last executing test programs: 12.793469507s ago: executing program 1 (id=827): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000a40)={[{@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@dioread_lock}, {@norecovery}, {@abort}, {@lazytime}, {@noload}, {@nojournal_checksum}, {@noauto_da_alloc}]}, 0xfe, 0x54d, &(0x7f0000000400)="$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") r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x8000, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000640)={0x10000, 0x0, 0x0, "000000000000004000000d0000000000000000000000000000000100"}) creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) mkdir(0x0, 0x0) pipe2$9p(0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r1) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r4, @ANYRES32, @ANYBLOB="24002d801a0001"], 0x64}}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) 11.185595837s ago: executing program 3 (id=834): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) r3 = syz_open_procfs(r2, &(0x7f0000000600)='fd/4\x00') ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000040)=ANY=[]) 11.012253065s ago: executing program 3 (id=835): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x1c14744, &(0x7f00000001c0)={[{@jqfmt_vfsv1}, {@abort}]}, 0xff, 0x490, &(0x7f0000000f40)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open$dir(&(0x7f0000001640)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000080)=@v1={0x2, @aes128, 0x0, @desc2}) 10.433555256s ago: executing program 3 (id=837): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x0, &(0x7f0000000240), 0x21, 0x4a6, &(0x7f0000000a40)="$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") socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) fsetxattr(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='security.c'], 0x0, 0x0, 0x0) flistxattr(r0, 0x0, 0x19) 8.848959062s ago: executing program 3 (id=840): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000002c0)={0x0, 0x4, 0x0, 0x0, @vifc_lcl_addr=@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000280)={@broadcast, @empty, 0x0, "614af285791a63abd0f993af8077b5cd01e03d64a831683fdc3fd440829c82ae"}, 0x3c) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000200)=0x41c16f48c89e823e, 0x4) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, 0x0, 0x8) 8.017721597s ago: executing program 3 (id=843): mkdir(&(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000440)='./file0\x00', 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) syz_mount_image$btrfs(&(0x7f0000000200), &(0x7f0000005600)='./file0\x00', 0x800, &(0x7f0000000240), 0x0, 0x559e, &(0x7f0000005680)="$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") r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r2) close(r2) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29, r1}, './file0\x00'}) 7.469576561s ago: executing program 1 (id=847): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'nicvf0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x300) 6.849153688s ago: executing program 1 (id=848): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events.local\x00', 0x275a, 0x0) ftruncate(r1, 0xde34) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x9, 0x13, r1, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x40047452, 0x2000000a) 6.377387119s ago: executing program 1 (id=851): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f0000000140)={[{@nossd_spread}, {@nodatacow}, {@enospc_debug}, {@nossd}, {@nodatasum}, {@autodefrag}, {@user_subvol_rm}, {@max_inline={'max_inline', 0x3d, [0x6d, 0x33, 0x78, 0x39, 0x65, 0x36]}}]}, 0x1, 0x50f3, &(0x7f000000a2c0)="$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") r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r2 = open(&(0x7f0000007f80)='./bus\x00', 0x145142, 0x0) ftruncate(r2, 0x96ef) sendfile(r1, r2, 0x0, 0x1000000201005) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x1}], 0x1, 0x7800, 0x0, 0x0) 5.260183126s ago: executing program 3 (id=853): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8004}, 0x4) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="0000080000000200088b2f01000846"], 0xfdef) 4.564435838s ago: executing program 0 (id=854): syz_usb_connect(0x0, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000091c2f20c81403006c050102030109021b00010000000009040000018ea44300090585da24"], 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000880), 0x200000000000002, 0x862b01) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0x40184810, &(0x7f0000000140)={0x3, 0x3}) ioctl$EVIOCSABS0(r1, 0x401845c0, &(0x7f0000000080)={0x4, 0x0, 0x0, 0x2}) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) 4.334051153s ago: executing program 1 (id=856): syz_mount_image$bcachefs(&(0x7f0000002040), &(0x7f0000000080)='./file1\x00', 0x810000, &(0x7f00000012c0)=ANY=[@ANYRES64], 0x1, 0x5b70, &(0x7f000000ac40)="$eJzs3Q2QXFWdKPB7u2eSnkwSJigQw0cGCHmBJzAh+IAUlgOvBHwaRMCggiSRTMJgPiAzMRDFBKpEC3m+VL1XilZpUZRW8YqidJda14+1grWItbCWqXLZ4O66WKC1slsYC0GzhDJbM33vTPedPn3vdPfEAL9fwdy+t0//z/mfe+bOvadvuiMAAADeFJ74zMgfrlz07ifvHnpl1xXf23xX1Fse315JC/Qly9v/XC3kSJrdtXB8mR0XewZnPfGu+973zFc/+o3nnl+wbPnXb7ns0G1zV9177+DPLjj0kz/dmRc3HU9nTq7HL8ZRdPJPl33xnh89dcLYtjiKonLctzuKFsSlHy6I09d2JctXoyhaP9HO+viPvrJiw9hy9+dn120/JtMO4/3NrZKMs8/+YOtJvznnsmf2/vzSVwYqr27bPVkkrtSMpyiav7b29d1RFPUk/49JR9vC9MXJ8qooiubUvO7CnHadVrD9ZwfWFyXLWcmyNydO+vypmfXugu3oyiwrBV/XqtIMx0+l+2/uDNcfB7an9SxIlt9OlmdOM345/T+OSnHUNVHdpnhyjEQ1+y2O4vF9P7leqhsLcWZsxFEUZ9ZLmfVydyav8XqTgVaO4/rtabnM9v5ke1ey/dScsXZNYPvb0nyTX9SDmfyzQXunPIhqftsn2/XLJm05Ekp1rZq6Pd3xlWRn9CbbeuNjp7zmcAPpc6uf/8I3n9v5tSV9gXbE34qT+HFL8Z/efNH+pTt/cWBhKP7aUhK/1FL8kXNeeuSFq398QjD+njR+uTb+jpoQTeM/e/7SL31/146Dwf75Xdo/XS21v7zyrEPL7x5YHWz/A2n8SkvxH7z04a/Mf8fjjwTbP5D2T09L8Z8d3v7a9Q8ddyAYP0rjz2kp/iUvH3/Gyq0PbwzGfyztn96W4j81MrzqnpsX7+gPxd+Xxp/XUvzTfnXD9Xv3Dz0bbP9g2j99LcV/55JLrlp1YMt9oWNnvPtI/YUFeGN6S3KO9blkvdXrzHbVXC/c3xdXz/nmJv/PK3eypnpj9cyfufAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvEk92Ld+6E/fPeW1rmR9dvLglHJ1mW6fFUVxTxRFI6Prto0Ob9nYf8vW7du2rNvUv260f2jL6LY7+s9/e/+2oVs3rbtj7NmBs1dUX3dsFFeX8clT6j58+PDhUl/9trS+j1/wfx/tP2X/P0XRwHE/O6Ur2P7337nofy5o8DMjHjy86f+cceMLc/9ue3VDX9KuvkC7okC7Ln7oxZW/+V7P/46igeObtevfll3+o7oGjW+YjJMozY5K4w9mx3MatmOi1Ul70v7q2jC8aWggv3/LgTx+ffAvP7hj5Kbd1f6tBPMo2L89g4f/uOU7j9108c6rqhuO1v2e199pFmn70v6rJP09P8lrfiCvrkBe95xx6r/+45c3v7g7Guj6/eKpdefl1Z0MgO74bYXqTWuYE9f3SSUpn+7x9HXnjm6+9dyRO3aePbx53cahjUNbVqxYceH5K8674Lz/ce546tWfHcs/rf+/Fcy/bjzF8ZR6OzOetl4wOJz+LDae8sZ5Xn+MtSu/P2pbFPr9e+u1l//zXX+15+rqhrxxnpaeOJ4kyzlju3l5VDPepvZVo7zy+qE70A8br+n9/y/3b/3PvONQ7Z6p/ZkRDx7+/fDfv2vu3tNvrG44Isf52ga1eJyfaHXSnu7a487yo7d/Z0flJK/ehu06/e6XPvQP3437J9o3a1Z0+7rR0W3Lqz+b5nXtoi/f0pm83nrNpzqb14VL/+O2nWvvWjAlr/OqP+cmLZ0bn9iwXdmtaV6Lx3+Wo6Rb0kVUKTXOrzuqti/7dyF9XbZXe5PneuNjG+aVlT63+vkvfPO5nV9bEurp+FvVGnuiedVlfFLNs5trHm/KvLA80eBG9eeN+yiK1tZuS/vxse/8v/69Ty7YnDs+qiNjys9seoOHP33R3F+PXLdvVXXDkTmu1DSoxePKRKsn2zPeX+PHlfOOnjz+fPu57hcrHjy896S3b1zxN6PJr31e/06UbtS/K6Io7ziwOLM+U8eBbD2T5RvH68+s90bllo4bz56/9Evf37XjYPC48btmx41an6pbK7d53IgD42n/p//ij5/c//R7OnfceM/S8kf+ZfGKpEOPlt+3SjKuK4FxPdHqpD1x7bg+56atm9ZXtx+957/JMuf6J/37PXLHzo+v27RpaNtIsbyKnm+l9WR7udXzkvS379icvNL9NZlX0wdPFigTfFCkv4r+vqXtX5/trxZ/36CR3ihu6e/Z05sv2r905y8O9AXixmtLSfxSS/FHznnpkReu/vEJwfh70vhdLcUvrzzr0PK7B1YH4z8QJ/ErLcV/8NKHvzL/HY8/Eow/kLa/p7XzieHtr13/0HHh/o/S+L0txX9qZHjVPTcv3hGMvy9O6hk7t4uiR19ZsaG6HkfdyXE4bUd3Xbui7HqcWS9l1su166XqHPxEBeVkDmxie1ou2R4+c6m6LoqifbOnbk/PHisLq8uD6XqUfdB8+9GmVHNO0Gh73vk1ALyRpO//p+ca6fv/i5M/iDXv/1eX8ay61y9MzqcWTm4av867q78URafmXxdm5/XSdmTn9dL4y06vj9HqvF7evNxpmfW0XYuTXknb0+S8YW5UYF5uaj3N5+Uy6efPm/V/LrOha3xuL7TfupOZikbvM2faO3csQrvn2Qsbt3riPDs07rLzHen79HF/dUdM976IdP9m74tI4y/KTKC1el9Eu+MundZoMu7GM8ufT506LqIm/To5LhpHy46LaYyjvuo4mtn3pV7/1/szO//+pplPiHbX90/B+YSj/Xo/3Z4eH7qS7afmXJqvDmzv1DxAerhI2/XLJm05EswDAMDk9X96TjF2/T/2t7o/c56fd92SvcpI4wXvYyk3bk/e9e/U+9nmtHReecnLx5+xcuvDG4PnxY8VvS/l1rq1OTn3peT145LMem4/Bm4FyZt3WJop3xvNa6kfT/vVDdfv3T/0bLAfB6snUvn9uKdubV6b/bgss57bj92NW5XXj9l68sbvmZn13uSOoOn2+zuXXHLVqgNb7gv2++6i/f5A3VpfTr+/aa7To0pdfNfpb473/fPmI/9s8wDJvPVMzQNcE9g+3XmA3ikPJvIa97qbBwj8XQCA17P0+n/ifvnk+v9vM+XavT4MnrcNduZ+1uB528R5bXvn5cH2T5yXt3ddFIw/cV3U3vuLwf6ZuG5p77orGH/iuqu9eZpg/zyW9s/U8/5dBeKn5/2hfy6Qnve//q+LZnaewXVRsh5lH1S5LgIA4GiQXv+np6vp/f+PJ+vZc+OZv86d6evQmb6Onul5hpmeJ3m9X+dWB/Bk/LhQ/HbmGYrELz7P0Ll5trrr50HzAJF5gMLMAwAAvDG8O1neWLB81/g9xFH0sZtuPm/N+qFPrNmwbWho5NZ1Nw2tGd4yPDpRrnv8Hd6p90mH6su7T7pR+TlNyq9pUL7UoD2XBcqHtJt/qL68/BuVb5b/2mD8+vZcHigf0m7+ofry8m9Uvln+64Lx69tzRaB8SLv5h+rLy79R+Wb5fywYv7497wmUD2k3/1B9efk3Kt8s/5uC8evb878C5UPazT9UX17+jco3yz/7eZmh/N8bKB/SZv6V/PYVz6dZ/kPB+PX5vy9QPqTd/R+qLy//RuWb5b8hGL++PasC5UPazT9UX17+jco3y39jMH59e64MlA9pN/9QfXn5NyrfLP+bg/Hr2/P+QPmQdvMP1ZeXf6PyzfIfDsavb89VgfJ1aiaO280/VF9e/o3KN8v/lmD8+vZ8IFA+pN38Q/Xl5d+ofLP8Px6MX9+eqwPlQ9rNP1RfXv6NyjfLf1Mwfn17rpksP6txpHrt5n9NbvuK59Ms/83B+PXtuTZQPqTd/EP15eXfqHyz/LcE49e354OB8iHt5h+qLy//RuWb5b81GL++PasD5UPayr+nSPuK59Ms/1uD8evzvy5QPqTd/R+qLy//RuWb5X9bMH59ez4UKB/Sbv6h+vLyb1S+Wf7bgvHr2/PhQPmQdvMP1ZeXf6PyzfIfCcavb89HAuVD2s0/VF9e/o3KN8t/NBi/vj3XB8qHtJt/qL68/BuVb5b/9mD8+vbcECgf0m7+ofry8m9Uvln+nwjGr2/PRwPlQ9rNP1RfXv6NyjfLf0cwfn17bgyUD2k3/1B9efk3Kt8s/9uD8evbsyZQPmQi/9FtQ0Nrtt+6ft3o0JotW9cPjazZsW14dHQoOVFr977E4H1lyX2J3VFX0/wXZdaPSe4DPCbw+UDZ8mnYE8cfTP18oGy1XTmfk5O3v7L1533OUKPyjcZbaP/mHQ+Kjoesut+P6iAZ3jIytG3q8bunaX/UjolofOK4evJciY8vVD77cZ2BanIVz6fSNJ/s5tnJVPjs+LhC5aPA98FNV/F84mA+jdox3e+xS8NO63vsMj+maPAZrXX5bhgZP0gPr9s0vHNoavvnHAXtL9KPuzvejtKUduTt/zjTHwuSliwIfd9boP92fPvfH/ztb//6vVE0cFz5pLb6Lx48vPbg8R/76cWzzx1rf6lp+ydKpt+r3OD7D0tNyqf5dG3aOjL63zds3b6l8Tto6f3OpYn1GbrfOcmzXPD+5dD9HtO9fzme8uDoVPT+ZQAAgDeL9N//p9erC5N/g7ogM0VQfB64vX8fHZwH3ldsHjg7G5E3D5wtn6ZddB64t8154Gz9oXnaUpPyzd53yZ0HTu5R+Eig/HQVHydNPgfgmKmDJX0u/RyA4DhJeipvnGT/HX7eOMmWn+446WlznGTrzxsnjco3e3+66PsF1wXKhxQfDy187kT/5OdOBMfDQLHxkP1ezfrxMHUSPlt+uuOh0uZ4yNafNx4alW92v07R8XBtoHxRxcdHe58LExwfa4uNj+z3peQdL7Llpzs+4jbHR7b+vPHRqHyz+xmLjo8PBMqniu//9j63J7j/9xTb/9nvbcnb/9ny093/pTb3f7b+vP3fqHyz+7mL7v8rA+VT9ft/bMeP7/ehNTu2bqu9B3rmvl+1+TsBxds3s99b06ri7Z/Zz32a+fbP7OdKzXz7k2WL103B9u+L23qrq3j7Z/Z7iVp1xN6PTf41Rd7nT+W9T/vhwPbpvk87a8qDo5P3aQEAAGDmpe//p1/Hn34+/OeTZeBr+lt21Hy/97TniTvzPYW+f7vlecykHvN5R7MZnM9rFBYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOANa3bXwvHlE58Z+cOVi9795N1Dr+y64nub79ozOOuJd933vme++tFvPPf8gmXLv37LZYdum7vq3nsHf3bBoZ/86c7cwH3VxZnJaiWK4hfjKDr5p8u+eM+PnjphbFscRVE57tsdRQvi0g/jbISBV6MoWj/RzvonH31lxYax5e7Pz67bfkwmSDavqLectqeundHtuRnxOlRJxtlnf7D1pN+cc9kze39+6SsDlVe37Z4sEldqxlMUzV9b+/ruKIp6kv/HpKNtYfriZHlVFEVzal53YU67TivY/rMD64uS5axk2ZsTJ33+1Mx6d8F2dGWWlYKva1VphuOn0v03d4brn3J0y9SzIFl+O1meOc345fT/OCrFUddEdZviyTES1ey3OIrH9/3keqluLMSZsRFHUZxZL2XWy92ZvMbrTQZaOY7rt6flMtv7k+1dyfZTc8baNYHtb0vzTX5RD2byzwbtnfJgIq9xabt+2aQtR0Kp5hjUaHva3kqyM3qTbb3xsVNec7iB9LnVz3/hm8/t/NqSvkB98bfiJH7cUvynN1+0f+nOXxxYGMgzXltK4pdaij9yzkuPvHD1j08Ixt+Txi+3FP/Z85d+6fu7dhzsC8X/Xdo/XS3FL68869DyuwdWB9v/QBq/0lL8By99+Cvz3/H4I8H2D6T909Na/wxvf+36h447EIwfpfHntBT/kpePP2Pl1oc3BuM/lvZPb0vxnxoZXnXPzYt39Ifi70vjz2sp/mm/uuH6vfuHnu2r75TJh4Np//S1FP+dSy65atWBLfeFjp3x7iP1FxbgjektyTnW55L1Vq8z21VzvXB/X1z9UzI3+X9eJyvKGKtn/gzGBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgjWno8vt3Xb5vzRVdcRTFgTKHG0ifK88aHOxvod7yyrMOLb97YHXttoUtxAEAAADypdfhpYktlWhhtCPuiU5sWD6dIzgxXYvrt2fnEHomS3YkTqlDccoditPVoTjdHYozq0NxZncoTiUnTiUqFqenaZxS4fbM6VCc3g7FmduhOPM6FGd+h+Ic06E4fU3jFB+HCzoU59gOxXlLh+K8tUNxjutQnOM7FOeEDsXJzilPdxzOS0ouCsUZf1DOjdMVlyeeaDSfntZzcuZ1pWnW01uwnuyc/XTr6SlYz+lt1lMpWM/SNuuJC9ZzZpv1lHLqScft7dn2pfWkawXH/x0dirOzQ3E+2aE4n+pQnDs7FOfTHYqzq804AEWl1/+T14190eyui6M5yREnOwuQXu8urr56yvGokr1AT6TxTspsn5UXL3uhnom3uMPtOy2zvbsuXtfEeVOTeH218ZZknszNNzuhkGnfsunGy04sAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAMGrr8/l2X71tzRRRHY/819F/s2l2MXGX5APD37HyyLfyn/0AdSKEjpRUj0tJF+UgNB72YJQYlgJqA6W4pQ92w3UV2m8KKrPWCeKFCoomrF8ZwhSHEqEGJkiwXGoOSsInBJoKSqETRAAmQUBOTMbtzznx1prOMQgv+fhfn432f93nOmW2aPO9MvYd0LpOP48oQdT/956//4E8L372gfayQHSIRAAAAMFDah+eaI8VQyO4M+SjfEVdM9gGKyX2m1DhHlZG182i06YTx2SR+5/zBO3bO3b3wwamD+w7UDtRmxsbGLr90bPdluz+887ap6dquxjEUBuTLJfnm7l64fd/0dO3OucZ993OXk3Xl1tDk6uFI8tz/P6BOlMS36rx1F4P/WgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcHLVqkuL1ZWJ8dEohKhPTL2HdC6Tj+PKEHWvfn3z9itnHz7QPlbIDpEIAAAAGCjtw3PNkWIoZDMhE85euzu/FVoKodX3AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/3tq1aXF6srE+IYohKhPTL2HdC6Tj+PKEHV/Mzd17X2f23q4faw8RB4AAABgsLQPH2mOFEM5bAu56OyOuHRv4Jyu9d1xaZ5z1xnXvXfQL27bOuN2rDPu/QPiPpGc7woAAADwzpf2/9nmSCkUsqf37f8H9fVp3NauuExyHua3AgAAAMB/Ju3/882Rcihky81+fb39/vldcen6Qd/bp+sHfW+fxl3Yp0739/kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwKmrVl1arK5MjGeiEKI+MfUe0rlMPo4rQ9R9/tId3/r54uFj7WOF7BCJAAAAgIHSPrzVehdDITsacmHDWt9/+Y5/fH5h8simXCmZzufDXfvm5+/c3Timcdu+/Grn9kEad0nj+Da/FgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8BaoVZcWqysT46dFIUR9Yuo9pHOZfBxXhqj7/NShf9380FmvtI+Vh8gDAAAADJb24a3evxjKIR/yYfPaXXuvv2qka32/PQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg3WPu7oXb901P1+504cKFi+bFyf6fCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOFXUqkuL1ZWJ8WIUQtQnpt5DOpfJx3FliLoPfvTh75zxoV880j5WHiIPAAAAMFjah7d6/2Ioh1zIhbPW7nrtCaz1/6W38SEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBTQq26tFhdmRg/PQoh6hNT7yGdy+TjuDJE3fP/8tmbl4/Wnm8fK2SHSAQAAAAMlPbh+eZIMRSyl4RC2JLcT3cuiDLJufe+QGvdHR3LRte97p6OdZl1r/tK15tlk7dprCum+UqNc3Nd5fh1lRBCOX/cRzXZsS480DF5+rqf83sd60oD1h33FAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHAKqFWXFqsrE+NRFELUJ6beQzqXycdxZYi6zxy84uiOhT+80j5WHiIPAAAAMFjah7d6/2Ioh3PDGeHctb4/lDrj07g9D7105d9+dtrXQti1+bfnZfvm/+uF1V92H0IY6QwaCeH/knpRn3qHf/L3B19++acfD2HXWZktb7ZeZ8q4Pnls8y1P7ynsPMEHAwAAAO8iaf+fa46UQiE707f/TzvvN9X/z555wz2bkmPSkXetGCkl9Ub61Lv9sm/8uHLe0d+v9v8nqvfJL57zsU1h9rJ4Kj02RrpEcX36/u17X9z45KH0rRv1M13108/lhWM/+tThuf1fatQvhmIyfk62V/3jj11Oi+tvzDz2xP49C9d11s/2ef/7tr/3j7/79sGXVuu/tnW0Wf99J3j/E9c/88bqs0cefeD6zvq5PvUP3LDh+69XZv/Z/f6jXYmTT77xB2/7K3SJ4vprU09dtXF5297O+iGEyfbA9PN/4rFvVpZ/velgWj/9rciF27rqt/1Taz927TlFcX15y0UHxh6f39BZP+qqn77/0Xt/+MYXjj5zTff739r9/n3rd7//NTsyNz23dWyYH88AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALwD1KpLi9WVifGQCSHqE1PvIZ3L5OO4MkTdj1xw9XXXvjLz1faxQnaIRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMB/Ta26tFhdmRgfiUKI+sTUe0jnMvk4rgxRd+7iVx958fpfvad9rDxEHgAAAGCwtA9v9f7FUA75kA+ja33/5LHNtzy9p7AzlBqzUXLOTs/OzX/gttlDM7eepCcHAAAA1ivt/7PNkVIoZC8IuaT/X95y0YGxx+c3pP1/CGFy9VC8bWq6Nhaa+wTX7Mjc9NzWsUpzn6A97uL9s9PJNkGa994rNr4w95mVa3vm3d2Ke23qqas2Lm/bm8blkvNa3CWtuOn7t+99ceOTh9K4kXSfYjVuVyvujZnHnti/Z+G6dD7Tnq8t7swbq88eefSB65t5kvNoUhcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgH+zAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhf06CrGqiOMAPHPvrl6967ZblJsUqZhokKxUVEK0CkkPbUiBLxb4kJWRSS1hCOEmZGESPlUERURBIFIQ9FCEBWWQREGE9hCG9lAPsRFtiBsVuzuze/foabdTqyDfB4dx5tzzm/+ZM569FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg/Jrb1jPWHn564Pc7F932+e4tw7tuf3/bU/v75hy+dd8dx165980TJ7tXrH7jofUjj3b0793b9/WNI1/8+eS0wU+MNytTtxFC/DmGcOWXK17Y8+mRhaNjMYRQj12DIXTH2sfdsZDQezqEcN9EnVNPvjt83f2j7eBzc6eMX1QIKd5XaNZzPeO6ptbLhaWR9tkzH26/4sdV648d+nbdcG/j9GODkx+JjZb9FELn5tbr20MI89IxKu+2nnxxajeEEOa3XHfTNHUtnWH915b0F6V2Tmqb0+Tk80sK/fYZ1tFWaBszvK6q2iznZ/n5dczy/MWXW3Ge7tS+l9qV/zK/no8YajG0TUz3cJzcI6HlucUQx579ZL82ZS/Ewt6IIcRCv1bo19sL9zU2b9po9RinjufPFcYXp/G2NL5kmr12d8n45fl+03/UU4X7L4Y2z/jHxH2NyXV9/w+1nAu1lnfQ2cZzvY30MJpprBkvPuOav84in9t48vm3T+x8dVlXSR3xnZjyY6X8b7bdfHT5zu+GesryN9dSfq1S/sCqXw/+dNdnC0vz9+f8eqX849cvf/GDXTtOla7PL3l92irl19dcM7J6d+/G0vpfy/mNSvmvrzvwcucNnxwsrb83r8+8auuz9fE/Nr116VBpfsj58yvlr/3tsqvXbD/wQGn+R3l9mpXyjwxs7d/z4FU7Fpflf5XzF1TKX/rDPZsOHd1yvLT+vrw+XZXyb1m2dkP/0CP7yt6dcfBc/YUFuDBdkr5jPZv6VX9n/lctvxde6orj3/k60rHg/5yoYHSezlnMBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4G924IAEAAAAQND/1+0IFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4KkAAAD//5fwTSY=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0xc118bc0b, &(0x7f0000000280)={0x1f}) 3.339362163s ago: executing program 2 (id=859): syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES64], 0x0, 0x14f, &(0x7f0000000240)="$eJzs289KAlEUx/HfqKnZP8tqES2CINrkqIHVzh5FdBJpLMk2ShA9Su9Xi3atMhz0hqMQGHrJ+X42np+Hi2cWV89GAYisio7kyFFyEA7T2eecY3skAAvSH75+9QFET/zT9gQA7Hi/ltqS3j6eaoonJ/aDQb8y6sdSk/0X6SAx7DtprYb3i1fpZHTeyUw9nzH9tan90+PR569rQ5vaUlbb2lFu2K+b8/t/2IQAAIgOR/lwHnsjppum7xVMXgly0eRkkEuhfG5yKsj52r1fn9cjAJhR7Jf7Hw/d/0To/gP4vzrd3m3V970HCgoKClPY/mYCMG/uY6vtdrq9s2ar2vAa3l25VC5fFS4vim6w+Lvj6z+AJfLzo297EgAAAAAAAAAAAAAAMKtd7dkeAQAAAMCCLOLvRLafEQAAAAAAAAAAAAAAAACAZfMdAAD///JsITY=") mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') rmdir(&(0x7f00000002c0)='./file0\x00') 3.146260023s ago: executing program 5 (id=752): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000002c0)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0xc, 0x0, &(0x7f00000001c0)=[@acquire, @enter_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x20, 0x0, &(0x7f0000000280)=[@request_death, @clear_death], 0x0, 0x0, 0x0}) 2.837055966s ago: executing program 2 (id=860): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x44, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_HIGH={0x8, 0x14, 0x5}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5}]}, 0x44}}, 0x0) 2.836838737s ago: executing program 5 (id=861): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000015dded20b40402103f81000000010902120001000000000904"], 0x0) 2.779779944s ago: executing program 0 (id=862): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_service_bytes\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161) 2.716819547s ago: executing program 4 (id=756): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) pivot_root(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='./file0/file0\x00') 2.569499275s ago: executing program 0 (id=863): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x40000000}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_NAT_REG_PROTO_MIN={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc0}}, 0x0) 2.557345271s ago: executing program 4 (id=864): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800714, &(0x7f00000003c0)={[{@dioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x7}}, {@quota}, {@noinit_itable}, {@errors_continue}, {@errors_continue}, {@errors_remount}, {@delalloc}, {@auto_da_alloc}, {@norecovery}, {@errors_continue}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}]}, 0xee, 0x442, &(0x7f0000000d00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x26e1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)='2', 0x1, 0x8000c61) pwritev2(r1, &(0x7f00000000c0)=[{&(0x7f0000000200)="df", 