last executing test programs: 6m31.791213527s ago: executing program 2 (id=380): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a30000000050a01000000000000000000020000080900010073797a30000000000900030073797a32000000000400048014"], 0x58}}, 0x0) 6m31.555797587s ago: executing program 2 (id=384): openat$sequencer2(0xffffff9c, &(0x7f0000000280), 0x40000, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000000)={0x1f}, 0x0, 0x0, 0x0) 6m31.317285912s ago: executing program 2 (id=387): syz_mount_image$xfs(&(0x7f0000009600), &(0x7f0000009640)='./file0\x00', 0x840, &(0x7f00000000c0)={[{@lazytime}, {@uqnoenforce}, {@quota}, {@filestreams}, {@grpquota}, {@allocsize={'allocsize', 0x3d, [0x30, 0x39, 0x6d]}}, {@largeio}]}, 0x4, 0x968d, &(0x7f000001c300)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) lseek(r0, 0x0, 0x4) 6m29.106027407s ago: executing program 2 (id=407): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000059c0)='./bus\x00', 0x1400e, &(0x7f0000000540)={[{@jqfmt_vfsv0}]}, 0x1, 0x439, &(0x7f0000000100)="$eJzs28tvG8UfAPDvrp3219cvpiqPPoBAQVQ8kiYtpQcuIJA4gIQEh3IMSVqVug1qgkSrCgJC5YgqcUcckfgLOMEFASckrnBHlSqUSwsno7V3G8exncY4ccGfj7TtzO5EM1/PTjyzkw1gaI1l/yQRuyPi14gYbWRXFxhr/Hdr+crMn8tXZpKo1d74I6mXu7l8ZaYoWvzcriJTjkg/SeJgm3oXLl0+N12tzl3M8xOL59+dWLh0+Zmz56fPzJ2ZuzB18uTxY5PPnZh6ti9xZnHdPPDB/KH9r7x17bWZU9fe/vHrpIi/JY4+Get28fFarc/VDdaepnRSHmBD2JBSY5jGSH38j0YpVjpvNF7+eKCNAzZVrVar3df58lIN+A9LYtAtAAaj+KLP1r/FsUVTj7vCjRcaC6As7lv50bhSjjQvM9Kyvu2nsYg4tfTXF9kRm/McAgBglW+z+c/T7eZ/aTQ/F/p/vodSiYh7ImJvRJyIiH0RcW9Evez9EfHAButv3SRZO/9Jr/cU2B3K5n/P53tbq+d/xewvKqU8t6ce/0hy+mx17mj+mRyJke1ZfrJLHd+99Mtnna41z/+yI6u/mAvm7bhe3t6nYNu48VHEgXK7+JPbOwFJROyPiAM91nH2ya8Odbq2fvxd9GGfqfZlxBON/l+KlvgLSff9yYn/RXXu6ERxV6z1089XX+9U/z+Kvw+y/t/Z9v4v4t9TSZr3axc2XsfV3z7tuKbp5f6fnV6c3pa8uerc+9OLixcnI7Ylr9bzlebzUy3lplbKZ/EfOdx+/O+NlU/iYERkN/GDEfFQRDyct/2RiHg0Ig53if+HFx97p/f4N1cW/2zX/o+W/l9JbIvWM+0TpXPff7Oq0spG4s/6/3g9dSQ/k/X/enHdSbt6u5sBAADg3yeNiN2RpOO302k6Pt74G/59sTOtzi8sPnV6/r0Ls413BCoxkhZPukabnodO5sv6Ij/Vkj+WPzf+vLSjnh+fma/ODjp4GHK7Ooz/zO+lQbcO2HTe14LhZfzD8DL+YXgZ/zC82oz/HYNoB7D12n3/fziAdgBbr2X82/aDIWL9D8OrbL0PQ8v3PwylhR2x/kvyEhJrEpHeFc2Q6DGRRkS3MoP+zQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANAffwcAAP//KvHjlA==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1ff) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000000000000300000000fe9b0cdefe00000c000400000a0000"]) 6m27.683143843s ago: executing program 2 (id=421): sched_setscheduler(0x0, 0x2, 0x0) syz_mount_image$bcachefs(&(0x7f0000000080), &(0x7f0000000000)='./file1\x00', 0x800000, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1, 0x5945, &(0x7f0000005cc0)="$eJzs3X+QXFW9IPBzu3synZlMMgnwiCCTIZD3ePA0E34V6qtn3tv39BXwqFi88hE2CgOZYDQJqSQIBJTgggsFWGhpKeofaCG1aLSoglUiJfJjE1ZQitWltpBa3EX/cAuRlECWslxna6bv6em503duT09PSMLnU8ncvqdvf8+5556+fb+ne6YDAAAAbwv7bt5+4ILj/umpz4y8ccM//3DzjaG3PF5ejRv0p8tr3qoWcjB1V5aOL7Pj4q+u+/ZvBi//h5/c3/OtN/euP3HDL//xqMsf/vi5e+762mOv9z3455eK4sbxdOrEevJKEkL1R/u/9Nm9Tx87VpaEEMpJ/64QFidLHlucZEIM/TGEsD4TL3rgjTM2jC1vvK17UvmizHbG+9tbNR1nOw9cfVp48e/X3vSzZd/7btful3dNbJJUG8ZTCAsvbXx8Vwhhfvp/TBxtS+OD0+WaEEJPw+POyWnP77/w1Fljy5NabP/KnPXj0+W8dNlbECfevzyzXspsl12PujLLnoL6ZiuvHe1uV2RBZn3iZPTloq5tSV47Y/nidPmDdHnqDOOX4/8klJJQqTd/UzIxRkLDcUtCMr59tb5eqh/bkO5/Zj3JrJcy6+WuzH6N15v2XjlJJpfH7TLl8XRcSctPbHLub3RhTvk70mU1faK+GddD9kZN75Qb9f0aF9u1f5q2HAylhnNQs/L6gU8PxtjujI6OjvYmS6Y8ZrSJeN/etbevKK97fF9/TjuS+5M0fjJe50zj7/zp4gUf/c6tVy3Ni39pKY1faiv+r8575tWLb/3mV3Pj3xnjl9uKf/ojPa+c98TNy3P7Z3/sn0pb8YdfevKOZUdftju3/XfH+NW24q/e80x334FHHs1t/1Dsn/ltxX/hfR/49X3PPfRybvwQ4/e0FX/dnq2f6x44cEpu/Edj//S2N35e23328wMDvx3Mi/9sjN/XVvx7d9313nsW3XZu7vFdE/unv63455/88E0LDjx0Qt65M7m7U6+cAG9PR6XXWLek6+3mmbPVkC98ZbBSuw5ckP7vC1/qXEWZi8+xehZ2LjoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAjDvmtP/6wf/94f5XKul6d3rjhVJtGcvnhZDMDyFs3zG8bcfGLVcMfvzKq7ZtGd40OLxjcGTLjm3XDp75N4PbRrZuGr527N6hd51Re9ySkNSWyQlT6u4eHR0t9U8ui/X9u5N3v7jinP/zuxCGjvnFQCW3/Svv2nzP0U1+ZiSrR9+/+aoLfnHWN9L96k/b1d+kXaOjo6Mhp12/v+hP93xh/29OCWHoL6Zr15Mv/N2PJzVovGAiTqrUHWoN6k56mraj3uq0PbG/Khs2bhoZmr5/xx5fztmPf3/dy3/ccM3n/1Tr32rufrTYv/NXj24qfXnt+f/vy9fXCora9VYd96L+jnsR2xf7r5r298J0vxbm7FclZ79u/tmjz/3ouFtf3xWGKq8tm1p30X51pQOgK3lHS/XGGnqSxZPKq+n28YjHx63csXnryu3X7nzXxs3DV4xcMbLlPavOXHX20Flnn7VyfM9Xdnj/Y/1/2eL+H5zxtOiTu34Qf7Y2noraVdQfY+0q7o/GFuU9/3ou/OwX33PXExfUCorGedy6fj5Jlz1jx3lVaBhvU/uq2X4V9UMIYbBZP7z6+rnh2P+x8aai81DjkWn8mZGsHn16+R++cc7Xl/5treCgnOcbG9Tmeb7e6on2jPdXNT0eo4do/3aHcrpfvU3bterpJ7pu3/e7T9XbN29euGZ4x45tq2o/F6QtXZAc37Rd2dK4X8vGf5ZD2i2hPkybjNcxXaHWvuz5M26e7dXe9L7eZEnT/cqK9+1de/uK8rrH9+X1dHJ/rcb5oa+2TN6Zs+WmzAPL9QY3q/9Qff4VjY+BD379wQ8/+P0zp4yP02s/i/Yrydmv7z137xe/9fn/+P3O7dcH/+6Z/j/8z4+tqBUcLueVeqvT9iSN55XTQyh6/i0Lzfcj9/lXar4/Rc+/bD0T2zePN5hZ7w3ltp6vpz/S88p5T9y8PPf5ur/V5+v1k9bKBc/XQ2X8ZJ9fSWVyO+bu+TVpoCSrR39yy1G7HrthzXG1gqJxXd+62bg+o4X8I2e/fnzx8wNXDv6H/96588a3/+aBS345vPrTtYL2j3tsS2eOezXt32pO/9ZbHfPOxv599+VXblpfKz90r3/TZUH+E08l26/d+YnhTZtGtm1vbb9afT2N9WR7ud3X03h2W1KwX6Up+zV3N1rpr1afb2n7y9kY7T7fekPS1uvCzp8uXvDR79x6Vf+UR6UVXVpK45faiv+r85559eJbv/nV3Ph3xviVtuIPv/TkHcuOvmx3bvy7kzR+ta34q/c809134JFHc+MPxfbPbyv+C+/7wK/ve+6hl3Pjhxi/t73+f2332c8PDPw2N/6zSVrP2DVSCA+8ccaG2noSutLnW2xH16R2hex6klkvZdbLjeul2lxrvYJykkwuj9ul5Sc2tKWZf8spj1dh1aW15ZtxPWRvTF9+qCk1nPublRddpwIAHOni+//xGjS+/z+SXijlzzTAhNnmYUtz4sY8bGI+Z96k+5em8ePj4zzgwLvD0NjyxsHahf5M30eIz4fsPGes55STJsdod56zaP59eWY9tqs2X15pyENTU/OaSmhh/n1qPdPPv2d2v3h+fPCWKc0abJi3yh6/rnTGrNnnHTLtrYxFyBsf2Xmx+HmOgYVhzXh9LY6P7Odo4nHIfo4m1nNc5sTZ7udoZjs+YrOnGR/jTS5+f2Pq8QvT9O/E8WseLXv8ZnC8q2Pbz/X7sx2YN2x6Sjt484Zz+36Yecmc+OkT7FCfN4zlcT8qLc4nfjinvFPzifF0Edu1f5q2HAzmE4EjVcz/42vEWP4/dgH+fzPbFV2HZq8aY7zczwlNeYe3pijvmPo5vZ62XsfX7dn6ue6BA6fkXuc82urnfrZOWusp+NxPUT+uyKwX9mPOBE1Rvpetp6jfs5/L6A19bfX7vbvueu89i247N7ff19ReSIv7/YuT1voK+v0wyBeax5cvvC3yhbmeP3vL8pH0g09zlY/8a075TPORnik36vs17rDLR7oObrsAgMNHzP/r75+l+f//ihuk1xFFeeupmfUYLzdvzbk+yctb/yVdXpPZvjf9jYqZXjeff/LDNy048NAJuXnL3a3mof9p0lp/YR46u7w5N49Y05nPi+fmEfU8a3Z5Ym7763ni7PL03Pj1PH12eXRu/9Tz6NnNA+TGr88DHO55bsF8XaayuNrqfN0Rm0envz47V3n0hTnlM82je6fcqO/XOHk0AMBbK+b/8TIu5v9PZLab7fvsuXlBh67bs38PpB7/2YOVV8513jfXeetc5/VzPS9Ry4tL4XDNi+d6Xmhu58ne9nlxWqm8GACAQ1nM/+en6/n5/+zyk2b5W9ek/ER+3jT+EZafH7HvW+fEP3Tmv+T/80K4MZZ7X7w5+T8AwJEt5v/x1x7j3//7L+l69u/Wy9Nz4svT5enTjZ+W8/TOz7MFnwN4az8fP39ie/MAAAC8FbrGM6Wpv2f/kXSZ/T37vN/Lvzhn+1ZV0svjy3ZsGxm55Kqt64d3jFyy5cr1I9svuXrbxh07RrbUtptt3pibt6R5Y1eopP3RfLts3rYo/XsIi3L+HkJ2+xj2+PEbU/8eQrba+QV/R2Di+LXW3rzjV5pm+2bjI+9458X/t5zto/rxv/xjp1+yYfslG7ds3LFxeNPGnSOTtxvLWntm8L2ZsVtm9H2pmR9TlGb+/Z2daUdpSju60v7I+372JNOOxWlLFud9/0FOu5/6b1/45Mmjf7ovhKFjyu+cVf8lq0f/80Uj/7Jj3y+2jrW/NG3761um7Sr6vtLs9nF/Kpuu3L7jtA1XXrVlfW7bZyLOZ5Tq63M0n5E+/cstzk+syymf6ecUylNuHJpanp8AAGCS+P5/vJ6N7x9+Pr2AiuWt5+mze/84N08fai1Pz34vWVGent0+7m+reXp1lnl6tv6iPL3Z9s3y9Ly8Oy/+v+ZsP1Otj5PZfc4jd5xc2to4yX6fQdE4yW4/03GSzHKcZOsvGifNtm82TvKOe178D+Vsn6f18TC7z+Xkjoc7WxsPf51ZLxoP2e1nOh5KsxwP2fqLxkOz7ZuNh7zjmxf/gpztWzV5fIwNjPFxMXLJ1Vdu+0TDdnP9/RdjXpxV++b2+z/a1Xr75/ZzX3Pf/rn9XNnct392nyvLbf+zs5sJa739c/v9Lu06aPO16YfNij5/VjSPu3bqDoyb6TzuvCk3Dk3mceGtE/P/+HZPzP9vS5edfhuok9dJo4smbh+870nzPWZN43foe8yKrmMO+9fzVNHr+a57J2/v9RwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgyNJdWTq+3Hfz9gMXHPdPT31m5I0b/vmHm2/8q+u+/ZvBy//hJ/f3fOvNvetP3PDLfzzq8oc/fu6eu7722Ot9D/75pcLA/eM/K6emq9UQkleSEKo/2v+lz+59+tixsiSEUE76d4WwOFny2OIkE2HojyGE9fV2Tr7zgTfO2DC2vPG27knlizJBsvsVesuxPY3tDOGawj3iMFRNx9nOA1efFl78+7U3/WzZ977btfvlXRObJNWG8RTCwksbH98VQpif/h8TR9vS+OB0uSaE0NPwuHMK2nVSi+1fmbN+fLqcly57C+LE+5dn1kuZ7bLrUVdm2VNQ32zltaPd7YosyKxnT0azldfOWL44Xf4gXZ46w/jl+D8JpSRU6s3flEyMkdBw3JKQjB/Lan29VD+2Id3/zHqSWS9l1stdmf0arzcdaOUkmVwet8uUx9NxJS0/sfFc3cSFOeXvSJfV9In6ZlwP2Rs1vVNu1PdrXGzX/mnacjCUGs5BzcrrBz49GL1pWW+yZMpjRpuI9+1de/uK8rrH9/XntCO5P0njJ23F3/nTxQs++p1br1qaF//SUhq/1Fb8X533zKsX3/rNr+bGvzPGL7cV//RHel4574mbl+f2z/7YP5W24g+/9OQdy46+bHdu+++O8astx58XJuKv3vNMd9+BRx7Nbf9Q7J/5bbX/hfd94Nf3PffQy7nxQ4zf01b8dXu2fq574MApufEfjf3T2974eW332c8PDPx2MC/+szF+X1vx791113vvWXTbubnHd03sn/624p9/8sM3LTjw0Al5587k7k69cgK8PR2VXmPdkq435Jl9M8kzZ6shX/jKYKV2zbcg/d/XyYoyxupZOIfxAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Mv38+jM/ctH7P7S2koSQ5Gwz2kS8rzxv9erBNuodfunJO5YdfdnuxrKlbcQBAAAAisU8vFQvqYal4epkfji+6fZxjuD4uJZMLs/OIcQ42TmCduOUOhSn3KE4lQ7F6epQnHkditPdoTjVgjjV0Fqc+dPEqYyNihbb0zNte1qP09uhOAs6FKevQ3EWdijOog7F6Z82TuvjcHGH4izpUJyjOhTn6A7FOaZDcf6iQ3GO7VCc7JzyTMdhX7rlcXlxxm+UC+NUknL9jmbz6cem9Zwwy3p6C+rpK3o9brGe+S3Wc1LmcaUZ1lNtsZ6/nGU9SYv1/PUs6ykV1BPH7TXZ9sV64lqL4//aDsXZ2aE413UozvUdivOpDsX5dIfi3DDLOACtivn/RL7XH7orfxt60jNOdhYg5rvLxn9Ofb3LOyHFeO/MlM8ripdN1DPxls20fdkJhEy85ZnyrknxKvV8ZJp41cZ4KzJ3Fu5vdkIh075TM+XdRfGyEwsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMId+fv2ZH7no/R9aG5Iw9q+p0SbifeV5q1cPtlHv3rW3ryive3xfY1l3pY1AAAAAQKGYh3fVS6qhu7IqdCfzJm1XTecBqul6ub+2HFgY1owtk8HS+HpPsnjax1XSx63csXnryu3X7nzXxs3DV4xcMbLlPavOXHX20Flnn7Vyw8ZNI0O1nyF0F8QLIYxPP2y/ducnhjdtGtm2vVaYbf/S9HFL0/UkfdzAu8PQ2PLGtP1LCuorTalv7m4UHz0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOD/s2t3IXJeZRzAzzszOzPdNmalX9PQbIZ8lKhFk7iVVEv3BcFCm4QsBZmtriXYBIubJrRJiXVsA7Y1QRFaAiGSCyOx2Fq86YctYj8IVGo04MYgbdFe6IXSaiUtuZCUkezOmZ2ZncmsY2na9Pe7mHfmnOec5z1zsfB/dwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgPfXVHVkojI6Nj6YhJB0qal1EOey+TQt99H3q89u/2Fh+NTK5rFCro+NAAAAgJ5iDh9ojBRDIZcN2XDF9KeloWkizOZ+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgo2eqOjJRGR0bvzAJIelSU+sgzmXzaVruo+/rbz/+uVeGh//ePFbqYx8AAACgt5jDM42RYiiFZWEguaKlLj4bWNS2vr0u7rN4nnXtzw661S2bZ91V86z7RI+6DfXrrgAAAAAffjH/5xojQ6GQW9A1//fK9bFuSVtdtn7t57cCAAAAwP8n5v9CY6QUCrlSI6/PN+8vbauL63v93z6uX9Flfa//56+vX/2fHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+PKaqIxOV0bHxbBJC0qWm1kGcy+bTtNxH3zXPDf7zpiMPLG0eK+T62AgAAADoKebw2ehdDIXcYBgIF07n/uEbDj755SefHgkhzMT8fD7s2rRjx51rZl5j3eqjRwZ+8NKb35lTt3rm9ZwdEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeM9MVUcmKqNj4xckISRdamodxLlsPk3LffR97Qtf+uujJ555o3ms1Mc+AAAAQG8xh89m/2IohXzIh8umPzVn/TMybeu7PTMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAzh93feueb26anNx8pzfeeONN4825/ssEAAC815aEJNT+R5dvPNd3DQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfBBMVUcmKqNj48UkhKRLTa2DOJfNp2m5j77ps8cKC04990LzWKmPfQAAAIDeYg6fzf7FUAoDYSBcOv2p0zOB6fw/9D7eJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPCBMlUdmaiMjo0vSEJIutTUOohz2Xyalvvo+8juA58/vPD7NzaPFXJ9bAQAAAD0FHN4vjFSDIXcJ0MhXFn/PNm6IMnWr52fC8yu296ybHDe66ot67LzXren7WS5+mlm1hXjfkMz18a68tx15aZ1pdBoX25ZF/a1rFrQ4z4DAAAAnEMx/xcaI0OhkCs05dyftdQPybkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQBdT1ZGJyujYeJKEkHSpqXUQ57L5NC330fee3338oq/9fO/O5rFSH/sAAAAAvcUcPpv9i6EUFoePhcXTuT8MtdbHun9VTh9++N9/WxnCqsuOD+fat/1xfPOb165/vv0lhExrdSaEhfV+SZd+v/3Dw3cvr51+NIRVl2avnNMvnL1f65Zp7anK5vU7toftPb4cAAAAOE/E/D/QGBkKhdwdXfN/TN498n/DdABfePfuX15Sf60n8rYVmaF6v0yXfl9c/vhfVqz9x5tn8v/Z+n3mwNbDl7Q0nBlpk6S10a07Nxy/5lAmnnqmf7atf/xevvLtN/6zZddDp2f6F0OxPr4o16n/3Nc2F6S1ycz+8XXv7q+29s91Of8Dv3/hxK8X7X3nTP+3lww2+l91lvOfvf/gzQ/uu/bAkQ2t/UMI5U7933rnxnD5n26/v/38g20bN3/zza9tkrR2dOnJQ2sPlq5r7Z+09Y/f/y9OPLLvpw997+nYP/5WZOWy+fbPtPV/ec/Fu1+8b+Oi1v6ZLud//pZXhreVv/vH9vPf1rJrrutdzD3/Y1c/ceurm9J726cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADOL1PVkYnK6Nh4Jgkh6VJT6yDOZfNpWu6j7+s3HXvrlr0/+VHzWKmPfQAAAIDeYg6fzf7FUAr5kA+D07n/qcrm9TteOr49DM3MJvVrbnLbXTs+tWXbzjtuO0d3DgAAAMxXzP+5xshQKOSWh4F6/h/dunPD8WsOZWL+z8T8v+X2yc2rQqPu5T0X737xvo2LGs8JQpj+WUDxTN1nZ+tuuP7Y0Mk/f2NFx7o1s3VHl548tPZg6bpYF5rrVofG84nHrn7i1lc3pfc27q+57tNf3zZZfzwR9x28+cF91x44sqFxjvp1sL5vrJvM7B9f9+7+aqzL1q/F+rkBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgLmmqiMTldGx8ZANIelSU+sgzmXzaVruo++65b+6/6JTzyxuHivk+tgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOC/7MCBAAAAAACQ/2sjVFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWG//kKkquI4gJ8zs9uOO7u6q0Fb0bpaUdhDUhBRLxUVoSFCT4aEpfkQBUFEYQ+toZFY0UuQ9SJRQbWFUJCbJFqs0T/ppYcKCqyHQKSFcpGgP+zMuePs3blNXS0oPx8Yzpwz937nd885c2cGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/5S+npFGe2j7AzNrzrvp48fuPv7oLe/et/WSR177fmzjDR/t6X/5xNSmZZu/unHJxn33rJrc9cLBnwff/u1I1+CHm82K1K2FEI/FEGrvTT/7+NQn58yOxRBCNQ6NhzAcFx8cjrmElb+EEDa16pz74lvHr9w8227d2TdnfFEuJH9doV7N6mkamlsv/y+1tM+2zDx0Wfjm+nXbPlv65hu9E0fHTx4Sa237KYSFG9rP7w0hLEiPWdluG8lOTu3aEEJ/23lXd6nrwr9Y/+UF/fNTe1Zq611ysteX5/qV3HH5fqY3hF/XpPkIuWv9JxTVUfa4bgZy/fzN6FQV1ZmND6f2ndSu+Jv51ewRQyWGnlb598aTeyS0rVsMsbGWtVa/0lrbkK4/14+5fiXXr/bmrqvxvmmjVWOcO54dlxvPbsc9aXxZ+726g9sKxs9NbS19UE9k/ZB/0lSf96R1XQ1ZXdN/Usu/odJ2D+o03lr4tBj1NFaPi+ed83sH2WtT6568uLr+/UNDBXXEPTHlx+75Q2Fe/pZPhwfueH3HgyNF+RsqKb9Sqv5vVx/+8fYdLz5fmP9Mll8tlX/F/v5jqz/YvrzD/Cxs5E9n89NTKv/OIx8+tfTsuyY6rXUjf3eWXyuVf93k4b7Bmf0HCtd3ZTY/C0rlf33tzd+9+sXeo4X5IcvvL5W/fvL+p/tGZy4tzD/Q/CjUGzu0xP75aeKqL0dHfxgryv88m//BDvmxa/4r47uueWnRzlWF+3NtNj9Dpeq/9aJ92wZm9l5QdO+Mu0/XNyfAmWlJ+o31ROqX/Z95qtr+Lzw31tP8BhpIj8HT+UY5MfvBAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAHO3AsAAAAACDM37o3iA0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKYAAAD//3cKLp4=") truncate(&(0x7f0000000900)='./file1\x00', 0x8) 6m25.18099478s ago: executing program 2 (id=451): r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x2) 6m9.987785233s ago: executing program 32 (id=451): r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x2) 4m49.102613523s ago: executing program 3 (id=868): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f0000000900)={@val={0x0, 0x800}, @val={0x1, 0x5, 0x6, 0x3, 0x80, 0x88}, @mpls={[], @ipv6=@icmpv6={0x2, 0x6, "a88a5c", 0xe8, 0x3a, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x26}, {[@dstopts={0x2f, 0x9, '\x00', [@padn, @ra={0x5, 0x2, 0x7}, @enc_lim={0x4, 0x1, 0xe}, @calipso={0x7, 0x20, {0x0, 0x6, 0x2, 0xa, [0x5, 0x0, 0xc5]}}, @enc_lim={0x4, 0x1, 0x9}, @jumbo={0xc2, 0x4, 0x9}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, @enc_lim={0x4, 0x1, 0x2}]}, @hopopts={0x3a, 0x0, '\x00', [@padn]}, @dstopts={0x2c, 0x2, '\x00', [@hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}]}], @dest_unreach={0x1, 0x5, 0x0, 0x6, '\x00', {0x4, 0x6, "31ef2d", 0x2, 0x0, 0x1, @private0, @mcast1, [@hopopts={0x11, 0x2, '\x00', [@enc_lim={0x4, 0x1, 0x5}, @ra={0x5, 0x2, 0xd1e2}, @enc_lim={0x4, 0x1, 0x2}, @jumbo={0xc2, 0x4, 0x3}, @enc_lim={0x4, 0x1, 0x9}]}, @dstopts={0x67, 0x0, '\x00', [@ra={0x5, 0x2, 0x7}]}]}}}}}}, 0x11e) 4m48.237759716s ago: executing program 3 (id=872): r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0xfffffffe, @local, 0x6}, 0x1c) setsockopt$inet6_buf(r0, 0x29, 0x32, &(0x7f0000000080)="84c7437aef648929676a3110817c3717f866de00", 0x14) 4m47.793478376s ago: executing program 3 (id=877): r0 = epoll_create1(0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x10000000}) 4m47.359474339s ago: executing program 3 (id=880): syz_mount_image$hfs(&(0x7f0000001600), &(0x7f0000000000)='./file0\x00', 0x1000000, &(0x7f0000005d00)=ANY=[], 0x5, 0x2fb, &(0x7f0000000240)="$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") mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x820028, 0x0) 4m46.875574858s ago: executing program 3 (id=884): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, 'wlan0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) 4m46.175147387s ago: executing program 3 (id=888): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27033000bdfd28000600002fb96dbcf706e10500000086ddffff1144ee162fd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000003c21880b", 0xfdef}], 0x1}, 0x0) 4m45.494784743s ago: executing program 33 (id=888): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27033000bdfd28000600002fb96dbcf706e10500000086ddffff1144ee162fd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000003c21880b", 0xfdef}], 0x1}, 0x0) 4m20.917691092s ago: executing program 1 (id=974): syz_mount_image$udf(&(0x7f0000000500), &(0x7f0000000ac0)='./file0\x00', 0x2004008, &(0x7f0000000080)=ANY=[@ANYRES64=0x0], 0xfe, 0x4f5, &(0x7f00000005c0)="$eJzs3F1oJVcdAPD/mb03e5Mu7e3XdrUFgyIbW7sk2bS7GpGmXWOFoGCagj4oaT7W0HwsSSpN8aMgiqAg+KAFn/vQIrKKoPTJJx98VhH6Ij74KEEKPogoM5n7kextE3tzk83m94Pknjvzn7kzw/2fOefcmQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIOLpz0wMj6Tj3goA4Ch9fvqLw6PO/wBwqjyn/w8AAKdFiiw+ESnG/7adLhbvd9SmllZfennm2mTnxfpTseSZIj7/q42MXh574skrVxuv7738YftAfGH6uYnBZ9ZWbqwvbGwszA/OrC7Nrc0vHHgN3S6/16PFARhcefGl+cXFjcHRS5d3zX65/vezd52vj18de2KuETtzbXJyui2mUn3fn34LPTw66YssfhUpXvvkL9JQRGTRfS7sU3f0Wn9U8vwrdmLm2mSxI8tLs6ub+czUSITK7pzoa+TIEeRiV4YiHs+3tU9G071qZDERKT4U2+ljEXGmkQePFT8M7r+CyhFsZAf5dl6JiGfjBOQs3KbORha/jRQr99Ti0eNLZ+AYVCKL70eKi5/eTo8V7YH8fJo3m6eeH/zc6uJaW2xK5Rn1pPcPjpK2CbexWmQxVLT4t9PHj3tjgCPVH1l8OVL8+U9fL8aVohiXvmf86lefGm4fYXpon/XksZciYvSAffJqY6wxXzY73H0CAAAAAAAAAACAO10tZfHzSPHNh2vF+2ebF8j/7r+FY94+oIdSFv+JFM//cru4Nb79uRRn2p7v0XTS7/3p7fb3155Zu7G1vnT9a5sd5w/UJl7Y2Fyfnes8O/qj1rouurDfcwygC9WUxYcjxcNTN1vfu3rKy+WtwK0v2uufan03a2nP3KLeuHvneTaNewi+MvnR9nLHr+z/cX9cvfxc9ygDQHdSyuIPkeKzL1wozqspBuKWNmgZdzZSvPOPR8q4rC8vNE7T9eJ/bXFpeWE4j/11pOj/XiM2itiBMvb+VuxIHvt0pPjxD3bH3lXGPtCKHc1jvxMpfv9a59gHW7GX89if5u2a6cFG7EBeeLCMPd+KvTS3tjzfswMMt7G8/f9GpFi+ezA1crnMl7KZfaYZ+/o3Wu39V/eu6F3a/N22/+tt014t66G8vlh860JR9xT1VaVzffWXSPGbfz9Sxu3UFX3l/HuL/6366s1I8cbbu2MbDwq5rxU7cuADCydAnv/nIsUft242c6PM/zID2/r/bfn/wbJ2aI0Z9Cb/722bVi8/9+zh7Dqcehtbr7w4u7y8sK6goKDQLBx3zQT0Wt7+fydS/Gz57WZ/t2z/n9t51+r//+tbrfb/+N4V9aj9f1/btPGyN1KtRNQ2V25UH4qobWy98vjSyuz1hesLq2PDI0+OjoyNjV6p9jU6961S18cK7jR5/n83Uqx96c3m+Pzu/n/n8b+BvSvqUf7f3zZtYFd/petdh1Mvz/+pSPGTf95s/o72XuN/jfG+oY/svDYfpt2j/H+gbVq9/Nxzh7PrAAAAAAAAAAAAcGJVUxY/ihR//WElNZ6NcZDrf295YEaPrv873zZt/ojuV+z6oAIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8K6yyGItUrz11Hb6dj7hQsTF9lfgjvW/AAAA//8Qgywy") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="220000005100030005"], 0x0) 4m19.351405155s ago: executing program 1 (id=977): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r0, &(0x7f00000002c0), &(0x7f00000002c0)=""/157}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000003c0)={r0, &(0x7f0000000000), &(0x7f00000002c0)=""/255}, 0x20) 4m18.60089718s ago: executing program 1 (id=981): syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140), 0x5a2, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0x102) 4m17.753236484s ago: executing program 1 (id=983): timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) kexec_load(0x0, 0x1, &(0x7f0000000480)=[{0x0, 0x0, 0x0, 0x1000000}], 0x0) 4m14.402153884s ago: executing program 1 (id=995): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f0000000140)={[{@nossd_spread}, {@nodatacow}, {@enospc_debug}, {@nossd}, {@nodatasum}, {@autodefrag}, {@user_subvol_rm}, {@max_inline={'max_inline', 0x3d, [0x6d, 0x33, 0x78, 0x39, 0x65, 0x36]}}]}, 0x1, 0x50f3, &(0x7f000000a2c0)="$eJzs3U+IVWUfB/Dnzp1x5lVw7isEtsoikGrh4CYioqtMUFF0y8VgBE4tgnThJEi0EMQW/Vt4S4paSK6kFsksjKA2LqQwArehYS7cKAaSi3Yac8957pz7HO+5d0ZtTD8fmTnnOb/zPOe5l7O43+uccwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACEEF74/bNDVfVT16bPnJtp7jywZebyvul1p0OodbbX8vqOrc++8ua2HS9OxA6zL2fLRqPfkFnX81ljVc/GhX69P6+HEMaSAer58pk1pVGLq3vKA1a6fnH30U17mxuPH27Xr146e7L80lkwsdITWCn5eXVh8Vxqdn6PJHt024VTr9Zzimb90xPuX3kRAMCSTLU6i+7H0fwjbre9P60n7WbSbift+AmhXWwsRzbuqn7z3JDWV2iezSwqjPedZ1LP3/9uu5X2T9pJ1FjCPHt3zSPNRL95ziX1lZonAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJ3kkbdHH6qqn7o2febcTHPngS0zl/dNrzsdQqOzvZaVa6vfP9z869utxw78uPmr4xeef6ye94vL0cLO4be48sRkCG8UKhfisBfXhtDqLXSa4cty4a3OynOxAAAAwN3k/s7vkW47i4NjPe1aJ03WOv+iLCxev7j76Ka9zY3HD7frVy+dPbn88Vp9xmvecLxuu7H4UysE4xh/0/EW63HXPaVxqqUjpnn+8fNTf1f1L+X/RnX+j++c/A8AAMDNkP/TcaoNyv/fvfbHJ1X9S/l/Q88hS/k/zjjm/5GwvPwPAAAAd7Lbnf+bpXGqDcr/4y+NfV3Vv5T/p4bL/6PFaceNv8YJ75oMYWrQ1AEAAIA+4v+7L361EPN69s1BmtefevTguarxSvm/OVz+H7ulrwoAAAC4GUe+2P5wVb2U/1vD5f/x2zprAAAAYCne+XDig6p6Kf/PDpf/V+fL/MqHrNNP8a8QDk2GMLGwMpcVfg7tp7sFAAAA4BaJOf3PT3f+ULVfKf/PVd//P97pIF7/33P/v9L1/4VCdte/J90YAAAAgHtR+Xr+eHv87MkF/Z6/P+z1/w/87+CrVccv5f/9w+X/enF5K5//BwAAAMvwX3v+3/bSONUG3f//vo/e/aWqfyn/t4fL/3G5pvjyTtRq2fvz3mQI6xdW8rsJfhMPtyspzI8VCh2tpMe22CMvzI8XCh1zSY/NkyE8uLCyPyn8PxbaSeHK2rxwJCmcjoX8fOgWjiWFE/FM+3xtPt208H0s5BdYzMcrKNZ0L4lIelzt12OhcMMeZ7sHBwAAuKfE8Jxn2bHeZkij7Hxt0A6rB+0wMmiH+qAdRpMd0h37bQ+zvYW4vX1m49Ke/39kuPwf34pV2aLf9f8hXv+fP9ewe/3/bCw0ksJ8LLTSOwa04jGysPtxPEajlfe4sr5bAAAAgLta/F6gvsLzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP5h715j5KruA4CffY734fVCUoXQKNkkNY6beL22gUQtVdaUqhEpzbqhoCqi2NhrsnjBjm1KjEJkbCIaIShtkJIPRRhFUc0HqBWISAoIFymOUHlEVEUBBAqtIQoipSQRaYIUqtl7z+ydc3cefqzx0t9P8s6Z+Z/nnYfn3HvnXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+P/h4Feu+dtm8Ud/e96zL1w8fsWetRe/et15pz4ZwsTM4x1ZuKP/xtvHf373uffseWD1HfcdPv+jvXm5PB4Gqn868zs3xFoPLw7h/o4QutPAisEs0JPfH4z1vW8whFPCbKBWYrI/K5E2HL7fF8K+MBuoVfW9vhAGC4ELn3rk4Zuridv6QlgaQqikbTxfydroSwNn9GaB/jSwtTsL/OqtTC3w3c4sAMcsvhlqL/oDE/UZhucu1+D113PcOvb2SofXFRPDjfP9bO08d6qgN31g4pietlJ1zIvS2+Ogd9sCeLeVtvOtnrbiF6n8G8pbs6FK6Nw0uXnD1dM74yOdYXS0q1FN8/Q8P/P6lzYeSXrBvA5jB4aPy+vwlieW3t21/ILH71ux9OX9H9v7yrF280eFTVpMz7dKyF9zC+Z5jMZ9niyAt1/pW9KIL10hhM2f/73PNIuX5v/Dzef/8eUcbzvrcsda3xzK5ubxkcGYeG0om5sDAADAgrEQ9ppuHX3oE83qK83/R9o7/h8P+eeT+Wy0B0MYn0nsXRLCaTOPZ4G7YnOXLQnhgzOpifrA2iRwMIT3ziSW16pKSiyKJUaSwE+G8sB4EjgUAxNJ4FsxcGsSuCEGDiSBjTFwMAmcGwNhqn4cvz+Uj6PtQF8MrM824oF4FsIvhmJrybZ6rlYVAADAcZLPDnvq7xbOdTjWDHF6eaCvVYZ4BnbDDJWkhnQGW5tWNayhu1UNna1qqI17d/Phl2ruaFVz6TSMjvoMt//ybz4bmijN/8eaz/8rc3Sko3T8P4R1M39j7s48Ml2Lr5+oywAAAAAcg4H/ffGbzeKl+f94e+f/x30iXYXM4bG4G2LLkhDG6gNZtX9YDmRHvQfyAAAAACwEtePxtWPhU/ltdop2Op8u5584wvzxwP/4nPl7Dz64vll/S/P/ifbO/++vv806cSj24mtLQlhUCPwg9rIamDESAz/+ZH0gH/+huAFuilXlJybUqropllgfA2NJYF+jEj+slTitPpA/WbXG99bGMZWXKAQAAADghIu7A+Jx+Xj+/4d+s/qaZuVK8//1R3b+/8w8uHR6//RACCu7Q+hKfxjwWH+2MGAMDHbkiYf6s7q60qqu7w/hnOrA0qpezNf/707XGHyqL6sqBk770P7Xz6gmvtkXwspi4OnP3XlWNbEzCdQa/8u+ED5QHW3a+HcWZY33pI1/fVEI7y8EalVdtiiEamO9aVWPVPLrGKRV/XMlhHcVArWqzq6EsCsAsEDF/0o3FR/csevaLRumpye3z2Mi7sPvC5unpidHN26d3lRp0KdNSZ/rljG6vjymdq9881y+RNFF964bbCdd+53gWLGtfD9+6cTB/H78LtQzM87VPXV316RD/siHy02EwjepRkPunOch9xcrmX0SS/XH/L1hICy6esfk9tEvbti5c/uq7G+72Vdnf+NhpmxbrUq3Vf9cfWvj5dFwtazE0W6rZcVKVu68ctvKHbuuXTF15YbLJy+fvGrV2avHzhxbM/bxM1dWRzWW/W0x1GVzVZ0M9a072xzXcRzq6d2FSk7Ep4aEhMRCS2wdWNb0/+TS/H9b8/l//NSJn/z5+gyNjv8Px8P82eOzh/nXx8C+do//Dzc6ml87MWAkCeyOgd0O8wMAAPDOECf5cW9m3Cv90+XfeblZudL8f3d7v/8/Tuv/15auP7/RMv/LY4mxRuv/p8v819b/391o/f90mf/a+v/73ob1/6+uBZJN8gvr/wMAAO8EJ279/5bL+6cXCChlaLm8f3qBgFKGlsv4t3uBgCNe///5//yr/w5NlOb/t7Y3/7dwPwAAAJw8vvxn1/xOs3hp/r+vvfn/iV//LzQ6/3+kUWCi0cKA1v8DAABggWq0/t/wjf2XNitXmv8faG/+H0+76KzLHWt9cyhb0y6ka9q9NlT7yQAAAAAsDJ1hdLSnzbx1K6OuPfo2n8mXAm2WLnrxTw4f2fn/B9ub/9f9LuOWJ5be3bX8gsffvG/F0pf3f2zvK7PH/wEAAID50+5+CQAAAAAAAAAAAAAA4O334n/sWdMsXvr9f1g383ij3//H6/7F3xe8uy53rLX1+n/5/Qs/fc+umSULHxsK4cPFwJY9W04J+bX5lxUDD1+y/D3VxJ60xIMvnPtSNXFpGvjUilPfqCbOSQLr4yKJ700D8aqKbyxOAnF5xX9PA3F7HEgDvXngq4uzcXSk2+qng9m26ki31bODISwpBGrb6v7BrI2OdIC3JYHaAL+QBuIA/zwPdKa9umcg61UMDMaidwxkvQIA4KQVvwX2hM1T05Nj8St8vD29u/42qluy7PpytR1tNv9cvjTZRfeuG2wn3ZV+F5291nhPqFSHsKr0dbWYpWNmlMenlhab7t0NhtxqtbfOBuVSR7rpehuPqC8b0ejGrdObeloOfE3rLKu7W2ZZVZrsFLN0zmzSNmppoy9tjKjNbdNGl+P9zjA62pXk+oMYHA51Wr0i2v29fnGdv0avgmKeqw7v/VWz+krz/+H25v+V4rjeyC8GsDteWe/vlljmHwAAAObXV9f++hvx32dvfPTpZnlL8/+R9ub/cQ9Wfig429txMF7/f++SEGYurT+cBe6KzV22JIQPzqQmYonsgvrnxxJjWeCuuMNkeSyxfqK+qkUxcCAJ/GQoDxxMAodiIN9LsT/ku3L+fiiEs2ZS6+pLbIslhpPAZ2JgJAmMxsBYElgcA+NJ4NXFeWAiCfxbDISp+m117+J8WwEAAByJfJ7VU383pPO8A92tMnS0ytDfKkNnqwyVVhkajSLe/3bM0JOcvNJRyNST1tqX1FLKEC+Gf8T9KmUIP6zPmRYsNR3PP6idb9BRn+GBT3RXQhOl+f9Ye/P//vrbrPVDcf4/e/2/LPCD2L2vxVPHR2Lgx5+sD+Q7Bg7Fye5Ntaom8hL5pP2mWGI8BkaSwLYYGE8C69flgX3vqQ/kM+1a43trjU/lJQoBAAAAOOHiDoK4mybO/+/Y8ZWBZuVK8//x9ub/sb2BYmM3xFoPLw7h/o7Z3tQCKwazQNyPMRh/Hv++wRBOKezgqJWY7M9K9CYNh+/3Zb9Q702r+l5f9uODeP/Cpx55+OZq4ra+EJYW9r7U2ni+krXRlwbO6M0C/Wlga3cWiHt+aoHvdmYBOGa1vYLxBZWf6lIzPHe5Bq+/d8o1QdPhlfaBzpFvrt9czZfSDtd8n2rNkT1tTfffctyU3h4HvdsW4rtt2Lut+EUq/4by1myoEjo3TW7ecPX0zvhI8ZesJfP0PBd/pdpO+ji8DncffW9bq6QdGEs+PsbmLjf367AjVnfLE0vv7lp+weP3rVj68v6P7X2l7W40EH8o/Mh1/zr4o8LmnW+VkL/mFtznyYTPk4X438CIpy2EsO7Vr9/ULF6a/0+0N//vTm5n/DpuzB1LQvhIYeM+Fjf/Hy/JPgcLgexT8l3lQHbI/b+GGn5yAgAAwPFW291R218wld9mJ4Sn8+Ry/okjzB/3V4zPmb/dfvf/9SVLm8VL8//1zef/i5JuOv7v+D/zxPH/OZ3su6IXpQ/sPqZd0aXqmBeO/8/pZH+3Of4/J8f/Hf+fi+P/LTj+P6eT/WkrfUva5ktXCOHlP3ro2Wbx0vx/W3vzf+v/zb1oX239v/WN1v/b1mj9v93W/wMAAOZVg4Xm0nleafW+UoZ09b5ShpYLBLZcYtD6f0e8/t9Lpz//m9BEaf6/u735f3w5DBRbXyjr/42sa1DVrTGwzcKAAAAAnIwa7SAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg7fXAP/zPpmbxR3973rMvXDx+xZ61F7963XmnPhnC1MzjHVm4o//G28d/fve59+x5YPUd9x0+/6OVvFxPfvu7dbljrW8OhbCv8MhgTLw2VL0zG7jw0/fs6q4mHhsK4cPFwJY9W06pJr41FMKyYuDhS5a/p5rYk5Z48IVzX6omLk0Dn1px6hvVxDl5oCPt7j8uzrrbkXb35sUhLCkEat29YnF9VbU2/jQPdKZt/NNg1kYMDMai3xjM2oiB6VhialEIK7tD6EqrerSSVdWVVvUvlayqrrSqL1dCOCeE0J1W9UJvVlV3OvIne7OqYuC0D+1//YxqYl9vCCuLgac/d+dZ1cQXkkCt8b/oDeED1ZdM2vi3e7LGe9LGb+sJ4f0hhN60xC+7sxK9aYkXu0N4VyFQa/zz3SHsCrwjxA+fuk+0Hbuu3bJhenpy+zwmevO2+sLmqenJ0Y1bpzdVkj410lFIv3X90Y/9ude/tLF6e9G96wbbSXfn5Xpmury6p+7umpO997Ff/cVKZp+PUv0xf28YCIuu3jG5ffSLG3bu3L4q+9tu9tXZ3648mm2rVQtlWy0rVrJy55XbVu7Yde2KqSs3XD55+eRVq85ePXbm2Jqxj5+5sjqqsezv8RjqnSd+qKd3Fyo5ER8AEhISCy3RWffpNnayf5CXvujPdrQnVGY+oEvTimKWjplRHo9Brz3KER/N95SWI1pVmjiUsqyeI8v19VnWlCYTs7X0ZVlmvteVJofFxjpnNmm83xlGR7sabYfh+rvFzfuzY9i8z+Sbrt00AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP/HDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwA8cCAAAAAML8rcPo2QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgEsBAAD//+erI4o=") unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 