last executing test programs: 1m38.470467391s ago: executing program 4 (id=1124): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000300)="5c00000015006b05c84e21000ab16d6e2306750900000000440002005817d30461bc24eeb556080000000000000036c23d3b48dfd8cdbf9367b098fa51f60a64c922c56ce67956b3eebb312ffeeff408000000e786a6d0bd03003275", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 1m38.355647891s ago: executing program 4 (id=1129): r0 = socket$inet(0x2, 0x3, 0x4) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x61, 0xffffffffffffffff, &(0x7f0000003a80)=0x44) 1m38.239785578s ago: executing program 4 (id=1133): r0 = socket$netlink(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) 1m38.080645052s ago: executing program 4 (id=1138): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000080)='./file1\x00', 0x2000c0, &(0x7f0000002380)=ANY=[@ANYBLOB="747970653d629bfeaa2c747970653d75699e3e2c666f7263652c6465636f6d706f73652c666f7263652c6e6c733d69736f383835392d392c00fb96ab4c9493d7be8b39915215ec88b35cc6fc60097459"], 0x1, 0x6e4, &(0x7f0000000240)="$eJzs3U1sHGcZAOB31uu1N5XcbZu0BSHFakQEDSS2l5IgIREQQj5UKBKXXk3iNFbWbmRvkRMhsgUKRzihHHooQubQE+oBqYgDIpyRkLii3CNxjziwaGZn1rtre72b+CcJzyON55uZ7+ed1zOfd2cTbQD/txbficlWJLF47u3NdPvBVr3xYKu+WpQjYioiShHlziqStYjkfsTl6CzxuXRn3l2y1zhvPfzso7P3Pql3tsr5ktUvDWu3rT1khFa+xGxETOTrMZX36u/qLv3dHavrpBt3mrAzReLguLV3aI3TfIT7Fnja3Y2YmNxlfy3iRERM568DIp8dSkcc3oEba5YDAACAp9PEfhVefBSPYjNmjiYcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeD4kne8MTPKlVJRnIym+/7+S70tVKscc73Bf2ef4h9ePKBAAAAAAAAAAOBSf5h/cn34Uj2IzZor97ST7zP+NbONk9vOFeD82YjnW43xsxlI0oxnrMR8xOdPTYWVzqdlcn9/Z8jeRtmy323fzlgsRUdvRcuEIThoAAAAAAAAAnl8/jcWYOe4gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgVxIx0Vlly8miXItSOSKmI6KS1mtF/LkoP8v+ctwBAAAAwOGr5uuZ5L+dQjvJ3vO/mr3vn473Yy2asRLNaMRyXMueBXTe9Zf+0ao3HmzVV9NlZ8ff/vdYcWQ9RsREfLDHyHNZjVPdFovxvfhBnIvZuBLrsRI/iqVoxnLMRjU9iViKJGrVztOLWhHn7vFe7tu6Mhjb6YHt17NIqnE9VrLYzsfVSnQem2TnkI75es9of6xEDIz4QZqd5Fu5EXN0ref39ev8uUyu/eKIfRyOWnbmk92MzKW5z7Px0vDcj3mdDI40H6XuM6iT26Okm4MjFTn/4Tg5P5Gv01z/oj/nB23MR2mDmViIUn71Rbzan/NbX7z3cn/jL//zr1dulNZu3ri+ce4QT+lQTRaFwUzUezLx2vCrL89EI81Ea/RMTA7umH6C8zhAlTwb2VQ04mz53ay0FG/0XILvxbVYjosxF/NxKebiG7EQ9b4r7FRfXsv11f6cZPdaaef8Vh0S/Jkv9VT65T6Vj1aal5d68to709WyY/mey7+KuZ4svTz86hv7r0A6/ufzcjrGz7p/cZ4GfZnI5+YiuleGZ+K37fTnRmPt5vqNpVsjjnc2X6e37Yf9c/PvDuJ8Hl96vaQzbjnbynJSLa6X9Ngr3Wj781XJP3HptCvtOHaqe6wWM7ES39/zTq3kr+F29tQ59lrvsX9tz5yV/PVNcazvVU68F43sVciA2aPJKgAjO/HmiUr1YfXv1Y+rP6/eqL49/Z2pS1NfqMTk38p/mvhD6felbyZvxsfxk5g57kgBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOB5sHH7zs2lRmN5vVuI6cE9T1qo7DnW8EKU9q2z9cJoHUYtYvhYSV6oHOy5P4uFahxSz59GxJA6lSceIhn7Ghu7kF7IB9Jh8cVp2Z72xBjNy0Wr3euUY2N6r9/g1PZdELWbS43/tPvqVKPnlgGecxeaq7cubNy+89WV1aV3l99dXlu4dPHSxfrX57924fpKY3mu8/O4owQOw8btOxPHHQMAAAAAAAAAAAAwnvxf/zcf+z8zlPepU1nf2H3k00d9qgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAzavGdmGxFEvNz5+fS7Qdb9Ua6FOXtmuWIKEVE8uOI5H7E5egsUevpLtlrnLcefvbR2Xuf1Lf7Khf1S8PajaaVLzEbERP5en9Tu3Szs7+rPf21Hiu8pHuGacLOFImD4/a/AAAA//+vgfmP") mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1adc51, 0x0) 1m37.919312685s ago: executing program 4 (id=1144): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000012000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000058000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140ffffff1f0800084000000001"], 0xa0}}, 0x0) 1m37.318243091s ago: executing program 4 (id=1158): r0 = socket(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000000040)=0x20f, 0x4) 1m37.125595513s ago: executing program 32 (id=1158): r0 = socket(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000000040)=0x20f, 0x4) 2.789088763s ago: executing program 1 (id=4055): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a00)=@dellink={0x34, 0x11, 0x1, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x442, 0x1080}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth1_vlan\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x64000850) 2.076045737s ago: executing program 1 (id=4067): capset(&(0x7f0000000300)={0x20080522}, &(0x7f0000000340)) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80a, &(0x7f00000000c0)={[{@grpquota}, {@norecovery}, {@data_err_abort}, {@noblock_validity}]}, 0x1, 0x79b, &(0x7f0000000a40)="$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") 2.065350002s ago: executing program 2 (id=4068): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0xea, 0x7, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r0, &(0x7f0000000700), 0x20000000, 0x2}, 0x20) 1.951026495s ago: executing program 2 (id=4069): futex(&(0x7f000000cffc)=0x4, 0x10b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x5, 0x300, 0x0, &(0x7f0000048000), 0x5000000) 1.913880979s ago: executing program 1 (id=4070): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x22}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x37, 0x0, &(0x7f0000000240)="e02742e8680d0eff9782762f86dd0e81557e2eedf9556c1acfd0582546828adaf6b2e0ba57fcd8aaa0a452118c39bc980ef54aa0cf70cc", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.768904167s ago: executing program 1 (id=4073): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f0000000000)={'vlan0\x00', @random="0133014010ff"}) 1.62281757s ago: executing program 3 (id=4078): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a00)=@dellink={0x34, 0x11, 0x1, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x442, 0x1080}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth1_vlan\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x64000850) 1.577090874s ago: executing program 1 (id=4079): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000240)={0x6, 0x118, 0xfa00, {{0x1, 0x9, "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", 0x3, 0x4, 0x40, 0xc, 0x1, 0x1, 0xa7, 0x1}}}, 0x120) 1.567613326s ago: executing program 1 (id=4080): syz_mount_image$bcachefs(&(0x7f00000058c0), &(0x7f0000000000)='./file2\x00', 0x1210008, &(0x7f0000000100)=ANY=[@ANYBLOB="4a61636b67726f756efdff636f6d7072653373696f6e3d6c7a342c7265636f6e7374727563745f616c6c6f632c6e6f636f772c6e6f6578636c2c62747265655f6e6f64655f70726566657463682c6e6f7265636f766572792c73686172645f696e6f64655f6e746d626572c36e4279466a7c76926e3755f657df732c6e6f5f646174615f696f2c655661737572655f636f6465faffffff2c6669785f6572726f72733d61736b2c646973636172642c696e6f6465735f7573655f6b65795b63616368652c6572726f72733d636f6e74696e75652c6572", @ANYRESDEC, @ANYRESHEX=0x0, @ANYRES64, @ANYRES64, @ANYRES64, @ANYRESOCT], 0x1, 0x5938, &(0x7f000000bd00)="$eJzs3X+QXFW9IPBzu3synZn8mASQCDIZAlEENRN+FaCl0fVXAVJxsZSwURjIBKNJSCWDQEAJLrhQgIWWlqJWLVpILRotqmCVSIn82IRVlGJ1qVdIPX0P/cNXyCMlkMezfObVTN/T6bnTd25PT09I4POpZG7f07e/59xzT9++39M90wEAAIDXhF3Xb9lzzhHv+8Xnh1+65oM/2XBt6C2PlVfjBn3p8opXqoXsT92VRWPL7Lh401Xf++PAxe/5+d09331555qj1/72vYdcfP+nztxx2zcfenHuvX9/pihuHE/H71tPnktCqP5091e/sPOxw0fLkhBCOenbFsKCZOFDC5JMiMG/hhDWpCuLMnfe89JJa0eX197UPa58fmY74/21rZqOs617Lj8h/O7dq6771eIf/qBr+7Pb9m2SVBvGUwjzLmx8fFcIYXb6f1QcbXE8xkG7MoTQ0/C40wradUyL7V+Ws35kupyVLnsL4sT7l2TWS5ntsutRV2bZU1DfdOW1o93t8tWO4JympZ2T185YviBd/jhdHj/F+OX4PwmlJFTqzV+f7Bsjo3rm1pZJSMaOZTwPJqFUP7Yh3f/MepJZL2XWy12Z/RqrNx1o5SQZXx63y5TH03ElLT+68VzdxLk55a9Pl9X0ifpyXA/ZGzW9E27U92tMbNfuSdqyP5QazkHNyusHPj0YvWlZb7JwwmP2NhHv27nq5qXl1Q/v6stpR3J3ksZP2oq/9ZcL5nzi+zdeln1dr8e/sJTGL7UV//dnPf78+Td+5xu58W+N8cttxT/xgZ7nznrk+iW5/bM79k+lrfhDzzx6y+JDL9qe2/7bY/xqW/FX7Hi8e+6eBx7Mbf9g7J/ZbcV/+u3v/8NdT973bG78EOP3tBV/9Y5NX+zu33NcbvwHY//0tjd+Xth+6lP9/X8ayIv/RIw/t634d2677Yw75t90Zu7xXRn7p6+t+Gcfe/91c/bcd1TeuTO5veEVKen0qx3Aq98h6TXWDel6u3nmdDXkC18fqNSu+eak/+d2sqKM0XrmzWB8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF6bDjvh/37gnz/a91wlXe9Obzxdqi1j+awQktkhhC0jQ5tH1m28ZOBTl162eePQ+oGhkYHhjSObrxw4+S0Dm4c3rR+6cvTewbeeVHvcwpDUlslRE+reu3fv3lLf+LJY3385dvvvlp72L38OYfCw3/RXctu/7LYNdxza5GdGsmLvuzZcds5vTvl2ul99abv6ctoVctr1r+f97Y4v7/7jcSEMvm6ydj369Dt/Nq5BYwX74qRK3aHWoO6kp2k76q1O2xP7q7J23frhweL+Lefsx3+76tm/rr3iS3+r9W81dz9a7N/ZK/auL31t1dn/8bWrawUH6nEv6u+4F7F9sf+qaX/PS/drXs5+VXL26/pfPfjkT4+48cVtYbDywuKJdRftV1c6ALqS17dUb6yhJ1kwrryabh+PeHzcspENm5ZtuXLrW9dtGLpk+JLhjacvP3n5qYOnnHrKsrE9X9bh/Y/1v7HF/d8/42n+Z7b9OP5sbTwVtSu3Pz4fSwYPK+6PxhblPf96zv3CV06/7ZFzagVF4zxuXT+fpMue0eO8PDSMt4l91Wy/ivohhDDQrB+ef/HMcPg/rLuu6DzUeGQaf2YkK/Y+tuQv3z7tW4veUSvYL+f5xga1eZ6vt3pfe8b6q5oejwO1f7tDOd2v3qbtWv7YI1037/rzZ+vtmzUrXDE0MrJ5ee3nnK/OHSuekxzZtF3Z0rhfi8d+lkPaLaE+TJuM11Fdoda+7Pkzbp7t1d70vt5kYdP9yor37Vx189Ly6od35fV0cnetxtmhtt+zkzfkbLk+88ByvcHN6j9Yx0f/B75170fv/dHJE8bHibWfRfuV5OzXD5+88yvf/dL/+FHn9usD73y87y//+MmltYKD5bxSb3XanqTxvHJiCHPSiHnPv8Wh+X7kPv9Kzfen6PmXrWff9s3jDWTWe0O5refriQ/0PHfWI9cvyX2+7m71+Xr1uLVywfP1QBk/++v5lYTs82vcQElW7P35DYdse+ialUfUCorGdX3rZuP6pBbyj5z9+tn5T/VfOvDf/3/nzhvfe8s9F/x2aMXnagUHynGvpv1bTXq6mrWj3uqYdzb279suvnT9mlp529e/aT4wc9e/6bIg/4mnki1Xbv300Pr1w5u3tLZfrb6exnqyo7jd19P07FZeWLBfpQn7NXM3WumvVp9vsf1r2u6v8c+33pC09bqw9ZcL5nzi+zde1jfhUWlFF5bS+KW24v/+rMefP//G73wjN/6tMX6lrfhDzzx6y+JDL9reEH/c8zy5PUnjV9uKv2LH491z9zzwYG77B2P7Z7cV/+m3v/8Pdz1537O58UOM39te/7+w/dSn+vv/lBv/iSStZ/QaKYR7XjppbW09GevIakM7usa1K2TXk8x6KbNeblwv1eZa6xWUk2R8edwuLT+6oS3NfCynPF6FVRfVli/H9ZC9MXn5gabUcO5vVl50nQoA8GoX3/+P16Dx/f/h9EIpf6YB9pluHrYoJ27Mw/bN58wad/+iNH58fJwH7H9bGBxdXjtQu9Cf6jxnfD5k5zljPccdMz5G/vzE5POcRfPvSzLrsV21+fJKQx6aKo1bhPgULpp/n1jP5PPvmd0vnh8fuCFTUBnr8GrO8etKZ8yafd4h097KaIS88ZGdF4uf5+ifF1aO1dfi+Mh+jiYeh+znaGI9R2ROnO1+jma64yM2e5K8d6zJxe9vTDx+YZL+3Xf8mkfLHr8pHO/q6PYz/f7swT9v2Ph+2L83ROjM+2EdnJccH/9VMi95oM8bxvK4H5UW5xM/mlPeqfnEeLqI7do9SVv2hynPJx7g86MAUcz/42vEaP4/egH+b5ntiq5Ds1eNMV7u54TKzdtTlHdM/JxeT1uv46t3bPpid/+e43Kvcx5s9XM/m8at9RR87qeoH5dm1gv7MWeCpijfy9ZT1O/Zz2X0hrlt9fud22474475N52Z2+8ray+kxf3+lXFrcwv6Xb6QE79pvtB6fPnCgfE5hqL5s1csH0k/+DRT+chHcsqnmo/0TLhR368xB10+MuFTfQAANTH/r79/lub//5TZrihvPT6zHuPl5q051yd5eeuH0uUVme1709+omOp189nH3n/dnD33HZWbt9zeah76v8at9U2Sh57+wmgeOr28OTePWNmZz4vn5hH1PGt6eWJu++t54vTy9Nz49Tx9enl0bv/U8+jpzQPkxq/PAxzsee7Mzte9avPo9NdnZyqPPjenfKp5dO+EG/X9GiOPBgB4ZcX8P17Gxfz/kcx2071uz80LOnTdnv17IPX4T+yvvHKm876ZzltnOq+f6XmJgz0vnul5oZmdJ5MXp+she6NGXgwAwIEg5v+z0/X8/H96+Ulu/lbPT+TnTePLzw+Q/Pxgn/+S/8v/i8n/AQBe3WL+H3/tMf79v/+Trmf/br08PSe+PF2ePtn4aTlPn+l5NvMA5gGKmQcAAHh16RrLlCb+nv3H02X29+zzfi///JztW1UZ+x37EC4a2Tw8fMFlm9YMjQxfsPHSNcNbLrh887qRkeGNte2mmzfm5i1p3tgVKml/NN8um7fNT/8ewvycv4eQ3T6GPXLsxsS/h5CtdnbB37Pbd/xaa2/e8StNsn2z8ZF3vPPifyxn+6h+/C/+5IkXrN1ywbqN60bWDa1ft3V4/HajWWtP0fdmPnp3vSx2y5S+NzPzY4LS1L+/szPtGD1KG+c3tqMr7Y+872dPMu1YkLZkQd73H+S0+xf/78ufOXbv3+4KYfCw8hum1X/Jir3/+7zhD43s+s2m0faXJm1/fcu0XQ3fV9rS9nF/Kusv3TJywtpLL9uY/UbJ9sT5jFJ9fYbmM9Knf7nF+YnVOeVTnZ8oT7hxYGp5fgIAgHHi+//xeja+f/il9AIqlreep0/v/ePcPH2wtTw9+71kRXl6dvu4v63m6dVp5unZ+ovy9GbbN8vT8/LuvPgfydl+qlofJ9P7nEfuOLmwtXGS/T6DonGS3X6q4ySZ5jjJ1l80Tppt32yc5B33vPgfztk+T+vjYXqfy8kdD7e2Nh7enFkvGg/Z7ac6HkrTHA/Z+ovGQ7Ptm42HvOObF/+cnO1bNX58jA6MsXExfMHll27+dMN2M/39F9NvX0e+/2NCY+L5rF2Tt7/a0P6Z/dzXzLQ/NLR/Zj9XNvPtn97nynLb/8T0ZsJq7f+fLbR/Zr/fpWWzMo+f/nztuLN37nxtWm/R58+K5nFX5ZRPdR531oQbBybzuPDKifl/fLsn5v83pctOvw108H9Pmu8xaxq/Q99jVnQds9/ef/V63hav5wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACt6a4sGlvuun7LnnOOeN8vPj/80jUf/MmGa9901ff+OHDxe35+d893X9655ui1v33vIRff/6kzd9z2zYdenHvv358pDNxXWxyfrlZDSJ5LQqj+dPdXv7DzscNHy5IQQjnp2xbCgmThQwuSTITBv4YQ1tTbOf7Oe146ae3o8tqbuseVz88Eye5X6C3H9oxrZ7iicI84CFXTcbZ1z+UnhN+9e9V1v1r8wx90bX92275NkmrDeAph3oWNj+8KIcxO/4+Ko21RfHC6XBlC6Gl43GkF7TqmxfYvy1k/Ml3OSpe9BXHi/Usy66XMdtn1qCuz7Cmob7ry2tHudkXmZNazJ6PpymtnLF+QLn+cLo+fYvxy/J+EUhIq9eavT/aNkdBw3JKQjB3L9DxYSkKpfmxDuv+Z9SSzXsqsl7sy+zVWbzrQykkyvjxulymPp+NKWn5047m6iXNzyl+fLqvpE/XluB6yN2p6J9yo79eY2K7dk7Rlfyg1nIOaldcPfHowetOy3mThhMfsbSLet3PVzUvLqx/e1ZfTjuTuJI2ftBV/6y8XzPnE92+8bFFe/AtLafxSW/F/f9bjz59/43e+kYlfH6LJrTF+ua34Jz7Q89xZj1y/JLd/dsf+qbQVf+iZR29ZfOhF23P75/YYv9pW/BU7Hu+eu+eBB3PbPxj7Z3Zb8Z9++/v/cNeT9z2bGz/E+D3N4//XyeOv3rHpi939e47Ljf9g7J/e9sbPC9tPfaq//08DefGfiPHnthX/zm23nXHH/JvOzD2+K2P/9LUV/+xj779uzp77jso7dya3d+qVE+C16ZD0GuuGdL3dPHO6GvKFrw9Uatd8c9L/cztZUcZoPfNmMD4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAK9Ov7765I+f964Pr6okISQ52+xtIt5XnrVixUAb9Q498+gtiw+9aHtj2aI24gAAAADFYh5eqpdUw6JweTI7HNl0+zhHcGRcS8aXZ+cQYpzsHEG7cUodilPuUJxKh+J0dSjOrA7F6R5Xet380GacakF7qqG1OLMnjVNquT09HYrT26E4czoUZ26H4szrUJz5HYrTN2mc1sfhgg7FWTh5nGtbjXNIh9pz6FTjnNE8zmEdas/rOhTn8A7Fyc4pT3Uczk23PCIvztiNcmGcSlKu39FsPj3Wc9Q06+ltsZ7c1+MW65ndYj3HZB5XmmI91RbreeM060larOfN06ynVFBPHLdXZNsX64lrLY7/KzsUZ2uH4lzVoThXdyjOZzsU53MdinPNNOMAtCrm//vyvb7QXXlH6EnPONlZgJjvLh77OfH1Lu+EFOO9IVM+KxsvGyabqGfiLZ5q+7ITCJl4SzLlXePiVer5yCTxqo3xlmbunLC/2fZlJxQy7Ts+U95dFC87sQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAM+jXV5/88fPe9eFVIQmj/5ra20S8rzxrxYqBNurduermpeXVD+9qLOuutBEIAAAAKBTz8K56STV0V5aH7mTWuO2q6TxANV0v99WW/fPCytFlMlAaW+9JFkz6uEr6uGUjGzYt23Ll1reu2zB0yfAlwxtPX37y8lMHTzn1lGVr160fHqz9DKG7IF4IYWz6YcuVWz89tH798OYttcJs+xelj1uUrifp4/rfFgZHl9em7V9YUF9pQn0zd6P46AEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/8mu3cXIVZYBAH7PzOzMsFBZw49DQ5dJKQSVaMHFgBL2JCaSCDRsSMwsupJGSjQutIGWVByhiYJtNCaQJk1Nb2oqESTe8CPEyE+a1GC1iVt7AUS50AsNKKaQXpiSMd2dMzsznelsR0KhPs/F+Xm/9/ve852LTd6zAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALy/5uoTM7XJqenRJCLpk9PoIRvLF9O0OkTdrz634cel8SOXtcdKhSEWAgAAAAbK+vCRVqQcpUI+8nHB/N3KaBuIxb4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4/zNXn5ipTU5Nn5lEJH1yGj1kY/limlaHqPv620989pXx8b+3xypDrAMAAAAMlvXhuVakHJW4OEaSCzrysm8Dy7vmd+dl66xYYl73t4N+eRcvMe/SJeZ9fEDemuZ5cwAAAMCHX9b/F1qRsSgVlvXt/wf19VneRV15+eZ5mN8KAAAAAP+brP8vtSKVKBUqrX59qf3+yq68bP6g/9tn8y/pM3/Q//Nvap79nx4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPjzm6hMztcmp6XwSkfTJafSQjeWLaVodou6Vz4/+84a9D65sj5UKQywEAAAADJT14YutdzlKhdEYiTPn+/7x63c99eWnnpmIiIU2v1iMzWs3brz7yoVjlnfF/r0jP9r35nePy7ti4XjKNggAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALxn5uoTM7XJqekzkoikT06jh2wsX0zT6hB1X/v8F//62KFn38juz4iIylA7AAAAAAaZ78OXtUfKUYliFOP8+bv2Xv+YXNf8ft8MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgNPHPd++71trZ2fX3e3ChQsXrYtT/ZcJAAB4r10USTRO0sduPtVPDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfBDM1SdmapNT0+UkIumT0zgm337TaGRj+WKaVoeomz53oLTsyPMvtscqQ6wDAAAADJb14Yu9fzkqMRIjcd78Xa9vAvP9/9j7+JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAB8pcfWKmNjk1vSyJSPrkNHrIxvLFNK0OUffRLTs/t+fsH36pPVYqDLEQAAAAMFDWhxdbkXKUCp+IUlzYvJ/tnJDkm+fe3wUW523omDa65Hn1jnn5Jc/b2rWzQnM3C/PK2XpjC+fWvOrx86pt8yrRKl/tmBfbO2YtG/CcAQAAAKdQ1v+XWpGxKBVKbX3uzzvyx/S5AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAfc/WJmdrk1HSSRCR9cho9ZGP5YppWh6h73+8/etbXfrFtU3usMsQ6AAAAwGBZH77Y+5ejEiviI7Fivu+Psc78LO9ftaN7Hvn33y6LWH3+wfFC3/V/+9p1L3QfInKdSbmIs5v1kj71fvfHR+5d1Tj6WMTq8/IXnmy9ziXTxtO1dTdt3HdwwwleDAAAAJxGsv5/pBUZi1Lhrr79f9Z5n1T/f/a9W351bvPY7Mi7ZuTGmvVyfep9YdUTf7nk6n+8eaz/P1G9T++8c8+5HQUXIl2StDF556Y1B6/anct2vVA/31U/ey9f+c4b/7lj88NHF+qXo9yMLy/0qn/8scsZaWM2t2P6xnd31DvrF/rs/8E/vHjoN8u3vXOs/tsXjbbqX3qC/Z+4/ugtD22/ZufeNZ31I6Laq/5b72QVO/c/urBcK7/9zbcfuyRpY//Kw7uv3lW5trN+0lU/e/+/PPTo9p89/INnsvrZb0Uuu7hz4f71c131X956zpaXHrh5eWf9XJ/9v3DrK+Prq9/7U/f+b4+l1u/e/+OXP3nbq2vT+7uHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAATi9z9YmZ2uTUdC6JSPrkNHrIxvLFNK0OUff1Gw68deu2n/6kPVYZYh0AAABgsKwPb/b+qyPKUYliFGN0vu9/urbupo37Dm6IsYWEpHkuzK6/Z+Mn71i/6a7bT93DAwAAAEuS9f+FVmQsSoVVMdLs/yfv3LTm4FW7c1n/n8v6/zu+ObtudbTyXt56zpaXHrh5ees7QcT8zwLKx/I+s5h3/XUHxg7/+RuX9My7cjFv/8rDu6/eVbk2y4v2vCui9X3i8cufvO3Vten9redrz/vU19fPNj9PZOuO3vLQ9mt27l3T2kfzPNpcN8ubze2YvvHdHfUsL988l5v7BgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACON1efmKlNTk1HPiLpk9PoIRvLF9O0OkTdG1f9+vtnHXl2RXusVBhiIQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPgvO3AgAAAAAADk/9oIVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVdivn9A4qjgO4O/tJma7m7RJKxgV07QqSj1YFET0oqIirUjBU6VItbUHURBElHowlVYsVfEiWL0UUUGNUlCwsVhaJRX/FS8eVFCoHoRSDGiX4kElybzt7jTjxmkQtJ8PDC/vzcx3fjPvZXYXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPhP6esZnmkP73i4eccFt3z25H0nnrjtgwe3Xfb4mz+Nbrrp0731105Obl6x5dubl23af/+aid0vH/pt4L0/jnYNfmy2WZV1ayHE4zGE2odTLzw1+fl502MxhFCNg2MhDMWlh4ZiLmH17yGEza06O3e+e+LqLdPttl19HeNLciH5+wqNaqpn1mBnvfy/1LJ1trX56BXh+xvXb/9y+Ttv944fGzt1SKy1racQFm9sP783hLAo26al1TacTs7adSGEett513ap6+J51n9lQf/CrD0naxtdctL+lbl+JXdcvp/05tp6l+t1iemqEsLYPI9bEP25fv5ldKaK6kzjQ1n7ftau+of51bTFUImhp1X+A/HUGglt8xZDnJmMWqtf6ZicmJusGELM9Su5frU3d18z180WWjXGzvF0XG48vY57svEV7e/qOdxZMH5+1tayf9STqR/yf8xqnPZH675mpLqm/qaWf0Ol7R0013hr4rPJaGRjjbj0tHP+nEPaN7n+mUurGz46PFhQR9wbs/xYKn/rF0P9d7+185HhovyNlSy/Uir/h7VHfrlr5ysvFeY/n/KrpfKvOlA/vvbjHSsLn89Uej49pfLvOfrJs8vPvXe8sP49Kb9WKv+GiSN9A80DBwvrX52ez6JS+d9df+uPb3y971hhfkj59VL5GyYeeq5vpHl5Yf7B9Hwa5dbPr+PXfDMy8vNoUf5XKX+gVP7rY7uve3XJrjWF87suPZ/BUvm3X7J/e39z30VF7864Z6E+OQHOTsuy71hPZ/2yvzPPVNvvhRdHe2a/8/Vn28BCXihn+jqL53Vk0ScdAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8Bc7cCADAAAAIMzfOo/2AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAUQEAAP//W0UsfA==") lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) 1.015527653s ago: executing program 2 (id=4090): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendto$inet6(r0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0) 912.508199ms ago: executing program 0 (id=4093): syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000580)='./file2\x00', 0x2000000, &(0x7f00000004c0)=ANY=[], 0x1, 0x21d, &(0x7f0000000b40)="$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") statfs(&(0x7f0000000140)='./file0\x00', 0x0) 878.911847ms ago: executing program 2 (id=4094): r0 = syz_open_dev$video(&(0x7f0000000000), 0x80000000, 0x0) ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, &(0x7f0000000040)={0x9}) 722.35743ms ago: executing program 2 (id=4096): syz_mount_image$ocfs2(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x2a00403, &(0x7f0000000400)=ANY=[@ANYBLOB="6c6f63616c616c6c6f633d31383434363734343037333730393535313630382c726573765f6c6576656c3d30303030303030303030303030303030303030322c6865617274626561743d6e6f6e652c636f686572656e63793d62756666657265642c6572726f72733d636f6e74696e75652c6e6f696e74722c636f686572656e63793d66756c6c2c6e6f61636c2c636f686572656e63793d66756c6c2c646174613d6f7264657265642c00a6bbbf4f1c4504306b696ca03fb375edc4c5f0f579bf2195c3cc88165b8c279abaa84a848971253cb6e898fee96fa6", @ANYRESHEX, @ANYRESDEC=0x0], 0x8, 0x4484, &(0x7f000000ac40)="$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") syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f00000002c0)='.