0x1}], 0x1, 0x800001, 0x0, 0x0) fallocate(r0, 0x3, 0x80000, 0x8000c62) 2.530398752s ago: executing program 2 (id=865): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40802, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x8902, &(0x7f0000000000)) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 2.423234731s ago: executing program 0 (id=866): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)) r1 = socket$packet(0x11, 0x3, 0x300) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000080)) 2.145572582s ago: executing program 0 (id=867): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000180)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r2 = syz_open_pts(r1, 0x0) dup3(r2, r1, 0x0) ppoll(&(0x7f0000000140)=[{r1}], 0x1, 0x0, 0x0, 0x0) ioctl$TCSETA(r2, 0x402c542d, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, "dac7a15f305b57a3"}) 1.859223836s ago: executing program 4 (id=868): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000008700)=[{{0x0, 0x0, &(0x7f0000003700)=[{&(0x7f0000003cc0)='\v', 0x1}, {&(0x7f0000003400)="bb9b5667f3a888eff12cc55b78fe0993cf4d9f9713b4cb1a88530e4633ca5b65295cd892c7985783646f1428362b3329b36ba2075a2d7f90e24e36", 0x3b}, {&(0x7f0000003580)="58ec2878b07017e8f771a6", 0xb}, {&(0x7f0000005fc0)="7fb9d54d0576081441c17d8df40d90e9ddbefb2dabc945859d0ae9a2ca403fceee5013def32fa4a4a9cf4a5eb4c5c714843fc3f9dd6ab80f46ff7be995e478982b325d708b2a861ee0071518317cf1890ea75139a8defa1e751322b91c10ef4aa42d277aa3c02669eb9cd198207cdd93d914301d8d1d47140357ea121ca0bf80df486f97f46c6d33853ae74fa293cee0eb30c154c272658a2af224bf113e0af0f781a77c03574a8588842c0d18925a4b692bdc4d0ec72a1f4d558450ac75a06046965ab7be95e70d52463e9b9fb96a2ec8d8926bebfc9e1909b34b6b3dc5f36b89937f15d2e8edd496945e8ee27c4e36e8bb7e756715f042ab43d59c6757f2397a91f67e5264aaed496eaa45e5d525acc5db9268159dce8b78b0d6a6c41f40ba9d48600288d848d667ec40ea77815df10ac74b2e99acf187755d58ce4da47a74796c0661a5fdfa34c238fe04e2a0766c2277712027a6ca42bf526d53903fbb91a4abf312a0bb1cb328262fefeaa64b901563f0b589ee8ad77c232f7c5d43747f1b4505b11bfdf2dca1a84f85407138fa9da5446ec3e0fdfd7c6ae178beb0aa94cdbceaac58cbfa0753e9c44420488c011df59cf288b79a3d10451cc671a20eef573df6ef43ebaafe04b777f652e36eceb95106c6ed5b9e7480448ec2091ffc9babeef60acbf3658de0a32ace746593c2440102b34536e90cb51695ad59e62b4d789414d761908da1b3c32bcc0e0e4705464b8fa2d983a65c2e9b6dd09008348c61d7720c46cd1fe0fe2cf17a5b2052a333dbe38aceb6bfb08c6d42903971ae7d1a183bb896ec650796b64cb1b7f34fbecc60abb54079bf15d1c1eb08ce293bf526f8c5769630ba0c043de061602129984f9fd99edbe640b9bd11c9fa2f2a7539e02942e4e52d9233a7c782e3412557f8bfdf3fe31cd40c39dc1d91e56ab909642cfb16cf994afede04918312f5b039b93c1ff5938b53e9701a76a3e1550f92302e456f3fb3af2185d9e1dd3d434e36e703885a840c8affad56eeca949612644e1729e8fb325a8f23ae68933056d800e7cb6d42b87d307e908005633b0c7e568b44ec7e050b8fbb7190e223ad3fb432947854e2239e8cb0daf63714d742ae6e8d9ca0034d37c191f9a26c370d8afb36fd64f4435d08e5e6289349972f404f8cdb37b2f1b573bb8b5644", 0x349}], 0x4}}, {{0x0, 0x0, &(0x7f0000008200)=[{&(0x7f0000008040)="b6d671c250a760b2e1be9589e463a4", 0xf}, {&(0x7f0000008100)="95", 0x1}], 0x2}}], 0x2, 0x0) 1.510939741s ago: executing program 2 (id=869): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}}, 0x0) 1.390592924s ago: executing program 2 (id=870): unshare(0xc040480) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/unix\x00') getdents(r0, 0x0, 0x48) 1.257544138s ago: executing program 4 (id=871): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="48000000180001000000000000000000020000000000ff030000000008001e000100000006001d00000000cc"], 0x48}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) 1.206677362s ago: executing program 0 (id=872): syz_mount_image$bcachefs(&(0x7f0000000000), &(0x7f000000f680)='./file1\x00', 0x200012, &(0x7f0000000140)=ANY=[@ANYRES8], 0x1, 0xf62c, &(0x7f000000f6c0)="$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") truncate(&(0x7f0000000000)='./file1\x00', 0x0) truncate(&(0x7f00000000c0)='./file1\x00', 0x0) 1.204953596s ago: executing program 2 (id=873): syz_usb_connect(0x0, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000091c2f20c81403006c050102030109021b00010000000009040000018ea44300090585da24"], 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000880), 0x200000000000002, 0x862b01) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0x40184810, &(0x7f0000000140)={0x3, 0x3}) ioctl$EVIOCSABS0(r1, 0x401845c0, &(0x7f0000000080)={0x4, 0x0, 0x0, 0x2}) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) 1.154667672s ago: executing program 5 (id=874): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_HE_OBSS_PD={0x10, 0x111, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5}]}]}, 0x24}}, 0x0) 977.48941ms ago: executing program 4 (id=875): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000000, &(0x7f00000001c0), 0x1, 0x4f7, &(0x7f0000000540)="$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") mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0) open(&(0x7f0000000200)='./bus\x00', 0x161b42, 0x0) rename(&(0x7f0000000000)='./bus\x00', &(0x7f0000000180)='./file1\x00') 968.878164ms ago: executing program 5 (id=876): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@enum, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x695, [{0x0, 0x3}]}, @volatile={0x0, 0x0, 0x0, 0x9, 0x1}]}}, 0x0, 0x4a}, 0x20) 846.486393ms ago: executing program 5 (id=877): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x44, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_HIGH={0x8, 0x14, 0x5}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5}]}, 0x44}}, 0x0) 730.924754ms ago: executing program 5 (id=878): syz_usb_connect(0x0, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000091c2f20c81403006c050102030109021b00010000000009040000018ea44300090585"], 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000880), 0x200000000000002, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, &(0x7f0000000080)=""/177) 433.501325ms ago: executing program 4 (id=879): syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000280)='./file0\x00', 0x2008412, &(0x7f0000000500)=ANY=[@ANYBLOB="66617374626f6f742c71756f7461000000000000003b814e50a959736d65720f73ecea54b5e5be45ace9a88f723cb005aeff24212c651baef614d442ae89412ad3dcd0b7586d02002a6d6d65cacd4fc5002207ce994dda65c4b1d23a9bd5ba0f4ce5c2b5a5718c6aa918080002223d2753a5cac974110144cd0a1e368652324a41b31e1eb3b32dccbdf8f68bd96a45a75427a5f789d267fd92f6a5540200b81d5b9fa9b40fe4d7fbd50a6afc3a989c6d60045663c59cbdc4c700000000bc7f6b22df0191acf5912afdcc1c061835177068c40f757dd123d2600b1c544f1525aa8d00000000000000000000002e8b5c733d362417c17f527c0bfebec112d57fc69fabb9b31ef97b2147931ff60cdf666c25244218b1f1a6010000000100000020563b835d0e8e9a09070ef1691fcb2f37bda5d4e3d9d7a2d0ac82b45a53001057f321acc45d5e065a461de90100000077d200000000000040b78f0dd3836f5ab2f6a1a5b798bb7752f192c6b48e568973a59cd9c74bd9a14721856c5499cd8f93f8beaa9cf76718ce7244c8426803000000005c000208886b313bd01a22d576e414011a4f0a897515329f86d4585fa0ea17068f8af349696da4a2b3e24310ca52ec51bc23b57897cb55a2d513e6a00765ee3f58b471c54dd57f0af584afe4a21f92b515d7f2fa6fbb273ca0f751e684584320534667aea39ad7222c8ef531f514939177a47395e94c1723abb3fd44fd64fde4b45cc2f55f4ae05ff48648a4c998257856bcdcf2fa02010000001f54fb936570450e91c8d55abad76a7b7a000016f81ec9da9ccc1191c211632266d907e4d9b23496ae19bac24dc23c43f514f1b4af19988bbe61ee29a368a999435d6872d01b79c7821e875859dfbf3c57e4f1fb0be46cb5f7a0fa13516c0926d19dd2d5862085e1e4cb8279be17cba17ee4d06ad97b4ca282e73ea142b01b4a742fa11c0927ba811dd60903d575db449d775021b542db617086b3ed42e6e60fe043cff79b0c067c584bbf82657974c3736912b4b522052b9467d0da116ccc1652d861a420f09aaf67d3e9f6160100000001000000ae6335ad9896abd3cc00413638cb9bc62ab8054325d72e9144cf4f88702f586507e3147198e0bc4060a7c8f4dce73b653177ecf8228e6e6fae02510000000000000000000000000000f43739fdd2d24e50e0233acfe1c8639070fe00f40b0d01f8a0a35fcfe3ea10faf9c24b8488ed4ed83fb06a9a7c57442ede9e1fc2853b8f4d2241cff61d0125b7750e3fdae6a4ab9c776a191ed8098a780ea2bbaa64978cd3a6458fcc6b949bcbca0dceb7361f66e46731eba4f3aed335e7c8c541e82453218a19d39489e1525466ac93759787e767f601931d94c9c426489b741a6bc8abf475e4bf859e1ce7f7227069e9f51e25fa3d1b18dc565180a1af464a1dd697db85e2b27b90f6bd7cf1b6bc0bcd8ba552ced3d3cfbf9c9bc04f65b6f83cb40173b4bdc393d47e5da95b63a40ac18daf11e8d0706b47795fbe2b56d0ea7ffc5a59ede88621a08b25ca6ebe041317b62373a60951af33eb7954a9731aaa125add0913ed2435a207439e9122512d77096747a4b404459cebc8faff8f7a31758e630c75a1ff90402754d339dc21cf6b8e04e1aedf14df0b4aaf0e03194df3eb41ba066bc343b323a3162d7e7ba687633c2faa8f28b42364b72e3a457476fd6b2a54e670ba798172c44c4390f73fdab743a4cac88b2bd0545b8483f2e2f9846b138a4d8a7332978da70e9050417087c5ae034a735e8b448dd9701404", @ANYRESDEC], 0x1, 0x553b, &(0x7f00000024c0)="$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") mknodat$null(0xffffffffffffff9c, 0x0, 0x0, 0x103) r0 = open(&(0x7f0000000000)='./bus\x00', 0x14d35e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4012011, r0, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) rename(&(0x7f0000000600)='./bus\x00', &(0x7f0000000f40)='./file0\x00') link(&(0x7f0000001240)='./file0\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 0s ago: executing program 1 (id=880): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYBLOB="00000000000000001400350064756d6d793000000000000000000000cc00348014"], 0x100}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) socket$xdp(0x2c, 0x3, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) ppoll(&(0x7f0000000480)=[{r0}, {}, {r2}], 0x3, &(0x7f0000000100)={0x77359400}, 0x0, 0x2000) kernel console output (not intermixed with test programs): 107.085:42): pid=7206 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.569" name="/newroot/37/bus/file1" dev="loop3" ino=11 res=1 errno=0 [ 210.781407][ T29] audit: type=1804 audit(1721410107.085:43): pid=7207 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.569" name="/newroot/37/bus/file1" dev="loop3" ino=11 res=1 errno=0 [ 211.640420][ T7193] loop0: detected capacity change from 0 to 32768 [ 211.851063][ T5100] Bluetooth: hci6: command tx timeout [ 211.876339][ T7191] chnl_net:caif_netlink_parms(): no params data found [ 211.946436][ T5161] IPVS: starting estimator thread 0... [ 211.985601][ T7224] 9pnet_fd: Insufficient options for proto=fd [ 212.091575][ T7226] IPVS: using max 16 ests per chain, 38400 per kthread [ 212.752140][ T7237] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 212.759151][ T7237] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 212.832069][ T7236] netlink: 'syz.3.574': attribute type 10 has an invalid length. [ 212.838135][ T7237] vhci_hcd vhci_hcd.0: Device attached [ 212.870983][ T7236] netlink: 40 bytes leftover after parsing attributes in process `syz.3.574'. [ 213.093832][ T7191] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.106026][ T5161] vhci_hcd: vhci_device speed not set [ 213.106460][ T7239] vhci_hcd: connection closed [ 213.149205][ T7191] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.180990][ T5161] usb 15-1: new full-speed USB device number 2 using vhci_hcd [ 213.209753][ T1279] vhci_hcd: stop threads [ 213.215482][ T7191] bridge_slave_0: entered allmulticast mode [ 213.225167][ T1279] vhci_hcd: release socket [ 213.254232][ T1279] vhci_hcd: disconnect device [ 213.257877][ T7191] bridge_slave_0: entered promiscuous mode [ 213.310301][ T7251] netlink: 'syz.1.583': attribute type 10 has an invalid length. [ 213.333623][ T7251] netlink: 55 bytes leftover after parsing attributes in process `syz.1.583'. [ 213.439432][ T7253] loop0: detected capacity change from 0 to 1024 [ 213.456374][ T7191] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.472533][ T7191] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.538624][ T7191] bridge_slave_1: entered allmulticast mode [ 213.572531][ T7253] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 213.592243][ T7191] bridge_slave_1: entered promiscuous mode [ 213.653999][ T7253] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #11: comm syz.0.584: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 213.708511][ T7253] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.584: couldn't read orphan inode 11 (err -117) [ 213.724141][ T7253] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.931312][ T5100] Bluetooth: hci6: command tx timeout [ 214.154897][ T7191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.263187][ T7264] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.584: Invalid block bitmap block 0 in block_group 0 [ 214.281887][ T7264] Quota error (device loop0): write_blk: dquota write failed [ 214.289707][ T7264] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 214.299808][ T7264] EXT4-fs error (device loop0): ext4_acquire_dquot:6848: comm syz.0.584: Failed to acquire dquot type 0 [ 214.312945][ T7259] vxcan0: tx address claim with different name [ 216.270877][ T5100] Bluetooth: hci6: command tx timeout [ 216.289151][ T7191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 216.544577][ T5092] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.730186][ T7191] team0: Port device team_slave_0 added [ 216.843721][ T7191] team0: Port device team_slave_1 added [ 217.087215][ T7275] netlink: 8 bytes leftover after parsing attributes in process `syz.1.590'. [ 217.117423][ T920] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 217.139892][ T7191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 217.171833][ T7191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.280926][ T7191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 217.316094][ T7191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 217.340858][ T920] usb 1-1: Using ep0 maxpacket: 8 [ 217.365839][ T920] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 217.380577][ T7191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.410891][ T920] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 217.444628][ T920] usb 1-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 217.473528][ T920] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.493474][ T7191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 217.522093][ T920] usb 1-1: config 0 descriptor?? [ 217.547289][ T920] hso 1-1:0.0: Can't find BULK IN endpoint [ 217.752821][ T920] usb 1-1: USB disconnect, device number 4 [ 217.941864][ T7191] hsr_slave_0: entered promiscuous mode [ 217.993498][ T7191] hsr_slave_1: entered promiscuous mode [ 218.019640][ T7191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 218.060877][ T7191] Cannot create hsr debugfs directory [ 218.331371][ T5100] Bluetooth: hci6: command tx timeout [ 218.336852][ T5161] vhci_hcd: vhci_device speed not set [ 219.026098][ T7286] loop4: detected capacity change from 0 to 32768 [ 219.126660][ T7191] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.211939][ T7286] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 219.564613][ T7286] XFS (loop4): Ending clean mount [ 219.572313][ T7298] loop5: detected capacity change from 0 to 32768 [ 219.579703][ T7298] XFS: ikeep mount option is deprecated. [ 219.656950][ T7191] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.677625][ T7298] XFS: noikeep mount option is deprecated. [ 219.811786][ T7298] XFS (loop5): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 220.091012][ T7330] loop3: detected capacity change from 0 to 32768 [ 220.129741][ T7304] loop1: detected capacity change from 0 to 32768 [ 220.214101][ T5091] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 220.241168][ T7304] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.600 (7304) [ 220.329366][ T7330] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=crc64,data_checksum=xxhash,compression=gzip,str_hash=crc64,nojournal_transaction_names [ 220.347611][ T7330] bcachefs (loop3): recovering from clean shutdown, journal seq 7 [ 220.355575][ T7330] bcachefs (loop3): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.9: disk_accounting_v2 [ 220.355575][ T7330] running recovery passes: check_allocations [ 220.459239][ T7330] bcachefs (loop3): accounting_read... done [ 220.465396][ T7330] bcachefs (loop3): alloc_read... done [ 220.470952][ T7330] bcachefs (loop3): stripes_read... done [ 220.476617][ T7330] bcachefs (loop3): snapshots_read... done [ 220.482685][ T7330] bcachefs (loop3): check_allocations... [ 220.510178][ T7330] btree ptr not marked in member info btree allocated bitmap [ 220.510204][ T7330] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 75277f57b0c8c24 written 32 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, shutting down [ 220.538270][ T7330] bcachefs (loop3): inconsistency detected - emergency read only at journal seq 7 [ 220.547556][ T7330] bcachefs (loop3): bch2_gc_mark_key(): error fsck_errors_not_fixed [ 220.555587][ T7330] bcachefs (loop3): bch2_gc_btree(): error fsck_errors_not_fixed [ 220.563409][ T7330] bcachefs (loop3): bch2_gc_btrees(): error fsck_errors_not_fixed [ 220.571329][ T7330] bcachefs (loop3): bch2_check_allocations(): error fsck_errors_not_fixed [ 220.579863][ T7330] bcachefs (loop3): bch2_fs_recovery(): error fsck_errors_not_fixed [ 220.587864][ T7330] bcachefs (loop3): bch2_fs_start(): error starting filesystem fsck_errors_not_fixed [ 220.597498][ T7330] bcachefs (loop3): shutting down [ 220.623698][ T7330] bcachefs (loop3): shutdown complete [ 220.669254][ T7298] XFS (loop5): Ending clean mount [ 220.795250][ T7191] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.871395][ T7304] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 220.885309][ T7298] XFS (loop5): Quotacheck needed: Please wait. [ 220.926535][ T7304] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 221.015726][ T7304] BTRFS info (device loop1): using free-space-tree [ 221.072464][ T7304] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 221.073357][ T7304] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 221.164491][ T7304] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 221.190644][ T7330] bcachefs: bch2_fs_get_tree() error: fsck_errors_not_fixed [ 221.324827][ T7191] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.331580][ T7298] XFS (loop5): Quotacheck: Done. [ 221.361863][ T7304] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 221.362388][ T7304] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 221.465601][ T7304] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 221.515426][ T7304] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 221.529727][ T7304] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 221.551390][ T7304] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 221.622427][ T7304] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 221.751275][ T7304] BTRFS error (device loop1): open_ctree failed [ 221.781871][ T5105] XFS (loop5): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 222.412322][ T7191] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 222.483650][ T7191] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 222.637640][ T7191] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 222.697342][ T7376] netlink: 'syz.1.612': attribute type 10 has an invalid length. [ 222.728913][ T7376] netlink: 40 bytes leftover after parsing attributes in process `syz.1.612'. [ 222.779232][ T7381] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 222.785798][ T7381] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 222.828718][ T7381] vhci_hcd vhci_hcd.0: Device attached [ 223.012706][ T7382] vhci_hcd: connection closed [ 223.014391][ T35] vhci_hcd: stop threads [ 223.053037][ T35] vhci_hcd: release socket [ 223.069938][ T35] vhci_hcd: disconnect device [ 223.103821][ T7389] loop3: detected capacity change from 0 to 512 [ 223.134356][ T7191] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 223.195486][ T7389] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=2842c018, mo2=0002] [ 223.221683][ T7389] System zones: 0-2, 18-18, 34-35 [ 223.250658][ T7389] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.268357][ T7389] ext4 filesystem being mounted at /47/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 223.319617][ T35] team0: left allmulticast mode [ 223.350958][ T35] team_slave_0: left allmulticast mode [ 223.366801][ T35] team_slave_1: left allmulticast mode [ 223.386397][ T29] audit: type=1326 audit(1721410120.095:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7388 comm="syz.3.