last executing test programs: 2.420614473s ago: executing program 2 (id=719): syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, 0xfffffffffffffffe) 2.391086395s ago: executing program 2 (id=721): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x22827) ioctl$SNDRV_PCM_IOCTL_FORWARD(r0, 0x40084149, 0xfffffffffffffffe) 2.319055382s ago: executing program 2 (id=722): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth1_vlan\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "00000000000f00000001f1000e00"}}}]}, 0x48}}, 0x0) 2.245843342s ago: executing program 2 (id=723): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000010c0)={0x3c, r1, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00'}]}]}, 0x3c}}, 0x4004) 2.185653763s ago: executing program 2 (id=728): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000001180)=ANY=[], 0x1, 0x17c, &(0x7f0000000380)="$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") prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) 1.317583631s ago: executing program 2 (id=759): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c00000015000103000000000000e7ff0b00000008000100", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) 926.517881ms ago: executing program 3 (id=776): syz_mount_image$f2fs(&(0x7f0000000380), &(0x7f0000000400)='./bus\x00', 0xa18008, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x1, 0x5505, &(0x7f00000079c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.swap.current\x00', 0x275a, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x800c6613, 0x0) 836.257703ms ago: executing program 0 (id=781): unshare(0x26020480) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r0, &(0x7f0000000000)={0x10, @short={0x2, 0x3, 0xffff}}, 0x14) 798.425762ms ago: executing program 0 (id=783): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x100}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00004bd000/0x3000)=nil, 0x3011}}) 698.798656ms ago: executing program 1 (id=786): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x308, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x390, 0xffffffff, 0xffffffff, 0x390, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x2f, 0x0, 0x3}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'nicvf0\x00', {0x3f66}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, [0xffffffff], [], 'wg1\x00', 'gre0\x00', {}, {0xff}}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x563e4515, 0x0, 0x7, 0x3fc, 0x20}}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x2, 0x5, {0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x368) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0x22, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc8180ca8395ccfda2e499b3dcf581", 0x0, 0xa1b, 0x0, 0x2f, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50) 692.575465ms ago: executing program 0 (id=796): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 665.700817ms ago: executing program 1 (id=787): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$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") socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89f3, &(0x7f0000000900)={'ip6gre0\x00', @random="0600002000"}) 590.654075ms ago: executing program 3 (id=788): r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001040)=""/4079, 0xfef}, {&(0x7f0000000440)=""/74, 0x4a}, {&(0x7f0000002040)=""/4080, 0xff0}, {&(0x7f0000000840)=""/243, 0xf3}, {&(0x7f0000000c80)=""/174, 0xae}], 0x5}, 0x0) sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000fc0)="5c00000012006bab9a3fe3d86e17aa0a046b4877c4aaf68187bae53dca2ba35bda6a876c1d0048007ea608649e7524765f0ef82e3c0000a705259a3651f60a84c9f4d4938037e70e4509c5bb00000000e513aeac9bf2bee150d5fe86", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000) 589.621055ms ago: executing program 0 (id=789): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) 547.807649ms ago: executing program 0 (id=791): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x6101}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x305) 507.07795ms ago: executing program 1 (id=792): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r1, @ANYBLOB="0800a0009e09000008009f000400000008002600800900000800a10005"], 0x3c}}, 0x0) 455.12389ms ago: executing program 0 (id=793): r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) fchdir(r0) exit(0x0) getcwd(0x0, 0x0) 429.06234ms ago: executing program 3 (id=794): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000100)={r1, 0x2}, &(0x7f0000000140)=0x8) 347.285261ms ago: executing program 1 (id=795): r0 = syz_mount_image$btrfs(&(0x7f0000000200), &(0x7f0000005600)='./file0\x00', 0x800, &(0x7f0000000040), 0x0, 0x559e, &(0x7f0000005680)="$eJzs3X9sVeX9B/BzWwoN+C39jhUYfxAgBoMkyJYtjqB4MQa24eKlgsKcCEQlBivYRDcYqUWSZcaghU4EF5GQaDJjscM/FMywy7CMZfzY5hZjs4JSaZZsAzVrHDG69N77XO49l9tembNOXy/SnvPcz3me+9yT88d9X/qcGwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAURUcSc9+d0f3i0ZE1X77/Hz+e+OjGn4zfvX/roVvu23T/gjMjbto5a1nf+mlN8zdsbDjS/PS+ObdGUSLdL5Htf9u136q/88bbvlsdBly+MLOtrS31lJmuJzON4QUP9vcr/FkRRVFVbIDK7PbV7E5FwQC53cbiAQf0Tuui6O7J8ya1dT01bklyYU/xS6df9VBPYKhkr6ue89dSMv27InZErp136SUKLtFM//gF96m8CADgY5mZSm9yb0ezb3Fz7eZ4PdZOxtotsXZ4h9CS37gYmXGHl5rnpHh9iOaZzESFESXnGatnz3+unYr3j7VjUeNjzLPw0GykqS41z7Wx+lDNEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCzZOzxo2tWtD2y575fdtQceff9OVc+8KWOw22LT4y8eunKHWum/HTWsr7105rmb9jYcKT56X1zbo2i2nS/RKZ74kTL5b9NjZ3fvXfcG427n6vpq8yOG7bD8g6OXg87s0ZH0cq8Sk8Y9q81UZQqLKSb0Y7iwl3pnW+HAgAAAJ8nX0n/rsi1M3GwqqCdSKfJRPpfkAmL77Quiu6ePG9SW9dT45YkF/Zc/HipEuMlLzherl17/ieRF4xD/I2Pd74eDm0sGmdg8RHjef7SMWPefmty/eSvT5v7xA3PjOru+r8nZ2xJ/bGu5oUrru+tf/a6ovxfO3D+D2dO/gcAAOA/If/HxxnYYPn/jqVTt7z+i2Grft3a8MTB+h1/bv3OMzsXneq54Ud9L09N3v7o1UX5f1LBUxbl/zDjkP8roovL/wAAAPBZ9t/O/8micQY2WP5vONM3+wcHX6vr+PucxXt+9dAVi8+e/tv8U7t3DV9zR8v6uoeuLMr/M8vL/8Pypx0e/F2Y8OrRUTSz/JMKAAAAFAj/737+o4WQ1zOfHMTz+rX/vKp5380ffPMbD97zpzff/s2xA7MnrdteN/PgyzfVf1j5ve3dRfk/WV7+r/p0Xi4AAABQhuePrpw773jPucfPvtB18vDu3pMznjyzrqnvdOslLatXbTr2WlH+T5WX/0cMzcsBAAAALuDeO59bsfnVl/oe2H/X2Ck9FVc1XpK4ZduOqU0TPuq8tPfy7VuL8v/y8vL/yOw2u/Ih06kz/BVC6+goqu7fWZspHIparskVAAAAgE9IyOlbP1ixbOzOsb3jj59+rObQG4dn/2Vt55yN13RXdW/uXNZ4WdH9AkJiL3X//3Cng7D+v+D+f0Xr//MKmbv+zXZjAAAAAL6Iitfzh9vjZ765oNT375e7/n9J3cQTiba33lv11XMHzo1ZsP/7129aV9/be8+El37/wz9M/6i6KP83l5f/K/O3n+T3/wEAAMBF+F/7/r+lReMMbLD7/zdV9DWsWrd3+uota7csTCw7UH3qwdV731+w5l9Tb36+qea6A0X5v6W8/B+2o/JfXkc4P5tGR9H4/p3s3QR/Hqa7OlZor8orZE58rMeNoUe20D4ir5C2Ntbja6OjaHL/TnOs8P+h0BIrnK3JFnbFCsdCIXs95Ap7YoWOcKVtq8lON154MRSyCyzawwqKUbklEbEe75Xq0V+4YI+u3JMDAAB8oYTwnM2yVYXNKB5l2xODHTBysAMqBjugcrADhsUOiB9Y6vFoeWEhPH575yMbNjVMSb7y8NzHfvbms40T9j1+WV3v5g9f2XbvxJ3TW6YW5f9d5eX/cCqGZzal1v9HYf1/9nsNc+v/l4dCbazQHgqp+B0DUuE5MmH34fActalsj7PjcwUAAAD4XAufC1QO8TwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/s3evcdJVd0JAj/d9INumqaNE9GMk3TUgGakaWwNw+AoaoxGRZpZddxkNBBoEGmE8FgFURtQZxziZ3ztrJnoCAoiu+qHGFeDwUhcxIw6iWLiA/Cxjq7r+h6VGM2E/XTfOkXVrS67EFDa+X7/6DpVv/O89eg69946FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/xjuPfjlk4YunP0PHzace8nqqqmL/kfH6Mv+cNW3vvjUPy5b9G9h/i9GnLll3kEXHjd/wbR/6Vi++ogzQmjtKleWFC977oqvPtS613HP3jFw48wbb63fUpWpNxMP/Tr/lGfuXBxbfbF/CHeXhVCRDgypSwKVmft1sb5960LYI2wLZEu01SYl0g2HB2pCWBK2BbJVra4JoS4ncMqG+++7vDNxTU0IXwkhVKfbeKY6aaMmHRhUlQRq04HpFUngt1sT2cBPypMA7LD4Zsi+6Fe15mdo6L5ckddf5U7r2KcrPbw+MdFQPN/rR+3iTuWoSj/QukNPW0F17BIFb4+13m294N1WsJ2v8LTlfpHKfEPZui1UHcontk0aP6d9dnykPDQ19SlW0y56np9+e/6E7Un3mtdh7EDDTnkdXvrYiun9lo2+9OrNvxqz4ayaA3a0m0/lbNLc9K5WHTKvuV7zPEajfJ70grdfwbekRl+6Qghbzz17xtfnTDz7iD63PLnu1QcfrNty9pwFvzhz4nmLLj55w7/Pf6lg/t/w0fP/+HKOt+V5uWOrH9Ync/P4SF1MvFmfzM0BAACg1+gNe01Xnv/6X73+/bWtMxed/u23Dj73w71afz3i/gFVB7yxrqn1/I2ff6Vg/t9Y2vH/eMi/Lne0a0MY1ZVYNCCEvbseTwIrY3e+OyCEL3elWvMDR6UCa0PYpytxULaqVIm+sURjKvByfSYwKhVYHwOtqcDyGLgiFbg4BlalAhNiYG0qcHQMhCn54/hqfWYcJQdqYmBcshFXxbMQ3qmPraW21aZsVQAAADtJZnZYmX8351yHHc0Qp5eranrKEM/ALpqhOlVDegabnVYVraGipxrKe6ohO+6Ojx5+Qc1lPdVccBpGWX6GG9f85X2LXjzsC2P3mvj5xUMvmPKz8eGst++uerx5yYtv7XvEzesK5v/NHz3/r+6mI2UFx/9DGNv1N+Yuz0Tas/FxrXkZAAAAgB1w0R//xR61Lw85oGHT+2X3zl/7xKMrfrl5j1NOf3/c8a//8PCaxnsL5v+jSjv/P+4T6ZOTOTwSd0NMHRBCc34gqXZkYSA56t0vEwAAAIDeIHs8PnssfErmNjlFOz2fLszfup3544H/Ud3m//09/7P2jq3/+mLZBd89d0TNgKX/9GrHhBNOPvqW47/1zj4VB/yyvGD+31ra+f+1+bdJJ9bHXlw9IIS+OYEHYy87A10aY+D5I/MDmfGvjxtgcawqc2JCtqrFscS4GGhOBZYUK/FotsTe+YHMk5VtfFF2HFMyJXICAAAA8ImLuwPicfl4/n/LGSNO++vvzfrbha88eN7qCy75q+Ed80eedP/THzbMvXJp2PTmEQXz/3Hbd/5/1zy44PT+9n4hDK0IoU/6hwGP1CYLA8ZAXVkmcW9tUlefdFULa0MY2TmwdFUvZNb/r0ivMfh4TVJVDOy93y1vD+pMLKsJYWhu4IlvLz2sMzEnFcg2flpNCF/qHG268bv6Jo1Xphu/tm8IX8wJZKua0DeEzsaq0lX9r+rMdQzSVa2qDmHPnEC2quHVIcwNAPRW8X/pxNwHZ82dN3V8e3vbzF2YiDvxa8KkKe1tTROmt0+sLtKniak+561jtKBwTKVe+mZTZo2ixSsnV5aSzv5QsDm3rcyO/IIzBzP345ehyq5xHlKZd7clPeQD9y9sIuR8lSo25PJdPOTa3Eq2PYkF9cf8VaFf6DtnVtvMpvPGz549c1jyt9TshyR/43GmZFsNS2+r2u76VsLLo+hyWSkfd1sNyq1k6OxpM4bOmjtvyJRp4ye3TW47p+XQP2sZMXz410YM7RxUc/K3h5EO6q7m1Ei3Li1xWDtxpF+oyKnkk/jQkJCQ6G2J/f7L5odH77n+nOt/9tqPz+/3zdPu3fvImT889KqpD1Xve/ji24ccWDD/n/HR8//4qRM/+DPrMxQ7/t8QD/Mnj287zD8uBpaUevy/odjR/OyJAY2pQEcMdDjMDwAAwGdD3B0Z92bGndKbb1m/buOSlrk/aHin5dY17Utvuum+U39y58ATvjQ47LXhuhM+VzD/7yjt9/87af3/7NL1JxRb5v+gWKK52Pr/6WX+s+v/dxRb/z+9zH92/f8ln8L6/3OygdQmecf6/wAAwGfBJ7f+f4/L+6cvEFCQocfl/dMXCCjI0OMy/qVeIGC71/9f8+Bff6Wq35g7/qTlN/WXvPZ39xzWeuS6zTP/5Etb10+877qxt6wpmP9fUdr838L9AAAAsPv4z5ddU3H02Xff0bJu6sZxbw5+98m3lgzq80HF0Q+3j3xh4Bu3nlcw/19S2vz/k1//LxQ7/7+xWKC12MKA1v8DAACglyq2/t89Q1sa/zCm/x+eHvab5Q/ePPqnj/z898v3+/mJPyvfZ8Gxz8+8bFLB/H9VafP/eNpFeV7u2JsP65M17UJ6Tbs367M/GQAAAIDeoTw0NVWWmDdvYdSjPn6bT2eWAv2odK7vvXLt2ZtfmH7c46ev+7uaEwbvOWHaBasa/2b4gXd+ftQley7ddGrB/H9tafP/vN9lXPrYiun9lo2+9MOrN/9qzIazag7YdvwfAAAA2HVK3S8BAAAAAAAAAAAAAAB8+s7tWHzhI8uOfe+bt//F/kcseXXwbXcd+Lsh/V664qoHJq1648zJXy/4/X8Y21Wu2O//43X/4u8L/igvd2y15/X/MvdPOfH2uV1LFj5SH8L+uYGpC6fuETLX5h+cG7jvjIMGdiYWpkusefbolzoT30kHjh/yuS2dicNTgXFxkcR90oF4VcUt/VOBuLzi4+lA3B6r0oGqTOCy/sk4ytLb6pW6ZFuVpbfVxroQBuQEstvq7rqkjbL0AK9JBbID/F46EAd4ciZQnu7V7f2SXsVAXSx6Q7+kVwAA7Lbit8DKMGlKe1tz/Aofb79QkX8b5S1ZtqCw2rISm9+UWZps8crJlaWk+6S/i2671nhlqO4cwrCCr6u5Wcq6Rrlzaulh0/1RkSH3tNpbeZFyadu76aqKj6gmGVHThOntEyt7HHhLz1kOqegxy7CCyU5ulvKuTVpCLSX0pYQRlbhtSuhyvF8empr6pHL9eQw2hDw9vSJK/b1+7jp/xV4FuXluO/TKt758zE+f++CfP/9E/2+cVnP7rO+/e+KvX7//wEOOuG5C05otBfP/htLm/9W549qSuRhAR7yy3sgBIYwrcUQAAADw2XfbRbfecfr09a9MWlvx5GOPTS0fc3rl1vl3zp93ycZ7Fx9/2cErdjR+2Fm//f5vBu//b89e9dJPR+7zwA03/58nD3v8z3//8I8eeqduZZ+x7xXM/xtLm//HPViZQ8HJ3o618fr/iwaE0HVp/YYksDIO97sDQvhyV6o1lkguqH9CLNGcBFbGHSYHxRLjWvOr6hsDq1KBl+szgbWpwPoYyOyluCVkduVcWR/CYV2psfklZsQSDanAmBhoTAWaYqA5FegfA6NSgdf6ZwKtqcDDMRCm5G+rH/fPbCsAAIDtkZlnVebfDel53qqKnjKU9ZShtqcM5T1lqO4pQ7FRxPt3xAyVqZNXynIyVaZrrUnVUpAhXgx/u/tVkCE8mp8zXbCg6Xj+QfZ8g7L8DFf+4NlT1w+e/tDqzcd8beBt/zhkz4Obp9e9t+CGp3475pzrnv/TQQXz/+bS5v+1+bdJ6+vj/H/b9f+SwIOxe1fHU8cbY+D5I/MDmR0D6+Nkd3G2qtZMicykfXEsMSoGGlOBGTEwKhUYNzYTWDIwP5CZaWcbX5RtfEqmRE4AAAAAPnFxB0HcTRPn/zce9YOr3x8wccuyeTPvH9vyxMmjv3H1XT+6d/9ld767YvCAce99p2D+P6q0+X9sr19uYxfH3rzYP4S7y7b1JhsYUpcE4n6Muvjz+H3rQtgjZwdHtkRbbVKiKtVweKAm+YV6Vbqq1TXJGgPx/ikb7r/v8s7ENTUhfCVn70u2jWeqkzZq0oFBVUmgNh2YXpEE4p6fbOAn5UkAdlh2r2B8QWVOdclq6L5ckdffZ+WaoOnhFewD7SZfd7+52lWq0w9k9qlmbd/TVlAdu0TB22Otd1tvfLc1eLflfpHKfEPZui1UHcontk0aP6d9dnwk95esBXbR85z7K9VS0jvhddjx8Xvbs+p0B5pTHx/N3Zfr/nVYFqu79LEV0/stG33p1Zt/NWbDWTUHlNyNIuIPhX+05X9XPpWzeXe16pB5zfW6z5NWnye98d9Ao6cthHDZ9cfsu+TdX+/33A3Pnbqu7Maxr/7lrHs2Lf+bysNHrXv/yaGjLy+Y/7eWNv+vSN12+V3cmLMGhHBgzsZ9JG7+YwYkn4M5geRTcs/CQHLI/V/ri35yAgAAwM6W3d2R3V8wJXObnBCenicX5m/dzvxxf8WobvOX2u9j121cedLQN6474G8vOPGNv7/28Kceuv6ysnXL//vYD1avuXzxe08UzP/HffT8v2+qm47/O/7PLuL4f7d2913RfdMPdOzQruiC6tglHP/v1u7+bnP8v1uO/zv+3x3H/3vg+H+3dvenreBb0gxfujonwdff+fPfTbzpg7mN+x180lPPHDrxun+6quXuu0555b+de9601761uWD+P6O0+b/1/7pftC+7/t+4Yuv/zSi2/l+H9f8AAIBdqshCc+l5XsHqfQUZ0qv3FWTocYHAHpcYtP7fdq//t3Dkv1904Q+fb7n2nTvHXb5m07Fnvvr0utXPzFpx3Lnnv9V6112tBfP/jtLm//Hl0C+39d6y/l/j2CJVXREDMywMCAAAwO6o2A4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPl2HnvbO+5d8/R/aBv1ixc1/f+v/+7/P1q594JvfuGn4L6f86RllazZcM+LMLfMOuvC4+Qum/UvH8tVHnBHClK5yZUnxsueu+OpDrXsd9+wdAzfOvPHW+i3VmXorM7d/nJc7tvphfQhLch6pi4k36zvvbAuccuLtcys6E4/Uh7B/bmDqwql7dCaW14cwODdw3xkHDexMLEyXWPPs0S91Jr6TDhw/5HNbOhOHZwJl6e5e1z/pblm6u5f3D2FATiDb3bP751eVbeO4TKA83caKuqSNGKiLRa+tS9qIgfZYYkrfEIZWhNAnXdU/VydV9UlXdU91UlWfdFUXVYcwMoRQka7quaqkqor0yB+tSqqKgb33u+XtQZ2JpVUhDM0NPPHtpYd1JmamAtnG/1NVCF/qfMmkG/9xZdJ4Zbrx/1oZwhdDCFXpEu9VJCWq0iVeqAhhz5zAto1YEcLcwGdD/PSZmPvgrLnzpo5vb2+buQsTVZm2asKkKe1tTROmt0+sTvWpmLKc9NYFH3/sm96eP6HzdvHKyZWlpCsy5Sq7unxIZd7dlt2997FftbmVbHs+CuqP+atCv9B3zqy2mU3njZ89e+aw5G+p2Q9J/vbJRJNtNay3bKtBuZUMnT1txtBZc+cNmTJt/OS2yW3ntBz6Zy0jhg//2oihnYNqTv7ujJEu/eRH+oWKnEo+ife/hIREb0uU5326Ne/un+MFX/S3dbQyVHd9QBdMK3KzlHWNcmcM+qiPOeKP8zWlxxENK5g4FGQ5pOcsLQWTiW1ZapIsXV/rCiaHuTWVd23SeL88NDX1KbYdGvLv5m7e13dg8z6d2XSlpgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+P/swIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCwAAAAAIMzfOoyeDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4FAAA//8fSxmR") setreuid(0xffffffffffffffff, 0xee01) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, 0x0) 347.082583ms ago: executing program 3 (id=797): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x14, r1, 0x1, 0x70bd2a, 0x234}, 0x14}}, 0x40) 318.085192ms ago: executing program 3 (id=799): r0 = socket$kcm(0x2, 0x3, 0x84) r1 = openat$smackfs_netlabel(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$smackfs_netlabel(r1, &(0x7f0000000000)=ANY=[@ANYBLOB='-0000000000000062410.00000000000000000003.00000000000800028916.000/0)'], 0x6f) sendmsg$inet(r0, &(0x7f00000009c0)={&(0x7f0000000240)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x58}, 0x0) 258.52172ms ago: executing program 4 (id=800): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)=@rxrpc=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e22, @multicast2}}, 0x80, 0x0}, 0x4000000) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="d800000010008104090008007143a0f8c81ded0b25000000e8fe09a11800150006001410000000120800030043000040a8002b000a", 0x35}], 0x1}, 0x20000880) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) 231.521474ms ago: executing program 3 (id=801): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xd40, 0xd2) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) listen(r1, 0x4) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x200000, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 106.029618ms ago: executing program 4 (id=802): r0 = io_uring_setup(0xf0c, &(0x7f000000c480)={0x0, 0xc46e, 0x400, 0x3, 0x3}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)=""/187, 0xcc}], 0x35) r1 = io_uring_setup(0x6f9e, &(0x7f0000000600)={0x0, 0x1e28, 0x0, 0x3, 0x28b}) io_uring_register$IORING_REGISTER_FILES(r1, 0x1e, &(0x7f0000000000)=[r0], 0x1) 105.842694ms ago: executing program 4 (id=803): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x810c90, &(0x7f0000000140)=ANY=[@ANYBLOB='iocharset=maciceland,utf8,errors=continue,utf8,uid=', @ANYRESHEX=0x0, @ANYBLOB=',utf8,iocharset=mk=00000000000000000000000,iocharset=iso8859-3,errors=continue,\x00'/92], 0x1, 