\x00', 0x108020, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0) 686.240333ms ago: executing program 0 (id=4098): r0 = syz_open_dev$video(&(0x7f0000000240), 0x8001, 0x802) ioctl$VIDIOC_DQEVENT(r0, 0x80885659, 0x0) 630.146159ms ago: executing program 0 (id=4099): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@can_delroute={0x154, 0x19, 0x1, 0x0, 0x0, {}, [@CGW_CS_XOR={0x8, 0x5, {0x0, 0x0, 0x8}}, @CGW_MOD_AND={0x15, 0x1, {{{}, 0x0, 0x0, 0x0, 0x0, "39f9dac5a3619b2c"}, 0x4}}, @CGW_CS_CRC8={0x11e, 0x6, {0xfc, 0x0, 0xfd, 0x0, 0x0, "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", 0x0, "c901c88ac1b4f5653445778fa82d6a49ba35d7b6"}}]}, 0x154}}, 0x0) 488.074302ms ago: executing program 0 (id=4101): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='ufs\x00', 0x8000, 0x0) 413.108953ms ago: executing program 5 (id=4102): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x10}, @IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000001}]}}}]}, 0x48}}, 0x0) 388.345184ms ago: executing program 3 (id=4103): semget(0x3, 0x2, 0x284) semget(0x3, 0x4, 0x0) 363.234054ms ago: executing program 3 (id=4104): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@newtaction={0x494, 0x30, 0xffff, 0x0, 0x0, {}, [{0x480, 0x1, [@m_police={0x47c, 0x1, 0x0, 0x0, {{0xb}, {0x450, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE64={0xc, 0x8, 0x4000000000000}, @TCA_POLICE_RATE={0x404}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x0, 0x0, 0x0, 0x0, 0x5}}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x494}}, 0x0) 312.567935ms ago: executing program 3 (id=4105): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x1000000, &(0x7f0000000400)={[{@nouser_xattr}]}, 0x1, 0x17e, &(0x7f0000000240)="$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") mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='cifs\x00', 0x0, &(0x7f0000000400)) 312.443641ms ago: executing program 0 (id=4106): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x1d8}}, 0x0) 311.566275ms ago: executing program 5 (id=4107): bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi={{0x22, 0x2b}, {0x3, [{@none, 0x8, 0xff, 'DM\\', 0x0, 0xe}, {@none, 0x6, 0x2, "56c3e5", 0x2, 0x80}, {@none, 0x6a, 0x2, "33e7a2", 0x2, 0x3b}]}}}, 0x2e) 290.623865ms ago: executing program 3 (id=4108): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_GETTRIGGER(r0, 0x80045005, 0xfffffffffffffffe) 221.570909ms ago: executing program 5 (id=4109): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000000)={0x764f, 0x80}) 178.821751ms ago: executing program 5 (id=4110): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) recvmsg(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40002000) 118.863063ms ago: executing program 3 (id=4111): r0 = syz_open_dev$video(&(0x7f0000000180), 0xd175, 0x8081) ioctl$VIDIOC_G_PRIORITY(r0, 0x80045643, 0x8b0c7a7026a0b0) 56.297942ms ago: executing program 5 (id=4112): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x258, 0x4c, 0x232, 0x258, 0x0, 0x388, 0x2e8, 0x2e8, 0x388, 0x2e8, 0x3, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'veth1_to_bond\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x3}, 0x0, 0x230, 0x258, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@inet=@policy={{0x158}, {[{@ipv4=@dev, [], @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@ipv4, [], @ipv4=@broadcast}, {@ipv4=@multicast2, [], @ipv4=@dev}, {@ipv6=@loopback, [], @ipv6=@private2}], 0x1}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @private1, [], [], 'team_slave_0\x00', 'xfrm0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) 29.50927ms ago: executing program 2 (id=4113): r0 = socket$inet6(0xa, 0x3, 0x103) sendmmsg$inet6(r0, &(0x7f0000001b40)=[{{&(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast1}, 0x1c, 0x0}}], 0x1, 0x20000890) 29.328676ms ago: executing program 0 (id=4114): r0 = socket$kcm(0x22, 0x2, 0x21) close(r0) 0s ago: executing program 5 (id=4115): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@ipv6_newroute={0x2c, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8, 0x17, 0x9}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x5}]}, 0x2c}}, 0x10) kernel console output (not intermixed with test programs): : ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00 ................ [ 101.851527][ T696] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x274/0x434" at daddr 0x14 len 4 error 74 [ 101.967274][ T696] XFS (loop1): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x590/0xae8 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 101.970318][ T696] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [ 101.974902][T10928] XFS (loop1): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 101.977617][T10928] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 102.350949][T11015] vxcan3: entered promiscuous mode [ 102.352166][T11015] vxcan3: entered allmulticast mode [ 102.356501][T11016] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1896'. [ 102.571861][T11028] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1901'. [ 102.592053][T11000] loop3: detected capacity change from 0 to 32768 [ 102.614137][T11000] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1886 (11000) [ 102.643843][T11000] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 102.646012][T11000] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 102.647824][T11000] BTRFS info (device loop3): using free-space-tree [ 102.715325][T11049] xt_TCPMSS: Only works on TCP SYN packets [ 102.770195][T11008] loop2: detected capacity change from 0 to 32768 [ 102.788623][T11053] ieee802154 phy0 wpan0: encryption failed: -22 [ 102.820727][T11008] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1892 (11008) [ 102.853672][ T6415] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 102.857936][T11008] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 102.869043][T11008] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 102.876615][T11008] BTRFS info (device loop2): disk space caching is enabled [ 102.890390][T11008] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 103.047378][T11008] BTRFS info (device loop2): rebuilding free space tree [ 103.075438][T11091] loop1: detected capacity change from 0 to 1024 [ 103.077296][T11091] EXT4-fs: Ignoring removed orlov option [ 103.078444][T11091] EXT4-fs: Ignoring removed oldalloc option [ 103.104045][T11091] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 103.106365][T11091] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (12914!=20869) [ 103.131570][T11008] BTRFS info (device loop2): disabling free space tree [ 103.132956][T11008] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 103.141881][T11092] loop5: detected capacity change from 0 to 2048 [ 103.146973][T11008] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 103.150669][T11091] EXT4-fs (loop1): invalid journal inode [ 103.151918][T11091] EXT4-fs (loop1): can't get journal size [ 103.157598][T11091] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 103.206383][T11008] BTRFS info (device loop2): balance: start -susage=0..3,drange=0..7,limit=0..0 [ 103.208416][T11008] BTRFS info (device loop2): balance: ended with status: 0 [ 103.235196][ T6416] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.252821][T11105] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 103.319006][ T6425] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 103.323675][T11108] ebt_among: src integrity fail: 100 [ 103.341626][T11092] NILFS error (device loop5): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 103.379080][T11092] Remounting filesystem read-only [ 103.593679][T11122] libceph: resolve '4' (ret=-3): failed [ 103.664755][T11128] loop3: detected capacity change from 0 to 512 [ 103.678288][T11128] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 103.711361][T11134] loop5: detected capacity change from 0 to 16 [ 103.734960][T11136] loop0: detected capacity change from 0 to 256 [ 103.742447][T11128] EXT4-fs (loop3): 1 truncate cleaned up [ 103.744077][T11128] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.769465][T11134] erofs (device loop5): mounted with root inode @ nid 36. [ 103.786752][T11134] erofs (device loop5): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 103.801508][T11136] FAT-fs (loop0): Directory bread(block 64) failed [ 103.802933][T11136] FAT-fs (loop0): Directory bread(block 65) failed [ 103.834774][T11134] erofs (device loop5): failed to decompress -4 in[53, 4043] out[1851] [ 103.837355][T11136] FAT-fs (loop0): Directory bread(block 66) failed [ 103.844944][T11134] erofs (device loop5): read error -117 @ 43 of nid 36 [ 103.850531][T11136] FAT-fs (loop0): Directory bread(block 67) failed [ 103.851853][T11136] FAT-fs (loop0): Directory bread(block 68) failed [ 103.871289][T11136] FAT-fs (loop0): Directory bread(block 69) failed [ 103.872786][T11136] FAT-fs (loop0): Directory bread(block 70) failed [ 103.886208][T11136] FAT-fs (loop0): Directory bread(block 71) failed [ 103.887666][T11136] FAT-fs (loop0): Directory bread(block 72) failed [ 103.889130][T11136] FAT-fs (loop0): Directory bread(block 73) failed [ 103.890162][T11141] loop2: detected capacity change from 0 to 1764 [ 103.973916][ T6415] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.287409][T11174] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 104.289295][T11174] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 104.681332][T11209] loop2: detected capacity change from 0 to 764 [ 104.700507][T11209] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 104.940646][T11222] loop5: detected capacity change from 0 to 8 [ 104.988017][T11222] SQUASHFS error: Failed to read block 0x730: -5 [ 104.989644][T11222] SQUASHFS error: Unable to read metadata cache entry [72e] [ 104.991149][T11222] SQUASHFS error: Unable to read metadata cache entry [72e] [ 105.026407][T11222] SQUASHFS error: Unable to read metadata cache entry [72e] [ 105.028448][T11222] SQUASHFS error: Unable to read metadata cache entry [72e] [ 105.103206][T11212] loop1: detected capacity change from 0 to 32768 [ 105.108252][T11212] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1973 (11212) [ 105.138448][T11212] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 105.140596][T11212] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 105.142428][T11212] BTRFS info (device loop1): disk space caching is enabled [ 105.146115][T11212] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 105.340896][T11212] BTRFS info (device loop1): rebuilding free space tree [ 105.372941][T11212] BTRFS info (device loop1): disabling free space tree [ 105.374463][T11212] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 105.376556][T11212] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 105.507262][T11212] BTRFS info (device loop1): balance: start -susage=0..3,drange=0..7,limit=0..0 [ 105.509197][T11212] BTRFS info (device loop1): balance: ended with status: 0 [ 105.565145][T11284] loop3: detected capacity change from 0 to 16 [ 105.605468][T11284] erofs (device loop3): mounted with root inode @ nid 36. [ 105.639654][ T6416] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 105.920891][T11306] syz.1.2008: attempt to access beyond end of device [ 105.920891][T11306] nbd1: rw=0, sector=2, nr_sectors = 1 limit=0 [ 105.936855][T11306] hfs: can't find a HFS filesystem on dev nbd1 [ 105.950522][T11261] loop2: detected capacity change from 0 to 32768 [ 106.124026][T11261] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,erasure_code,degraded,no_splitbrain_check,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,nocow [ 106.128707][T11261] bcachefs (loop2): recovering from clean shutdown, journal seq 10 [ 106.130573][T11261] bcachefs (loop2): Version upgrade required: [ 106.130573][T11261] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 106.130573][T11261] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.13: inode_has_child_snapshots [ 106.130573][T11261] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 106.151834][T11261] bcachefs (loop2): dropping and reconstructing all alloc info [ 106.212191][T11274] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 106.214019][T11274] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 106.268053][T11261] bcachefs (loop2): check_topology... done [ 106.269361][T11261] bcachefs (loop2): accounting_read... done [ 106.345353][T11261] bcachefs (loop2): alloc_read... done [ 106.346684][T11261] bcachefs (loop2): stripes_read... done [ 106.347911][T11261] bcachefs (loop2): snapshots_read... done [ 106.349506][T11261] bcachefs (loop2): check_allocations... done [ 106.384517][T11261] bcachefs (loop2): going read-write [ 106.395156][T11261] bcachefs (loop2): done starting filesystem [ 106.445714][T11274] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 106.447024][T11274] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 106.472338][T11353] xt_recent: hitcount (262144) is larger than allowed maximum (65535) [ 106.560779][ T6425] bcachefs (loop2): shutting down [ 106.561858][ T6425] bcachefs (loop2): going read-only [ 106.562890][ T6425] bcachefs (loop2): finished waiting for writes to stop [ 106.597699][T11362] netlink: 'syz.3.2024': attribute type 5 has an invalid length. [ 106.654577][ T6425] bcachefs (loop2): flushing journal and stopping allocators, journal seq 11 [ 106.691113][ T6425] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 12 [ 106.727898][ T6425] bcachefs (loop2): unshutdown complete, journal seq 13 [ 106.729844][ T6425] bcachefs (loop2): done going read-only, filesystem not clean [ 106.743251][ T6425] bcachefs (loop2): shutdown complete [ 106.820323][T11274] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 106.821678][T11274] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 107.000956][T11345] loop1: detected capacity change from 0 to 32768 [ 107.056470][T11274] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 107.057763][T11274] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 107.068640][T11345] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 107.151711][T11345] OCFS2: ERROR (device loop1): int ocfs2_reserve_suballoc_bits(struct ocfs2_super *, struct ocfs2_alloc_context *, int, u32, u64 *, int): Invalid chain allocator 71 [ 107.161968][T11403] netlink: 'syz.3.2035': attribute type 21 has an invalid length. [ 107.164233][T11403] netlink: 'syz.3.2035': attribute type 1 has an invalid length. [ 107.165873][T11403] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2035'. [ 107.168020][T11345] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 107.170063][T11345] OCFS2: File system is now read-only. [ 107.171268][T11345] (syz.1.2020,11345,1):ocfs2_reserve_suballoc_bits:854 ERROR: status = -30 [ 107.174046][T11345] (syz.1.2020,11345,1):ocfs2_reserve_cluster_bitmap_bits:1137 ERROR: status = -30 [ 107.175961][T11345] (syz.1.2020,11345,1):ocfs2_reserve_clusters_with_limit:1206 ERROR: status = -30 [ 107.177792][T11345] (syz.1.2020,11345,1):ocfs2_reserve_clusters_with_limit:1219 ERROR: status = -30 [ 107.180113][T11345] (syz.1.2020,11345,1):ocfs2_block_group_alloc:679 ERROR: status = -30 [ 107.181784][T11345] (syz.1.2020,11345,1):ocfs2_block_group_alloc:762 ERROR: status = -30 [ 107.190653][T11345] (syz.1.2020,11345,1):ocfs2_reserve_suballoc_bits:837 ERROR: status = -30 [ 107.192398][T11345] (syz.1.2020,11345,1):ocfs2_reserve_suballoc_bits:854 ERROR: status = -30 [ 107.194264][T11345] (syz.1.2020,11345,1):ocfs2_reserve_new_metadata_blocks:994 ERROR: status = -30 [ 107.196211][T11345] (syz.1.2020,11345,1):ocfs2_reserve_new_metadata_blocks:1017 ERROR: status = -30 [ 107.198350][T11345] (syz.1.2020,11345,1):ocfs2_mknod:350 ERROR: status = -30 [ 107.200216][T11345] (syz.1.2020,11345,1):ocfs2_mknod:502 ERROR: status = -30 [ 107.205933][T11345] (syz.1.2020,11345,1):ocfs2_mkdir:659 ERROR: status = -30 [ 107.340231][ T6416] ocfs2: Unmounting device (7,1) on (node local) [ 107.794739][T11431] pimreg: entered allmulticast mode [ 107.961751][T11451] loop5: detected capacity change from 0 to 164 [ 107.980285][T11451] Unable to read rock-ridge attributes [ 108.241778][T11467] loop1: detected capacity change from 0 to 4096 [ 108.271063][T11467] ntfs3(loop1): It is recommened to use chkdsk. [ 108.284398][T11467] ntfs3(loop1): try to read out of volume at offset 0x3fffffc0c00 [ 108.286223][T11467] ntfs3(loop1): try to read out of volume at offset 0x3fffffc0c00 [ 108.287921][T11467] ntfs3(loop1): try to read out of volume at offset 0x3fffffc0c00 [ 108.289396][T11467] ntfs3(loop1): try to read out of volume at offset 0x3fffffc0c00 [ 108.290925][T11467] ntfs3(loop1): try to read out of volume at offset 0x3fffffc1c00 [ 108.292564][T11467] ntfs3(loop1): try