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b99d75b59 code=0x7ffc0000 [ 223.412112][ T35] bridge0: port 3(team0) entered disabled state [ 223.429223][ T29] audit: type=1326 audit(1721410120.095:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7388 comm="syz.3.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b99d75b59 code=0x7ffc0000 [ 223.456196][ T29] audit: type=1326 audit(1721410120.135:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7388 comm="syz.3.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0b99d75b59 code=0x7ffc0000 [ 223.488725][ T7389] EXT4-fs error (device loop3): ext4_add_entry:2435: inode #2: comm syz.3.615: Directory hole found for htree leaf block 0 [ 223.543729][ T35] bridge_slave_1: left allmulticast mode [ 223.549405][ T35] bridge_slave_1: left promiscuous mode [ 223.562735][ T7394] EXT4-fs error (device loop3): ext4_add_entry:2435: inode #2: comm syz.3.615: Directory hole found for htree leaf block 0 [ 223.576075][ T29] audit: type=1326 audit(1721410120.135:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7388 comm="syz.3.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b99d75b59 code=0x7ffc0000 [ 223.620427][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.650587][ T29] audit: type=1326 audit(1721410120.135:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7388 comm="syz.3.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b99d75b59 code=0x7ffc0000 [ 223.689194][ T29] audit: type=1326 audit(1721410120.135:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7388 comm="syz.3.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f0b99d75b59 code=0x7ffc0000 [ 223.714005][ T35] bridge_slave_0: left allmulticast mode [ 223.719731][ T35] bridge_slave_0: left promiscuous mode [ 223.991208][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.071142][ T29] audit: type=1326 audit(1721410120.345:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7388 comm="syz.3.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b99d75b59 code=0x7ffc0000 [ 224.123135][ T7400] loop1: detected capacity change from 0 to 2048 [ 224.145279][ T7400] NILFS (loop1): invalid segment: Sequence number mismatch [ 224.145429][ T29] audit: type=1326 audit(1721410120.345:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7388 comm="syz.3.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b99d75b59 code=0x7ffc0000 [ 224.153287][ T7400] NILFS (loop1): trying rollback from an earlier position [ 224.206627][ T7400] NILFS (loop1): recovery complete [ 224.250086][ T29] audit: type=1326 audit(1721410120.435:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7388 comm="syz.3.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f0b99d75b59 code=0x7ffc0000 [ 224.276499][ T7405] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 224.339807][ T29] audit: type=1326 audit(1721410120.435:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7388 comm="syz.3.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b99d75b59 code=0x7ffc0000 [ 224.653934][ T5943] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.216386][ T5239] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 225.540925][ T5239] usb 6-1: Using ep0 maxpacket: 8 [ 225.572661][ T5239] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 225.639305][ T5239] usb 6-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 225.692177][ T5239] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.709534][ T7411] loop3: detected capacity change from 0 to 1024 [ 225.718778][ T5239] usb 6-1: config 0 descriptor?? [ 225.762139][ T7411] EXT4-fs: Ignoring removed oldalloc option [ 225.769296][ T5239] usb 6-1: selecting invalid altsetting 1 [ 225.794181][ T5239] usb 6-1: Can not set alternate setting to 1, error: -22 [ 225.802315][ T7411] EXT4-fs (loop3): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 225.819256][ T5239] synaptics_usb 6-1:0.0: probe with driver synaptics_usb failed with error -22 [ 226.026409][ T7411] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 226.103813][ T5106] usb 6-1: USB disconnect, device number 6 [ 226.184786][ T7407] loop0: detected capacity change from 0 to 32768 [ 226.305084][ T7407] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.619 (7407) [ 226.875700][ T7407] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 226.901929][ T7407] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 226.912709][ T7407] BTRFS info (device loop0): using free-space-tree [ 226.939287][ T5943] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.132342][ T7439] loop3: detected capacity change from 0 to 512 [ 227.141653][ T7439] EXT4-fs: Ignoring removed orlov option [ 227.141930][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 227.171349][ T7439] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=6040e09c, mo2=0102] [ 227.187513][ T7407] BTRFS info (device loop0): checking UUID tree [ 227.191669][ T7439] System zones: 1-12 [ 227.198104][ T7439] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.624: casefold flag without casefold feature [ 227.217442][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 227.223283][ T7439] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.624: couldn't read orphan inode 15 (err -117) [ 227.243817][ T35] bond0 (unregistering): Released all slaves [ 227.273993][ T7439] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 227.373086][ T7439] EXT4-fs error (device loop3): ext4_add_entry:2435: inode #2: comm syz.3.624: Directory hole found for htree leaf block 0 [ 227.605959][ T7451] loop1: detected capacity change from 0 to 16 [ 227.658832][ T7451] erofs: (device loop1): mounted with root inode @ nid 36. [ 227.734685][ T5943] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.018575][ T5092] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 228.689104][ T7191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.760862][ T5100] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 228.932407][ T35] hsr_slave_0: left promiscuous mode [ 228.938006][ T5100] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 228.968075][ T7473] loop1: detected capacity change from 0 to 1024 [ 229.184752][ T35] hsr_slave_1: left promiscuous mode [ 229.294223][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 229.346210][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 229.433426][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 229.477365][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 229.588652][ T7473] EXT4-fs (loop1): failed to open journal device unknown-block(0,0) -6 [ 229.650794][ T35] veth1_macvtap: left promiscuous mode [ 229.709097][ T35] veth0_macvtap: left promiscuous mode [ 229.730577][ T35] veth1_vlan: left promiscuous mode [ 229.755658][ T35] veth0_vlan: left promiscuous mode [ 229.765759][ T7473] loop1: detected capacity change from 0 to 1024 [ 230.511052][ T7457] loop3: detected capacity change from 0 to 40427 [ 230.656780][ T7457] F2FS-fs (loop3): Found nat_bits in checkpoint [ 230.823088][ T7484] loop0: detected capacity change from 0 to 2048 [ 230.902175][ T7484] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 231.933488][ T1279] hfsplus: b-tree write err: -5, ino 4 [ 232.024553][ T7498] loop3: detected capacity change from 0 to 24 [ 232.093812][ T7500] netlink: 12 bytes leftover after parsing attributes in process `syz.1.640'. [ 232.362300][ T7506] loop1: detected capacity change from 0 to 16 [ 232.380505][ T7506] erofs: (device loop1): mounted with root inode @ nid 36. [ 232.525179][ T7508] loop1: detected capacity change from 0 to 16 [ 232.541565][ T35] team_slave_1 (unregistering): left promiscuous mode [ 232.550444][ T7508] erofs: (device loop1): mounted with root inode @ nid 36. [ 232.567073][ T35] team0 (unregistering): Port device team_slave_1 removed [ 232.631014][ T7508] erofs: (device loop1): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 36 [ 232.634444][ T35] team_slave_0 (unregistering): left promiscuous mode [ 232.650182][ T7508] syz.1.645: attempt to access beyond end of device [ 232.650182][ T7508] loop1: rw=524288, sector=34359738360, nr_sectors = 1976 limit=16 [ 232.667034][ T35] team0 (unregistering): Port device team_slave_0 removed [ 232.823060][ T7510] loop1: detected capacity change from 0 to 1024 [ 232.830583][ T7510] EXT4-fs: Ignoring removed mblk_io_submit option [ 232.874832][ T7510] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.064163][ T7510] loop1: detected capacity change from 1024 to 0 [ 233.088098][ T7509] syz.1.646: attempt to access beyond end of device [ 233.088098][ T7509] loop1: rw=524288, sector=10, nr_sectors = 2 limit=0 [ 233.104562][ T7509] syz.1.646: attempt to access beyond end of device [ 233.104562][ T7509] loop1: rw=524288, sector=12, nr_sectors = 2 limit=0 [ 233.126816][ T7509] syz.1.646: attempt to access beyond end of device [ 233.126816][ T7509] loop1: rw=524288, sector=14, nr_sectors = 2 limit=0 [ 233.141170][ T7509] syz.1.646: attempt to access beyond end of device [ 233.141170][ T7509] loop1: rw=524288, sector=16, nr_sectors = 2 limit=0 [ 233.157924][ T7509] syz.1.646: attempt to access beyond end of device [ 233.157924][ T7509] loop1: rw=524288, sector=18, nr_sectors = 2 limit=0 [ 233.176348][ T7509] syz.1.646: attempt to access beyond end of device [ 233.176348][ T7509] loop1: rw=524288, sector=20, nr_sectors = 2 limit=0 [ 233.193558][ T7509] syz.1.646: attempt to access beyond end of device [ 233.193558][ T7509] loop1: rw=524288, sector=22, nr_sectors = 2 limit=0 [ 233.209487][ T7509] syz.1.646: attempt to access beyond end of device [ 233.209487][ T7509] loop1: rw=524288, sector=24, nr_sectors = 2 limit=0 [ 233.231161][ T7509] syz.1.646: attempt to access beyond end of device [ 233.231161][ T7509] loop1: rw=524288, sector=26, nr_sectors = 2 limit=0 [ 233.253617][ T7509] EXT4-fs error (device loop1): ext4_get_inode_loc:4574: inode #19: block 23: comm syz.1.646: unable to read itable block [ 233.274008][ T7509] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 233.284198][ T7509] EXT4-fs (loop1): I/O error while writing superblock [ 233.291443][ T7509] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5810: IO failure [ 233.300246][ T7509] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 233.311333][ T7509] EXT4-fs (loop1): I/O error while writing superblock [ 233.318119][ T7509] EXT4-fs error (device loop1): ext4_dirty_inode:6014: inode #19: comm syz.1.646: mark_inode_dirty error [ 233.331232][ T7509] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 233.339498][ T7509] EXT4-fs (loop1): I/O error while writing superblock [ 233.354724][ T7509] __quota_error: 25 callbacks suppressed [ 233.354743][ T7509] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 233.369473][ T7509] EXT4-fs error (device loop1): ext4_write_dquot:6828: comm syz.1.646: Failed to commit dquot type 0 [ 233.391266][ T7509] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 233.399637][ T7509] EXT4-fs (loop1): I/O error while writing superblock [ 233.406847][ T7509] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 233.422803][ T7509] EXT4-fs error (device loop1): ext4_write_dquot:6828: comm syz.1.646: Failed to commit dquot type 1 [ 233.434457][ T7509] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 233.443131][ T7509] EXT4-fs (loop1): I/O error while writing superblock [ 233.451207][ T7509] EXT4-fs error (device loop1): ext4_get_inode_loc:4574: inode #19: block 23: comm syz.1.646: unable to read itable block [ 233.464292][ T7509] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 233.473663][ T7509] EXT4-fs (loop1): I/O error while writing superblock [ 233.480495][ T7509] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5810: IO failure [ 233.489350][ T7509] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 233.500370][ T7509] EXT4-fs (loop1): I/O error while writing superblock [ 233.507305][ T7509] EXT4-fs error (device loop1): ext4_dirty_inode:6014: inode #19: comm syz.1.646: mark_inode_dirty error [ 233.520296][ T7509] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 233.529590][ T7509] EXT4-fs (loop1): I/O error while writing superblock [ 233.540323][ T7509] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 233.549331][ T7509] EXT4-fs error (device loop1): ext4_write_dquot:6828: comm syz.1.646: Failed to commit dquot type 0 [ 233.563261][ T7509] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 233.574112][ T7509] EXT4-fs (loop1): I/O error while writing superblock [ 233.581209][ T7509] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 233.589974][ T7509] EXT4-fs error (device loop1): ext4_write_dquot:6828: comm syz.1.646: Failed to commit dquot type 1 [ 233.603358][ T7509] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 233.643862][ T7510] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 233.658475][ T7510] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 233.755480][ T7191] 8021q: adding VLAN 0 to HW filter on device team0 [ 233.844552][ T5161] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.851792][ T5161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.905736][ T7514] loop5: detected capacity change from 0 to 512 [ 233.910435][ T5161] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.919229][ T5161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 233.947729][ T7518] loop3: detected capacity change from 0 to 512 [ 233.976318][ T7514] EXT4-fs (loop5): 1 truncate cleaned up [ 233.986767][ T7514] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 234.017682][ T7514] EXT4-fs error (device loop5): ext4_add_entry:2435: inode #2: comm syz.5.647: Directory hole found for htree leaf block 0 [ 234.049316][ T7518] EXT4-fs (loop3): 1 truncate cleaned up [ 234.102859][ T7518] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 234.143541][ T7521] loop0: detected capacity change from 0 to 4096 [ 234.207804][ T7518] EXT4-fs error (device loop3): ext4_add_entry:2435: inode #2: comm syz.3.648: Directory hole found for htree leaf block 0 [ 234.216428][ T7521] NILFS (loop0): invalid segment: Checksum error in segment payload [ 234.249235][ T7521] NILFS (loop0): trying rollback from an earlier position [ 234.258312][ T5105] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.281131][ T7521] NILFS (loop0): recovery complete [ 234.318818][ T7529] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 234.404444][ T5943] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.406996][ T7191] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 234.678195][ T7537] loop3: detected capacity change from 0 to 24 [ 235.073242][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.169936][ T7191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 235.299530][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.607609][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.228114][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.507239][ T7533] loop5: detected capacity change from 0 to 32768 [ 236.766824][ T7533] XFS (loop5): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 236.782457][ T5104] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 236.806661][ T7191] veth0_vlan: entered promiscuous mode [ 236.816160][ T5104] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 236.830369][ T5104] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 236.860979][ T5104] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 236.869368][ T5104] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 236.879275][ T5104] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 236.907587][ T7191] veth1_vlan: entered promiscuous mode [ 236.976803][ T7533] XFS (loop5): Ending clean mount [ 236.995868][ T7533] XFS (loop5): Quotacheck needed: Please wait. [ 237.081963][ T7544] loop4: detected capacity change from 0 to 32768 [ 237.095239][ T7544] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.660 (7544) [ 237.155568][ T7533] XFS (loop5): Quotacheck: Done. [ 237.157037][ T7544] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 237.247645][ T7544] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 237.257519][ T7544] BTRFS info (device loop4): using free-space-tree [ 237.335053][ T5105] XFS (loop5): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 237.365528][ T35] bridge_slave_1: left allmulticast mode [ 237.383373][ T35] bridge_slave_1: left promiscuous mode [ 237.389182][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.464144][ T35] bridge_slave_0: left allmulticast mode [ 237.469874][ T35] bridge_slave_0: left promiscuous mode [ 237.517241][ T7593] loop3: detected capacity change from 0 to 512 [ 237.530134][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.547479][ T7593] EXT4-fs (loop3): Test dummy encryption mode enabled [ 237.577689][ T7593] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #12: comm syz.3.668: corrupted in-inode xattr: invalid ea_ino [ 237.625947][ T7593] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.668: couldn't read orphan inode 12 (err -117) [ 237.704016][ T7593] EXT4-fs (loop3): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 237.818701][ T7593] EXT4-fs error (device loop3): ext4_add_entry:2435: inode #2: comm syz.3.668: Directory hole found for htree leaf block 0 [ 237.954014][ T5943] EXT4-fs (loop3): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 238.002091][ T5091] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 238.162833][ T7600] loop3: detected capacity change from 0 to 4096 [ 238.192962][ T7600] NILFS (loop3): invalid segment: Checksum error in segment payload [ 238.220681][ T7600] NILFS (loop3): trying rollback from an earlier position [ 238.284825][ T7600] NILFS (loop3): recovery complete [ 238.317219][ T7601] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 238.645983][ T7603] loop4: detected capacity change from 0 to 24 [ 238.911522][ T7598] loop5: detected capacity change from 0 to 32768 [ 238.958479][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 238.971449][ T5100] Bluetooth: hci2: command tx timeout [ 238.983584][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 238.983760][ T7598] XFS (loop5): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 239.009094][ T35] bond0 (unregistering): Released all slaves [ 239.031093][ T7598] XFS (loop5): Ending clean mount [ 239.231155][ T7191] veth0_macvtap: entered promiscuous mode [ 239.339998][ T7191] veth1_macvtap: entered promiscuous mode [ 239.387114][ T5105] XFS (loop5): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 240.798459][ T7627] loop0: detected capacity change from 0 to 32768 [ 240.972542][ T35] hsr_slave_0: left promiscuous mode [ 241.051958][ T5100] Bluetooth: hci2: command tx timeout [ 241.058149][ T7627] XFS (loop0): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 241.076172][ T35] hsr_slave_1: left promiscuous mode [ 241.167962][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 241.231217][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 241.257887][ T7634] loop4: detected capacity change from 0 to 32768 [ 241.261993][ T7627] XFS (loop0): Ending clean mount [ 241.282174][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 241.320277][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 241.329877][ T5104] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 241.339498][ T5104] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 241.347632][ T5104] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 241.359497][ T5104] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 241.370677][ T5104] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 241.378747][ T5104] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 241.393287][ T7627] XFS (loop0): Quotacheck needed: Please wait. [ 241.530412][ T35] veth1_macvtap: left promiscuous mode [ 241.577518][ T7634] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,nojournal_transaction_names [ 241.584239][ T35] veth0_macvtap: left promiscuous mode [ 241.610436][ T35] veth1_vlan: left promiscuous mode [ 241.615439][ T7634] bcachefs (loop4): recovering from clean shutdown, journal seq 8 [ 241.629091][ T35] veth0_vlan: left promiscuous mode [ 241.633403][ T7634] bcachefs (loop4): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.9: disk_accounting_v2 [ 241.633403][ T7634] running recovery passes: check_allocations [ 241.654729][ T7627] XFS (loop0): Quotacheck: Done. [ 241.716125][ T7634] bcachefs (loop4): accounting_read... done [ 241.728300][ T7634] bcachefs (loop4): alloc_read... done [ 241.740983][ T7634] bcachefs (loop4): stripes_read... done [ 241.746697][ T7634] bcachefs (loop4): snapshots_read... done [ 241.764343][ T7634] bcachefs (loop4): check_allocations... [ 241.767841][ T7634] btree ptr not marked in member info btree allocated bitmap [ 241.767864][ T7634] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 56308231fb2a3a03 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, shutting down [ 241.804032][ T7634] bcachefs (loop4): inconsistency detected - emergency read only at journal seq 8 [ 241.819404][ T7634] bcachefs (loop4): bch2_gc_mark_key(): error fsck_errors_not_fixed [ 241.828569][ T7634] bcachefs (loop4): bch2_gc_btree(): error fsck_errors_not_fixed [ 241.860681][ T7634] bcachefs (loop4): bch2_gc_btrees(): error fsck_errors_not_fixed [ 241.888010][ T7651] loop5: detected capacity change from 0 to 32768 [ 241.893651][ T7634] bcachefs (loop4): bch2_check_allocations(): error fsck_errors_not_fixed [ 241.903970][ T5092] XFS (loop0): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 241.919545][ T7634] bcachefs (loop4): bch2_fs_recovery(): error fsck_errors_not_fixed [ 241.936059][ T7634] bcachefs (loop4): bch2_fs_start(): error starting filesystem fsck_errors_not_fixed [ 241.945974][ T7634] bcachefs (loop4): shutting down [ 241.981610][ T7651] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.676 (7651) [ 242.027122][ T7651] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 242.055941][ T7651] BTRFS info (device loop5): using sha256 (sha256-ni) checksum algorithm [ 242.068227][ T7634] bcachefs (loop4): shutdown complete [ 242.465421][ T7651] BTRFS info (device loop5): rebuilding free space tree [ 242.562751][ T7651] BTRFS info (device loop5): disabling free space tree [ 242.569789][ T7651] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 242.587259][ T7651] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 242.779840][ T29] audit: type=1800 audit(1721410139.485:79): pid=7651 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.676" name="bus" dev="loop5" ino=263 res=0 errno=0 [ 242.832053][ T7634] bcachefs: bch2_fs_get_tree() error: fsck_errors_not_fixed [ 242.951022][ T29] audit: type=1804 audit(1721410139.655:80): pid=7678 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.676" name="/newroot/104/bus/bus" dev="loop5" ino=263 res=1 errno=0 [ 243.140096][ T5100] Bluetooth: hci2: command tx timeout [ 243.451896][ T5100] Bluetooth: hci4: command tx timeout [ 243.484092][ T35] team0 (unregistering): Port device team_slave_1 removed [ 243.583964][ T35] team0 (unregistering): Port device team_slave_0 removed [ 243.839871][ T7678] syz.5.676 (7678) used greatest stack depth: 18576 bytes left [ 244.134249][ T5105] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 244.424258][ T7191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.445367][ T7191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.457537][ T7191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.470708][ T7191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.487382][ T7191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.501965][ T7191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.517230][ T7191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.528331][ T7191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.547788][ T7191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 244.716631][ T7191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.759729][ T7191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.780287][ T7191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.796588][ T7693] loop0: detected capacity change from 0 to 512 [ 244.807482][ T7191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.825152][ T7191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.847114][ T7191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.870942][ T7191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.888681][ T7191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.908243][ T7693] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 244.908379][ T7191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 244.924764][ T7693] ext4 filesystem being mounted at /120/wÅü5ÔTÕÔ)­`)YFæ¾nA­½@T<Ÿ3»Ú‚$¢ó×rçcnH³<¿pƒrèñ¹“>ÅwC¾" žð-ùËòöè€Ó8 supports timestamps until 2038-01-19 (0x7fffffff) [ 244.943904][ T7191] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.966319][ T7693] EXT4-fs error (device loop0): ext4_add_entry:2435: inode #2: comm syz.0.686: Directory hole found for htree leaf block 0 [ 244.990876][ T7191] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.003328][ T7693] EXT4-fs error (device loop0): ext4_add_entry:2435: inode #2: comm syz.0.686: Directory hole found for htree leaf block 0 [ 245.006890][ T7191] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.026331][ T7693] EXT4-fs error (device loop0): ext4_add_entry:2435: inode #2: comm syz.0.686: Directory hole found for htree leaf block 0 [ 245.030818][ T7191] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.106770][ T5092] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.219454][ T5100] Bluetooth: hci2: command tx timeout [ 245.266258][ T7557] chnl_net:caif_netlink_parms(): no params data found [ 245.510359][ T7706] loop5: detected capacity change from 0 to 64 [ 245.538825][ T5100] Bluetooth: hci4: command tx timeout [ 246.500930][ T5158] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 246.561390][ T7557] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.568574][ T7557] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.619941][ T7557] bridge_slave_0: entered allmulticast mode [ 246.643906][ T7557] bridge_slave_0: entered promiscuous mode [ 246.712984][ T5158] usb 6-1: New USB device found, idVendor=14b2, idProduct=3302, bcdDevice=1b.fe [ 246.730960][ T5158] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.749656][ T7557] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.758350][ T5158] usb 6-1: config 0 descriptor?? [ 246.781085][ T7557] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.788319][ T7557] bridge_slave_1: entered allmulticast mode [ 246.803508][ T5158] r8712u: register rtl8712_netdev_ops to netdev_ops [ 246.810128][ T5158] usb 6-1: r8712u: USB_SPEED_HIGH with 0 endpoints [ 246.832786][ T7557] bridge_slave_1: entered promiscuous mode [ 246.950491][ T7557] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 246.985674][ T7557] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 247.031480][ T6741] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.039378][ T6741] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.073251][ T5158] usb 6-1: r8712u: Boot from EFUSE: Autoload Failed [ 247.079873][ T5158] usb 6-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 247.121033][ T5158] usb 6-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 247.161781][ T5158] usb 6-1: USB disconnect, device number 7 [ 247.203700][ T35] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.353752][ T7716] loop4: detected capacity change from 0 to 40427 [ 247.380052][ T7716] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 247.403316][ T7716] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 247.434662][ T7716] F2FS-fs (loop4): invalid crc value [ 247.463954][ T7716] F2FS-fs (loop4): Found nat_bits in checkpoint [ 247.530642][ T35] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.578233][ T7557] team0: Port device team_slave_0 added [ 247.610681][ T7716] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 247.622179][ T5100] Bluetooth: hci4: command tx timeout [ 247.631830][ T7716] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 247.656006][ T35] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.690884][ T6741] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.702741][ T7557] team0: Port device team_slave_1 added [ 247.729629][ T6741] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.996470][ T7727] loop0: detected capacity change from 0 to 32768 [ 248.006833][ T7557] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 248.011793][ T7727] XFS: ikeep mount option is deprecated. [ 248.031298][ T7727] XFS: noikeep mount option is deprecated. [ 248.047337][ T7557] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 248.084327][ T7557] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 248.105108][ T7727] XFS (loop0): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 248.137781][ T7557] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 248.158269][ T7557] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 248.177372][ T7727] XFS (loop0): Ending clean mount [ 248.197155][ T7557] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 248.205390][ T7727] XFS (loop0): Quotacheck needed: Please wait. [ 248.298004][ T7727] XFS (loop0): Quotacheck: Done. [ 248.385407][ T35] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.468027][ T7737] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 248.487478][ T5092] XFS (loop0): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 248.775261][ T7751] loop5: detected capacity change from 0 to 512 [ 248.827937][ T7751] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 248.876568][ T7557] hsr_slave_0: entered promiscuous mode [ 248.926413][ T7751] EXT4-fs (loop5): blocks per group (71) and clusters per group (32768) inconsistent [ 248.942560][ T7557] hsr_slave_1: entered promiscuous mode [ 249.045770][ T7646] chnl_net:caif_netlink_parms(): no params data found [ 249.268024][ T7760] loop2: detected capacity change from 0 to 512 [ 249.328089][ T7760] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.707: corrupted in-inode xattr: invalid ea_ino [ 249.351461][ T7760] EXT4-fs (loop2): Remounting filesystem read-only [ 249.359526][ T7760] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 249.484354][ T7191] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.681919][ T7766] mmap: syz.0.708 (7766) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 249.695262][ T5100] Bluetooth: hci4: command tx timeout [ 249.730935][ T5158] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 249.913300][ T5158] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 249.973463][ T5158] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 895 [ 250.077835][ T35] bridge_slave_1: left allmulticast mode [ 250.083666][ T5158] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 250.097712][ T35] bridge_slave_1: left promiscuous mode [ 250.112819][ T5158] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0 [ 250.123109][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.150522][ T35] bridge_slave_0: left allmulticast mode [ 250.165923][ T5158] usb 6-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice= 0.00 [ 250.178201][ T35] bridge_slave_0: left promiscuous mode [ 250.194546][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.202489][ T5158] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 250.222454][ T5158] usb 6-1: SerialNumber: syz [ 250.234577][ T5158] usb 6-1: config 0 descriptor?? [ 250.244666][ T7768] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 250.254962][ T7771] loop4: detected capacity change from 0 to 32768 [ 250.290318][ T7771] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.710 (7771) [ 250.295001][ C0] port100 6-1:0.0: NFC: Urb failure (status -71) [ 250.341286][ T5158] port100 6-1:0.0: NFC: Could not get supported command types [ 250.400231][ T7771] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 250.441047][ T7771] BTRFS info (device loop4): using sha256 (sha256-ni) checksum algorithm [ 250.449538][ T7771] BTRFS info (device loop4): using free-space-tree [ 250.498273][ T25] usb 6-1: USB disconnect, device number 8 [ 250.634846][ T7771] BTRFS info (device loop4): rebuilding free space tree [ 250.897577][ T5091] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 251.210010][ T7780] loop2: detected capacity change from 0 to 32768 [ 251.300729][ T7780] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 251.430191][ T7805] loop4: detected capacity change from 0 to 4096 [ 251.468379][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 251.490179][ T7780] XFS (loop2): Ending clean mount [ 251.501884][ T7780] XFS (loop2): Quotacheck needed: Please wait. [ 251.522622][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 251.558168][ T35] bond0 (unregistering): Released all slaves [ 251.614623][ T7780] XFS (loop2): Quotacheck: Done. [ 251.836260][ T7191] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 251.907236][ T7646] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.918733][ T7646] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.949730][ T7646] bridge_slave_0: entered allmulticast mode [ 252.003692][ T7646] bridge_slave_0: entered promiscuous mode [ 252.311169][ T7646] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.326973][ T7646] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.346851][ T7646] bridge_slave_1: entered allmulticast mode [ 252.359236][ T7646] bridge_slave_1: entered promiscuous mode [ 252.429188][ T7812] loop5: detected capacity change from 0 to 32768 [ 252.440224][ T7812] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.717 (7812) [ 252.476303][ T7812] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 252.491041][ T7812] BTRFS info (device loop5): using sha256 (sha256-ni) checksum algorithm [ 252.570993][ T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 252.719156][ T7812] BTRFS info (device loop5): rebuilding free space tree [ 252.766624][ T7812] BTRFS info (device loop5): disabling free space tree [ 252.769407][ T9] usb 5-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 252.784375][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.789717][ T7812] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 252.792521][ T9] usb 5-1: Product: syz [ 252.792545][ T9] usb 5-1: Manufacturer: syz [ 252.792565][ T9] usb 5-1: SerialNumber: syz [ 252.823736][ T9] usb 5-1: config 0 descriptor?? [ 252.840914][ T7812] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 252.960350][ T7646] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 252.971756][ T29] audit: type=1800 audit(1721410149.675:81): pid=7812 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.717" name="bus" dev="loop5" ino=263 res=0 errno=0 [ 252.999810][ T7646] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 253.053428][ T9] cx82310_eth 5-1:0.0: probe with driver cx82310_eth failed with error -22 [ 253.069137][ T29] audit: type=1804 audit(1721410149.775:82): pid=7838 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.717" name="/newroot/116/bus/bus" dev="loop5" ino=263 res=1 errno=0 [ 253.094757][ T9] cxacru 5-1:0.0: usbatm_usb_probe: bind failed: -19! [ 253.141639][ T9] usb 5-1: USB disconnect, device number 7 [ 253.261032][ T7646] team0: Port device team_slave_0 added [ 253.287991][ T35] hsr_slave_0: left promiscuous mode [ 253.297165][ T35] hsr_slave_1: left promiscuous mode [ 253.318508][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 253.328383][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 253.347644][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 253.355336][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 253.413640][ T35] veth1_macvtap: left promiscuous mode [ 253.419815][ T35] veth0_macvtap: left promiscuous mode [ 253.435677][ T35] veth1_vlan: left promiscuous mode [ 253.442619][ T35] veth0_vlan: left promiscuous mode [ 254.539483][ T5105] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 254.772463][ T7846] loop4: detected capacity change from 0 to 32768 [ 254.812968][ T7846] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.724 (7846) [ 254.931785][ T7846] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 254.980057][ T7846] BTRFS info (device loop4): using sha256 (sha256-ni) checksum algorithm [ 254.995806][ T7846] BTRFS info (device loop4): using free-space-tree [ 255.026822][ T7842] loop2: detected capacity change from 0 to 40427 [ 255.110520][ T7842] F2FS-fs (loop2): Found nat_bits in checkpoint [ 255.262984][ T7846] BTRFS info (device loop4): rebuilding free space tree [ 255.309244][ T1240] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.316275][ T1240] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.364477][ T7842] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 255.448043][ T7842] bio_check_eod: 262 callbacks suppressed [ 255.448062][ T7842] syz.2.723: attempt to access beyond end of device [ 255.448062][ T7842] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 255.476801][ T35] team0 (unregistering): Port device team_slave_1 removed [ 255.552965][ T7191] syz-executor: attempt to access beyond end of device [ 255.552965][ T7191] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 255.572057][ T7191] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 255.580268][ T5091] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 255.600018][ T35] team0 (unregistering): Port device team_slave_0 removed [ 256.626428][ T7872] loop2: detected capacity change from 0 to 4096 [ 256.667821][ T7872] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [ 256.789423][ T7872] ntfs3: loop2: Failed to initialize $Extend/$ObjId. [ 256.810560][ T7870] loop4: detected capacity change from 0 to 40427 [ 256.848799][ T7870] F2FS-fs (loop4): Found nat_bits in checkpoint [ 256.964741][ T7870] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 257.098802][ T29] audit: type=1804 audit(1721410153.795:83): pid=7870 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.727" name="/newroot/127/file0/file0" dev="loop4" ino=10 res=1 errno=0 [ 257.128386][ T7646] team0: Port device team_slave_1 added [ 257.231518][ T5091] syz-executor: attempt to access beyond end of device [ 257.231518][ T5091] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 257.283876][ T5091] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 257.306355][ T7646] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 257.375195][ T7646] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.511083][ T7646] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 257.531845][ T7646] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 257.561118][ T7646] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.855838][ T7880] loop5: detected capacity change from 0 to 40427 [ 257.886952][ T7880] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 257.894876][ T7880] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 257.938184][ T7646] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 257.965658][ T7880] F2FS-fs (loop5): Found nat_bits in checkpoint [ 258.010677][ T7880] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 258.065495][ T7880] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 258.072688][ T7880] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 258.100999][ T29] audit: type=1804 audit(1721410154.805:84): pid=7880 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.729" name="/newroot/118/bus/bus" dev="loop5" ino=10 res=1 errno=0 [ 258.313995][ T7886] netlink: 'syz.2.730': attribute type 5 has an invalid length. [ 258.330984][ T7886] netlink: 7 bytes leftover after parsing attributes in process `syz.2.730'. [ 258.365106][ T7646] hsr_slave_0: entered promiscuous mode [ 258.382233][ T7646] hsr_slave_1: entered promiscuous mode [ 258.410341][ T7646] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 258.429559][ T7646] Cannot create hsr debugfs directory [ 258.792710][ T25] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 258.798803][ T7557] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 258.933799][ T7557] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 258.992848][ T7557] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 259.001011][ T25] usb 3-1: Using ep0 maxpacket: 8 [ 259.018824][ T25] usb 3-1: New USB device found, idVendor=2040, idProduct=7300, bcdDevice=db.79 [ 259.039927][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.070814][ T25] usb 3-1: Product: syz [ 259.075433][ T7557] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 259.084800][ T25] usb 3-1: Manufacturer: syz [ 259.089419][ T25] usb 3-1: SerialNumber: syz [ 259.117519][ T25] usb 3-1: config 0 descriptor?? [ 259.158069][ T25] pvrusb2: Hardware description: WinTV HVR-1900 Model 73xxx [ 259.371363][ T25] usb 3-1: USB disconnect, device number 6 [ 259.388045][ T1975] usb 3-1: Direct firmware load for v4l-pvrusb2-73xxx-01.fw failed with error -2 [ 259.419867][ T1975] usb 3-1: Falling back to sysfs fallback for: v4l-pvrusb2-73xxx-01.fw [ 259.541053][ T9] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 259.741836][ T9] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 259.762555][ T9] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 259.769757][ T7557] 8021q: adding VLAN 0 to HW filter on device bond0 [ 259.791013][ T9] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 259.814882][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 259.833228][ T9] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 259.843273][ T9] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 259.876206][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 259.901174][ T9] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 259.917290][ T9] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 259.938624][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 259.945752][ T7557] 8021q: adding VLAN 0 to HW filter on device team0 [ 259.962456][ T9] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 259.990052][ T9] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 260.029267][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 260.037823][ T5155] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.045015][ T5155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 260.054619][ T9] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 260.071163][ T9] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 260.076894][ T5155] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.089244][ T5155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 260.101332][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 260.117538][ T9] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 260.142309][ T9] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 260.180548][ T7895] loop0: detected capacity change from 0 to 40427 [ 260.198861][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 260.218862][ T9] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 260.236862][ T7895] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 260.253029][ T9] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 260.272015][ T7895] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 260.287685][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 260.297896][ T9] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 260.309551][ T9] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 260.322855][ T7895] F2FS-fs (loop0): invalid crc value [ 260.329664][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 260.342362][ T9] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 260.352002][ T9] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 260.363702][ T7895] F2FS-fs (loop0): Found nat_bits in checkpoint [ 260.372221][ T9] usb 6-1: Product: syz [ 260.380494][ T9] usb 6-1: Manufacturer: syz [ 260.392162][ T9] usb 6-1: SerialNumber: syz [ 260.408096][ T9] usb 6-1: config 0 descriptor?? [ 260.429829][ T9] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 260.486132][ T7646] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 260.516597][ T7646] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 260.554220][ T7646] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 260.569277][ T7895] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 260.603318][ T7895] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 260.636528][ T7646] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 260.843758][ C0] usb 6-1: yurex_control_callback - control failed: -71 [ 260.845743][ T5239] usb 6-1: USB disconnect, device number 9 [ 260.871507][ T7911] yurex 6-1:0.0: yurex_write - failed to send bulk msg, error -19 [ 260.913148][ T5239] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 261.048924][ T7646] 8021q: adding VLAN 0 to HW filter on device bond0 [ 261.120394][ T7557] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 261.180204][ T7646] 8021q: adding VLAN 0 to HW filter on device team0 [ 261.248687][ T7915] netlink: 8 bytes leftover after parsing attributes in process `syz.2.737'. [ 261.275753][ T5239] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.282994][ T5239] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.343516][ T5239] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.350716][ T5239] bridge0: port 2(bridge_slave_1) entered forwarding state [ 261.630362][ T7557] veth0_vlan: entered promiscuous mode [ 261.746217][ T7557] veth1_vlan: entered promiscuous mode [ 261.925910][ T7557] veth0_macvtap: entered promiscuous mode [ 261.988025][ T7557] veth1_macvtap: entered promiscuous mode [ 262.085430][ T7924] loop5: detected capacity change from 0 to 1024 [ 262.133085][ T7557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.145206][ T7924] EXT4-fs: Ignoring removed mblk_io_submit option [ 262.231238][ T7557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.287474][ T7924] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 262.298284][ T7925] loop2: detected capacity change from 0 to 40427 [ 262.305255][ T7557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.314713][ T7925] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 262.325223][ T7925] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 262.360953][ T7557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.380227][ T7925] F2FS-fs (loop2): Found nat_bits in checkpoint [ 262.427989][ T7925] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 262.456855][ T7557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.469986][ T7557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.501335][ T7925] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 262.508434][ T7925] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 262.520827][ T7557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.541994][ T7557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.576619][ T29] audit: type=1804 audit(1721410159.285:85): pid=7925 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.741" name="/newroot/19/bus/bus" dev="loop2" ino=10 res=1 errno=0 [ 262.585568][ T7557] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 262.669694][ T7557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.701101][ T7924] loop5: detected capacity change from 1024 to 0 [ 262.709781][ T7557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.722844][ T7922] syz.5.740: attempt to access beyond end of device [ 262.722844][ T7922] loop5: rw=524288, sector=12, nr_sectors = 2 limit=0 [ 262.740915][ T7557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.761073][ T7922] syz.5.740: attempt to access beyond end of device [ 262.761073][ T7922] loop5: rw=524288, sector=14, nr_sectors = 2 limit=0 [ 262.780883][ T7557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.801187][ T7922] syz.5.740: attempt to access beyond end of device [ 262.801187][ T7922] loop5: rw=524288, sector=16, nr_sectors = 2 limit=0 [ 262.820857][ T7557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.840832][ T7557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.862069][ T7922] syz.5.740: attempt to access beyond end of device [ 262.862069][ T7922] loop5: rw=524288, sector=18, nr_sectors = 2 limit=0 [ 262.875396][ T7557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.901726][ T7557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.920960][ T7922] syz.5.740: attempt to access beyond end of device [ 262.920960][ T7922] loop5: rw=524288, sector=20, nr_sectors = 2 limit=0 [ 262.936509][ T7557] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 262.941519][ T7922] syz.5.740: attempt to access beyond end of device [ 262.941519][ T7922] loop5: rw=524288, sector=22, nr_sectors = 2 limit=0 [ 263.004245][ T7922] syz.5.740: attempt to access beyond end of device [ 263.004245][ T7922] loop5: rw=524288, sector=24, nr_sectors = 2 limit=0 [ 263.025800][ T7557] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.035056][ T7557] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.044180][ T7557] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.053556][ T7557] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.062917][ T7922] syz.5.740: attempt to access beyond end of device [ 263.062917][ T7922] loop5: rw=524288, sector=26, nr_sectors = 2 limit=0 [ 263.141461][ T7922] syz.5.740: attempt to access beyond end of device [ 263.141461][ T7922] loop5: rw=524288, sector=28, nr_sectors = 2 limit=0 [ 263.181414][ T7646] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 263.203530][ T7922] syz.5.740: attempt to access beyond end of device [ 263.203530][ T7922] loop5: rw=524288, sector=30, nr_sectors = 2 limit=0 [ 263.251685][ T7922] EXT4-fs error (device loop5): ext4_get_inode_loc:4574: inode #19: block 23: comm syz.5.740: unable to read itable block [ 263.295058][ T7922] buffer_io_error: 23 callbacks suppressed [ 263.295078][ T7922] Buffer I/O error on dev loop5, logical block 1, lost sync page write [ 263.355158][ T7922] EXT4-fs (loop5): I/O error while writing superblock [ 263.378190][ T6722] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.386967][ T7922] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5810: IO failure [ 263.422667][ T6722] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.430296][ T7922] Buffer I/O error on dev loop5, logical block 1, lost sync page write [ 263.447000][ T7922] EXT4-fs (loop5): I/O error while writing superblock [ 263.467005][ T7922] EXT4-fs error (device loop5): ext4_dirty_inode:6014: inode #19: comm syz.5.740: mark_inode_dirty error [ 263.480265][ T7922] Buffer I/O error on dev loop5, logical block 1, lost sync page write [ 263.499392][ T7922] EXT4-fs (loop5): I/O error while writing superblock [ 263.508539][ T7922] Quota error (device loop5): qtree_write_dquot: dquota write failed [ 263.558609][ T7922] EXT4-fs error (device loop5): ext4_write_dquot:6828: comm syz.5.740: Failed to commit dquot type 0 [ 263.589890][ T7646] veth0_vlan: entered promiscuous mode [ 263.620646][ T7922] Buffer I/O error on dev loop5, logical block 1, lost sync page write [ 263.631204][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.650864][ T7922] EXT4-fs (loop5): I/O error while writing superblock [ 263.660684][ T7922] Quota error (device loop5): qtree_write_dquot: dquota write failed [ 263.672261][ T7932] loop0: detected capacity change from 0 to 40427 [ 263.674979][ T7922] EXT4-fs error (device loop5): ext4_write_dquot:6828: comm syz.5.740: Failed to commit dquot type 1 [ 263.697989][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.759892][ T7646] veth1_vlan: entered promiscuous mode [ 263.761942][ T7922] Buffer I/O error on dev loop5, logical block 1, lost sync page write [ 263.787312][ T7932] F2FS-fs (loop0): Found nat_bits in checkpoint [ 263.824254][ T7922] EXT4-fs (loop5): I/O error while writing superblock [ 263.859477][ T7922] EXT4-fs error (device loop5): ext4_get_inode_loc:4574: inode #19: block 23: comm syz.5.740: unable to read itable block [ 263.940907][ T7922] Buffer I/O error on dev loop5, logical block 1, lost sync page write [ 263.948174][ T7646] veth0_macvtap: entered promiscuous mode [ 263.949209][ T7922] EXT4-fs (loop5): I/O error while writing superblock [ 264.003236][ T7646] veth1_macvtap: entered promiscuous mode [ 264.017427][ T7922] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5810: IO failure [ 264.071143][ T7922] Buffer I/O error on dev loop5, logical block 1, lost sync page write [ 264.079442][ T7922] EXT4-fs (loop5): I/O error while writing superblock [ 264.098408][ T7646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.116416][ T7922] EXT4-fs error (device loop5): ext4_dirty_inode:6014: inode #19: comm syz.5.740: mark_inode_dirty error [ 264.140972][ T7932] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 264.163722][ T7646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.174388][ T7922] Buffer I/O error on dev loop5, logical block 1, lost sync page write [ 264.174421][ T7922] EXT4-fs (loop5): I/O error while writing superblock [ 264.174593][ T7922] Quota error (device loop5): qtree_write_dquot: dquota write failed [ 264.217902][ T7646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.230908][ T7922] EXT4-fs error (device loop5): ext4_write_dquot:6828: comm syz.5.740: Failed to commit dquot type 0 [ 264.270830][ T7646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.298410][ T7922] Buffer I/O error on dev loop5, logical block 1, lost sync page write [ 264.307095][ T7646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.332099][ T7922] EXT4-fs (loop5): I/O error while writing superblock [ 264.340277][ T7922] Quota error (device loop5): qtree_write_dquot: dquota write failed [ 264.362083][ T7922] EXT4-fs error (device loop5): ext4_write_dquot:6828: comm syz.5.740: Failed to commit dquot type 1 [ 264.373940][ T7646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.377559][ T7922] Buffer I/O error on dev loop5, logical block 1, lost sync page write [ 264.406523][ T7646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.428138][ T7924] Quota error (device loop5): qtree_write_dquot: dquota write failed [ 264.440854][ T7646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.450675][ T7646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.483580][ T7924] Quota error (device loop5): qtree_write_dquot: dquota write failed [ 264.510951][ T7646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.534615][ T7646] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 264.544552][ T5092] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 264.608147][ T7646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.625929][ T7646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.646120][ T7646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.671264][ T7646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.718292][ T7646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.764699][ T7646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.808485][ T7646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.834399][ T7646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.855792][ T7646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.867716][ T7646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.887176][ T7646] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 264.946938][ T7646] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.000220][ T7646] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.017277][ T7646] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.029590][ T7646] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.324756][ T7956] loop2: detected capacity change from 0 to 512 [ 265.371887][ T7956] EXT4-fs error (device loop2): ext4_get_journal_inode:5740: comm syz.2.750: inode #196608: comm syz.2.750: iget: illegal inode # [ 265.479337][ T7956] EXT4-fs (loop2): Remounting filesystem read-only [ 265.521042][ T7956] EXT4-fs (loop2): no journal found [ 265.526284][ T7956] EXT4-fs (loop2): can't get journal size [ 265.606977][ T7956] EXT4-fs (loop2): failed to initialize system zone (-22) [ 265.632371][ T7956] EXT4-fs (loop2): mount failed [ 265.720641][ T6741] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.117422][ T6741] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.283759][ T7960] loop0: detected capacity change from 0 to 1024 [ 266.499731][ T7954] loop1: detected capacity change from 0 to 32768 [ 266.514587][ T6741] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.545090][ T6745] hfsplus: b-tree write err: -5, ino 4 [ 266.573851][ T6730] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.573968][ T7954] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.749 (7954) [ 266.620876][ T6730] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.714032][ T7954] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 266.764701][ T7962] program syz.0.753 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 266.769035][ T7954] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 266.817799][ T6741] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.851135][ T7954] BTRFS info (device loop1): using free-space-tree [ 267.102979][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.176962][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.232690][ T5104] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 267.265326][ T5104] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 267.277116][ T5104] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 267.309751][ T5104] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 267.331083][ T5104] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 267.347858][ T5104] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 267.791116][ T7557] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 267.863837][ T6741] team0: left allmulticast mode [ 267.868750][ T6741] team_slave_0: left allmulticast mode [ 267.886437][ T6741] team_slave_1: left allmulticast mode [ 267.916699][ T6741] bridge0: port 3(team0) entered disabled state [ 267.990891][ T6741] bridge_slave_1: left allmulticast mode [ 267.996592][ T6741] bridge_slave_1: left promiscuous mode [ 268.051875][ T6741] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.171881][ T6741] bridge_slave_0: left allmulticast mode [ 268.177586][ T6741] bridge_slave_0: left promiscuous mode [ 268.233765][ T6741] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.487872][ T5100] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 268.497934][ T5100] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 268.507582][ T5100] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 268.528162][ T5100] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 268.550143][ T5100] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 268.558317][ T5100] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 268.565790][ T5281] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 268.814208][ T5281] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 268.831137][ T5281] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 895 [ 268.860823][ T5281] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 268.881008][ T5281] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0 [ 268.899498][ T5281] usb 1-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice= 0.00 [ 268.914387][ T5281] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 268.930743][ T5281] usb 1-1: SerialNumber: syz [ 268.946092][ T5281] usb 1-1: config 0 descriptor?? [ 268.977075][ T7995] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 268.996635][ T5281] port100 1-1:0.0: NFC: Could not get supported command types [ 269.243141][ T5106] usb 1-1: USB disconnect, device number 5 [ 269.275610][ T6741] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 269.301871][ T6741] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 269.316367][ T6741] bond0 (unregistering): Released all slaves [ 269.345432][ T7997] tipc: Started in network mode [ 269.350296][ T7997] tipc: Node identity , cluster identity 4711 [ 269.359820][ T7997] tipc: Failed to set node id, please configure manually [ 269.367899][ T7997] tipc: Enabling of bearer rejected, failed to enable media [ 269.396100][ T8001] netlink: 'syz.1.758': attribute type 1 has an invalid length. [ 269.410911][ T8001] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.758'. [ 269.447794][ T8001] netlink: 1 bytes leftover after parsing attributes in process `syz.1.758'. [ 269.459141][ T5104] Bluetooth: hci3: command tx timeout [ 270.224975][ T8008] loop1: detected capacity change from 0 to 32768 [ 270.260986][ T8008] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.765 (8008) [ 270.303114][ T8008] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 270.322260][ T8008] BTRFS info (device loop1): using sha256 (sha256-ni) checksum algorithm [ 270.340950][ T8008] BTRFS info (device loop1): using free-space-tree [ 270.386272][ T6741] hsr_slave_0: left promiscuous mode [ 270.424236][ T6741] hsr_slave_1: left promiscuous mode [ 270.448831][ T6741] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 270.488181][ T6741] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 270.530570][ T6741] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 270.579981][ T6741] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 270.605183][ T8005] loop3: detected capacity change from 0 to 40427 [ 270.652051][ T5104] Bluetooth: hci5: command tx timeout [ 270.671133][ T6741] veth1_macvtap: left promiscuous mode [ 270.676707][ T6741] veth0_macvtap: left promiscuous mode [ 270.682562][ T6741] veth1_vlan: left promiscuous mode [ 270.689718][ T6741] veth0_vlan: left promiscuous mode [ 270.699754][ T7557] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 270.724292][ T8005] F2FS-fs (loop3): Found nat_bits in checkpoint [ 270.865791][ T8005] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 271.013784][ T8004] bio_check_eod: 252 callbacks suppressed [ 271.013806][ T8004] syz.3.764: attempt to access beyond end of device [ 271.013806][ T8004] loop3: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 271.179204][ T7646] syz-executor: attempt to access beyond end of device [ 271.179204][ T7646] loop3: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 271.243837][ T7646] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 271.295716][ T920] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 271.346261][ T8010] loop0: detected capacity change from 0 to 40427 [ 271.396826][ T8010] F2FS-fs (loop0): invalid crc value [ 271.435837][ T8010] F2FS-fs (loop0): Found nat_bits in checkpoint [ 271.529834][ T920] usb 2-1: Using ep0 maxpacket: 8 [ 271.536418][ T5104] Bluetooth: hci3: command tx timeout [ 271.544322][ T920] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 271.555018][ T920] usb 2-1: config 179 has no interface number 0 [ 271.573852][ T920] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 271.615238][ T8010] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 271.622874][ T920] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 271.646741][ T920] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 271.659677][ T29] audit: type=1804 audit(1721410168.365:86): pid=8010 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.766" name="/newroot/140/file0/file0" dev="loop0" ino=10 res=1 errno=0 [ 271.681396][ T920] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 271.955829][ T920] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 271.969231][ T920] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 271.978325][ T920] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.989970][ T8033] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 272.113153][ T8037] syz.0.766: attempt to access beyond end of device [ 272.113153][ T8037] loop0: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 272.145800][ T8037] syz.0.766: attempt to access beyond end of device [ 272.145800][ T8037] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 272.161814][ T8037] syz.0.766: attempt to access beyond end of device [ 272.161814][ T8037] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 272.180463][ T8037] syz.0.766: attempt to access beyond end of device [ 272.180463][ T8037] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 272.198216][ T8037] syz.0.766: attempt to access beyond end of device [ 272.198216][ T8037] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 272.222559][ T8037] syz.0.766: attempt to access beyond end of device [ 272.222559][ T8037] loop0: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 272.237293][ T8037] syz.0.766: attempt to access beyond end of device [ 272.237293][ T8037] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 272.255537][ T8037] syz.0.766: attempt to access beyond end of device [ 272.255537][ T8037] loop0: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 272.569875][ T29] audit: type=1804 audit(1721410169.225:87): pid=8038 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.766" name="/newroot/140/file0/file0" dev="loop0" ino=10 res=1 errno=0 [ 272.743859][ T5104] Bluetooth: hci5: command tx timeout [ 272.908187][ T5092] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 272.953990][ T920] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input5 [ 273.017560][ T46] usb 2-1: USB disconnect, device number 5 [ 273.023443][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 273.023495][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 273.144128][ T46] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 273.508755][ T6741] team_slave_1 (unregistering): left promiscuous mode [ 273.557626][ T6741] team0 (unregistering): Port device team_slave_1 removed [ 273.611145][ T5104] Bluetooth: hci3: command tx timeout [ 273.815708][ T6741] team_slave_0 (unregistering): left promiscuous mode [ 273.837596][ T6741] team0 (unregistering): Port device team_slave_0 removed [ 273.862642][ T8047] loop3: detected capacity change from 0 to 8 [ 273.898682][ T8047] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 274.812076][ T5104] Bluetooth: hci5: command tx timeout [ 274.840330][ T7978] chnl_net:caif_netlink_parms(): no params data found [ 275.036124][ T8063] loop1: detected capacity change from 0 to 128 [ 275.075701][ T8063] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 275.431068][ T5159] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 275.446820][ T7978] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.461011][ T7978] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.468327][ T7978] bridge_slave_0: entered allmulticast mode [ 275.492869][ T7978] bridge_slave_0: entered promiscuous mode [ 275.505273][ T8071] Process accounting resumed [ 275.531432][ T7978] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.538630][ T7978] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.561241][ T7978] bridge_slave_1: entered allmulticast mode [ 275.570740][ T7978] bridge_slave_1: entered promiscuous mode [ 275.640857][ T5159] usb 2-1: Using ep0 maxpacket: 32 [ 275.666756][ T5159] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 275.691438][ T5104] Bluetooth: hci3: command tx timeout [ 275.705483][ T5159] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 275.722021][ T5159] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 275.738235][ T5159] usb 2-1: Product: syz [ 275.743901][ T5159] usb 2-1: Manufacturer: syz [ 275.748554][ T5159] usb 2-1: SerialNumber: syz [ 275.764598][ T5159] usb 2-1: config 0 descriptor?? [ 275.770351][ T8063] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 275.831346][ T7998] chnl_net:caif_netlink_parms(): no params data found [ 275.873762][ T7978] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 275.914164][ T7978] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 275.927581][ T8061] loop3: detected capacity change from 0 to 32768 [ 275.969729][ T8061] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.775 (8061) [ 275.998925][ T8060] loop2: detected capacity change from 0 to 32768 [ 276.029619][ T8061] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 276.050185][ T8061] BTRFS info (device loop3): using sha256 (sha256-ni) checksum algorithm [ 276.082397][ T8061] BTRFS info (device loop3): using free-space-tree [ 276.142138][ T7978] team0: Port device team_slave_0 added [ 276.152658][ T7978] team0: Port device team_slave_1 added [ 276.154610][ T8060] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 276.489522][ T8060] XFS (loop2): Ending clean mount [ 276.526555][ T5239] usb 2-1: USB disconnect, device number 6 [ 276.577661][ T8060] XFS (loop2): Quotacheck needed: Please wait. [ 276.663918][ T7646] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 276.668328][ T6741] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.718358][ T7978] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 276.763439][ T8060] XFS (loop2): Quotacheck: Done. [ 276.781933][ T7978] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.890378][ T7978] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 276.891137][ T5104] Bluetooth: hci5: command tx timeout [ 276.963959][ T7191] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 277.104956][ T6741] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.172974][ T7978] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 277.200330][ T7978] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.270691][ T7978] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 277.377310][ T8114] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 277.494015][ T6741] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.539026][ T8116] loop2: detected capacity change from 0 to 128 [ 277.631771][ T7998] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.638980][ T7998] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.677742][ T7998] bridge_slave_0: entered allmulticast mode [ 277.693853][ T7998] bridge_slave_0: entered promiscuous mode [ 277.714385][ T8118] netlink: 4 bytes leftover after parsing attributes in process `syz.1.785'. [ 277.847555][ T6741] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.892597][ T8124] ieee802154 phy0 wpan0: encryption failed: -22 [ 277.941397][ T8121] netlink: 4 bytes leftover after parsing attributes in process `syz.1.785'. [ 278.008489][ T7998] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.059560][ T7998] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.091282][ T7998] bridge_slave_1: entered allmulticast mode [ 278.117007][ T7998] bridge_slave_1: entered promiscuous mode [ 278.221690][ T7978] hsr_slave_0: entered promiscuous mode [ 278.243376][ T7978] hsr_slave_1: entered promiscuous mode [ 278.249821][ T7978] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 278.271511][ T7978] Cannot create hsr debugfs directory [ 278.337365][ T8137] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_bridge, syncid = 0, id = 0 [ 278.478075][ T7998] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 278.537606][ T8138] loop3: detected capacity change from 0 to 4096 [ 278.558841][ T7998] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 278.685802][ T8120] loop0: detected capacity change from 0 to 32768 [ 278.923709][ T7998] team0: Port device team_slave_0 added [ 278.968181][ T8143] netlink: 4 bytes leftover after parsing attributes in process `syz.2.794'. [ 278.995494][ T8143] veth0_macvtap: left promiscuous mode [ 279.017197][ T8120] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,noshard_inode_numbers,noinodes_use_key_cache,gc_reserve_bytes=512 GiB,nojournal_transaction_names [ 279.017264][ T8133] loop1: detected capacity change from 0 to 32768 [ 