4m9.082882486s ago: executing program 1 (id=1011): syz_mount_image$bcachefs(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], 0xff, 0x59fd, &(0x7f00000061c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x13d) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) 4m7.377700113s ago: executing program 0 (id=1015): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040bd28050900000000000109022400010000000009040200010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="00017c"], 0x0, 0x0, 0x0, 0x0}, 0x0) 4m3.735282673s ago: executing program 0 (id=1026): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 4m3.255621694s ago: executing program 0 (id=1028): syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x4490, &(0x7f0000002cc0)=ANY=[], 0xfb, 0x27f, &(0x7f0000000480)="$eJzs3T9v00AYx/HfOWkbaFXcPwgJMRUqMaG2LIilCGVgZ2FCQBOkiqhIUMSfKTAj2Nl5C7wARibEjMTGxAvIFnTnC3HSOA5W00vS70dKlNT32M/F5949rqoIwKl1u/rr8/Xf9mGkkkqSbkqRpIpUlnReFyovDg73Dxv12rAdlVyEfRglkeZIm72D+qBQG+civNi+K2sp/TOMR+Wnmh9v3XkZOg+E5a7+ASJpwV+dbnvlxDMbj2boBAIzLbX0Ssuh8wAAhOXn/8jP80t+/R5F0qaf9nvn/ymfQFuhExizrznbU/O/q7Laxp7fc25Tt95zJZzdHnWqxCK5zCsZWT0LTJNXVbpcojOP9xv1a3tPG7VI77TrzXWbrbvnWjJ0O9LZvj26640BtekQxfu+6PowZ/uwk84/1WTteI+Yz3wz3819E+uTav/Wf+W2safJnam470wl+W9l79H1cl6uVUYvV9xBLvojeEN7WVJGRaLOiFpR7w2COC9PF7XaF5X0bjsnam1g1E5O1Hp/VHc0Z0eOm/lg7pkN/dEXVVPr/8h+2psa5cq0bVxLPzKG9qfsWsZuPvFXXfPSwJZR0R6hgPd6pBtafv76zZOHjUb92cy+sFfiBKQxUS86g2BS8pnZF/ZDDnL0zrxTfD/BfjPhBHVP+n8G8reZWWHXXSap/1L1ypZbrNmnuHedvpCObeftPLXH7YzaYNU9n82u4HoYd+thMbuCG7XmunxVujLKEROxz3Py7BYJMlX90APu/wMAAAAAAAAAAAAAAAAAAEyb4/uXg4qyNoXuIwAAAAAAAAAAAAAAAAAAAAAA027ivv/3rpJ3fP8vMHZ/AwAA////DnhI") r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0x105042, 0x1db) writev(r0, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x64000}], 0x1) 4m2.40577455s ago: executing program 0 (id=1030): syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x800, &(0x7f00000000c0)={[{@iocharset={'iocharset', 0x3d, 'cp1251'}}, {@errors_continue}, {@zero_size_dir}, {@utf8}, {@keep_last_dots}, {@dmask={'dmask', 0x3d, 0x6}}, {@keep_last_dots}, {}, {@iocharset={'iocharset', 0x3d, 'cp869'}}, {@errors_continue}, {@keep_last_dots}, {@uid={'uid', 0x3d, 0xee01}}]}, 0x5, 0x1513, &(0x7f0000000380)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x200) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) 4m1.330558476s ago: executing program 0 (id=1035): r0 = syz_open_dev$midi(&(0x7f0000000000), 0x2, 0x20000) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x15) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000000180)) 3m59.975158867s ago: executing program 0 (id=1041): syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000400)='./file0\x00', 0x90, &(0x7f0000003280)=ANY=[@ANYBLOB="0001def4774774366f0b8a20db13db64e85fc9322c3fe018b91ff1291b4f4c56de7e4543f49818e1307d98d09daa1e2a7dbf88003e9401dc73aad0b7dbb5685565c7825ba8340621faeae92abed19c524ab06c4303258d253722e159642af447aeb096c6a26d345d82f2925163331b0e9157441a9c61dd1051d3b970f9ac12f5975cf1ad4e45acef1a54921c492a77bcb1858b68758ed339608b8e43c733219f1f9e0b867840f821e03bc0e8a497c4d5dde436000090a397637dedb2f3"], 0x1, 0xd99, &(0x7f0000006900)="$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") r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x80186e84, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2401}) 3m58.960425067s ago: executing program 34 (id=1041): syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000400)='./file0\x00', 0x90, &(0x7f0000003280)=ANY=[@ANYBLOB="0001def4774774366f0b8a20db13db64e85fc9322c3fe018b91ff1291b4f4c56de7e4543f49818e1307d98d09daa1e2a7dbf88003e9401dc73aad0b7dbb5685565c7825ba8340621faeae92abed19c524ab06c4303258d253722e159642af447aeb096c6a26d345d82f2925163331b0e9157441a9c61dd1051d3b970f9ac12f5975cf1ad4e45acef1a54921c492a77bcb1858b68758ed339608b8e43c733219f1f9e0b867840f821e03bc0e8a497c4d5dde436000090a397637dedb2f3"], 0x1, 0xd99, &(0x7f0000006900)="$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") r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x80186e84, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2401}) 3m53.826530091s ago: executing program 35 (id=1011): syz_mount_image$bcachefs(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], 0xff, 0x59fd, &(0x7f00000061c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x13d) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) 2m28.795201641s ago: executing program 6 (id=1311): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)={0x1c, 0x5a, 0x30d, 0x0, 0x0, "", [@nested={0xfffffe08, 0x0, 0x0, 0x1, [@typed={0x8, 0x4, 0x0, 0x0, @fd}]}]}, 0x1c}], 0x1}, 0x0) 2m28.063785553s ago: executing program 6 (id=1315): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 2m27.461758953s ago: executing program 6 (id=1319): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000080)=0x1, 0x4) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, 0x0, &(0x7f0000000100)) 2m26.958063846s ago: executing program 7 (id=1321): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x8) 2m26.801075255s ago: executing program 6 (id=1323): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x8101}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000380)=""/188, 0xbc}, {&(0x7f0000000840)=""/245, 0xf5}, {&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000000100)=""/74, 0x4a}, {&(0x7f00000006c0)=""/243, 0xf3}], 0x5}, 0x80000000}], 0x4, 0x20, 0x0) 2m26.46718143s ago: executing program 7 (id=1324): r0 = socket$inet(0x2, 0x6, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0x3, &(0x7f0000000000)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) 2m25.906103291s ago: executing program 6 (id=1327): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x2810800, &(0x7f0000000540)={[{@rodir}, {@shortname_winnt}, {@shortname_lower}, {@fat=@showexec}, {@fat=@flush}, {@rodir}, {@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'euc-jp'}}, {@numtail}, {@utf8no}, {@uni_xlate}, {@utf8no}, {@fat=@codepage={'codepage', 0x3d, '775'}}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'koi8-ru'}}, {@uni_xlateno}, {@fat=@dmask={'dmask', 0x3d, 0x4}}]}, 0x25, 0x336, &(0x7f0000004200)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 2m25.831208704s ago: executing program 4 (id=1328): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000540)={[{@nogrpid}, {@jqfmt_vfsv0}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@debug}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40086610, &(0x7f0000000140)={0x1, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m25.547805485s ago: executing program 5 (id=1329): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x2000006, &(0x7f0000000840)={[{@shortname_lower}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'cp860'}}, {@uni_xlate}, {@fat=@codepage={'codepage', 0x3d, '950'}}, {@iocharset={'iocharset', 0x3d, 'macceltic'}}, {@fat=@nocase}, {@shortname_mixed}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'maccenteuro'}}, {@rodir}, {@uni_xlate}, {@shortname_mixed}, {@uni_xlate}, {@shortname_mixed}]}, 0x25, 0x34f, &(0x7f00000004c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000140)=""/146, 0xf4) 2m25.247532313s ago: executing program 7 (id=1330): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000400)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0xfe}) 2m24.839156272s ago: executing program 5 (id=1331): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786cab00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000004000000850000007d00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) flistxattr(r0, 0x0, 0x0) 2m24.794880235s ago: executing program 7 (id=1332): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r0, &(0x7f0000000000)="c5", 0x1, 0x41, &(0x7f00000000c0)={0xa, 0x4e23, 0xffffffff, @local, 0x13}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, 0x0, 0x0) 2m24.538178176s ago: executing program 4 (id=1333): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000180)=0x8c) 2m24.165660408s ago: executing program 5 (id=1334): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x1000004, 0x11, r0, 0x100000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000016c0)={0x8, 0x5, &(0x7f0000001040)=@framed={{}, [@btf_id={0x18, 0x9, 0x3, 0x0, 0x4}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xff7, &(0x7f0000002e00)=""/4087, 0x0, 0xa1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2m23.967205582s ago: executing program 6 (id=1335): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000080), 0x4) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, 0x0, 0x0) 2m23.716697305s ago: executing program 5 (id=1336): r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc2}, &(0x7f0000000080)={0x0, "e789af525bea17a3fd0a026ab7686a988b021a88ea6e8f07daece08d6105e18240b48ff1b48aa3d771fdf06959004bdc254acf09ba6a2c3c034a389a0fb47c77", 0x2a}, 0x48, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0xf111000) keyctl$read(0xb, r0, 0x0, 0x0) 2m23.637381395s ago: executing program 4 (id=1337): r0 = syz_open_dev$loop(&(0x7f0000000000), 0x6, 0x4000) setresuid(0xee00, 0xee01, 0xee01) ioctl$IOC_PR_RESERVE(r0, 0x401070c9, 0x0) 2m23.616540051s ago: executing program 7 (id=1338): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x14, r1, 0x301, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8400) 2m23.351521016s ago: executing program 4 (id=1339): r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x200, 0xa401) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f00000001c0)=@usbdevfs_driver={0x80000001, 0x3, 0x0}) 2m23.285217656s ago: executing program 7 (id=1340): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x7) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0x92) 2m23.271817328s ago: executing program 5 (id=1341): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x7e, 0x43, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001600), 0x1, r0}, 0x38) bpf$BPF_GET_PROG_INFO(0x4, &(0x7f0000000140)={r0, 0xe0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 2m22.920457546s ago: executing program 4 (id=1342): open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000100)={{}, {}, [], {}, [{0x8, 0x4, 0xee01}], {0x10, 0x2}}, 0x2c, 0x0) getxattr(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000380)=@known='system.posix_acl_access\x00', &(0x7f00000005c0)=""/244, 0xf4) 2m22.892113381s ago: executing program 5 (id=1343): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000180)={@in={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x3, 0x0, 0x17, 0x0, "5e3b86774ed89ec669fabcaff49c2eeb8c1c0685564614c85bcf859a08695e2f3f309e196a0c67a7768e058e3008931c0870b2780eb77cbbee013423d43101cb8242bc42b8e0662749302c9ffcd1d119"}, 0xd8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) 2m10.793181243s ago: executing program 4 (id=1344): syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0xa8882) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 1m42.535036511s ago: executing program 36 (id=1335): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000080), 0x4) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, 0x0, 0x0) 2.353962331s ago: executing program 37 (id=1340): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x7) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0x92) 0s ago: executing program 38 (id=1343): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000180)={@in={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x3, 0x0, 0x17, 0x0, "5e3b86774ed89ec669fabcaff49c2eeb8c1c0685564614c85bcf859a08695e2f3f309e196a0c67a7768e058e3008931c0870b2780eb77cbbee013423d43101cb8242bc42b8e0662749302c9ffcd1d119"}, 0xd8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) kernel console output (not intermixed with test programs): ending, handler #208!!! [ 175.990945][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 176.623771][ T5895] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 177.047395][ T7651] loop0: detected capacity change from 0 to 8192 [ 177.642651][ T7661] loop4: detected capacity change from 0 to 512 [ 177.694368][ T62] hsr_slave_0: left promiscuous mode [ 177.769274][ T5895] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 177.788431][ T7661] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 177.811752][ T62] hsr_slave_1: left promiscuous mode [ 177.821908][ T7661] System zones: 0-2, 18-18, 34-35 [ 177.828677][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 177.828780][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 177.869174][ T5895] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.878649][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 177.878694][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 177.916870][ T7661] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.011191][ T7661] ext4 filesystem being mounted at /125/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 178.182315][ T7671] loop0: detected capacity change from 0 to 1024 [ 178.402123][ T5835] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.429290][ T5895] usb 7-1: Product: syz [ 178.456592][ T62] veth1_macvtap: left promiscuous mode [ 178.472196][ T7652] loop1: detected capacity change from 0 to 32768 [ 178.500926][ T62] veth0_macvtap: left promiscuous mode [ 178.522220][ T7674] loop3: detected capacity change from 0 to 8 [ 178.540029][ T11] hfsplus: b-tree write err: -5, ino 4 [ 178.545048][ T5895] usb 7-1: Manufacturer: syz [ 178.550143][ T5895] usb 7-1: SerialNumber: syz [ 178.551265][ T62] veth1_vlan: left promiscuous mode [ 178.570812][ T7652] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.677 (7652) [ 178.619451][ T62] veth0_vlan: left promiscuous mode [ 178.690881][ T7652] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 178.800013][ T7652] BTRFS info (device loop1): using sha256 (sha256-ni) checksum algorithm [ 178.844679][ T5895] usb 7-1: config 0 descriptor?? [ 179.225721][ T7652] BTRFS info (device loop1): rebuilding free space tree [ 179.326842][ T7652] BTRFS info (device loop1): disabling free space tree [ 179.394241][ T7652] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 179.492064][ T7652] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 179.804409][ T5895] usb 7-1: Firmware version (0.0) predates our first public release. [ 179.854044][ T5840] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 180.074097][ T5895] usb 7-1: Please update to version 0.2 or newer [ 180.985565][ T5896] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 181.417179][ T7696] loop3: detected capacity change from 0 to 40427 [ 181.459896][ T7696] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x1fffff [ 181.494300][ T7696] F2FS-fs (loop3): Image doesn't support compression [ 181.556096][ T7696] F2FS-fs (loop3): invalid crc value [ 181.566531][ T7696] F2FS-fs (loop3): Found nat_bits in checkpoint [ 181.586580][ T7697] loop4: detected capacity change from 0 to 40427 [ 181.643711][ T7697] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 181.661244][ T7697] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 181.716670][ T5896] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 181.726590][ T7697] F2FS-fs (loop4): invalid crc value [ 181.783575][ T7697] F2FS-fs (loop4): Found nat_bits in checkpoint [ 181.828310][ T7696] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 181.849279][ T5896] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.050986][ T7697] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 182.068085][ T7697] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 182.108360][ T5896] usb 2-1: config 0 descriptor?? [ 182.120079][ T5837] syz-executor: attempt to access beyond end of device [ 182.120079][ T5837] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 182.121646][ T5837] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 182.295832][ T5896] cp210x 2-1:0.0: cp210x converter detected [ 182.984157][ T5896] usb 2-1: cp210x converter now attached to ttyUSB0 [ 183.169391][ T5896] usb 2-1: USB disconnect, device number 5 [ 183.190451][ T5896] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 183.380714][ T5896] cp210x 2-1:0.0: device disconnected [ 183.747358][ T62] team0 (unregistering): Port device team_slave_1 removed [ 183.961713][ T62] team0 (unregistering): Port device team_slave_0 removed [ 185.107667][ T7719] loop3: detected capacity change from 0 to 32768 [ 185.266469][ T7719] XFS (loop3): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 185.357356][ T7719] XFS (loop3): Ending clean mount [ 185.370916][ T7719] XFS (loop3): Quotacheck needed: Please wait. [ 185.437604][ T7719] XFS (loop3): Quotacheck: Done. [ 185.595282][ T5837] XFS (loop3): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 186.921024][ T5895] usb 7-1: USB disconnect, device number 2 [ 187.256727][ T7741] netlink: 4 bytes leftover after parsing attributes in process `syz.1.701'. [ 188.533395][ T5893] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 188.794152][ T5893] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 188.848541][ T7739] loop0: detected capacity change from 0 to 32768 [ 188.884112][ T5893] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 188.950167][ T7739] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.700 (7739) [ 188.994940][ T5893] usb 4-1: New USB device found, idVendor=056a, idProduct=030c, bcdDevice= 0.00 [ 189.115064][ T5893] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.197284][ T5893] usb 4-1: config 0 descriptor?? [ 189.550142][ T7765] loop4: detected capacity change from 0 to 2048 [ 189.641832][ T7765] NILFS (loop4): invalid segment: Inconsistency found [ 189.680199][ T5893] wacom 0003:056A:030C.0010: hidraw0: USB HID v0.06 Device [HID 056a:030c] on usb-dummy_hcd.3-1/input0 [ 189.704378][ T7765] NILFS (loop4): trying rollback from an earlier position [ 189.793448][ T7765] NILFS (loop4): recovery complete [ 189.841757][ T7771] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 189.866097][ T5893] usb 4-1: USB disconnect, device number 4 [ 191.352637][ T7785] loop5: detected capacity change from 0 to 2048 [ 191.779545][ T7785] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.583467][ T5833] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.132430][ T7806] loop0: detected capacity change from 0 to 4096 [ 193.329533][ T7806] ntfs3(loop0): Different NTFS sector size (2048) and media sector size (512). [ 193.848929][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.856108][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.994518][ T7866] loop1: detected capacity change from 0 to 512 [ 196.038325][ T7866] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 196.516994][ T7866] EXT4-fs (loop1): 1 orphan inode deleted [ 196.522786][ T7866] EXT4-fs (loop1): 1 truncate cleaned up [ 196.530496][ T7874] netlink: 8 bytes leftover after parsing attributes in process `syz.4.746'. [ 196.590130][ T7874] netlink: 12 bytes leftover after parsing attributes in process `syz.4.746'. [ 196.611420][ T7866] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.728503][ T7874] netlink: 'syz.4.746': attribute type 18 has an invalid length. [ 196.849058][ T7866] EXT4-fs error (device loop1): empty_inline_dir:1850: inode #12: block 7: comm syz.1.743: bad entry in directory: directory entry overrun - offset=4, inode=13, rec_len=784, size=60 fake=0 [ 196.911951][ T7872] loop5: detected capacity change from 0 to 4096 [ 197.064957][ T7866] EXT4-fs warning (device loop1): empty_inline_dir:1857: bad inline directory (dir #12) - inode 13, rec_len 784, name_len 5inline size 60 [ 197.455962][ T5840] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.790446][ T7889] loop4: detected capacity change from 0 to 4096 [ 197.953745][ T7902] tmpfs: Bad value for 'mpol' [ 198.636076][ T7914] loop0: detected capacity change from 0 to 2048 [ 198.695317][ T7914] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=18576, location=18576 [ 198.798535][ T7914] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 199.568628][ T7903] loop3: detected capacity change from 0 to 32768 [ 199.575479][ T7921] netlink: 36 bytes leftover after parsing attributes in process `syz.6.762'. [ 199.623110][ T7921] netlink: 16 bytes leftover after parsing attributes in process `syz.6.762'. [ 199.661642][ T7903] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.757 (7903) [ 199.683180][ T7921] netlink: 36 bytes leftover after parsing attributes in process `syz.6.762'. [ 200.022266][ T7903] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 200.117996][ T7872] ntfs3(loop5): Failed to read $UpCase (-4). [ 200.157670][ T7903] BTRFS info (device loop3): using sha256 (sha256-ni) checksum algorithm [ 200.254153][ T7903] BTRFS info (device loop3): using free-space-tree [ 200.352543][ T7889] ntfs3(loop4): failed to convert "0000" to iso8859-4 [ 200.378879][ T7927] loop6: detected capacity change from 0 to 1764 [ 200.486261][ T7941] loop1: detected capacity change from 0 to 64 [ 201.049627][ T5854] Bluetooth: hci1: command 0x0406 tx timeout [ 201.056289][ T5849] Bluetooth: hci5: command 0x0406 tx timeout [ 201.062374][ T5849] Bluetooth: hci3: command 0x0406 tx timeout [ 201.069061][ T5845] Bluetooth: hci0: command 0x0406 tx timeout [ 201.075279][ T5851] Bluetooth: hci4: command 0x0406 tx timeout [ 201.210466][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 201.210492][ T29] audit: type=1800 audit(1739804749.009:106): pid=7903 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.757" name="bus" dev="loop3" ino=263 res=0 errno=0 [ 201.512254][ T7953] sp0: Synchronizing with TNC [ 201.728861][ T7968] loop1: detected capacity change from 0 to 8 [ 201.898305][ T7968] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 202.166296][ T5837] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 203.083152][ T7982] loop5: detected capacity change from 0 to 512 [ 203.207577][ T7982] EXT4-fs: Ignoring removed mblk_io_submit option [ 203.318908][ T7982] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 203.509496][ T7982] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b042c118, mo2=0002] [ 203.533494][ T7982] System zones: 1-12 [ 203.539992][ T7982] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2240: inode #15: comm syz.5.774: corrupted in-inode xattr: e_value size too large [ 203.564069][ T7982] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.774: couldn't read orphan inode 15 (err -117) [ 203.722026][ T7982] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.034597][ T7996] netlink: 64 bytes leftover after parsing attributes in process `syz.0.780'. [ 204.100486][ T7998] netlink: 180 bytes leftover after parsing attributes in process `syz.3.771'. [ 204.123631][ T7996] netlink: 24 bytes leftover after parsing attributes in process `syz.0.780'. [ 204.151455][ T7959] loop4: detected capacity change from 0 to 32768 [ 204.159077][ T7993] loop6: detected capacity change from 0 to 4096 [ 204.212128][ T7996] netlink: 32 bytes leftover after parsing attributes in process `syz.0.780'. [ 204.283891][ T7996] netlink: 48 bytes leftover after parsing attributes in process `syz.0.780'. [ 204.346975][ T7993] NILFS (loop6): invalid segment: Checksum error in segment payload [ 204.364572][ T5833] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.438775][ T7993] NILFS (loop6): trying rollback from an earlier position [ 204.547048][ T8000] netlink: 'syz.1.781': attribute type 2 has an invalid length. [ 204.574594][ T7993] NILFS (loop6): recovery complete [ 204.613772][ T8000] netlink: 16138 bytes leftover after parsing