to read out of volume at offset 0x3fffffc2c00 [ 108.307199][T11467] ntfs3(loop1): try to read out of volume at offset 0x3fffffc4c00 [ 108.308851][T11467] ntfs3(loop1): try to read out of volume at offset 0x3fffffc8c00 [ 108.310628][T11467] ntfs3(loop1): try to read out of volume at offset 0x3fffffd0c00 [ 108.545160][T11490] loop3: detected capacity change from 0 to 512 [ 108.619977][T11490] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.2065: Invalid inode bitmap blk 4 in block_group 0 [ 108.643596][T11490] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.715840][T11506] loop2: detected capacity change from 0 to 64 [ 108.829055][ T6415] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.829619][T11511] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2079'. [ 108.901868][T11488] loop5: detected capacity change from 0 to 32768 [ 109.033163][T11488] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.2062 (11488) [ 109.035283][T11513] loop3: detected capacity change from 0 to 32768 [ 109.038667][T11513] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2069 (11513) [ 109.046655][T11488] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 109.048938][T11488] BTRFS info (device loop5): using sha256 (sha256-ce) checksum algorithm [ 109.050701][T11488] BTRFS info (device loop5): using free-space-tree [ 109.054668][T11274] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 109.055949][T11274] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 109.059241][T11513] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 109.061308][T11513] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 109.065126][T11513] BTRFS info (device loop3): disk space caching is enabled [ 109.066891][T11513] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 109.185766][ T9278] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 109.232990][T11513] BTRFS info (device loop3): rebuilding free space tree [ 109.282828][T11513] BTRFS info (device loop3): disabling free space tree [ 109.286565][T11513] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 109.288621][T11513] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 109.436625][T11513] BTRFS info (device loop3): balance: start -susage=0..3,drange=0..7,limit=0..0 [ 109.439487][T11513] BTRFS info (device loop3): balance: ended with status: 0 [ 109.445353][T11571] netlink: 172 bytes leftover after parsing attributes in process `syz.1.2085'. [ 109.657725][ T6415] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 109.863033][T11593] @: renamed from vlan0 (while UP) [ 109.962595][ T6469] kernel write not supported for file /417/net/sockstat (pid: 6469 comm: kworker/0:6) [ 110.070317][T11609] loop3: detected capacity change from 0 to 2048 [ 110.147387][T11609] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 110.152894][T11596] loop1: detected capacity change from 0 to 32768 [ 110.179545][T11615] random: crng reseeded on system resumption [ 110.199293][T11609] syz.3.2103: attempt to access beyond end of device [ 110.199293][T11609] loop3: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 110.204366][T11618] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 110.258888][T11596] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=lz4,journal_flush_disabled,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc [ 110.308442][T11632] netlink: 'syz.0.2110': attribute type 12 has an invalid length. [ 110.333479][T11596] bcachefs (loop1): recovering from clean shutdown, journal seq 10 [ 110.335238][T11596] bcachefs (loop1): Version upgrade required: [ 110.335238][T11596] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 110.335238][T11596] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.13: inode_has_child_snapshots [ 110.335238][T11596] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 110.341335][T11630] kAFS: No cell specified [ 110.363964][T11596] bcachefs (loop1): dropping and reconstructing all alloc info [ 110.382115][T11596] bcachefs (loop1): check_topology... done [ 110.385713][T11596] bcachefs (loop1): accounting_read... done [ 110.415240][T11596] bcachefs (loop1): alloc_read... done [ 110.422160][T11596] bcachefs (loop1): stripes_read... done [ 110.429087][T11596] bcachefs (loop1): snapshots_read... done [ 110.430443][T11596] bcachefs (loop1): check_allocations... [ 110.455625][T11642] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2114'. [ 110.456569][T11596] done [ 110.504935][T11596] bcachefs (loop1): going read-write [ 110.519709][T11596] bcachefs (loop1): done starting filesystem [ 110.593384][T11648] loop0: detected capacity change from 0 to 2048 [ 110.597947][T11652] netlink: 'syz.2.2118': attribute type 1 has an invalid length. [ 110.622266][T11648] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 110.682286][ T6416] bcachefs (loop1): shutting down [ 110.684095][ T6416] bcachefs (loop1): going read-only [ 110.685183][ T6416] bcachefs (loop1): finished waiting for writes to stop [ 110.750611][ T6416] bcachefs (loop1): flushing journal and stopping allocators, journal seq 10 [ 110.752488][ T6416] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 10 [ 110.777655][ T6416] bcachefs (loop1): unshutdown complete, journal seq 11 [ 110.779724][ T6416] bcachefs (loop1): done going read-only, filesystem not clean [ 110.836449][ T6416] bcachefs (loop1): shutdown complete [ 110.846753][T11669] netlink: 'syz.0.2125': attribute type 10 has an invalid length. [ 110.849953][T11669] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.852672][T11669] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.871261][T11669] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.872738][T11669] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.874391][T11669] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.876094][T11669] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.899989][T11669] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 110.906046][T11670] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2128'. [ 110.907898][T11670] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2128'. [ 110.909682][T11670] netlink: 'syz.3.2128': attribute type 6 has an invalid length. [ 111.102726][T11689] loop5: detected capacity change from 0 to 256 [ 111.132109][T11689] FAT-fs (loop5): Directory bread(block 64) failed [ 111.133715][T11689] FAT-fs (loop5): Directory bread(block 65) failed [ 111.135209][T11689] FAT-fs (loop5): Directory bread(block 66) failed [ 111.136609][T11689] FAT-fs (loop5): Directory bread(block 67) failed [ 111.137884][T11689] FAT-fs (loop5): Directory bread(block 68) failed [ 111.139073][T11689] FAT-fs (loop5): Directory bread(block 69) failed [ 111.140473][T11689] FAT-fs (loop5): Directory bread(block 70) failed [ 111.142040][T11689] FAT-fs (loop5): Directory bread(block 71) failed [ 111.146590][T11689] FAT-fs (loop5): Directory bread(block 72) failed [ 111.147841][T11689] FAT-fs (loop5): Directory bread(block 73) failed [ 111.153330][T11692] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2139'. [ 111.160159][T11692] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2139'. [ 111.742206][T11701] loop5: detected capacity change from 0 to 32768 [ 111.759927][T11728] loop3: detected capacity change from 0 to 256 [ 111.761691][T11728] exfat: Deprecated parameter 'utf8' [ 111.779750][T11728] exfat: Deprecated parameter 'utf8' [ 111.780932][T11728] exfat: Deprecated parameter 'utf8' [ 111.786619][T11701] ocfs2: Slot 0 on device (7,5) was already allocated to this node! [ 111.791828][T11701] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 111.821773][T11701] (syz.5.2143,11701,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is smaller than minimal - offset=0, inode=9223372036854775873, rec_len=0, name_len=0 [ 111.827078][T11701] (syz.5.2143,11701,0):ocfs2_prepare_dir_for_insert:4277 ERROR: status = -2 [ 111.828913][T11701] (syz.5.2143,11701,0):ocfs2_mknod:298 ERROR: status = -2 [ 111.830288][T11701] (syz.5.2143,11701,0):ocfs2_mknod:502 ERROR: status = -2 [ 111.832037][T11701] (syz.5.2143,11701,0):ocfs2_mkdir:659 ERROR: status = -2 [ 111.846390][T11728] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d) [ 111.954796][ T9278] ocfs2: Unmounting device (7,5) on (node local) [ 111.993596][T11741] tc_dump_action: action bad kind [ 112.249196][T11763] netlink: 'syz.3.2173': attribute type 11 has an invalid length. [ 112.250836][T11763] netlink: 228 bytes leftover after parsing attributes in process `syz.3.2173'. [ 112.412199][T11775] loop0: detected capacity change from 0 to 2048 [ 112.428436][T11775] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 112.449024][T11775] syz.0.2180: attempt to access beyond end of device [ 112.449024][T11775] loop0: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 112.449387][T11777] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 112.485574][T11775] NILFS error (device loop0): nilfs_check_folio: bad entry in directory #2: rec_len is smaller than minimal - offset=0, inode=72057594037927938, rec_len=0, name_len=0 [ 112.895494][T11810] loop2: detected capacity change from 0 to 8 [ 112.944794][T11816] overlayfs: conflicting options: userxattr,metacopy=on [ 113.026766][T11822] ip6tnl2: entered promiscuous mode [ 113.027882][T11822] ip6tnl2: entered allmulticast mode [ 113.030081][T11821] loop1: detected capacity change from 0 to 2048 [ 113.042927][T11823] loop3: detected capacity change from 0 to 1764 [ 113.049825][T11821] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 113.066420][T11823] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 113.073785][T11821] UDF-fs: unknown compression code (0) [ 113.180852][T11834] netlink: 'syz.3.2204': attribute type 7 has an invalid length. [ 113.372813][T11850] loop3: detected capacity change from 0 to 512 [ 113.436649][T11850] EXT4-fs error (device loop3): ext4_orphan_get:1389: inode #15: comm syz.3.2215: casefold flag without casefold feature [ 113.440015][T11850] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.2215: couldn't read orphan inode 15 (err -117) [ 113.460750][T11858] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2219'. [ 113.485339][T11850] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.528932][T11866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.554910][T11866] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.627163][ T6415] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.765868][T11878] loop0: detected capacity change from 0 to 4096 [ 113.775236][T11884] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2231'. [ 113.778057][T11878] EXT4-fs: Ignoring removed nomblk_io_submit option [ 113.810387][T11878] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.854897][T11893] tmpfs: Bad value for 'mpol' [ 114.093844][ T6422] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.095166][T11899] loop2: detected capacity change from 0 to 32768 [ 114.098496][T11899] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2239 (11899) [ 114.102810][T11899] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 114.105138][T11899] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 114.107028][T11899] BTRFS info (device loop2): disk space caching is enabled [ 114.108710][T11899] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 114.399458][T11937] trusted_key: encrypted_key: hex blob is missing [ 114.551864][T11953] Unsupported ieee802154 address type: 0 [ 114.629422][T11899] BTRFS info (device loop2): rebuilding free space tree [ 114.636473][T11899] BTRFS info (device loop2): disabling free space tree [ 114.637891][T11899] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 114.639841][T11899] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 114.921661][T11973] loop3: detected capacity change from 0 to 40427 [ 114.930333][T11973] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 114.932101][T11973] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 115.002218][T11973] F2FS-fs (loop3): invalid crc value [ 115.004950][ T6425] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 115.030881][T11985] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2272'. [ 115.061527][T11987] loop5: detected capacity change from 0 to 1764 [ 115.079489][T11973] F2FS-fs (loop3): Found nat_bits in checkpoint [ 115.187807][T11973] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 115.189335][T11973] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 115.254885][T12003] loop5: detected capacity change from 0 to 24 [ 115.256740][T12003] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 115.292828][T12003] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 115.395565][T12012] xt_cluster: node mask cannot exceed total number of nodes [ 115.488226][T12020] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2289'. [ 115.493457][T12020] team_slave_0: entered allmulticast mode [ 115.583976][T12024] netlink: 'syz.5.2291': attribute type 3 has an invalid length. [ 115.585663][T12024] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.2291'. [ 115.687395][T12014] loop1: detected capacity change from 0 to 32768 [ 115.736549][T12014] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 115.811563][T12037] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.2294'. [ 115.890375][T12040] sock: sock_timestamping_bind_phc: sock not bind to device [ 115.897686][T12014] XFS (loop1): Ending clean mount [ 115.902431][T12014] XFS (loop1): Quotacheck needed: Please wait. [ 115.980760][T12022] loop0: detected capacity change from 0 to 32768 [ 115.994826][T12022] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.2290 (12022) [ 116.007334][T12022] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 116.009700][T12022] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 116.011541][T12022] BTRFS info (device loop0): using free-space-tree [ 116.061846][T12053] netlink: 'syz.3.2299': attribute type 3 has an invalid length. [ 116.063734][T12053] netlink: 7 bytes leftover after parsing attributes in process `syz.3.2299'. [ 116.083914][T12014] XFS (loop1): Quotacheck: Done. [ 116.265378][ T6416] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 116.484369][ T6422] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 116.583542][T12073] loop5: detected capacity change from 0 to 32768 [ 116.617857][T12073] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.2304 (12073) [ 116.686292][T12073] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 116.688572][T12073] BTRFS info (device loop5): using sha256 (sha256-ce) checksum algorithm [ 116.690468][T12073] BTRFS info (device loop5): using free-space-tree [ 116.903536][ T9278] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 116.968916][T12074] loop2: detected capacity change from 0 to 32768 [ 117.049565][T12109] No such timeout policy "syz1" [ 117.295761][T12129] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 117.297483][T12129] IPv6: NLM_F_CREATE should be set when creating new route [ 117.582336][T12147] loop3: detected capacity change from 0 to 512 [ 117.746836][T12147] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.858530][T12079] loop1: detected capacity change from 0 to 131072 [ 117.990614][T12079] F2FS-fs (loop1): Found nat_bits in checkpoint [ 117.995014][ T6415] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.007105][T12145] loop0: detected capacity change from 0 to 32768 [ 118.023977][T12079] F2FS-fs (loop1): Mounted with checkpoint version = 753bd00b [ 118.191541][T12145] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 118.312710][T12167] loop2: detected capacity change from 0 to 32768 [ 118.314673][T12167] btrfs: Deprecated parameter 'usebackuproot' [ 118.315894][T12167] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 118.333780][T12167] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2339 (12167) [ 118.408470][T12145] XFS (loop0): Ending clean mount [ 118.480794][T12192] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2347'. [ 118.506597][ T6422] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 118.592665][T12167] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 118.595158][T12167] BTRFS info (device loop2): using crc32c (crc32c-arm64) checksum algorithm [ 118.596961][T12167] BTRFS info (device loop2): using free-space-tree [ 118.616921][T12203] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2351'. [ 118.618814][T12203] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2351'. [ 118.696650][T12218] sctp: [Deprecated]: syz.5.2352 (pid 12218) Use of struct sctp_assoc_value in delayed_ack socket option. [ 118.696650][T12218] Use struct sctp_sack_info instead [ 118.742466][T12167] BTRFS info (device loop2): rebuilding free space tree [ 118.767898][T12229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.769823][T12229] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.793861][T12167] process 'syz.2.2339' launched './file2' with NULL argv: empty string added [ 118.948604][T12238] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2361'. [ 118.950506][T12238] netlink: 'syz.0.2361': attribute type 5 has an invalid length. [ 119.254971][ T6425] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 119.405404][T12253] netlink: 400 bytes leftover after parsing attributes in process `syz.1.2369'. [ 119.407352][T12253] netlink: 192 bytes leftover after parsing attributes in process `syz.1.2369'. [ 119.513728][T12236] loop5: detected