last executing test programs: 20.893813595s ago: executing program 3 (id=865): socket$nl_generic(0x10, 0x3, 0x10) mkdir(0x0, 0x11e) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) semctl$SETALL(0x0, 0x0, 0x11, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 19.578741875s ago: executing program 1 (id=872): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x200006, 0x8, &(0x7f0000006680)) gettid() timer_create(0x1, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0x10000008ebc, 0x0) vmsplice(r0, &(0x7f0000000480)=[{&(0x7f00000000c0)='*', 0x1}], 0x1, 0xd) 19.108141606s ago: executing program 3 (id=875): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") syz_mount_image$vfat(&(0x7f0000006d80), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800053, 0x0, 0x1, 0x0, &(0x7f00000000c0)) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x8) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000140)={0x1, 0x3, 0x8001, 0xc0, 0x9, 0xffff}) fchown(r0, 0xee00, 0xee01) fchown(r0, 0x0, 0x0) 16.842423899s ago: executing program 1 (id=877): socket$nl_generic(0x10, 0x3, 0x10) mkdir(0x0, 0x11e) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) semctl$SETALL(0x0, 0x0, 0x11, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) fspick(0xffffffffffffffff, &(0x7f00000000c0)='.\x00', 0x0) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 16.534130986s ago: executing program 3 (id=880): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x4c840) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x340, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb}, {0x0, 0xfff3}, {0xd, 0x300}}, [@filter_kind_options=@f_flow={{0x9}, {0x310, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0xc1f5}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_EMATCHES={0x2fc, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x1, 0x7, 0x6}, {{0x0, 0x1, 0x0, 0x1}, {0x4, 0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_LIST={0x25c, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x8, 0x3, 0x7fff}, {0x0, 0x7, 0x0, 0x6}}}, @TCF_EM_CONTAINER={0x3c, 0x2, 0x0, 0x0, {{0x609, 0x0, 0x9}, "9b0e4450f1dfd7af3c25f0fa749f03a86414a746a707e4c61e42d722d647025ad02cc6cccc0ef61befd11363ceb2"}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x93, 0x1, 0x506}, {0x7, 0x6, 0x2, 0x6, 0x1, 0x0, 0x2}}}, @TCF_EM_META={0xc, 0x3, 0x0, 0x0, {{0x7, 0x4, 0x78}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0xa5fc, 0x8, 0x9}, {0xffffffffffffffff, 0x4, 0x4}}}, @TCF_EM_META={0x64, 0x1, 0x0, 0x0, {{0x8, 0x4, 0xe0}, [@TCA_EM_META_RVALUE={0x6, 0x3, [@TCF_META_TYPE_VAR="1515"]}, @TCA_EM_META_LVALUE={0x1f, 0x2, [@TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="8c1475d26d76", @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="54dcf80dc0fc934855", @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="3365423f9b", @TCF_META_TYPE_VAR="01a3fe"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x9, 0x5, 0x2}, {0x401, 0x5, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x6, 0x5, 0x2}, {0x6, 0xd0, 0x3}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x8, 0x6}, {0xd2, 0x4, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0xfeff, 0x9f, 0x1}, {0x4, 0x7f, 0x2}}}]}}, @TCF_EM_CONTAINER={0xb0, 0x3, 0x0, 0x0, {{0xffff, 0x0, 0x7ff}, "80ae5de5da597a4782f2b7d07f186b46a71f413b7de8437aace9ee68854d68232193c28f4fb18fd3217bcc45e81ed4f14187fde91c58527416fb782f658df55b859bd11a7d1931e56c6fb2d1e4e77e3128eff36ac7977da6f7942f6a5121596fae6e8b609274ff7f596441f8f2ebaa653d49de1cb60c091c1fb55e9c91b71ccc5a4e012f34f380e85b7894fe13515d410e8c93df13ccac4c4743ccb4739c7209e77305"}}, @TCF_EM_META={0xb8, 0x3, 0x0, 0x0, {{0xfff9, 0x4, 0x4}, [@TCA_EM_META_RVALUE={0x9, 0x3, [@TCF_META_TYPE_VAR="268fac4c8f"]}, @TCA_EM_META_RVALUE={0xc, 0x3, [@TCF_META_TYPE_VAR="43e5aca2", @TCF_META_TYPE_INT=0x5]}, @TCA_EM_META_LVALUE={0x10, 0x2, [@TCF_META_TYPE_VAR="ef59af17", @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x10, 0x2}, {0xfff7, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x9, 0x9}, {0x1, 0x5, 0x2}}}, @TCA_EM_META_RVALUE={0x22, 0x3, [@TCF_META_TYPE_VAR="cba41b25", @TCF_META_TYPE_VAR="f8", @TCF_META_TYPE_VAR="ac1b6f3ee388f8", @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="c0fd079872b9"]}, @TCA_EM_META_RVALUE={0x14, 0x3, [@TCF_META_TYPE_VAR="ff13aebd4f06ed", @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="bd"]}, @TCA_EM_META_LVALUE={0x25, 0x2, [@TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="d4e5", @TCF_META_TYPE_VAR="d9a6c8412d38", @TCF_META_TYPE_VAR="e3", @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="823cedb9926c3172", @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="5d1b8eeb"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x6, 0x4, 0x2}, {0x9, 0xd}}}]}}]}, @TCA_EMATCH_TREE_LIST={0x7c, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0xfffe, 0x8, 0x4}, {0x0, 0x6}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x1, 0x8, 0xdf87}, {0x0, 0x5, 0x4}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x100, 0x3, 0x3}, {0x9, 0xffffffff, 0x10, 0x6}}}, @TCF_EM_CONTAINER={0x3c, 0x3, 0x0, 0x0, {{0x1ff, 0x0, 0x6}, "5fb632801f97be1bf6ac574938575a6b42a84cec8a38a7c172ebc9fe675973b81d071b9fba2dd79d882a2b0e9aa8dd1c"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}]}]}}]}, 0x340}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 15.431568392s ago: executing program 0 (id=881): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xa041, 0x1e) openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r2 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000100)='geneve0\x00', 0x10) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write(r3, 0x0, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000380)="0800fbfaffab2be7", 0x8}], 0x1, 0x0, 0x0, 0xe0000000}, 0x4004010) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0xfd}}, 0x14) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f00000001c0)={@remote}, 0x14) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x2, 0x4) bind$inet(r4, &(0x7f0000000280)={0x2, 0x5e21, @empty}, 0x10) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x33, 0x0, 0x0) bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r5, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=""/3, 0x3}, 0x800}], 0x1, 0x40000102, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x18, &(0x7f0000000140)=0x10, 0x4) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r6 = socket$inet(0x2, 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bind$inet(r6, &(0x7f0000000280)={0x2, 0x5e21, @rand_addr=0x64010101}, 0x10) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000040)={0x7, "3eb05b"}, 0x6) close_range(r0, 