0x1520, &(0x7f0000000440)="$eJzs3AucTtX6OPDnWWvtMSbpbZLLsNZ6Nm9yWSZJIklySZIkSXJLSJrkSEJiyC1pSJLkMiSXISSXaUwa9/tdEpKkSZKQ3JL1/wh/p1Pndzq/0zl+nzPP9/PZn1nPu/ez9trv8+733Xu9M/Ntl6E1G9eq1pCI4F+C538kA0AsAAwEgKsAIACA8vHl48+tzy0x+V/bCftzPZh2uUfALieuf87G9c/ZuP45G9c/Z+P652xc/5yN65+zcf0Zy8k2Tit0NS85d+H5/5yMP///i2SXGfPl6jLXdgWI+aMpXP+cjev/Xyv4Ixtx/XM2rn9OFXu5B8D+D+DzPyfI9XfXcP1zNq4/YznZv3+OWbnLPcf9Py0QydnfgVzu1x9jjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMsZzhpL9EAcDF9uUeF2OMMcYYY4wxxv48PtflHgFjjDHGGGOMMcb+/RAESFAQQAzkgljIDXEgAOBKyAtXQQSuhni4BvLBtZAfCkBBKAQJUBiKgAYDFghCKArFIArXQXG4HkpASSgFpcFBGUiEG6As3Ajl4CYoDzdDBbgFKkIluBUqw21QBW6HqnAHVIM7oTrUgJpQC+6C2nA31IF7oC7cC/XgPqgP90MDeAAawoPQCB6CxvAwNIFHoCk0g+bQAlr+r/Kfhx7wAvSEXpAMvaEPvAh9oR/0hwEwEF6CQfAyDIZXIAWGwFB4FYbBazAcXocR8AaMhDdhFLwFo2EMjIVxkArjYQK8DRPhHZgEk2EKTIU0mAbT4V2YATNhFrwHs+F9mANzYR7Mh3T4ADJgAWTCh7AQPoIsWASLYQkshWWwHFbASlgFq2ENrIV1sB42wEbYBJthC2yFj2EbfALb4VPYATthF3wGu+HzfzL/xN/kd0VAQIECFSqMwRiMxViMwzjMg3kwL+bFCEYwHuMxH+bD/JgfC2JBTMAELIJF0KBByk1YFItiFKNYHItjCSyBpbAUOnSYiIlYFm/EclgOy2N5rIAVsCJWwkpYGStjFayCVbEqVsNqWB2rY02siXfhXdgb62AdrIt1sR7Wuzg9hQ2xITbCRtgYG2MTbIJNsSk2x+bYEltiK2yFrbE1tsW22A7bYXtsj0mYhB2wA3bEjtgJO2Fn7IxdsAt2xW7YLfv5XIAv4AvYC6uL3tgH+2BfTMnVHwfgAHwJB+HL+DK+gik4BIfiq/gqvobD8TiOwDdwJI7EKuItHI1jkMQ4TMVUnIATcCJOxEk4GSfjVEzDaTgdp+MMnIkz8T2cje/j+zgX5+J8TMd0zMAFmImZuBBPYBYuwsW4BJfiMlyKK3AlrsDVuAZX4zpchxtwA27CTbgFL56sCgA/xZ24E1NwN+7GPbgH9+Je3If7MBuzcT/uxwMW8CAexEN4CA/jETyKR/AYHsPjeAJPYr8LXT2b8HWjT0quSgFxjhJKxIgYEStiRZyIE3lEHpFX5BURERHxIl7kE/lEfpFfFBQFRYJIEEVEEWGEESTCGAAQUREVxUVxUUKUEKVEKeGEE4kiUZQVZUU5UU6UFzeLCuIWUVFUEm1cZVFZVBFtXVVxh6gmqonqooaoKWqJWqK2qC3qiDqirqgr6ol6or64XzQQvbE/PijOVaaxGIJNxFBsKpoJeeFIWonh2Fq0EW3F4+INHIHtRSuXJJ4SHcRo7Cj+IsbgM6KzGIddxHOiq+gmuovnRQ/R2vUUvcQk7C36iKnYV/QT/cUAMQNriPdwdu6a4hWRIoaIoeJVMR9fE8PF62JEbxAjxZtilHhLjBZjxFgxTqSK8WKCeFtMFO+ISWKymCKmijQxTUwX74oZYqaYJd4Ts8X7Yo6YK+aJ+SJdfCAyxAKRKT4UC8VHIkssEovFErFULBPLxQqRG1aJ1WKNWCvWifVig9goNonNYovYKj4W28QnYrv4VOwQO8Uu8ZnYLT4Xe8QXYq/4UuwTX4ls8bXYL74RB8S34qD4ThwS34vD4og4Kn4Qx8SP4rg4IU6KU+K0+EmcET+Ls8ILkCiFlFLJQMbIXDJW5pZx8gqZRwYXnt2rZby8RuaT18r8soAsKAvJBFlYFpFaGmklyVAWlcVkVF4ni8vrZQlZUpaSpaWTZWSivEGWlTfKcvImWV7eLCvIW2RFWUneKivL22QVebuEyPl9VJc1ZE1ZS94lk+FuWUfeI+vKe2U9eZ+sL++XDeQDsqF8UDaSD8nG8mHZRD4im8pmsrlsIVvKR2Ur+ZhsLdvItvJx2U4+IdvLJ2WSfEp2kP7CS+QZ2Vk+K7vI52RX2U12lz/Ls9LLnrKXhN4g+8gXZV/ZT/aXA+RA+ZIcJF+Wg+UrMkUOkUPlq3KYfE0Ol6/LEfINOVK+KUfJt+RoOUaOleNkqhwvJ8i35UT5jpwkJ8spcqpMk9Nk/ws9zZLyH+a//Tv5g3/Z+wa5UW6Sm+UWuVV+LLfJT+R2uV3ukDvkLrlL7pa75R65R+6Ve+U+uU9myzvkfrlfHpAH5EF5UB6Sh+RheUSekj/IY/JHeVyekCfkKXlanpZnLjwHoFAJJZVSgYpRuVSsyq3i1BUqj7pS5VVXqYi6WsWra1Q+da3KrwqogqqQSlCFVRGllVFWkQpVUVVMRdV1F9+jVClVWjlVRiWqG/6ZfFVcXa9KqJK/yr84vuS/M76WqqVqpVqp1qq1aqvaqnaqnWqv2qsklaQ6qA6qo+qoOqlOqrPqrLqoLqqr6qq6q+6qh+qheqqeKlklqz7qRdVX9VP91QA1UL2kBqlBarAarFJUihqqhqphapgaroarEWqEGqlGqlFqlBqtRquxaqxKValqgpqgJqqJapKapKaoKSpNpanparqaoWaoWWqWmq1mqzlqjpqn5ql0la4yVIbKVJlqoVqostQitUgtUUvUMrVMrVAr1Cq1Sq1Ra9Q6tU5lqY1qo9qsNqutaqvaprap7Wq72qF2qF1ql9qtdqs9ao/aq/aqfWqfylbZar/arw6oA+qgOqgOqUPqsDqsjqqj6pg6po6r4+qkOqlOq9PqjDqjzqqz5y77AhGIQAUqiAligtggNogL4oI8QZ4gb5A3iASRID6ID/IF1wb5gwJBwaBQkBAUDooEOjCBDcSFokeD64LiwfVBiaBkUCooHbigTJAY3BCUDW4MygU3BeWDm4MKwS1BxaBScGtQObgtqBLcHlQN7giqBXcG1YMaQc2gVnBXUDu4O6gT3BPUDe4N6gX3BfWD+4MGwQNBw+DBoFHwUNA4eDhoEjwSNA2aBc2DFkHLP7V/748XeMz11L10su6t++gXdV/dT/fXA/RA/ZIepF/Wg/UrOkUP0UP1q3qYfk0P16/rEfoNPVK/qUfpt/RoPUaP1eN0qh6vJ+i39UT9jp6kJ+speqpO09P0dP2unqFn6ln6PT1bv6/n6Ll6np6v0/UHOkMv0Jn6Q71Qf6Sz9CK9WC/RS/UyvVyv0Cv1Kr1ar9Fr9Tq9Xm/QG/UmvVlv0Vv1x3qb/kRv15/qHXqn3qU/07v153qP/kLv1V/qfforna2/1vv1N/qA/lYf1N/pQ/p7fVgf0Uf1D/qY/lEf1yf0SX1Kn9Y/6TP6Z31W+3MX9+c+3o0yysSYGBNrYk2ciTN5TB6T1+Q1ERMx8Sbe5DP5TH6T3xQ0BU2CSTBFTBFzDhkyRU1REzVRU9wUNyVMCVPKlDLOOJNoEk1ZU9aUM+VMeVPeVDAVTEVT0dxqbjW3mdvM7eZ2c4e5w9xp7jQ1TA1Ty9QytU1tU8fUMXVNXVPP1DP1TX3TwDQwDU1D08g0Mo1NY9PENDFNTVPT3DQ3LU1L08q0Mq1Na9PWtDXtTDvT3rQ3SSbJdDAdTEfT0XQynUxn09l0MV1MV9PVdDfdTQ/Tw/Q0PU2ySTZ9TB/T1/Q1/U1/M9AMNIPMIDPYDDYpJsUMNUPNMDPMDDfDzQjzhhl57kLVvGVGmzFmrBlnUk2qmWAmmIlmoplkJpkpZopJM2lmupluZpgZZpaZZWab2WaOmWPmmXkm3aSbDJNhMk2mWWgWmiyTZRabxWapWWqWm+VmpVlpVpvVZi2sNevNerPRbDSbzWaz1Ww128w2s91sNzvMDrPL7DK7zW6zx+wxe81es8/sM9km2+w3+80Bc8AcNAfNIXPIHDaHzVFz1Bwzx8xxc9ycNCfNaVPgwuelN7E2t42zV9g89kqb115l/zYuaAvZBFvYFrHa5rcFfhUba20JW9KWsqWts2Vsor3hN3FFW8neaivb22wVe7ut+pu4tr3b1rH32Lr2XlvL3vWruJ69z9a3D9sGiAC2mW1kW9jG9mHbxD5im9pmtrltYdvZJ2x7+6RNsk/ZDvbp38QZdoFdaVfZ1XaN3WF32pP2lD1gv7Wn7U+2p+1lB9qX7CD7sh1sX7Epdshv4pH2TTvKvmVH2zF2rB33m3iKnWrT7DQ73b5rZ9iZv4nT7Qd2ts20c+xcO8/O/yXOsGgz7Yd2of3IZtkAFtsldqldZpfbFf9/rEvsOrvebrDb7ad2s91it9qP7baLF8J2p91lP7O77ed2v/3G7rVf2n32oM22X/8Snzu+g/Y7e8h+bw/bI/ao/cEesz+qi9nnjv0H+7M9a70FQgKSpCigGMpFsZSb4ugKykNXUl66iiJ0NcXTNZSPrqX8VIAKUiFKoMJUhDQZskQUUlEqRlG6ji4OrxSVJkdlKJFuoLJ0I5Wjm6g83UwV6BaqSJVyX9iMbqeqdAdVozupOtWgmlSL7qLadDfVoXuoLt1L9eg+qk/3UwN6gBrSg9SIHqLG9DA1oUeoKTWj5tSCWtKj1Ioeo9bUhtrS49SOnqD29CQl0VPUgZ6mjvQX6kTPUGd6lrrQc9SVulF3ep560AvUk3pRMvWmPvQi9aV+1J8G0EB6iQbRyzSYXqEUGkJD6VUaRq/RcHqdRtAbNJLepFH0Fo2mMTSWxlEqjacJ9DZNpHdoEk2mKTSV0mgaTad3aQbNpFn0Hs2m92kOzaV5NJ/S6QPKoAWUSR/SQvqIsmgRLaYltJSW0XJaQStpFa2mNbSW1tF62kAbaRNtpi20lT6mbfQJbadPaQftpF30Ge2mz2kPfUF76UvaR19RNn1N++kbOkDf0kH6zvei7+kwHaGj9AMdox/pOJ2gk3SKTtNPdIZ+prPkCUIMRShDFQZhTJgrjA1zh3HhFWGe8Mowb3hVGAmvDuPDa8J84bVh/rBAWDAsFCaEhcMioQ5NaEMKw7BoWCyMhteFxcPrwxJhybBUWDp0YZkwMbwhLBveGJYLbwrLhzeHFcJbwophpfDheyuHt4VVwtvDquEdYbXwzrB6WCOsGdYK7wprh3eHdcJ7wrrhvWG58L6wfnh/2CB8IGwYPhg2Ch8KG4cPh03CR8KmYbOwedgibBk+GrYKHwtbh23CtuHjYbvwibB9+GSYFD4Vdgif/mX9fQv+/vrksHfYJ3wxfDH0/h45Lzo/mh79IJoRXRDNjH4YXRj9KJoVXRRdHF0SXRpdFl0eXRFdGV0VXR1dE10bXRddH90Q9b5WLnDohJNOucDFuFwu1uV2ce4Kl8dd6fK6q1zEXe3i3TUun7vW5XcFXEFXyCW4wq6I084468iFrqgr5qLuOlfcXe9KuJKulCvtnCvjEl0L19K1dK3cY661a+Pausfd4+4J94R70j3pnnId3NOuo/uL6+SecZ3ds+5Z95zr6rq57u5518ONz3v+ZEt2fVwf19f1df1dfzfQDXSD3CA32A12KS7FDXVD3TA3zA13w90IN8KNdCPd3QpgtBvtxrqxLtWluglugpvoJrpJbpKb4qa4NJfmprvpboab4arMPL+XOW6Om+fmuXSX7jLcuWvGTLfQLXRZLsstdovdUrfULXfL3Uq30q12q91at9atd+vdRrfRbXab3Va31W1z29x2t93t8Fed79TtdnvcHrfX7XX73Fcu233t9rtv3AH3rTvovnOH3PfusDvijrof3DH3ozvuTriT7pQ77X5yZ9zP7qzzLjUyPjIh8nZkYuSdyKTI5MiUyNRIWmRaZHrk3ciMyMzIrMh7kdmR9yNzInMj8yLzI+mRDyIZkQWRzMiHkYWRjyJZkUWRxZElkaWRZRHvC28OfVFfzEf9db64v96X8CV9KV/aO1/GJ/obfFl/oy/nb/Ll/c2+gr/FV/SV/K3+Ed/UN/PNfQvf0j/qW/nHfGvfxrf1j/t2/gnf3j/pk/xTvoN/2nf0f/Gd/DO+s3/Wd/HP+a6+m+/un/c9/Au+p+/lk31v38e/6Pv6fr6/H+AH+pf8IP+yH+xf8Sl+iB/qX/XD/Gt+uH/dj/Bv+JExb/pRF2+RYZxP9eP9BP+2n+jf8ZP8ZD/FT/Vpfpqf7t/1M/xMP8u/52f79/0cP9fP8/N9uv/AZ/gFPtN/6Bf6j3yWX3RxUtkv9yv8Sr/Kr/Zr/Fq/zq/3G/xGv8lv9lv8Vv+x3+Y/8dv9p36H3+l3+c/8bv+53+O/8Hv9l36f/8pn+6/9fv+NP+C/9Qf9d/6Q/94f9kf8Uf+DP+Z/9Mf9CX/Sn/Kn/U/+jP/Zn+W/WWOMMcYY+0PGX2qKX685P53f+3dyxF9t3AcArtxSKPuv15+7olyb/3y7n0hoFwGAp3p1efDiUr16cnLyhW2zJATF5gJc/CbonBi4FC+CtvAEJEEbKPu74+8nup2mf9B/9GaAuL/KiYVL8aX+vwDA5N/p/9HHR2ZUCE/G/w/9zwUoUexSTm64FC+Ctr/Mr7SBcn9n/AVa/YPx5/4yFaD1X+XkgUvxpfEnwmPwNCT9akvGGGOMMcYYY+y8fuLWThfvPy/+xufv3Z8nqEs5ueBS/I/uzxljjDHGGGOMMXb5PdOt+5OPJiW16fTPN6r+r7L+cKMJ/Lt65sbvNrwHuPiIAoB/sUOAcw35nzyKTf+RfaVcOHX+dtXSUz6A/xul/DMal/mNiTHGGGOMMfanu3TR/+vH1eUaEGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxlgP9J/6d2OU+RsYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY+xy+38BAAD//3lG9tE=") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 105.675306ms ago: executing program 4 (id=804): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f0000000240), &(0x7f0000000280)=0x4) 68.716534ms ago: executing program 1 (id=805): r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r1, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001ec0)=@deltfilter={0x30, 0x2c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x0, 0xffff}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x0) 18.633376ms ago: executing program 1 (id=806): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000020601080000000000000000000000080c00078008000640200000000500010006000000050005000a00000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x50}}, 0x20040000) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x40000c4) 18.520782ms ago: executing program 4 (id=807): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007400000000b180006801400040020010000000000000000000000000001"], 0xac}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xac}}, 0x0) 0s ago: executing program 4 (id=808): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0xfffffffe, 0x6, 0x0, 0x0, "000038d4583b2e1e63a22300"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x80000000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.237' (ED25519) to the list of known hosts. [ 31.017190][ T6541] cgroup: Unknown subsys name 'net' [ 31.106159][ T6541] cgroup: Unknown subsys name 'cpuset' [ 31.108124][ T6541] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 31.265752][ T6541] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 33.770561][ T6555] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 33.772734][ T6555] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 33.775147][ T6555] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 33.777233][ T6555] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 33.780243][ T6558] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 33.781781][ T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 33.794744][ T6565] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 33.795190][ T6565] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 33.795662][ T6565] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 33.795914][ T6565] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 33.796645][ T6565] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 33.796848][ T6565] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 33.797250][ T6565] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 33.797423][ T6565] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 33.798847][ T6565] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 33.798890][ T6565] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 33.798928][ T6565] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 33.799118][ T6120] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 33.800847][ T6120] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 33.806049][ T6567] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 33.806782][ T6567] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 33.807066][ T6567] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 33.809045][ T6567] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 33.809241][ T6567] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 33.809763][ T6567] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 33.956624][ T6553] chnl_net:caif_netlink_parms(): no params data found [ 34.012890][ T6556] chnl_net:caif_netlink_parms(): no params data found [ 34.038137][ T6551] chnl_net:caif_netlink_parms(): no params data found [ 34.043736][ T6553] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.045151][ T6553] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.045235][ T6553] bridge_slave_0: entered allmulticast mode [ 34.045671][ T6553] bridge_slave_0: entered promiscuous mode [ 34.046772][ T6553] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.046795][ T6553] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.046840][ T6553] bridge_slave_1: entered allmulticast mode [ 34.047248][ T6553] bridge_slave_1: entered promiscuous mode [ 34.048958][ T6557] chnl_net:caif_netlink_parms(): no params data found [ 34.063157][ T6552] chnl_net:caif_netlink_parms(): no params data found [ 34.085951][ T6553] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.101377][ T6553] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.109010][ T6556] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.109101][ T6556] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.109156][ T6556] bridge_slave_0: entered allmulticast mode [ 34.109556][ T6556] bridge_slave_0: entered promiscuous mode [ 34.110236][ T6556] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.110254][ T6556] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.110296][ T6556] bridge_slave_1: entered allmulticast mode [ 34.110670][ T6556] bridge_slave_1: entered promiscuous mode [ 34.125919][ T6553] team0: Port device team_slave_0 added [ 34.129505][ T6557] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.130765][ T6557] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.132076][ T6557] bridge_slave_0: entered allmulticast mode [ 34.133480][ T6557] bridge_slave_0: entered promiscuous mode [ 34.135411][ T6557] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.136460][ T6557] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.136563][ T6557] bridge_slave_1: entered allmulticast mode [ 34.137006][ T6557] bridge_slave_1: entered promiscuous mode [ 34.149248][ T6551] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.150414][ T6551] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.151711][ T6551] bridge_slave_0: entered allmulticast mode [ 34.153205][ T6551] bridge_slave_0: entered promiscuous mode [ 34.155611][ T6553] team0: Port device team_slave_1 added [ 34.168314][ T6557] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.169910][ T6551] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.171144][ T6551] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.172388][ T6551] bridge_slave_1: entered allmulticast mode [ 34.173879][ T6551] bridge_slave_1: entered promiscuous mode [ 34.182555][ T6556] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.183828][ T6556] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.193881][ T6557] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.209236][ T6556] team0: Port device team_slave_0 added [ 34.209989][ T6556] team0: Port device team_slave_1 added [ 34.216837][ T6557] team0: Port device team_slave_0 added [ 34.217630][ T6557] team0: Port device team_slave_1 added [ 34.219070][ T6551] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.220712][ T6551] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.221141][ T6553] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.221150][ T6553] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.221159][ T6553] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.222061][ T6553] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.222071][ T6553] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.222085][ T6553] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.230234][ T6556] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.230245][ T6556] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.230256][ T6556] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.230510][ T6552] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.230540][ T6552] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.230600][ T6552] bridge_slave_0: entered allmulticast mode [ 34.231036][ T6552] bridge_slave_0: entered promiscuous mode [ 34.232032][ T6556] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.232040][ T6556] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.232055][ T6556] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.250191][ T6552] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.250279][ T6552] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.250361][ T6552] bridge_slave_1: entered allmulticast mode [ 34.250791][ T6552] bridge_slave_1: entered promiscuous mode [ 34.269656][ T6551] team0: Port device team_slave_0 added [ 34.277523][ T6557] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.277546][ T6557] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.277559][ T6557] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.278122][ T6557] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.278129][ T6557] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.278140][ T6557] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.286289][ T6551] team0: Port device team_slave_1 added [ 34.295328][ T6552] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.297770][ T6552] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.300905][ T6556] hsr_slave_0: entered promiscuous mode [ 34.301309][ T6556] hsr_slave_1: entered promiscuous mode [ 34.322364][ T6557] hsr_slave_0: entered promiscuous mode [ 34.322678][ T6557] hsr_slave_1: entered promiscuous mode [ 34.322879][ T6557] debugfs: 'hsr0' already exists in 'hsr' [ 34.322920][ T6557] Cannot create hsr debugfs directory [ 34.323595][ T6551] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.323604][ T6551] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.323617][ T6551] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.324430][ T6551] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.324438][ T6551] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.324453][ T6551] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.326427][ T6553] hsr_slave_0: entered promiscuous mode [ 34.326710][ T6553] hsr_slave_1: entered promiscuous mode [ 34.326887][ T6553] debugfs: 'hsr0' already exists in 'hsr' [ 34.326897][ T6553] Cannot create hsr debugfs directory [ 34.340323][ T6552] team0: Port device team_slave_0 added [ 34.349725][ T6552] team0: Port device team_slave_1 added [ 34.369339][ T6552] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.370538][ T6552] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.374997][ T6552] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.395210][ T6552] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.395240][ T6552] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.395527][ T6552] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.421914][ T6551] hsr_slave_0: entered promiscuous mode [ 34.422202][ T6551] hsr_slave_1: entered promiscuous mode [ 34.422367][ T6551] debugfs: 'hsr0' already exists in 'hsr' [ 34.422376][ T6551] Cannot create hsr debugfs directory [ 34.434424][ T6552] hsr_slave_0: entered promiscuous mode [ 34.435346][ T6552] hsr_slave_1: entered promiscuous mode [ 34.435562][ T6552] debugfs: 'hsr0' already exists in 'hsr' [ 34.435573][ T6552] Cannot create hsr debugfs directory [ 34.522073][ T6556] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 34.525170][ T6556] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 34.537258][ T6556] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 34.540930][ T6556] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 34.559037][ T6553] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 34.566063][ T6556] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.566109][ T6556] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.566247][ T6556] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.566274][ T6556] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.571552][ T6553] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 34.576798][ T6553] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 34.579199][ T6553] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 34.597030][ T6557] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 34.600095][ T6557] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 34.603609][ T6557] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 34.607215][ T6557] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 34.621445][ T6553] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.621483][ T6553] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.621557][ T6553] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.621585][ T6553] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.641743][ T6556] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.648483][ T6557] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.648518][ T6557] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.648579][ T6557] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.648601][ T6557] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.649416][ T6551] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 34.651840][ T6551] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 34.653904][ T6551] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 34.666409][ T6551] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 34.676433][ T258] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.678124][ T258] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.679860][ T258] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.681243][ T258] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.682549][ T258] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.684313][ T258] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.698697][ T6556] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.703607][ T6553] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.716306][ T6557] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.720710][ T258] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.720767][ T258] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.721113][ T258] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.721133][ T258] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.735646][ T6552] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 34.737793][ T6552] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 34.740269][ T6552] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 34.744321][ T6553] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.747709][ T6552] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 34.752210][ T258] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.752250][ T258] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.761012][ T6557] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.765856][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.765898][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.777635][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.777682][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.780551][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.780588][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.803859][ T6553] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 34.803903][ T6553] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 34.814510][ T6552] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.828065][ T6551] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.841539][ T6557] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 34.843361][ T6557] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 34.860269][ T6552] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.866697][ T6551] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.869051][ T6556] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.876852][ T2170] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.876893][ T2170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.891798][ T2170] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.891834][ T2170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.899263][ T258] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.899303][ T258] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.920965][ T6556] veth0_vlan: entered promiscuous mode [ 34.929877][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.929931][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.932861][ T6553] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.959728][ T6556] veth1_vlan: entered promiscuous mode [ 34.968125][ T6556] veth0_macvtap: entered promiscuous mode [ 34.971973][ T6556] veth1_macvtap: entered promiscuous mode [ 34.980239][ T6556] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.981220][ T6556] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.984598][ T42] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.986721][ T42] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.992387][ T6553] veth0_vlan: entered promiscuous mode [ 34.997163][ T42] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.997210][ T42] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.010662][ T6553] veth1_vlan: entered promiscuous mode [ 35.013331][ T6551] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.020819][ T6557] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.058899][ T6551] veth0_vlan: entered promiscuous mode [ 35.067134][ T6553] veth0_macvtap: entered promiscuous mode [ 35.070123][ T6553] veth1_macvtap: entered promiscuous mode [ 35.077360][ T6551] veth1_vlan: entered promiscuous mode [ 35.084316][ T6551] veth0_macvtap: entered promiscuous mode [ 35.092189][ T6552] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.108727][ T6552] veth0_vlan: entered promiscuous mode [ 35.112003][ T6552] veth1_vlan: entered promiscuous mode [ 35.112192][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.112201][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.121336][ T6551] veth1_macvtap: entered promiscuous mode [ 35.128503][ T6553] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.136142][ T6553] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.149308][ T258] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.149340][ T258] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.151972][ T14] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.152022][ T14] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.152038][ T14] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.152051][ T14] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.158005][ T6552] veth0_macvtap: entered promiscuous mode [ 35.161628][ T6551] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.166917][ T6552] veth1_macvtap: entered promiscuous mode [ 35.172671][ T6551] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.198273][ T258] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.198328][ T258] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.198345][ T258] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.198358][ T258] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.199139][ T6557] veth0_vlan: entered promiscuous mode [ 35.200601][ T6557] veth1_vlan: entered promiscuous mode [ 35.209332][ T6557] veth0_macvtap: entered promiscuous mode [ 35.212940][ T6552] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.216126][ T6552] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.218899][ T6557] veth1_macvtap: entered promiscuous mode [ 35.221636][ T6556] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 35.229747][ T4791] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.229780][ T4791] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.246002][ T258] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.246060][ T258] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.246081][ T258] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.246095][ T258] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.280469][ T4791] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.280498][ T4791] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.287346][ T6557] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.289817][ T6557] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.311895][ T258] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.311949][ T258] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.311975][ T258] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.311995][ T258] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.318752][ T2170] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.320116][ T2170] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.339006][ T6669] loop2: detected capacity change from 0 to 256 [ 35.339559][ T6669] ======================================================= [ 35.339559][ T6669] WARNING: The mand mount option has been deprecated and [ 35.339559][ T6669] and is ignored by this kernel. Remove the mand [ 35.339559][ T6669] option from the mount to silence this warning. [ 35.339559][ T6669] ======================================================= [ 35.344507][ T6669] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 35.352857][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.352887][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.371377][ T258] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.371410][ T258] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.404533][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.404576][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.439874][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.439900][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.465566][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.465595][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.505945][ T6686] loop4: detected capacity change from 0 to 256 [ 35.563582][ T6690] Illegal XDP return value 32768 on prog (id 1) dev N/A, expect packet loss! [ 35.676572][ T6703] loop2: detected capacity change from 0 to 64 [ 35.845378][ T52] Bluetooth: hci1: command tx timeout [ 35.845467][ T52] Bluetooth: hci3: command tx timeout [ 35.845527][ T52] Bluetooth: hci4: command tx timeout [ 35.845575][ T52] Bluetooth: hci2: command tx timeout [ 35.849709][ T6558] Bluetooth: hci0: command tx timeout [ 35.852561][ T6693] loop3: detected capacity change from 0 to 32768 [ 35.881313][ T6698] loop1: detected capacity change from 0 to 32768 [ 35.882846][ T6698] XFS: noikeep mount option is deprecated. [ 35.883431][ T6720] fuse: Unexpected value for 'default_permissions' [ 35.912975][ T6693] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 35.915255][ T6728] netlink: 204 bytes leftover after parsing attributes in process `syz.0.29'. [ 35.917877][ T6728] netlink: 8 bytes leftover after parsing attributes in process `syz.0.29'. [ 35.926694][ T6698] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 35.948111][ T6736] netlink: 'syz.4.31': attribute type 30 has an invalid length. [ 35.978666][ T6743] netlink: 'syz.0.33': attribute type 2 has an invalid length. [ 36.009013][ T6698] XFS (loop1): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 36.029344][ T6698] XFS (loop1): Starting recovery (logdev: internal) [ 36.033591][ T6552] ocfs2: Unmounting device (7,3) on (node local) [ 36.051702][ T6698] XFS (loop1): Ending recovery (logdev: internal) [ 36.147748][ T6757] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 36.153456][ T6551] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 36.297419][ T6777] tipc: Enabling of bearer rejected, failed to enable media [ 36.321687][ T6784] netlink: 8 bytes leftover after parsing attributes in process `syz.2.51'. [ 36.321720][ T6784] netlink: 4 bytes leftover after parsing attributes in process `syz.2.51'. [ 36.321746][ T6784] netlink: 'syz.2.51': attribute type 7 has an invalid length. [ 36.328306][ T6785] loop4: detected capacity change from 0 to 1024 [ 36.402425][ T6785] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.431480][ T6803] capability: warning: `syz.0.60' uses 32-bit capabilities (legacy support in use) [ 36.516629][ T6557] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.561940][ T6804] loop2: detected capacity change from 0 to 32768 [ 36.591543][ T6804] jfs_lookup: dtSearch returned -5 [ 36.742826][ T6665] IPVS: starting estimator thread 0... [ 36.814121][ T6847] vim2m vim2m.0: vidioc_s_fmt queue busy [ 36.824822][ T6835] IPVS: using max 70 ests per chain, 168000 per kthread [ 36.831870][ T6850] capability: warning: `syz.4.79' uses deprecated v2 capabilities in a way that may be insecure [ 36.869257][ T6861] warning: `syz.4.84' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 36.920884][ T6867] netlink: 'syz.4.87': attribute type 3 has an invalid length. [ 36.966793][ T6873] loop4: detected capacity change from 0 to 1024 [ 37.002796][ T4610] hfsplus: b-tree write err: -5, ino 4 [ 37.046281][ T6881] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 37.175897][ T6897] loop3: detected capacity change from 0 to 64 [ 37.240871][ T6893] loop1: detected capacity change from 0 to 32768 [ 37.267075][ T6907] Zero length message leads to an empty skb [ 37.324441][ T6893] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,erasure_code,no_splitbrain_check,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,nocow [ 37.324482][ T6893] allowing incompatible features above 0.0: (unknown version) [ 37.328316][ T6893] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 37.328358][ T6893] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0 [ 37.328655][ T6893] bcachefs (loop1): recovering from clean shutdown, journal seq 10 [ 37.328734][ T6893] bcachefs (loop1): Version upgrade required: [ 37.328734][ T6893] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 37.328734][ T6893] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 37.328734][ T6893] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 37.329243][ T6893] bcachefs (loop1): dropping and reconstructing all alloc info [ 37.362098][ T6893] bcachefs (loop1): accounting_read... done [ 37.372736][ T6893] bcachefs (loop1): alloc_read... done [ 37.372859][ T6893] bcachefs (loop1): snapshots_read... done [ 37.373731][ T6893] bcachefs (loop1): done starting filesystem [ 37.387941][ T6926] loop2: detected capacity change from 0 to 512 [ 37.430112][ T6926] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.110: bg 0: block 5: invalid block bitmap [ 37.432990][ T6926] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 37.437058][ T6926] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.110: invalid indirect mapped block 3 (level 2) [ 37.438288][ T6926] EXT4-fs (loop2): 2 truncates cleaned up [ 37.438778][ T6926] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.475672][ T6926] netlink: 40 bytes leftover after parsing attributes in process `syz.2.110'. [ 37.489222][ T6551] bcachefs (loop1): shutting down [ 37.518450][ T6556] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.532564][ T6925] loop3: detected capacity change from 0 to 32768 [ 37.533012][ T6551] bcachefs (loop1): shutdown complete [ 37.540729][ T6925] XFS (loop3): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 37.591294][ T6925] XFS (loop3): Ending clean mount [ 37.633822][ T6952] netlink: 12 bytes leftover after parsing attributes in process `syz.0.122'. [ 37.649563][ T6552] XFS (loop3): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 37.753750][ T6964] process 'syz.3.123' launched './file2' with NULL argv: empty string added [ 37.925547][ T6560] Bluetooth: hci2: command tx timeout [ 37.925561][ T52] Bluetooth: hci4: command tx timeout [ 37.925588][ T6560] Bluetooth: hci3: command tx timeout [ 37.925591][ T52] Bluetooth: hci1: command tx timeout [ 37.925698][ T6558] Bluetooth: hci0: command tx timeout [ 38.049772][ T6984] loop3: detected capacity change from 0 to 32768 [ 38.067065][ T6984] XFS (loop3): DAX unsupported by block device. Turning off DAX. [ 38.067386][ T6984] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 38.073092][ T6984] XFS (loop3): Ending clean mount [ 38.076326][ T6984] XFS (loop3): Quotacheck needed: Please wait. [ 38.091352][ T6984] XFS (loop3): Quotacheck: Done. [ 38.129986][ T6552] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 38.170455][ T7002] loop2: detected capacity change from 0 to 40427 [ 38.181555][ T7002] F2FS-fs (loop2): Image doesn't support compression [ 38.181602][ T7002] F2FS-fs (loop2): build fault injection rate: 690 [ 38.186061][ T7002] F2FS-fs (loop2): invalid crc value [ 38.198933][ T7021] loop3: detected capacity change from 0 to 256 [ 38.200917][ T7021] exfat: Deprecated parameter 'namecase' [ 38.213361][ T7002] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 38.216694][ T7002] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 38.219243][ T7021] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x5441a860, utbl_chksum : 0xe619d30d) [ 38.267670][ T6556] syz-executor: attempt to access beyond end of device [ 38.267670][ T6556] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 38.273268][ T6556] CPU: 1 UID: 0 PID: 6556 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-g8f5ae30d69d7 #0 PREEMPT [ 38.273292][ T6556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 38.273298][ T6556] Call trace: [ 38.273304][ T6556] show_stack+0x2c/0x3c (C) [ 38.273320][ T6556] __dump_stack+0x30/0x40 [ 38.273327][ T6556] dump_stack_lvl+0xd8/0x12c [ 38.273333][ T6556] dump_stack+0x1c/0x28 [ 38.273338][ T6556] f2fs_handle_critical_error+0x34c/0x4b8 [ 38.273345][ T6556] f2fs_stop_checkpoint+0x5c/0x70 [ 38.273353][ T6556] f2fs_write_end_io+0x768/0xa70 [ 38.273359][ T6556] bio_endio+0x804/0x840 [ 38.273366][ T6556] submit_bio_noacct+0x158/0x176c [ 38.273371][ T6556] submit_bio+0x3b4/0x550 [ 38.273376][ T6556] f2fs_submit_write_bio+0x13c/0x324 [ 38.273381][ T6556] __submit_merged_bio+0x254/0x704 [ 38.273387][ T6556] __submit_merged_write_cond+0x23c/0x4ac [ 38.273392][ T6556] f2fs_write_data_pages+0x1d28/0x2634 [ 38.273398][ T6556] do_writepages+0x270/0x468 [ 38.273406][ T6556] filemap_fdatawrite+0x14c/0x1f4 [ 38.273412][ T6556] f2fs_sync_dirty_inodes+0x2b8/0x788 [ 38.273417][ T6556] f2fs_write_checkpoint+0x690/0x16a0 [ 38.273422][ T6556] kill_f2fs_super+0x21c/0x584 [ 38.273428][ T6556] deactivate_locked_super+0xc4/0x12c [ 38.273435][ T6556] deactivate_super+0xe0/0x100 [ 38.273442][ T6556] cleanup_mnt+0x31c/0x3ac [ 38.273447][ T6556] __cleanup_mnt+0x20/0x30 [ 38.273451][ T6556] task_work_run+0x1dc/0x260 [ 38.273457][ T6556] do_notify_resume+0x174/0x1f4 [ 38.273464][ T6556] el0_svc+0xb8/0x180 [ 38.273470][ T6556] el0t_64_sync_handler+0x84/0x12c [ 38.273476][ T6556] el0t_64_sync+0x198/0x19c [ 38.273516][ T6556] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 38.405328][ T7029] loop3: detected capacity change from 0 to 32768 [ 38.426098][ T7029] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 38.452564][ T7029] XFS (loop3): Ending clean mount [ 38.500923][ T7043] netlink: 277 bytes leftover after parsing attributes in process `syz.2.154'. [ 38.515131][ T6552] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 38.520914][ T7045] loop2: detected capacity change from 0 to 128 [ 38.703818][ T7065] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 38.729764][ T7070] (unnamed net_device) (uninitialized): (slave batadv_slave_1): Device is not bonding slave [ 38.731900][ T7070] (unnamed net_device) (uninitialized): option active_slave: invalid value (batadv_slave_1) [ 38.741968][ T7072] random: crng reseeded on system resumption [ 38.755980][ T6567] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 38.756007][ T6567] Bluetooth: Wrong link type (-22) [ 38.777182][ T7076] loop3: detected capacity change from 0 to 1024 [ 38.883776][ T7093] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 39.165772][ T7108] loop3: detected capacity change from 0 to 32768 [ 39.187892][ T7108] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 39.206268][ T7108] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 39.308079][ T6552] ocfs2: Unmounting device (7,3) on (node local) [ 39.309438][ T7135] loop1: detected capacity change from 0 to 40427 [ 39.324803][ T7135] F2FS-fs (loop1): build fault injection rate: 771 [ 39.330631][ T7135] F2FS-fs (loop1): invalid crc value [ 39.365897][ T7135] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 39.369983][ T7135] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 39.379879][ T7155] loop3: detected capacity change from 0 to 1024 [ 39.411203][ T7150] f2fs_ckpt-7:1: attempt to access beyond end of device [ 39.411203][ T7150] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 39.411915][ T7150] CPU: 0 UID: 0 PID: 7150 Comm: f2fs_ckpt-7:1 Not tainted 6.17.0-rc1-syzkaller-g8f5ae30d69d7 #0 PREEMPT [ 39.411931][ T7150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 39.411936][ T7150] Call trace: [ 39.411939][ T7150] show_stack+0x2c/0x3c (C) [ 39.411960][ T7150] __dump_stack+0x30/0x40 [ 39.411968][ T7150] dump_stack_lvl+0xd8/0x12c [ 39.411975][ T7150] dump_stack+0x1c/0x28 [ 39.411981][ T7150] f2fs_handle_critical_error+0x34c/0x4b8 [ 39.411993][ T7150] f2fs_stop_checkpoint+0x5c/0x70 [ 39.412003][ T7150] f2fs_write_end_io+0x768/0xa70 [ 39.412011][ T7150] bio_endio+0x804/0x840 [ 39.412018][ T7150] submit_bio_noacct+0x158/0x176c [ 39.412024][ T7150] submit_bio+0x3b4/0x550 [ 39.412029][ T7150] f2fs_submit_write_bio+0x13c/0x324 [ 39.412035][ T7150] __submit_merged_bio+0x254/0x704 [ 39.412041][ T7150] __submit_merged_write_cond+0x23c/0x4ac [ 39.412046][ T7150] f2fs_write_data_pages+0x1d28/0x2634 [ 39.412053][ T7150] do_writepages+0x270/0x468 [ 39.412061][ T7150] filemap_fdatawrite+0x14c/0x1f4 [ 39.412068][ T7150] f2fs_sync_dirty_inodes+0x2b8/0x788 [ 39.412074][ T7150] f2fs_write_checkpoint+0x690/0x16a0 [ 39.412079][ T7150] __checkpoint_and_complete_reqs+0xe8/0x3c0 [ 39.412084][ T7150] issue_checkpoint_thread+0xcc/0x240 [ 39.412089][ T7150] kthread+0x5fc/0x75c [ 39.412097][ T7150] ret_from_fork+0x10/0x20 [ 39.412104][ T7150] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 39.494402][ T4610] hfsplus: b-tree write err: -5, ino 4 [ 39.619779][ T7174] loop2: detected capacity change from 0 to 4096 [ 39.643641][ T7182] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 39.777691][ T7201] netlink: 28 bytes leftover after parsing attributes in process `syz.1.226'. [ 39.788225][ T7200] netlink: 'syz.0.225': attribute type 10 has an invalid length. [ 39.796018][ T7200] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.799103][ T7200] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 39.872212][ T7217] loop3: detected capacity change from 0 to 256 [ 39.904641][ T7217] FAT-fs (loop3): Directory bread(block 64) failed [ 39.909668][ T7217] FAT-fs (loop3): Directory bread(block 65) failed [ 39.909733][ T7217] FAT-fs (loop3): Directory bread(block 66) failed [ 39.909746][ T7217] FAT-fs (loop3): Directory bread(block 67) failed [ 39.909769][ T7217] FAT-fs (loop3): Directory bread(block 68) failed [ 39.909780][ T7217] FAT-fs (loop3): Directory bread(block 69) failed [ 39.909802][ T7217] FAT-fs (loop3): Directory bread(block 70) failed [ 39.909812][ T7217] FAT-fs (loop3): Directory bread(block 71) failed [ 39.909832][ T7217] FAT-fs (loop3): Directory bread(block 72) failed [ 39.909842][ T7217] FAT-fs (loop3): Directory bread(block 73) failed [ 39.963644][ T7215] mkiss: ax0: crc mode is auto. [ 40.005153][ T6567] Bluetooth: hci1: command tx timeout [ 40.006237][ T6558] Bluetooth: hci0: command tx timeout [ 40.006269][ T6558] Bluetooth: hci2: command tx timeout [ 40.006287][ T6558] Bluetooth: hci3: command tx timeout [ 40.006301][ T6558] Bluetooth: hci4: command tx timeout [ 40.033711][ T7223] loop0: detected capacity change from 0 to 32768 [ 40.037681][ T7223] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.237 (7223) [ 40.060657][ T7223] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 40.060764][ T7223] BTRFS info (device loop0): using crc32c (crc32c-lib) checksum algorithm [ 40.060816][ T7223] BTRFS info (device loop0): using free-space-tree [ 40.079507][ T7225] loop2: detected capacity change from 0 to 8192 [ 40.190586][ T6553] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 40.313352][ T7241] loop1: detected capacity change from 0 to 32768 [ 40.321578][ T7241] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.240 (7241) [ 40.328575][ T7241] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 40.328865][ T7241] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm [ 40.328886][ T7241] BTRFS info (device loop1): using free-space-tree [ 40.458187][ T6551] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 40.514068][ T7254] loop2: detected capacity change from 0 to 32768 [ 40.583408][ T7294] team0: Device vxcan3 is of different type [ 40.638742][ T7299] bridge_slave_1: default FDB implementation only supports local addresses [ 40.690462][ T7254] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nocow [ 40.690498][ T7254] allowing incompatible features above 0.0: (unknown version) [ 40.690518][ T7254] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 40.690530][ T7254] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0 [ 40.690550][ T7254] bcachefs (loop2): initializing new filesystem [ 40.692126][ T7254] bcachefs (loop2): going read-write [ 40.703918][ T7284] loop3: detected capacity change from 0 to 32768 [ 40.745019][ T7254] bcachefs (loop2): marking superblocks [ 40.759876][ T7254] bcachefs (loop2): initializing freespace [ 40.787394][ T7322] TCP: TCP_TX_DELAY enabled [ 40.791897][ T7254] bcachefs (loop2): done initializing freespace [ 40.793187][ T7254] bcachefs (loop2): reading snapshots table [ 40.793231][ T7254] bcachefs (loop2): reading snapshots done [ 40.817937][ T7254] bcachefs (loop2): loop2: Superblock write was silently dropped! (seq 0 expected 42) [ 40.818568][ T7254] bcachefs (loop2): done starting filesystem [ 40.826608][ T7284] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,fsck,recovery_pass_last=scan_for_btree_nodes,nojournal_transaction_names,reconstruct_alloc [ 40.830172][ T7284] allowing incompatible features above 0.0: (unknown version) [ 40.833247][ T7284] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 40.833323][ T7284] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0 [ 40.833411][ T7284] bcachefs (loop3): recovering from clean shutdown, journal seq 10 [ 40.833514][ T7284] bcachefs (loop3): Version upgrade required: [ 40.833514][ T7284] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 40.833514][ T7284] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 40.833514][ T7284] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 40.840141][ T7284] bcachefs (loop3): dropping and reconstructing all alloc info [ 40.854585][ T7284] bcachefs (loop3): btree node read error at btree extents level 0/0 [ 40.854616][ T7284] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c6c25c03258c59c5 written 65535 min_key R POS_MIN durability: 1 ptr: 0:27:0 gen 0 [ 40.854633][ T7284] loop3 node offset 16/65535: btree node data missing: expected 65535 sectors, found 16 [ 40.854638][ T7284] loop3 btree validate error [ 40.854643][ T7284] flagging btree extents lost data [ 40.854754][ T7284] running recovery pass check_topology (2), currently at recovery_pass_empty (0) [ 40.854758][ T7284] running recovery pass check_topology (2), currently at recovery_pass_empty (0) [ 40.854762][ T7284] running recovery pass scan_for_btree_nodes (1), currently at recovery_pass_empty (0) [ 40.854766][ T7284] ret fsck_errors_not_fixed [ 40.855106][ T7284] bcachefs (loop3): error reading btree root btree=extents level=0: btree_node_read_error, fixing [ 40.880777][ T7284] bcachefs (loop3): btree node read error at btree dirents level 0/0 [ 40.880802][ T7284] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0 [ 40.880822][ T7284] loop3 node offset 8/24: btree node data missing: expected 24 sectors, found 8 [ 40.880828][ T7284] loop3 btree validate error [ 40.880832][ T7284] flagging btree dirents lost data [ 40.880836][ T7284] ret fsck_errors_not_fixed [ 40.880890][ T7284] bcachefs (loop3): error reading btree root btree=dirents level=0: btree_node_read_error, fixing [ 40.881523][ T7284] bcachefs (loop3): btree node read error at btree xattrs level 0/0 [ 40.881528][ T7284] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 2285c34bed0abe32 written 16 min_key POS_MIN durability: 1 ptr: 0:31:0 gen 0 [ 40.881533][ T7284] loop3 node offset 0/16: incorrect min_key: got 0:0:458752 should be POS_MIN [ 40.881536][ T7284] loop3 btree validate error [ 40.881539][ T7284] flagging btree xattrs lost data [ 40.881542][ T7284] ret btree_node_read_err_bad_node [ 40.881578][ T7284] bcachefs (loop3): error reading btree root btree=xattrs level=0: btree_node_read_error, fixing [ 40.887395][ T7284] bcachefs (loop3): Fixed errors, running fsck a second time to verify fs is clean [ 40.889994][ T7284] bcachefs (loop3): scanning for old btree nodes: min_version 0.24: unwritten_extents [ 40.890011][ T7284] bcachefs (loop3): going read-write [ 40.920782][ T4791] bcachefs (loop3): bucket 0:38 gen 0 data type btree sector count overflow: 0 + -256 > U32_MAX [ 40.920818][ T4791] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0 [ 40.921559][ T4791] bcachefs (loop3): bucket incorrectly unset in freespace btree [ 40.921565][ T4791] u64s 5 type deleted 0:25:0 len 0 ver 0, , continuing [ 40.951432][ T4791] bcachefs (loop3): bucket incorrectly unset in freespace btree [ 40.951459][ T4791] u64s 5 type deleted 0:26:0 len 0 ver 0, , continuing [ 40.954105][ T6556] bcachefs (loop2): shutting down [ 40.954124][ T6556] bcachefs (loop2): going read-only [ 40.954215][ T6556] bcachefs (loop2): finished waiting for writes to stop [ 40.956649][ T4791] bcachefs (loop3): bucket incorrectly unset in freespace btree [ 40.956656][ T4791] u64s 5 type deleted 0:27:0 len 0 ver 0, , continuing [ 40.956796][ T4791] bcachefs (loop3): bucket incorrectly unset in freespace btree [ 40.956800][ T4791] u64s 5 type deleted 0:28:0 len 0 ver 0, , continuing [ 40.958668][ T4791] bcachefs (loop3): bucket incorrectly unset in freespace btree [ 40.958675][ T4791] u64s 5 type deleted 0:29:0 len 0 ver 0, , continuing [ 40.959637][ T4791] bcachefs (loop3): bucket 0:35 gen 0 data type btree sector count overflow: 0 + -256 > U32_MAX [ 40.959644][ T4791] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c0bef60d07ceb940 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0 [ 40.959712][ T4791] bcachefs (loop3): bucket incorrectly unset in freespace btree [ 40.959716][ T4791] u64s 5 type deleted 0:30:0 len 0 ver 0, , continuing [ 40.959925][ T4791] bcachefs (loop3): bucket 0:32 gen 0 data type btree sector count overflow: 0 + -256 > U32_MAX [ 40.959929][ T4791] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ebb8d5a9e3463bdb written 16 min_key POS_MIN durability: 1 ptr: 0:32:0 gen 0 [ 40.959995][ T4791] bcachefs (loop3): bucket incorrectly unset in freespace btree [ 40.959998][ T4791] u64s 5 type deleted 0:31:0 len 0 ver 0, , continuing [ 40.960665][ T4791] bcachefs (loop3): bucket incorrectly unset in freespace btree [ 40.960670][ T4791] u64s 13 type alloc_v4 0:32:0 len 0 ver 0: [ 40.960674][ T4791] gen 0 oldest_gen 0 data_type free [ 40.960677][ T4791] journal_seq_nonempty 0 [ 40.960680][ T4791] journal_seq_empty 0 [ 40.960683][ T4791] need_discard 0 [ 40.960686][ T4791] need_inc_gen 0 [ 40.960689][ T4791] dirty_sectors 0 [ 40.960691][ T4791] stripe_sectors 0 [ 40.960694][ T4791] cached_sectors 0 [ 40.960696][ T4791] stripe 0 [ 40.960699][ T4791] stripe_redundancy 0 [ 40.960702][ T4791] io_time[READ] 0 [ 40.960704][ T4791] io_time[WRITE] 0 [ 40.960707][ T4791] fragmentation 0 [ 40.960710][ T4791] bp_start 8 [ 40.960712][ T4791] , , continuing [ 40.961209][ T4791] bcachefs (loop3): bucket incorrectly unset in freespace btree [ 40.961214][ T4791] u64s 5 type deleted 0:33:0 len 0 ver 0, , continuing [ 40.961668][ T4791] bcachefs (loop3): bucket incorrectly unset in freespace btree [ 40.961673][ T4791] u64s 5 type deleted 0:34:0 len 0 ver 0, , continuing [ 40.962991][ T4791] bcachefs (loop3): bucket incorrectly unset in freespace btree [ 40.963000][ T4791] u64s 13 type alloc_v4 0:35:0 len 0 ver 0: [ 40.963006][ T4791] gen 0 oldest_gen 0 data_type free [ 40.963012][ T4791] journal_seq_nonempty 0 [ 40.963018][ T4791] journal_seq_empty 0 [ 40.963022][ T4791] need_discard 0 [ 40.963026][ T4791] need_inc_gen 0 [ 40.963029][ T4791] dirty_sectors 0 [ 40.963032][ T4791] stripe_sectors 0 [ 40.963035][ T4791] cached_sectors 0 [ 40.963037][ T4791] stripe 0 [ 40.963040][ T4791] stripe_redundancy 0 [ 40.963043][ T4791] io_time[READ] 0 [ 40.963045][ T4791] io_time[WRITE] 0 [ 40.963048][ T4791] fragmentation 0 [ 40.963051][ T4791] bp_start 8 [ 40.963053][ T4791] , , continuing [ 40.963056][ T4791] Ratelimiting new instances of previous error [ 40.982721][ T4791] bcachefs (loop3): bucket 0:42 gen 0 data type btree sector count overflow: 0 + -256 > U32_MAX [ 40.982730][ T4791] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 1db8f60c84bb244c written 8 min_key POS_MIN durability: 1 ptr: 0:42:0 gen 0 [ 40.988348][ T7284] bcachefs (loop3): scanning for old btree nodes done [ 40.988383][ T7284] bcachefs (loop3): done starting filesystem [ 41.021281][ T6556] bcachefs (loop2): flushing journal and stopping allocators, journal seq 2 [ 41.048113][ T6552] bcachefs (loop3): shutting down [ 41.049390][ T6552] bcachefs (loop3): going read-only [ 41.049429][ T6552] bcachefs (loop3): finished waiting for writes to stop [ 41.080003][ T6552] bcachefs (loop3): flushing journal and stopping allocators, journal seq 11 [ 41.080612][ T6556] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 3 [ 41.081694][ T6556] bcachefs (loop2): clean shutdown complete, journal seq 4 [ 41.082169][ T6556] bcachefs (loop2): marking filesystem clean [ 41.090723][ T6552] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 12 [ 41.092299][ T6552] bcachefs (loop3): unclean shutdown complete, journal seq 13 [ 41.093525][ T6552] bcachefs (loop3): done going read-only, filesystem not clean [ 41.109330][ T6556] bcachefs (loop2): shutdown complete [ 41.115340][ T6552] bcachefs (loop3): shutdown complete [ 41.263445][ T7364] loop4: detected capacity change from 0 to 512 [ 41.283006][ T7364] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.316895][ T7364] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 41.326422][ T6557] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.596890][ T7391] vhci_hcd: invalid port number 146 [ 41.596919][ T7391] vhci_hcd: default hub control req: 6017 v0005 i0092 l2 [ 41.692885][ T7406] loop4: detected capacity change from 0 to 1024 [ 41.693229][ T7406] hfsplus: Unknown parameter '0000000000000000000000001777777777777777777777017777777777777777777770x0000000000000000' [ 41.905701][ T7412] loop4: detected capacity change from 0 to 40427 [ 41.906296][ T7412] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 41.906910][ T7412] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 41.907075][ T7412] F2FS-fs (loop4): build fault injection rate: 17008 [ 41.907088][ T7412] F2FS-fs (loop4): build fault injection type: 0x1f8 [ 41.909432][ T7412] F2FS-fs (loop4): invalid crc value [ 41.962906][ T7412] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 41.972676][ T7412] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 41.973960][ T7412] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 