capacity change from 0 to 131072 [ 119.612957][T12236] F2FS-fs (loop5): Test dummy encryption mode enabled [ 119.658339][T12236] F2FS-fs (loop5): invalid crc value [ 119.750889][T12272] loop3: detected capacity change from 0 to 512 [ 119.773317][T12265] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2373'. [ 119.794281][T12272] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 119.807802][T12257] loop0: detected capacity change from 0 to 32768 [ 119.809926][T12257] XFS: noikeep mount option is deprecated. [ 119.812466][T12236] F2FS-fs (loop5): Found nat_bits in checkpoint [ 119.836171][T12236] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 119.855286][T12272] EXT4-fs (loop3): orphan cleanup on readonly fs [ 119.882822][T12272] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2377: bg 0: block 248: padding at end of block bitmap is not set [ 119.888901][T12272] Quota error (device loop3): write_blk: dquota write failed [ 119.890478][T12272] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 119.892396][T12272] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.2377: Failed to acquire dquot type 1 [ 119.897436][T12257] XFS (loop0): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 119.903725][T12272] EXT4-fs (loop3): 1 truncate cleaned up [ 119.942259][T12272] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 119.955045][T12272] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 119.964160][T12292] loop2: detected capacity change from 0 to 512 [ 119.966249][T12292] EXT4-fs: Ignoring removed nobh option [ 119.975622][T12257] XFS (loop0): Ending clean mount [ 119.993691][T12272] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 119.996204][T12289] loop1: detected capacity change from 0 to 2048 [ 120.004001][T12257] XFS (loop0): Quotacheck needed: Please wait. [ 120.059901][T12272] EXT4-fs error (device loop3): __ext4_remount:6749: comm syz.3.2377: Abort forced by user [ 120.062571][T12292] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 120.067465][T12292] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.2379: attempt to clear invalid blocks 2 len 1 [ 120.089281][T12272] EXT4-fs (loop3): Remounting filesystem read-only [ 120.090710][T12272] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 120.107476][ T6415] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.152202][T12292] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 120.158510][T12292] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.2379: invalid indirect mapped block 1819239214 (level 0) [ 120.192403][T12289] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 120.203652][T12292] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.2379: invalid indirect mapped block 1819239214 (level 1) [ 120.207803][T12257] XFS (loop0): Quotacheck: Done. [ 120.252745][T12292] EXT4-fs (loop2): 1 truncate cleaned up [ 120.255621][T12292] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.431476][ T6425] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.465376][ T6422] XFS (loop0): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 120.482856][T12317] netlink: 'syz.5.2392': attribute type 11 has an invalid length. [ 120.487895][T12317] netlink: 140 bytes leftover after parsing attributes in process `syz.5.2392'. [ 120.623394][T12326] syz.1.2397 uses old SIOCAX25GETINFO [ 120.745237][T12333] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2387'. [ 120.749079][T12333] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2387'. [ 120.877133][T12346] x_tables: unsorted underflow at hook 2 [ 121.011958][T12351] loop5: detected capacity change from 0 to 164 [ 121.460239][T12332] loop3: detected capacity change from 0 to 32768 [ 121.470948][T12332] XFS: attr2 mount option is deprecated. [ 121.472380][T12332] XFS: ikeep mount option is deprecated. [ 121.473850][T12332] XFS: noikeep mount option is deprecated. [ 121.546411][T12387] loop0: detected capacity change from 0 to 8192 [ 121.552954][T12332] XFS (loop3): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 121.708303][T12390] loop2: detected capacity change from 0 to 32768 [ 121.745204][T12390] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2427 (12390) [ 121.775537][T12390] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 121.777659][T12390] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm [ 121.779515][T12390] BTRFS info (device loop2): using free-space-tree [ 121.807647][T12332] XFS (loop3): Ending clean mount [ 121.812069][T12332] XFS (loop3): Quotacheck needed: Please wait. [ 121.898170][T12332] XFS (loop3): Quotacheck: Done. [ 122.042016][T12443] loop0: detected capacity change from 0 to 4096 [ 122.044714][ T6425] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 122.050353][T12443] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 122.069940][ T6415] XFS (loop3): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 122.103232][T12443] ntfs3(loop0): failed to convert "c46c" to cp1250 [ 122.175246][T12448] trusted_key: encrypted_key: keylen parameter is missing [ 122.505147][T12473] loop3: detected capacity change from 0 to 512 [ 122.511890][T12472] cgroup: noprefix used incorrectly [ 122.534534][T12476] netlink: 'syz.0.2455': attribute type 21 has an invalid length. [ 122.587546][T12473] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 122.597977][T12473] EXT4-fs (loop3): orphan cleanup on readonly fs [ 122.658906][T12473] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2457: bg 0: block 248: padding at end of block bitmap is not set [ 122.688065][T12473] Quota error (device loop3): write_blk: dquota write failed [ 122.689973][T12473] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 122.691890][T12473] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.2457: Failed to acquire dquot type 1 [ 122.695793][T12473] EXT4-fs (loop3): 1 truncate cleaned up [ 122.701213][T12473] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 122.753272][ T6415] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.907281][T12507] netlink: 'syz.2.2472': attribute type 10 has an invalid length. [ 123.117128][T12524] tmpfs: Bad value for 'mpol' [ 123.294976][T12539] overlayfs: empty lowerdir [ 123.316481][T12543] netlink: 'syz.5.2491': attribute type 1 has an invalid length. [ 123.319823][T12545] loop3: detected capacity change from 0 to 64 [ 123.507440][T12557] loop1: detected capacity change from 0 to 2048 [ 123.509863][T12561] __nla_validate_parse: 5 callbacks suppressed [ 123.509878][T12561] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2499'. [ 123.512979][T12561] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2499'. [ 123.519668][T12561] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 123.553485][T12561] bond2: entered allmulticast mode [ 123.554793][T12561] 8021q: adding VLAN 0 to HW filter on device bond2 [ 123.664425][T12557] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.742808][ T6416] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.402880][T12650] trusted_key: encrypted_key: master key parameter is missing [ 124.522772][T12661] loop5: detected capacity change from 0 to 128 [ 124.547067][T12661] sysv_free_block: flc_count > flc_size [ 124.548550][T12661] sysv_free_block: flc_count > flc_size [ 124.549648][T12661] sysv_free_block: flc_count > flc_size [ 124.573427][T12661] sysv_free_block: flc_count > flc_size [ 124.574680][T12661] sysv_free_block: flc_count > flc_size [ 124.596649][T12661] sysv_free_block: flc_count > flc_size [ 124.597814][T12661] sysv_free_block: flc_count > flc_size [ 124.598901][T12661] sysv_free_block: flc_count > flc_size [ 124.600074][T12661] sysv_free_block: flc_count > flc_size [ 124.601246][T12661] sysv_free_block: flc_count > flc_size [ 124.634906][T12661] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 124.797867][T12681] loop2: detected capacity change from 0 to 64 [ 124.842426][T12684] loop0: detected capacity change from 0 to 1764 [ 124.920730][T12689] netlink: 'syz.5.2560': attribute type 21 has an invalid length. [ 124.922394][T12689] netlink: 128 bytes leftover after parsing attributes in process `syz.5.2560'. [ 124.928917][T12684] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 124.937903][T12689] netlink: 35 bytes leftover after parsing attributes in process `syz.5.2560'. [ 124.949848][T12684] CIFS mount error: No usable UNC path provided in device string! [ 124.949848][T12684] [ 124.973641][T12684] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 125.068929][T12699] netlink: 'syz.2.2565': attribute type 1 has an invalid length. [ 125.077553][T12699] netlink: 'syz.2.2565': attribute type 3 has an invalid length. [ 125.084245][T12699] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2565'. [ 125.182893][T12667] loop1: detected capacity change from 0 to 32768 [ 125.193312][T12667] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2549 (12667) [ 125.202090][T12667] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 125.207877][T12667] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 125.209612][T12667] BTRFS info (device loop1): using free-space-tree [ 125.334102][T12731] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2574'. [ 125.339508][T12731] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 125.533545][T12749] random: crng reseeded on system resumption [ 125.582042][ T6416] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 125.697985][T12755] usb usb8: usbfs: process 12755 (syz.5.2586) did not claim interface 0 before use [ 125.699973][T12755] usb usb8: selecting invalid altsetting 6 [ 125.737253][T12760] loop2: detected capacity change from 0 to 164 [ 125.830081][T12741] loop0: detected capacity change from 0 to 32768 [ 125.941146][ T2349] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.942462][ T2349] ieee802154 phy1 wpan1: encryption failed: -22 [ 125.948468][T12771] xt_TPROXY: Can be used only with -p tcp or -p udp [ 126.151277][T12741] loop0: detected capacity change from 0 to 16 [ 126.157227][T12741] erofs: Unknown parameter 'discard' [ 126.186436][T12786] netlink: 'syz.2.2600': attribute type 21 has an invalid length. [ 126.188087][T12786] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2600'. [ 126.190142][T12786] netlink: 'syz.2.2600': attribute type 4 has an invalid length. [ 126.206267][T12786] netlink: 'syz.2.2600': attribute type 5 has an invalid length. [ 126.208091][T12786] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2600'. [ 126.315370][T12797] loop2: detected capacity change from 0 to 512 [ 126.342229][T12802] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 126.344922][T12797] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 126.352879][T12792] loop0: detected capacity change from 0 to 4096 [ 126.375084][T12792] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 126.432437][T12797] syz.2.2606: attempt to access beyond end of device [ 126.432437][T12797] nbd2: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 126.438117][T12797] XFS (nbd2): SB validate failed with error -5. [ 126.512331][T12792] ntfs3(loop0): ino=5, "/" attr_set_size [ 126.527148][T12792] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 126.669945][T12798] loop3: detected capacity change from 0 to 32768 [ 126.673643][T12798] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2605 (12798) [ 126.758235][T12798] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 126.760548][T12798] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 126.762447][T12798] BTRFS info (device loop3): disk space caching is enabled [ 126.764173][T12798] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 126.969239][T12858] loop2: detected capacity change from 0 to 128 [ 126.983323][T12798] BTRFS info (device loop3): rebuilding free space tree [ 127.011351][T12858] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 127.025676][T12798] BTRFS info (device loop3): disabling free space tree [ 127.027285][T12798] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 127.029233][T12798] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 127.103058][T12798] BTRFS info (device loop3): balance: start -susage=47678,drange=8796093022212..7,limit=0,limit=0..0 [ 127.117734][T12798] BTRFS info (device loop3): balance: ended with status: 0 [ 127.152858][T12867] loop1: detected capacity change from 0 to 512 [ 127.189117][T12869] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2631'. [ 127.209973][ T6415] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 127.221330][T12867] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 127.223449][T12867] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 127.225157][T12867] System zones: 0-1, 15-15, 18-18, 34-34 [ 127.226551][T12867] EXT4-fs (loop1): orphan cleanup on readonly fs [ 127.227905][T12867] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0 [ 127.248505][T12865] loop0: detected capacity change from 0 to 4096 [ 127.254240][T12867] EXT4-fs warning (device loop1): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 127.257211][T12867] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 127.278619][T12865] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 127.282646][T12867] EXT4-fs error (device loop1): ext4_orphan_get:1415: comm syz.1.2630: bad orphan inode 16 [ 127.298060][T12867] ext4_test_bit(bit=15, block=18) = 1 [ 127.299188][T12867] is_bad_inode(inode)=0 [ 127.300025][T12867] NEXT_ORPHAN(inode)=0 [ 127.301035][T12867] max_ino=32 [ 127.301649][T12867] i_nlink=2 [ 127.302720][T12867] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 127.346877][T12878] Zero length message leads to an empty skb [ 127.357262][T12867] fscrypt (loop1, inode 16): Error -61 getting encryption context [ 127.360826][T12865] ntfs3(loop0): Failed to initialize $Extend/$Reparse. [ 127.362736][T12883] loop5: detected capacity change from 0 to 256 [ 127.364536][T12883] exfat: Deprecated parameter 'utf8' [ 127.384686][T12883] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 127.451083][ T6416] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.527215][T12890] netlink: 'syz.5.2642': attribute type 21 has an invalid length. [ 127.528885][T12890] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2642'. [ 127.543453][T12887] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 127.805476][T12897] loop5: detected capacity change from 0 to 32768 [ 127.819410][T12897] JBD2: Ignoring recovery information on journal [ 127.891282][T12897] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 127.932546][T12897] OCFS2: ERROR (device loop5): int ocfs2_claim_suballoc_bits(struct ocfs2_alloc_context *, handle_t *, u32, u32, struct ocfs2_suballoc_result *): Chain allocator dinode 23 has 4294967295 used bits but only 16777215 total [ 127.949883][T12897] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 127.951884][T12897] OCFS2: Returning error to the calling process. [ 127.955940][T12897] (syz.5.2645,12897,1):ocfs2_claim_suballoc_bits:2038 ERROR: status = -5 [ 127.957758][T12897] (syz.5.2645,12897,1):__ocfs2_claim_clusters:2412 ERROR: status = -5 [ 127.959551][T12897] (syz.5.2645,12897,1):__ocfs2_claim_clusters:2420 ERROR: status = -5 [ 127.961338][T12897] (syz.5.2645,12897,1):ocfs2_block_group_alloc_contig:437 ERROR: status = -5 [ 127.963615][T12897] (syz.5.2645,12897,1):ocfs2_block_group_alloc:709 ERROR: status = -5 [ 127.965501][T12897] (syz.5.2645,12897,1):ocfs2_block_group_alloc:762 ERROR: status = -5 [ 127.967275][T12897] (syz.5.2645,12897,1):ocfs2_reserve_suballoc_bits:837 ERROR: status = -5 [ 127.969117][T12897] (syz.5.2645,12897,1):ocfs2_reserve_suballoc_bits:854 ERROR: status = -5 [ 127.970870][T12897] (syz.5.2645,12897,1):ocfs2_reserve_new_metadata_blocks:994 ERROR: status = -5 [ 127.972829][T12897] (syz.5.2645,12897,1):ocfs2_reserve_new_metadata_blocks:1017 ERROR: status = -5 [ 127.980466][T12897] (syz.5.2645,12897,1):ocfs2_mknod:350 ERROR: status = -5 [ 127.982091][T12897] (syz.5.2645,12897,1):ocfs2_mknod:502 ERROR: status = -5 [ 127.984592][T12897] (syz.5.2645,12897,1):ocfs2_mkdir:659 ERROR: status = -5 [ 128.051127][ T9278] ocfs2: Unmounting device (7,5) on (node local) [ 128.084680][T12921] netlink: 'syz.1.2653': attribute type 2 has an invalid length. [ 128.236013][T12934] netlink: 'syz.5.2656': attribute type 1 has an invalid length. [ 128.313242][T12941] netlink: 'syz.1.2664': attribute type 6 has an invalid length. [ 128.518249][T12962] loop2: detected capacity change from 0 to 16 [ 128.520192][T12962] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 128.523515][T12964] loop5: detected capacity change from 0 to 256 [ 128.596295][T12960] loop1: detected capacity change from 0 to 4096 [ 128.604127][T12960] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 128.645333][T12970] loop2: detected capacity change from 0 to 1024 [ 128.669391][T12960] ntfs3(loop1): ino=1e, "file1" attr_set_size [ 128.671088][T12960] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 128.684974][T12960] ntfs3(loop1): ino=3, ntfs_set_state failed, -22. [ 128.746751][ T61] ntfs3(loop1): ino=3, ntfs3_write_inode failed, -22. [ 128.862163][T12985] __nla_validate_parse: 3 callbacks suppressed [ 128.862191][T12985] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2686'. [ 129.021377][T12996] loop1: detected capacity change from 0 to 24 [ 129.052050][T13000] SET target dimension over the limit! [ 129.208104][T13010] loop1: detected capacity