0xffffffffffffffff, 0x0) 15.429333622s ago: executing program 1 (id=882): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_open_dev$tty1(0xc, 0x4, 0x1) sendto$inet6(0xffffffffffffffff, &(0x7f00000004c0)="900000001c001f03154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d32345653c016466fcb78dcaaf6c3efed495a46200be0000760700c0c80cefd28181d158ba86c9d2896c6d3bca2d00dfff0a0015009e49a6560641263da4de1df32c1739d7fbee9a", 0x88, 0x40004, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f00000001c0)={0x0, 0x20000, 0x8, 0x2, 0x200, &(0x7f0000003c40)="1ae19337aa151f36ae49bb3f8cb95c5bf840d4f1e55efaaf098d47a70eb36a73090000000000001b0f4743f490c585108c1331c7749299a25a705f5096cb268cbc6070d680e1be250700000000000000472471ff550c0010000007f3c7b61abe4162256004ea8ca5e5b5f379c6eb3257eda08f7e6959090000004d13184d382747e035b4722525e00ade86b4c6d1e157c75d15c1f961ebc0a64d7f2a73f8979fcecacaa64f9b9069ebcc1d5b471edbc4f6c7f1b98ae74e909aa6f25b7fa77bf9cd4ed36d5c53dc519d11c3cc1c22a3b86cf3c645413f4afbcea0c99ded703699d2bb6a4a663b99b6069da5aaf64785a5887c31261d4b9e57ee07000000def6f255ca26108f11f02047d47f2d0fec30f7e92482f71496e184214a4e0c5fdc48b0af0c0478940016d8f0990a0e1090fd515380aae83c5eaeed338701574b64200a16ef2811fadcf1e0f49a514df529061e09ce45e3da03a03fe9b4a6bcfa7d04594e4f6d0714a2e14ea127ab37d64a5e0db630cd4f4a2e6c985a542ff20a9b2193f265f93a258a88dd6c9d6a926dd23d32425849c5d9210007660a617f22133b6cb5087f4c6057942aa18193172bd995fa70a1f949b196f2e2a3c175858575713be5ee3f7f4dcecc98123f9ded3afdebe13d79a7f7fcb2469ae0ac503111401612df7ee995f74fb97a63bf62d61f78c062f959119ab50c1f706a930121ebcd53ccb93d158186ed360750ca8e728150d988844b9a5cff46591ccaff416e5a8c25f9555da5ca6fdf75b86ea6171b046b856168f403b5253a5cc393430a09a4489a0895571e597ac8846f945ffb372a88d3a25978b463dc961416c80c55773f917020751ed51cfd73c1e06fbadd156d56bedc117af95d242d6dccbe2ce34dccd6005e944afa92b22ec9a698469c6edc06caa2cfcd61912607d459b4c28ebea9745bcd4697d75c9601fd333d3cd797963a3c71b7cc5fdc756da8d97207936e5f53b53b732533c2722e03002293517966611602f297de6ff5408777b7a93c45cee3ee5c5601a4e94266b295ea7a86812a7ab8896ec5ea1b12643e1844b185734528399e62bceb8700cc6cd491e4a4430d0a3ba329a5a2fa170fd0b1cc4ba8294de988cd35df2cd7344aa8a9f3432b96fb889c02f484f635a0cc3466a3c2733d45f176931b2db18dba54991a9553cedb7f585786388d4042dbae1c95b769e3d4e036e8afea0a04c04f542b152ca1fd1f8efee60425c5a122fd1b90e98635284abd9f217d9e19cb2a64b354c9d79509cc47d7305114990148a7291cb0fe2d1c773a6664b66ae04aa62c534d072ae54c2ca0d5962cc58945d8924abfc4d5af922462507430d8f2c17479a6678b0b3700000000000000000000000000000000000000000000f800"}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) 14.991314302s ago: executing program 3 (id=884): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) select(0x40, &(0x7f00000000c0)={0x8, 0x1, 0x0, 0x1, 0x3, 0x7, 0x7, 0x8}, &(0x7f0000000100)={0x7, 0xfffffffffffffff7, 0x9, 0x3fffffff80, 0x5, 0x5, 0x80, 0x3}, 0x0, 0x0) syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file1\x00', 0x800810, &(0x7f0000000140)={[{@nossd_spread}, {@nodatasum}, {@compress_force}, {@compress_algo={'compress', 0x3d, 'lzo'}}, {@flushoncommit}, {@autodefrag}, {@max_inline={'max_inline', 0x3d, [0x30, 0x37, 0x65]}}, {@nodiscard}]}, 0xfb, 0x510a, &(0x7f000000d000)="$eJzs3U+IVWUfB/Dnzp1x5lVw7isEtsoikGrh4CYioqtMUFF0y8VgBE4tgnThJEi0EMQW/Vt4S4paSK6kFsksjKA2LqQwArehYS7cKAaSi3Yac8957pz7HO+5d0ZtTD8fmTnnOb/zPOe5l7O43+uccwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACEEF74/bNDVfVT16bPnJtp7jywZebyvul1p0OodbbX8vqOrc++8ua2HS9OxA6zL2fLRqPfkFnX81ljVc/GhX69P6+HEMaSAer58pk1pVGLq3vKA1a6fnH30U17mxuPH27Xr146e7L80lkwsdITWCn5eXVh8Vxqdn6PJHt024VTr9Zzimb90xPuX3kRAMCSTLU6i+7H0fwjbre9P60n7WbSbift+AmhXWwsRzbuqn7z3JDWV2iezSwqjPedZ1LP3/9uu5X2T9pJ1FjCPHt3zSPNRL95ziX1lZonAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJ3kkbdHH6qqn7o2febcTHPngS0zl/dNrzsdQqOzvZaVa6vfP9z869utxw78uPmr4xeef6ye94vL0cLO4be48sRkCG8UKhfisBfXhtDqLXSa4cty4a3OynOxAAAAwN3k/s7vkW47i4NjPe1aJ03WOv+iLCxev7j76Ka9zY3HD7frVy+dPbn88Vp9xmvecLxuu7H4UysE4xh/0/EW63HXPaVxqqUjpnn+8fNTf1f1L+X/RnX+j++c/A8AAMDNkP/TcaoNyv/fvfbHJ1X9S/l/Q88hS/k/zjjm/5GwvPwPAAAAd7Lbnf+bpXGqDcr/4y+NfV3Vv5T/p4bL/6PFaceNv8YJ75oMYWrQ1AEAAIA+4v+7L361EPN69s1BmtefevTguarxSvm/OVz+H7ulrwoAAAC4GUe+2P5wVb2U/1vD5f/x2zprAAAAYCne+XDig6p6Kf/PDpf/V+fL/MqHrNNP8a8QDk2GMLGwMpcVfg7tp7sFAAAA4BaJOf3PT3f+ULVfKf/PVd//P97pIF7/33P/v9L1/4VCdte/J90YAAAAgHtR+Xr+eHv87MkF/Z6/P+z1/w/87+CrVccv5f/9w+X/enF5K5//BwAAAMvwX3v+3/bSONUG3f//vo/e/aWqfyn/t4fL/3G5pvjyTtRq2fvz3mQI6xdW8rsJfhMPtyspzI8VCh2tpMe22CMvzI8XCh1zSY/NkyE8uLCyPyn8PxbaSeHK2rxwJCmcjoX8fOgWjiWFE/FM+3xtPt208H0s5BdYzMcrKNZ0L4lIelzt12OhcMMeZ7sHBwAAuKfE8Jxn2bHeZkij7Hxt0A6rB+0wMmiH+qAdRpMd0h37bQ+zvYW4vX1m49Ke/39kuPwf34pV2aLf9f8hXv+fP9ewe/3/bCw0ksJ8LLTSOwa04jGysPtxPEajlfe4sr5bAAAAgLta/F6gvsLzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP5h795j5Lrqw4Gf2dd4H97dBH4i5IfAQB3jgtdrOzzUpmKdpioKpaxLSlQhio29Dos32NhOwREgxwalKIKmJRL80SiOEKrzR1KLBAWaRHEjYRQ1D5SqEUmUiLROEFFoGkChEIlUs/ee2Tvn7jw23nW84fORvHNmvud55+E59945FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfjcc/9Jn/rZV/N7fXvToE5dOfPLQ5kuf/fxFZz8YwuTs45UsXBm4+vqJn9984S2H7th4w20nL357X14uj4fB2p+u/M4XY60nV4ZweyWEnjSwbigL9Ob3h2J9bxgK4awwF6iXmBrISqQNh+/3h3AkzAXqVX2vP4ShQuCSh+65+yu1xHX9IawOIVTTNh6vZm30p4Hz+rLAQBrY3ZMFfvVSph74blcWgFMW3wz1F/2xycYMo/OXa/L66120jr2y0uF1x8Ro83w/27zEnSroSx+YPKWnrVQdS6L09jju3bYM3m2l7Xytp634RSr/hvLSXKgaunZM7dx2xcz++EhXGBvrblbTEj3Pjzz/ue0LSS+b12HswOiivA6/+sDqm7vXfuD+29atfvroOw4/c6rd/FFhkxbTS60a8tfcsnkeowmfJ8vg7Vf6lrTKl64Qws5P/N4HW8VL8//R1vP/+HKOt10NuWOtLw5nc/P4yFBMPDeczc1b6VnoGAEAAGDxdRVSZ/5e091jd72nUHykmtRXmv+v6uz4f9wK+WQ+G+3xECZmE4dHQjhn9vEscFNs7uMjIbx5NjXZGNicBI6H8PrZxNp6VUmJFbHEqiTwk+E8MJEETsTAZBL4VgxcmwS+GAPHksD2GDieBC6MgTDdOI7fH87H0XGgPwa2ZhvxWDwL4RfDsbVkWz1WrwoAAGCR5LPD3sa7hXMdTjVDnF4e62+XIZ6B3TRDNakhncHWp1VNa+hpV0NXuxrq4z7Yevilmivtai6dhlFpzHD9L//mQ6GF0vx/vPX8vzpPRyql4/8hbJn9G3N35ZGZenzrZEMGAAAA4BQM/u+T32wVL83/Jzo7/z/uE+kuZA73xd0Qu0ZCGG8MZNX+YTmQHfUezAMAAACwHNSPx9ePhU/nt9kp2ul8upx/coH544H/iXnz9x2/c2ur/pbm/5Odnf8/0HibdeJE7MXXRkJYUQj8IPayFpi1KgZ+/N7GQD7+E3EDXBOryk9MqFd1TSyxNQbGk8CRZiV+WC9xTmMgf7LqjR+uj2M6L1EIAAAAwGkXdwfE4/Lx/P+3/GbjZ1qVK83/ty7s/P/ZeXDp9P6ZwRDW94TQnf4w4L6BbGHAGBiq5Im7BrK6utOqrhoI4YLawNKqnszX/+9J1xh8qD+rKgbOecvR58+rJb7ZH8L6YuDhj9z4zlpifxKoN/6X/SG8qTbatPHvrMga700b//qKEN5YCNSr+viKEGqN9aVV3VPNr2OQVvXP1RBeUwjUq3pXNYQDAYBlKv5XuqP44L4DV+7aNjMztXcJE3Effn/YOT0zNbZ998yOapM+7Uj63LCM0VXlMXV65ZvH8iWKPnzrlqFO0vXfCY4X28r345dOHMzvx+9CvbPj3NjbcHdTOuS3vbXcRGhY72n+IXct8ZAHipXMPYml+mP+vjAYVlyxb2rv2Ge37d+/d0P2t9PsG7O/8TBTtq02pNtqYL6+dfDyaLpaVuLlbqs1xUrW7798z/p9B65cN335tsumLpv61IZ3bRw/f3zT+LvPX18b1Xj2t81Q18xXdTLUl27scFyLONRzi8tkn45PDQkJieWW2D24puX/yaX5/57W8//4qRM/+fP1GZod/x+Nh/mzx+cO82+NgSOdHv8fbXY0v35iwKokcDAGDjrMDwAAwKtDnOTHvZlxr/RP137n6VblSvP/g539/n+R1v+vL11/cbNl/tfGEuPN1v9Pl/mvr/9/sNn6/+ky//X1/4+8Auv/X1EPJJvkF9b/BwAAXg1O3/r/bZf3Ty8QUMrQdnn/9AIBpQxtl/Hv9AIBC17///H//Kv/Di2U5v/Xdjb/t3A/AAAAnDm+8Gef+X+t4qX5/5HO5v+nf/2/0Oz8/1XNApPNFga0/h8AAADLVLP1/0avHvhYq3Kl+f+xzub/8bSLrobcsdYXh7M17UK6pt1zw/WfDAAAAMDy0BXGxno7zNuwMurml9/mI/lSoK3SRU/+ycmFnf9/vLP5f8PvMr76wOqbu9d+4P4Xb1u3+umj7zj8zNzxfwAAAGDpdLpfAgAAAAAAAAAAAAAAeOU9+R+HNrWKl37/H7bMPt7s9//xun/x9wWvbcgda22//l9+/5L333JgdsnC+4ZDeGsxsOvQrrNCfm3+NcXA3R9d+7pa4lBa4s4nLnyqlvhYGnjfurNfqCUuSAJb4yKJr08D8aqKL6xMAnF5xX9PA3F7HEsDfXngyyuzcVTSbfXToWxbVdJt9ehQCCOFQH1b3T6UtVFJB3hdEqgP8NNpIA7wz/NAV9qrWwazXsXAUCx6w2DWKwAAzljxW2Bv2Dk9MzUev8LH23N7Gm+jhiXLripXW+mw+cfypck+fOuWoU7S3el30blrjfeGam0IG0pfV4tZKrOjXJxa2my61zYZcrvV3rqalEstdNP1NR9Rfzaise27Z3b0th34pvZZNva0zbKhNNkpZuma3aQd1NJBXzoYUYfbpoMux/tdYWysO8n1BzE4Ghq0e0V0+nv94jp/zV4FxTyfOnn4V63qK83/Rzub/1eL43ohvxjAwXhlvb8bscw/AAAALK0vb/71N+K/D11978Ot8pbm/6s6m//HPVj5oeBsb8fxeP3/wyMhzF5afzQL3BSb+/hICG+eTU3GEtkF9S+OJcazwE1xh8naWGLrZGNVK2LgWBL4yXAeOJ4ETsRAvpfiaMh35fz9cAjvnE1taSyxJ5YYTQIfjIFVSWAsBsaTwMoYmEgCz67MA5NJ4N9iIEw3bqtbV+bbCgAAYCHyeVZv492QzvOO9bTLUGmXYaBdhq52GartMjQbRbz/7ZihNzl5pVLI1JvW2p/UUsoQL4a/4H6VMoQfNuZMC5aajucf1M83qDRmuOM9PdXQQmn+P97Z/H+g8TZr/USc/89d/y8L/CB272vx1PFVMfDj9zYG8h0DJ+Jk95p6VZN5iXzSfk0sMREDq5LAnhiYSAJbt+SBI69rDOQz7Xrjh+uNT+clCgEAAAA47eIOgribJs7/b9j3pcFW5Urz/4nO5v+xvcFiY1+MtZ5cGcLtlbne1APrhrJA3I8xFH8e/4ahEM4q7OCol5gayEr0JQ2H7/dnv1DvS6v6Xn/244N4/5KH7rn7K7XEdf0hrC7sfam38Xg1a6M/DZzXlwUG0sDuniwQ9/zUA9/tygJwyup7BeMLKj/VpW50/nJNXn+vlmuCpsMr7QOdJ998v7laKqUdrvk+1bqFPW0t99+yaEpvj+Pebcvx3Tbq3Vb8IpV/Q3lpLlQNXTumdm67YmZ/fKT4S9aSJXqei79S7SS9CK/Dgy+/t+1V0w6MJx8f4/OXm/91WInVffWB1Td3r/3A/betW/300XccfqbjbjQRfyh8z+f/dehHhc271Kohf80tu8+TSZ8ny+K/gYOFTs2dmV33u/m0bXn269e0ipfm/5Odzf97kttZv44bc99ICG8rbNz74ub/45Hsc7AQyD4lX1MOZIfc/2u46ScnAAAALLb6noX6/oLp/DY7ITydJ5fzTy4wf9xfMTFv/k77PfDXH13dKl6a/29tPf9fkXTT8X/H/1kijv/P60zfFb0ifeDgKe2KLlXHknD8f15n+rvN8f95Of7v+P98HP9vw/H/eZ3pT1vpW9IeX7pCCE//0V2PtoqX5v97Opv/W/9v/kX76uv/bW22/t+eZuv/HbT+HwAAsKSaLDSXzvNKq/eVMqSr95UytF0gsO0Sg9b/W/D6f0+d+/hvQgul+f/Bzub/8eUwWGx9uaz/t2pLk6qujYE9FgYEAADgTNRsBwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACvrDv+4X92tIrf+9uLHn3i0olPHtp86bOfv+jsB0OYnn28koUrA1dfP/Hzmy+85dAdG2+47eTFb6/m5Xrz2//fkDvW+uJwCEcKjwzFxHPDtTtzgUvef8uBnlrivuEQ3loM7Dq066xa4lvDIawpBu7+6NrX1RKH0hJ3PnHhU7XEx9LA+9ad/UItcUEeqKTd/ceVWXcraXe/sjKEkUKg3t1Prmysqt7Gn+aBrrSNfxrK2oiBoVj0G0NZGzEwE0tMrwhhfU8I3WlV91azqrrTqv6lmlXVnVb1hWoIF4QQetKqnujLqupJR/5gX1ZVDJzzlqPPn1dLHOkLYX0x8PBHbnxnLfHpJFBv/C/6QnhT7SWTNv7t3qzx3rTx63pDeGMIoS8t8cuerERfWuLJnhBeUwjUG/9ETwgHAq8K8cOn4RNt34Erd22bmZnau4SJvryt/rBzemZqbPvumR3VpE/NVArpl656+WN/7PnPba/dfvjWLUOdpHvycr2zXd7Y23B305ne+9ivgWIlc89Hqf6Yvy8MhhVX7JvaO/bZbfv3792Q/e00+8bsb3cezbbVhuWyrdYUK1m///I96/cduHLd9OXbLpu6bOpTG961cfz88U3j7z5/fW1U49nfxRjqjad/qOf2FCo5HR8AEhISyy3R1fDpNn6mf5CXvujPdbQ3VGc/oAvTir5SlsrsKBdj0JtP36BLU5LCiPoa+zbvdqlkX2/KWa5qzLKpNJmYq6U/yzL7va40OSw21jW7SeP9rjA21t1sO4w23i1u3p+dwuZ9JN90naYBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP6PHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhB44FAAAAAIT5W4fRswEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXAoAAP//PTUiXg==") mmap$IORING_OFF_SQ_RING(0x0, 0x49, 0x0, 0x810, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x40000) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045540, &(0x7f0000000880)=0x3ff) r2 = fsopen(&(0x7f0000000380)='configfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000004c0)='j\x95\'\x8aC\x16\xca\\', &(0x7f0000000c40)='\xe6usek\v\xf6u%\x9b\x00\x00\xad\xeb\x00\x00\x00\x00\x01\x80\x00\x00\xcf\x9b\x9f\b\xb6\xfe\xc8\xda~-\xf5S>\xb8\x86\xfc\x9cVR\x82\x9a\xbdp\xbd\x83w\xf9Z\xd2\xcb\xcdF\xd0#N7\x17\xfc\x1e\xf1\x97\xffxi\xe0KE}]\x8e\xca\xe3+\xc8\x98\x03\x91\x88(\bn\x7f\x0e\x85\xa5\xb4\n?_\xc9\xef\xe0Q\xdb\xb6\xa5\x81t\x06\xda\x95\x935\xf1\x18\xac\x00\xf0\xff\xff\xbd\xb5\xa1\x06\xfd\x01\x00\x00\x00\x0f\xf8\xe3\x8a\x1f\x9c\xf3\xc5\x1f\xf9\xbf[\xd13\xb3\xd3j\r6\x7f', 0x0) socket(0x10, 0x3, 0x0) read(r2, 0x0, 0xfffffea1) socket$inet(0x2, 0x80000, 0x6) r3 = socket$nl_route(0x10, 0x3, 0x0) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) preadv(r0, &(0x7f0000000440)=[{&(0x7f0000000200)=""/208, 0xd0}, {&(0x7f00000003c0)=""/74, 0x4a}], 0x2, 0x1, 0x0) r6 = add_key$keyring(&(0x7f0000001600), &(0x7f0000001640)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r6, r5, 0x1000000007c) r7 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000080)='*', 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r7, r4, 0x36) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x401, 0x70bd25, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x4}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20044010}, 0x44040) 14.734543128s ago: executing program 0 (id=885): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='hugetlb.1GB.usage_in_bytes\x00', 0x26e1, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x800714, &(0x7f00000000c0)={[{@test_dummy_encryption}]}, 0x1, 0x4c0, &(0x7f00000006c0)="$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") syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x1, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c2) mount$overlay(0x0, &(0x7f0000000400)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 13.851766999s ago: executing program 1 (id=886): syz_mount_image$ocfs2(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000080)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00003,coherency=full,coherency=full,localflocks,coherency=full,noacl,\x00'/119], 0x1, 0x4428, &(0x7f0000008940)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x141842, 0x1c2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000200), 0xfea7) copy_file_range(0xffffffffffffffff, 0x0, r0, 0x0, 0xffffffffa003e45c, 0x700000000000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) 13.649319513s ago: executing program 2 (id=887): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='hugetlb.1GB.usage_in_bytes\x00', 0x26e1, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x800714, &(0x7f00000000c0)={[{@test_dummy_encryption}]}, 0x1, 0x4c0, &(0x7f00000006c0)="$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") syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x1, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) add_key$keyring(&(0x7f0000000400), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c2) mount$overlay(0x0, &(0x7f0000000400)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 10.718088572s ago: executing program 2 (id=888): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x200006, 0x8, &(0x7f0000006680)) r0 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x10000008ebc, 