42.087231][ T6560] Bluetooth: hci4: command tx timeout [ 42.087272][ T6560] Bluetooth: hci1: command tx timeout [ 42.087301][ T6560] Bluetooth: hci3: command tx timeout [ 42.087319][ T6560] Bluetooth: hci2: command tx timeout [ 42.087335][ T6560] Bluetooth: hci0: command tx timeout [ 42.485555][ T7487] sp0: Synchronizing with TNC [ 42.595469][ T7474] loop4: detected capacity change from 0 to 32768 [ 42.623621][ T7474] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 42.683660][ T7508] loop0: detected capacity change from 0 to 4096 [ 42.699803][ T7474] XFS (loop4): Ending clean mount [ 42.714494][ T7508] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512). [ 42.746666][ T7490] loop2: detected capacity change from 0 to 40427 [ 42.756188][ T7490] F2FS-fs: heap/no_heap options were deprecated [ 42.769462][ T7490] F2FS-fs (loop2): invalid crc value [ 42.769515][ T7490] F2FS-fs (loop2): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 42.786405][ T6557] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 42.820211][ T7490] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 42.822856][ T7490] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 43.207461][ T7527] loop4: detected capacity change from 0 to 32768 [ 43.209114][ T7527] btrfs: Deprecated parameter 'usebackuproot' [ 43.210259][ T7527] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 43.212828][ T7527] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.339 (7527) [ 43.228168][ T7527] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 43.228230][ T7527] BTRFS info (device loop4): using crc32c (crc32c-lib) checksum algorithm [ 43.228267][ T7527] BTRFS info (device loop4): using free-space-tree [ 43.244216][ T7548] netlink: 12 bytes leftover after parsing attributes in process `syz.0.345'. [ 43.261913][ T7464] loop1: detected capacity change from 0 to 131072 [ 43.268074][ T2170] BTRFS warning (device loop4): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0x26333c6f level 0 [ 43.268196][ T7527] BTRFS warning (device loop4): couldn't read tree root [ 43.268210][ T7527] BTRFS warning (device loop4): try to load backup roots slot 1 [ 43.273031][ T2170] BTRFS warning (device loop4): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x78ca8373 level 0 [ 43.273105][ T7527] BTRFS warning (device loop4): couldn't read tree root [ 43.273119][ T7527] BTRFS warning (device loop4): try to load backup roots slot 2 [ 43.274268][ T258] BTRFS error (device loop4): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 43.275284][ T7527] BTRFS warning (device loop4): couldn't read tree root [ 43.275300][ T7527] BTRFS warning (device loop4): try to load backup roots slot 3 [ 43.294403][ T7527] BTRFS info (device loop4): rebuilding free space tree [ 43.306151][ T7527] BTRFS info (device loop4): checking UUID tree [ 43.332907][ T7464] XFS (loop1): Mounting V5 Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 43.393698][ T6557] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 43.463362][ T7529] loop3: detected capacity change from 0 to 32768 [ 43.505472][ T7464] XFS (loop1): Starting recovery (logdev: internal) [ 43.521293][ T7464] XFS (loop1): Ending recovery (logdev: internal) [ 43.593990][ T7529] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,metadata_target=/dev/loop3,noinodes_use_key_cache,fsck,fix_errors=yes,norecovery,nojournal_transaction_names [ 43.594023][ T7529] allowing incompatible features above 0.0: (unknown version) [ 43.596032][ T7580] loop2: detected capacity change from 0 to 32768 [ 43.597165][ T7529] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 43.597203][ T7529] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0 [ 43.597259][ T7529] bcachefs (loop3): recovering from clean shutdown, journal seq 13 [ 43.597301][ T7529] bcachefs (loop3): Version upgrade required: [ 43.597301][ T7529] Version upgrade from 0.32: (unknown version) to 1.7: mi_btree_bitmap incomplete [ 43.597301][ T7529] Doing incompatible version upgrade from 0.32: (unknown version) to 1.28: inode_has_case_insensitive [ 43.597301][ T7529] running recovery passes: check_allocations,check_extents_to_backpointers,check_snapshots,check_subvols,check_inodes,check_dirents,set_fs_needs_rebalance [ 43.651373][ T7580] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 43.655314][ T7529] bcachefs (loop3): accounting_read... done [ 43.672604][ T7529] bcachefs (loop3): alloc_read... done [ 43.676103][ T7529] bcachefs (loop3): snapshots_read... done [ 43.677897][ T7529] bcachefs (loop3): done starting filesystem [ 43.716901][ T7580] XFS (loop2): Ending clean mount [ 43.726768][ T7580] XFS (loop2): Quotacheck needed: Please wait. [ 43.746453][ T7580] XFS (loop2): Quotacheck: Done. [ 43.757213][ T6552] bcachefs (loop3): shutting down [ 43.795854][ T6551] XFS (loop1): Unmounting Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 43.800972][ T6556] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 43.807403][ T6552] bcachefs (loop3): shutdown complete [ 44.158620][ T7622] loop1: detected capacity change from 0 to 32768 [ 44.166806][ T6558] Bluetooth: hci1: command 0x0405 tx timeout [ 44.172749][ T7622] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.356 (7622) [ 44.191604][ T7622] BTRFS info (device loop1 state S): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 44.191663][ T7622] BTRFS info (device loop1 state S): using crc32c (crc32c-lib) checksum algorithm [ 44.191683][ T7622] BTRFS info (device loop1 state S): using free-space-tree [ 44.263355][ T42] BTRFS warning (device loop1 state S): checksum verify failed on logical 1052672 mirror 1 wanted 0x37e030f7 found 0xf6479a7e level 0, ignored [ 44.267527][ T42] BTRFS warning (device loop1 state S): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xcd9414ca level 0, ignored [ 44.270437][ T42] BTRFS warning (device loop1 state S): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0x28b693f7 level 0, ignored [ 44.270609][ T7622] BTRFS error (device loop1 state CS): failed to load root free space [ 44.284861][ T2170] BTRFS warning (device loop1 state CS): checksum verify failed on logical 5267456 mirror 1 wanted 0x22fa3277 found 0x0d9b21b0 level 0, ignored [ 44.333539][ T7628] loop2: detected capacity change from 0 to 32768 [ 44.343658][ T6551] BTRFS info (device loop1 state CS): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 44.393990][ T7628] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 44.411600][ T7618] loop4: detected capacity change from 0 to 131072 [ 44.420105][ T7618] F2FS-fs (loop4): Wrong NAT boundary, start(2560) end(5) blocks(1024) [ 44.420143][ T7618] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 44.430517][ T7655] sctp: [Deprecated]: syz.1.369 (pid 7655) Use of int in max_burst socket option. [ 44.430517][ T7655] Use struct sctp_assoc_value instead [ 44.467776][ T7618] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 44.469430][ T7628] XFS (loop2): Ending clean mount [ 44.476154][ T7618] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 44.477474][ T7618] F2FS-fs (loop4): Mounted with checkpoint version = 753bd00b [ 44.519325][ T6556] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 44.620351][ T7667] loop1: detected capacity change from 0 to 2048 [ 44.627901][ T7670] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 44.651712][ T7667] NILFS (loop1): vblocknr = 12 has abnormal lifetime: start cno (= 150994946) > current cno (= 3) [ 44.651754][ T7667] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=16) [ 44.652776][ T7667] Remounting filesystem read-only [ 44.676233][ T6551] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer [ 44.884435][ T7695] loop2: detected capacity change from 0 to 512 [ 44.898066][ T7696] dvmrp5: entered allmulticast mode [ 44.902416][ T7695] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.935671][ T7695] EXT4-fs: Ignoring sb option on remount [ 44.935707][ T7695] EXT4-fs: Ignoring removed orlov option [ 44.935720][ T7695] EXT4-fs: Ignoring removed nomblk_io_submit option [ 44.935746][ T7695] EXT4-fs: Remounting fs w/o journal so ignoring data_err option [ 44.935751][ T7695] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 44.955863][ T7695] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 44.968514][ T6556] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.022384][ T7709] loop4: detected capacity change from 0 to 2048 [ 45.039965][ T7710] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 45.092036][ T7716] netlink: 'syz.4.395': attribute type 29 has an invalid length. [ 45.103104][ T7716] netlink: 'syz.4.395': attribute type 29 has an invalid length. [ 45.103246][ T7716] netlink: 'syz.4.395': attribute type 29 has an invalid length. [ 45.103326][ T7716] netlink: 'syz.4.395': attribute type 29 has an invalid length. [ 45.103412][ T7716] netlink: 'syz.4.395': attribute type 29 has an invalid length. [ 45.103497][ T7716] netlink: 'syz.4.395': attribute type 29 has an invalid length. [ 45.103564][ T7716] netlink: 'syz.4.395': attribute type 29 has an invalid length. [ 45.103633][ T7716] netlink: 'syz.4.395': attribute type 29 has an invalid length. [ 45.103711][ T7716] netlink: 'syz.4.395': attribute type 29 has an invalid length. [ 45.103773][ T7716] netlink: 'syz.4.395': attribute type 29 has an invalid length. [ 45.156489][ T7722] netlink: 8 bytes leftover after parsing attributes in process `syz.2.397'. [ 45.160154][ T7722] macvlan2: entered promiscuous mode [ 45.160824][ T7722] macvlan2: entered allmulticast mode [ 45.441205][ T7762] [U] ^G [ 45.705243][ T7788] loop1: detected capacity change from 0 to 2048 [ 45.708196][ T7788] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 45.708226][ T7788] UDF-fs: Scanning with blocksize 512 failed [ 45.712018][ T7788] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 46.016816][ T7807] loop4: detected capacity change from 0 to 256 [ 46.017572][ T7807] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 46.018406][ T7807] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 46.022414][ T7807] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 46.184067][ T7823] tipc: Enabling of bearer rejected, failed to enable media [ 46.460278][ T7858] loop2: detected capacity change from 0 to 512 [ 46.481591][ T7858] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.513906][ T7858] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #2: block 7: comm syz.2.462: lblock 12 mapped to illegal pblock 7 (length 22) [ 46.517011][ T7858] EXT4-fs (loop2): Remounting filesystem read-only [ 46.551513][ T6556] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.588119][ T7851] loop0: detected capacity change from 0 to 32768 [ 46.593839][ T7851] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.459 (7851) [ 46.599667][ T7851] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 46.599745][ T7851] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm [ 46.599793][ T7851] BTRFS info (device loop0): using free-space-tree [ 46.681439][ T7894] mmap: syz.1.471 (7894) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 46.692805][ T7898] netlink: 60 bytes leftover after parsing attributes in process `syz.4.470'. [ 46.696271][ T7883] netlink: 60 bytes leftover after parsing attributes in process `syz.4.470'. [ 46.768102][ T6553] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 46.859857][ T7869] loop3: detected capacity change from 0 to 40427 [ 46.863676][ T7869] F2FS-fs (loop3): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 46.865343][ T7869] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 46.876168][ T7869] F2FS-fs (loop3): invalid crc value [ 46.884754][ T6567] Bluetooth: hci1: command 0x0405 tx timeout [ 46.925771][ T7869] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 46.939274][ T7869] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 46.942453][ T7869] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 46.981472][ T7869] syz.3.465: attempt to access beyond end of device [ 46.981472][ T7869] loop3: rw=2051, sector=36912, nr_sectors = 8144 limit=40427 [ 46.988213][ T7869] syz.3.465: attempt to access beyond end of device [ 46.988213][ T7869] loop3: rw=2051, sector=45096, nr_sectors = 20440 limit=40427 [ 47.001958][ T7869] F2FS-fs (loop3): Issue discard(4614, 4614, 1018) failed, ret: -5 [ 47.002025][ T7869] F2FS-fs (loop3): Issue discard(5637, 5637, 2555) failed, ret: -5 [ 47.137223][ T7949] mkiss: ax0: crc mode is auto. [ 47.232559][ T7962] vivid-000: disconnect [ 47.237176][ T7960] vivid-000: reconnect [ 47.340371][ T7977] Bluetooth: MGMT ver 1.23 [ 47.445903][ T7994] usb usb8: usbfs: interface 0 claimed by hub while 'syz.1.516' resets device [ 47.477349][ T8001] netlink: 8 bytes leftover after parsing attributes in process `syz.1.520'. [ 47.610377][ T8002] loop3: detected capacity change from 0 to 32768 [ 47.776717][ T8035] netlink: 200 bytes leftover after parsing attributes in process `syz.3.536'. [ 47.867401][ T8046] loop4: detected capacity change from 0 to 512 [ 47.867745][ T8046] EXT4-fs: Ignoring removed nomblk_io_submit option [ 47.867783][ T8046] EXT4-fs: Ignoring removed nomblk_io_submit option [ 47.880021][ T8046] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 47.884206][ T8046] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 47.884253][ T8046] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 47.897509][ T8046] EXT4-fs (loop4): 1 truncate cleaned up [ 47.898045][ T8046] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.988668][ T8046] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 48.021365][ T6557] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.032729][ T8062] netlink: 20 bytes leftover after parsing attributes in process `syz.3.548'. [ 48.319527][ T8107] loop4: detected capacity change from 0 to 128 [ 48.322485][ T8107] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 48.326289][ T8107] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 48.384904][ T8099] loop0: detected capacity change from 0 to 32768 [ 48.409094][ T8113] loop3: detected capacity change from 0 to 8192 [ 48.419041][ T8099] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 48.497240][ T6553] ocfs2: Unmounting device (7,0) on (node local) [ 48.732510][ T8167] loop4: detected capacity change from 0 to 256 [ 48.735421][ T8167] exfat: Deprecated parameter 'utf8' [ 48.735462][ T8167] exfat: Deprecated parameter 'namecase' [ 48.735494][ T8167] exfat: Deprecated parameter 'namecase' [ 48.735508][ T8167] exfat: Deprecated parameter 'utf8' [ 48.767188][ T8167] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012153, chksum : 0x8212fc2e, utbl_chksum : 0xe619d30d) [ 48.778618][ T8167] exFAT-fs (loop4): start_clu is invalid cluster(0x400) [ 48.789562][ T8172] loop0: detected capacity change from 0 to 16 [ 48.800948][ T8172] erofs (device loop0): mounted with root inode @ nid 36. [ 48.811238][ T8172] erofs (device loop0): readahead error at folio 87 @ nid 36 [ 48.813083][ T8172] erofs (device loop0): readahead error at folio 86 @ nid 36 [ 48.814515][ T8172] erofs (device loop0): bogus lookback distance 363 @ lcn 82 of nid 36 [ 48.820491][ T8172] erofs (device loop0): readahead error at folio 83 @ nid 36 [ 48.820548][ T8172] erofs (device loop0): bogus lookback distance 363 @ lcn 82 of nid 36 [ 48.820567][ T8172] erofs (device loop0): readahead error at folio 82 @ nid 36 [ 48.820638][ T8172] erofs (device loop0): readahead error at folio 79 @ nid 36 [ 48.820652][ T8172] erofs (device loop0): readahead error at folio 78 @ nid 36 [ 48.820681][ T8172] erofs (device loop0): readahead error at folio 77 @ nid 36 [ 48.820721][ T8172] erofs (device loop0): readahead error at folio 74 @ nid 36 [ 48.820739][ T8172] erofs (device loop0): readahead error at folio 72 @ nid 36 [ 48.820749][ T8172] erofs (device loop0): readahead error at folio 71 @ nid 36 [ 48.820762][ T8172] erofs (device loop0): readahead error at folio 70 @ nid 36 [ 48.820831][ T8172] erofs (device loop0): readahead error at folio 63 @ nid 36 [ 48.820848][ T8172] erofs (device loop0): readahead error at folio 61 @ nid 36 [ 48.820864][ T8172] erofs (device loop0): bogus lookback distance 1024 @ lcn 58 of nid 36 [ 48.820873][ T8172] erofs (device loop0): readahead error at folio 59 @ nid 36 [ 48.820882][ T8172] erofs (device loop0): bogus lookback distance 1024 @ lcn 58 of nid 36 [ 48.820890][ T8172] erofs (device loop0): readahead error at folio 58 @ nid 36 [ 48.820909][ T8172] erofs (device loop0): readahead error at folio 56 @ nid 36 [ 48.820955][ T8172] erofs (device loop0): bogus lookback distance 1586 @ lcn 46 of nid 36 [ 48.820967][ T8172] erofs (device loop0): readahead error at folio 47 @ nid 36 [ 48.820979][ T8172] erofs (device loop0): bogus lookback distance 1586 @ lcn 46 of nid 36 [ 48.820990][ T8172] erofs (device loop0): readahead error at folio 46 @ nid 36 [ 48.821006][ T8172] erofs (device loop0): readahead error at folio 45 @ nid 36 [ 48.821021][ T8172] erofs (device loop0): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 48.821030][ T8172] erofs (device loop0): readahead error at folio 43 @ nid 36 [ 48.821039][ T8172] erofs (device loop0): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 48.821047][ T8172] erofs (device loop0): readahead error at folio 42 @ nid 36 [ 