop1): fatal error - emergency read only [ 190.993285][ T6426] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 14 [ 191.004676][ T6426] bcachefs (loop1): unshutdown complete, journal seq 14 [ 191.006627][ T6426] bcachefs (loop1): done going read-only, filesystem not clean [ 191.019187][ T6426] bcachefs (loop1): shutdown complete [ 191.309952][T11549] netlink: 204 bytes leftover after parsing attributes in process `syz.3.1466'. [ 191.534073][T11552] loop4: detected capacity change from 0 to 40427 [ 191.538341][T11552] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 191.539890][T11552] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 191.542870][T11552] F2FS-fs (loop4): invalid crc value [ 191.574158][T11561] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1471'. [ 191.601283][T11552] F2FS-fs (loop4): Found nat_bits in checkpoint [ 191.642407][T11552] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 191.643947][T11552] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 191.837805][T11578] bridge0: port 3(gretap0) entered blocking state [ 191.838822][T11580] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1478'. [ 191.841138][T11578] bridge0: port 3(gretap0) entered disabled state [ 191.841291][T11578] gretap0: entered allmulticast mode [ 191.850774][T11578] gretap0: entered promiscuous mode [ 191.852242][T11578] bridge0: port 3(gretap0) entered blocking state [ 191.853633][T11578] bridge0: port 3(gretap0) entered forwarding state [ 191.860625][T11578] gretap0: left allmulticast mode [ 191.861914][T11578] gretap0: left promiscuous mode [ 191.863012][T11578] bridge0: port 3(gretap0) entered disabled state [ 193.556163][T11599] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1482'. [ 193.734584][T11609] bridge0: port 3(gretap0) entered blocking state [ 193.735995][T11609] bridge0: port 3(gretap0) entered disabled state [ 193.737528][T11609] gretap0: entered allmulticast mode [ 193.739584][T11609] gretap0: entered promiscuous mode [ 193.750297][T11609] bridge0: port 3(gretap0) entered blocking state [ 193.751734][T11609] bridge0: port 3(gretap0) entered forwarding state [ 193.762619][T11609] gretap0: left allmulticast mode [ 193.763650][T11609] gretap0: left promiscuous mode [ 193.764835][T11609] bridge0: port 3(gretap0) entered disabled state [ 193.914164][T11616] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1493'. [ 193.962127][T11616] [ 193.962692][T11616] ============================================ [ 193.963949][T11616] WARNING: possible recursive locking detected [ 193.965338][T11616] 6.12.0-rc4-syzkaller-g7678c1b2735a #0 Not tainted [ 193.966856][T11616] -------------------------------------------- [ 193.968188][T11616] syz.0.1493/11616 is trying to acquire lock: [ 193.969528][T11616] ffff0000ec758d40 (team->team_lock_key#3){+.+.}-{3:3}, at: team_port_change_check+0x5c/0x228 [ 193.971693][T11616] [ 193.971693][T11616] but task is already holding lock: [ 193.973275][T11616] ffff0000ec758d40 (team->team_lock_key#3){+.+.}-{3:3}, at: team_add_slave+0xa4/0x236c [ 193.975451][T11616] [ 193.975451][T11616] other info that might help us debug this: [ 193.977143][T11616] Possible unsafe locking scenario: [ 193.977143][T11616] [ 193.978785][T11616] CPU0 [ 193.979458][T11616] ---- [ 193.980087][T11616] lock(team->team_lock_key#3); [ 193.981181][T11616] lock(team->team_lock_key#3); [ 193.982263][T11616] [ 193.982263][T11616] *** DEADLOCK *** [ 193.982263][T11616] [ 193.984017][T11616] May be due to missing lock nesting notation [ 193.984017][T11616] [ 193.985937][T11616] 2 locks held by syz.0.1493/11616: [ 193.987046][T11616] #0: ffff8000927131a8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x5e8/0xa9c [ 193.989184][T11616] #1: ffff0000ec758d40 (team->team_lock_key#3){+.+.}-{3:3}, at: team_add_slave+0xa4/0x236c [ 193.991273][T11616] [ 193.991273][T11616] stack backtrace: [ 193.992531][T11616] CPU: 1 UID: 0 PID: 11616 Comm: syz.0.1493 Not tainted 6.12.0-rc4-syzkaller-g7678c1b2735a #0 [ 193.994699][T11616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 193.996894][T11616] Call trace: [ 193.997672][T11616] show_stack+0x2c/0x3c (C) [ 193.998645][T11616] dump_stack_lvl+0xe4/0x150 [ 193.999714][T11616] dump_stack+0x1c/0x28 [ 194.000539][T11616] print_deadlock_bug+0x4e8/0x668 [ 194.001598][T11616] __lock_acquire+0x6180/0x77c8 [ 194.002684][T11616] lock_acquire+0x240/0x728 [ 194.003689][T11616] __mutex_lock_common+0x190/0x21a0 [ 194.004862][T11616] mutex_lock_nested+0x2c/0x38 [ 194.005828][T11616] team_port_change_check+0x5c/0x228 [ 194.006924][T11616] team_device_event+0x430/0x4d4 [ 194.007886][T11616] notifier_call_chain+0x1b4/0x538 [ 194.008981][T11616] raw_notifier_call_chain+0x3c/0x50 [ 194.010159][T11616] __dev_notify_flags+0x2c4/0x550 [ 194.011167][T11616] dev_change_flags+0xd0/0x15c [ 194.012217][T11616] vlan_device_event+0x3f4/0x1814 [ 194.013284][T11616] notifier_call_chain+0x1b4/0x538 [ 194.014304][T11616] raw_notifier_call_chain+0x3c/0x50 [ 194.015371][T11616] dev_open+0x1b0/0x248 [ 194.016236][T11616] team_add_slave+0x7b0/0x236c [ 194.017223][T11616] do_setlink+0xc30/0x3778 [ 194.018291][T11616] rtnl_newlink+0x14c4/0x1bd0 [ 194.019256][T11616] rtnetlink_rcv_msg+0x630/0xa9c [ 194.020332][T11616] netlink_rcv_skb+0x214/0x3c4 [ 194.021348][T11616] rtnetlink_rcv+0x28/0x38 [ 194.022453][T11616] netlink_unicast+0x668/0x8a4 [ 194.023430][T11616] netlink_sendmsg+0x7a4/0xa8c [ 194.024526][T11616] ____sys_sendmsg+0x56c/0x840 [ 194.025568][T11616] __sys_sendmsg+0x26c/0x33c [ 194.026535][T11616] __arm64_sys_sendmsg+0x80/0x94 [ 194.027577][T11616] invoke_syscall+0x98/0x2b8 [ 194.028426][T11616] el0_svc_common+0x130/0x23c [ 194.029382][T11616] do_el0_svc+0x48/0x58 [ 194.030217][T11616] el0_svc+0x54/0x168 [ 194.031084][T11616] el0t_64_sync_handler+0x84/0x108 [ 194.032172][T11616] el0t_64_sync+0x198/0x19c