attributes in process `syz.1.781'. [ 204.677886][ T8003] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 204.816081][ T8004] loop3: detected capacity change from 0 to 512 [ 204.863970][ T8004] EXT4-fs: Ignoring removed i_version option [ 204.943689][ T8004] EXT4-fs (loop3): Test dummy encryption mode enabled [ 204.992514][ T8004] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 205.179979][ T8004] EXT4-fs (loop3): 1 truncate cleaned up [ 205.272283][ T8004] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 205.630778][ T8013] loop0: detected capacity change from 0 to 1024 [ 205.783013][ T8013] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.949058][ T5837] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.088533][ T8013] EXT4-fs: Cannot change journaled quota options when quota turned on [ 206.499695][ T5830] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.979502][ T8056] overlayfs: conflicting options: nfs_export=on,index=off [ 208.200048][ T8060] loop0: detected capacity change from 0 to 512 [ 208.395941][ T8060] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 208.492061][ T8060] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 208.579931][ T8019] loop4: detected capacity change from 0 to 32768 [ 208.726812][ T8060] EXT4-fs (loop0): warning: maximal mount count reached, running e2fsck is recommended [ 208.933791][ T8060] EXT4-fs error (device loop0): ext4_orphan_get:1389: comm syz.0.802: inode #15: comm syz.0.802: iget: illegal inode # [ 209.067525][ T8060] EXT4-fs (loop0): Remounting filesystem read-only [ 209.102659][ T8060] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.526288][ T8074] loop3: detected capacity change from 0 to 2048 [ 209.713992][ T8074] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 209.761368][ T5830] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.823449][ T8074] UDF-fs: Scanning with blocksize 512 failed [ 209.984610][ T8074] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 210.362636][ T8085] netlink: 16 bytes leftover after parsing attributes in process `syz.5.811'. [ 210.741222][ T8058] loop1: detected capacity change from 0 to 32768 [ 210.852945][ T8058] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.801 (8058) [ 211.302085][ T1162] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 211.662290][ T5893] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 211.881030][ T6008] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 212.068251][ T5893] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 212.215176][ T1162] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 212.613756][ T8113] loop0: detected capacity change from 0 to 4096 [ 212.803722][ T8113] NILFS (loop0): invalid segment: Checksum error in segment payload [ 212.811786][ T8113] NILFS (loop0): trying rollback from an earlier position [ 213.099082][ T8113] NILFS (loop0): recovery complete [ 213.223345][ T8127] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 213.285359][ T1162] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 215.356448][ T8156] vivid-002: disconnect [ 215.428366][ T8153] vivid-002: reconnect [ 218.525359][ T8204] loop1: detected capacity change from 0 to 16 [ 218.624575][ T8204] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 218.864218][ T29] audit: type=1326 audit(1739804766.649:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8205 comm="syz.6.852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fa518cde9 code=0x7ffc0000 [ 219.053359][ T29] audit: type=1326 audit(1739804766.709:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8205 comm="syz.6.852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fa518cde9 code=0x7ffc0000 [ 219.246579][ T29] audit: type=1326 audit(1739804766.709:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8205 comm="syz.6.852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8fa518cde9 code=0x7ffc0000 [ 219.493578][ T29] audit: type=1326 audit(1739804766.709:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8205 comm="syz.6.852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fa518cde9 code=0x7ffc0000 [ 219.638448][ T8215] loop4: detected capacity change from 0 to 256 [ 219.730466][ T29] audit: type=1326 audit(1739804766.709:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8205 comm="syz.6.852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fa518cde9 code=0x7ffc0000 [ 219.730526][ T29] audit: type=1326 audit(1739804766.709:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8205 comm="syz.6.852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f8fa518cde9 code=0x7ffc0000 [ 219.730571][ T29] audit: type=1326 audit(1739804766.709:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8205 comm="syz.6.852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fa518cde9 code=0x7ffc0000 [ 219.730616][ T29] audit: type=1326 audit(1739804766.709:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8205 comm="syz.6.852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fa518cde9 code=0x7ffc0000 [ 219.831446][ T8215] FAT-fs (loop4): Directory bread(block 64) failed [ 219.831498][ T8215] FAT-fs (loop4): Directory bread(block 65) failed [ 219.831580][ T8215] FAT-fs (loop4): Directory bread(block 66) failed [ 219.831626][ T8215] FAT-fs (loop4): Directory bread(block 67) failed [ 219.831706][ T8215] FAT-fs (loop4): Directory bread(block 68) failed [ 219.831745][ T8215] FAT-fs (loop4): Directory bread(block 69) failed [ 219.831831][ T8215] FAT-fs (loop4): Directory bread(block 70) failed [ 219.831870][ T8215] FAT-fs (loop4): Directory bread(block 71) failed [ 219.831949][ T8215] FAT-fs (loop4): Directory bread(block 72) failed [ 219.831987][ T8215] FAT-fs (loop4): Directory bread(block 73) failed [ 220.331649][ T8181] loop3: detected capacity change from 0 to 32768 [ 220.364217][ T8219] loop1: detected capacity change from 0 to 4096 [ 220.404641][ T8219] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512). [ 220.429940][ T8181] [ 220.429940][ T8181] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 220.429940][ T8181] [ 220.430203][ T8181] read_mapping_page failed! [ 220.430251][ T8181] diRead: diIAGRead returned -5 [ 220.738016][ T8219] ntfs3(loop1): $Secure::$SII is corrupted. [ 220.738103][ T8219] ntfs3(loop1): Failed to initialize $Secure (-22). [ 221.613206][ T8230] loop4: detected capacity change from 0 to 512 [ 221.700741][ T8230] EXT4-fs error (device loop4): ext4_orphan_get:1389: inode #15: comm syz.4.860: iget: bad extended attribute block 1 [ 221.715247][ T8230] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.860: couldn't read orphan inode 15 (err -117) [ 221.718939][ T8230] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 221.809042][ T8230] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters [ 222.124371][ T5835] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.670154][ T8242] loop3: detected capacity change from 0 to 1024 [ 223.167978][ T8257] loop1: detected capacity change from 0 to 512 [ 223.236602][ T8257] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 223.366196][ T8257] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.481379][ T8257] ext4 filesystem being mounted at /133/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 223.605437][ T8267] loop0: detected capacity change from 0 to 16 [ 223.641280][ T8257] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.867: corrupted xattr block 32: bad e_name length [ 223.707687][ T8267] erofs (device loop0): mounted with root inode @ nid 36. [ 223.811315][ T8257] EXT4-fs (loop1): Remounting filesystem read-only [ 223.831715][ T8267] erofs (device loop0): read error -95 @ 43 of nid 36 [ 223.885523][ T29] audit: type=1800 audit(1739804771.669:115): pid=8257 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.867" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 224.082413][ T5840] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.516129][ T8280] loop5: detected capacity change from 0 to 256 [ 224.584634][ T8280] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d) [ 224.992608][ T8288] loop3: detected capacity change from 0 to 64 [ 225.511138][ T8294] loop6: detected capacity change from 0 to 4096 [ 225.556381][ T8297] loop5: detected capacity change from 0 to 512 [ 225.585092][ T8294] ntfs3(loop6): ino=3, Correct links count -> 2. [ 225.601385][ T8297] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 225.671571][ T8297] EXT4-fs (loop5): 1 truncate cleaned up [ 225.687632][ T8297] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 225.776696][ T8297] EXT4-fs error (device loop5): ext4_generic_delete_entry:2687: inode #2: block 13: comm syz.5.885: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 225.882286][ T8297] EXT4-fs (loop5): Remounting filesystem read-only [ 225.928009][ T8297] EXT4-fs warning (device loop5): ext4_rename_delete:3742: inode #2: comm syz.5.885: Deleting old file: nlink 4, error=-117 [ 226.164037][ T5833] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.233577][ T6008] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 226.296416][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.423821][ T6008] usb 1-1: Using ep0 maxpacket: 32 [ 226.468166][ T6008] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 226.500929][ T6008] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.536140][ T6008] usb 1-1: Product: syz [ 226.540405][ T6008] usb 1-1: Manufacturer: syz [ 226.563432][ T6008] usb 1-1: SerialNumber: syz [ 226.580802][ T6008] usb 1-1: config 0 descriptor?? [ 226.621169][ T6008] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 226.844830][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.876483][ T8305] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 226.970473][ T6008] usb 1-1: USB disconnect, device number 8 [ 226.983051][ T7076] usb 1-1: Failed to submit usb control message: -71 [ 227.028888][ T7076] usb 1-1: unable to send the bmi data to the device: -71 [ 227.066890][ T7076] usb 1-1: unable to get target info from device [ 227.097544][ T7076] usb 1-1: could not get target info (-71) [ 227.124761][ T7076] usb 1-1: could not probe fw (-71) [ 227.592993][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.613059][ T8294] ntfs3(loop6): failed to convert "0080" to cp874 [ 227.716624][ T8294] ntfs3(loop6): failed to convert name for inode 1e. [ 227.790685][ T8324] loop4: detected capacity change from 0 to 512 [ 227.835247][ T8294] ntfs3(loop6): ino=1f, mi_enum_attr [ 227.893657][ T8294] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 228.125510][ T8324] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.861: corrupted in-inode xattr: invalid ea_ino [ 228.252426][ T8324] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.861: couldn't read orphan inode 15 (err -117) [ 228.381146][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.395936][ T8324] EXT4-fs (loop4): mounted filesystem 00000007-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 228.679792][ T8340] program syz.6.892 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 228.885453][ T5835] EXT4-fs (loop4): unmounting filesystem 00000007-0000-0000-0000-000000000000. [ 228.983006][ T8343] loop0: detected capacity change from 0 to 256 [ 229.082170][ T5853] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 229.124063][ T5853] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 229.142468][ T5853] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 229.162291][ T8343] exfat: Deprecated parameter 'namecase' [ 229.169924][ T5853] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 229.178143][ T5853] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 229.185654][ T5853] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 229.313087][ T8343] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x2eabf3fa, utbl_chksum : 0xe619d30d) [ 229.487344][ T6008] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 229.637623][ T8352] loop6: detected capacity change from 0 to 2048 [ 229.746187][ T6008] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 229.778348][ T8352] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 229.846523][ T6008] usb 2-1: New USB device found, idVendor=056a, idProduct=032c, bcdDevice= 0.00 [ 229.932193][ T6008] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.950354][ T11] bridge_slave_1: left allmulticast mode [ 229.985905][ T8357] loop5: detected capacity change from 0 to 256 [ 230.014642][ T11] bridge_slave_1: left promiscuous mode [ 230.020452][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.085368][ T6008] usb 2-1: config 0 descriptor?? [ 230.142985][ T8357] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x1782a9fb, utbl_chksum : 0xe619d30d) [ 230.199874][ T11] bridge_slave_0: left allmulticast mode [ 230.247513][ T11] bridge_slave_0: left promiscuous mode [ 230.290052][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.655046][ T6008] wacom 0003:056A:032C.0011: hidraw0: USB HID v0.00 Device [HID 056a:032c] on usb-dummy_hcd.1-1/input0 [ 230.792913][ T8365] loop6: detected capacity change from 0 to 256 [ 230.845587][ T6008] usb 2-1: USB disconnect, device number 6 [ 230.884235][ T8365] exfat: Deprecated parameter 'utf8' [ 230.965235][ T8365] exfat: Deprecated parameter 'utf8' [ 231.066550][ T8365] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 231.293526][ T5847] Bluetooth: hci2: command tx timeout [ 231.723361][ T6008] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 231.943330][ T6008] usb 5-1: Using ep0 maxpacket: 32 [ 232.002937][ T6008] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 232.091131][ T6008] usb 5-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00 [ 232.160138][ T6008] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.262765][ T6008] usb 5-1: config 0 descriptor?? [ 232.411714][ T8391] loop6: detected capacity change from 0 to 64 [ 232.754974][ T6008] lenovo 0003:17EF:60EE.0012: unknown main item tag 0x0 [ 232.805701][ T6008] lenovo 0003:17EF:60EE.0012: unknown main item tag 0x0 [ 232.895619][ T6008] lenovo 0003:17EF:60EE.0012: unknown main item tag 0x0 [ 232.902628][ T6008] lenovo 0003:17EF:60EE.0012: unknown main item tag 0x0 [ 233.007062][ T6008] lenovo 0003:17EF:60EE.0012: unknown main item tag 0x0 [ 233.149953][ T6008] lenovo 0003:17EF:60EE.0012: hidraw0: USB HID v0.00 Device [HID 17ef:60ee] on usb-dummy_hcd.4-1/input0 [ 233.181831][ T29] audit: type=1326 audit(1739804780.969:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8397 comm="syz.6.912" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8fa518cde9 code=0x0 [ 233.323686][ T6008] usb 5-1: USB disconnect, device number 5 [ 233.363689][ T5847] Bluetooth: hci2: command tx timeout [ 234.043457][ T8406] netlink: 16 bytes leftover after parsing attributes in process `syz.0.915'. [ 235.017407][ T8392] loop1: detected capacity change from 0 to 32768 [ 235.167158][ T8392] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 235.390804][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 235.445196][ T5847] Bluetooth: hci2: command tx timeout [ 235.468667][ T8392] XFS (loop1): Ending clean mount [ 235.486820][ T8392] XFS (loop1): Quotacheck needed: Please wait. [ 235.569586][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 235.632166][ T11] bond0 (unregistering): Released all slaves [ 235.714876][ T8392] XFS (loop1): Quotacheck: Done. [ 236.033109][ T5840] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 237.182072][ T8446] loop4: detected capacity change from 0 to 1024 [ 237.357053][ T8446] hfsplus: bad catalog entry type [ 237.526933][ T5847] Bluetooth: hci2: command tx timeout [ 237.951922][ T8458] IPVS: sync thread started: state = BACKUP, mcast_ifn = team_slave_1, syncid = 4, id = 0 [ 238.640952][ T8342] chnl_net:caif_netlink_parms(): no params data found [ 238.978957][ T25] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 239.190710][ T25] usb 7-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 239.224580][ T25] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.289685][ T25] usb 7-1: config 0 descriptor?? [ 239.443785][ T11] hsr_slave_0: left promiscuous mode [ 239.553511][ T11] hsr_slave_1: left promiscuous mode [ 239.584795][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 239.657953][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 239.691981][ T8447] loop5: detected capacity change from 0 to 32768 [ 239.732378][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 239.799214][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 239.837587][ T8447] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 239.853587][ T25] sony 0003:1345:3008.0013: hiddev0,hidraw0: USB HID v82.00 Device [HID 1345:3008] on usb-dummy_hcd.6-1/input0 [ 239.929945][ T25] sony 0003:1345:3008.0013: failed to claim input [ 240.025810][ T8447] workqueue: Failed to create a rescuer kthread for wq "xfs-log/loop5": -EINTR [ 240.026365][ T8447] XFS (loop5): log mount failed [ 240.064064][ T25] usb 7-1: USB disconnect, device number 3 [ 240.298447][ T11] veth1_macvtap: left promiscuous mode [ 240.383366][ T11] veth0_macvtap: left promiscuous mode [ 240.438393][ T11] veth1_vlan: left promiscuous mode [ 240.493910][ T11] veth0_vlan: left promiscuous mode [ 241.686792][ T8478] loop1: detected capacity change from 0 to 32768 [ 241.835711][ T8478] jfs_rmdir: dtDelete returned -2 [ 241.843467][ T5853] Bluetooth: hci0: command 0x0406 tx timeout [ 241.850691][ T5847] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 241.903284][ T8508] mmap: syz.6.946 (8508) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 242.934090][ T8500] loop4: detected capacity change from 0 to 32768 [ 242.986104][ T8500] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.943 (8500) [ 243.193411][ T25] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 243.211308][ T8500] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 243.273928][ T8500] BTRFS info (device loop4): using crc32c (crc32c-x86_64) checksum algorithm [ 243.304994][ T8500] BTRFS info (device loop4): using free-space-tree [ 243.395058][ T25] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 243.409906][ T25] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 243.430695][ T25] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 243.443202][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.472546][ T8514] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 243.534395][ T8514] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 243.603000][ T25] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 243.921436][ T8506] loop5: detected capacity change from 0 to 32768 [ 243.979897][ T8506] XFS: ikeep mount option is deprecated. [ 244.023981][ T25] usb 2-1: USB disconnect, device number 7 [ 244.068571][ T8506] XFS: ikeep mount option is deprecated. [ 244.250754][ T5835] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 244.398739][ T8506] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 244.900655][ T5846] udevd[5846]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 245.067519][ T8506] XFS (loop5): Ending clean mount [ 245.110273][ T8506] XFS (loop5): Quotacheck needed: Please wait. [ 245.454772][ T8506] XFS (loop5): Quotacheck: Done. [ 245.628291][ T5833] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 245.818217][ T29] audit: type=1326 audit(1739804793.609:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8545 comm="syz.1.953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6067b8cde9 code=0x7fc00000 [ 246.018153][ T29] audit: type=1326 audit(1739804793.609:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8545 comm="syz.1.953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f6067b8cde9 code=0x7fc00000 [ 246.173621][ T29] audit: type=1326 audit(1739804793.609:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8545 comm="syz.1.953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6067b8cde9 code=0x7fc00000 [ 246.235534][ T8558] loop4: detected capacity change from 0 to 256 [ 246.395076][ T29] audit: type=1326 audit(1739804793.609:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8545 comm="syz.1.953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6067b8cde9 code=0x7fc00000 [ 246.465728][ T29] audit: type=1326 audit(1739804793.609:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8545 comm="syz.1.953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6067b8cde9 code=0x7fc00000 [ 246.533933][ T29] audit: type=1326 audit(1739804793.609:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8545 comm="syz.1.953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6067b8cde9 code=0x7fc00000 [ 246.979936][ T11] team0 (unregistering): Port device team_slave_1 removed [ 247.251467][ T8568] loop6: detected capacity change from 0 to 256 [ 247.352630][ T8568] FAT-fs (loop6): Directory bread(block 64) failed [ 247.376032][ T11] team0 (unregistering): Port device team_slave_0 removed [ 247.403811][ T8568] FAT-fs (loop6): Directory bread(block 65) failed [ 247.441191][ T8568] FAT-fs (loop6): Directory bread(block 66) failed [ 247.458415][ T8568] FAT-fs (loop6): Directory bread(block 67) failed [ 247.470953][ T8568] FAT-fs (loop6): Directory bread(block 68) failed [ 247.510011][ T8568] FAT-fs (loop6): Directory bread(block 69) failed [ 247.527685][ T8568] FAT-fs (loop6): Directory bread(block 70) failed [ 247.561315][ T8568] FAT-fs (loop6): Directory bread(block 71) failed [ 247.572926][ T8568] FAT-fs (loop6): Directory bread(block 72) failed [ 247.614095][ T8568] FAT-fs (loop6): Directory bread(block 73) failed [ 247.759490][ T29] audit: type=1800 audit(1739804795.549:123): pid=8568 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.962" name="file0" dev="loop6" ino=61 res=0 errno=0 [ 247.790724][ T8568] syz.6.962: attempt to access beyond end of device [ 247.790724][ T8568] loop6: rw=2051, sector=1160, nr_sectors = 32 limit=256 [ 250.508962][ T8579] loop4: detected capacity change from 0 to 32768 [ 250.565584][ T8579] XFS (loop4): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 250.603663][ T8574] tipc: Enabling of bearer rejected, failed to enable media [ 250.887046][ T8579] XFS (loop4): Ending clean mount [ 250.952193][ T6008] XFS (loop4): Metadata CRC error detected at xfs_inobt_read_verify+0x41/0xd0, xfs_finobt block 0x20 [ 251.020726][ T8342] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.039429][ T6008] XFS (loop4): Unmount and run xfs_repair [ 251.099327][ T8342] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.111101][ T6008] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 251.146660][ T8342] bridge_slave_0: entered allmulticast mode [ 251.170835][ T6008] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff FIB3............ [ 251.193805][ T8342] bridge_slave_0: entered promiscuous mode [ 251.200104][ T6008] 00000010: 00 00 00 00 00 00 00 20 00 00 00 01 00 00 00 40 ....... .......@ [ 251.225444][ T8342] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.270476][ T6008] 00000020: 9f 1c ad 42 11 bd 4e 12 8f 0b f0 78 76 b8 1d 9a ...B..N....xv... [ 251.320008][ T8342] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.365145][ T6008] 00000030: 00 00 00 00 8a d2 18 46 00 00 16 80 00 00 40 37 .......F......@7 [ 251.386517][ T8342] bridge_slave_1: entered allmulticast mode [ 251.404765][ T8342] bridge_slave_1: entered promiscuous mode [ 251.471894][ T6008] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00 ................ [ 251.493503][ T5893] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 251.543308][ T6008] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 09 00 00 ................ [ 251.616798][ T6008] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 251.642018][ T8606] loop1: detected capacity change from 0 to 256 [ 251.712449][ T6008] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 251.753132][ T5893] usb 7-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 251.781125][ T8606] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 251.793925][ T8579] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x20 len 8 error 74 [ 251.836615][ T8342] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 251.864111][ T5893] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 251.904982][ T8606] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 251.915865][ T8579] XFS (loop4): Failed to initialize disk quotas, err -117. [ 251.958039][ T5893] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 252.007838][ T8342] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 252.017374][ T8606] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 252.061338][ T5893] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 252.074449][ T8606] UDF-fs: Scanning with blocksize 512 failed [ 252.112168][ T1162] XFS (loop4): Metadata CRC error detected at xfs_inobt_read_verify+0x41/0xd0, xfs_finobt block 0x20 [ 252.149088][ T5893] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 252.165745][ T8606] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 252.191477][ T1162] XFS (loop4): Unmount and run xfs_repair [ 252.204768][ T8610] loop5: detected capacity change from 0 to 4096 [ 252.211803][ T8609] loop0: detected capacity change from 0 to 4096 [ 252.228411][ T1162] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 252.260043][ T8606] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 252.271477][ T8610] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 252.281779][ T8609] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 252.321389][ T5893] usb 7-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 252.348832][ T1162] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff FIB3............ [ 252.396439][ T5893] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.427898][ T1162] 00000010: 00 00 00 00 00 00 00 20 00 00 00 01 00 00 00 40 ....... .......@ [ 252.477101][ T8342] team0: Port device team_slave_0 added [ 252.517016][ T5893] usb 7-1: Product: syz [ 252.542593][ T1162] 00000020: 9f 1c ad 42 11 bd 4e 12 8f 0b f0 78 76 b8 1d 9a ...B..N....xv... [ 252.567060][ T8609] ntfs3(loop0): ino=19, mi_enum_attr [ 252.572951][ T5893] usb 7-1: Manufacturer: syz [ 252.623747][ T5893] usb 7-1: SerialNumber: syz [ 252.629426][ T8342] team0: Port device team_slave_1 added [ 252.637791][ T8609] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 252.657950][ T1162] 00000030: 00 00 00 00 8a d2 18 46 00 00 16 80 00 00 40 37 .......F......@7 [ 252.687062][ T5893] usb 7-1: config 0 descriptor?? [ 252.701490][ T8610] ntfs3(loop5): ino=19, mi_enum_attr [ 252.747466][ T1162] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00 ................ [ 252.774353][ T8610] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 252.832147][ T1162] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 09 00 00 ................ [ 252.844398][ T8610] ntfs3(loop5): ino=18, mi_enum_attr [ 252.966686][ T1162] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 253.063308][ T1162] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 253.125252][ T5893] rc_core: IR keymap rc-imon-rsc not found [ 253.141455][ T8579] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x20 len 8 error 74 [ 253.171047][ T5893] Registered IR keymap rc-empty [ 253.226546][ T5893] rc rc0: iMON Station as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 253.304282][ T8342] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 253.311280][ T8342] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.354726][ T5893] input: iMON Station as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input33 [ 253.511798][ T5835] XFS (loop4): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 253.535843][ T5893] imon_raw 7-1:0.0: probe with driver imon_raw failed with error -90 [ 253.644777][ T5835] XFS (loop4): Uncorrected metadata errors detected; please run xfs_repair. [ 253.654161][ T8342] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 253.779285][ T5893] usb 7-1: USB disconnect, device number 4 [ 253.832973][ T8342] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 253.903389][ T8342] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.233507][ T8342] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 254.336514][ T8626] sp0: Synchronizing with TNC [ 254.431370][ T8624] [U] è [ 255.258126][ T8342] hsr_slave_0: entered promiscuous mode [ 255.309348][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.323493][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.355744][ T8342] hsr_slave_1: entered promiscuous mode [ 255.400232][ T8342] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 255.461020][ T8342] Cannot create hsr debugfs directory [ 255.506922][ T8643] pim6reg: entered allmulticast mode [ 255.532605][ T8650] loop6: detected capacity change from 0 to 512 [ 255.751182][ T8650] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.875499][ T8650] ext4 filesystem being mounted at /66/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 256.799437][ T8632] loop5: detected capacity change from 0 to 32768 [ 257.016495][ T8342] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 257.122776][ T8342] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 257.274673][ T8342] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 257.346019][ T8342] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 257.819027][ T8342] 8021q: adding VLAN 0 to HW filter on device bond0 [ 257.850877][ T7298] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.961835][ T8342] 8021q: adding VLAN 0 to HW filter on device team0 [ 258.015877][ T7076] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.023096][ T7076] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.118987][ T7076] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.126299][ T7076] bridge0: port 2(bridge_slave_1) entered forwarding state [ 259.348787][ T8699] [U] [ 259.352040][ T8699] [U] [ 259.354771][ T8699] [U] [ 259.357495][ T8699] [U] [ 259.411091][ T8699] [U] [ 259.413881][ T8699] [U] [ 259.416621][ T8699] [U] [ 259.419349][ T8699] [U] [ 259.486502][ T8699] [U] [ 259.489286][ T8699] [U] [ 259.492010][ T8699] [U] [ 259.494736][ T8699] [U] [ 259.588602][ T8699] [U] [ 259.591403][ T8699] [U] [ 259.594131][ T8699] [U] [ 259.596860][ T8699] [U] [ 259.617849][ T8342] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 259.680315][ T8699] [U] [ 259.683093][ T8699] [U] [ 259.685822][ T8699] [U] [ 259.688558][ T8699] [U] [ 259.840800][ T8699] [U] [ 259.843583][ T8699] [U] [ 259.846324][ T8699] [U] [ 259.849054][ T8699] [U] [ 259.963434][ T8699] [U] [ 259.966224][ T8699] [U] [ 259.968939][ T8699] [U] [ 259.971698][ T8699] [U] [ 260.065814][ T8699] [U] [ 260.068609][ T8699] [U] [ 260.071346][ T8699] [U] [ 260.074099][ T8699] [U] [ 260.313793][ T8699] [U] [ 260.469443][ T8683] loop1: detected capacity change from 0 to 32768 [ 260.551085][ T8683] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.995 (8683) [ 260.837008][ T8683] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 260.913662][ T8683] BTRFS info (device loop1): using crc32c (crc32c-x86_64) checksum algorithm [ 260.983188][ T8683] BTRFS info (device loop1): using free-space-tree [ 261.052144][ T8730] loop0: detected capacity change from 0 to 64 [ 261.063916][ T8683] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 261.097296][ T8683] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 261.210129][ T8683] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 261.336766][ T8683] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 261.417581][ T8683] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 261.545223][ T8683] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 261.616100][ T8683] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 261.753958][ T8683] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 261.844494][ T8683] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 261.942536][ T8683] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 262.027756][ T8683] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 262.154040][ T8683] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 262.178333][ T8752] loop0: detected capacity change from 0 to 256 [ 262.351018][ T8342] veth0_vlan: entered promiscuous mode [ 262.507046][ T8342] veth1_vlan: entered promiscuous mode [ 262.543096][ T8683] BTRFS error (device loop1): open_ctree failed: -12 [ 262.596744][ T8752] FAT-fs (loop0): Directory bread(block 64) failed [ 262.645307][ T8752] FAT-fs (loop0): Directory bread(block 65) failed [ 262.652028][ T8752] FAT-fs (loop0): Directory bread(block 66) failed [ 262.712490][ T8342] veth0_macvtap: entered promiscuous mode [ 262.745182][ T8752] FAT-fs (loop0): Directory bread(block 67) failed [ 262.812330][ T8342] veth1_macvtap: entered promiscuous mode [ 262.823527][ T8752] FAT-fs (loop0): Directory bread(block 68) failed [ 262.876267][ T8752] FAT-fs (loop0): Directory bread(block 69) failed [ 262.925393][ T8752] FAT-fs (loop0): Directory bread(block 70) failed [ 262.999803][ T8752] FAT-fs (loop0): Directory bread(block 71) failed [ 263.090118][ T8752] FAT-fs (loop0): Directory bread(block 72) failed [ 263.140903][ T8342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.160790][ T8752] FAT-fs (loop0): Directory bread(block 73) failed [ 263.233540][ T8342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.309538][ T8342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.391648][ T8342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.479023][ T8342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.558028][ T8342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.613264][ T8342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.660825][ T8342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.722042][ T8342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.754190][ T5897] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 263.793708][ T8342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.858142][ T8342] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 263.974366][ T8342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.066671][ T8342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.173328][ T8342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.251102][ T8342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.285005][ T8775] loop0: detected capacity change from 0 to 16 [ 264.328331][ T8775] erofs (device loop0): mounted with root inode @ nid 36. [ 264.357732][ T8342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.452103][ T29] audit: type=1800 audit(1739804812.249:124): pid=8775 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1013" name="file1" dev="loop0" ino=86 res=0 errno=0 [ 264.472967][ T8342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.549441][ T8342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.633413][ T8342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.681866][ T8342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.745352][ T8342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.789382][ T8342] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 264.981340][ T5897] usb 7-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 265.007765][ T5897] usb 7-1: config 0 interface 0 has no altsetting 0 [ 265.072949][ T5897] usb 7-1: New USB device found, idVendor=2179, idProduct=0077, bcdDevice= 0.00 [ 265.146720][ T8342] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.162441][ T5897] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.204993][ T8342] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.210548][ T5897] usb 7-1: config 0 descriptor?? [ 265.265225][ T8342] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.315825][ T8342] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.697465][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.798601][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.858837][ T5897] uclogic 0003:2179:0077.0014: interface is invalid, ignoring [ 265.882576][ T5895] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 266.016839][ T7641] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.089040][ T7641] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.263566][ T8766] loop4: detected capacity change from 0 to 40427 [ 266.326198][ T969] usb 7-1: USB disconnect, device number 5 [ 266.834332][ T8779] loop1: detected capacity change from 0 to 32768 [ 267.316844][ T8779] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 267.506905][ T8779] bcachefs (loop1): initializing new filesystem [ 267.554976][ T8779] bcachefs (loop1): bch2_journal_reclaim_start(): error creating journal reclaim thread EINTR [ 267.626468][ T8779] bcachefs (loop1): going read-write [ 267.671369][ T8779] bcachefs (loop1): bch2_journal_reclaim_start(): error creating journal reclaim thread EINTR [ 267.763507][ T8779] bcachefs (loop1): going read-only [ 267.791063][ T8779] bcachefs (loop1): finished waiting for writes to stop [ 267.835456][ T8822] loop4: detected capacity change from 0 to 16 [ 267.857330][ T8779] bcachefs (loop1): flushing journal and stopping allocators, journal seq 0 [ 267.925189][ T8822] erofs (device loop4): mounted with root inode @ nid 36. [ 267.932999][ T8779] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 0 [ 268.041094][ T8822] erofs (device loop4): read error -117 @ 72 of nid 36 [ 268.090879][ T8779] bcachefs (loop1): clean shutdown complete, journal seq 1 [ 268.139212][ T8779] bcachefs (loop1): done going read-only, filesystem not clean [ 268.201436][ T8827] loop7: detected capacity change from 0 to 164 [ 268.220569][ T8779] bcachefs (loop1): bch2_fs_initialize(): error EINTR [ 268.273448][ T8779] bcachefs (loop1): bch2_fs_start(): error starting filesystem EINTR [ 268.355244][ T8779] bcachefs (loop1): shutting down [ 268.362629][ T8827] rock: directory entry would overflow storage [ 268.453382][ T8827] rock: sig=0x4f50, size=4, remaining=3 [ 268.485017][ T8779] bcachefs (loop1): shutdown complete [ 268.514380][ T8827] isofs: Unable to find the ".." directory for NFS. [ 269.080103][ T8797] loop5: detected capacity change from 0 to 32768 [ 269.202127][ T8842] loop0: detected capacity change from 0 to 64 [ 269.266379][ T8797] JBD2: Ignoring recovery information on journal [ 269.356417][ T29] audit: type=1800 audit(1739804817.159:125): pid=8842 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1028" name="file1" dev="loop0" ino=18 res=0 errno=0 [ 269.480232][ T8842] syz.0.1028: attempt to access beyond end of device [ 269.480232][ T8842] loop0: rw=34817, sector=14, nr_sectors = 65 limit=64 [ 269.531503][ T8797] ocfs2: Mounting device (7,5) on (node local, slot 0) with writeback data mode. [ 269.900030][ T5833] ocfs2: Unmounting device (7,5) on (node local) [ 269.950766][ T5895] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 269.967566][ T5895] usb 1-1: can't read configurations, error -71 [ 270.168519][ T8852] loop0: detected capacity change from 0 to 256 [ 270.239237][ T8852] exfat: Deprecated parameter 'utf8' [ 270.373125][ T8852] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x7e9973f9, utbl_chksum : 0xe619d30d) [ 270.957678][ T969] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 271.259053][ T5892] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 271.320625][ T969] usb 7-1: Using ep0 maxpacket: 16 [ 271.429750][ T969] usb 7-1: device descriptor read/all, error -71 [ 271.814941][ T5892] usb 5-1: Using ep0 maxpacket: 16 [ 271.942009][ T5892] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 271.942056][ T5892] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 271.942086][ T5892] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 271.942110][ T5892] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 271.942136][ T5892] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 272.130081][ T5892] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 272.130123][ T5892] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 272.130151][ T5892] usb 5-1: Manufacturer: syz [ 272.166173][ T5892] usb 5-1: config 0 descriptor?? [ 272.195452][ T5830] syz-executor (5830) used greatest stack depth: 13272 bytes left [ 272.736366][ T5853] Bluetooth: hci6: command 0x0405 tx timeout [ 272.778999][ T5892] rc_core: IR keymap rc-hauppauge not found [ 272.779027][ T5892] Registered IR keymap rc-empty [ 272.781269][ T5892] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 272.811490][ T5892] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 272.866574][ T62] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.226054][ T5892] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 273.227269][ T5892] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input34 [ 273.331755][ T5892] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 273.376386][ T5892] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 273.506014][ T8894] loop5: detected capacity change from 0 to 22 [ 273.527390][ T8894] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 273.562993][ T8894] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 273.736139][ T5892] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 273.783091][ T5892] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 273.806505][ T5892] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 273.839073][ T5892] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 273.872237][ T5892] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 273.906560][ T5892] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 273.947555][ T5892] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 274.248804][ T5892] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 274.381718][ T8899] loop6: detected capacity change from 0 to 2048 [ 274.433651][ T8899] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024) [ 274.616965][ T8905] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 275.030376][ T8907] loop7: detected capacity change from 0 to 512 [ 275.110527][ T8907] EXT4-fs: Ignoring removed oldalloc option [ 275.261116][ T8907] EXT4-fs error (device loop7): ext4_xattr_inode_iget:436: comm syz.7.1048: Parent and EA inode have the same ino 15 [ 275.270496][ T5892] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 275.295728][ T62] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.324047][ T5892] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 275.328198][ T8911] loop6: detected capacity change from 0 to 64 [ 275.396487][ T8907] EXT4-fs error (device loop7): ext4_xattr_inode_iget:436: comm syz.7.1048: Parent and EA inode have the same ino 15 [ 275.497899][ T29] audit: type=1800 audit(1739804823.299:126): pid=8911 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1049" name="file1" dev="loop6" ino=18 res=0 errno=0 [ 275.542643][ T8911] syz.6.1049: attempt to access beyond end of device [ 275.542643][ T8911] loop6: rw=34817, sector=14, nr_sectors = 65 limit=64 [ 275.603933][ T8907] EXT4-fs (loop7): 1 orphan inode deleted [ 275.657216][ T5853] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 275.682790][ T5853] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 275.695710][ T5853] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 275.714730][ T5853] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 275.738662][ T5853] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 275.748482][ T5853] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 275.816028][ T8907] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 275.923800][ T5892] usb 5-1: USB disconnect, device number 6 [ 276.051684][ T62] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.552428][ T8342] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.004614][ T62] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.199564][ T8904] loop5: detected capacity change from 0 to 32768 [ 277.798204][ T8904] workqueue: Failed to create a rescuer kthread for wq "ocfs2_wq": -EINTR [ 277.798379][ T8904] (syz.5.1047,8904,1):ocfs2_initialize_super:2226 ERROR: status = -12 [ 277.846262][ T5853] Bluetooth: hci0: command tx timeout [ 277.947082][ T8904] (syz.5.1047,8904,1):ocfs2_fill_super:1177 ERROR: status = -12 [ 278.579755][ T8912] chnl_net:caif_netlink_parms(): no params data found [ 279.333540][ T62] bridge_slave_1: left allmulticast mode [ 279.368453][ T62] bridge_slave_1: left promiscuous mode [ 279.409518][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.511200][ T62] bridge_slave_0: left allmulticast mode [ 279.549071][ T62] bridge_slave_0: left promiscuous mode [ 279.620442][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.809184][ T8959] loop6: detected capacity change from 0 to 164 [ 279.913215][ T8959] Unable to read rock-ridge attributes [ 279.923667][ T5853] Bluetooth: hci0: command tx timeout [ 280.002649][ T8964] loop4: detected capacity change from 0 to 1024 [ 280.033122][ T8959] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 280.084451][ T8964] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 280.481563][ T5847] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 280.494785][ T5847] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 280.504182][ T5847] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 280.516224][ T5847] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 280.532057][ T5847] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 280.539748][ T5847] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 280.658391][ T8964] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4115: comm syz.4.1064: Allocating blocks 497-513 which overlap fs metadata [ 280.674768][ T8973] netlink: 188 bytes leftover after parsing attributes in process `syz.6.1066'. [ 280.731133][ T8973] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1066'. [ 280.788858][ T8964] EXT4-fs (loop4): Remounting filesystem read-only [ 280.829370][ T8963] EXT4-fs (loop4): pa ffff8880781723a0: logic 256, phys. 385, len 8 [ 281.021351][ T5835] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.485578][ T8779] bcachefs: bch2_fs_get_tree() error: EINTR [ 282.003338][ T5847] Bluetooth: hci0: command tx timeout [ 282.416860][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 282.451719][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 282.472915][ T62] bond0 (unregistering): Released all slaves [ 282.494970][ T1162] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 282.644945][ T5847] Bluetooth: hci4: command tx timeout [ 282.673375][ T1162] usb 5-1: Using ep0 maxpacket: 8 [ 282.695752][ T1162] usb 5-1: config 6 has an invalid interface number: 2 but max is 0 [ 282.713369][ T1162] usb 5-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 282.733330][ T1162] usb 5-1: config 6 has no interface number 0 [ 282.740315][ T1162] usb 5-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xAA, changing to 0x8A [ 282.830291][ T1162] usb 5-1: config 6 interface 2 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 282.848684][ T1162] usb 5-1: config 6 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 282.872919][ T1162] usb 5-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 282.910262][ T1162] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.950266][ T1162] usb 5-1: Product: syz [ 283.003770][ T1162] usb 5-1: Manufacturer: syz [ 283.008439][ T1162] usb 5-1: SerialNumber: syz [ 283.092129][ T1162] hso 5-1:6.2: Failed to find INT IN ep [ 283.227167][ T8990] loop6: detected capacity change from 0 to 512 [ 283.291245][ T8990] EXT4-fs: Ignoring removed i_version option [ 283.333361][ T8990] EXT4-fs: Ignoring removed mblk_io_submit option [ 283.396541][ T6008] usb 5-1: USB disconnect, device number 7 [ 283.626815][ T8912] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.653079][ T8997] loop5: detected capacity change from 0 to 256 [ 283.673663][ T8912] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.681029][ T8912] bridge_slave_0: entered allmulticast mode [ 283.735876][ T8990] EXT4-fs (loop6): Test dummy encryption mode enabled [ 283.797827][ T8912] bridge_slave_0: entered promiscuous mode [ 283.822089][ T8990] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c018, mo2=0103] [ 283.875937][ T8990] EXT4-fs error (device loop6): ext4_orphan_get:1389: comm syz.6.1071: inode #13: comm syz.6.1071: iget: illegal inode # [ 283.917511][ T29] audit: type=1800 audit(1739804831.709:127): pid=8997 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1075" name="file1" dev="loop5" ino=88 res=0 errno=0 [ 283.993147][ T8912] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.018312][ T8990] EXT4-fs error (device loop6): ext4_orphan_get:1394: comm syz.6.1071: couldn't read orphan inode 13 (err -117) [ 284.057376][ T8912] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.078217][ T8990] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 284.094443][ T5847] Bluetooth: hci0: command tx timeout [ 284.100217][ T8912] bridge_slave_1: entered allmulticast mode [ 284.134226][ T8912] bridge_slave_1: entered promiscuous mode [ 284.268722][ T8990] EXT4-fs error (device loop6): ext4_resize_begin:60: comm syz.6.1071: resize_inode disabled but reserved GDT blocks non-zero [ 284.618632][ T7298] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.726389][ T5847] Bluetooth: hci4: command tx timeout [ 285.003668][ T1162] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 285.204980][ T1162] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 285.216284][ T62] hsr_slave_0: left promiscuous mode [ 285.243624][ T1162] usb 6-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 285.273734][ T62] hsr_slave_1: left promiscuous mode [ 285.287055][ T1162] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.308582][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 285.366973][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 285.377659][ T1162] usb 6-1: config 0 descriptor?? [ 285.383678][ T9010] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 285.480927][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 285.539649][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 285.557533][ T9020] loop7: detected capacity change from 0 to 128 [ 285.623978][ T9020] FAT-fs (loop7): Directory bread(block 11554) failed [ 285.710086][ T9020] FAT-fs (loop7): Directory bread(block 11555) failed [ 285.710111][ T62] veth1_macvtap: left promiscuous mode [ 285.710177][ T62] veth0_macvtap: left promiscuous mode [ 285.798851][ T62] veth1_vlan: left promiscuous mode [ 285.804646][ T9020] FAT-fs (loop7): Directory bread(block 11556) failed [ 285.824905][ T62] veth0_vlan: left promiscuous mode [ 285.851281][ T9020] FAT-fs (loop7): Directory bread(block 11557) failed [ 285.873751][ T9020] FAT-fs (loop7): Directory bread(block 11558) failed [ 285.887540][ T1162] uclogic 0003:5543:0064.0015: unknown main item tag 0x0 [ 285.913597][ T1162] uclogic 0003:5543:0064.0015: unknown main item tag 0x0 [ 285.920897][ T9020] FAT-fs (loop7): Directory bread(block 11559) failed [ 285.958875][ T1162] uclogic 0003:5543:0064.0015: unknown main item tag 0x0 [ 285.968844][ T9020] FAT-fs (loop7): Directory bread(block 11560) failed [ 286.023594][ T1162] uclogic 0003:5543:0064.0015: unknown main item tag 0x0 [ 286.051342][ T1162] uclogic 0003:5543:0064.0015: unknown main item tag 0x0 [ 286.075187][ T9020] FAT-fs (loop7): Directory bread(block 11561) failed [ 286.097170][ T1162] uclogic 0003:5543:0064.0015: No inputs registered, leaving [ 286.148955][ T9020] FAT-fs (loop7): Directory bread(block 11562) failed [ 286.163931][ T1162] uclogic 0003:5543:0064.0015: hidraw0: USB HID v1.01 Device [HID 5543:0064] on usb-dummy_hcd.5-1/input0 [ 286.208421][ T9020] FAT-fs (loop7): Directory bread(block 11563) failed [ 286.250935][ T1162] usb 6-1: USB disconnect, device number 8 [ 286.805042][ T5847] Bluetooth: hci4: command tx timeout [ 287.054434][ T5847] Bluetooth: hci6: ACL packet for unknown connection handle 200 [ 287.096532][ T9018] loop4: detected capacity change from 0 to 32768 [ 287.119312][ T9018] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1083 (9018) [ 287.356516][ T9018] BTRFS info (device loop4): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 287.418546][ T9018] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 287.463771][ T9018] BTRFS info (device loop4): using free-space-tree [ 288.386342][ T5835] BTRFS info (device loop4): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 288.903324][ T5847] Bluetooth: hci4: command tx timeout [ 289.375235][ T9031] loop7: detected capacity change from 0 to 32768 [ 289.419373][ T9031] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.1090 (9031) [ 289.470164][ T1162] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 289.675535][ T1162] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 289.706392][ T1162] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 289.780459][ T1162] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 289.851314][ T1162] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 289.891962][ T1162] usb 6-1: SerialNumber: syz [ 290.142677][ T1162] usb 6-1: 0:2 : does not exist [ 290.181680][ T1162] usb 6-1: unit 4 not found! [ 290.273824][ T1162] usb 6-1: USB disconnect, device number 9 [ 290.586555][ T5848] udevd[5848]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 290.716210][ T9062] loop6: detected capacity change from 0 to 32768 [ 290.828220][ T9062] [ 290.828220][ T9062] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 290.828220][ T9062] [ 291.090773][ T7076] ERROR: (device loop6): diWrite: ixpxd invalid [ 291.090773][ T7076] [ 291.162404][ T7076] ERROR: (device loop6): txCommit: [ 291.162404][ T7076] [ 291.199875][ T7076] jfs_write_inode: jfs_commit_inode failed! [ 291.223853][ T7298] [ 291.223853][ T7298] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 291.223853][ T7298] [ 291.281729][ T7298] [ 291.281729][ T7298] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 291.281729][ T7298] [ 291.550434][ T9068] loop4: detected capacity change from 0 to 32768 [ 292.368950][ T9031] BTRFS error (device loop7): open_ctree failed: -4 [ 292.578433][ T9075] loop6: detected capacity change from 0 to 2048 [ 292.783690][ T9078] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 293.066874][ T9070] loop5: detected capacity change from 0 to 40427 [ 293.126665][ T9070] F2FS-fs (loop5): build fault injection attr: rate: 690, type: 0x1fffff [ 293.153576][ T5935] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 293.207573][ T9070] F2FS-fs (loop5): invalid crc value [ 293.294859][ T9070] F2FS-fs (loop5): Found nat_bits in checkpoint [ 293.374084][ T5935] usb 8-1: Using ep0 maxpacket: 16 [ 293.414837][ T5935] usb 8-1: config 0 has an invalid interface number: 32 but max is 0 [ 293.433479][ T5935] usb 8-1: config 0 has no interface number 0 [ 293.457351][ T5935] usb 8-1: config 0 interface 32 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 293.574044][ T5935] usb 8-1: config 0 interface 32 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 293.669680][ T5935] usb 8-1: New USB device found, idVendor=28bd, idProduct=0934, bcdDevice= 0.00 [ 293.724174][ T5935] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.773420][ T9070] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 293.781874][ T5935] usb 8-1: config 0 descriptor?? [ 294.079540][ T9070] F2FS-fs (loop5): Stopped filesystem due to reason: 0 [ 294.355981][ T5935] uclogic 0003:28BD:0934.0016: interface is invalid, ignoring [ 294.591088][ T6008] usb 8-1: USB disconnect, device number 2 [ 295.380210][ T62] team0 (unregistering): Port device team_slave_1 removed [ 295.942579][ T62] team0 (unregistering): Port device team_slave_0 removed [ 295.976955][ T9103] loop5: detected capacity change from 0 to 8 [ 297.632158][ T9111] loop5: detected capacity change from 0 to 32768 [ 297.694023][ T9111] ocfs2: Slot 0 on device (7,5) was already allocated to this node! [ 297.742873][ T9111] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 297.804966][ T9123] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1122'. [ 297.973969][ T5833] ocfs2: Unmounting device (7,5) on (node local) [ 299.209252][ T8912] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 299.264566][ T9126] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1124'. [ 299.395993][ T8912] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 299.936356][ T8912] team0: Port device team_slave_0 added [ 300.020919][ T8912] team0: Port device team_slave_1 added [ 300.804869][ T8912] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 300.860225][ T9161] loop5: detected capacity change from 0 to 512 [ 300.873386][ T8912] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.015343][ T9161] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 301.036298][ T8912] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 301.090898][ T9161] ext4 filesystem being mounted at /196/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 301.166173][ T8912] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 301.173198][ T8912] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.396546][ T8912] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 301.695002][ T5833] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.859547][ T8912] hsr_slave_0: entered promiscuous mode [ 301.913808][ T8912] hsr_slave_1: entered promiscuous mode [ 302.222742][ T9150] loop4: detected capacity change from 0 to 32768 [ 302.421042][ T9150] JBD2: Ignoring recovery information on journal [ 302.785880][ T9150] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 303.053458][ T8970] chnl_net:caif_netlink_parms(): no params data found [ 303.092196][ T29] audit: type=1800 audit(1739804850.889:128): pid=9150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1132" name="file1" dev="loop4" ino=17056 res=0 errno=0 [ 303.258978][ T9158] loop6: detected capacity change from 0 to 32768 [ 303.306219][ T9158] btrfs: Deprecated parameter 'usebackuproot' [ 303.369648][ T9158] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 303.461210][ T62] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.482237][ T5835] ocfs2: Unmounting device (7,4) on (node local) [ 303.576908][ T9158] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.1136 (9158) [ 303.670471][ T9158] BTRFS info (device loop6): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 303.833936][ T9158] BTRFS info (device loop6): using sha256 (sha256-ni) checksum algorithm [ 303.894517][ T9158] BTRFS info (device loop6): disk space caching is enabled [ 303.973370][ T9158] BTRFS warning (device loop6): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 304.074824][ T9158] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 304.075118][ T9158] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 304.110395][ T9158] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 304.183634][ T9158] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 304.236433][ T9158] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 304.296575][ T9158] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 304.347417][ T9158] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 304.404438][ T9158] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 304.456627][ T9158] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 304.528060][ T9158] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 304.611423][ T9158] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 304.677216][ T9158] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 305.914850][ T5935] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 305.983528][ T9213] loop5: detected capacity change from 0 to 40427 [ 305.995241][ T9213] F2FS-fs (loop5): build fault injection attr: rate: 771, type: 0x1fffff [ 306.034558][ T9213] F2FS-fs (loop5): invalid crc value [ 306.071661][ T9213] F2FS-fs (loop5): Found nat_bits in checkpoint [ 306.113667][ T5935] usb 5-1: Using ep0 maxpacket: 16 [ 306.131860][ T5935] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 306.165714][ T5935] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 306.196265][ T5935] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 306.237677][ T5935] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 306.257799][ T9213] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 306.277558][ T5935] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.308478][ T5935] usb 5-1: config 0 descriptor?? [ 306.446228][ T5833] syz-executor: attempt to access beyond end of device [ 306.446228][ T5833] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 306.470286][ T9223] loop7: detected capacity change from 0 to 40427 [ 306.489346][ T5833] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 306.505846][ T9223] F2FS-fs (loop7): build fault injection attr: rate: 690, type: 0x1fffff [ 306.549988][ T9223] F2FS-fs (loop7): Image doesn't support compression [ 306.581272][ T9223] F2FS-fs (loop7): Image doesn't support compression [ 306.621330][ T9223] F2FS-fs (loop7): invalid crc value [ 306.639305][ T9223] F2FS-fs (loop7): Found nat_bits in checkpoint [ 306.776785][ T5935] microsoft 0003:045E:07DA.0017: ignoring exceeding usage max [ 306.805543][ T9223] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 306.815861][ T5935] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 306.823114][ T5935] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 306.841971][ T5935] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 306.862210][ T5935] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 306.879435][ T5935] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 306.897263][ T5935] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 306.914653][ T5935] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 306.931828][ T5935] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 306.984753][ T8342] F2FS-fs (loop7): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_page_write+0x4e6/0x1f20 [ 307.001121][ T5935] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0017/input/input35 [ 307.013425][ T8342] F2FS-fs (loop7): invalid blkaddr: 1026, type: 10, run fsck to fix. [ 307.107469][ T5935] microsoft 0003:045E:07DA.0017: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 307.175767][ T5935] usb 5-1: USB disconnect, device number 8 [ 307.947925][ T9240] loop4: detected capacity change from 0 to 2048 [ 307.980260][ T9240] NILFS (loop4): invalid segment: Checksum error in segment payload [ 308.002995][ T9240] NILFS (loop4): trying rollback from an earlier position [ 308.039771][ T9240] NILFS (loop4): norecovery option specified, skipping roll-forward recovery [ 308.062208][ T9242] loop5: detected capacity change from 0 to 512 [ 308.082721][ T9242] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 308.132727][ T9242] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a000c019, mo2=0002] [ 308.154577][ T9242] System zones: 1-12 [ 308.172880][ T9242] EXT4-fs (loop5): 1 truncate cleaned up [ 308.190084][ T9242] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 308.440146][ T5833] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.497790][ T62] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.521671][ T9158] BTRFS error (device loop6): open_ctree failed: -12 [ 309.585133][ T62] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.161013][ T62] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.274285][ T8970] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.312876][ T8970] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.333640][ T8970] bridge_slave_0: entered allmulticast mode [ 310.366440][ T8970] bridge_slave_0: entered promiscuous mode [ 310.505240][ T8970] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.512406][ T8970] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.604301][ T8970] bridge_slave_1: entered allmulticast mode [ 310.646882][ T8970] bridge_slave_1: entered promiscuous mode [ 310.974810][ T8912] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 311.127113][ T9278] loop7: detected capacity change from 0 to 512 [ 311.228235][ T8912] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 311.304474][ T9278] EXT4-fs (loop7): orphan cleanup on readonly fs [ 311.328815][ T9278] EXT4-fs warning (device loop7): ext4_enable_quotas:7145: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 311.397144][ T9260] loop6: detected capacity change from 0 to 32768 [ 311.453471][ T9278] EXT4-fs (loop7): Cannot turn on quotas: error -22 [ 311.481518][ T9278] EXT4-fs error (device loop7): ext4_ext_check_inode:524: inode #13: comm syz.7.1169: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 311.591601][ T8970] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 311.662468][ T9278] EXT4-fs error (device loop7): ext4_orphan_get:1394: comm syz.7.1169: couldn't read orphan inode 13 (err -117) [ 311.704765][ T8912] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 311.722743][ T9260] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 311.764921][ T9278] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 311.813731][ T8912] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 311.967780][ T8970] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 312.110572][ T9278] EXT4-fs (loop7): warning: mounting fs with errors, running e2fsck is recommended [ 312.256207][ T9292] loop4: detected capacity change from 0 to 1024 [ 312.273097][ T9278] EXT4-fs warning (device loop7): read_mmp_block:115: Error -117 while reading MMP block 2 [ 312.332890][ T7298] ocfs2: Unmounting device (7,6) on (node local) [ 312.365181][ T8970] team0: Port device team_slave_0 added [ 312.478584][ T8970] team0: Port device team_slave_1 added [ 312.515029][ T9297] 9pnet_fd: Insufficient options for proto=fd [ 312.744647][ T8342] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.912600][ T8993] hfsplus: b-tree write err: -5, ino 4 [ 313.327637][ T8970] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 313.327663][ T8970] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 313.327697][ T8970] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 313.544767][ T8970] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 313.544793][ T8970] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 313.544828][ T8970] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 313.772188][ T62] bridge_slave_1: left allmulticast mode [ 313.772224][ T62] bridge_slave_1: left promiscuous mode [ 313.772401][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.833978][ T62] bridge_slave_0: left allmulticast mode [ 313.834013][ T62] bridge_slave_0: left promiscuous mode [ 313.834197][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.012159][ T9324] loop4: detected capacity change from 0 to 1024 [ 315.189110][ T9324] hfsplus: bad catalog entry type [ 315.452651][ T8993] hfsplus: b-tree write err: -5, ino 4 [ 315.718838][ T9330] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1187'. [ 316.305772][ T25] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 316.544154][ T25] usb 8-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 316.557499][ T25] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.616776][ T25] usb 8-1: config 0 descriptor?? [ 316.636612][ T25] cp210x 8-1:0.0: cp210x converter detected [ 316.748140][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.755037][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.176923][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 317.234169][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 317.267368][ T62] bond0 (unregistering): Released all slaves [ 317.336747][ T25] cp210x 8-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 317.372087][ T25] cp210x 8-1:0.0: GPIO initialisation failed: -71 [ 317.441766][ T25] usb 8-1: cp210x converter now attached to ttyUSB0 [ 317.462935][ T25] usb 8-1: USB disconnect, device number 3 [ 317.484212][ T25] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 317.539352][ T8970] hsr_slave_0: entered promiscuous mode [ 317.546382][ T25] cp210x 8-1:0.0: device disconnected [ 317.602030][ T8970] hsr_slave_1: entered promiscuous mode [ 317.630360][ T62] IPVS: stopping backup sync thread 8458 ... [ 317.659588][ T8970] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 317.719609][ T8970] Cannot create hsr debugfs directory [ 319.106252][ T9] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 319.661862][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 319.815015][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 319.870849][ T8912] 8021q: adding VLAN 0 to HW filter on device bond0 [ 319.888242][ T9] usb 6-1: config 128 has an invalid interface number: 127 but max is 3 [ 320.038849][ T9375] loop4: detected capacity change from 0 to 22 [ 320.071959][ T9375] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 320.164447][ T9375] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 320.177785][ T62] hsr_slave_0: left promiscuous mode [ 320.230774][ T9] usb 6-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 320.286460][ T62] hsr_slave_1: left promiscuous mode [ 320.289749][ T9] usb 6-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 320.311799][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 320.366656][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 320.456638][ T9] usb 6-1: config 128 has no interface number 0 [ 320.457427][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 320.462959][ T9] usb 6-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid maxpacket 1828, setting to 1024 [ 320.463000][ T9] usb 6-1: config 128 interface 127 has no altsetting 0 [ 320.548481][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 320.769388][ T62] veth1_macvtap: left promiscuous mode [ 320.772470][ T9] usb 6-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 320.808810][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.817395][ T62] veth0_macvtap: left promiscuous mode [ 320.817548][ T62] veth1_vlan: left promiscuous mode [ 320.820199][ T62] veth0_vlan: left promiscuous mode [ 320.905099][ T9359] loop7: detected capacity change from 0 to 32768 [ 320.954355][ T9] usb 6-1: Product: syz [ 320.958592][ T9] usb 6-1: Manufacturer: syz [ 320.989799][ T9] usb 6-1: SerialNumber: syz [ 321.040774][ T9363] loop6: detected capacity change from 0 to 32768 [ 321.190499][ T9356] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 321.215415][ T9363] [ 321.215415][ T9363] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 321.215415][ T9363] [ 321.274142][ T9359] XFS (loop7): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 321.345841][ T9389] loop4: detected capacity change from 0 to 1024 [ 321.396254][ T9389] EXT4-fs: Ignoring removed nobh option [ 321.417084][ T9363] ERROR: (device loop6): diWrite: ixpxd invalid [ 321.417084][ T9363] [ 321.474245][ T9389] EXT4-fs: Ignoring removed bh option [ 321.536150][ T9359] XFS (loop7): Ending clean mount [ 321.552603][ T9363] ERROR: (device loop6): txCommit: [ 321.552603][ T9363] [ 321.587966][ T9359] XFS (loop7): Quotacheck needed: Please wait. [ 321.618084][ T9389] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 321.857645][ T9389] EXT4-fs: Ignoring removed nomblk_io_submit option [ 321.865362][ T9389] EXT4-fs: can't change dax mount option while remounting [ 321.926184][ T7298] [ 321.926184][ T7298] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 321.926184][ T7298] [ 321.940151][ T7298] [ 321.940151][ T7298] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 321.940151][ T7298] [ 322.030943][ T5835] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.299174][ T9359] XFS (loop7): Quotacheck: Done. [ 322.324902][ T9] usb 6-1: USB disconnect, device number 10 [ 322.417836][ T8342] XFS (loop7): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 322.893913][ T5831] udevd[5831]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 325.144896][ T9425] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1217'. [ 325.401900][ T62] team0 (unregistering): Port device team_slave_1 removed [ 325.433951][ T9427] loop7: detected capacity change from 0 to 4096 [ 325.485700][ T9427] ntfs3(loop7): Different NTFS sector size (4096) and media sector size (512). [ 325.794456][ T62] team0 (unregistering): Port device team_slave_0 removed [ 325.943176][ T9421] loop4: detected capacity change from 0 to 32768 [ 326.098200][ T9427] ntfs3(loop7): ino=1a, mi_enum_attr [ 326.103964][ T9427] ntfs3(loop7): Mark volume as dirty due to NTFS errors [ 326.138028][ T9427] ntfs3(loop7): Failed to initialize $Extend/$ObjId. [ 326.261803][ T9427] ntfs3(loop7): ino=5, "/" indx_read [ 328.580959][ T9442] loop4: detected capacity change from 0 to 32768 [ 328.817811][ T9442] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,noinodes_use_key_cache,gc_reserve_bytes=6.00 EiB,journal_flush_disabled,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,no_data_io [ 328.844403][ T9442] bcachefs (loop4): recovering from clean shutdown, journal seq 10 [ 328.852567][ T9442] bcachefs (loop4): Version upgrade required: [ 328.852567][ T9442] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 328.852567][ T9442] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.20: directory_size [ 328.852567][ T9442] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 328.924118][ T9442] bcachefs (loop4): dropping and reconstructing all alloc info [ 328.946854][ T9442] invalid bkey in btree_node btree=xattrs level=0: u64s 7 type xattr 536870912:3798421620223919902:U32_MAX len 0 ver 0: user.x: [ 328.946899][ T9442] xattr name has invalid characters: delete?, fixing [ 328.975975][ T9442] bcachefs (loop4): accounting_read... done [ 329.109715][ T9442] bcachefs (loop4): alloc_read... done [ 329.115385][ T9442] bcachefs (loop4): stripes_read... done [ 329.121151][ T9442] bcachefs (loop4): snapshots_read... done [ 329.127597][ T9442] bcachefs (loop4): Fixed errors, running fsck a second time to verify fs is clean [ 329.137493][ T9442] bcachefs (loop4): done starting filesystem [ 329.350023][ T8912] 8021q: adding VLAN 0 to HW filter on device team0 [ 329.424831][ T8993] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.431987][ T8993] bridge0: port 1(bridge_slave_0) entered forwarding state [ 329.534940][ T8993] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.542172][ T8993] bridge0: port 2(bridge_slave_1) entered forwarding state [ 329.606935][ T5835] bcachefs (loop4): shutting down [ 329.770843][ T5835] bcachefs (loop4): shutdown complete [ 330.403481][ T8970] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 330.498061][ T8970] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 330.619000][ T8970] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 330.766419][ T8970] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 331.187508][ T62] IPVS: stop unused estimator thread 0... [ 331.595888][ T8970] 8021q: adding VLAN 0 to HW filter on device bond0 [ 331.607118][ T8912] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 331.748527][ T8970] 8021q: adding VLAN 0 to HW filter on device team0 [ 331.824789][ T9455] loop6: detected capacity change from 0 to 32768 [ 331.845738][ T8993] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.852854][ T8993] bridge0: port 1(bridge_slave_0) entered forwarding state [ 331.926131][ T9455] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.1225 (9455) [ 331.984858][ T8993] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.992033][ T8993] bridge0: port 2(bridge_slave_1) entered forwarding state [ 332.257110][ T9455] BTRFS info (device loop6): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 332.382418][ T9455] BTRFS info (device loop6): using crc32c (crc32c-x86_64) checksum algorithm [ 332.473574][ T9455] BTRFS info (device loop6): disk space caching is enabled [ 332.564048][ T9455] BTRFS warning (device loop6): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 332.724046][ T9455] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 332.737168][ T9455] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 332.788753][ T9455] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 332.813923][ T9455] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 332.833453][ T9463] loop7: detected capacity change from 0 to 32768 [ 332.932883][ T9455] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 332.933152][ T9455] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 333.017656][ T9455] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 333.063550][ T9491] IPVS: sh: UDP 0.0.0.0:0 - no destination available [ 333.084555][ T6008] IPVS: starting estimator thread 0... [ 333.109790][ T9455] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 333.110085][ T9455] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 333.196727][ T9463] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/loop7": -EINTR [ 333.280462][ T9493] IPVS: using max 18 ests per chain, 43200 per kthread [ 333.333894][ T9455] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 333.334173][ T9455] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 333.414036][ T9455] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 333.650946][ T9455] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 333.715259][ T9455] BTRFS error (device loop6): open_ctree failed: -12 [ 334.770873][ T8970] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 335.834079][ T9526] loop5: detected capacity change from 0 to 2048 [ 336.119184][ T9526] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 336.149078][ T9535] loop6: detected capacity change from 0 to 512 [ 336.278611][ T9526] EXT4-fs error (device loop5): __ext4_new_inode:1071: comm syz.5.1234: reserved inode found cleared - inode=1 [ 336.312670][ T5853] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 336.339463][ T5853] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 336.354359][ T5853] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 336.375966][ T9535] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 336.484848][ T9535] ext4 filesystem being mounted at /121/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 336.508518][ T5853] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 336.572530][ T5853] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 336.592746][ T5853] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 336.977105][ T5833] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.394592][ T7298] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.839180][ T9531] loop7: detected capacity change from 0 to 32768 [ 337.927928][ T9531] JBD2: Ignoring recovery information on journal [ 337.939444][ T9554] netlink: 312 bytes leftover after parsing attributes in process `syz.5.1240'. [ 338.017188][ T9531] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 338.119453][ T9531] OCFS2: ERROR (device loop7): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #32 has an invalid bg_blkno of 0 [ 338.159846][ T9531] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 338.177055][ T9558] loop5: detected capacity change from 0 to 128 [ 338.183781][ T9531] OCFS2: File system is now read-only. [ 338.190235][ T9558] EXT4-fs: Ignoring removed nobh option [ 338.216783][ T9531] (syz.7.1235,9531,1):ocfs2_group_extend:326 ERROR: status = -30 [ 338.236372][ T9558] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 338.281918][ T9558] ext4 filesystem being mounted at /218/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 338.343128][ T8342] ocfs2: Unmounting device (7,7) on (node local) [ 338.806283][ T5853] Bluetooth: hci0: command tx timeout [ 338.922904][ T5833] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 339.409178][ T9566] loop6: detected capacity change from 0 to 2048 [ 339.562840][ T5847] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 339.628690][ T9566] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024) [ 339.661508][ T5847] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 339.704434][ T5847] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 339.715189][ T5847] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 339.729001][ T5847] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 339.738597][ T5847] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 339.920223][ T9572] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 340.883750][ T5847] Bluetooth: hci0: command tx timeout [ 341.611141][ T9568] loop5: detected capacity change from 0 to 32768 [ 341.831232][ T9568] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 341.934888][ T5847] Bluetooth: hci5: command tx timeout [ 342.062528][ T9538] chnl_net:caif_netlink_parms(): no params data found [ 342.232008][ T5833] (syz-executor,5833,1):ocfs2_inode_is_valid_to_delete:886 ERROR: Skipping delete of system file 72 [ 342.529468][ T5833] ocfs2: Unmounting device (7,5) on (node local) [ 342.964768][ T5847] Bluetooth: hci0: command tx timeout [ 343.003626][ T9575] loop7: detected capacity change from 0 to 32768 [ 343.032754][ T9604] loop4: detected capacity change from 0 to 512 [ 343.073738][ T9575] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.1244 (9575) [ 343.213716][ T9604] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 343.276508][ T9604] EXT4-fs (loop4): orphan cleanup on readonly fs [ 343.341754][ T9604] EXT4-fs warning (device loop4): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 343.369038][ T9538] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.459614][ T9538] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.518895][ T9604] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 343.526737][ T9538] bridge_slave_0: entered allmulticast mode [ 343.549329][ T9575] BTRFS info (device loop7): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 343.592399][ T9604] EXT4-fs error (device loop4): ext4_orphan_get:1389: inode #16: comm syz.4.1252: iget: immutable or append flags not allowed on symlinks [ 343.611831][ T9538] bridge_slave_0: entered promiscuous mode [ 343.692661][ T9538] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.708072][ T9538] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.719886][ T9538] bridge_slave_1: entered allmulticast mode [ 343.734366][ T9538] bridge_slave_1: entered promiscuous mode [ 343.778351][ T9604] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.1252: couldn't read orphan inode 16 (err -117) [ 343.788167][ T9575] BTRFS info (device loop7): using xxhash64 (xxhash64-generic) checksum algorithm [ 343.851699][ T9575] BTRFS info (device loop7): disk space caching is enabled [ 343.876133][ T9604] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 343.912198][ T4586] bridge_slave_1: left allmulticast mode [ 343.919213][ T4586] bridge_slave_1: left promiscuous mode [ 343.929465][ T9575] BTRFS warning (device loop7): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 343.995239][ T4586] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.004904][ T5847] Bluetooth: hci5: command tx timeout [ 344.054367][ T9575] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 344.054681][ T9575] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 344.117402][ T9575] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 344.138137][ T4586] bridge_slave_0: left allmulticast mode [ 344.192801][ T9575] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 344.193059][ T9575] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 344.237518][ T4586] bridge_slave_0: left promiscuous mode [ 344.263821][ T9575] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 344.264160][ T9575] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 344.286611][ T5835] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.328751][ T9575] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 344.329041][ T9575] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 344.359538][ T4586] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.393840][ T9575] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 344.394134][ T9575] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 344.465390][ T9575] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 344.567101][ T9575] BTRFS error (device loop7): open_ctree failed: -12 [ 345.062838][ T5847] Bluetooth: hci0: command tx timeout [ 345.938885][ T9625] loop5: detected capacity change from 0 to 32768 [ 345.982877][ T29] audit: type=1326 audit(1739804893.769:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9640 comm="syz.7.1255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f5758cde9 code=0x7ffc0000 [ 346.016513][ T9625] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1253 (9625) [ 346.084156][ T9625] BTRFS info (device loop5): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 346.096786][ T5847] Bluetooth: hci5: command tx timeout [ 346.128532][ T29] audit: type=1326 audit(1739804893.769:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9640 comm="syz.7.1255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f3f5758cde9 code=0x7ffc0000 [ 346.164512][ T9625] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm [ 346.223892][ T9625] BTRFS info (device loop5): disk space caching is enabled [ 346.231278][ T9625] BTRFS warning (device loop5): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 346.308112][ T29] audit: type=1326 audit(1739804893.769:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9640 comm="syz.7.1255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f5758cde9 code=0x7ffc0000 [ 346.426276][ T9644] loop7: detected capacity change from 0 to 1024 [ 346.444587][ T29] audit: type=1326 audit(1739804893.769:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9640 comm="syz.7.1255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f5758cde9 code=0x7ffc0000 [ 346.622223][ T29] audit: type=1326 audit(1739804893.769:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9640 comm="syz.7.1255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7f3f5758cde9 code=0x7ffc0000 [ 346.670112][ T9625] BTRFS info (device loop5): rebuilding free space tree [ 346.751779][ T9625] BTRFS info (device loop5): disabling free space tree [ 346.773650][ T29] audit: type=1326 audit(1739804893.769:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9640 comm="syz.7.1255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f5758cde9 code=0x7ffc0000 [ 346.823597][ T9625] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 346.873376][ T9625] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 346.930589][ T29] audit: type=1326 audit(1739804893.769:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9640 comm="syz.7.1255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f5758cde9 code=0x7ffc0000 [ 347.227057][ T9639] loop4: detected capacity change from 0 to 32768 [ 347.319807][ T5833] BTRFS info (device loop5): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 347.448030][ T9639] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 347.612293][ T29] audit: type=1800 audit(1739804895.409:136): pid=9639 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1256" name="file1" dev="loop4" ino=17058 res=0 errno=0 [ 347.777813][ T5835] (syz-executor,5835,1):ocfs2_inode_is_valid_to_delete:886 ERROR: Skipping delete of system file 70 [ 347.815759][ T5835] ocfs2: Unmounting device (7,4) on (node local) [ 348.081321][ T9662] Falling back ldisc for ptm0. [ 348.164025][ T5847] Bluetooth: hci5: command tx timeout [ 348.905395][ T9674] loop7: detected capacity change from 0 to 8 [ 350.487440][ T4586] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 350.635857][ T4586] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 350.715785][ T4586] bond0 (unregistering): Released all slaves [ 350.888212][ T9538] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 351.482208][ T9538] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 351.503374][ T25] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 351.512411][ T9678] loop4: detected capacity change from 0 to 40427 [ 351.548883][ T9678] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 351.593864][ T9678] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 351.649967][ T9678] F2FS-fs (loop4): build fault injection attr: rate: 17008, type: 0x1fffff [ 351.764983][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 86, changing to 10 [ 351.805202][ T9678] F2FS-fs (loop4): invalid crc value [ 351.833867][ T25] usb 6-1: New USB device found, idVendor=056a, idProduct=0333, bcdDevice= 0.00 [ 351.873679][ T9678] F2FS-fs (loop4): Found nat_bits in checkpoint [ 351.880161][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.903096][ T4586] hsr_slave_0: left promiscuous mode [ 351.938334][ T4586] hsr_slave_1: left promiscuous mode [ 351.960936][ T4586] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 351.982854][ T25] usb 6-1: config 0 descriptor?? [ 352.014159][ T4586] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 352.432077][ T25] hid (null): usage index exceeded [ 352.507941][ T25] wacom 0003:056A:0333.0018: ignoring exceeding usage max [ 352.544986][ T25] wacom 0003:056A:0333.0018: ignoring exceeding usage max [ 352.600177][ T25] wacom 0003:056A:0333.0018: usage index exceeded [ 352.620055][ T25] wacom 0003:056A:0333.0018: item 0 0 2 2 parsing failed [ 352.649430][ T25] wacom 0003:056A:0333.0018: parse failed [ 352.661472][ T25] wacom 0003:056A:0333.0018: probe with driver wacom failed with error -22 [ 352.730758][ T25] usb 6-1: USB disconnect, device number 11 [ 353.175984][ T9718] loop7: detected capacity change from 0 to 512 [ 353.232178][ T9718] EXT4-fs: Ignoring removed nomblk_io_submit option [ 353.316555][ T9718] EXT4-fs (loop7): filesystem is read-only [ 353.328318][ T9718] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 353.482137][ T9718] EXT4-fs (loop7): filesystem is read-only [ 353.490975][ T9718] EXT4-fs (loop7): orphan cleanup on readonly fs [ 353.527525][ T9718] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.1279: bg 0: block 64: padding at end of block bitmap is not set [ 353.559756][ T9718] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 353.580646][ T9718] EXT4-fs (loop7): 1 orphan inode deleted [ 353.634574][ T9718] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 353.907774][ T8342] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.351447][ T9728] loop4: detected capacity change from 0 to 1024 [ 354.656438][ T5853] Bluetooth: hci2: command 0x0406 tx timeout [ 354.747067][ T9733] hfsplus: inconsistency in B*Tree (1,0,1,0,2) [ 354.779480][ T9733] hfsplus: xattr searching failed [ 354.864690][ T4586] team0 (unregistering): Port device team_slave_1 removed [ 355.362492][ T4586] team0 (unregistering): Port device team_slave_0 removed [ 357.400519][ T9569] chnl_net:caif_netlink_parms(): no params data found [ 357.495698][ T9538] team0: Port device team_slave_0 added [ 357.551390][ T9538] team0: Port device team_slave_1 added [ 358.025731][ T9538] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 358.063658][ T9538] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 358.240886][ T9538] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 358.420496][ T9538] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 358.487579][ T9538] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 358.643770][ T9538] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 359.474471][ T9538] hsr_slave_0: entered promiscuous mode [ 359.534410][ T9538] hsr_slave_1: entered promiscuous mode [ 359.581743][ T9775] loop6: detected capacity change from 0 to 1024 [ 359.865553][ T9569] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.919515][ T9569] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.986351][ T9569] bridge_slave_0: entered allmulticast mode [ 360.033946][ T9569] bridge_slave_0: entered promiscuous mode [ 360.199174][ T9754] loop7: detected capacity change from 0 to 32768 [ 360.244149][ T25] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 360.283065][ T9754] XFS: noikeep mount option is deprecated. [ 360.313161][ T9569] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.372555][ T9569] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.410141][ T9754] XFS (loop7): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 360.433563][ T9569] bridge_slave_1: entered allmulticast mode [ 360.454908][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 360.498077][ T9569] bridge_slave_1: entered promiscuous mode [ 360.514782][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 360.573531][ T25] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 360.665892][ T9754] XFS (loop7): Ending clean mount [ 360.673966][ T25] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 360.711842][ T9754] XFS (loop7): Quotacheck needed: Please wait. [ 360.740437][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.777872][ T9569] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 360.822296][ T25] usb 6-1: config 0 descriptor?? [ 360.898794][ T9754] XFS (loop7): Quotacheck: Done. [ 360.949104][ T9569] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 361.163900][ T8342] XFS (loop7): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 361.302952][ T9770] loop4: detected capacity change from 0 to 32768 [ 361.328479][ T25] plantronics 0003:047F:FFFF.0019: No inputs registered, leaving [ 361.363857][ T9569] team0: Port device team_slave_0 added [ 361.380782][ T9770] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1301 (9770) [ 361.441213][ T25] plantronics 0003:047F:FFFF.0019: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 361.584393][ T25] usb 6-1: USB disconnect, device number 12 [ 361.718682][ T9770] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 361.835934][ T9569] team0: Port device team_slave_1 added [ 361.854712][ T9770] BTRFS info (device loop4): using sha256 (sha256-ni) checksum algorithm [ 361.958266][ T9770] BTRFS info (device loop4): using free-space-tree [ 362.097610][ T9770] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 362.097940][ T9770] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 362.255311][ T9770] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 362.364329][ T9770] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 362.417293][ T9770] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 362.473799][ T9770] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 362.498535][ T9770] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 362.511035][ T9770] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 362.526115][ T9770] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 362.542264][ T9770] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 362.571868][ T9770] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 362.856688][ T9770] BTRFS error (device loop4): open_ctree failed: -12 [ 363.489541][ T9569] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 363.516055][ T9569] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 363.681039][ T9569] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 364.260299][ T9569] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 364.300111][ T9569] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 364.362334][ T9569] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 364.413269][ T9839] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 3, id = 0 [ 365.466278][ T9850] loop5: detected capacity change from 0 to 1024 [ 365.778109][ T9569] hsr_slave_0: entered promiscuous mode [ 365.801499][ T9569] hsr_slave_1: entered promiscuous mode [ 365.829389][ T9569] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 365.871771][ T9569] Cannot create hsr debugfs directory [ 365.951835][ T8993] hfsplus: b-tree write err: -5, ino 4 [ 365.961941][ T9859] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1325'. [ 366.567147][ T9871] loop6: detected capacity change from 0 to 256 [ 366.593095][ T9870] loop4: detected capacity change from 0 to 512 [ 366.688158][ T9870] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 366.773341][ T9871] FAT-fs (loop6): Directory bread(block 64) failed [ 366.789647][ T9870] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec018, mo2=0002] [ 366.809233][ T9871] FAT-fs (loop6): Directory bread(block 65) failed [ 366.822932][ T9875] loop5: detected capacity change from 0 to 256 [ 366.840067][ T9875] FAT-fs (loop5): Directory bread(block 64) failed [ 366.840119][ T9875] FAT-fs (loop5): Directory bread(block 65) failed [ 366.840204][ T9875] FAT-fs (loop5): Directory bread(block 66) failed [ 366.840243][ T9875] FAT-fs (loop5): Directory bread(block 67) failed [ 366.840324][ T9875] FAT-fs (loop5): Directory bread(block 68) failed [ 366.840364][ T9875] FAT-fs (loop5): Directory bread(block 69) failed [ 366.840452][ T9875] FAT-fs (loop5): Directory bread(block 70) failed [ 366.840490][ T9875] FAT-fs (loop5): Directory bread(block 71) failed [ 366.840568][ T9875] FAT-fs (loop5): Directory bread(block 72) failed [ 366.840605][ T9875] FAT-fs (loop5): Directory bread(block 73) failed [ 366.963608][ T9870] System zones: 1-12 [ 367.043664][ T9870] EXT4-fs (loop4): 1 truncate cleaned up [ 367.122236][ T9870] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 367.213796][ T9871] FAT-fs (loop6): Directory bread(block 