change from 0 to 512 [ 129.212197][T13009] loop2: detected capacity change from 0 to 256 [ 129.225249][T13009] exfat: Deprecated parameter 'namecase' [ 129.226553][T13009] exfat: Deprecated parameter 'namecase' [ 129.227702][T13009] exfat: Deprecated parameter 'namecase' [ 129.233409][T13010] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 129.253356][T13010] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.2698: corrupted in-inode xattr: e_value out of bounds [ 129.296131][T13010] EXT4-fs (loop1): Remounting filesystem read-only [ 129.298107][T13010] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.416568][ T6416] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.683842][T13030] delete_channel: no stack [ 129.933734][T13002] loop0: detected capacity change from 0 to 65536 [ 129.971347][T13002] XFS (loop0): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 130.039689][T13002] XFS (loop0): Ending clean mount [ 130.127041][ T6422] XFS (loop0): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 130.160199][T12968] kexec: Could not allocate control_code_buffer [ 130.247776][T13069] validate_nla: 1 callbacks suppressed [ 130.247792][T13069] netlink: 'syz.1.2725': attribute type 3 has an invalid length. [ 130.250601][T13069] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2725'. [ 130.353928][T13072] loop5: detected capacity change from 0 to 512 [ 130.404124][T13079] xt_TCPMSS: Only works on TCP SYN packets [ 130.439485][T13072] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.524043][ T9278] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.125642][T13138] loop3: detected capacity change from 0 to 128 [ 131.215828][T13138] syz.3.2756: attempt to access beyond end of device [ 131.215828][T13138] loop3: rw=3, sector=1179746, nr_sectors = 6 limit=128 [ 131.218819][T13138] syz.3.2756: attempt to access beyond end of device [ 131.218819][T13138] loop3: rw=2051, sector=1179752, nr_sectors = 2 limit=128 [ 131.465718][T13158] loop0: detected capacity change from 0 to 1024 [ 131.599950][T13170] netlink: 'syz.2.2771': attribute type 8 has an invalid length. [ 131.628113][T13170] bridge2: entered allmulticast mode [ 131.950522][T13198] loop3: detected capacity change from 0 to 2048 [ 132.022893][T13198] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 132.048433][T13198] syz.3.2786: attempt to access beyond end of device [ 132.048433][T13198] loop3: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 132.051809][T13207] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 132.086307][T13198] syz.3.2786: attempt to access beyond end of device [ 132.086307][T13198] loop3: rw=0, sector=9437254, nr_sectors = 2 limit=2048 [ 132.090677][T13198] NILFS (loop3): I/O error reading meta-data file (ino=6, block-offset=0) [ 132.847212][T13209] loop0: detected capacity change from 0 to 32768 [ 132.849068][T13209] btrfs: Deprecated parameter 'usebackuproot' [ 132.850440][T13209] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 132.863432][T13217] loop2: detected capacity change from 0 to 32768 [ 132.887078][T13209] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.2790 (13209) [ 132.907279][T13209] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 132.909543][T13209] BTRFS info (device loop0): using crc32c (crc32c-arm64) checksum algorithm [ 132.911271][T13209] BTRFS info (device loop0): disk space caching is enabled [ 132.912751][T13209] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 132.992382][T13227] loop1: detected capacity change from 0 to 32768 [ 133.011702][T13227] btrfs: Deprecated parameter 'usebackuproot' [ 133.013058][T13227] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 133.027012][T13227] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2798 (13227) [ 133.032905][T13227] BTRFS info (device loop1): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 133.035651][T13227] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 133.040972][T13227] BTRFS info (device loop1): disk space caching is enabled [ 133.042524][T13227] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 133.052666][T13226] loop3: detected capacity change from 0 to 32768 [ 133.149597][ T6422] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 133.175645][ T4461] BTRFS warning (device loop1): checksum verify failed on logical 5337088 mirror 1 wanted 0x324c5e2d0cac2dc8f61cbfdfc8cd69d9816061b1498b9e1bff7d10a59610160b found 0xab36da95f7d629ca8cc302fd0fd3c25f2e0c358a27b6cae5b3699304a6c15a5c level 0 [ 133.181970][T13227] BTRFS error (device loop1): failed to load root extent [ 133.183800][T13227] BTRFS warning (device loop1): try to load backup roots slot 1 [ 133.309364][T13237] loop5: detected capacity change from 0 to 32768 [ 133.320543][T13227] BTRFS error (device loop1 state M): cannot disable free-space-tree [ 133.326590][T13237] (syz.5.2804,13237,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 133.339884][T13237] (syz.5.2804,13237,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 133.348561][T13237] JBD2: Ignoring recovery information on journal [ 133.354086][ T6416] BTRFS info (device loop1 state M): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 133.414944][T13237] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 133.789834][ T9278] ocfs2: Unmounting device (7,5) on (node local) [ 133.974778][T13315] xt_l2tp: invalid flags combination: c [ 134.225499][T13333] syz.0.2834 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 134.466502][T13317] loop1: detected capacity change from 0 to 32768 [ 134.632879][T13322] loop2: detected capacity change from 0 to 32768 [ 134.715689][T13329] loop5: detected capacity change from 0 to 32768 [ 134.741494][T13329] (syz.5.2833,13329,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 134.755128][T13329] (syz.5.2833,13329,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 134.789461][T13329] JBD2: Ignoring recovery information on journal [ 134.876626][T13329] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 134.990378][T13375] loop0: detected capacity change from 0 to 512 [ 134.994442][T13374] loop3: detected capacity change from 0 to 128 [ 135.099626][T13375] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.170631][T13390] loop3: detected capacity change from 0 to 1024 [ 135.214942][T13390] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 135.232860][ T6422] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.234866][ T9278] ocfs2: Unmounting device (7,5) on (node local) [ 135.509406][T13411] ebt_among: src integrity fail: 30a [ 135.666022][ T30] audit: type=1400 audit(135.650:3): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=13422 comm="syz.2.2878" saddr=172.30.0.3 daddr=172.20.20.170 netif=wpan0 [ 135.723315][T13431] RDS: rds_bind could not find a transport for fec0:ffff::, load rds_tcp or rds_rdma? [ 135.969786][T13451] binder: 13446:13451 ioctl c0046209 200000000000000 returned -22 [ 136.026203][T13409] loop0: detected capacity change from 0 to 32768 [ 136.052303][T13455] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2893'. [ 136.338523][T13409] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=gzip,erasure_code,norecovery,nojournal_transaction_names,reconstruct_alloc [ 136.342534][T13409] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 136.345807][T13409] bcachefs (loop0): Version upgrade required: [ 136.345807][T13409] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 136.345807][T13409] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.13: inode_has_child_snapshots [ 136.345807][T13409] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 136.391851][T13409] bcachefs (loop0): dropping and reconstructing all alloc info [ 136.456308][T13409] bcachefs (loop0): accounting_read... done [ 136.484584][T13409] bcachefs (loop0): alloc_read... done [ 136.485761][T13409] bcachefs (loop0): stripes_read... done [ 136.486978][T13409] bcachefs (loop0): snapshots_read... done [ 136.488320][T13409] bcachefs (loop0): check_allocations... done [ 136.532416][T13450] loop2: detected capacity change from 0 to 40427 [ 136.554583][T13409] bcachefs (loop0): going read-write [ 136.566063][T13409] bcachefs (loop0): done starting filesystem [ 136.705229][T13453] loop5: detected capacity change from 0 to 65536 [ 136.743212][T13453] XFS (loop5): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 136.748451][ T6422] bcachefs (loop0): shutting down [ 136.749605][ T6422] bcachefs (loop0): going read-only [ 136.750739][ T6422] bcachefs (loop0): finished waiting for writes to stop [ 136.781596][T13453] XFS (loop5): Ending clean mount [ 136.808600][T13453] XFS (loop5): Quotacheck needed: Please wait. [ 136.815030][ T6422] bcachefs (loop0): flushing journal and stopping allocators, journal seq 10 [ 136.817207][ T6422] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 10 [ 136.827157][ T6422] bcachefs (loop0): unshutdown complete, journal seq 11 [ 136.829398][ T6422] bcachefs (loop0): done going read-only, filesystem not clean [ 136.846996][ T4461] XFS (loop5): Metadata corruption detected at xfs_dinode_verify+0x2e4/0xf90, inode 0x25 dinode [ 136.849461][ T4461] XFS (loop5): Unmount and run xfs_repair [ 136.850659][ T4461] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 136.852312][ T4461] 00000000: 49 4e a1 ff 03 01 00 00 00 00 00 00 00 00 00 00 IN.............. [ 136.866952][ T6422] bcachefs (loop0): shutdown complete [ 136.889601][ T4461] 00000010: 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 136.891643][ T4461] 00000020: 34 f7 58 68 7a bb 44 4d 34 f7 58 68 7a bb 44 4d 4.Xhz.DM4.Xhz.DM [ 136.922902][ T4461] 00000030: 34 f7 58 68 7a bb 44 4d 00 00 00 00 00 00 00 27 4.Xhz.DM.......' [ 136.927557][ T4461] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 136.929468][ T4461] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 0c 44 49 b4 .............DI. [ 136.931448][ T4461] 00000060: ff ff ff ff f1 fd ce d1 00 00 00 00 00 00 00 02 ................ [ 136.952432][ T4461] 00000070: 00 00 00 01 00 00 00 10 00 00 00 00 00 00 00 08 ................ [ 136.991145][T13453] XFS (loop5): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 136.997015][T13453] XFS (loop5): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 137.003277][T13453] XFS (loop5): Uncorrected metadata errors detected; please run xfs_repair. [ 137.066522][T13495] loop3: detected capacity change from 0 to 32768 [ 137.163917][T13512] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 137.258440][T13519] loop1: detected capacity change from 0 to 164 [ 137.280890][T13519] Unable to read rock-ridge attributes [ 137.298498][T13523] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 137.308985][T13523] overlayfs: missing 'lowerdir' [ 137.325738][T13519] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 137.329811][T13527] loop5: detected capacity change from 0 to 256 [ 137.368329][T13527] FAT-fs (loop5): Directory bread(block 64) failed [ 137.369999][T13527] FAT-fs (loop5): Directory bread(block 65) failed [ 137.371552][T13527] FAT-fs (loop5): Directory bread(block 66) failed [ 137.373139][T13527] FAT-fs (loop5): Directory bread(block 67) failed [ 137.374654][T13527] FAT-fs (loop5): Directory bread(block 68) failed [ 137.376060][T13527] FAT-fs (loop5): Directory bread(block 69) failed [ 137.377540][T13527] FAT-fs (loop5): Directory bread(block 70) failed [ 137.378909][T13527] FAT-fs (loop5): Directory bread(block 71) failed [ 137.380354][T13527] FAT-fs (loop5): Directory bread(block 72) failed [ 137.381804][T13527] FAT-fs (loop5): Directory bread(block 73) failed [ 137.892341][T13495] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,erasure_code,degraded,no_splitbrain_check,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,nocow [ 137.903256][T13495] bcachefs (loop3): recovering from clean shutdown, journal seq 10 [ 137.905041][T13495] bcachefs (loop3): Version upgrade required: [ 137.905041][T13495] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 137.905041][T13495] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.13: inode_has_child_snapshots [ 137.905041][T13495] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 137.983987][T13495] bcachefs (loop3): dropping and reconstructing all alloc info [ 138.032749][T13495] bcachefs (loop3): check_topology... done [ 138.044379][T13495] bcachefs (loop3): accounting_read... done [ 138.088479][T13495] bcachefs (loop3): alloc_read... done [ 138.089587][T13495] bcachefs (loop3): stripes_read... done [ 138.090728][T13495] bcachefs (loop3): snapshots_read... done [ 138.091969][T13495] bcachefs (loop3): check_allocations... done [ 138.144977][T13495] bcachefs (loop3): going read-write [ 138.148159][T13582] xt_TPROXY: Can be used only with -p tcp or -p udp [ 138.172267][T13495] bcachefs (loop3): done starting filesystem [ 138.272791][T13594] dlm: no locking on control device [ 138.305425][T13596] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2947'. [ 138.317674][ T6415] bcachefs (loop3): shutting down [ 138.319147][ T6415] bcachefs (loop3): going read-only [ 138.320249][ T6415] bcachefs (loop3): finished waiting for writes to stop [ 138.333840][T13593] loop0: detected capacity change from 0 to 4096 [ 138.441230][ T6415] bcachefs (loop3): flushing journal and stopping allocators, journal seq 11 [ 138.466792][ T6415] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 12 [ 138.472438][ T6415] bcachefs (loop3): unshutdown complete, journal seq 13 [ 138.475005][ T6415] bcachefs (loop3): done going read-only, filesystem not clean [ 138.484878][T13604] loop2: detected capacity change from 0 to 64 [ 138.490524][T13593] ntfs3(loop0): ino=5, "/" directory corrupted [ 138.491970][T13593] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 138.523889][ T6415] bcachefs (loop3): shutdown complete [ 138.654376][T13612] loop1: detected capacity change from 0 to 2048 [ 138.661428][T13612] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 138.680445][T13617] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 138.680562][T13612] syz.1.2956: attempt to access beyond end of device [ 138.680562][T13612] loop1: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 138.726027][T13619] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2959'. [ 138.762675][T13612] NILFS (loop1): DAT doesn't have a block to manage vblocknr = 16777227 [ 138.769761][T13612] NILFS error (device loop1): nilfs_bmap_truncate: broken bmap (inode number=16) [ 138.783964][T13612] Remounting filesystem read-only [ 138.785084][T13612] NILFS (loop1): error -5 truncating bmap (ino=16) [ 138.823550][T13623] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2961'. [ 138.842458][ T6416] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer [ 138.944104][T13602] loop5: detected capacity change from 0 to 32768 [ 139.165257][T13641] loop0: detected capacity change from 0 to 32768 [ 139.167589][T13641] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.2969 (13641) [ 139.174941][T13602] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 139.187007][T13641] BTRFS info (device loop0 state S): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 139.189386][T13641] BTRFS info (device loop0 state S): using blake2b (blake2b-256-generic) checksum algorithm [ 139.191420][T13641] BTRFS info (device loop0 state S): using free-space-tree [ 139.312694][T13602] XFS (loop5): Ending clean mount [ 139.323392][ T6422] BTRFS info (device loop0 state CS): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 139.417997][ T9278] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 139.423737][T13681] netlink: 504 bytes leftover after parsing attributes in process `syz.0.2976'. [ 139.791656][T13677] loop1: detected capacity change from 0 to 32768 [ 139.835563][T13677] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 139.981987][T13677] XFS (loop1): Ending clean mount [ 139.985494][T13677] XFS (loop1): Quotacheck needed: Please wait. [ 140.009924][T13713] loop5: detected capacity change from 0 to 4096 [ 140.026166][T13677] XFS (loop1): Quotacheck: Done. [ 140.135283][ T6416] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 140.407210][T13734] loop0: detected capacity change from 0 to 256 [ 140.419764][T13734] exfat: Deprecated parameter 'utf8' [ 140.434411][T13734] exfat: Deprecated parameter 'utf8' [ 140.488412][T13734] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 140.557244][T13743] random: crng reseeded on system resumption [ 140.561924][T13744] loop3: detected capacity change from 0 to 1024 [ 140.640622][T13747] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3007'. [ 140.913397][T13771] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3018'. [ 140.915287][T13771] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3018'. [ 141.506708][T13825] loop1: detected capacity change from 0 to 256 [ 141.702406][T13837] loop1: detected capacity change from 0 to 256 [ 141.751025][T13833] loop2: detected capacity change from 0 to 4096 [ 141.991446][T13823] loop3: detected capacity change from 0 to 32768 [ 142.014284][T13823] XFS: noikeep mount option is deprecated. [ 142.015420][T13823] XFS: ikeep mount option is deprecated. [ 142.046112][T13830] loop5: detected capacity change from 0 to 32768 [ 142.067459][T13823] XFS (loop3): Mounting V5 filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 in no-recovery mode. Filesystem will be inconsistent. [ 