48.821059][ T8172] erofs (device loop0): bogus lookback distance 774 @ lcn 40 of nid 36 [ 48.821068][ T8172] erofs (device loop0): readahead error at folio 41 @ nid 36 [ 48.821077][ T8172] erofs (device loop0): bogus lookback distance 774 @ lcn 40 of nid 36 [ 48.821085][ T8172] erofs (device loop0): readahead error at folio 40 @ nid 36 [ 48.821097][ T8172] erofs (device loop0): readahead error at folio 39 @ nid 36 [ 48.821106][ T8172] erofs (device loop0): readahead error at folio 38 @ nid 36 [ 48.821133][ T8172] erofs (device loop0): readahead error at folio 36 @ nid 36 [ 48.821176][ T8172] erofs (device loop0): bogus lookback distance 1468 @ lcn 31 of nid 36 [ 48.821185][ T8172] erofs (device loop0): readahead error at folio 31 @ nid 36 [ 48.821235][ T8172] erofs (device loop0): readahead error at folio 25 @ nid 36 [ 48.821247][ T8172] erofs (device loop0): readahead error at folio 24 @ nid 36 [ 48.821295][ T8172] erofs (device loop0): readahead error at folio 19 @ nid 36 [ 48.822009][ T8172] syz.0.601: attempt to access beyond end of device [ 48.822009][ T8172] loop0: rw=524288, sector=784, nr_sectors = 64 limit=16 [ 48.822093][ T8172] syz.0.601: attempt to access beyond end of device [ 48.822093][ T8172] loop0: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 48.822149][ T8172] syz.0.601: attempt to access beyond end of device [ 48.822149][ T8172] loop0: rw=524288, sector=13478624032, nr_sectors = 48 limit=16 [ 48.822205][ T8172] syz.0.601: attempt to access beyond end of device [ 48.822205][ T8172] loop0: rw=524288, sector=56, nr_sectors = 40 limit=16 [ 48.822247][ T8172] syz.0.601: attempt to access beyond end of device [ 48.822247][ T8172] loop0: rw=524288, sector=32, nr_sectors = 24 limit=16 [ 48.822283][ T8172] syz.0.601: attempt to access beyond end of device [ 48.822283][ T8172] loop0: rw=524288, sector=8, nr_sectors = 24 limit=16 [ 48.822326][ T8172] syz.0.601: attempt to access beyond end of device [ 48.822326][ T8172] loop0: rw=524288, sector=14425508768, nr_sectors = 8 limit=16 [ 48.918081][ T31] audit: type=1326 audit(48.890:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8174 comm="syz.1.602" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa5b5af28 code=0x7fc00000 [ 48.918124][ T31] audit: type=1326 audit(48.890:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8174 comm="syz.1.602" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffffa5b5af28 code=0x7fc00000 [ 48.918141][ T31] audit: type=1326 audit(48.890:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8174 comm="syz.1.602" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa5b5af28 code=0x7fc00000 [ 48.918156][ T31] audit: type=1326 audit(48.890:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8174 comm="syz.1.602" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa5b5af28 code=0x7fc00000 [ 48.918169][ T31] audit: type=1326 audit(48.890:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8174 comm="syz.1.602" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa5b5af28 code=0x7fc00000 [ 48.918181][ T31] audit: type=1326 audit(48.890:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8174 comm="syz.1.602" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa5b5af28 code=0x7fc00000 [ 48.995758][ T8187] loop2: detected capacity change from 0 to 4096 [ 48.997081][ T8187] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512). [ 49.007023][ T8187] ntfs3(loop2): ino=1a, mi_enum_attr [ 49.007060][ T8187] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 49.227869][ T8225] loop0: detected capacity change from 0 to 512 [ 49.254524][ T8225] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.283385][ T8225] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 49.330944][ T6553] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.366269][ T6567] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 49.374805][ T6567] Bluetooth: hci0: command 0x0c1a tx timeout [ 49.774133][ T8269] loop2: detected capacity change from 0 to 40427 [ 49.779488][ T8269] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 49.779524][ T8269] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 49.780886][ T8269] F2FS-fs (loop2): build fault injection rate: 17008 [ 49.780899][ T8269] F2FS-fs (loop2): build fault injection type: 0x1f8 [ 49.789209][ T8269] F2FS-fs (loop2): invalid crc value [ 49.825612][ T8269] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 49.828951][ T8269] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 49.828983][ T8269] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 50.075226][ T8309] loop1: detected capacity change from 0 to 1024 [ 50.075575][ T8309] hfsplus: Unknown parameter '0000000000000000000000001777777777777777777777017777777777777777777770x0000000000000000' [ 50.188542][ T8315] loop1: detected capacity change from 0 to 32768 [ 50.216610][ T31] audit: type=1326 audit(50.200:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8314 comm="syz.0.671" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbdf5af28 code=0x7fc00000 [ 50.216653][ T31] audit: type=1326 audit(50.200:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8314 comm="syz.0.671" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffffbdf5af28 code=0x7fc00000 [ 50.216685][ T31] audit: type=1326 audit(50.200:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8314 comm="syz.0.671" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbdf5af28 code=0x7fc00000 [ 50.216842][ T31] audit: type=1326 audit(50.200:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8314 comm="syz.0.671" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbdf5af28 code=0x7fc00000 [ 50.255945][ T8326] netlink: 36 bytes leftover after parsing attributes in process `syz.2.664'. [ 50.283198][ T8312] loop3: detected capacity change from 0 to 32768 [ 50.302206][ T8315] bcachefs (a46a46fb-710c-4d8a-8a40-d337fbcdfe7d): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,journal_flush_disabled,nojournal_transaction_names [ 50.342986][ T8312] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 50.361094][ T8315] allowing incompatible features above 0.0: (unknown version) [ 50.362467][ T8315] features: new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 50.362516][ T8315] with devices loop1 [ 50.362553][ T8315] bcachefs (a46a46fb-710c-4d8a-8a40-d337fbcdfe7d): Using encoding defined by superblock: utf8-12.1.0 [ 50.362633][ T8315] bcachefs (a46a46fb-710c-4d8a-8a40-d337fbcdfe7d): recovering from clean shutdown, journal seq 8 [ 50.362679][ T8315] bcachefs (a46a46fb-710c-4d8a-8a40-d337fbcdfe7d): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.28: inode_has_case_insensitive [ 50.362679][ T8315] running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes [ 50.380089][ T8315] bcachefs (a46a46fb-710c-4d8a-8a40-d337fbcdfe7d): error reading btree root btree=alloc level=0: btree_node_read_error, fixing [ 50.384221][ T8315] bcachefs (a46a46fb-710c-4d8a-8a40-d337fbcdfe7d): btree node read error at btree backpointers level 0/0 [ 50.386895][ T8315] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq df65d7bf5b5ce422 written 16 min_key POS_MIN durability: 1 ptr: 0:36:0 gen 0 [ 50.389237][ T8315] loop1 node offset 0/16: got wrong btree node: got [ 50.390136][ T6552] ocfs2: Unmounting device (7,3) on (node local) [ 50.394943][ T8315] btree=backpointers level=0 seq df00ffbf5b5ce422 1 [ 50.396194][ T8315] min: POS_MIN [ 50.396832][ T8315] max: SPOS_MAX [ 50.397482][ T8315] loop1 btree validate error [ 50.398275][ T8315] flagging btree backpointers lost data [ 50.402863][ T8315] running recovery pass check_btree_backpointers (15), currently at recovery_pass_empty (0) [ 50.404541][ T8315] ret btree_node_read_err_bad_node [ 50.407845][ T8315] bcachefs (a46a46fb-710c-4d8a-8a40-d337fbcdfe7d): error reading btree root btree=backpointers level=0: btree_node_read_error, fixing [ 50.414487][ T8315] bcachefs (a46a46fb-710c-4d8a-8a40-d337fbcdfe7d): check_topology... [ 50.416179][ T8324] loop0: detected capacity change from 0 to 32768 [ 50.416455][ T8315] done [ 50.416463][ T8315] bcachefs (a46a46fb-710c-4d8a-8a40-d337fbcdfe7d): accounting_read... done [ 50.449689][ T8315] bcachefs (a46a46fb-710c-4d8a-8a40-d337fbcdfe7d): alloc_read... done [ 50.449940][ T8315] bcachefs (a46a46fb-710c-4d8a-8a40-d337fbcdfe7d): snapshots_read... done [ 50.450202][ T8315] bcachefs (a46a46fb-710c-4d8a-8a40-d337fbcdfe7d): check_allocations... [ 50.450982][ T8315] bcachefs (a46a46fb-710c-4d8a-8a40-d337fbcdfe7d): bucket 0:34 data type user ptr gen 0 missing in alloc btree [ 50.450990][ T8315] while marking u64s 6 type extent 4099:8:U32_MAX len 8 ver 0: durability: 1 ptr: 0:34:0 gen 0, fixing [ 50.454937][ T8315] bcachefs (a46a46fb-710c-4d8a-8a40-d337fbcdfe7d): bucket 0:27 data type btree ptr gen 0 missing in alloc btree [ 50.454948][ T8315] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 249e7ae2af8ee356 written 16 min_key POS_MIN durability: 1 ptr: 0:27:0 gen 0, fixing [ 50.464878][ T8315] bcachefs (a46a46fb-710c-4d8a-8a40-d337fbcdfe7d): btree ptr not marked in member info btree allocated bitmap [ 50.464903][ T8315] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq efdd7a26d7396dd5 written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing [ 50.469873][ T8315] bcachefs (a46a46fb-710c-4d8a-8a40-d337fbcdfe7d): bucket 0:38 data type btree ptr gen 0 missing in alloc btree [ 50.470347][ T8315] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq efdd7a26d7396dd5 written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing [ 50.470614][ T8315] bcachefs (a46a46fb-710c-4d8a-8a40-d337fbcdfe7d): btree ptr not marked in member info btree allocated bitmap [ 50.470619][ T8315] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 17c752e9adf22e73 written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing [ 50.483737][ T8315] bcachefs (a46a46fb-710c-4d8a-8a40-d337fbcdfe7d): bucket 0:41 data type btree ptr gen 0 missing in alloc btree [ 50.483765][ T8315] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 17c752e9adf22e73 written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing [ 50.483929][ T8315] bcachefs (a46a46fb-710c-4d8a-8a40-d337fbcdfe7d): bucket 0:31 data type btree ptr gen 0 missing in alloc btree [ 50.483934][ T8315] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq f8777fbb972634df written 16 min_key POS_MIN durability: 1 ptr: 0:31:0 gen 0, fixing [ 50.484071][ T8315] bcachefs (a46a46fb-710c-4d8a-8a40-d337fbcdfe7d): btree ptr not marked in member info btree allocated bitmap [ 50.484076][ T8315] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq adc4350e9aab42a2 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing [ 50.503156][ T8315] bcachefs (a46a46fb-710c-4d8a-8a40-d337fbcdfe7d): bucket 0:35 data type btree ptr gen 0 missing in alloc btree [ 50.503181][ T8315] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq adc4350e9aab42a2 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing [ 50.503346][ T8315] bcachefs (a46a46fb-710c-4d8a-8a40-d337fbcdfe7d): btree ptr not marked in member info btree allocated bitmap [ 50.503351][ T8315] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ef15a85bfc7569df written 16 min_key POS_MIN durability: 1 ptr: 0:32:0 gen 0, fixing [ 50.503781][ T8315] bcachefs (a46a46fb-710c-4d8a-8a40-d337fbcdfe7d): bucket 0:32 data type btree ptr gen 0 missing in alloc btree [ 50.503787][ T8315] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ef15a85bfc7569df written 16 min_key POS_MIN durability: 1 ptr: 0:32:0 gen 0, fixing [ 50.503895][ T8315] bcachefs (a46a46fb-710c-4d8a-8a40-d337fbcdfe7d): bucket 0:28 data type btree ptr gen 0 missing in alloc btree [ 50.503900][ T8315] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 67ab6f3a2516f441 written 16 min_key POS_MIN durability: 1 ptr: 0:28:0 gen 0, fixing [ 50.504014][ T8315] bcachefs (a46a46fb-710c-4d8a-8a40-d337fbcdfe7d): btree ptr not marked in member info btree allocated bitmap [ 50.504018][ T8315] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 771f68864d6973cb written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing [ 50.524613][ T8315] bcachefs (a46a46fb-710c-4d8a-8a40-d337fbcdfe7d): bucket 0:29 data type btree ptr gen 0 missing in alloc btree [ 50.524623][ T8315] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 771f68864d6973cb written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing [ 50.525947][ T8315] bcachefs (a46a46fb-710c-4d8a-8a40-d337fbcdfe7d): bucket 0:40 data type btree ptr gen 0 missing in alloc btree [ 50.525953][ T8315] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 8c6eef4d5041243d written 8 min_key POS_MIN durability: 1 ptr: 0:40:0 gen 0, fixing [ 50.532880][ T8315] done [ 50.534109][ T8315] bcachefs (a46a46fb-710c-4d8a-8a40-d337fbcdfe7d): going read-write [ 50.548331][ T8315] bcachefs (a46a46fb-710c-4d8a-8a40-d337fbcdfe7d): journal_replay... done [ 50.589091][ T8315] bcachefs (a46a46fb-710c-4d8a-8a40-d337fbcdfe7d): check_alloc_info... [ 50.589467][ T8315] bcachefs (a46a46fb-710c-4d8a-8a40-d337fbcdfe7d): hole in alloc btree missing in freespace btree [ 50.589473][ T8315] device 0 buckets 9-16, fixing [ 50.590007][ T8315] bcachefs (a46a46fb-710c-4d8a-8a40-d337fbcdfe7d): hole in alloc btree missing in freespace btree [ 50.590013][ T8315] device 0 buckets 24-25, fixing [ 50.590069][ T8315] bcachefs (a46a46fb-710c-4d8a-8a40-d337fbcdfe7d): hole in alloc btree missing in freespace btree [ 50.590073][ T8315] device 0 buckets 26-27, fixing [ 50.590260][ T8315] bcachefs (a46a46fb-710c-4d8a-8a40-d337fbcdfe7d): hole in alloc btree missing in freespace btree [ 50.590264][ T8315] device 0 buckets 36-37, fixing [ 50.591181][ T8315] done [ 50.593769][ T8315] bcachefs (a46a46fb-710c-4d8a-8a40-d337fbcdfe7d): check_lrus... [ 50.594039][ T8315] bcachefs (a46a46fb-710c-4d8a-8a40-d337fbcdfe7d): incorrect lru entry: lru fragmentation time 268435456 [ 50.594045][ T8315] u64s 5 type set 18446462599001276416:72057594037927970:0 len 0 ver 0 [ 50.594049][ T8315] for u64s 5 type deleted 256:34:0 len 0 ver 0, fixing [ 50.594442][ T8315] done [ 50.604203][ T8315] bcachefs (a46a46fb-710c-4d8a-8a40-d337fbcdfe7d): check_btree_backpointers... done [ 50.604700][ T8315] bcachefs (a46a46fb-710c-4d8a-8a40-d337fbcdfe7d): check_backpointers_to_extents... done [ 50.605480][ T8315] bcachefs (a46a46fb-710c-4d8a-8a40-d337fbcdfe7d): check_extents_to_backpointers... [ 50.605726][ T8315] bcachefs (a46a46fb-710c-4d8a-8a40-d337fbcdfe7d): scanning for missing backpointers in 10/128 buckets [ 50.606548][ T8315] done [ 50.617022][ T8315] bcachefs (a46a46fb-710c-4d8a-8a40-d337fbcdfe7d): check_inodes... [ 50.617427][ T8315] bcachefs (a46a46fb-710c-4d8a-8a40-d337fbcdfe7d): inode points to missing dirent [ 50.617434][ T8315] inum: 4097:4294967295 [ 50.617437][ T8315] mode=40700 [ 50.617441][ T8315] flags=(15300000) [ 50.617444][ T8315] journal_seq=1 [ 50.617447][ T8315] hash_seed=4bb7eeeea2eab677 [ 50.617450][ T8315] hash_type=siphash [ 50.617452][ T8315] bi_size=288230376151711744 [ 50.617455][ T8315] bi_sectors=0 [ 50.617458][ T8315] bi_version=0 [ 50.617461][ T8315] bi_atime=206860942 [ 50.617464][ T8315] bi_ctime=206860942 [ 50.617467][ T8315] bi_mtime=206860942 [ 50.617469][ T8315] bi_otime=206860942 [ 50.617472][ T8315] bi_uid=0 [ 50.617475][ T8315] bi_gid=0 [ 50.617478][ T8315] bi_nlink=0 [ 50.617480][ T8315] bi_generation=0 [ 50.617483][ T8315] bi_dev=0 [ 50.617486][ T8315] bi_data_checksum=0 [ 50.617489][ T8315] bi_compression=0 [ 50.617491][ T8315] bi_project=0 [ 50.617494][ T8315] bi_background_compression=0 [ 50.617497][ T8315] bi_data_replicas=0 [ 50.617500][ T8315] bi_promote_target=0 [ 50.617503][ T8315] bi_foreground_target=0 [ 50.617506][ T8315] bi_background_target=0 [ 50.617508][ T8315] bi_erasure_code=0 [ 50.617511][ T8315] bi_fields_set=0 [ 50.617514][ T8315] bi_dir=4096 [ 50.617517][ T8315] bi_dir_offset=3388744104375484416 [ 50.617520][ T8315] bi_subvol=0 [ 50.617523][ T8315] bi_parent_subvol=0 [ 50.617525][ T8315] bi_nocow=0 [ 50.617528][ T8315] bi_depth=0 [ 50.617531][ T8315] bi_inodes_32bit=0 [ 50.617534][ T8315] bi_casefold=0, fixing [ 50.617571][ T8315] bcachefs (a46a46fb-710c-4d8a-8a40-d337fbcdfe7d): directory 4097:4294967295 with nonzero i_size 288230376151711744, fixing [ 50.619212][ T8315] done [ 50.623265][ T8315] bcachefs (a46a46fb-710c-4d8a-8a40-d337fbcdfe7d): resume_logged_ops... done [ 50.623614][ T8315] bcachefs (a46a46fb-710c-4d8a-8a40-d337fbcdfe7d): delete_dead_inodes... done [ 50.636885][ T8315] bcachefs (a46a46fb-710c-4d8a-8a40-d337fbcdfe7d): Fixed errors, running fsck a second time to verify fs is clean [ 50.636899][ T8315] bcachefs (a46a46fb-710c-4d8a-8a40-d337fbcdfe7d): check_extents_to_backpointers... done [ 50.637669][ T8315] bcachefs (a46a46fb-710c-4d8a-8a40-d337fbcdfe7d): check_inodes... done [ 50.638012][ T8315] bcachefs (a46a46fb-710c-4d8a-8a40-d337fbcdfe7d): resume_logged_ops... done [ 50.638239][ T8315] bcachefs (a46a46fb-710c-4d8a-8a40-d337fbcdfe7d): delete_dead_inodes... done [ 50.639080][ T8315] bcachefs (a46a46fb-710c-4d8a-8a40-d337fbcdfe7d): done starting filesystem [ 50.721898][ T8340] loop3: detected capacity change from 0 to 40427 [ 50.724569][ T8340] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 50.726417][ T8340] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 50.726849][ T8340] F2FS-fs (loop3): build fault injection rate: 17008 [ 50.726865][ T8340] F2FS-fs (loop3): build fault injection type: 0x1f8 [ 50.731727][ T8340] F2FS-fs (loop3): invalid crc value [ 50.736942][ T6551] bcachefs (a46a46fb-710c-4d8a-8a40-d337fbcdfe7d): shutting down [ 50.736969][ T6551] bcachefs (a46a46fb-710c-4d8a-8a40-d337fbcdfe7d): going read-only [ 50.736998][ T6551] bcachefs (a46a46fb-710c-4d8a-8a40-d337fbcdfe7d): finished waiting for writes to stop [ 50.755913][ T8340] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 50.760127][ T8340] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 50.760155][ T8340] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 50.806292][ T6551] bcachefs (a46a46fb-710c-4d8a-8a40-d337fbcdfe7d): flushing journal and stopping allocators, journal seq 19 [ 50.808549][ T6551] bcachefs (a46a46fb-710c-4d8a-8a40-d337fbcdfe7d): flushing journal and stopping allocators complete, journal seq 19 [ 50.813948][ T6551] bcachefs (a46a46fb-710c-4d8a-8a40-d337fbcdfe7d): clean shutdown complete, journal seq 20 [ 50.814405][ T6551] bcachefs (a46a46fb-710c-4d8a-8a40-d337fbcdfe7d): marking filesystem clean [ 50.873613][ T6551] bcachefs (a46a46fb-710c-4d8a-8a40-d337fbcdfe7d): shutdown complete [ 50.927418][ T8371] netlink: 100 bytes leftover after parsing attributes in process `syz.0.683'. [ 51.066420][ T8373] loop4: detected capacity change from 0 to 32768 [ 51.068574][ T8373] BTRFS warning: excessive commit interval 2147483649, use with care [ 51.070681][ T8373] btrfs: Deprecated parameter 'usebackuproot' [ 51.072957][ T8373] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 51.077018][ T8373] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.684 (8373) [ 51.086273][ T8373] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 51.086320][ T8373] BTRFS info (device loop4): using crc32c (crc32c-lib) checksum algorithm [ 51.086336][ T8373] BTRFS info (device loop4): using free-space-tree [ 51.139510][ T42] BTRFS warning (device loop4): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 51.141774][ T8373] BTRFS error (device loop4): failed to load root extent [ 51.141816][ T8373] BTRFS warning (device loop4): try to load backup roots slot 1 [ 51.142713][ T42] BTRFS warning (device loop4): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 51.146712][ T8373] BTRFS warning (device loop4): couldn't read tree root [ 51.146734][ T8373] BTRFS warning (device loop4): try to load backup roots slot 2 [ 51.148419][ T258] BTRFS error (device loop4): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 51.149245][ T8373] BTRFS warning (device loop4): couldn't read tree root [ 51.149259][ T8373] BTRFS warning (device loop4): try to load backup roots slot 3 [ 51.168081][ T8373] BTRFS info (device loop4): rebuilding free space tree [ 51.204958][ T8373] BTRFS info (device loop4): checking UUID tree [ 51.271491][ T8377] loop0: detected capacity change from 0 to 32768 [ 51.320932][ T6557] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 51.621322][ T8424] netlink: 72 bytes leftover after parsing attributes in process `syz.2.708'. [ 51.634450][ T8410] loop4: detected capacity change from 0 to 32768 [ 51.659334][ T8410] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 51.702995][ T8410] XFS (loop4): Ending clean mount [ 51.711352][ T8410] XFS (loop4): Quotacheck needed: Please wait. [ 51.721074][ T8443] loop3: detected capacity change from 0 to 16 [ 51.730527][ T8443] erofs (device loop3): mounted with root inode @ nid 36. [ 51.743360][ T8443] erofs (device loop3): invalid de[0].nameoff 0 @ nid 36 [ 51.749759][ T8410] XFS (loop4): Quotacheck: Done. [ 51.819369][ T8377] bcachefs (a46a46fb-710c-4d8a-8a40-d337fbcdfe7d): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,journal_flush_disabled,nojournal_transaction_names [ 51.819403][ T8377] allowing incompatible features above 0.0: (unknown version) [ 51.819418][ T8377] features: new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 51.819427][ T8377] with devices loop0 [ 51.819439][ T8377] bcachefs (a46a46fb-710c-4d8a-8a40-d337fbcdfe7d): Using encoding defined by superblock: utf8-12.1.0 [ 51.819487][ T8377] bcachefs (a46a46fb-710c-4d8a-8a40-d337fbcdfe7d): recovering from clean shutdown, journal seq 8 [ 51.819520][ T8377] bcachefs (a46a46fb-710c-4d8a-8a40-d337fbcdfe7d): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.28: inode_has_case_insensitive [ 51.819520][ T8377] running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes [ 51.851662][ T6557] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 51.854581][ T8377] bcachefs (a46a46fb-710c-4d8a-8a40-d337fbcdfe7d): error reading btree root btree=alloc level=0: btree_node_read_error, fixing [ 51.861484][ T8377] bcachefs (a46a46fb-710c-4d8a-8a40-d337fbcdfe7d): btree node read error at btree backpointers level 0/0 [ 51.863785][ T8377] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq df65d7bf5b5ce422 written 16 min_key POS_MIN durability: 1 ptr: 0:36:0 gen 0 [ 51.863828][ T8377] loop0 node offset 0/16: got wrong btree node: got [ 51.863843][ T8377] btree=backpointers level=0 seq df00ffbf5b5ce422 1 [ 51.863858][ T8377] min: POS_MIN [ 51.863872][ T8377] max: SPOS_MAX [ 51.863885][ T8377] loop0 btree validate error [ 51.863899][ T8377] flagging btree backpointers lost data [ 51.863911][ T8377] running recovery pass check_btree_backpointers (15), currently at recovery_pass_empty (0) [ 51.863924][ T8377] ret btree_node_read_err_bad_node [ 51.863991][ T8377] bcachefs (a46a46fb-710c-4d8a-8a40-d337fbcdfe7d): error reading btree root btree=backpointers level=0: btree_node_read_error, fixing [ 51.877067][ T8377] bcachefs (a46a46fb-710c-4d8a-8a40-d337fbcdfe7d): check_topology... done [ 51.888834][ T8377] bcachefs (a46a46fb-710c-4d8a-8a40-d337fbcdfe7d): accounting_read... done [ 51.911473][ T8377] bcachefs (a46a46fb-710c-4d8a-8a40-d337fbcdfe7d): alloc_read... [ 51.924080][ T8459] loop2: detected capacity change from 0 to 2048 [ 51.927544][ T8377] done [ 51.927567][ T8377] bcachefs (a46a46fb-710c-4d8a-8a40-d337fbcdfe7d): snapshots_read... done [ 51.930829][ T8377] bcachefs (a46a46fb-710c-4d8a-8a40-d337fbcdfe7d): check_allocations... [ 51.932467][ T8377] bcachefs (a46a46fb-710c-4d8a-8a40-d337fbcdfe7d): bucket 0:34 data type user ptr gen 0 missing in alloc btree [ 51.932475][ T8377] while marking u64s 6 type extent 4099:8:U32_MAX len 8 ver 0: durability: 1 ptr: 0:34:0 gen 0, fixing [ 51.941048][ T8377] bcachefs (a46a46fb-710c-4d8a-8a40-d337fbcdfe7d): bucket 0:27 data type btree ptr gen 0 missing in alloc btree [ 51.941074][ T8377] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 249e7ae2af8ee356 written 16 min_key POS_MIN durability: 1 ptr: 0:27:0 gen 0, fixing [ 51.942032][ T8377] bcachefs (a46a46fb-710c-4d8a-8a40-d337fbcdfe7d): btree ptr not marked in member info btree allocated bitmap [ 51.942038][ T8377] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq efdd7a26d7396dd5 written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing [ 51.946732][ T8377] bcachefs (a46a46fb-710c-4d8a-8a40-d337fbcdfe7d): bucket 0:38 data type btree ptr gen 0 missing in alloc btree [ 51.946740][ T8377] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq efdd7a26d7396dd5 written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing [ 51.947072][ T8377] bcachefs (a46a46fb-710c-4d8a-8a40-d337fbcdfe7d): btree ptr not marked in member info btree allocated bitmap [ 51.947077][ T8377] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 17c752e9adf22e73 written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing [ 51.962880][ T8377] bcachefs (a46a46fb-710c-4d8a-8a40-d337fbcdfe7d): bucket 0:41 data type btree ptr gen 0 missing in alloc btree [ 51.962908][ T8377] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 17c752e9adf22e73 written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing [ 51.963078][ T8377] bcachefs (a46a46fb-710c-4d8a-8a40-d337fbcdfe7d): bucket 0:31 data type btree ptr gen 0 missing in alloc btree [ 51.963083][ T8377] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq f8777fbb972634df written 16 min_key POS_MIN durability: 1 ptr: 0:31:0 gen 0, fixing [ 51.963204][ T8377] bcachefs (a46a46fb-710c-4d8a-8a40-d337fbcdfe7d): btree ptr not marked in member info btree allocated bitmap [ 51.963209][ T8377] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq adc4350e9aab42a2 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing [ 51.974852][ T8377] bcachefs (a46a46fb-710c-4d8a-8a40-d337fbcdfe7d): bucket 0:35 data type btree ptr gen 0 missing in alloc btree [ 51.974861][ T8377] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq adc4350e9aab42a2 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing [ 51.975019][ T8377] bcachefs (a46a46fb-710c-4d8a-8a40-d337fbcdfe7d): btree ptr not marked in member info btree allocated bitmap [ 51.975024][ T8377] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ef15a85bfc7569df written 16 min_key POS_MIN durability: 1 ptr: 0:32:0 gen 0, fixing [ 51.989622][ T8377] bcachefs (a46a46fb-710c-4d8a-8a40-d337fbcdfe7d): bucket 0:32 data type btree ptr gen 0 missing in alloc btree [ 51.989652][ T8377] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ef15a85bfc7569df written 16 min_key POS_MIN durability: 1 ptr: 0:32:0 gen 0, fixing [ 51.989814][ T8377] bcachefs (a46a46fb-710c-4d8a-8a40-d337fbcdfe7d): bucket 0:28 data type btree ptr gen 0 missing in alloc btree [ 51.989819][ T8377] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 67ab6f3a2516f441 written 16 min_key POS_MIN durability: 1 ptr: 0:28:0 gen 0, fixing [ 51.989921][ T8377] bcachefs (a46a46fb-710c-4d8a-8a40-d337fbcdfe7d): btree ptr not marked in member info btree allocated bitmap [ 51.989926][ T8377] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 771f68864d6973cb written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing [ 51.990667][ T8377] bcachefs (a46a46fb-710c-4d8a-8a40-d337fbcdfe7d): bucket 0:29 data type btree ptr gen 0 missing in alloc btree [ 51.990672][ T8377] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 771f68864d6973cb written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing [ 51.990817][ T8377] bcachefs (a46a46fb-710c-4d8a-8a40-d337fbcdfe7d): bucket 0:40 data type btree ptr gen 0 missing in alloc btree [ 51.990822][ T8377] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 8c6eef4d5041243d written 8 min_key POS_MIN durability: 1 ptr: 0:40:0 gen 0, fixing [ 51.993438][ T8377] done [ 51.998655][ T8377] bcachefs (a46a46fb-710c-4d8a-8a40-d337fbcdfe7d): going read-write [ 52.010605][ T8462] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 52.018616][ T8377] bcachefs (a46a46fb-710c-4d8a-8a40-d337fbcdfe7d): journal_replay... [ 52.030099][ T8453] loop1: detected capacity change from 0 to 32768 [ 52.050432][ T8453] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 52.088251][ T8459] NILFS (loop2): vblocknr = 12 has abnormal lifetime: start cno (= 150994946) > current cno (= 3) [ 52.088287][ T8459] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=16) [ 52.104384][ T8377] done [ 52.105712][ T8459] Remounting filesystem read-only [ 52.107276][ T8377] bcachefs (a46a46fb-710c-4d8a-8a40-d337fbcdfe7d): check_alloc_info... [ 52.107616][ T8377] bcachefs (a46a46fb-710c-4d8a-8a40-d337fbcdfe7d): hole in alloc btree missing in freespace btree [ 52.107628][ T8377] device 0 buckets 9-16, fixing [ 52.107912][ T8377] bcachefs (a46a46fb-710c-4d8a-8a40-d337fbcdfe7d): hole in alloc btree missing in freespace btree [ 52.107922][ T8377] device 0 buckets 24-25, fixing [ 52.107991][ T8377] bcachefs (a46a46fb-710c-4d8a-8a40-d337fbcdfe7d): hole in alloc btree missing in freespace btree [ 52.108000][ T8377] device 0 buckets 26-27, fixing [ 52.108192][ T8377] bcachefs (a46a46fb-710c-4d8a-8a40-d337fbcdfe7d): hole in alloc btree missing in freespace btree [ 52.108200][ T8377] device 0 buckets 36-37, fixing [ 52.109704][ T8453] XFS (loop1): Ending clean mount [ 52.121780][ T8377] done [ 52.122657][ T8377] bcachefs (a46a46fb-710c-4d8a-8a40-d337fbcdfe7d): check_lrus... [ 52.122816][ T8377] bcachefs (a46a46fb-710c-4d8a-8a40-d337fbcdfe7d): incorrect lru entry: lru fragmentation time 268435456 [ 52.122826][ T8377] u64s 5 type set 18446462599001276416:72057594037927970:0 len 0 ver 0 [ 52.122834][ T8377] for u64s 5 type deleted 256:34:0 len 0 ver 0, fixing [ 52.130694][ T8377] done [ 52.130998][ T8453] XFS (loop1): Quotacheck needed: Please wait. [ 52.131906][ T8377] bcachefs (a46a46fb-710c-4d8a-8a40-d337fbcdfe7d): check_btree_backpointers... done [ 52.138814][ T8377] bcachefs (a46a46fb-710c-4d8a-8a40-d337fbcdfe7d): check_backpointers_to_extents... done [ 52.139308][ T8377] bcachefs (a46a46fb-710c-4d8a-8a40-d337fbcdfe7d): check_extents_to_backpointers... [ 52.139508][ T8377] bcachefs (a46a46fb-710c-4d8a-8a40-d337fbcdfe7d): scanning for missing backpointers in 10/128 buckets [ 52.147267][ T6556] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer [ 52.154382][ T8377] done [ 52.158565][ T8377] bcachefs (a46a46fb-710c-4d8a-8a40-d337fbcdfe7d): check_inodes... [ 52.158847][ T8377] bcachefs (a46a46fb-710c-4d8a-8a40-d337fbcdfe7d): inode points to missing dirent [ 52.158868][ T8377] inum: 4097:4294967295 [ 52.158872][ T8377] mode=40700 [ 52.158876][ T8377] flags=(15300000) [ 52.158879][ T8377] journal_seq=1 [ 52.158882][ T8377] hash_seed=4bb7eeeea2eab677 [ 52.158884][ T8377] hash_type=siphash [ 52.158887][ T8377] bi_size=288230376151711744 [ 52.158890][ T8377] bi_sectors=0 [ 52.158893][ T8377] bi_version=0 [ 52.158895][ T8377] bi_atime=206860942 [ 52.158898][ T8377] bi_ctime=206860942 [ 52.158901][ T8377] bi_mtime=206860942 [ 52.158904][ T8377] bi_otime=206860942 [ 52.158906][ T8377] bi_uid=0 [ 52.158909][ T8377] bi_gid=0 [ 52.158912][ T8377] bi_nlink=0 [ 52.158914][ T8377] bi_generation=0 [ 52.158917][ T8377] bi_dev=0 [ 52.158920][ T8377] bi_data_checksum=0 [ 52.158922][ T8377] bi_compression=0 [ 52.158925][ T8377] bi_project=0 [ 52.158928][ T8377] bi_background_compression=0 [ 52.158931][ T8377] bi_data_replicas=0 [ 52.158933][ T8377] bi_promote_target=0 [ 52.158936][ T8377] bi_foreground_target=0 [ 52.158939][ T8377] bi_background_target=0 [ 52.158942][ T8377] bi_erasure_code=0 [ 52.158944][ T8377] bi_fields_set=0 [ 52.158947][ T8377] bi_dir=4096 [ 52.158950][ T8377] bi_dir_offset=3388744104375484416 [ 52.158952][ T8377] bi_subvol=0 [ 52.158955][ T8377] bi_parent_subvol=0 [ 52.158958][ T8377] bi_nocow=0 [ 52.158965][ T8377] bi_depth=0 [ 52.158968][ T8377] bi_inodes_32bit=0 [ 52.158971][ T8377] bi_casefold=0, fixing [ 52.159005][ T8377] bcachefs (a46a46fb-710c-4d8a-8a40-d337fbcdfe7d): directory 4097:4294967295 with nonzero i_size 288230376151711744, fixing [ 52.162929][ T8377] done [ 52.178154][ T8377] bcachefs (a46a46fb-710c-4d8a-8a40-d337fbcdfe7d): resume_logged_ops... done [ 52.182190][ T8377] bcachefs (a46a46fb-710c-4d8a-8a40-d337fbcdfe7d): delete_dead_inodes... done [ 52.190517][ T8453] XFS (loop1): Quotacheck: Done. [ 52.199637][ T8377] bcachefs (a46a46fb-710c-4d8a-8a40-d337fbcdfe7d): Fixed errors, running fsck a second time to verify fs is clean [ 52.199669][ T8377] bcachefs (a46a46fb-710c-4d8a-8a40-d337fbcdfe7d): check_extents_to_backpointers... done [ 52.201330][ T8377] bcachefs (a46a46fb-710c-4d8a-8a40-d337fbcdfe7d): check_inodes... done [ 52.201682][ T8377] bcachefs (a46a46fb-710c-4d8a-8a40-d337fbcdfe7d): resume_logged_ops... done [ 52.212141][ T8377] bcachefs (a46a46fb-710c-4d8a-8a40-d337fbcdfe7d): delete_dead_inodes... done [ 52.216413][ T8486] loop4: detected capacity change from 0 to 16 [ 52.221254][ T8377] bcachefs (a46a46fb-710c-4d8a-8a40-d337fbcdfe7d): done starting filesystem [ 52.222898][ T8486] erofs (device loop4): mounted with root inode @ nid 36. [ 52.244318][ T8486] erofs (device loop4): invalid de[0].nameoff 0 @ nid 36 [ 52.289864][ T8482] loop3: detected capacity change from 0 to 32768 [ 52.294850][ T8482] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.713 (8482) [ 52.298250][ T8482] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 52.298296][ T8482] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm [ 52.298327][ T8482] BTRFS info (device loop3): using free-space-tree [ 52.305296][ T6553] bcachefs (a46a46fb-710c-4d8a-8a40-d337fbcdfe7d): shutting down [ 52.305320][ T6553] bcachefs (a46a46fb-710c-4d8a-8a40-d337fbcdfe7d): going read-only [ 52.305347][ T6553] bcachefs (a46a46fb-710c-4d8a-8a40-d337fbcdfe7d): finished waiting for writes to stop [ 52.305761][ T6551] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 52.336059][ T6553] bcachefs (a46a46fb-710c-4d8a-8a40-d337fbcdfe7d): flushing journal and stopping allocators, journal seq 19 [ 52.336164][ T6553] bcachefs (a46a46fb-710c-4d8a-8a40-d337fbcdfe7d): flushing journal and stopping allocators complete, journal seq 19 [ 52.346202][ T6553] bcachefs (a46a46fb-710c-4d8a-8a40-d337fbcdfe7d): clean shutdown complete, journal seq 20 [ 52.346633][ T6553] bcachefs (a46a46fb-710c-4d8a-8a40-d337fbcdfe7d): marking filesystem clean [ 52.379138][ T6553] bcachefs (a46a46fb-710c-4d8a-8a40-d337fbcdfe7d): shutdown complete [ 52.458176][ T2170] BTRFS info (device loop3): qgroup scan completed (inconsistency flag cleared) [ 52.509082][ T6552] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 