0x0) vmsplice(r1, &(0x7f0000000480)=[{&(0x7f00000000c0)='*', 0x1}], 0x1, 0xd) 9.101814029s ago: executing program 1 (id=891): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='hugetlb.1GB.usage_in_bytes\x00', 0x26e1, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x800714, &(0x7f00000000c0)={[{@test_dummy_encryption}]}, 0x1, 0x4c0, &(0x7f00000006c0)="$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") syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x1, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) add_key$keyring(&(0x7f0000000400), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c2) mount$overlay(0x0, &(0x7f0000000400)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 9.078548039s ago: executing program 0 (id=892): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004142, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) r5 = pidfd_getfd(r4, r4, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000780)={0xfffffffe, 0x0, 0x0, 'queue0\x00', 0x48}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xa1001) setns(r5, 0x66020000) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) 8.862905354s ago: executing program 2 (id=894): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x4c840) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x340, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb}, {0x0, 0xfff3}, {0xd, 0x300}}, [@filter_kind_options=@f_flow={{0x9}, {0x310, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0xc1f5}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_EMATCHES={0x2fc, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x1, 0x7, 0x6}, {{0x0, 0x1, 0x0, 0x1}, {0x4, 0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_LIST={0x25c, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x8, 0x3, 0x7fff}, {0x0, 0x7, 0x0, 0x6}}}, @TCF_EM_CONTAINER={0x3c, 0x2, 0x0, 0x0, {{0x609, 0x0, 0x9}, "9b0e4450f1dfd7af3c25f0fa749f03a86414a746a707e4c61e42d722d647025ad02cc6cccc0ef61befd11363ceb2"}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x93, 0x1, 0x506}, {0x7, 0x6, 0x2, 0x6, 0x1, 0x0, 0x2}}}, @TCF_EM_META={0xc, 0x3, 0x0, 0x0, {{0x7, 0x4, 0x78}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0xa5fc, 0x8, 0x9}, {0xffffffffffffffff, 0x4, 0x4}}}, @TCF_EM_META={0x64, 0x1, 0x0, 0x0, {{0x8, 0x4, 0xe0}, [@TCA_EM_META_RVALUE={0x6, 0x3, [@TCF_META_TYPE_VAR="1515"]}, @TCA_EM_META_LVALUE={0x1f, 0x2, [@TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="8c1475d26d76", @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="54dcf80dc0fc934855", @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="3365423f9b", @TCF_META_TYPE_VAR="01a3fe"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x9, 0x5, 0x2}, {0x401, 0x5, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x6, 0x5, 0x2}, {0x6, 0xd0, 0x3}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x8, 0x6}, {0xd2, 0x4, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0xfeff, 0x9f, 0x1}, {0x4, 0x7f, 0x2}}}]}}, @TCF_EM_CONTAINER={0xb0, 0x3, 0x0, 0x0, {{0xffff, 0x0, 0x7ff}, "80ae5de5da597a4782f2b7d07f186b46a71f413b7de8437aace9ee68854d68232193c28f4fb18fd3217bcc45e81ed4f14187fde91c58527416fb782f658df55b859bd11a7d1931e56c6fb2d1e4e77e3128eff36ac7977da6f7942f6a5121596fae6e8b609274ff7f596441f8f2ebaa653d49de1cb60c091c1fb55e9c91b71ccc5a4e012f34f380e85b7894fe13515d410e8c93df13ccac4c4743ccb4739c7209e77305"}}, @TCF_EM_META={0xb8, 0x3, 0x0, 0x0, {{0xfff9, 0x4, 0x4}, [@TCA_EM_META_RVALUE={0x9, 0x3, [@TCF_META_TYPE_VAR="268fac4c8f"]}, @TCA_EM_META_RVALUE={0xc, 0x3, [@TCF_META_TYPE_VAR="43e5aca2", @TCF_META_TYPE_INT=0x5]}, @TCA_EM_META_LVALUE={0x10, 0x2, [@TCF_META_TYPE_VAR="ef59af17", @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x10, 0x2}, {0xfff7, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x9, 0x9}, {0x1, 0x5, 0x2}}}, @TCA_EM_META_RVALUE={0x22, 0x3, [@TCF_META_TYPE_VAR="cba41b25", @TCF_META_TYPE_VAR="f8", @TCF_META_TYPE_VAR="ac1b6f3ee388f8", @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="c0fd079872b9"]}, @TCA_EM_META_RVALUE={0x14, 0x3, [@TCF_META_TYPE_VAR="ff13aebd4f06ed", @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="bd"]}, @TCA_EM_META_LVALUE={0x25, 0x2, [@TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="d4e5", @TCF_META_TYPE_VAR="d9a6c8412d38", @TCF_META_TYPE_VAR="e3", @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="823cedb9926c3172", @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="5d1b8eeb"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x6, 0x4, 0x2}, {0x9, 0xd}}}]}}]}, @TCA_EMATCH_TREE_LIST={0x7c, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0xfffe, 0x8, 0x4}, {0x0, 0x6}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x1, 0x8, 0xdf87}, {0x0, 0x5, 0x4}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x100, 0x3, 0x3}, {0x9, 0xffffffff, 0x10, 0x6}}}, @TCF_EM_CONTAINER={0x3c, 0x3, 0x0, 0x0, {{0x1ff, 0x0, 0x6}, "5fb632801f97be1bf6ac574938575a6b42a84cec8a38a7c172ebc9fe675973b81d071b9fba2dd79d882a2b0e9aa8dd1c"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}]}]}}]}, 0x340}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 8.833056975s ago: executing program 2 (id=895): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xa041, 0x1e) openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r2 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000100)='geneve0\x00', 0x10) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write(r3, 0x0, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000380)="0800fbfaffab2be7", 0x8}], 0x1, 0x0, 0x0, 0xe0000000}, 0x4004010) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0xfd}}, 0x14) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f00000001c0)={@remote}, 0x14) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x2, 0x4) bind$inet(r4, &(0x7f0000000280)={0x2, 0x5e21, @empty}, 0x10) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x33, 0x0, 0x0) bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r5, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=""/3, 0x3}, 0x800}], 0x1, 0x40000102, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x18, &(0x7f0000000140)=0x10, 0x4) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r6 = socket$inet(0x2, 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bind$inet(r6, &(0x7f0000000280)={0x2, 0x5e21, @rand_addr=0x64010101}, 0x10) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000040)={0x7, "3eb05b"}, 0x6) close_range(r0, 0xffffffffffffffff, 0x0) 8.024039744s ago: executing program 4 (id=896): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004142, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) pidfd_getfd(r4, r4, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000780)={0xfffffffe, 