279.049046][ T8120] bcachefs (loop0): recovering from clean shutdown, journal seq 8 [ 279.088557][ T8120] bcachefs (loop0): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.9: disk_accounting_v2 [ 279.088557][ T8120] running recovery passes: check_allocations [ 279.158370][ T7998] team0: Port device team_slave_1 added [ 279.201510][ T8133] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 279.210086][ T8120] bcachefs (loop0): accounting_read... done [ 279.216781][ T8120] bcachefs (loop0): alloc_read... done [ 279.247580][ T8120] bcachefs (loop0): stripes_read... done [ 279.280034][ T8120] bcachefs (loop0): snapshots_read... done [ 279.320093][ T8120] bcachefs (loop0): check_allocations... [ 279.327860][ T8120] btree ptr not marked in member info btree allocated bitmap [ 279.327884][ T8120] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 56308231fb2a3a03 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, shutting down [ 279.391609][ T8133] XFS (loop1): Ending clean mount [ 279.493407][ T8165] netlink: 20 bytes leftover after parsing attributes in process `syz.3.795'. [ 279.518739][ T8120] bcachefs (loop0): inconsistency detected - emergency read only at journal seq 8 [ 279.532675][ T8120] bcachefs (loop0): bch2_gc_mark_key(): error fsck_errors_not_fixed [ 279.540700][ T8120] bcachefs (loop0): bch2_gc_btree(): error fsck_errors_not_fixed [ 279.549221][ T8120] bcachefs (loop0): bch2_gc_btrees(): error fsck_errors_not_fixed [ 279.557674][ T6741] team0: left allmulticast mode [ 279.562681][ T6741] team_slave_0: left allmulticast mode [ 279.568880][ T6741] team_slave_1: left allmulticast mode [ 279.574649][ T6741] bridge0: port 3(team0) entered disabled state [ 279.596747][ T7557] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 279.600531][ T8120] bcachefs (loop0): bch2_check_allocations(): error fsck_errors_not_fixed [ 279.617319][ T6741] bridge_slave_1: left allmulticast mode [ 279.631068][ T6741] bridge_slave_1: left promiscuous mode [ 279.636842][ T6741] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.652424][ T8120] bcachefs (loop0): bch2_fs_recovery(): error fsck_errors_not_fixed [ 279.660428][ T8120] bcachefs (loop0): bch2_fs_start(): error starting filesystem fsck_errors_not_fixed [ 279.680280][ T8120] bcachefs (loop0): shutting down [ 279.686642][ T6741] bridge_slave_0: left allmulticast mode [ 279.692873][ T6741] bridge_slave_0: left promiscuous mode [ 279.700072][ T6741] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.748336][ T8120] bcachefs (loop0): shutdown complete [ 280.418286][ T8171] loop2: detected capacity change from 0 to 128 [ 280.436060][ T8169] netlink: 4 bytes leftover after parsing attributes in process `syz.1.797'. [ 280.479559][ T8120] bcachefs: bch2_fs_get_tree() error: fsck_errors_not_fixed [ 280.653408][ T5104] Bluetooth: hci4: Unable to find connection with handle 0x0000 [ 281.278626][ T6741] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 281.306606][ T6741] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 281.331215][ T6741] bond0 (unregistering): Released all slaves [ 281.385725][ T7998] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 281.400850][ T7998] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 281.460430][ T7998] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 281.523910][ T7998] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 281.560735][ T7998] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 281.670870][ T7998] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 281.989728][ T8194] loop1: detected capacity change from 0 to 1024 [ 282.004557][ T8183] loop0: detected capacity change from 0 to 40427 [ 282.042900][ T8186] loop3: detected capacity change from 0 to 32768 [ 282.052310][ T8186] XFS: ikeep mount option is deprecated. [ 282.059254][ T8183] F2FS-fs (loop0): Small segment_count (9 < 1 * 24) [ 282.068251][ T8183] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 282.110675][ T8183] F2FS-fs (loop0): Found nat_bits in checkpoint [ 282.138086][ T8194] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 282.226807][ T8186] XFS (loop3): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 282.378465][ T8183] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 282.383818][ T8186] XFS (loop3): Ending clean mount [ 282.386792][ T8183] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 282.420224][ T8186] XFS (loop3): Quotacheck needed: Please wait. [ 282.421585][ T7557] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.526776][ T8186] XFS (loop3): Quotacheck: Done. [ 282.563999][ T5092] bio_check_eod: 40 callbacks suppressed [ 282.564020][ T5092] syz-executor: attempt to access beyond end of device [ 282.564020][ T5092] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 282.626134][ T7998] hsr_slave_0: entered promiscuous mode [ 282.626397][ T5092] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 282.636846][ T8209] loop1: detected capacity change from 0 to 256 [ 282.675722][ T7998] hsr_slave_1: entered promiscuous mode [ 282.697708][ T7998] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 282.721061][ T7998] Cannot create hsr debugfs directory [ 282.739686][ T7646] XFS (loop3): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 282.763062][ T8209] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 282.775727][ T8190] loop2: detected capacity change from 0 to 40427 [ 282.799864][ T8190] F2FS-fs (loop2): invalid crc value [ 282.851504][ T8190] F2FS-fs (loop2): Found nat_bits in checkpoint [ 283.072502][ T6741] hsr_slave_0: left promiscuous mode [ 283.213238][ T8190] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 283.238674][ T6741] hsr_slave_1: left promiscuous mode [ 283.298839][ T6741] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 283.338828][ T6741] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 283.357032][ T29] audit: type=1804 audit(1721410180.065:88): pid=8190 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.806" name="/newroot/37/file0/file0" dev="loop2" ino=10 res=1 errno=0 [ 284.087996][ T8218] syz.2.806: attempt to access beyond end of device [ 284.087996][ T8218] loop2: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 284.105596][ T8218] syz.2.806: attempt to access beyond end of device [ 284.105596][ T8218] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 284.120433][ T8218] syz.2.806: attempt to access beyond end of device [ 284.120433][ T8218] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 284.135855][ T8218] syz.2.806: attempt to access beyond end of device [ 284.135855][ T8218] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 284.151249][ T8218] syz.2.806: attempt to access beyond end of device [ 284.151249][ T8218] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 284.167813][ T8218] syz.2.806: attempt to access beyond end of device [ 284.167813][ T8218] loop2: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 284.182212][ T8218] syz.2.806: attempt to access beyond end of device [ 284.182212][ T8218] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 284.197617][ T8218] syz.2.806: attempt to access beyond end of device [ 284.197617][ T8218] loop2: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 284.213996][ T8218] syz.2.806: attempt to access beyond end of device [ 284.213996][ T8218] loop2: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 284.490327][ T6741] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 284.871642][ T29] audit: type=1804 audit(1721410181.105:89): pid=8218 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.806" name="/newroot/37/file0/file0" dev="loop2" ino=10 res=1 errno=0 [ 284.893432][ T6741] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 284.921630][ T7191] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 285.027348][ T8223] input: syz1 as /devices/virtual/input/input6 [ 285.113560][ T6741] veth1_macvtap: left promiscuous mode [ 285.143664][ T6741] veth0_macvtap: left promiscuous mode [ 285.170541][ T6741] veth1_vlan: left promiscuous mode [ 285.181637][ T6741] veth0_vlan: left promiscuous mode [ 285.499704][ T8236] loop0: detected capacity change from 0 to 512 [ 285.553140][ T8236] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #15: comm syz.0.810: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0) [ 285.574232][ T8236] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.810: couldn't read orphan inode 15 (err -117) [ 285.596185][ T8236] EXT4-fs (loop0): mounted filesystem ffffff7f-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 285.623235][ T8236] ext4 filesystem being mounted at /150/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 285.696019][ T8236] EXT4-fs error (device loop0): ext4_add_entry:2435: inode #2: comm syz.0.810: Directory hole found for htree leaf block 0 [ 285.784140][ T8236] EXT4-fs error (device loop0): ext4_add_entry:2435: inode #2: comm syz.0.810: Directory hole found for htree leaf block 0 [ 286.418377][ T6741] team_slave_1 (unregistering): left promiscuous mode [ 286.435313][ T6741] team0 (unregistering): Port device team_slave_1 removed [ 286.516609][ T6741] team_slave_0 (unregistering): left promiscuous mode [ 286.529283][ T6741] team0 (unregistering): Port device team_slave_0 removed [ 286.808835][ T8251] loop2: detected capacity change from 0 to 512 [ 286.818539][ T8251] EXT4-fs: quotafile must be on filesystem root [ 288.020672][ T8232] netlink: 12 bytes leftover after parsing attributes in process `syz.0.810'. [ 288.337804][ T5092] EXT4-fs (loop0): unmounting filesystem ffffff7f-0000-0000-0000-000000000000. [ 288.383884][ T8261] loop2: detected capacity change from 0 to 512 [ 288.491006][ T8261] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.825: corrupted in-inode xattr: invalid ea_ino [ 288.555858][ T8267] loop0: detected capacity change from 0 to 128 [ 288.557944][ T8270] loop1: detected capacity change from 0 to 1024 [ 288.592240][ T8261] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.825: couldn't read orphan inode 15 (err -117) [ 288.629750][ T8270] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 288.682866][ T8261] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 288.702949][ T8261] EXT4-fs error (device loop2): ext4_add_entry:2435: inode #2: comm syz.2.825: Directory hole found for htree leaf block 0 [ 288.729190][ T8261] EXT4-fs error (device loop2): ext4_add_entry:2435: inode #2: comm syz.2.825: Directory hole found for htree leaf block 0 [ 288.803298][ T7191] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.072908][ T7978] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 289.103057][ T8280] loop2: detected capacity change from 0 to 2048 [ 289.159388][ T8280] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 289.240611][ T7978] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 289.416916][ T7978] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 289.454455][ T7978] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 289.582277][ T6741] IPVS: stop unused estimator thread 0... [ 290.330681][ T8295] netlink: 80 bytes leftover after parsing attributes in process `syz.1.827'. [ 290.403877][ T8294] loop3: detected capacity change from 0 to 512 [ 290.476405][ T8294] EXT4-fs (loop3): 1 truncate cleaned up [ 290.516209][ T8294] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 290.554243][ T7998] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 290.565669][ T7998] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 290.608430][ T8294] EXT4-fs error (device loop3): ext4_add_entry:2435: inode #2: comm syz.3.835: Directory hole found for htree leaf block 0 [ 290.650207][ T7998] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 290.666907][ T8298] loop2: detected capacity change from 0 to 512 [ 290.675109][ T8298] EXT4-fs: quotafile must be on filesystem root [ 290.787648][ T7978] 8021q: adding VLAN 0 to HW filter on device bond0 [ 290.816963][ T7646] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.909136][ T7998] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 290.982940][ T8284] loop0: detected capacity change from 0 to 32768 [ 291.002929][ T8284] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.832 (8284) [ 291.339430][ T8284] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 291.672507][ T8284] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 291.746507][ T8284] BTRFS info (device loop0): using free-space-tree [ 291.809238][ T7978] 8021q: adding VLAN 0 to HW filter on device team0 [ 291.959717][ T8307] loop3: detected capacity change from 0 to 512 [ 291.973325][ T5158] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.980497][ T5158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 292.081777][ T8307] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 292.105720][ T5158] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.112976][ T5158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 292.167917][ T8307] ext4 filesystem being mounted at /24/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 292.318698][ T7998] 8021q: adding VLAN 0 to HW filter on device bond0 [ 292.380303][ T7646] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.425505][ T8284] BTRFS error (device loop0): open_ctree failed [ 292.449594][ T7998] 8021q: adding VLAN 0 to HW filter on device team0 [ 292.526285][ T5158] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.533531][ T5158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 292.581880][ T5158] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.589064][ T5158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 292.722371][ T8328] pimreg: entered allmulticast mode [ 292.802662][ T8328] pimreg: left allmulticast mode [ 293.186065][ T7998] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 293.269448][ T8335] loop2: detected capacity change from 0 to 256 [ 293.284664][ T7978] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 293.756935][ T7557] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.273231][ T7998] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 294.745376][ T7978] veth0_vlan: entered promiscuous mode [ 294.785059][ T7978] veth1_vlan: entered promiscuous mode [ 294.951027][ T7978] veth0_macvtap: entered promiscuous mode [ 294.981551][ T5158] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 295.013380][ T7978] veth1_macvtap: entered promiscuous mode [ 295.029314][ T8337] loop3: detected capacity change from 0 to 32768 [ 295.071169][ T8337] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.843 (8337) [ 295.092122][ T8373] loop2: detected capacity change from 0 to 512 [ 295.163442][ T7998] veth0_vlan: entered promiscuous mode [ 295.181830][ T5158] usb 1-1: Using ep0 maxpacket: 16 [ 295.194740][ T8373] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 295.200472][ T7978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 295.219199][ T8337] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 295.229543][ T5158] usb 1-1: New USB device found, idVendor=2770, idProduct=9050, bcdDevice=11.97 [ 295.246454][ T5158] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.268908][ T8337] BTRFS info (device loop3): using sha256 (sha256-ni) checksum algorithm [ 295.270988][ T8373] ext4 filesystem being mounted at /51/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 295.287669][ T7978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.298594][ T8337] BTRFS info (device loop3): using free-space-tree [ 295.302046][ T5158] usb 1-1: config 0 descriptor?? [ 295.310680][ T7978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 295.330044][ T5158] gspca_main: sq905c-2.14.0 probing 2770:9050 [ 295.342660][ T7978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.373248][ T7978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 295.407294][ T7978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.431694][ T7978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 295.450591][ T7978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.479701][ T7978] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 295.506932][ T7978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.544065][ T7191] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.574521][ T7978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.647506][ T7978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.670802][ T7978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.680633][ T7978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.758177][ T7978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.769211][ T7978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.799357][ T8370] loop1: detected capacity change from 0 to 32768 [ 295.805129][ T7978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.841024][ T8370] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.851 (8370) [ 295.842504][ T7978] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 295.918902][ T8370] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 295.943469][ T5158] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 295.953445][ T7978] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.956048][ T8370] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 295.978846][ T5158] sq905c 1-1:0.0: probe with driver sq905c failed with error -71 [ 296.020369][ T7978] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.029755][ T8370] BTRFS info (device loop1): using free-space-tree [ 296.032038][ T5158] usb 1-1: USB disconnect, device number 6 [ 296.063011][ T7978] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.084522][ T7978] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.095985][ T7646] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 296.116599][ T7998] veth1_vlan: entered promiscuous mode [ 296.344964][ T29] audit: type=1800 audit(1721410193.055:90): pid=8370 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.851" name="bus" dev="loop1" ino=263 res=0 errno=0 [ 296.569759][ T7998] veth0_macvtap: entered promiscuous mode [ 296.666499][ T7998] veth1_macvtap: entered promiscuous mode [ 296.800736][ T7998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 296.870855][ T7998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.880711][ T7998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 296.915194][ T7998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.940879][ T7998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 