52.548475][ T8525] loop2: detected capacity change from 0 to 8 [ 52.580213][ T8527] netlink: 19 bytes leftover after parsing attributes in process `syz.3.725'. [ 52.858582][ T8545] loop4: detected capacity change from 0 to 32768 [ 52.867433][ T8545] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 52.880177][ T8545] OCFS2: ERROR (device loop4): int __ocfs2_find_path(struct ocfs2_caching_info *, struct ocfs2_extent_list *, u32, path_insert_t *, void *): Owner 65 has invalid tree depth 312 in extent list [ 52.880234][ T8545] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 52.880243][ T8545] OCFS2: File system is now read-only. [ 52.880249][ T8545] (syz.4.737,8545,1):ocfs2_find_leaf:1948 ERROR: status = -30 [ 52.880260][ T8545] (syz.4.737,8545,1):ocfs2_get_clusters_nocache:421 ERROR: status = -30 [ 52.880271][ T8545] (syz.4.737,8545,1):ocfs2_fiemap:786 ERROR: status = -30 [ 52.898773][ T6557] ocfs2: Unmounting device (7,4) on (node local) [ 53.192379][ T8541] loop1: detected capacity change from 0 to 131072 [ 53.203645][ T8541] F2FS-fs (loop1): Wrong NAT boundary, start(2560) end(5) blocks(1024) [ 53.203700][ T8541] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 53.244215][ T8580] netlink: 12 bytes leftover after parsing attributes in process `syz.4.751'. [ 53.274596][ T8541] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 53.279098][ T8541] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 53.279121][ T8541] F2FS-fs (loop1): Mounted with checkpoint version = 753bd00b [ 53.289957][ T8586] loop3: detected capacity change from 0 to 1024 [ 53.301497][ T8586] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.320337][ T8591] loop4: detected capacity change from 0 to 256 [ 53.355899][ T6552] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.614958][ T8612] ieee802154 phy0 wpan0: encryption failed: -22 [ 53.657160][ T8617] openvswitch: netlink: Message has 1255 unknown bytes. [ 53.657197][ T8617] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 53.684436][ T8619] netlink: 4 bytes leftover after parsing attributes in process `syz.3.770'. [ 53.700236][ T8615] loop1: detected capacity change from 0 to 4096 [ 53.702467][ T8615] ntfs3(loop1): ino=3, Correct links count -> 2. [ 53.728840][ T8615] ntfs3(loop1): ino=1a, mi_enum_attr [ 53.728876][ T8615] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 53.769003][ T8615] ntfs3(loop1): failed to convert "0000" to iso8859-2 [ 53.772945][ T8615] ntfs3(loop1): failed to convert name for inode 1e. [ 53.773125][ T8615] ntfs3(loop1): ino=1f, mi_enum_attr [ 53.950655][ T8650] netlink: 4 bytes leftover after parsing attributes in process `syz.1.784'. [ 54.019439][ T8642] loop4: detected capacity change from 0 to 32768 [ 54.023930][ T8634] loop3: detected capacity change from 0 to 40427 [ 54.026861][ T8634] F2FS-fs (loop3): Image doesn't support compression [ 54.026886][ T8634] F2FS-fs (loop3): build fault injection rate: 690 [ 54.035073][ T8634] F2FS-fs (loop3): invalid crc value [ 54.057378][ T8634] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 54.066270][ T8634] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 54.071482][ T8642] XFS (loop4): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 54.079014][ T8666] loop1: detected capacity change from 0 to 512 [ 54.089666][ T6552] syz-executor: attempt to access beyond end of device [ 54.089666][ T6552] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 54.089717][ T6552] CPU: 1 UID: 0 PID: 6552 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-g8f5ae30d69d7 #0 PREEMPT [ 54.089727][ T6552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 54.089733][ T6552] Call trace: [ 54.089737][ T6552] show_stack+0x2c/0x3c (C) [ 54.089751][ T6552] __dump_stack+0x30/0x40 [ 54.089758][ T6552] dump_stack_lvl+0xd8/0x12c [ 54.089763][ T6552] dump_stack+0x1c/0x28 [ 54.089768][ T6552] f2fs_handle_critical_error+0x34c/0x4b8 [ 54.089776][ T6552] f2fs_stop_checkpoint+0x5c/0x70 [ 54.089783][ T6552] f2fs_write_end_io+0x768/0xa70 [ 54.089789][ T6552] bio_endio+0x804/0x840 [ 54.089796][ T6552] submit_bio_noacct+0x158/0x176c [ 54.089801][ T6552] submit_bio+0x3b4/0x550 [ 54.089806][ T6552] f2fs_submit_write_bio+0x13c/0x324 [ 54.089811][ T6552] __submit_merged_bio+0x254/0x704 [ 54.089817][ T6552] __submit_merged_write_cond+0x23c/0x4ac [ 54.089823][ T6552] f2fs_write_data_pages+0x1d28/0x2634 [ 54.089829][ T6552] do_writepages+0x270/0x468 [ 54.089836][ T6552] filemap_fdatawrite+0x14c/0x1f4 [ 54.089843][ T6552] f2fs_sync_dirty_inodes+0x2b8/0x788 [ 54.089848][ T6552] f2fs_write_checkpoint+0x690/0x16a0 [ 54.089853][ T6552] kill_f2fs_super+0x21c/0x584 [ 54.089859][ T6552] deactivate_locked_super+0xc4/0x12c [ 54.089867][ T6552] deactivate_super+0xe0/0x100 [ 54.089873][ T6552] cleanup_mnt+0x31c/0x3ac [ 54.089878][ T6552] __cleanup_mnt+0x20/0x30 [ 54.089883][ T6552] task_work_run+0x1dc/0x260 [ 54.089890][ T6552] do_notify_resume+0x174/0x1f4 [ 54.089896][ T6552] el0_svc+0xb8/0x180 [ 54.089903][ T6552] el0t_64_sync_handler+0x84/0x12c [ 54.089908][ T6552] el0t_64_sync+0x198/0x19c [ 54.089916][ T6552] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 54.135724][ T8642] XFS (loop4): Ending clean mount [ 54.136077][ T8642] XFS (loop4): Metadata CRC error detected at xfs_inobt_read_verify+0x50/0xf0, xfs_finobt block 0x20 [ 54.136099][ T8642] XFS (loop4): Unmount and run xfs_repair [ 54.136104][ T8642] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 54.136111][ T8642] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff FIB3............ [ 54.136116][ T8642] 00000010: 00 00 00 00 00 00 00 20 00 00 00 01 00 00 00 40 ....... .......@ [ 54.136120][ T8642] 00000020: 9f 1c ad 42 11 bd 4e 12 8f 0b f0 78 76 b8 1d 9a ...B..N....xv... [ 54.136125][ T8642] 00000030: 00 00 00 00 8a d2 18 46 00 00 16 80 00 00 40 37 .......F......@7 [ 54.136129][ T8642] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00 ................ [ 54.136133][ T8642] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 09 00 00 ................ [ 54.136137][ T8642] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 54.136141][ T8642] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 54.136192][ T8642] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x1f8/0x380" at daddr 0x20 len 8 error 74 [ 54.136269][ T8642] XFS (loop4): Failed to initialize disk quotas, err -117. [ 54.159149][ T8666] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.178740][ T6557] XFS (loop4): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 54.178944][ T6557] XFS (loop4): Uncorrected metadata errors detected; please run xfs_repair. [ 54.223617][ T6551] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.243289][ T8681] netlink: 60 bytes leftover after parsing attributes in process `syz.3.788'. [ 54.243518][ T8678] netlink: 60 bytes leftover after parsing attributes in process `syz.3.788'. [ 54.269575][ T8680] loop4: detected capacity change from 0 to 4096 [ 54.303196][ T8680] ntfs3(loop4): ino=3, Correct links count -> 2. [ 54.322979][ T8680] ntfs3(loop4): ino=1a, mi_enum_attr [ 54.323022][ T8680] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 54.348983][ T8680] ntfs3(loop4): failed to convert "0000" to iso8859-2 [ 54.352545][ T8680] ntfs3(loop4): failed to convert name for inode 1e. [ 54.352992][ T8680] ntfs3(loop4): ino=1f, mi_enum_attr [ 54.426751][ T8695] netlink: 4 bytes leftover after parsing attributes in process `syz.4.798'. [ 54.432817][ T31] kauditd_printk_skb: 39 callbacks suppressed [ 54.432872][ T31] audit: type=1400 audit(54.410:51): lsm=SMACK fn=smk_ipv4_check action=denied subject="_" object=")" requested=w pid=8694 comm="syz.3.799" daddr=224.0.0.1 [ 54.436235][ T8690] loop1: detected capacity change from 0 to 32768 [ 54.441534][ T8690] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.795 (8690) [ 54.446457][ T31] audit: type=1400 audit(54.430:52): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject=")" object="_" requested=w pid=23 comm="ksoftirqd/1" saddr=10.128.0.169 src=30028 daddr=10.128.1.237 dest=56134 netif=enp0s0 [ 54.450118][ T31] audit: type=1400 audit(54.430:53): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject=")" object="_" requested=w pid=4610 comm="kworker/u8:7" saddr=10.128.0.169 src=30028 daddr=10.128.1.237 dest=56134 netif=enp0s0 [ 54.450157][ T31] audit: type=1400 audit(54.430:54): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject=")" object="_" requested=w pid=4610 comm="kworker/u8:7" saddr=10.128.0.169 src=30028 daddr=10.128.1.237 dest=56134 netif=enp0s0 [ 54.460618][ T8690] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 54.460669][ T8690] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm [ 54.460703][ T8690] BTRFS info (device loop1): using free-space-tree [ 54.476928][ T31] audit: type=1400 audit(54.460:55): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject=")" object="_" requested=w pid=23 comm="ksoftirqd/1" saddr=10.128.0.169 src=30028 daddr=10.128.1.237 dest=56134 netif=enp0s0 [ 54.477003][ T31] audit: type=1400 audit(54.460:56): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject=")" object="_" requested=w pid=23 comm="ksoftirqd/1" saddr=10.128.0.169 src=30028 daddr=10.128.1.237 dest=56134 netif=enp0s0 [ 54.480443][ T8705] C: renamed from team_slave_0 (while UP) [ 54.485619][ T8705] validate_nla: 15 callbacks suppressed [ 54.485832][ T8705] netlink: 'syz.4.800': attribute type 4 has an invalid length. [ 54.485951][ T8705] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 54.519204][ T31] audit: type=1400 audit(54.500:57): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject=")" object="_" requested=w pid=6569 comm="udevd" saddr=10.128.0.169 src=30028 daddr=10.128.1.237 dest=56134 netif=enp0s0 [ 54.542363][ T8719] loop4: detected capacity change from 0 to 256 [ 54.542803][ T8719] exfat: Deprecated parameter 'utf8' [ 54.542816][ T8719] exfat: Deprecated parameter 'utf8' [ 54.542826][ T8719] exfat: Deprecated parameter 'utf8' [ 54.557106][ T8719] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d) [ 54.601503][ T31] audit: type=1400 audit(54.580:58): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject=")" object="_" requested=w pid=8721 comm="syz-executor" saddr=10.128.0.169 src=30028 daddr=10.128.1.237 dest=56134 netif=enp0s0 [ 54.601626][ T31] audit: type=1400 audit(54.580:59): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject=")" object="_" requested=w pid=31 comm="kauditd" saddr=10.128.0.169 src=30028 daddr=10.128.1.237 dest=56134 netif=enp0s0 [ 54.602112][ T31] audit: type=1400 audit(54.580:60): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject=")" object="_" requested=w pid=6551 comm="syz-executor" saddr=10.128.0.169 src=30028 daddr=10.128.1.237 dest=56134 netif=enp0s0 [ 54.608596][ T6551] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 61.286311][ T31] kauditd_printk_skb: 17 callbacks suppressed [ 61.286350][ T31] audit: type=1400 audit(61.270:78): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject=")" object="_" requested=w pid=24 comm="kworker/1:0" saddr=10.128.0.169 src=30028 daddr=10.128.1.237 dest=56134 netif=enp0s0 [ 61.295308][ T31] audit: type=1400 audit(61.280:79): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject=")" object="_" requested=w pid=0 comm="swapper/1" saddr=10.128.0.169 src=30028 daddr=10.128.1.237 dest=56134 netif=enp0s0 [ 64.486692][ T2411] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.486742][ T2411] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.494875][ T2274] cfg80211: failed to load regulatory.db [ 68.328020][ T31] audit: type=1400 audit(68.310:80): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject=")" object="_" requested=w pid=4610 comm="kworker/u8:7" saddr=10.128.0.169 src=30028 daddr=10.128.1.237 dest=56134 netif=enp0s0 [ 68.463238][ T31] audit: type=1400 audit(68.440:81): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject=")" object="_" requested=w pid=0 comm="swapper/1" saddr=10.128.0.169 src=30028 daddr=10.128.1.237 dest=56134 netif=enp0s0 [ 82.407858][ T31] audit: type=1400 audit(82.390:82): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject=")" object="_" requested=w pid=14 comm="kworker/u8:1" saddr=10.128.0.169 src=30028 daddr=10.128.1.237 dest=56134 netif=enp0s0 [ 82.543184][ T31] audit: type=1400 audit(82.520:83): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject=")" object="_" requested=w pid=0 comm="swapper/1" saddr=10.128.0.169 src=30028 daddr=10.128.1.237 dest=56134 netif=enp0s0 [ 109.926830][ T31] audit: type=1400 audit(109.910:84): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject=")" object="_" requested=w pid=4610 comm="kworker/u8:7" saddr=10.128.0.169 src=30028 daddr=10.128.1.237 dest=56134 netif=enp0s0 [ 110.959294][ T31] audit: type=1400 audit(110.940:85): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject=")" object="_" requested=w pid=0 comm="swapper/1" saddr=10.128.0.169 src=30028 daddr=10.128.1.237 dest=56134 netif=enp0s0 [ 125.925059][ T2411] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.925101][ T2411] ieee802154 phy1 wpan1: encryption failed: -22 [ 158.729801][ T6555] Bluetooth: hci0: command 0x0c1a tx timeout [ 158.729844][ T6555] Bluetooth: hci4: command 0x0406 tx timeout [ 158.729867][ T6565] Bluetooth: hci3: command 0x0406 tx timeout [ 158.732792][ T6120] Bluetooth: hci2: command 0x0406 tx timeout [ 166.891097][ T31] audit: type=1400 audit(166.870:86): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject=")" object="_" requested=w pid=2274 comm="kworker/1:2" saddr=10.128.0.169 src=30028 daddr=10.128.1.237 dest=56134 netif=enp0s0 [ 168.303287][ T31] audit: type=1400 audit(168.280:87): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject=")" object="_" requested=w pid=0 comm="swapper/1" saddr=10.128.0.169 src=30028 daddr=10.128.1.237 dest=56134 netif=enp0s0 [ 168.964715][ T6560] Bluetooth: hci1: command 0x0405 tx timeout [ 187.365657][ T2411] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.365697][ T2411] ieee802154 phy1 wpan1: encryption failed: -22 [ 214.885225][ T32] INFO: task syz-executor:6556 blocked for more than 143 seconds. [ 214.886664][ T32] Not tainted 6.17.0-rc1-syzkaller-g8f5ae30d69d7 #0 [ 214.888282][ T32] ** replaying previous printk message ** [ 214.888282][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 214.888300][ T32] task:syz-executor state:D stack:0 pid:6556 tgid:6556 ppid:1 task_flags:0x400140 flags:0x00000011 [ 214.888323][ T32] Call trace: [ 214.888327][ T32] __switch_to+0x418/0x87c (T) [ 214.888344][ T32] __schedule+0x13b0/0x2864 [ 214.888352][ T32] schedule+0xb4/0x230 [ 214.888359][ T32] io_schedule+0x84/0xf0 [ 214.888364][ T32] folio_wait_bit_common+0x56c/0x9e0 [ 214.888374][ T32] __filemap_get_folio+0x1ec/0xc38 [ 214.888381][ T32] truncate_inode_pages_range+0x38c/0xe18 [ 214.888388][ T32] truncate_inode_pages_final+0x8c/0xbc [ 214.888393][ T32] evict+0x420/0x928 [ 214.888400][ T32] evict_inodes+0x638/0x6d0 [ 214.888405][ T32] generic_shutdown_super+0xa0/0x2b8 [ 214.888413][ T32] kill_block_super+0x44/0x90 [ 214.888419][ T32] deactivate_locked_super+0xc4/0x12c [ 214.888426][ T32] deactivate_super+0xe0/0x100 [ 214.888433][ T32] cleanup_mnt+0x31c/0x3ac [ 214.888439][ T32] __cleanup_mnt+0x20/0x30 [ 214.888444][ T32] task_work_run+0x1dc/0x260 [ 214.888451][ T32] do_notify_resume+0x174/0x1f4 [ 214.888459][ T32] el0_svc+0xb8/0x180 [ 214.888465][ T32] el0t_64_sync_handler+0x84/0x12c [ 214.888471][ T32] el0t_64_sync+0x198/0x19c [ 214.888498][ T32] [ 214.888498][ T32] Showing all locks held in the system: [ 214.888503][ T32] 1 lock held by khungtaskd/32: [ 214.888507][ T32] #0: ffff80008f9a9060 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire+0x4/0x48 [ 214.888529][ T32] 2 locks held by pr/ttyAMA-1/43: [ 214.888545][ T32] 1 lock held by klogd/6156: [ 214.888550][ T32] 2 locks held by getty/6310: [ 214.888553][ T32] #0: ffff0000d2f050a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c [ 214.888570][ T32] #1: ffff80009bbae2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x34c/0xfa4 [ 214.888591][ T32] 1 lock held by syz-executor/6556: [ 214.888594][ T32] #0: ffff0000d27aa0e0 (&type->s_umount_key#90){+.+.}-{4:4}, at: deactivate_super+0xd8/0x100 [ 214.888616][ T32] [ 214.888618][ T32] ============================================= [ 214.888618][ T32] [ 214.888623][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 214.922233][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted 6.17.0-rc1-syzkaller-g8f5ae30d69d7 #0 PREEMPT [ 214.923885][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 214.925368][ T32] Call trace: [ 214.925848][ T32] show_stack+0x2c/0x3c (C) [ 214.926534][ T32] __dump_stack+0x30/0x40 [ 214.927234][ T32] dump_stack_lvl+0x30/0x12c [ 214.927923][ T32] dump_stack+0x1c/0x28 [ 214.928537][ T32] vpanic+0x280/0x780 [ 214.929118][ T32] vpanic+0x0/0x780 [ 214.929638][ T32] hung_task_panic+0x0/0x2c [ 214.930293][ T32] kthread+0x5fc/0x75c [ 214.930899][ T32] ret_from_fork+0x10/0x20 [ 214.931575][ T32] SMP: stopping secondary CPUs [ 214.932343][ T32] Kernel Offset: disabled [ 214.933016][ T32] CPU features: 0x40000,00007800,109c1141,5427fea7 [ 214.933973][ T32] Memory Limit: none [ 215.158795][ T32] Rebooting in 86400 seconds..