0x0, 0x0, 'queue0\x00', 0x48}) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xa1001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f00000003c0)={0x0, 0x0, {0xffffffffffffffff}}) dup3(r5, r6, 0x0) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) 7.697340052s ago: executing program 3 (id=897): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='hugetlb.1GB.usage_in_bytes\x00', 0x26e1, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x800714, &(0x7f00000000c0)={[{@test_dummy_encryption}]}, 0x1, 0x4c0, &(0x7f00000006c0)="$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") syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x1, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c2) mount$overlay(0x0, &(0x7f0000000400)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 7.191244743s ago: executing program 4 (id=898): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004142, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) r5 = pidfd_getfd(r4, r4, 0x0) setns(r5, 0x66020000) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) 7.176225874s ago: executing program 0 (id=899): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='hugetlb.1GB.usage_in_bytes\x00', 0x26e1, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x800714, &(0x7f00000000c0)={[{@test_dummy_encryption}]}, 0x1, 0x4c0, &(0x7f00000006c0)="$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") syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x1, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) add_key$keyring(&(0x7f0000000400), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c2) mount$overlay(0x0, &(0x7f0000000400)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 7.175708934s ago: executing program 2 (id=900): syz_emit_ethernet(0xd2, &(0x7f00000000c0)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xc4, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x29, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @local, {[@cipso={0x86, 0x25, 0x2, [{0x6, 0x8, "5e000000ff00"}, {0x0, 0x5, "4eb8a6"}, {0x0, 0x12, "9606053d0006ff00800000b61af93a93"}]}, @rr={0x7, 0x1f, 0x57, [@rand_addr=0x64010101, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @rand_addr=0x64010102, @loopback, @private=0xa010102]}, @cipso={0x86, 0x48, 0x0, [{0x0, 0x7, "4b6cefc500"}, {0x0, 0xc, "df61168c24ac88ad078c"}, {0x0, 0x12, "2189ea43e2149b8444a30300505c09a0"}, {0x7, 0x12, "ffd11634eea26b0faffa0dea2e903528"}, {0x0, 0x9, "02a20948fd7406"}, {0x0, 0x2}]}, @timestamp={0x44, 0x4}]}}, "a815a23d"}}}}}, 0x0) 4.863393687s ago: executing program 4 (id=901): openat$kvm(0x0, &(0x7f0000000380), 0x2080, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40801, 0x0) epoll_create(0x8) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x33ed0000) r0 = open(&(0x7f0000000040)='.\x00', 0x101480, 0x24) getdents64(r0, &(0x7f0000000fc0)=""/224, 0xe0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x1018e58, &(0x7f0000000000), 0x1, 0x61f, &(0x7f0000001680)="$eJzs3c9rXNUeAPDvnUnSpM17aR+Px2t4DwMuWpCmSS1W3djWhV0ULNiFiIuGJqmh0x80KdhaaAsuFBRE3Bbpxn/AvXTvTgR151qoIhUFLRm5d+6kk+ROk6admaT384GZOffcO3POd05P77n35swNoLTG0qdKxO6IxVNJxEjLuuForBzLt7v367XT6SOJev2NX5JI8rzm9ov56470KYkYjIhvjkb8q7q63PkrV89O1eoN1yP2L5y7uH/+ytV9c+emzsycmTk/eeDFg4cmXpo8OPlE4tyRvx47/vr/Pn7/nRdmv63tS+JwnOx/bzpWxLEB9aQgcyzGYjEPsTW/LyIOpYmC72WrWVcI2zpfDzammv977I+I/8RIVLOlhpGY+6inlQM6ql6NqAMllej/UFLNcUDz2H59x8EnOzwq6Z67RxoHQKvj72ucG4nB7Nho+72k5ciocW5j5xMoPy3j/rXRW+kjlp2H+GOpdfqeQDnt3LgZEf8tij/J6rYzizSNvxKVlveldZqIiIE8/eoGim4mWs+dPOZ5mEevxCPE39oO6XdxOH9N849usPyxFcvdjh+AcrpzJN+RZ3vjB/u/dOzRHP9EwfhnuGDftRG93v+1H/819/eD2TnyyopxWDpmOVH8kf0rM3788Nin7cpvHf/dv5Zk9WiOBbvh7s2I0RXxf5AN9JKl9k8K2j/d5NTh9ZXx2nc/H2u3bnn8o7e6HX/9dsSewuOfB6PSNPWQ65P7Z+dqMxON58Iyvvr67S/ald/r+NP2394m/pb2r6x8X/qdXFxnGV+euH1uoM264TXjr/w0kDSON5uf8e7UwsKlyYiB5Hi+SUv+gYfXpblN8zPS+Pc+W9z/l/37v7n8c4ZaD2DWcPHNs/fardtI+7dcTF6sr7MO7aTxT6/d/qv6f5r3yTrL+P2ty/9vt64g/og8/qHHCQwAAAAAAABKqJJdg00q40vpSmV8vDFf9t+xvVK7ML/w3OyFy+enI/Zmfw/ZX2le6R5pLCfp8mT+97DN5QMrlp+PiF0R8Vl1KFseP32hNt3r4AEAAAAAAAAAAAAAAAAAAGCT2JHP/2/ep/q3amP+P1ASnbzBHLC56f9QXln/X3WLJ6AM7P+hvPR/KC/9H8pL/4fy0v+hvPR/KC/9H8pL/wcAAACAp9KuZ+78kETEjZeHskdqIF9X7WnNgE7rL8irX+9BRYCus4+H8lq69G/6P5RO0fh/lT/zHwfsfHWAHkiKMrPBQf3hnf9O4TsBAAAAAAAAAAAAgA7Ys7v9/P91zQ0AtizT/qC8HmP+v58OgC3OT/9DeTnGB9aaxT/YboX5/wAAAAAAAAAAAADQNcPZI6mM53OBh6NSGR+P+EdE7Iz+ZHauNjMREf+MiO+r/dvS5cleVxoAAAAAAAAAAAAAAAAAAACeMvNXrp6dqtVmLrUm/lqV83QnmndB7UJZr8QjviuS7n8tQxHR80bpWKKvJSeJuJG2/Kao2KX52BzVyBI9/o8JAAAAAAAAAAAAAAAAAABKqGXucbHRz7tcIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADovgf3/+9cotcxAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABb098BAAD///yqQiE=") 4.861833577s ago: executing program 2 (id=902): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004142, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0) r3 = getpid() syz_pidfd_open(r3, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000780)={0xfffffffe, 0x0, 0x0, 'queue0\x00', 0x48}) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xa1001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r6, 0x40605346, &(0x7f00000003c0)={0x0, 0x0, {0xffffffffffffffff}}) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) 2.943141142s ago: executing program 1 (id=903): syz_mount_image$ocfs2(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000080)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00003,coherency=full,coherency=full,localflocks,coherency=full,noacl,\x00'/119], 0x1, 0x4428, &(0x7f0000008940)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x141842, 0x1c2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000200), 0xfea7) copy_file_range(0xffffffffffffffff, 0x0, r0, 0x0, 0xffffffffa003e45c, 0x700000000000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) 2.635361419s ago: executing program 4 (id=904): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x200006, 0x8, &(0x7f0000006680)) r0 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x10000008ebc, 0x0) vmsplice(r1, &(0x7f0000000480)=[{&(0x7f00000000c0)='*', 0x1}], 0x1, 0xd) 2.634233079s ago: executing program 3 (id=905): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5c5d000) socket(0x1, 0x803, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0xf3a, 0x0) timer_settime(r0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 2.393389095s ago: executing program 0 (id=906): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004142, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) r5 = pidfd_getfd(r4, r4, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000780)={0xfffffffe, 0x0, 0x0, 'queue0\x00', 