142.080597][T13823] XFS (loop3): Quotacheck needed: Please wait. [ 142.114149][T13823] XFS (loop3): Quotacheck: Done. [ 142.115494][T13823] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 142.304912][T13876] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3067'. [ 142.529296][T13890] loop2: detected capacity change from 0 to 64 [ 142.673347][T13872] loop3: detected capacity change from 0 to 40427 [ 142.709928][T13872] F2FS-fs (loop3): inline encryption not supported [ 142.711326][T13872] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x1fffff [ 142.715442][T13872] F2FS-fs (loop3): Unrecognized mount option "grpquota=)" or missing value [ 143.092643][T13922] netlink: 'syz.5.3087': attribute type 3 has an invalid length. [ 143.128951][T13924] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.130918][T13924] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.220910][T13872] loop3: detected capacity change from 0 to 32768 [ 143.222803][T13872] bcachefs: bch2_parse_one_mount_opt() Invalid mount option grpquota: must be bool [ 143.389808][T13936] loop5: detected capacity change from 0 to 512 [ 143.394901][T13936] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 143.408940][T13938] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3095'. [ 143.410812][T13938] netlink: 74 bytes leftover after parsing attributes in process `syz.2.3095'. [ 143.418503][T13936] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 143.420400][T13936] System zones: 1-12 [ 143.421343][T13936] EXT4-fs (loop5): orphan cleanup on readonly fs [ 143.444005][T13908] loop0: detected capacity change from 0 to 32768 [ 143.451890][T13936] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #11: comm syz.5.3094: attempt to clear invalid blocks 1024 len 1 [ 143.467256][T13936] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.3094: bg 0: block 361: padding at end of block bitmap is not set [ 143.470749][T13936] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 143.472921][T13936] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.3094: invalid indirect mapped block 1811939328 (level 0) [ 143.492385][T13908] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 143.494910][T13936] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.3094: invalid indirect mapped block 2 (level 2) [ 143.498088][T13936] EXT4-fs (loop5): 1 truncate cleaned up [ 143.499950][T13936] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 143.577038][ T9278] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 143.616359][T13908] XFS (loop0): Ending clean mount [ 143.619912][T13908] XFS (loop0): Quotacheck needed: Please wait. [ 143.717768][T13964] loop2: detected capacity change from 0 to 2048 [ 143.810664][T13908] XFS (loop0): Quotacheck: Done. [ 143.833642][T13973] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3109'. [ 143.951560][ T6422] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 143.967333][T13984] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3113'. [ 143.969211][T13984] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3113'. [ 143.979916][T13984] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3113'. [ 144.179152][T13994] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 144.197074][T13998] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3122'. [ 144.199056][T13998] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3122'. [ 144.305992][T14007] loop5: detected capacity change from 0 to 256 [ 144.339489][T14007] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x59626b74, utbl_chksum : 0xe619d30d) [ 144.366584][T14007] exFAT-fs (loop5): start_clu is invalid cluster(0x0) [ 144.565171][T14033] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 144.892728][T14062] ip6erspan0: entered promiscuous mode [ 144.899069][T14069] loop0: detected capacity change from 0 to 64 [ 145.002371][T14076] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 145.067890][T14082] loop3: detected capacity change from 0 to 1024 [ 145.146416][T14090] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3164'. [ 145.243416][T14094] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 145.472781][T14121] loop5: detected capacity change from 0 to 128 [ 145.758138][T14143] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 145.901675][T14154] loop3: detected capacity change from 0 to 164 [ 146.159061][T14125] loop2: detected capacity change from 0 to 32768 [ 146.378498][T14180] loop0: detected capacity change from 0 to 512 [ 146.419337][T14180] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 146.430163][T14180] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.3211: invalid indirect mapped block 2683928664 (level 1) [ 146.481993][T14180] EXT4-fs (loop0): Remounting filesystem read-only [ 146.486416][T14180] EXT4-fs (loop0): 1 truncate cleaned up [ 146.491330][T14180] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.609037][ T6422] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.626355][T14193] overlayfs: unescaped trailing colons in lowerdir mount option. [ 146.777963][T14202] bond0: (slave erspan0): Opening slave failed [ 146.860078][T14208] loop2: detected capacity change from 0 to 512 [ 147.409809][T14156] loop5: detected capacity change from 0 to 131072 [ 147.517847][T14156] F2FS-fs (loop5): Found nat_bits in checkpoint [ 147.584118][T14156] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 147.636143][T14156] F2FS-fs (loop5): lookup inode (7) has corrupted xattr [ 147.658701][T14156] F2FS-fs (loop5): lookup inode (7) has corrupted xattr [ 147.669799][T14156] F2FS-fs (loop5): lookup inode (7) has corrupted xattr [ 147.673289][T14156] F2FS-fs (loop5): list inode (7) has corrupted xattr [ 147.729884][T14269] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 147.802701][T14272] xt_policy: too many policy elements [ 148.031291][T14280] loop2: detected capacity change from 0 to 256 [ 148.039521][T14280] exfat: Deprecated parameter 'utf8' [ 148.045257][T14280] exfat: Deprecated parameter 'namecase' [ 148.055211][T14280] exfat: Deprecated parameter 'utf8' [ 148.059859][T14280] exfat: Deprecated parameter 'namecase' [ 148.490458][T14250] loop1: detected capacity change from 0 to 131072 [ 148.515172][T14250] F2FS-fs (loop1): QUOTA feature is enabled, so ignore jquota_fmt [ 148.551786][T14250] F2FS-fs (loop1): Found nat_bits in checkpoint [ 148.587529][T14250] F2FS-fs (loop1): Mounted with checkpoint version = 1b41e955 [ 148.598168][T14347] __nla_validate_parse: 5 callbacks suppressed [ 148.598196][T14347] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3259'. [ 148.636051][T14250] F2FS-fs (loop1): quota sysfile already exists [ 148.720876][T14353] loop2: detected capacity change from 0 to 256 [ 149.007214][T14371] loop5: detected capacity change from 0 to 2048 [ 149.033639][T14371] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 149.051903][T14375] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 149.065257][T14371] syz.5.3270: attempt to access beyond end of device [ 149.065257][T14371] loop5: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 149.132107][T14371] NILFS (loop5): DAT doesn't have a block to manage vblocknr = 16777227 [ 149.147829][T14371] NILFS error (device loop5): nilfs_bmap_truncate: broken bmap (inode number=16) [ 149.153680][T14371] Remounting filesystem read-only [ 149.154811][T14371] NILFS (loop5): error -5 truncating bmap (ino=16) [ 149.160449][T14380] i2c i2c-0: Invalid block write size 254 [ 149.220595][ T9278] NILFS (loop5): disposed unprocessed dirty file(s) when detaching log writer [ 149.686092][T14422] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3296'. [ 149.780659][T14431] loop2: detected capacity change from 0 to 1024 [ 149.914863][T14439] loop2: detected capacity change from 0 to 512 [ 149.920079][T14439] EXT4-fs: Ignoring removed nomblk_io_submit option [ 149.941990][T14441] syz.1.3306 (14441): /proc/14440/oom_adj is deprecated, please use /proc/14440/oom_score_adj instead. [ 149.993240][T14445] loop3: detected capacity change from 0 to 1024 [ 149.995615][T14445] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 150.003027][T14445] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.024350][T14451] loop2: detected capacity change from 0 to 256 [ 150.058750][T14452] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 150.076039][ T6415] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.263811][T14466] netlink: 'syz.2.3316': attribute type 21 has an invalid length. [ 150.267857][T14466] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3316'. [ 150.282907][T14468] ip6t_srh: unknown srh invflags 7D00 [ 150.431255][T14479] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3322'. [ 150.510388][T14480] loop3: detected capacity change from 0 to 4096 [ 150.521748][T14480] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 150.569191][T14480] ntfs3(loop3): failed to convert "c46c" to cp869 [ 150.893390][T14507] netlink: 'syz.5.3337': attribute type 1 has an invalid length. [ 150.895205][T14507] netlink: 'syz.5.3337': attribute type 2 has an invalid length. [ 150.939387][T14483] loop0: detected capacity change from 0 to 32768 [ 150.963261][T14483] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.3324 (14483) [ 151.036910][T14483] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 151.039191][T14483] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 151.040937][T14483] BTRFS info (device loop0): using free-space-tree [ 151.146446][T14531] loop2: detected capacity change from 0 to 128 [ 151.180040][T14523] loop3: detected capacity change from 0 to 32768 [ 151.230387][T14541] loop2: detected capacity change from 0 to 512 [ 151.328200][T14541] EXT4-fs (loop2): write access unavailable, skipping orphan cleanup [ 151.365749][T14541] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 151.391833][ T6422] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 151.416171][T14523] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 151.445654][ T6425] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.516950][T14523] OCFS2: ERROR (device loop3): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #17056 has bit count 2304 but max bitmap bits of 2048 [ 151.532952][T14523] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 151.557875][T14523] OCFS2: File system is now read-only. [ 151.559027][T14523] (syz.3.3346,14523,1):ocfs2_search_chain:1814 ERROR: status = -30 [ 151.581925][T14523] (syz.3.3346,14523,1):ocfs2_search_chain:1926 ERROR: status = -30 [ 151.587479][T14523] (syz.3.3346,14523,1):ocfs2_claim_suballoc_bits:1995 ERROR: status = -30 [ 151.589314][T14523] (syz.3.3346,14523,1):ocfs2_claim_suballoc_bits:2038 ERROR: status = -30 [ 151.602807][T14523] (syz.3.3346,14523,1):ocfs2_claim_new_inode:2273 ERROR: status = -30 [ 151.621148][T14523] (syz.3.3346,14523,1):ocfs2_claim_new_inode:2288 ERROR: status = -30 [ 151.622903][T14523] (syz.3.3346,14523,1):ocfs2_mknod_locked:639 ERROR: status = -30 [ 151.631304][T14523] (syz.3.3346,14523,1):ocfs2_mknod:385 ERROR: status = -30 [ 151.642386][T14523] (syz.3.3346,14523,1):ocfs2_mknod:502 ERROR: status = -30 [ 151.666045][T14523] (syz.3.3346,14523,1):ocfs2_create:676 ERROR: status = -30 [ 151.820309][T14583] loop1: detected capacity change from 0 to 512 [ 151.827886][ T6415] ocfs2: Unmounting device (7,3) on (node local) [ 151.858194][T14583] EXT4-fs error (device loop1): ext4_orphan_get:1389: inode #15: comm syz.1.3365: casefold flag without casefold feature [ 151.863624][T14583] EXT4-fs (loop1): Remounting filesystem read-only [ 151.865535][T14583] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.922597][T14587] xt_l2tp: wrong L2TP version: 0 [ 152.042553][ T6416] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.091652][T14569] loop5: detected capacity change from 0 to 32768 [ 152.102013][T14569] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.3357 (14569) [ 152.106238][ T5985] Bluetooth: hci0: command tx timeout [ 152.108107][T14598] libceph: resolve 'c4' (ret=-3): failed [ 152.110935][T14596] loop1: detected capacity change from 0 to 256 [ 152.196211][T14569] BTRFS info (device loop5 state S): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 152.198685][T14569] BTRFS info (device loop5 state S): using blake2b (blake2b-256-generic) checksum algorithm [ 152.200822][T14569] BTRFS info (device loop5 state S): using free-space-tree [ 152.221988][T14596] exFAT-fs (loop1): failed to load upcase table (idx : 0x00017f3e, chksum : 0x1380c30a, utbl_chksum : 0xe619d30d) [ 152.460397][ T9278] BTRFS info (device loop5 state CS): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 152.926210][T14664] loop2: detected capacity change from 0 to 4096 [ 152.958221][T14671] loop3: detected capacity change from 0 to 2048 [ 152.978071][T14671] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 153.465878][T14695] loop3: detected capacity change from 0 to 4096 [ 153.502657][T14695] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 153.538286][T14709] loop1: detected capacity change from 0 to 16 [ 153.543951][T14709] erofs (device loop1): mounted with root inode @ nid 36. [ 153.639743][T14695] ntfs3(loop3): failed to convert "c46c" to macceltic [ 153.680049][T14682] loop2: detected capacity change from 0 to 32768 [ 153.850732][T14720] loop3: detected capacity change from 0 to 4096 [ 153.855326][T14725] netlink: 'syz.1.3418': attribute type 14 has an invalid length. [ 153.856485][T14720] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 153.857136][T14725] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3418'. [ 153.887874][T14720] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 154.016322][T14733] loop1: detected capacity change from 0 to 256 [ 154.045230][T14735] xt_hashlimit: max too large, truncated to 1048576 [ 154.049966][T14735] xt_hashlimit: invalid rate [ 154.158293][T14713] loop0: detected capacity change from 0 to 32768 [ 154.211189][T14713] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 154.228302][T14754] loop2: detected capacity change from 0 to 512 [ 154.260227][T14713] XFS (loop0): Ending clean mount [ 154.320760][ T6422] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 154.549731][T14782] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 154.589101][T14784] sctp: [Deprecated]: syz.1.3444 (pid 14784) Use of int in max_burst socket option. [ 154.589101][T14784] Use struct sctp_assoc_value instead [ 154.592293][T14773] loop2: detected capacity change from 0 to 32768 [ 154.755292][T14795] loop3: detected capacity change from 0 to 2048 [ 154.835396][T14801] tmpfs: Bad value for 'mpol' [ 154.871148][T14802] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 154.877652][T14798] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 154.879848][T14795] NILFS error (device loop3): nilfs_check_folio: bad entry in directory #2: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0 [ 154.933047][T14795] Remounting filesystem read-only [ 155.393914][T14839] loop5: detected capacity change from 0 to 256 [ 155.408123][T14839] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x36e06c6e, utbl_chksum : 0xe619d30d) [ 155.539876][T14793] loop1: detected capacity change from 0 to 40427 [ 155.567341][T14793] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 155.568878][T14793] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 155.573238][T14793] F2FS-fs (loop1): build fault injection attr: rate: 17008, type: 0x1fffff [ 155.575053][T14793] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x1f8 [ 155.598900][T14793] F2FS-fs (loop1): invalid crc value [ 155.604959][T14793] F2FS-fs (loop1): Found nat_bits in checkpoint [ 155.633535][T14793] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 155.635018][T14793] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 155.712364][T14868] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3482'. [ 155.721939][T14867] loop2: detected capacity change from 0 to 2048 [ 155.735954][ T6416] syz-executor: attempt to access beyond end of device [ 155.735954][ T6416] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 155.739399][ T6416] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 156.470456][T14903] loop0: detected capacity change from 0 to 32768 [ 156.720817][T14903] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,no_data_io [ 156.728544][T14903] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 156.730286][T14903] bcachefs (loop0): Version upgrade required: [ 156.730286][T14903] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 156.730286][T14903] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.13: inode_has_child_snapshots [ 156.730286][T14903] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 156.751541][T14903] bcachefs (loop0): dropping and reconstructing all alloc info [ 156.779316][T14926] loop3: detected capacity change from 0 to 32768 [ 156.828142][T14903] bcachefs (loop0): check_topology... done [ 156.829869][T14903] bcachefs (loop0): accounting_read... [ 156.844710][T14926] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 156.844710][T14926] [ 156.854107][T14926] ERROR: (device loop3): remounting filesystem as read-only [ 156.855635][T14926] xtLookup: xtSearch returned -5 [ 156.873861][T14903] done [ 156.874474][T14903] bcachefs (loop0): alloc_read... done [ 156.875644][T14903] bcachefs (loop0): stripes_read... done [ 156.876938][T14903] bcachefs (loop0): snapshots_read... done [ 156.878115][T14903] bcachefs (loop0): check_allocations... done [ 156.919421][T14903] bcachefs (loop0): going read-write [ 156.944354][T14903] bcachefs (loop0): done starting filesystem [ 157.015023][ T6422] bcachefs (loop0): shutting down [ 157.016087][ T6422] bcachefs (loop0): going read-only [ 157.017154][ T6422] bcachefs (loop0): finished waiting for writes to stop [ 157.053913][ T6422] bcachefs (loop0): flushing journal and stopping allocators, journal seq 10 [ 157.055878][ T6422] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 10 [ 157.069666][ T6422] bcachefs (loop0): unshutdown complete, journal seq 11 [ 157.071607][ T6422] bcachefs (loop0): done going read-only, filesystem not clean [ 157.112531][T14973] RDS: rds_bind could not find a transport for ae0c:91e3:ccfb:11d2:0:5efe:150.125.240.108, load rds_tcp or rds_rdma? [ 157.121907][ T6422] bcachefs (loop0): shutdown complete [ 157.224532][T14961] loop1: detected capacity change from 0 to 32768 [ 157.314532][T14984] netlink: 'syz.3.3524': attribute type 1 has an invalid length. [ 157.385118][T14994] loop5: detected capacity change from 0 to 512 [ 157.433626][T14994] EXT4-fs error (device loop5): ext4_orphan_get:1415: comm syz.5.3537: bad orphan inode 13 [ 157.436855][T14994] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.469797][ T9278] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.541971][T14992] loop3: detected capacity change from 0 to 32768 [ 157.553635][T14992] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.3536 (14992) [ 157.588519][T14992] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 157.590747][T14992] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 157.592498][T14992] BTRFS info (device loop3): using free-space-tree [ 157.688622][ T6415] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 157.804076][T15003] loop5: detected capacity change from 0 to 32768 [ 157.808999][T15003] BTRFS: device /dev/loop5 (7:5) using temp-fsid c8aef0a1-053b-41e3-aa5b-3d1c53ebacd7 [ 157.811023][T15003] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.3538 (15003) [ 157.818045][T15003] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 157.820319][T15003] BTRFS info (device loop5): using sha256 (sha256-ce) checksum algorithm [ 157.822279][T15003] BTRFS info (device loop5): using free-space-tree [ 157.894442][T15024] loop3: detected capacity change from 0 to 2048 [ 157.927453][T15032] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 157.940399][T15024] NILFS (loop3): failed to count free inodes: err=-34 [ 157.986157][T14961] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,str_hash=crc32c,journal_flush_disabled,norecovery,nojournal_transaction_names,reconstruct_alloc [ 157.990817][T14961] bcachefs (loop1): recovering from clean shutdown, journal seq 10 [ 157.992570][T14961] bcachefs (loop1): Version upgrade required: [ 157.992570][T14961] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 157.992570][T14961] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.13: inode_has_child_snapshots [ 157.992570][T14961] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 158.053402][T14961] bcachefs (loop1): dropping and reconstructing all alloc info [ 158.105555][T14961] bcachefs (loop1): error validating btree node on loop1 at btree xattrs level 0/0 [ 158.105575][T14961] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 2285c34bed0abe32 written 16 min_key POS_MIN durability: 1 ptr: 0:31:0 gen 0 [ 158.105586][T14961] node offset 0/16: got wrong btree node: got [ 158.105595][T14961] btree=xattrs l=0 seq 2449958200410816050x [ 158.105603][T14961] min: POS_MIN [ 158.105609][T14961] max: SPOS_MAX [ 158.115221][T14961] bcachefs (loop1): flagging btree xattrs lost data [ 158.118831][T14961] error reading btree root xattrs l=0: btree_node_read_error, fixing [ 158.120499][T14961] bcachefs (loop1): will run btree node scan [ 158.123999][ T9278] BTRFS info (device loop5): last unmount of filesystem c8aef0a1-053b-41e3-aa5b-3d1c53ebacd7 [ 158.171053][T14961] bcachefs (loop1): scan_for_btree_nodes... [ 158.220025][T14961] bch2_scan_for_btree_nodes: nodes found after overwrites: [ 158.220044][T14961] extents l=0 seq=1 journal_seq=5 cookie=c6c25c03258c59c5 POS_MIN-SPOS_MAX ptr: 0:27:0 gen 0 [ 158.220054][T14961] inodes l=0 seq=1 journal_seq=5 cookie=7589ab5e0c11cc7a POS_MIN-SPOS_MAX ptr: 0:38:0 gen 0 [ 158.220064][T14961] dirents l=0 seq=1 journal_seq=4 cookie=9aa2895aefce4bdf POS_MIN-SPOS_MAX ptr: 0:41:0 gen 0 [ 158.220074][T14961] xattrs l=0 seq=1 journal_seq=0 cookie=22000000ba0abe32 POS_MIN-SPOS_MAX ptr: 0:31:0 gen 0 [ 158.220084][T14961] subvolumes l=0 seq=1 journal_seq=1 cookie=c0bef60d07ceb940 POS_MIN-SPOS_MAX ptr: 0:35:0 gen 0 [ 158.220094][T14961] snapshots l=0 seq=1 journal_seq=1 cookie=ebb8d5a9e3463bdb POS_MIN-SPOS_MAX ptr: 0:32:0 gen 0 [ 158.220103][T14961] lru l=0 seq=1 journal_seq=5 cookie=28f61e078e70b95c POS_MIN-SPOS_MAX ptr: 0:28:0 gen 0 [ 158.220113][T14961] deleted_inodes l=0 seq=1 journal_seq=0 cookie=1db8f60c84bb244c POS_MIN-SPOS_MAX ptr: 0:42:0 gen 0 [ 158.220123][T14961] [ 158.284264][T14961] done [ 158.284798][T14961] bcachefs (loop1): check_topology... [ 158.284823][T14961] bcachefs (loop1): btree root xattrs unreadable, must recover from scan [ 158.287659][T14961] bcachefs (loop1): bch2_get_scanned_nodes(): recovering xattrs l=0 POS_MIN - SPOS_MAX [ 158.289774][T14961] bcachefs (loop1): bch2_get_scanned_nodes(): recovering u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 22000000ba0abe32 written 8 min_key POS_MIN durability: 1 ptr: 0:31:0 gen 0 [ 158.330186][T14961] done [ 158.330846][T14961] bcachefs (loop1): accounting_read... done [ 158.375499][T14961] bcachefs (loop1): alloc_read... done [ 158.376746][T14961] bcachefs (loop1): stripes_read... done [ 158.377772][T14961] bcachefs (loop1): snapshots_read... done [ 158.403232][T14961] bcachefs (loop1): check_allocations... done [ 158.440584][T14961] bcachefs (loop1): going read-write [ 158.461931][T15061] SET target dimension over the limit! [ 158.501449][T14961] bcachefs (loop1): done starting filesystem [ 158.536652][T14961] bcachefs (loop1): btree_path_down(): fatal error node not found at pos 4096:9007092115520619870:U32_MAX within parent node u64s 5 type btree_ptr SPOS_MAX len 0 ver 0 [ 158.542037][ T6418] bcachefs (loop1): going read-only [ 158.543313][ T6418] bcachefs (loop1): finished waiting for writes to stop [ 158.553668][T14961] bcachefs (loop1): fatal error - emergency read only [ 158.567281][T15074] nvme_fabrics: unknown parameter or missing value 'Y' in ctrl creation request [ 158.573931][ T6418] bcachefs (loop1): flushing journal and stopping allocators, journal seq 11 [ 158.575834][ T6418] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 11 [ 158.580428][ T6418] bcachefs (loop1): unshutdown complete, journal seq 11 [ 158.582360][ T6418] bcachefs (loop1): done going read-only, filesystem not clean [ 158.633042][ T6416] bcachefs (loop1): shutting down [ 158.649266][ T6416] bcachefs (loop1): shutdown complete [ 159.118739][T15106] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3572'. [ 159.352521][T15118] loop3: detected capacity change from 0 to 8 [ 159.572630][T15120] loop5: detected capacity change from 0 to 32768 [ 159.600231][T15126] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3582'. [ 159.602199][T15126] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3582'. [ 159.608772][T15120] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.3579 (15120) [ 159.619255][T15120] BTRFS info (device loop5): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 159.621387][T15120] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm [ 159.630916][T15120] BTRFS info (device loop5): disk space caching is enabled [ 159.632554][T15120] BTRFS warning (device loop5): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 159.728045][T15120] BTRFS info (device loop5): rebuilding free space tree [ 159.782687][T15108] loop0: detected capacity change from 0 to 32768 [ 159.795096][T15120] BTRFS info (device loop5): disabling free space tree [ 159.796622][T15120] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 159.798504][T15120] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 159.875235][T15120] BTRFS info (device loop5): balance: start -susage=7,stripes=4294967293..262144 [ 159.877365][T15120] BTRFS info (device loop5): balance: ended with status: 0 [ 159.929414][ T9278] BTRFS info (device loop5): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 160.001948][T15153] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3588'. [ 160.154866][T15161] netlink: 'syz.2.3591': attribute type 1 has an invalid length. [ 160.156567][T15161] netlink: 'syz.2.3591': attribute type 2 has an invalid length. [ 160.381893][T15180] netlink: 'syz.0.3600': attribute type 1 has an invalid length. [ 160.581967][T15190] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 160.810069][T15215] random: crng reseeded on system resumption [ 160.833490][T15215] hibernate: Hibernate image not generated by this kernel! [ 160.835187][T15215] PM: hibernation: Image mismatch: architecture specific data [ 160.919372][T15224] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3621'. [ 160.921263][T15224] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3621'. [ 161.337650][T15250] loop3: detected capacity change from 0 to 1024 [ 161.383741][T15270] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3644'. [ 161.468046][ T61] hfsplus: b-tree write err: -5, ino 4 [ 161.653957][T15294] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3656'. [ 161.695387][ T30] audit: type=1400 audit(161.650:4): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=15295 comm="syz.2.3657" saddr=172.30.0.3 daddr=172.20.20.170 netif=wpan0 [ 161.856338][T15307] loop0: detected capacity change from 0 to 8 [ 161.865282][T15307] SQUASHFS error: Unable to read inode 0xa7 [ 161.911231][T15305] lo: entered allmulticast mode [ 161.916770][T15305] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 161.973387][T15311] netlink: 'syz.2.3665': attribute type 6 has an invalid length. [ 161.977566][T15309] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 162.466432][T15348] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3681'. [ 162.489843][T15348] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3681'. [ 162.567919][T15356] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 162.672675][ T5985] Bluetooth: hci0: command tx timeout [ 162.829365][T15384] ieee802154 phy0 wpan0: encryption failed: -22 [ 162.902152][T15388] loop0: detected capacity change from 0 to 16 [ 162.912340][T15388] erofs (device loop0): mounted with root inode @ nid 36. [ 163.159954][T15410] misc userio: Invalid payload size [ 164.098138][T15494] loop2: detected capacity change from 0 to 64 [ 164.228469][T15472] loop1: detected capacity change from 0 to 32768 [ 164.238941][T15472] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.3744 (15472) [ 164.240573][T15472] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 164.240664][T15472] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 164.240693][T15472] BTRFS info (device loop1): using free-space-tree [ 164.410214][T15527] loop5: detected capacity change from 0 to 128 [ 164.516514][T15530] loop3: detected capacity change from 0 to 24 [ 164.518302][T15530] romfs: Unknown parameter 'xœìÚ¿JûPð3úûutt [ 164.518302][T15530] T¢ ù¯uÕQÜ|ƒÐæ¦ÁSAÚ'Áá:ø‚Oà#dtÓEЗˆ\›š6•v©Åïgé—œžÞ^n–£ÅQh±D#ÚéÝœ¼®ÅQ¨´œý6³˜KCGD¤ÈfÙ­NSž¿êiFú77ü¨Ú¼6Þ‡ŸÍ-__±€{öÚ' [ 164.525493][T15530] kAFS: No cell specified [ 164.542614][ T9278] sysv_free_block: flc_count > flc_size [ 164.544325][ T9278] sysv_free_block: flc_count > flc_size [ 164.545504][ T9278] sysv_free_block: flc_count > flc_size [ 164.546581][ T9278] sysv_free_block: flc_count > flc_size [ 164.547760][ T9278] sysv_free_block: flc_count > flc_size [ 164.548972][ T9278] sysv_free_block: flc_count > flc_size [ 164.550170][ T9278] sysv_free_block: flc_count > flc_size [ 164.551374][ T9278] sysv_free_block: flc_count > flc_size [ 164.552536][ T9278] sysv_free_block: flc_count > flc_size [ 164.573999][ T6416] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 164.578008][ T9278] sysv_free_block: flc_count > flc_size [ 164.586017][T15536] xfrm1: entered allmulticast mode [ 164.591464][ T9278] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 164.715440][T15548] __nla_validate_parse: 3 callbacks suppressed [ 164.715458][T15548] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3774'. [ 165.125295][T15564] loop0: detected capacity change from 0 to 2048 [ 165.172506][T15564] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 165.441139][T15586] xt_l2tp: invalid flags combination: 0 [ 165.515909][T15592] .: renamed from veth1_virt_wifi (while UP) [ 165.723443][T15605] IPv6: Can't replace route, no match found [ 165.868433][T15621] netlink: 'syz.0.3808': attribute type 10 has an invalid length. [ 165.870715][T15621] bridge0: port 3(team0) entered blocking state [ 165.872468][T15621] bridge0: port 3(team0) entered disabled state [ 165.874504][T15621] team0: entered allmulticast mode [ 165.875612][T15621] team_slave_0: entered allmulticast mode [ 165.876783][T15621] team_slave_1: entered allmulticast mode [ 165.878053][T15621] geneve1: entered allmulticast mode [ 165.880013][T15621] team0: entered promiscuous mode [ 165.881248][T15621] team_slave_0: entered promiscuous mode [ 165.882767][T15621] team_slave_1: entered promiscuous mode [ 165.896402][T15621] geneve1: entered promiscuous mode [ 165.899495][T15621] bridge0: port 3(team0) entered blocking state [ 165.900742][T15621] bridge0: port 3(team0) entered forwarding state [ 165.915816][T15624] netlink: 'syz.1.3811': attribute type 5 has an invalid length. [ 166.379067][T15664] loop0: detected capacity change from 0 to 1024 [ 166.479315][T15671] netlink: 752 bytes leftover after parsing attributes in process `syz.5.3832'. [ 166.483729][T15664] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.596545][ T6422] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.645772][T15680] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3837'. [ 166.676785][T15659] loop1: detected capacity change from 0 to 32768 [ 166.716016][T15659] (syz.1.3826,15659,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 166.723684][T15659] (syz.1.3826,15659,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 166.798697][T15659] JBD2: Ignoring recovery information on journal [ 166.914867][T15702] netlink: 'syz.0.3847': attribute type 1 has an invalid length. [ 166.916631][T15702] netlink: 'syz.0.3847': attribute type 3 has an invalid length. [ 166.918257][T15702] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3847'. [ 166.922065][T15659] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 166.994332][T15708] loop5: detected capacity change from 0 to 512 [ 167.002569][T15708] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 167.015499][T15708] EXT4-fs error (device loop5): ext4_xattr_block_get:596: inode #15: comm syz.5.3850: corrupted xattr block 33: invalid ea_ino [ 167.021689][T15708] EXT4-fs error (device loop5): ext4_xattr_block_get:596: inode #15: comm syz.5.3850: corrupted xattr block 33: invalid ea_ino [ 167.025594][T15708] EXT4-fs error (device loop5): ext4_xattr_block_get:596: inode #15: comm syz.5.3850: corrupted xattr block 33: invalid ea_ino [ 167.052891][ T9278] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.189523][ T6416] ocfs2: Unmounting device (7,1) on (node local) [ 167.349012][T15729] Injecting memory failure for pfn 0x135e65 at process virtual address 0x201bd000 [ 167.361171][T15729] Memory failure: 0x135e65: Sending SIGBUS to syz.3.3851:15729 due to hardware memory corruption [ 167.370880][T15729] Memory failure: 0x135e65: recovery action for dirty LRU page: Recovered [ 167.372713][T15729] Injecting memory failure for pfn 0x135e66 at process virtual address 0x201be000 [ 167.381556][T15729] Memory failure: 0x135e66: Sending SIGBUS to syz.3.3851:15729 due to hardware memory corruption [ 167.397413][T15729] Memory failure: 0x135e66: recovery action for dirty LRU page: Recovered [ 167.413362][T15729] Injecting memory failure for pfn 0x135e67 at process virtual address 0x201bf000 [ 167.430366][T15729] Memory failure: 0x135e67: Sending SIGBUS to syz.3.3851:15729 due to hardware memory corruption [ 167.432777][T15729] Memory failure: 0x135e67: recovery action for dirty LRU page: Recovered [ 167.530761][T15740] loop1: detected capacity change from 0 to 4096 [ 167.543413][T15740] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 167.561309][T15740] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 167.821606][T15769] loop1: detected capacity change from 0 to 1024 [ 168.084124][T15780] loop3: detected capacity change from 0 to 32768 [ 168.090142][T15769] EXT4-fs (loop1): orphan cleanup on readonly fs [ 168.099858][T15769] EXT4-fs (loop1): 1 truncate cleaned up [ 168.118840][T15769] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 168.186785][T15796] loop5: detected capacity change from 0 to 2048 [ 168.203366][T15780] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 168.212790][ T6416] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.217909][T15796] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 168.349872][T15818] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3894'. [ 