296.951787][ T7998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.962036][ T7998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 296.973671][ T7998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.983841][ T7998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 296.994554][ T7998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.001819][ T8417] loop2: detected capacity change from 0 to 2048 [ 297.028312][ T7998] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 297.067229][ T7557] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 297.074455][ T7998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 297.080852][ T6730] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.094021][ T5106] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 297.109097][ T8417] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 297.123484][ T7998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.139346][ T6730] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.144376][ T7998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 297.161694][ T7998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.172062][ T7998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 297.190890][ T7998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.200956][ T7998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 297.214579][ T7998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.228135][ T7998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 297.239185][ T7998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.282656][ T5106] usb 1-1: Using ep0 maxpacket: 32 [ 297.303708][ T5106] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36 [ 297.310469][ T7998] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 297.347543][ T7998] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.379261][ T5106] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 297.382800][ T7998] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.400848][ T5106] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.418088][ T5106] usb 1-1: Product: syz [ 297.422787][ T5106] usb 1-1: Manufacturer: syz [ 297.427410][ T5106] usb 1-1: SerialNumber: syz [ 297.442240][ T7998] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.452296][ T5106] usb 1-1: config 0 descriptor?? [ 297.458137][ T8415] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 297.461345][ T7998] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.476910][ T5106] hub 1-1:0.0: bad descriptor, ignoring hub [ 297.486987][ T5106] hub 1-1:0.0: probe with driver hub failed with error -5 [ 297.506948][ T5106] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input7 [ 297.699136][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.755986][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.840958][ T5158] usb 1-1: USB disconnect, device number 7 [ 297.841038][ C0] usbtouchscreen 1-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 298.029091][ T8426] loop2: detected capacity change from 0 to 64 [ 298.125015][ T8426] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 298.191155][ T6730] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 298.200824][ T6730] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 298.329269][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 298.368463][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 298.760868][ T5281] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 298.797441][ T8441] loop4: detected capacity change from 0 to 512 [ 298.833768][ T8441] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.864: casefold flag without casefold feature [ 298.873466][ T8441] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.864: couldn't read orphan inode 15 (err -117) [ 298.926582][ T8441] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 298.970913][ T5281] usb 6-1: Using ep0 maxpacket: 32 [ 298.978703][ T5281] usb 6-1: New USB device found, idVendor=04b4, idProduct=1002, bcdDevice=81.3f [ 298.990834][ T5281] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.007341][ T8441] EXT4-fs error (device loop4): ext4_add_entry:2435: inode #2: comm syz.4.864: Directory hole found for htree leaf block 0 [ 299.022188][ T5281] usb 6-1: config 0 descriptor?? [ 299.110478][ T8441] EXT4-fs error (device loop4): ext4_add_entry:2435: inode #2: comm syz.4.864: Directory hole found for htree leaf block 0 [ 299.201212][ T8451] EXT4-fs error (device loop4): ext4_add_entry:2435: inode #2: comm syz.4.864: Directory hole found for htree leaf block 0 [ 299.236004][ T8424] loop1: detected capacity change from 0 to 32768 [ 299.314713][ T5158] usb 6-1: USB disconnect, device number 10 [ 299.399913][ T7998] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.615208][ T8424] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,noshard_inode_numbers,noinodes_use_key_cache,gc_reserve_bytes=512 GiB,nojournal_transaction_names [ 299.653247][ T8424] bcachefs (loop1): recovering from clean shutdown, journal seq 8 [ 299.679030][ T8424] bcachefs (loop1): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.9: disk_accounting_v2 [ 299.679030][ T8424] running recovery passes: check_allocations [ 299.741769][ T8424] bcachefs (loop1): accounting_read... done [ 299.752184][ T8424] bcachefs (loop1): alloc_read... done [ 299.757814][ T8424] bcachefs (loop1): stripes_read... done [ 299.786791][ T8424] bcachefs (loop1): snapshots_read... done [ 299.805463][ T8424] bcachefs (loop1): check_allocations... [ 299.810293][ T8424] btree ptr not marked in member info btree allocated bitmap [ 299.810316][ T8424] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 56308231fb2a3a03 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, shutting down [ 299.880560][ T8424] bcachefs (loop1): inconsistency detected - emergency read only at journal seq 8 [ 299.892374][ T8424] bcachefs (loop1): bch2_gc_mark_key(): error fsck_errors_not_fixed [ 299.925453][ T8424] bcachefs (loop1): bch2_gc_btree(): error fsck_errors_not_fixed [ 299.961287][ T8424] bcachefs (loop1): bch2_gc_btrees(): error fsck_errors_not_fixed [ 300.004585][ T8473] netlink: 28 bytes leftover after parsing attributes in process `syz.4.871'. [ 300.051087][ T8424] bcachefs (loop1): bch2_check_allocations(): error fsck_errors_not_fixed [ 300.083829][ T8424] bcachefs (loop1): bch2_fs_recovery(): error fsck_errors_not_fixed [ 300.126467][ T8424] bcachefs (loop1): bch2_fs_start(): error starting filesystem fsck_errors_not_fixed [ 300.161574][ T8424] bcachefs (loop1): shutting down [ 300.225222][ T8424] bcachefs (loop1): shutdown complete [ 300.359718][ T8482] loop4: detected capacity change from 0 to 512 [ 300.420393][ T8482] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #15: comm syz.4.875: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0) [ 300.448819][ T8482] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.875: couldn't read orphan inode 15 (err -117) [ 300.486597][ T8482] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 300.521801][ T8482] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 300.540701][ T8482] EXT4-fs error (device loop4): ext4_add_entry:2435: inode #2: comm syz.4.875: Directory hole found for htree leaf block 0 [ 300.558922][ T8482] EXT4-fs error (device loop4): ext4_add_entry:2435: inode #2: comm syz.4.875: Directory hole found for htree leaf block 0 [ 300.631264][ T8482] EXT4-fs error (device loop4): ext4_add_entry:2435: inode #2: comm syz.4.875: Directory hole found for htree leaf block 0 [ 300.662855][ T8482] EXT4-fs error (device loop4): ext4_add_entry:2435: inode #2: comm syz.4.875: Directory hole found for htree leaf block 0 [ 300.771495][ T7998] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.821139][ T920] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 300.890104][ T8476] loop0: detected capacity change from 0 to 32768 [ 300.924984][ T8476] bcachefs (/dev/loop0): error reading default superblock: Not a bcachefs superblock (got magic c68573f6-4e1a-4502-8265-f57f48ba6d81) [ 301.021075][ T920] usb 6-1: Using ep0 maxpacket: 32 [ 301.043419][ T920] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 301.071202][ T920] usb 6-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 301.103717][ T920] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.112301][ T920] usb 6-1: Product: syz [ 301.116833][ T8424] bcachefs: bch2_fs_get_tree() error: fsck_errors_not_fixed [ 301.125091][ T920] usb 6-1: Manufacturer: syz [ 301.129702][ T920] usb 6-1: SerialNumber: syz [ 301.138387][ T8476] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 301.177527][ T920] usb 6-1: config 0 descriptor?? [ 301.187333][ T920] hub 6-1:0.0: bad descriptor, ignoring hub [ 301.200966][ T8476] bcachefs (loop0): recovering from clean shutdown, journal seq 13 [ 301.211206][ T920] hub 6-1:0.0: probe with driver hub failed with error -5 [ 301.221036][ T8476] bcachefs (loop0): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.9: disk_accounting_v2 [ 301.221036][ T8476] running recovery passes: check_allocations [ 301.264406][ T920] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input8 [ 301.313837][ T920] usbtouchscreen 6-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -8 [ 301.349440][ T8476] BUG: sleeping function called from invalid context at include/linux/sched/mm.h:337 [ 301.359495][ T8476] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 8476, name: syz.0.872 [ 301.368716][ T8476] preempt_count: 1, expected: 0 [ 301.382842][ T8476] RCU nest depth: 0, expected: 0 [ 301.388127][ T8476] 2 locks held by syz.0.872/8476: [ 301.393244][ T8476] #0: ffff888055400278 (&c->state_lock){+.+.}-{3:3}, at: bch2_fs_start+0x45/0x5b0 [ 301.404164][ T8476] #1: ffff88805544a880 (&j->lock){+.+.}-{2:2}, at: bch2_fs_journal_start+0x1219/0x14a0 [ 301.415201][ T8476] Preemption disabled at: [ 301.415218][ T8476] [<0000000000000000>] 0x0 [ 301.424040][ T8476] CPU: 1 PID: 8476 Comm: syz.0.872 Not tainted 6.10.0-syzkaller-08676-g720261cfc732 #0 [ 301.433702][ T8476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 301.443773][ T8476] Call Trace: [ 301.447071][ T8476] [ 301.450017][ T8476] dump_stack_lvl+0x241/0x360 [ 301.454732][ T8476] ? __pfx_dump_stack_lvl+0x10/0x10 [ 301.459957][ T8476] ? __pfx__printk+0x10/0x10 [ 301.464597][ T8476] __might_resched+0x5d4/0x780 [ 301.469381][ T8476] ? __pfx___might_resched+0x10/0x10 [ 301.474679][ T8476] ? srso_alias_return_thunk+0x5/0xfbef5 [ 301.480333][ T8476] ? fs_reclaim_acquire+0x93/0x140 [ 301.485460][ T8476] __kmalloc_node_track_caller_noprof+0xcb/0x440 [ 301.491802][ T8476] ? bch2_printbuf_make_room+0x1f1/0x350 [ 301.497449][ T8476] krealloc_noprof+0x7d/0x120 [ 301.502148][ T8476] bch2_printbuf_make_room+0x1f1/0x350 [ 301.507624][ T8476] bch2_prt_printf+0x267/0x6d0 [ 301.512403][ T8476] ? bch2_journal_space_available+0x11c/0x1b00 [ 301.518576][ T8476] ? __pfx_bch2_prt_printf+0x10/0x10 [ 301.523874][ T8476] ? srso_alias_return_thunk+0x5/0xfbef5 [ 301.529529][ T8476] bch2_journal_space_available+0x89b/0x1b00 [ 301.535529][ T8476] ? srso_alias_return_thunk+0x5/0xfbef5 [ 301.541178][ T8476] ? kasan_save_track+0x51/0x80 [ 301.546047][ T8476] ? kasan_save_track+0x3f/0x80 [ 301.550916][ T8476] ? poison_slab_object+0xe0/0x150 [ 301.556044][ T8476] ? __kasan_slab_free+0x37/0x60 [ 301.561005][ T8476] ? bch2_journal_space_available+0x11c/0x1b00 [ 301.567179][ T8476] ? bch2_journal_log_msg+0xda/0x120 [ 301.572469][ T8476] ? bch2_fs_recovery+0x1e48/0x38d0 [ 301.577683][ T8476] ? bch2_fs_get_tree+0xd61/0x1700 [ 301.582808][ T8476] ? vfs_get_tree+0x92/0x2a0 [ 301.587400][ T8476] ? do_new_mount+0x2be/0xb40 [ 301.592081][ T8476] ? __se_sys_mount+0x2d6/0x3c0 [ 301.596938][ T8476] ? __pfx_bch2_journal_space_available+0x10/0x10 [ 301.603369][ T8476] ? srso_alias_return_thunk+0x5/0xfbef5 [ 301.609019][ T8476] ? mark_lock+0x9a/0x350 [ 301.613371][ T8476] ? srso_alias_return_thunk+0x5/0xfbef5 [ 301.619020][ T8476] ? __lock_acquire+0x137a/0x2040 [ 301.624082][ T8476] ? srso_alias_return_thunk+0x5/0xfbef5 [ 301.629730][ T8476] ? srso_alias_return_thunk+0x5/0xfbef5 [ 301.635374][ T8476] ? kasan_quarantine_put+0xdc/0x230 [ 301.640670][ T8476] ? srso_alias_return_thunk+0x5/0xfbef5 [ 301.646314][ T8476] ? lockdep_hardirqs_on+0x99/0x150 [ 301.651535][ T8476] ? __pfx_lock_acquire+0x10/0x10 [ 301.656569][ T8476] ? srso_alias_return_thunk+0x5/0xfbef5 [ 301.662218][ T8476] ? srso_alias_return_thunk+0x5/0xfbef5 [ 301.667862][ T8476] ? do_raw_spin_lock+0x14f/0x370 [ 301.672894][ T8476] ? srso_alias_return_thunk+0x5/0xfbef5 [ 301.678546][ T8476] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 301.683923][ T8476] ? __genradix_iter_peek+0x3d0/0x430 [ 301.689409][ T8476] bch2_fs_journal_start+0x1356/0x14a0 [ 301.694901][ T8476] ? __pfx_bch2_fs_journal_start+0x10/0x10 [ 301.700710][ T8476] ? journal_replay_entry_early+0x4d/0xb70 [ 301.706537][ T8476] ? __pfx_bch2_journal_log_msg+0x10/0x10 [ 301.712275][ T8476] ? srso_alias_return_thunk+0x5/0xfbef5 [ 301.717921][ T8476] ? bch2_recovery_passes_from_stable+0x104/0x120 [ 301.724360][ T8476] bch2_fs_recovery+0x1ec8/0x38d0 [ 301.729417][ T8476] ? __pfx_bch2_fs_recovery+0x10/0x10 [ 301.734829][ T8476] ? srso_alias_return_thunk+0x5/0xfbef5 [ 301.740481][ T8476] ? __pfx_lock_release+0x10/0x10 [ 301.745518][ T8476] ? bch2_get_next_online_dev+0x2b/0x4f0 [ 301.751159][ T8476] ? __pfx_lock_release+0x10/0x10 [ 301.756205][ T8476] ? bch2_get_next_online_dev+0x2b/0x4f0 [ 301.761852][ T8476] ? srso_alias_return_thunk+0x5/0xfbef5 [ 301.767496][ T8476] ? bch2_get_next_online_dev+0x4b9/0x4f0 [ 301.773221][ T8476] ? bch2_get_next_online_dev+0x2b/0x4f0 [ 301.778869][ T8476] ? srso_alias_return_thunk+0x5/0xfbef5 [ 301.784516][ T8476] ? llist_reverse_order+0x72/0x90 [ 301.789651][ T8476] bch2_fs_start+0x356/0x5b0 [ 301.794260][ T8476] bch2_fs_get_tree+0xd61/0x1700 [ 301.799230][ T8476] ? __pfx_bch2_parse_one_mount_opt+0x10/0x10 [ 301.805315][ T8476] ? __pfx_bch2_fs_get_tree+0x10/0x10 [ 301.810723][ T8476] ? srso_alias_return_thunk+0x5/0xfbef5 [ 301.816374][ T8476] ? generic_parse_monolithic+0x387/0x400 [ 301.822131][ T8476] ? srso_alias_return_thunk+0x5/0xfbef5 [ 301.827778][ T8476] ? apparmor_capable+0x138/0x1b0 [ 301.832823][ T8476] ? srso_alias_return_thunk+0x5/0xfbef5 [ 301.838468][ T8476] ? srso_alias_return_thunk+0x5/0xfbef5 [ 301.844121][ T8476] vfs_get_tree+0x92/0x2a0 [ 301.848545][ T8476] do_new_mount+0x2be/0xb40 [ 301.853064][ T8476] ? srso_alias_return_thunk+0x5/0xfbef5 [ 301.858717][ T8476] ? __pfx_do_new_mount+0x10/0x10 [ 301.863758][ T8476] __se_sys_mount+0x2d6/0x3c0 [ 301.868447][ T8476] ? __pfx___se_sys_mount+0x10/0x10 [ 301.873650][ T8476] ? exc_page_fault+0x590/0x8c0 [ 301.878517][ T8476] ? srso_alias_return_thunk+0x5/0xfbef5 [ 301.884166][ T8476] ? srso_alias_return_thunk+0x5/0xfbef5 [ 301.889812][ T8476] ? __x64_sys_mount+0x20/0xc0 [ 301.894595][ T8476] do_syscall_64+0xf3/0x230 [ 301.899113][ T8476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.905018][ T8476] RIP: 0033:0x7f41ecb7725a [ 301.909437][ T8476] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 7e 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 301.929051][ T8476] RSP: 002b:00007f41ed8f8e78 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 301.937478][ T8476] RAX: ffffffffffffffda RBX: 00007f41ed8f8f00 RCX: 00007f41ecb7725a [ 301.945453][ T8476] RDX: 0000000020000000 RSI: 000000002000f680 RDI: 00007f41ed8f8ec0 [ 301.953429][ T8476] RBP: 0000000020000000 R08: 00007f41ed8f8f00 R09: 0000000000200012 [ 301.961404][ T8476] R10: 0000000000200012 R11: 0000000000000206 R12: 000000002000f680 [ 301.969375][ T8476] R13: 00007f41ed8f8ec0 R14: 000000000000f62c R15: 0000000020000140 [ 301.977369][ T8476] [ 301.984163][ T8476] bcachefs (loop0): insufficient writeable journal devices available: have 0, need 1 [ 301.984163][ T8476] rw journal devs: [ 302.053661][ T920] usbtouchscreen 6-1:0.0: probe with driver usbtouchscreen failed with error -8 [ 302.118579][ T920] usb 6-1: USB disconnect, device number 11 [ 302.166122][ T8476] bcachefs (loop0): accounting_read... done [ 302.188142][ T8476] bcachefs (loop0): alloc_read... done [ 302.200534][ T8476] bcachefs (loop0): stripes_read... done [ 302.209014][ T8476] bcachefs (loop0): snapshots_read... done [ 302.237378][ T8476] bcachefs (loop0): check_allocations... [ 302.244588][ T8476] btree ptr not marked in member info btree allocated bitmap [ 302.244606][ T8476] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 1818ce08861e3527 written 40 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, shutting down [ 302.295990][ T8476] bcachefs (loop0): inconsistency detected - emergency read only at journal seq 13 [ 302.308283][ T8476] bcachefs (loop0): bch2_gc_mark_key(): error fsck_errors_not_fixed [ 302.318513][ T8476] bcachefs (loop0): bch2_gc_btree(): error fsck_errors_not_fixed [ 302.354674][ T8476] bcachefs (loop0): bch2_gc_btrees(): error fsck_errors_not_fixed [ 302.363071][ T8476] bcachefs (loop0): bch2_check_allocations(): error fsck_errors_not_fixed [ 302.381023][ T8476] bcachefs (loop0): bch2_fs_recovery(): error fsck_errors_not_fixed [ 302.389049][ T8476] bcachefs (loop0): bch2_fs_start(): error starting filesystem fsck_errors_not_fixed [ 302.406341][ T8476] bcachefs (loop0): shutting down [ 302.470116][ T8476] bcachefs (loop0): shutdown complete [ 302.488340][ T8492] loop4: detected capacity change from 0 to 40427 [ 302.497553][ T8492] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 302.506355][ T8492] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 302.656737][ T8492] F2FS-fs (loop4): Found nat_bits in checkpoint [ 302.754853][ T8492] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 302.762354][ T8492] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 302.854826][ T29] audit: type=1800 audit(1721410199.565:91): pid=8492 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.879" name="bus" dev="loop4" ino=10 res=0 errno=0 [ 302.913270][ T29] audit: type=1800 audit(1721410199.595:92): pid=8492 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.879" name="bus" dev="loop4" ino=10 res=0 errno=0 [ 302.996009][ T8476] bcachefs: bch2_fs_get_tree() error: fsck_errors_not_fixed [ 303.310520][ T61] bio_check_eod: 39 callbacks suppressed [ 303.310546][ T61] kworker/u8:4: attempt to access beyond end of device [ 303.310546][ T61] loop4: rw=1, sector=45096, nr_sectors = 16 limit=40427