0x48}) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xa1001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) dup3(r6, r7, 0x0) setns(r5, 0x66020000) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) setns(r5, 0x80) 1.320434779s ago: executing program 0 (id=907): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) select(0x40, &(0x7f00000000c0)={0x8, 0x1, 0x0, 0x1, 0x3, 0x7, 0x7, 0x8}, &(0x7f0000000100)={0x7, 0xfffffffffffffff7, 0x9, 0x3fffffff80, 0x5, 0x5, 0x80, 0x3}, 0x0, 0x0) syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file1\x00', 0x800810, &(0x7f0000000140)={[{@nossd_spread}, {@nodatasum}, {@compress_force}, {@compress_algo={'compress', 0x3d, 'lzo'}}, {@flushoncommit}, {@autodefrag}, {@max_inline={'max_inline', 0x3d, [0x30, 0x37, 0x65]}}, {@nodiscard}]}, 0xfb, 0x510a, &(0x7f000000d000)="$eJzs3U+IVWUfB/Dnzp1x5lVw7isEtsoikGrh4CYioqtMUFF0y8VgBE4tgnThJEi0EMQW/Vt4S4paSK6kFsksjKA2LqQwArehYS7cKAaSi3Yac8957pz7HO+5d0ZtTD8fmTnnOb/zPOe5l7O43+uccwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACEEF74/bNDVfVT16bPnJtp7jywZebyvul1p0OodbbX8vqOrc++8ua2HS9OxA6zL2fLRqPfkFnX81ljVc/GhX69P6+HEMaSAer58pk1pVGLq3vKA1a6fnH30U17mxuPH27Xr146e7L80lkwsdITWCn5eXVh8Vxqdn6PJHt024VTr9Zzimb90xPuX3kRAMCSTLU6i+7H0fwjbre9P60n7WbSbift+AmhXWwsRzbuqn7z3JDWV2iezSwqjPedZ1LP3/9uu5X2T9pJ1FjCPHt3zSPNRL95ziX1lZonAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJ3kkbdHH6qqn7o2febcTHPngS0zl/dNrzsdQqOzvZaVa6vfP9z869utxw78uPmr4xeef6ye94vL0cLO4be48sRkCG8UKhfisBfXhtDqLXSa4cty4a3OynOxAAAAwN3k/s7vkW47i4NjPe1aJ03WOv+iLCxev7j76Ka9zY3HD7frVy+dPbn88Vp9xmvecLxuu7H4UysE4xh/0/EW63HXPaVxqqUjpnn+8fNTf1f1L+X/RnX+j++c/A8AAMDNkP/TcaoNyv/fvfbHJ1X9S/l/Q88hS/k/zjjm/5GwvPwPAAAAd7Lbnf+bpXGqDcr/4y+NfV3Vv5T/p4bL/6PFaceNv8YJ75oMYWrQ1AEAAIA+4v+7L361EPN69s1BmtefevTguarxSvm/OVz+H7ulrwoAAAC4GUe+2P5wVb2U/1vD5f/x2zprAAAAYCne+XDig6p6Kf/PDpf/V+fL/MqHrNNP8a8QDk2GMLGwMpcVfg7tp7sFAAAA4BaJOf3PT3f+ULVfKf/PVd//P97pIF7/33P/v9L1/4VCdte/J90YAAAAgHtR+Xr+eHv87MkF/Z6/P+z1/w/87+CrVccv5f/9w+X/enF5K5//BwAAAMvwX3v+3/bSONUG3f//vo/e/aWqfyn/t4fL/3G5pvjyTtRq2fvz3mQI6xdW8rsJfhMPtyspzI8VCh2tpMe22CMvzI8XCh1zSY/NkyE8uLCyPyn8PxbaSeHK2rxwJCmcjoX8fOgWjiWFE/FM+3xtPt208H0s5BdYzMcrKNZ0L4lIelzt12OhcMMeZ7sHBwAAuKfE8Jxn2bHeZkij7Hxt0A6rB+0wMmiH+qAdRpMd0h37bQ+zvYW4vX1m49Ke/39kuPwf34pV2aLf9f8hXv+fP9ewe/3/bCw0ksJ8LLTSOwa04jGysPtxPEajlfe4sr5bAAAAgLta/F6gvsLzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP5h795j5Lrqw4Gf2dd4H97dBH4i5IfAQB3jgtdrOzzUpmKdpioKpaxLSlQhio29Dos32NhOwREgxwalKIKmJRL80SiOEKrzR1KLBAWaRHEjYRQ1D5SqEUmUiLROEFFoGkChEIlUs/ee2Tvn7jw23nW84fORvHNmvud55+E59945FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfjcc/9Jn/rZV/N7fXvToE5dOfPLQ5kuf/fxFZz8YwuTs45UsXBm4+vqJn9984S2H7th4w20nL357X14uj4fB2p+u/M4XY60nV4ZweyWEnjSwbigL9Ob3h2J9bxgK4awwF6iXmBrISqQNh+/3h3AkzAXqVX2vP4ShQuCSh+65+yu1xHX9IawOIVTTNh6vZm30p4Hz+rLAQBrY3ZMFfvVSph74blcWgFMW3wz1F/2xycYMo/OXa/L66120jr2y0uF1x8Ro83w/27zEnSroSx+YPKWnrVQdS6L09jju3bYM3m2l7Xytp634RSr/hvLSXKgaunZM7dx2xcz++EhXGBvrblbTEj3Pjzz/ue0LSS+b12HswOiivA6/+sDqm7vXfuD+29atfvroOw4/c6rd/FFhkxbTS60a8tfcsnkeowmfJ8vg7Vf6lrTKl64Qws5P/N4HW8VL8//R1vP/+HKOt10NuWOtLw5nc/P4yFBMPDeczc1b6VnoGAEAAGDxdRVSZ/5e091jd72nUHykmtRXmv+v6uz4f9wK+WQ+G+3xECZmE4dHQjhn9vEscFNs7uMjIbx5NjXZGNicBI6H8PrZxNp6VUmJFbHEqiTwk+E8MJEETsTAZBL4VgxcmwS+GAPHksD2GDieBC6MgTDdOI7fH87H0XGgPwa2ZhvxWDwL4RfDsbVkWz1WrwoAAGCR5LPD3sa7hXMdTjVDnF4e62+XIZ6B3TRDNakhncHWp1VNa+hpV0NXuxrq4z7Yevilmivtai6dhlFpzHD9L//mQ6GF0vx/vPX8vzpPRyql4/8hbJn9G3N35ZGZenzrZEMGAAAA4BQM/u+T32wVL83/Jzo7/z/uE+kuZA73xd0Qu0ZCGG8MZNX+YTmQHfUezAMAAACwHNSPx9ePhU/nt9kp2ul8upx/coH544H/iXnz9x2/c2ur/pbm/5Odnf8/0HibdeJE7MXXRkJYUQj8IPayFpi1KgZ+/N7GQD7+E3EDXBOryk9MqFd1TSyxNQbGk8CRZiV+WC9xTmMgf7LqjR+uj2M6L1EIAAAAwGkXdwfE4/Lx/P+3/GbjZ1qVK83/ty7s/P/ZeXDp9P6ZwRDW94TQnf4w4L6BbGHAGBiq5Im7BrK6utOqrhoI4YLawNKqnszX/+9J1xh8qD+rKgbOecvR58+rJb7ZH8L6YuDhj9z4zlpifxKoN/6X/SG8qTbatPHvrMga700b//qKEN5YCNSr+viKEGqN9aVV3VPNr2OQVvXP1RBeUwjUq3pXNYQDAYBlKv5XuqP44L4DV+7aNjMztXcJE3Effn/YOT0zNbZ998yOapM+7Uj63LCM0VXlMXV65ZvH8iWKPnzrlqFO0vXfCY4X28r345dOHMzvx+9CvbPj3NjbcHdTOuS3vbXcRGhY72n+IXct8ZAHipXMPYml+mP+vjAYVlyxb2rv2Ge37d+/d0P2t9PsG7O/8TBTtq02pNtqYL6+dfDyaLpaVuLlbqs1xUrW7798z/p9B65cN335tsumLpv61IZ3bRw/f3zT+LvPX18b1Xj2t81Q18xXdTLUl27scFyLONRzi8tkn45PDQkJieWW2D24puX/yaX5/57W8//4qRM/+fP1GZod/x+Nh/mzx+cO82+NgSOdHv8fbXY0v35iwKokcDAGDjrMDwAAwKtDnOTHvZlxr/RP137n6VblSvP/g539/n+R1v+vL11/cbNl/tfGEuPN1v9Pl/mvr/9/sNn6/+ky//X1/4+8Auv/X1EPJJvkF9b/BwAAXg1O3/r/bZf3Ty8QUMrQdnn/9AIBpQxtl/Hv9AIBC17///H//Kv/Di2U5v/Xdjb/t3A/AAAAnDm+8Gef+X+t4qX5/5HO5v+nf/2/0Oz8/1XNApPNFga0/h8AAADLVLP1/0avHvhYq3Kl+f+xzub/8bSLrobcsdYXh7M17UK6pt1zw/WfDAAAAMDy0BXGxno7zNuwMurml9/mI/lSoK3SRU/+ycmFnf9/vLP5f8PvMr76wOqbu9d+4P4Xb1u3+umj7zj8zNzxfwAAAGDpdLpfAgAAAAAAAAAAAAAAeOU9+R+HNrWKl37/H7bMPt7s9//xun/x9wWvbcgda22//l9+/5L333JgdsnC+4ZDeGsxsOvQrrNCfm3+NcXA3R9d+7pa4lBa4s4nLnyqlvhYGnjfurNfqCUuSAJb4yKJr08D8aqKL6xMAnF5xX9PA3F7HEsDfXngyyuzcVTSbfXToWxbVdJt9ehQCCOFQH1b3T6UtVFJB3hdEqgP8NNpIA7wz/NAV9qrWwazXsXAUCx6w2DWKwAAzljxW2Bv2Dk9MzUev8LH23N7Gm+jhiXLripXW+mw+cfypck+fOuWoU7S3el30blrjfeGam0IG0pfV4tZKrOjXJxa2my61zYZcrvV3rqalEstdNP1NR9Rfzaise27Z3b0th34pvZZNva0zbKhNNkpZuma3aQd1NJBXzoYUYfbpoMux/tdYWysO8n1BzE4Ghq0e0V0+nv94jp/zV4FxTyfOnn4V63qK83/Rzub/1eL43ohvxjAwXhlvb8bscw/AAAALK0vb/71N+K/D11978Ot8pbm/6s6m//HPVj5oeBsb8fxeP3/wyMhzF5afzQL3BSb+/hICG+eTU3GEtkF9S+OJcazwE1xh8naWGLrZGNVK2LgWBL4yXAeOJ4ETsRAvpfiaMh35fz9cAjvnE1taSyxJ5YYTQIfjIFVSWAsBsaTwMoYmEgCz67MA5NJ4N9iIEw3bqtbV+bbCgAAYCHyeVZv492QzvOO9bTLUGmXYaBdhq52GartMjQbRbz/7ZihNzl5pVLI1JvW2p/UUsoQL4a/4H6VMoQfNuZMC5aajucf1M83qDRmuOM9PdXQQmn+P97Z/H+g8TZr/USc/89d/y8L/CB272vx1PFVMfDj9zYG8h0DJ+Jk95p6VZN5iXzSfk0sMREDq5LAnhiYSAJbt+SBI69rDOQz7Xrjh+uNT+clCgEAAAA47eIOgribJs7/b9j3pcFW5Urz/4nO5v+xvcFiY1+MtZ5cGcLtlbne1APrhrJA3I8xFH8e/4ahEM4q7OCol5gayEr0JQ2H7/dnv1DvS6v6Xn/244N4/5KH7rn7K7XEdf0hrC7sfam38Xg1a6M/DZzXlwUG0sDuniwQ9/zUA9/tygJwyup7BeMLKj/VpW50/nJNXn+vlmuCpsMr7QOdJ998v7laKqUdrvk+1bqFPW0t99+yaEpvj+Pebcvx3Tbq3Vb8IpV/Q3lpLlQNXTumdm67YmZ/fKT4S9aSJXqei79S7SS9CK/Dgy+/t+1V0w6MJx8f4/OXm/91WInVffWB1Td3r/3A/betW/300XccfqbjbjQRfyh8z+f/dehHhc271Kohf80tu8+TSZ8ny+K/gYOFTs2dmV33u/m0bXn269e0ipfm/5Odzf97kttZv44bc99ICG8rbNz74ub/45Hsc7AQyD4lX1MOZIfc/2u46ScnAAAALLb6noX6/oLp/DY7ITydJ5fzTy4wf9xfMTFv/k77PfDXH13dKl6a/29tPf9fkXTT8X/H/1kijv/P60zfFb0ifeDgKe2KLlXHknD8f15n+rvN8f95Of7v+P98HP9vw/H/eZ3pT1vpW9IeX7pCCE//0V2PtoqX5v97Opv/W/9v/kX76uv/bW22/t+eZuv/HbT+HwAAsKSaLDSXzvNKq/eVMqSr95UytF0gsO0Sg9b/W/D6f0+d+/hvQgul+f/Bzub/8eUwWGx9uaz/t2pLk6qujYE9FgYEAADgTNRsBwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACvrDv+4X92tIrf+9uLHn3i0olPHtp86bOfv+jsB0OYnn28koUrA1dfP/Hzmy+85dAdG2+47eTFb6/m5Xrz2//fkDvW+uJwCEcKjwzFxHPDtTtzgUvef8uBnlrivuEQ3loM7Dq066xa4lvDIawpBu7+6NrX1RKH0hJ3PnHhU7XEx9LA+9ad/UItcUEeqKTd/ceVWXcraXe/sjKEkUKg3t1Prmysqt7Gn+aBrrSNfxrK2oiBoVj0G0NZGzEwE0tMrwhhfU8I3WlV91azqrrTqv6lmlXVnVb1hWoIF4QQetKqnujLqupJR/5gX1ZVDJzzlqPPn1dLHOkLYX0x8PBHbnxnLfHpJFBv/C/6QnhT7SWTNv7t3qzx3rTx63pDeGMIoS8t8cuerERfWuLJnhBeUwjUG/9ETwgHAq8K8cOn4RNt34Erd22bmZnau4SJvryt/rBzemZqbPvumR3VpE/NVArpl656+WN/7PnPba/dfvjWLUOdpHvycr2zXd7Y23B305ne+9ivgWIlc89Hqf6Yvy8MhhVX7JvaO/bZbfv3792Q/e00+8bsb3cezbbVhuWyrdYUK1m///I96/cduHLd9OXbLpu6bOpTG961cfz88U3j7z5/fW1U49nfxRjqjad/qOf2FCo5HR8AEhISyy3R1fDpNn6mf5CXvujPdbQ3VGc/oAvTir5SlsrsKBdj0JtP36BLU5LCiPoa+zbvdqlkX2/KWa5qzLKpNJmYq6U/yzL7va40OSw21jW7SeP9rjA21t1sO4w23i1u3p+dwuZ9JN90naYBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP6PHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhB44FAAAAAIT5W4fRswEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXAoAAP//PTUiXg==") mmap$IORING_OFF_SQ_RING(0x0, 