168.407235][T15780] XFS (loop3): Ending clean mount [ 168.409687][T15780] XFS (loop3): Quotacheck needed: Please wait. [ 168.521932][T15780] XFS (loop3): Quotacheck: Done. [ 168.592089][ T6415] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 168.663809][T15841] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3906'. [ 168.665834][T15841] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3906'. [ 168.944914][T15851] loop5: detected capacity change from 0 to 4096 [ 168.999928][T15861] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 169.042016][T15851] overlayfs: failed to resolve './file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 169.107634][T15865] loop2: detected capacity change from 0 to 1764 [ 169.370056][T15867] loop3: detected capacity change from 0 to 40427 [ 169.394123][T15867] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 169.395606][T15867] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 169.406543][T15867] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x1fffff [ 169.410006][T15867] F2FS-fs (loop3): invalid crc value [ 169.416532][T15867] F2FS-fs (loop3): Found nat_bits in checkpoint [ 169.502969][T15867] F2FS-fs (loop3): Start checkpoint disabled! [ 169.546166][T15867] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 169.547849][T15867] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 169.707329][T15899] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3934'. [ 169.749167][ T13] kworker/u8:1: attempt to access beyond end of device [ 169.749167][ T13] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 169.781000][ T13] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 169.792408][ T13] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 169.856648][T15911] netlink: 'syz.2.3941': attribute type 4 has an invalid length. [ 169.901376][T15914] loop5: detected capacity change from 0 to 8 [ 169.904718][T15914] SQUASHFS error: zlib decompression failed, data probably corrupt [ 169.906422][T15914] SQUASHFS error: Failed to read block 0x9b: -5 [ 169.907720][T15914] SQUASHFS error: Unable to read metadata cache entry [99] [ 169.909289][T15914] SQUASHFS error: Unable to read inode 0x127 [ 170.011489][T15921] netlink: 'syz.0.3946': attribute type 10 has an invalid length. [ 170.342070][T15949] loop5: detected capacity change from 0 to 256 [ 170.574993][T15965] loop3: detected capacity change from 0 to 256 [ 170.590965][T15965] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 170.619232][T15971] loop2: detected capacity change from 0 to 256 [ 170.705369][T15973] loop5: detected capacity change from 0 to 164 [ 170.711084][T15975] loop1: detected capacity change from 0 to 64 [ 170.867739][T15935] loop0: detected capacity change from 0 to 40427 [ 170.883787][T15935] F2FS-fs (loop0): build fault injection attr: rate: 771, type: 0x1fffff [ 170.894802][T15935] F2FS-fs (loop0): invalid crc value [ 170.899729][T15935] F2FS-fs (loop0): Found nat_bits in checkpoint [ 170.923276][T15935] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 170.997372][T16001] netlink: 'syz.5.3982': attribute type 10 has an invalid length. [ 171.293684][T16024] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3995'. [ 171.590701][T16053] usb usb1: usbfs: process 16053 (syz.0.4009) did not claim interface 23 before use [ 171.875328][T16080] loop0: detected capacity change from 0 to 16 [ 171.877889][T16080] erofs (device loop0): mounted with root inode @ nid 36. [ 171.892330][T16080] erofs (device loop0): unsupported i_format 2048 of nid 46 [ 172.065059][T16095] IPv6: sit1: Disabled Multicast RS [ 172.192509][T16103] loop1: detected capacity change from 0 to 512 [ 172.205242][T16103] ext4: Invalid gid '0x00000000ffffffff' [ 172.451852][T16125] loop5: detected capacity change from 0 to 512 [ 172.462906][T16125] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 172.495811][T16127] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4047'. [ 172.588993][T16125] EXT4-fs (loop5): 1 truncate cleaned up [ 172.590745][T16125] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.628002][ T9278] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.690103][T16112] loop2: detected capacity change from 0 to 32768 [ 172.899271][T16158] overlayfs: missing 'workdir' [ 173.188352][T16160] loop0: detected capacity change from 0 to 40427 [ 173.198757][T16160] F2FS-fs (loop0): invalid crc value [ 173.202701][T16160] F2FS-fs (loop0): Found nat_bits in checkpoint [ 173.215435][T16160] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 173.362521][T16170] loop3: detected capacity change from 0 to 2048 [ 173.499746][T16174] loop1: detected capacity change from 0 to 2048 [ 173.504031][T16170] Alternate GPT is invalid, using primary GPT. [ 173.505409][T16170] loop3: p1 p2 p3 [ 173.536861][T16170] Mount JFS Failure: -5 [ 173.538104][T16170] jfs_mount failed w/return code = -5 [ 173.809527][T16169] loop5: detected capacity change from 0 to 32768 [ 173.813237][T16169] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.4064 (16169) [ 173.842958][T16200] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4077'. [ 173.844966][T16200] netlink: 'syz.3.4077': attribute type 8 has an invalid length. [ 173.873744][T16169] BTRFS info (device loop5): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 173.875932][T16169] BTRFS info (device loop5): using crc32c (crc32c-arm64) checksum algorithm [ 173.877886][T16169] BTRFS info (device loop5): using free-space-tree [ 174.126477][ T9278] BTRFS info (device loop5): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 174.218016][T16219] loop1: detected capacity change from 0 to 32768 [ 174.391225][T16219] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,fix_errors=ask,norecovery,nojournal_transaction_names,noexcl,reconstruct_alloc,nocow,no_data_io [ 174.416622][T16219] bcachefs (loop1): recovering from clean shutdown, journal seq 3338 [ 174.426390][T16219] bcachefs (loop1): Version upgrade required: [ 174.426390][T16219] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 174.426390][T16219] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.13: inode_has_child_snapshots [ 174.426390][T16219] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 174.485025][T16219] bcachefs (loop1): dropping and reconstructing all alloc info [ 174.494022][T16219] bcachefs (loop1): error validating btree node on loop1 at btree subvolumes level 0/0 [ 174.494041][T16219] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c0bef60d07ceb940 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0 [ 174.494053][T16219] node offset 0/16 bset u64s 0: incorrect max key 18446744073709551360:1023:U32_MAX [ 174.501067][T16219] bcachefs (loop1): flagging btree subvolumes lost data [ 174.559314][T16219] error reading btree root subvolumes l=0: btree_node_read_error, fixing [ 174.561496][T16219] bcachefs (loop1): will run btree node scan [ 174.565924][T16219] bcachefs (loop1): error validating btree node on loop1 at btree snapshots level 0/0 [ 174.565940][T16219] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ebb8d5a9e3463bdb written 16 min_key POS_MIN durability: 1 ptr: 0:32:0 gen 0 [ 174.565952][T16219] node offset 0/16 bset u64s 0: unknown checksum type 9, fixing [ 174.595365][T16219] bcachefs (loop1): error validating btree node on loop1 at btree snapshots level 0/0 [ 174.595384][T16219] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ebb8d5a9e3463bdb written 16 min_key POS_MIN durability: 1 ptr: 0:32:0 gen 0 [ 174.595395][T16219] node offset 8/16: btree node data missing: expected 16 sectors, found 8, fixing [ 174.602605][T16219] bcachefs (loop1): btree_node_read_work: rewriting btree node at btree=snapshots level=0 SPOS_MAX due to error [ 174.609736][T16219] bcachefs (loop1): scan_for_btree_nodes... [ 174.641994][T16257] loop0: detected capacity change from 0 to 16 [ 174.661489][T16257] erofs (device loop0): mounted with root inode @ nid 36. [ 174.718796][T16219] bch2_scan_for_btree_nodes: nodes found after overwrites: [ 174.718815][T16219] extents l=0 seq=1 journal_seq=5 cookie=c6c25c03258c59c5 POS_MIN-SPOS_MAX ptr: 0:27:0 gen 0 [ 174.718826][T16219] inodes l=0 seq=1 journal_seq=5 cookie=7589ab5e0c11cc7a POS_MIN-SPOS_MAX ptr: 0:38:0 gen 0 [ 174.718835][T16219] dirents l=0 seq=1 journal_seq=3458764513820540929 cookie=9aa2895aefce4bdf POS_MIN-SPOS_MAX ptr: 0:41:0 gen 0 [ 174.718846][T16219] xattrs l=0 seq=1 journal_seq=4 cookie=2285c34bed0abe32 POS_MIN-SPOS_MAX ptr: 0:31:0 gen 0 [ 174.718856][T16219] subvolumes l=0 seq=1 journal_seq=1 cookie=c0bef60d07ceb940 POS_MIN-18446744073709551360:1023:U32_MAX ptr: 0:35:0 gen 0 [ 174.718867][T16219] snapshots l=0 seq=1 journal_seq=0 cookie=ebb8d5a9e3463bdb POS_MIN-SPOS_MAX ptr: 0:32:0 gen 0 [ 174.718877][T16219] lru l=0 seq=1 journal_seq=5 cookie=28f61e078e70b95c POS_MIN-SPOS_MAX ptr: 0:28:0 gen 0 [ 174.718887][T16219] deleted_inodes l=0 seq=1 journal_seq=0 cookie=1db8f60c84bb244c POS_MIN-SPOS_MAX ptr: 0:42:0 gen 0 [ 174.718896][T16219] [ 174.780506][T16219] done [ 174.781068][T16219] bcachefs (loop1): check_topology... [ 174.781097][T16219] bcachefs (loop1): btree root subvolumes unreadable, must recover from scan [ 174.790578][T16219] bcachefs (loop1): bch2_get_scanned_nodes(): recovering subvolumes l=0 POS_MIN - SPOS_MAX [ 174.792674][T16219] bcachefs (loop1): bch2_get_scanned_nodes(): recovering u64s 11 type btree_ptr_v2 18446744073709551360:1023:U32_MAX len 0 ver 0: seq c0bef60d07ceb940 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0 [ 174.829410][T16219] btree node with incorrect max_keyat btree subvolumes level 1: [ 174.829439][T16219] parent: u64s 5 type btree_ptr SPOS_MAX len 0 ver 0 [ 174.829448][T16219] child: u64s 11 type btree_ptr_v2 18446744073709551360:1023:U32_MAX len 0 ver 0: seq c0bef60d07ceb940 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing [ 174.873196][T16219] bcachefs (loop1): bch2_get_scanned_nodes(): recovering subvolumes l=0 18446744073709551360:1024:0 - SPOS_MAX [ 174.883427][T16219] btree node with incorrect max_keyat btree subvolumes level 1: [ 174.883443][T16219] parent: u64s 5 type btree_ptr SPOS_MAX len 0 ver 0 [ 174.883452][T16219] child: u64s 11 type btree_ptr_v2 18446744073709551360:1023:U32_MAX len 0 ver 0: seq c0bef60d07ceb940 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing [ 174.893759][T16219] bcachefs (loop1): set_node_max(): u64s 11 type btree_ptr_v2 18446744073709551360:1023:U32_MAX len 0 ver 0: seq c0bef60d07ceb940 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0 -> SPOS_MAX [ 174.897999][T16219] done [ 174.898554][T16219] bcachefs (loop1): accounting_read... done [ 174.974674][T16219] bcachefs (loop1): alloc_read... done [ 174.975952][T16219] bcachefs (loop1): stripes_read... done [ 174.977190][T16219] bcachefs (loop1): snapshots_read... done [ 174.978413][T16219] bcachefs (loop1): check_allocations... [ 175.089377][T16264] loop2: detected capacity change from 0 to 32768 [ 175.159445][T16281] loop3: detected capacity change from 0 to 16 [ 175.171162][T16281] erofs (device loop3): mounted with root inode @ nid 36. [ 175.176269][T16281] CIFS mount error: No usable UNC path provided in device string! [ 175.176269][T16281] [ 175.178297][T16281] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 175.211373][T16283] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4106'. [ 175.242494][T16219] done [ 175.266411][T16219] bcachefs (loop1): going read-write [ 175.369138][T16219] bcachefs (loop1): done starting filesystem [ 175.374863][T16264] ocfs2: Readonly device (7,2) detected. Cluster services will not be used for this mount. Recovery will be skipped. [ 175.377758][T16264] ocfs2: Mounting device (7,2) on (node local, slot 65535) with ordered data mode. [ 175.489235][ T6425] INFO: trying to register non-static key. [ 175.490486][ T6425] The code is fine but needs lockdep annotation, or maybe [ 175.491965][ T6425] you didn't initialize this object before use? [ 175.493262][ T6425] turning off the locking correctness validator. [ 175.494519][ T6425] CPU: 0 UID: 0 PID: 6425 Comm: syz-executor Not tainted 6.13.0-rc2-syzkaller-gfac04efc5c79 #0 [ 175.496598][ T6425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 175.498692][ T6425] Call trace: [ 175.499450][ T6425] show_stack+0x2c/0x3c (C) [ 175.500480][ T6425] dump_stack_lvl+0xe4/0x150 [ 175.501422][ T6425] dump_stack+0x1c/0x28 [ 175.502313][ T6425] assign_lock_key+0x278/0x2b0 [ 175.503312][ T6425] register_lock_class+0x144/0x6b4 [ 175.504388][ T6425] __lock_acquire+0x18c/0x7904 [ 175.505340][ T6425] lock_acquire+0x23c/0x724 [ 175.506294][ T6425] _raw_spin_lock_irqsave+0x5c/0x7c [ 175.507365][ T6425] ocfs2_mark_lockres_freeing+0x164/0x788 [ 175.507476][T16301] delete_channel: no stack [ 175.508675][ T6425] ocfs2_dlm_shutdown+0x44/0x230 [ 175.510823][ T6425] ocfs2_dismount_volume+0x3fc/0x920 [ 175.511927][ T6425] ocfs2_put_super+0xec/0x368 [ 175.512958][ T6425] generic_shutdown_super+0x12c/0x2bc [ 175.514137][ T6425] kill_block_super+0x44/0x90 [ 175.515132][ T6425] deactivate_locked_super+0xc4/0x12c [ 175.516265][ T6425] deactivate_super+0xe0/0x100 [ 175.517189][ T6425] cleanup_mnt+0x34c/0x3dc [ 175.518212][ T6425] __cleanup_mnt+0x20/0x30 [ 175.519141][ T6425] task_work_run+0x230/0x2e0 [ 175.520081][ T6425] do_notify_resume+0x178/0x1f4 [ 175.521144][ T6425] el0_svc+0xac/0x168 [ 175.521912][ T6425] el0t_64_sync_handler+0x84/0x108 [ 175.522993][ T6425] el0t_64_sync+0x198/0x19c [ 175.534099][ T6425] ocfs2: Unmounting device (7,2) on (node local) [ 175.537479][ T6416] bcachefs (loop1): shutting down [ 175.538543][ T6416] bcachefs (loop1): going read-only [ 175.539778][ T6425] Unable to handle kernel paging request at virtual address dfff800000000001 [ 175.556604][ T6425] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 175.559898][ T6416] bcachefs (loop1): finished waiting for writes to stop [ 175.563995][ T6425] Mem abort info: [ 175.564733][ T6425] ESR = 0x0000000096000005 [ 175.565575][ T6425] EC = 0x25: DABT (current EL), IL = 32 bits [ 175.566794][ T6425] SET = 0, FnV = 0 [ 175.567505][ T6425] EA = 0, S1PTW = 0 [ 175.568280][ T6425] FSC = 0x05: level 1 translation fault [ 175.569533][ T6425] Data abort info: [ 175.570264][ T6425] ISV = 0, ISS = 0x00000005, ISS2 = 0x00000000 [ 175.571510][ T6425] CM = 0, WnR = 0, TnD = 0, TagAccess = 0 [ 175.572677][ T6425] GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0 [ 175.574417][ T6425] [dfff800000000001] address between user and kernel address ranges [ 175.576055][ T6425] Internal error: Oops: 0000000096000005 [#1] PREEMPT SMP [ 175.577594][ T6425] Modules linked in: [ 175.578415][ T6425] CPU: 1 UID: 0 PID: 6425 Comm: syz-executor Not tainted 6.13.0-rc2-syzkaller-gfac04efc5c79 #0 [ 175.580665][ T6425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 175.582743][ T6425] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 175.584398][ T6425] pc : ocfs2_evict_inode+0xd40/0x4660 [ 175.585498][ T6425] lr : ocfs2_evict_inode+0xccc/0x4660 [ 175.586560][ T6425] sp : ffff8000a2517080 [ 175.587407][ T6425] x29: ffff8000a25177a0 x28: ffff7000144a2e24 x27: 1fffe0001bc3d66c [ 175.589125][ T6425] x26: ffff0000de1eb360 x25: 1fffe0001bc3d670 x24: ffff8000a2517120 [ 175.590729][ T6425] x23: ffff0000de1eaac0 x22: ffff0000c25c0000 x21: dfff800000000000 [ 175.592277][ T6425] x20: ffff0000c25c0290 x19: 0000000000000008 x18: 1fffe000366c5a7e [ 175.593953][ T6425] x17: ffff80008f97d000 x16: ffff80008326d65c x15: 0000000000000001 [ 175.595509][ T6425] x14: 1fffe0001bc3d616 x13: 0000000000000000 x12: 0000000000000000 [ 175.597133][ T6425] x11: 0000000000000001 x10: 0000000000ff0100 x9 : ffff0000de1eb338 [ 175.598873][ T6425] x8 : 0000000000000001 x7 : 0000000000000000 x6 : ffff8000821d7ca8 [ 175.600668][ T6425] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000804598a0 [ 175.602340][ T6425] x2 : 0000000000000001 x1 : 0000000000000000 x0 : 0000000000000000 [ 175.603909][ T6425] Call trace: [ 175.604735][ T6425] ocfs2_evict_inode+0xd40/0x4660 (P) [ 175.605863][ T6425] ocfs2_evict_inode+0xccc/0x4660 (L) [ 175.607061][ T6425] evict+0x444/0x978 [ 175.607871][ T6425] iput+0x740/0x8e8 [ 175.608775][ T6425] ocfs2_free_slot_info+0x80/0x20c [ 175.609887][ T6425] ocfs2_delete_osb+0x64/0x150 [ 175.610828][ T6425] ocfs2_dismount_volume+0x4d8/0x920 [ 175.611920][ T6425] ocfs2_put_super+0xec/0x368 [ 175.612847][ T6425] generic_shutdown_super+0x12c/0x2bc [ 175.613906][ T6425] kill_block_super+0x44/0x90 [ 175.614949][ T6425] deactivate_locked_super+0xc4/0x12c [ 175.616122][ T6425] deactivate_super+0xe0/0x100 [ 175.617119][ T6425] cleanup_mnt+0x34c/0x3dc [ 175.618038][ T6425] __cleanup_mnt+0x20/0x30 [ 175.619031][ T6425] task_work_run+0x230/0x2e0 [ 175.620010][ T6425] do_notify_resume+0x178/0x1f4 [ 175.621074][ T6425] el0_svc+0xac/0x168 [ 175.621861][ T6425] el0t_64_sync_handler+0x84/0x108 [ 175.622988][ T6425] el0t_64_sync+0x198/0x19c [ 175.623909][ T6425] Code: 97a85737 f9400288 91002113 d343fe68 (38756908) [ 175.625394][ T6425] ---[ end trace 0000000000000000 ]--- [ 176.239926][ T6425] Kernel panic - not syncing: Oops: Fatal exception [ 176.241308][ T6425] SMP: stopping secondary CPUs [ 176.242339][ T6425] Kernel Offset: disabled [ 176.243190][ T6425] CPU features: 0x100,00002070,00800250,82017203 [ 176.244646][ T6425] Memory Limit: none [ 176.840751][ T6425] Rebooting in 86400 seconds..