66) failed [ 367.298452][ T9870] EXT4-fs (loop4): resizing filesystem from 256 to 1 blocks [ 367.307669][ T9871] FAT-fs (loop6): Directory bread(block 67) failed [ 367.374233][ T9870] EXT4-fs warning (device loop4): ext4_resize_fs:2042: can't shrink FS - resize aborted [ 367.389276][ T9871] FAT-fs (loop6): Directory bread(block 68) failed [ 367.463322][ T9871] FAT-fs (loop6): Directory bread(block 69) failed [ 367.477088][ T9871] FAT-fs (loop6): Directory bread(block 70) failed [ 367.556136][ T9871] FAT-fs (loop6): Directory bread(block 71) failed [ 367.562832][ T9871] FAT-fs (loop6): Directory bread(block 72) failed [ 367.645472][ T9871] FAT-fs (loop6): Directory bread(block 73) failed [ 367.757427][ T4586] bridge_slave_1: left allmulticast mode [ 367.785030][ T4586] bridge_slave_1: left promiscuous mode [ 367.791865][ T5835] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.845874][ T4586] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.058504][ T4586] bridge_slave_0: left allmulticast mode [ 368.109040][ T4586] bridge_slave_0: left promiscuous mode [ 368.134239][ T4586] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.959337][ T9911] Falling back ldisc for ttynull. [ 378.275957][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.288954][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.797716][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.816798][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 462.393723][ T5839] Bluetooth: hci5: command 0x0406 tx timeout [ 462.399834][ T5839] Bluetooth: hci0: command 0x0406 tx timeout [ 501.216676][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.260826][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 520.243819][ T30] INFO: task kworker/1:2:1162 blocked for more than 143 seconds. [ 520.251656][ T30] Not tainted 6.14.0-rc3-syzkaller #0 [ 520.323485][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 520.332279][ T30] task:kworker/1:2 state:D stack:20360 pid:1162 tgid:1162 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 520.437707][ T30] Workqueue: events switchdev_deferred_process_work [ 520.453987][ T5897] kernel write not supported for file /snd/midiC2D0 (pid: 5897 comm: kworker/0:6) [ 520.488243][ T30] Call Trace: [ 520.491712][ T30] [ 520.533392][ T30] __schedule+0x190e/0x4c90 [ 520.537992][ T30] ? try_to_wake_up+0x959/0x1470 [ 520.543000][ T30] ? schedule+0x90/0x320 [ 520.611005][ T30] ? __pfx___schedule+0x10/0x10 [ 520.653419][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 520.659506][ T30] ? __pfx_lock_release+0x10/0x10 [ 520.736423][ T30] ? kick_pool+0x45c/0x620 [ 520.740965][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 520.833467][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 520.839212][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 520.933741][ T30] ? schedule+0x90/0x320 [ 520.938086][ T30] schedule+0x14b/0x320 [ 520.942296][ T30] schedule_preempt_disabled+0x13/0x30 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 521.033342][ T30] __mutex_lock+0x817/0x1010 [ 521.038042][ T30] ? __mutex_lock+0x602/0x1010 [ 521.042851][ T30] ? switchdev_deferred_process_work+0xe/0x20 [ 521.123414][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 521.128542][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 521.207915][ T9934] syz-executor: vmalloc error: size 4194304, failed to allocated page array size 8192, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 521.253321][ T30] ? process_scheduled_works+0x9c6/0x18e0 [ 521.259142][ T30] switchdev_deferred_process_work+0xe/0x20 [ 521.359573][ T30] process_scheduled_works+0xac0/0x18e0 [ 521.383477][ T9934] CPU: 0 UID: 0 PID: 9934 Comm: syz-executor Not tainted 6.14.0-rc3-syzkaller #0 [ 521.383516][ T9934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 521.383532][ T9934] Call Trace: [ 521.383541][ T9934] [ 521.383552][ T9934] dump_stack_lvl+0x241/0x360 [ 521.383591][ T9934] ? __pfx_dump_stack_lvl+0x10/0x10 [ 521.383619][ T9934] ? __pfx__printk+0x10/0x10 [ 521.383657][ T9934] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 521.383690][ T9934] ? srso_alias_return_thunk+0x5/0xfbef5 [ 521.383730][ T9934] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 521.383765][ T9934] warn_alloc+0x278/0x410 [ 521.383797][ T9934] ? __pfx_warn_alloc+0x10/0x10 [ 521.383829][ T9934] ? kcov_ioctl+0x56/0x640 [ 521.383864][ T9934] ? __get_vm_area_node+0x1c8/0x2d0 [ 521.383901][ T9934] ? srso_alias_return_thunk+0x5/0xfbef5 [ 521.383940][ T9934] ? __get_vm_area_node+0x25c/0x2d0 [ 521.383985][ T9934] __vmalloc_node_range_noprof+0x62f/0x1380 [ 521.384056][ T9934] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 521.384110][ T9934] vmalloc_user_noprof+0x74/0x80 [ 521.384135][ T9934] ? kcov_ioctl+0x56/0x640 [ 521.384170][ T9934] kcov_ioctl+0x56/0x640 [ 521.384208][ T9934] ? srso_alias_return_thunk+0x5/0xfbef5 [ 521.384246][ T9934] ? __pfx_kcov_ioctl+0x10/0x10 [ 521.384284][ T9934] __se_sys_ioctl+0xf7/0x170 [ 521.384315][ T9934] do_syscall_64+0xf3/0x230 [ 521.384353][ T9934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.384388][ T9934] RIP: 0033:0x7fd66fb8c9eb [ 521.384409][ T9934] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 521.384432][ T9934] RSP: 002b:00007fff551766e0 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 521.384459][ T9934] RAX: ffffffffffffffda RBX: 0000000000080000 RCX: 00007fd66fb8c9eb [ 521.384478][ T9934] RDX: 0000000000080000 RSI: ffffffff80086301 RDI: 00000000000000d8 [ 521.384495][ T9934] RBP: 00007fd66fda6038 R08: 0000000000000005 R09: 0000000000000000 [ 521.384512][ T9934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 521.384528][ T9934] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 521.384560][ T9934] [ 521.384571][ T9934] Mem-Info: [ 521.562099][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 521.602320][ T9934] active_anon:5686 inactive_anon:4096 isolated_anon:0 [ 521.602320][ T9934] active_file:2507 inactive_file:21714 isolated_file:0 [ 521.602320][ T9934] unevictable:768 dirty:439 writeback:0 [ 521.602320][ T9934] slab_reclaimable:6377 slab_unreclaimable:110263 [ 521.602320][ T9934] mapped:18059 shmem:5593 pagetables:955 [ 521.602320][ T9934] sec_pagetables:0 bounce:0 [ 521.602320][ T9934] kernel_misc_reclaimable:0 [ 521.602320][ T9934] free:1345180 free_pcp:341 free_cma:0 [ 521.602403][ T9934] Node 0 active_anon:22744kB inactive_anon:16384kB active_file:10024kB inactive_file:86848kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:72236kB dirty:1756kB writeback:0kB shmem:20836kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11728kB pagetables:3820kB sec_pagetables:0kB all_unreclaimable? no [ 521.602474][ T9934] Node 1 active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:8kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? yes [ 521.602546][ T9934] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 521.602624][ T9934] lowmem_reserve[]: 0 2490 2490 0 0 [ 521.602693][ T9934] Node 0 DMA32 free:1524704kB boost:72776kB min:106944kB low:115484kB high:124024kB reserved_highatomic:4096KB active_anon:22708kB inactive_anon:16384kB active_file:10012kB inactive_file:86576kB unevictable:1536kB writepending:1756kB present:3129332kB managed:2549864kB mlocked:0kB bounce:0kB free_pcp:1020kB local_pcp:1020kB free_cma:0kB [ 521.602772][ T9934] lowmem_reserve[]: 0 0 0 0 0 [ 521.602833][ T9934] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:12kB inactive_file:272kB unevictable:0kB writepending:0kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 521.602905][ T9934] lowmem_reserve[]: 0 0 0 0 0 [ 521.602966][ T9934] Node 1 Normal free:3840656kB boost:0kB min:55728kB low:69660kB high:83592kB reserved_highatomic:2048KB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:8kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:332kB local_pcp:132kB free_cma:0kB [ 521.603041][ T9934] lowmem_reserve[]: 0 0 0 0 0 [ 521.603101][ T9934] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (UM) = 15360kB [ 521.625129][ T9934] Node 0 DMA32: 1294*4kB (UMEH) 4133*8kB (UMEH) 2875*16kB (UMEH) 4266*32kB (UMEH) 2340*64kB (UMEH) 1327*128kB (UME) 658*256kB (UME) 300*512kB (UME) 181*1024kB (UME) 78*2048kB (UME) 78*4096kB (UM) = 1526992kB [ 521.625398][ T9934] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 521.625558][ T9934] Node 1 Normal: 2175*4kB (UME) 1946*8kB (UME) 1985*16kB (UME) 3494*32kB (UMEH) 3148*64kB (UMEH) 2692*128kB (UMEH) 1545*256kB (UMEH) 903*512kB (UM) 547*1024kB (UMEH) 307*2048kB (UM) 264*4096kB (UM) = 3841948kB [ 521.625830][ T9934] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 521.625853][ T9934] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 521.625876][ T9934] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 521.625899][ T9934] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 521.625922][ T9934] 29799 total pagecache pages [ 521.625934][ T9934] 0 pages in swap cache [ 521.625946][ T9934] Free swap = 124648kB [ 521.625958][ T9934] Total swap = 124996kB [ 521.625971][ T9934] 2097051 pages RAM [ 521.625983][ T9934] 0 pages HighMem/MovableOnly [ 521.625994][ T9934] 427863 pages reserved [ 521.626005][ T9934] 0 pages cma reserved [ 522.180532][ T30] ? assign_work+0x364/0x3d0 [ 522.186528][ T30] worker_thread+0x870/0xd30 [ 522.191180][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 522.233216][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 522.240059][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 522.257031][ T30] ? __kthread_parkme+0x169/0x1d0 [ 522.262176][ T30] ? __pfx_worker_thread+0x10/0x10 [ 522.273973][ T30] kthread+0x7ab/0x920 [ 522.278149][ T30] ? __pfx_kthread+0x10/0x10 [ 522.292728][ T30] ? __pfx_worker_thread+0x10/0x10 [ 522.298493][ T30] ? __pfx_kthread+0x10/0x10 [ 522.303166][ T30] ? __pfx_kthread+0x10/0x10 [ 522.317526][ T30] ? __pfx_kthread+0x10/0x10 [ 522.328119][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 522.337363][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 522.343150][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 522.363419][ T30] ? __pfx_kthread+0x10/0x10 [ 522.368133][ T30] ret_from_fork+0x4d/0x80 [ 522.372634][ T30] ? __pfx_kthread+0x10/0x10 [ 522.391075][ T30] ret_from_fork_asm+0x1a/0x30 [ 522.399865][ T30] [ 522.431892][ T30] INFO: task udevd:5202 blocked for more than 145 seconds. [ 522.440178][ T30] Not tainted 6.14.0-rc3-syzkaller #0 [ 522.498831][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 522.542481][ T30] task:udevd state:D stack:21568 pid:5202 tgid:5202 ppid:1 task_flags:0x400140 flags:0x00000002 [ 522.586924][ T30] Call Trace: [ 522.590312][ T30] [ 522.610607][ T30] __schedule+0x190e/0x4c90 [ 522.623554][ T30] ? __pfx___schedule+0x10/0x10 [ 522.628947][ T30] ? __pfx_lock_release+0x10/0x10 [ 522.673490][ T30] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 522.679926][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 522.713136][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 522.719526][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 522.742709][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 522.763309][ T30] ? schedule+0x90/0x320 [ 522.767773][ T30] schedule+0x14b/0x320 [ 522.771979][ T30] schedule_preempt_disabled+0x13/0x30 [ 522.818908][ T30] __mutex_lock+0x817/0x1010 [ 522.838576][ T30] ? __mutex_lock+0x602/0x1010 [ 522.863418][ T30] ? uevent_show+0x17d/0x340 [ 522.868095][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 522.873152][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 522.900909][ T30] ? __kasan_kmalloc+0x98/0xb0 [ 522.907873][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 522.933618][ T30] ? uevent_show+0x163/0x340 [ 522.938309][ T30] uevent_show+0x17d/0x340 [ 522.942759][ T30] dev_attr_show+0x57/0xc0 [ 522.966706][ T30] ? __pfx_dev_attr_show+0x10/0x10 [ 522.971910][ T30] sysfs_kf_seq_show+0x333/0x4c0 [ 522.983019][ T30] seq_read_iter+0x441/0xd70 [ 522.990440][ T30] vfs_read+0x977/0xb40 [ 523.000429][ T30] ? __pfx_vfs_read+0x10/0x10 [ 523.008874][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 523.020381][ T30] ? trace_sys_enter+0x74/0x120 [ 523.028005][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 523.043494][ T30] ksys_read+0x18f/0x2b0 [ 523.047786][ T30] ? __pfx_ksys_read+0x10/0x10 [ 523.052579][ T30] ? trace_sys_enter+0x74/0x120 [ 523.068553][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 523.079582][ T30] ? rcu_is_watching+0x15/0xb0 [ 523.088127][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 523.098879][ T30] ? trace_sys_enter+0x25/0x120 [ 523.107529][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 523.117990][ T30] do_syscall_64+0xf3/0x230 [ 523.122544][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 523.133059][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.152769][ T30] RIP: 0033:0x7f0bd0116b6a [ 523.161881][ T30] RSP: 002b:00007fffdf32d2d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 523.179723][ T30] RAX: ffffffffffffffda RBX: 000055c6b76bd730 RCX: 00007f0bd0116b6a [ 523.190854][ T30] RDX: 0000000000001000 RSI: 000055c6b76e5a20 RDI: 000000000000000c [ 523.207403][ T30] RBP: 000055c6b76bd730 R08: 000000000000000c R09: 0000000000000000 [ 523.219525][ T30] R10: 000000000000010f R11: 0000000000000246 R12: 0000000000000000 [ 523.232810][ T30] R13: 0000000000003fff R14: 00007fffdf32d7b8 R15: 000000000000000a [ 523.250463][ T30] [ 523.278005][ T30] INFO: task dhcpcd:5496 blocked for more than 146 seconds. [ 523.295710][ T30] Not tainted 6.14.0-rc3-syzkaller #0 [ 523.301671][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 523.319578][ T30] task:dhcpcd state:D stack:20384 pid:5496 tgid:5496 ppid:5495 task_flags:0x400140 flags:0x00000002 [ 523.340109][ T30] Call Trace: [ 523.346414][ T30] [ 523.349381][ T30] __schedule+0x190e/0x4c90 [ 523.356171][ T30] ? __pfx___schedule+0x10/0x10 [ 523.374296][ T30] ? __pfx_lock_release+0x10/0x10 [ 523.379445][ T30] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 523.394559][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 523.400304][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 523.413327][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 523.419331][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 523.433892][ T30] ? schedule+0x90/0x320 [ 523.438265][ T30] schedule+0x14b/0x320 [ 523.442482][ T30] schedule_preempt_disabled+0x13/0x30 [ 523.459066][ T30] __mutex_lock+0x817/0x1010 [ 523.467464][ T30] ? __mutex_lock+0x602/0x1010 [ 523.472316][ T30] ? devinet_ioctl+0x34c/0x1d80 [ 523.485024][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 523.490147][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 523.505392][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 523.511128][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 523.523739][ T30] ? security_capable+0x7e/0x2d0 [ 523.528793][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 523.542769][ T30] devinet_ioctl+0x34c/0x1d80 [ 523.548870][ T30] ? __might_fault+0xaa/0x120 [ 523.562473][ T30] ? __pfx_devinet_ioctl+0x10/0x10 [ 523.568901][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 523.582870][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 523.600257][ T30] ? get_user_ifreq+0x1bb/0x200 [ 523.607269][ T30] inet_ioctl+0x3d7/0x4f0 [ 523.611671][ T30] ? __pfx_inet_ioctl+0x10/0x10 [ 523.626491][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 523.632507][ T30] ? tomoyo_path_number_perm+0x5dd/0x770 [ 523.643942][ T30] sock_do_ioctl+0x15a/0x460 [ 523.648637][ T30] ? __pfx_sock_do_ioctl+0x10/0x10 [ 523.662962][ T30] ? __pfx_lock_release+0x10/0x10 [ 523.669606][ T30] sock_ioctl+0x626/0x8e0 [ 523.682942][ T30] ? __pfx_sock_ioctl+0x10/0x10 [ 523.698595][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 523.714158][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 523.723529][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 523.729951][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 523.745975][ T30] ? __pfx_sock_ioctl+0x10/0x10 [ 523.750926][ T30] __se_sys_ioctl+0xf7/0x170 [ 523.773977][ T30] do_syscall_64+0xf3/0x230 [ 523.778592][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.796522][ T30] RIP: 0033:0x7ff74285ed49 [ 523.801008][ T30] RSP: 002b:00007ffe8ac73b98 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 523.821889][ T30] RAX: ffffffffffffffda RBX: 00007ff7427906c0 RCX: 00007ff74285ed49 [ 523.840917][ T30] RDX: 00007ffe8ac83d88 RSI: 0000000000008914 RDI: 0000000000000020 [ 523.849989][ T30] RBP: 00007ffe8ac93f48 R08: 00007ffe8ac83d48 R09: 00007ffe8ac83cf8 [ 523.863683][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 523.871732][ T30] R13: 00007ffe8ac83d88 R14: 0000000000000028 R15: 0000000000008914 [ 523.890013][ T30] [ 523.921976][ T30] INFO: task kworker/u8:10:7641 blocked for more than 146 seconds. [ 523.932203][ T30] Not tainted 6.14.0-rc3-syzkaller #0 [ 523.945435][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 523.964541][ T30] task:kworker/u8:10 state:D stack:21104 pid:7641 tgid:7641 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 523.985234][ T30] Workqueue: events_unbound linkwatch_event [ 523.991208][ T30] Call Trace: [ 524.001797][ T30] [ 524.007894][ T30] __schedule+0x190e/0x4c90 [ 524.012469][ T30] ? __pfx___schedule+0x10/0x10 [ 524.027612][ T30] ? __pfx_lock_release+0x10/0x10 [ 524.032723][ T30] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 524.043778][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 524.049466][ T30] ? kthread_data+0x52/0xd0 [ 524.066222][ T30] ? schedule+0x90/0x320 [ 524.070654][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 524.086640][ T30] ? wq_worker_sleeping+0x66/0x240 [ 524.091904][ T30] ? schedule+0x90/0x320 [ 524.102369][ T30] schedule+0x14b/0x320 [ 524.110389][ T30] schedule_preempt_disabled+0x13/0x30 [ 524.120794][ T30] __mutex_lock+0x817/0x1010 [ 524.129347][ T30] ? __mutex_lock+0x602/0x1010 [ 524.140849][ T30] ? linkwatch_event+0xe/0x60 [ 524.153155][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 524.158471][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 524.166671][ T30] ? process_scheduled_works+0x9c6/0x18e0 [ 524.172458][ T30] linkwatch_event+0xe/0x60 [ 524.179101][ T30] process_scheduled_works+0xac0/0x18e0 [ 524.186064][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 524.192202][ T30] ? assign_work+0x364/0x3d0 [ 524.198721][ T30] worker_thread+0x870/0xd30 [ 524.204054][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 524.209761][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 524.216107][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 524.222073][ T30] ? __kthread_parkme+0x169/0x1d0 [ 524.227957][ T30] ? __pfx_worker_thread+0x10/0x10 [ 524.233126][ T30] kthread+0x7ab/0x920 [ 524.239084][ T30] ? __pfx_kthread+0x10/0x10 [ 524.246421][ T30] ? __pfx_worker_thread+0x10/0x10 [ 524.251591][ T30] ? __pfx_kthread+0x10/0x10 [ 524.259230][ T30] ? __pfx_kthread+0x10/0x10 [ 524.265460][ T30] ? __pfx_kthread+0x10/0x10 [ 524.270132][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 524.278068][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 524.286513][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 524.291914][ T30] ? __pfx_kthread+0x10/0x10 [ 524.297114][ T30] ret_from_fork+0x4d/0x80 [ 524.301587][ T30] ? __pfx_kthread+0x10/0x10 [ 524.306963][ T30] ret_from_fork_asm+0x1a/0x30 [ 524.311806][ T30] [ 524.315669][ T30] INFO: task syz-executor:9538 blocked for more than 147 seconds. [ 524.346068][ T30] Not tainted 6.14.0-rc3-syzkaller #0 [ 524.352037][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 524.374101][ T30] task:syz-executor state:D stack:21280 pid:9538 tgid:9538 ppid:1 task_flags:0x400140 flags:0x00004004 [ 524.399073][ T30] Call Trace: [ 524.402476][ T30] [ 524.408421][ T30] __schedule+0x190e/0x4c90 [ 524.413025][ T30] ? __pfx___schedule+0x10/0x10 [ 524.425066][ T30] ? __pfx_lock_release+0x10/0x10 [ 524.430344][ T30] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 524.444253][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 524.449989][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 524.462968][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 524.482969][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 524.491262][ T30] ? schedule+0x90/0x320 [ 524.504001][ T30] schedule+0x14b/0x320 [ 524.508344][ T30] schedule_preempt_disabled+0x13/0x30 [ 524.523049][ T30] __mutex_lock+0x817/0x1010 [ 524.528274][ T30] ? __mutex_lock+0x602/0x1010 [ 524.533156][ T30] ? register_nexthop_notifier+0x84/0x290 [ 524.547594][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 524.552689][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 524.563367][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 524.569781][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 524.589709][ T30] register_nexthop_notifier+0x84/0x290 [ 524.601322][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 524.611639][ T30] ? devlink_resource_find+0xba/0xf0 [ 524.622472][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 524.632241][ T30] ? __pfx_register_nexthop_notifier+0x10/0x10 [ 524.643488][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 524.649210][ T30] ? devlink_resource_find+0xc4/0xf0 [ 524.662520][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 524.668771][ T30] nsim_fib_create+0x8a9/0xa70 [ 524.682707][ T30] ? __pfx_nsim_fib_create+0x10/0x10 [ 524.692237][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 524.703890][ T30] nsim_drv_probe+0x747/0xb80 [ 524.708683][ T30] ? __pfx_nsim_drv_probe+0x10/0x10 [ 524.722015][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 524.743448][ T30] ? kernfs_create_link+0x187/0x1f0 [ 524.748752][ T30] ? sysfs_do_create_link_sd+0xdd/0x110 [ 524.761765][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 524.767928][ T30] ? driver_sysfs_add+0x1de/0x1f0 [ 524.773012][ T30] ? really_probe+0x148/0xad0 [ 524.786682][ T30] ? __pfx_nsim_bus_probe+0x10/0x10 [ 524.791997][ T30] really_probe+0x2bb/0xad0 [ 524.824277][ T30] __driver_probe_device+0x1a2/0x390 [ 524.829701][ T30] driver_probe_device+0x50/0x430 [ 524.842949][ T30] __device_attach_driver+0x2d6/0x530 [ 524.848635][ T30] bus_for_each_drv+0x250/0x2e0 [ 524.853815][ T30] ? __pfx___device_attach_driver+0x10/0x10 [ 524.859763][ T30] ? __pfx_bus_for_each_drv+0x10/0x10 [ 524.872931][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 524.878154][ T30] __device_attach+0x333/0x520 [ 524.892792][ T30] ? __pfx___device_attach+0x10/0x10 [ 524.899587][ T30] bus_probe_device+0x189/0x260 [ 524.913346][ T30] device_add+0x856/0xbf0 [ 524.917795][ T30] new_device_store+0x3f3/0x890 [ 524.922716][ T30] ? __pfx_new_device_store+0x10/0x10 [ 524.938784][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 524.947504][ T30] ? sysfs_kf_write+0x182/0x2a0 [ 524.952418][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 524.966018][ T30] ? bus_attr_store+0x4f/0xb0 [ 524.970964][ T30] ? __pfx_sysfs_kf_write+0x10/0x10 [ 524.981521][ T30] kernfs_fop_write_iter+0x3a2/0x500 [ 524.990722][ T30] vfs_write+0xad1/0xd10 [ 524.998934][ T30] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 525.012466][ T30] ? __pfx_vfs_write+0x10/0x10 [ 525.019266][ T30] ? do_sys_openat2+0x17a/0x1d0 [ 525.032372][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 525.039214][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 525.052551][ T30] ksys_write+0x18f/0x2b0 [ 525.070396][ T30] ? __pfx_ksys_write+0x10/0x10 [ 525.075743][ T30] ? do_syscall_64+0x100/0x230 [ 525.080560][ T30] ? do_syscall_64+0xb6/0x230 [ 525.094226][ T30] do_syscall_64+0xf3/0x230 [ 525.098799][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.115083][ T30] RIP: 0033:0x7fcd8138b89f [ 525.119557][ T30] RSP: 002b:00007fff2c3af780 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 525.140202][ T30] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007fcd8138b89f [ 525.152263][ T30] RDX: 0000000000000003 RSI: 00007fff2c3af7d0 RDI: 0000000000000005 [ 525.164196][ T30] RBP: 00007fcd8140f521 R08: 0000000000000000 R09: 00007fff2c3af5d7 [ 525.172214][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 525.190103][ T30] R13: 00007fff2c3af7d0 R14: 00007fcd820d4620 R15: 0000000000000003 [ 525.201920][ T30] [ 525.231601][ T30] INFO: task syz-executor:9569 blocked for more than 148 seconds. [ 525.242465][ T30] Not tainted 6.14.0-rc3-syzkaller #0 [ 525.254925][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 525.275039][ T30] task:syz-executor state:D stack:21280 pid:9569 tgid:9569 ppid:1 task_flags:0x400140 flags:0x00004006 [ 525.293312][ T30] Call Trace: [ 525.296664][ T30] [ 525.299630][ T30] __schedule+0x190e/0x4c90 [ 525.312797][ T30] ? __pfx___schedule+0x10/0x10 [ 525.318185][ T30] ? __pfx_lock_release+0x10/0x10 [ 525.332381][ T30] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 525.338766][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 525.353693][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 525.359402][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 525.378671][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 525.392348][ T30] ? schedule+0x90/0x320 [ 525.399282][ T30] schedule+0x14b/0x320 [ 525.410918][ T30] schedule_preempt_disabled+0x13/0x30 [ 525.420192][ T30] __mutex_lock+0x817/0x1010 [ 525.430902][ T30] ? __mutex_lock+0x602/0x1010 [ 525.438426][ T30] ? del_device_store+0xfc/0x480 [ 525.449737][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 525.459212][ T30] ? sysfs_kf_write+0x174/0x2a0 [ 525.471093][ T30] ? kernfs_fop_write_iter+0x1ea/0x500 [ 525.482017][ T30] del_device_store+0xfc/0x480 [ 525.494411][ T30] ? __pfx_del_device_store+0x10/0x10 [ 525.499847][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 525.514530][ T30] ? sysfs_kf_write+0x182/0x2a0 [ 525.519526][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 525.533845][ T30] ? bus_attr_store+0x4f/0xb0 [ 525.539086][ T30] ? __pfx_sysfs_kf_write+0x10/0x10 [ 525.551601][ T30] kernfs_fop_write_iter+0x3a2/0x500 [ 525.559381][ T30] vfs_write+0xad1/0xd10 [ 525.572418][ T30] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 525.579914][ T30] ? __pfx_vfs_write+0x10/0x10 [ 525.594838][ T30] ? do_sys_openat2+0x17a/0x1d0 [ 525.600609][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 525.616626][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 525.622463][ T30] ksys_write+0x18f/0x2b0 [ 525.630789][ T30] ? __pfx_ksys_write+0x10/0x10 [ 525.640586][ T30] ? do_syscall_64+0x100/0x230 [ 525.649110][ T30] ? do_syscall_64+0xb6/0x230 [ 525.659698][ T30] do_syscall_64+0xf3/0x230 [ 525.668294][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.681052][ T30] RIP: 0033:0x7f54a298b89f [ 525.689400][ T30] RSP: 002b:00007ffd288c1b80 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 525.707369][ T30] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f54a298b89f [ 525.724496][ T30] RDX: 0000000000000001 RSI: 00007ffd288c1bd0 RDI: 0000000000000005 [ 525.732620][ T30] RBP: 00007f54a2a0f4fd R08: 0000000000000000 R09: 00007ffd288c19d7 [ 525.750481][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 525.759044][ T30] R13: 00007ffd288c1bd0 R14: 00007f54a36d4620 R15: 0000000000000003 [ 525.773483][ T30] [ 525.776789][ T30] INFO: task syz.6.1335:9898 blocked for more than 148 seconds. [ 525.794832][ T30] Not tainted 6.14.0-rc3-syzkaller #0 [ 525.812156][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 525.832125][ T30] task:syz.6.1335 state:D stack:27552 pid:9898 tgid:9897 ppid:7298 task_flags:0x400140 flags:0x00000004 [ 525.870767][ T30] Call Trace: [ 525.874465][ T30] [ 525.877439][ T30] __schedule+0x190e/0x4c90 [ 525.882086][ T30] ? __pfx___schedule+0x10/0x10 [ 525.895084][ T30] ? __pfx_lock_release+0x10/0x10 [ 525.900197][ T30] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 525.917581][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 525.931955][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 525.948052][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 525.957792][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 525.969067][ T30] ? schedule+0x90/0x320 [ 525.977947][ T30] schedule+0x14b/0x320 [ 525.982156][ T30] schedule_preempt_disabled+0x13/0x30 [ 525.992846][ T30] __mutex_lock+0x817/0x1010 [ 526.001669][ T30] ? __mutex_lock+0x602/0x1010 [ 526.013416][ T30] ? ip_mroute_setsockopt+0x15b/0x1190 [ 526.018997][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 526.035238][ T30] ? __pfx_lock_release+0x10/0x10 [ 526.040417][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 526.053365][ T30] ip_mroute_setsockopt+0x15b/0x1190 [ 526.058764][ T30] ? futex_wait_queue+0x27/0x1e0 [ 526.074519][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 526.080310][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 526.094809][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 526.100559][ T30] ? __pfx_ip_mroute_setsockopt+0x10/0x10 [ 526.115488][ T30] do_ip_setsockopt+0x1213/0x3ae0 [ 526.120840][ T30] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 526.138066][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 526.150458][ T30] ? aa_sk_perm+0x96d/0xab0 [ 526.159854][ T30] ? __pfx_aa_sk_perm+0x10/0x10 [ 526.173394][ T30] ip_setsockopt+0x63/0x100 [ 526.178019][ T30] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 526.191832][ T30] do_sock_setsockopt+0x3b1/0x720 [ 526.197763][ T30] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 526.210266][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 526.220518][ T30] ? __fget_files+0x395/0x410 [ 526.233418][ T30] ? __fget_files+0x2a/0x410 [ 526.238143][ T30] __x64_sys_setsockopt+0x1ee/0x280 [ 526.252269][ T30] do_syscall_64+0xf3/0x230 [ 526.257210][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 526.275753][ T30] RIP: 0033:0x7f8fa518cde9 [ 526.280262][ T30] RSP: 002b:00007f8fa5f1c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 526.296443][ T30] RAX: ffffffffffffffda RBX: 00007f8fa53a5fa0 RCX: 00007f8fa518cde9 [ 526.311009][ T30] RDX: 00000000000000c8 RSI: 0000000000000000 RDI: 0000000000000003 [ 526.328553][ T30] RBP: 00007f8fa520e2a0 R08: 0000000000000004 R09: 0000000000000000 [ 526.341980][ T30] R10: 0000400000000080 R11: 0000000000000246 R12: 0000000000000000 [ 526.361194][ T30] R13: 0000000000000000 R14: 00007f8fa53a5fa0 R15: 00007ffe2926d3c8 [ 526.372167][ T30] [ 526.383575][ T30] INFO: task syz.6.1335:9901 blocked for more than 149 seconds. [ 526.391298][ T30] Not tainted 6.14.0-rc3-syzkaller #0 [ 526.407113][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 526.422008][ T30] task:syz.6.1335 state:D stack:27552 pid:9901 tgid:9897 ppid:7298 task_flags:0x400040 flags:0x00000004 [ 526.446099][ T30] Call Trace: [ 526.449457][ T30] [ 526.452440][ T30] __schedule+0x190e/0x4c90 [ 526.466754][ T30] ? __pfx___schedule+0x10/0x10 [ 526.471704][ T30] ? __pfx_lock_release+0x10/0x10 [ 526.487199][ T30] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 526.500551][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 526.509208][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 526.521245][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 526.530717][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 526.543219][ T30] ? schedule+0x90/0x320 [ 526.552095][ T30] schedule+0x14b/0x320 [ 526.563479][ T30] schedule_preempt_disabled+0x13/0x30 [ 526.569066][ T30] __mutex_lock+0x817/0x1010 [ 526.584133][ T30] ? __mutex_lock+0x602/0x1010 [ 526.589027][ T30] ? ip_mroute_setsockopt+0x15b/0x1190 [ 526.603396][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 526.608549][ T30] ? __pfx_validate_chain+0x10/0x10 [ 526.622193][ T30] ? __page_table_check_ptes_set+0x30f/0x410 [ 526.628874][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 526.638846][ T30] ip_mroute_setsockopt+0x15b/0x1190 [ 526.653845][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 526.659592][ T30] ? __pfx_validate_chain+0x10/0x10 [ 526.684944][ T30] ? __pfx_ip_mroute_setsockopt+0x10/0x10 [ 526.690813][ T30] do_ip_setsockopt+0x1213/0x3ae0 [ 526.707028][ T30] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 526.712594][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 526.727118][ T30] ? aa_sk_perm+0x96d/0xab0 [ 526.731726][ T30] ? __pfx_aa_sk_perm+0x10/0x10 [ 526.742324][ T30] ip_setsockopt+0x63/0x100 [ 526.751793][ T30] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 526.762006][ T30] do_sock_setsockopt+0x3b1/0x720 [ 526.772162][ T30] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 526.783468][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 526.789200][ T30] ? __fget_files+0x395/0x410 [ 526.815354][ T30] ? __fget_files+0x2a/0x410 [ 526.820090][ T30] __x64_sys_setsockopt+0x1ee/0x280 [ 526.834916][ T30] do_syscall_64+0xf3/0x230 [ 526.839514][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 526.853785][ T30] RIP: 0033:0x7f8fa518cde9 [ 526.858267][ T30] RSP: 002b:00007f8fa2ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 526.875036][ T30] RAX: ffffffffffffffda RBX: 00007f8fa53a6080 RCX: 00007f8fa518cde9 [ 526.883079][ T30] RDX: 00000000000000d3 RSI: 0000000000000000 RDI: 0000000000000003 [ 526.918771][ T30] RBP: 00007f8fa520e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 526.939030][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 526.950153][ T30] R13: 0000000000000001 R14: 00007f8fa53a6080 R15: 00007ffe2926d3c8 [ 526.963827][ T30] [ 526.973584][ T30] [ 526.973584][ T30] Showing all locks held in the system: [ 526.981401][ T30] 1 lock held by khungtaskd/30: [ 526.998928][ T30] #0: ffffffff8eb38f60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x55/0x2a0 [ 527.020060][ T30] 3 locks held by kworker/1:2/1162: [ 527.029464][ T30] #0: ffff88801b078d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x98b/0x18e0 [ 527.050535][ T30] #1: ffffc900042cfc60 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x9c6/0x18e0 [ 527.070727][ T30] #2: ffffffff8fed4bc8 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 527.083096][ T30] 3 locks held by kworker/R-ipv6_/3162: [ 527.093699][ T30] #0: ffff888031040948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x98b/0x18e0 [ 527.115726][ T30] #1: ffffc9000c93fbe0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9c6/0x18e0 [ 527.147401][ T30] #2: ffffffff8fed4bc8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 527.166406][ T30] 5 locks held by kworker/u8:8/4586: [ 527.171759][ T30] 4 locks held by udevd/5202: [ 527.182570][ T30] #0: ffff88805f3ddb08 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb4/0xd70 [ 527.200949][ T30] #1: ffff888028128488 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x53/0x3b0 [ 527.212484][ T30] #2: ffff888052121b48 (kn->active#5){++++}-{0:0}, at: kernfs_seq_start+0x72/0x3b0 [ 527.232546][ T30] #3: ffff88807b1750e8 (&dev->mutex){....}-{4:4}, at: uevent_show+0x17d/0x340 [ 527.248742][ T30] 1 lock held by dhcpcd/5496: [ 527.262094][ T30] #0: ffffffff8fed4bc8 (rtnl_mutex){+.+.}-{4:4}, at: devinet_ioctl+0x34c/0x1d80 [ 527.279809][ T30] 2 locks held by getty/5589: [ 527.286267][ T30] #0: ffff8880356e10a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 527.303509][ T30] #1: ffffc90002fde2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x616/0x1770 [ 527.322382][ T30] 1 lock held by syz-executor/5833: [ 527.328515][ T30] #0: ffffffff8fed4bc8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3b/0x1b0 [ 527.348724][ T30] 1 lock held by syz-executor/5835: [ 527.359502][ T30] #0: ffffffff8fed4bc8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3b/0x1b0 [ 527.379941][ T30] 3 locks held by kworker/u8:10/7641: [ 527.388158][ T30] #0: ffff88801b081148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x98b/0x18e0 [ 527.409475][ T30] #1: ffffc90003067c60 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9c6/0x18e0 [ 527.422632][ T30] #2: ffffffff8fed4bc8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 527.441147][ T30] 1 lock held by syz-executor/8342: [ 527.449131][ T30] #0: ffffffff8fed4bc8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3b/0x1b0 [ 527.470343][ T30] 7 locks held by syz-executor/9538: [ 527.481942][ T30] #0: ffff88802449e420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x225/0xd10 [ 527.499419][ T30] #1: ffff88807cd66088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1ea/0x500 [ 527.511088][ T30] #2: ffff888143b3e2d8 (kn->active#50){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20e/0x500 [ 527.523797][ T30] #3: ffffffff8f77b308 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: new_device_store+0x1b4/0x890 [ 527.543441][ T30] #4: ffff88807b1750e8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x8e/0x520 [ 527.552922][ T30] #5: ffff88802f4b3250 (&devlink->lock_key#11){+.+.}-{4:4}, at: nsim_drv_probe+0xcb/0xb80 [ 527.577064][ T30] #6: ffffffff8fed4bc8 (rtnl_mutex){+.+.}-{4:4}, at: register_nexthop_notifier+0x84/0x290 [ 527.598404][ T30] 4 locks held by syz-executor/9569: [ 527.606462][ T30] #0: ffff88802449e420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x225/0xd10 [ 527.621691][ T30] #1: ffff888030125c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1ea/0x500 [ 527.640500][ T30] #2: ffff888143b3e3c8 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20e/0x500 [ 527.651911][ T30] #3: ffffffff8f77b308 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xfc/0x480 [ 527.672632][ T30] 1 lock held by syz.6.1335/9898: [ 527.679892][ T30] #0: ffffffff8fed4bc8 (rtnl_mutex){+.+.}-{4:4}, at: ip_mroute_setsockopt+0x15b/0x1190 [ 527.702569][ T30] 1 lock held by syz.6.1335/9901: [ 527.708164][ T30] #0: ffffffff8fed4bc8 (rtnl_mutex){+.+.}-{4:4}, at: ip_mroute_setsockopt+0x15b/0x1190 [ 527.726747][ T30] 2 locks held by kworker/1:1/9925: [ 527.732093][ T30] [ 527.742353][ T30] ============================================= [ 527.742353][ T30] [ 527.760210][ T30] NMI backtrace for cpu 0 [ 527.760231][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.14.0-rc3-syzkaller #0 [ 527.760258][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 527.760274][ T30] Call Trace: [ 527.760283][ T30] [ 527.760294][ T30] dump_stack_lvl+0x241/0x360 [ 527.760331][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 527.760358][ T30] ? __pfx__printk+0x10/0x10 [ 527.760392][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 527.760424][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 527.760446][ T30] ? _printk+0xd5/0x120 [ 527.760469][ T30] ? __pfx__printk+0x10/0x10 [ 527.760492][ T30] ? __wake_up_klogd+0xcc/0x110 [ 527.760527][ T30] ? __pfx__printk+0x10/0x10 [ 527.760551][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 527.760592][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 527.760631][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 527.760676][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 527.760706][ T30] watchdog+0x1058/0x10a0 [ 527.760746][ T30] ? watchdog+0x1ea/0x10a0 [ 527.760788][ T30] ? __pfx_watchdog+0x10/0x10 [ 527.760825][ T30] kthread+0x7ab/0x920 [ 527.760862][ T30] ? __pfx_kthread+0x10/0x10 [ 527.760903][ T30] ? __pfx_watchdog+0x10/0x10 [ 527.760939][ T30] ? __pfx_kthread+0x10/0x10 [ 527.760975][ T30] ? __pfx_kthread+0x10/0x10 [ 527.761017][ T30] ? __pfx_kthread+0x10/0x10 [ 527.761053][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 527.761078][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 527.761117][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 527.761147][ T30] ? __pfx_kthread+0x10/0x10 [ 527.761186][ T30] ret_from_fork+0x4d/0x80 [ 527.761222][ T30] ? __pfx_kthread+0x10/0x10 [ 527.761260][ T30] ret_from_fork_asm+0x1a/0x30 [ 527.761306][ T30] [ 527.761317][ T30] Sending NMI from CPU 0 to CPUs 1: [ 527.942701][ C1] NMI backtrace for cpu 1 [ 527.942724][ C1] CPU: 1 UID: 0 PID: 4586 Comm: kworker/u8:8 Not tainted 6.14.0-rc3-syzkaller #0 [ 527.942748][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 527.942763][ C1] Workqueue: netns cleanup_net [ 527.942799][ C1] RIP: 0010:NF_HOOK+0x38b/0x450 [ 527.942834][ C1] Code: bb 42 f7 48 c7 c7 60 8f b3 8e 48 8b 74 24 38 e8 9b 7b 42 f7 e8 76 8b 4d f7 bf 01 00 00 00 44 89 f6 e8 49 63 67 f7 41 83 fe 01 <75> 1e e8 fe 5e 67 f7 48 8b 7c 24 18 31 f6 48 8b 54 24 20 4d 89 fb [ 527.942853][ C1] RSP: 0018:ffffc90000a18860 EFLAGS: 00000246 [ 527.942871][ C1] RAX: 0000000000000100 RBX: 0000000000000001 RCX: ffffc90000a18703 [ 527.942886][ C1] RDX: ffff888034203c00 RSI: 0000000000000001 RDI: 0000000000000001 [ 527.942900][ C1] RBP: ffffc90000a18970 R08: ffffffff8a5a5937 R09: 1ffffffff2079cce [ 527.942916][ C1] R10: dffffc0000000000 R11: fffffbfff2079ccf R12: dffffc0000000000 [ 527.942933][ C1] R13: 1ffff92000143114 R14: 0000000000000001 R15: ffffffff8a5a6dd0 [ 527.942952][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 527.942969][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 527.942984][ C1] CR2: 00007ffc9681eecc CR3: 0000000034982000 CR4: 0000000000350ef0 [ 527.943002][ C1] Call Trace: [ 527.943009][ C1] [ 527.943018][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 527.943041][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 527.943077][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 527.943099][ C1] ? nmi_handle+0x2a/0x5a0 [ 527.943142][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 527.943174][ C1] ? nmi_handle+0x151/0x5a0 [ 527.943207][ C1] ? nmi_handle+0x2a/0x5a0 [ 527.943248][ C1] ? NF_HOOK+0x38b/0x450 [ 527.943279][ C1] ? default_do_nmi+0x63/0x160 [ 527.943315][ C1] ? exc_nmi+0x123/0x1f0 [ 527.943347][ C1] ? end_repeat_nmi+0xf/0x53 [ 527.943378][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 527.943420][ C1] ? NF_HOOK+0x387/0x450 [ 527.943453][ C1] ? NF_HOOK+0x38b/0x450 [ 527.943485][ C1] ? NF_HOOK+0x38b/0x450 [ 527.943517][ C1] ? NF_HOOK+0x38b/0x450 [ 527.943549][ C1] [ 527.943556][ C1] [ 527.943563][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 527.943597][ C1] ? __lock_acquire+0x1397/0x2100 [ 527.943631][ C1] ? NF_HOOK+0x9a/0x450 [ 527.943661][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 527.943691][ C1] ? ip_rcv_core+0x801/0xd10 [ 527.943725][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 527.943762][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 527.943794][ C1] __netif_receive_skb+0x2bf/0x650 [ 527.943821][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 527.943853][ C1] ? __pfx___netif_receive_skb+0x10/0x10 [ 527.943875][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 527.943908][ C1] ? __pfx_lock_release+0x10/0x10 [ 527.943941][ C1] ? _raw_spin_lock_irq+0xdf/0x120 [ 527.943971][ C1] process_backlog+0x662/0x15b0 [ 527.943999][ C1] ? process_backlog+0x33b/0x15b0 [ 527.944030][ C1] ? __pfx_process_backlog+0x10/0x10 [ 527.944055][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 527.944089][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 527.944123][ C1] __napi_poll+0xcd/0x490 [ 527.944149][ C1] net_rx_action+0x89b/0x1240 [ 527.944188][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 527.944213][ C1] ? __run_timer_base+0x178/0x8e0 [ 527.944243][ C1] ? __pfx_tmigr_handle_remote+0x10/0x10 [ 527.944299][ C1] handle_softirqs+0x2d6/0x9b0 [ 527.944324][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 527.944353][ C1] ? do_softirq+0x11b/0x1e0 [ 527.944379][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 527.944411][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 527.944448][ C1] do_softirq+0x11b/0x1e0 [ 527.944471][ C1] [ 527.944478][ C1] [ 527.944486][ C1] ? __pfx_do_softirq+0x10/0x10 [ 527.944511][ C1] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 527.944543][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 527.944575][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 527.944608][ C1] ? rcu_is_watching+0x15/0xb0 [ 527.944634][ C1] __local_bh_enable_ip+0x1bb/0x200 [ 527.944660][ C1] ? addrconf_ifdown+0x68f/0x1b00 [ 527.944687][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 527.944711][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 527.944747][ C1] ? addrconf_ifdown+0x3b4/0x1b00 [ 527.944776][ C1] addrconf_ifdown+0x68f/0x1b00 [ 527.944810][ C1] ? __pfx_addrconf_ifdown+0x10/0x10 [ 527.944836][ C1] ? tls_dev_event+0x8f6/0x10c0 [ 527.944866][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 527.944904][ C1] addrconf_notify+0x3cb/0x1020 [ 527.944939][ C1] notifier_call_chain+0x1a7/0x3f0 [ 527.944975][ C1] unregister_netdevice_many_notify+0x102f/0x1f10 [ 527.945008][ C1] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 527.945034][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 527.945067][ C1] ? unregister_netdevice_queue+0x26b/0x370 [ 527.945103][ C1] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 527.945136][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 527.945177][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 527.945209][ C1] ? nexthop_net_exit_batch_rtnl+0x100/0x150 [ 527.945235][ C1] cleanup_net+0x76d/0xd60 [ 527.945268][ C1] ? __pfx_cleanup_net+0x10/0x10 [ 527.945303][ C1] ? process_scheduled_works+0x9c6/0x18e0 [ 527.945331][ C1] process_scheduled_works+0xac0/0x18e0 [ 527.945376][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 527.945414][ C1] ? assign_work+0x364/0x3d0 [ 527.945444][ C1] worker_thread+0x870/0xd30 [ 527.945475][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 527.945510][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 527.945543][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 527.945569][ C1] ? __kthread_parkme+0x169/0x1d0 [ 527.945601][ C1] ? __pfx_worker_thread+0x10/0x10 [ 527.945630][ C1] kthread+0x7ab/0x920 [ 527.945661][ C1] ? __pfx_kthread+0x10/0x10 [ 527.945696][ C1] ? __pfx_worker_thread+0x10/0x10 [ 527.945725][ C1] ? __pfx_kthread+0x10/0x10 [ 527.945756][ C1] ? __pfx_kthread+0x10/0x10 [ 527.945791][ C1] ? __pfx_kthread+0x10/0x10 [ 527.945823][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 527.945843][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 527.945876][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 527.945901][ C1] ? __pfx_kthread+0x10/0x10 [ 527.945934][ C1] ret_from_fork+0x4d/0x80 [ 527.945964][ C1] ? __pfx_kthread+0x10/0x10 [ 527.945997][ C1] ret_from_fork_asm+0x1a/0x30 [ 527.946034][ C1] [ 528.578519][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 528.585545][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.14.0-rc3-syzkaller #0 [ 528.594347][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 528.604442][ T30] Call Trace: [ 528.607746][ T30] [ 528.610695][ T30] dump_stack_lvl+0x241/0x360 [ 528.615415][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 528.620955][ T30] ? __pfx__printk+0x10/0x10 [ 528.625588][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 528.631654][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 528.637347][ T30] ? vscnprintf+0x5d/0x90 [ 528.641726][ T30] panic+0x349/0x880 [ 528.645733][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 528.651413][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 528.657604][ T30] ? __pfx_panic+0x10/0x10 [ 528.662062][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 528.667481][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 528.673166][ T30] ? __irq_work_queue_local+0x137/0x410 [ 528.678797][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 528.684489][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 528.689970][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 528.696175][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 528.702424][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 528.708125][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 528.714328][ T30] watchdog+0x1097/0x10a0 [ 528.718712][ T30] ? watchdog+0x1ea/0x10a0 [ 528.723183][ T30] ? __pfx_watchdog+0x10/0x10 [ 528.727911][ T30] kthread+0x7ab/0x920 [ 528.732043][ T30] ? __pfx_kthread+0x10/0x10 [ 528.736696][ T30] ? __pfx_watchdog+0x10/0x10 [ 528.741448][ T30] ? __pfx_kthread+0x10/0x10 [ 528.746092][ T30] ? __pfx_kthread+0x10/0x10 [ 528.750840][ T30] ? __pfx_kthread+0x10/0x10 [ 528.755490][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 528.760729][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 528.766411][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 528.771666][ T30] ? __pfx_kthread+0x10/0x10 [ 528.776315][ T30] ret_from_fork+0x4d/0x80 [ 528.780805][ T30] ? __pfx_kthread+0x10/0x10 [ 528.785703][ T30] ret_from_fork_asm+0x1a/0x30 [ 528.790538][ T30] [ 528.793830][ T30] Kernel Offset: disabled [ 528.798163][ T30] Rebooting in 86400 seconds..