0x49, 0x0, 0x810, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x40000) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045540, &(0x7f0000000880)=0x3ff) r2 = fsopen(&(0x7f0000000380)='configfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000004c0)='j\x95\'\x8aC\x16\xca\\', &(0x7f0000000c40)='\xe6usek\v\xf6u%\x9b\x00\x00\xad\xeb\x00\x00\x00\x00\x01\x80\x00\x00\xcf\x9b\x9f\b\xb6\xfe\xc8\xda~-\xf5S>\xb8\x86\xfc\x9cVR\x82\x9a\xbdp\xbd\x83w\xf9Z\xd2\xcb\xcdF\xd0#N7\x17\xfc\x1e\xf1\x97\xffxi\xe0KE}]\x8e\xca\xe3+\xc8\x98\x03\x91\x88(\bn\x7f\x0e\x85\xa5\xb4\n?_\xc9\xef\xe0Q\xdb\xb6\xa5\x81t\x06\xda\x95\x935\xf1\x18\xac\x00\xf0\xff\xff\xbd\xb5\xa1\x06\xfd\x01\x00\x00\x00\x0f\xf8\xe3\x8a\x1f\x9c\xf3\xc5\x1f\xf9\xbf[\xd13\xb3\xd3j\r6\x7f', 0x0) socket(0x10, 0x3, 0x0) read(r2, 0x0, 0xfffffea1) socket$inet(0x2, 0x80000, 0x6) r3 = socket$nl_route(0x10, 0x3, 0x0) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) preadv(r0, &(0x7f0000000440)=[{&(0x7f0000000200)=""/208, 0xd0}, {&(0x7f00000003c0)=""/74, 0x4a}], 0x2, 0x1, 0x0) r6 = add_key$keyring(&(0x7f0000001600), &(0x7f0000001640)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r6, r5, 0x1000000007c) r7 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000080)='*', 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r7, r4, 0x36) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x401, 0x70bd25, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x4}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20044010}, 0x44040) 1.233230992s ago: executing program 4 (id=908): socket$nl_xfrm(0x10, 0x3, 0x6) gettid() syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x500, &(0x7f0000000f40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$set_reqkey_keyring(0xe, 0x2) request_key(&(0x7f00000000c0)='logon\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000003c0)={@random="e33110495bfd", @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x28, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x7}, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @loopback={0xffffffffffffff8d}, @private1}}}}}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 0s ago: executing program 4 (id=909): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004142, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) r5 = pidfd_getfd(r4, r4, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000780)={0xfffffffe, 0x0, 0x0, 'queue0\x00', 0x48}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xa1001) setns(r5, 0x66020000) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 70.030513][ T2239] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 70.040439][ T2239] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.056954][ T4469] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.66 (4469) [ 70.092372][ T4465] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 70.103168][ T4469] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 70.113767][ T4469] BTRFS info (device loop3): setting nodatasum [ 70.119979][ T4469] BTRFS info (device loop3): force zlib compression, level 3 [ 70.128267][ T4469] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 70.131509][ T2304] usb 1-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 70.138328][ T4469] BTRFS info (device loop3): use lzo compression, level 0 [ 70.154428][ T4469] BTRFS info (device loop3): turning on flush-on-commit [ 70.161796][ T4469] BTRFS info (device loop3): enabling auto defrag [ 70.168508][ T4469] BTRFS info (device loop3): max_inline at 4096 [ 70.175171][ T4469] BTRFS info (device loop3): using free space tree [ 70.182133][ T4469] BTRFS info (device loop3): has skinny extents [ 70.188343][ T2304] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.215786][ T2304] usb 1-1: Product: syz [ 70.222880][ T4229] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 70.239008][ T2304] usb 1-1: Manufacturer: syz [ 70.245006][ T2304] usb 1-1: SerialNumber: syz [ 70.335564][ T4469] BTRFS info (device loop3): enabling ssd optimizations [ 70.491398][ T2239] usb 3-1: USB disconnect, device number 2 [ 70.523719][ T4463] udc-core: couldn't find an available UDC or it's busy [ 70.551628][ T4463] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 70.591416][ T4229] usb 2-1: config 0 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 70.630903][ T4229] usb 2-1: config 0 interface 0 has no altsetting 0 [ 70.639110][ T4229] usb 2-1: New USB device found, idVendor=046d, idProduct=c512, bcdDevice= 0.00 [ 70.668148][ T4229] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.720641][ T4519] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 70.785524][ T4229] usb 2-1: config 0 descriptor?? [ 70.816771][ T2304] debugfs: Directory 'card3' with parent 'sound' already present! [ 70.911534][ T2304] usb 1-1: 0:1 : does not exist [ 70.916745][ T2304] usb 1-1: BAAD SPEAKER p_chmask mismatch [ 70.969495][ T2304] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 70.978345][ T4523] IPv6: addrconf: prefix option has invalid lifetime [ 71.008211][ T2304] usb 1-1: USB disconnect, device number 2 [ 71.028618][ T4523] IPv6: addrconf: prefix option has invalid lifetime [ 71.236268][ T4180] udevd[4180]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 71.272738][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.279318][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.312309][ T4229] usb 2-1: string descriptor 0 read error: -71 [ 71.417137][ T4537] loop0: detected capacity change from 0 to 4096 [ 71.512864][ T4537] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 71.701737][ T4229] usbhid 2-1:0.0: can't add hid device: -71 [ 71.708165][ T4229] usbhid: probe of 2-1:0.0 failed with error -71 [ 71.731650][ T4229] usb 2-1: USB disconnect, device number 2 [ 72.114692][ T4537] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 72.385223][ T4549] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 72.504218][ T4186] ntfs3: loop0: ntfs_sync_fs r=1a failed, -22. [ 72.532696][ T4186] ntfs3: loop0: ntfs_evict_inode r=1a failed, -22. [ 72.699275][ T4552] loop1: detected capacity change from 0 to 128 [ 72.756900][ T4560] loop3: detected capacity change from 0 to 4096 [ 73.008671][ T4564] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 73.544359][ T4576] IPv6: addrconf: prefix option has invalid lifetime [ 73.561927][ T4231] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 73.567995][ T4576] IPv6: addrconf: prefix option has invalid lifetime [ 73.644469][ T4567] loop1: detected capacity change from 0 to 32768 [ 73.698898][ T4567] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by syz.1.83 (4567) [ 73.711343][ T1107] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 73.745496][ T4567] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 73.761590][ T4567] BTRFS info (device loop1): using free space tree [ 73.778290][ T4567] BTRFS info (device loop1): has skinny extents [ 74.005546][ T4231] usb 4-1: not running at top speed; connect to a high speed hub [ 74.111668][ T1107] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 74.122266][ T4231] usb 4-1: config 1 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 74.135813][ T1107] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 74.145585][ T4231] usb 4-1: config 1 interface 0 has no altsetting 0 [ 74.158111][ T4567] BTRFS info (device loop1): enabling ssd optimizations [ 74.351423][ T1107] usb 3-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 74.360810][ T4231] usb 4-1: New USB device found, idVendor=05ac, idProduct=0224, bcdDevice= 0.40 [ 74.376317][ T1107] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.385670][ T4231] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.415298][ T1107] usb 3-1: Product: syz [ 74.419568][ T4231] usb 4-1: Product: й [ 74.433230][ T4231] usb 4-1: Manufacturer: 俩ᮡ颪讧켴嬡ࡎ텪껰瓑ᔷ擿楆뼾㙲ç˜ê•î¡€åŽŸì¸¯ì¥¢ç‡³æœŽì¾—ᓼ厨â‰é¢¤à·—Ꚉ⇂侅봆랡Ựउ帓⼯æ”呈㙡ꓕ璕닲誂횺跓ⷼ꒢땇ዂç™á¥¯äŒ–éꢇ⬙缻î†æ¿•ä¢ƒà£‡ä¼„┰강깣㩘웛鹺갖ä†ï¯€ê¤¦î¡°æº°é´‰ê²‰ì†­î€°ãº î±Žï§çŠã€é¬‚ë—쬽체撅ã³î’·è¥˜ç¾Šé½¤ë™ƒç·¡ç¬±ã™¦ç¬³ë‘®ä™šï™€ç±‚簃৑㱜ﺣ澶 [ 74.469255][ T1107] usb 3-1: Manufacturer: syz [ 74.493144][ T1107] usb 3-1: SerialNumber: syz [ 74.558385][ T4231] usb 4-1: SerialNumber: Ñ [ 74.768319][ T4571] udc-core: couldn't find an available UDC or it's busy [ 74.780277][ T4571] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 74.941534][ T1107] usb 3-1: 0:1 : does not exist [ 74.946458][ T1107] usb 3-1: BAAD SPEAKER p_chmask mismatch [ 75.020906][ T1107] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 75.128056][ T4231] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input5 [ 75.240056][ T1107] usb 3-1: USB disconnect, device number 3 [ 75.501705][ T3544] bcm5974 4-1:1.0: could not read from device [ 75.661460][ T3544] bcm5974 4-1:1.0: could not read from device [ 75.681989][ T4231] usb 4-1: USB disconnect, device number 2 [ 75.803161][ T4176] udevd[4176]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 75.925585][ T4621] loop3: detected capacity change from 0 to 128 [ 76.969554][ T4632] loop1: detected capacity change from 0 to 4096 [ 77.059823][ T4632] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 77.114492][ T4632] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 77.181329][ T21] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 77.218364][ T4646] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 77.311716][ T4194] ntfs3: loop1: ntfs_sync_fs r=1a failed, -22. [ 77.320899][ T4194] ntfs3: loop1: ntfs_evict_inode r=1a failed, -22. [ 77.479424][ T4643] loop2: detected capacity change from 0 to 32768 [ 77.551403][ T21] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 77.565388][ T4643] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by syz.2.100 (4643) [ 77.719729][ T21] usb 1-1: config 27 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 77.740163][ T21] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 77.751602][ T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.765963][ T4643] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 77.797696][ T4643] BTRFS info (device loop2): using free space tree [ 77.821175][ T4643] BTRFS info (device loop2): has skinny extents [ 77.824040][ T21] usb 1-1: invalid MIDI out EP 0 [ 77.901636][ T21] snd-usb-audio: probe of 1-1:27.0 failed with error -22 [ 77.934715][ T4178] udevd[4178]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 78.035073][ T4229] usb 1-1: USB disconnect, device number 3 [ 78.061329][ T21] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 78.069352][ T4643] BTRFS info (device loop2): enabling ssd optimizations [ 78.618045][ T21] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 78.631095][ T21] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 79.140427][ T4684] loop0: detected capacity change from 0 to 4096 [ 79.318244][ T4685] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 79.421422][ T21] usb 4-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 79.430492][ T21] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.438802][ T4226] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 79.484374][ T21] usb 4-1: Product: syz [ 79.488571][ T21] usb 4-1: Manufacturer: syz [ 79.511007][ T21] usb 4-1: SerialNumber: syz [ 79.672866][ T4693] loop2: detected capacity change from 0 to 128 [ 79.764068][ T4651] udc-core: couldn't find an available UDC or it's busy [ 79.799824][ T4651] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 79.981504][ T4226] usb 2-1: not running at top speed; connect to a high speed hub [ 80.001903][ T4698] loop2: detected capacity change from 0 to 4096 [ 80.041748][ T21] usb 4-1: 0:1 : does not exist [ 80.046756][ T21] usb 4-1: BAAD SPEAKER p_chmask mismatch [ 80.052983][ T4698] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 80.061609][ T4226] usb 2-1: config 1 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 80.098861][ T21] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 80.115155][ T4226] usb 2-1: config 1 interface 0 has no altsetting 0 [ 80.143656][ T21] usb 4-1: USB disconnect, device number 3 [ 80.198270][ T4698] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 80.301540][ T4226] usb 2-1: New USB device found, idVendor=05ac, idProduct=0224, bcdDevice= 0.40 [ 80.310217][ T4702] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 80.315983][ T4226] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.344243][ T4226] usb 2-1: Product: й [ 80.348615][ T4226] usb 2-1: Manufacturer: 俩ᮡ颪讧켴嬡ࡎ텪껰瓑ᔷ擿楆뼾㙲ç˜ê•î¡€åŽŸì¸¯ì¥¢ç‡³æœŽì¾—ᓼ厨â‰é¢¤à·—Ꚉ⇂侅봆랡Ựउ帓⼯æ”呈㙡ꓕ璕닲誂횺跓ⷼ꒢땇ዂç™á¥¯äŒ–éꢇ⬙缻î†æ¿•ä¢ƒà£‡ä¼„┰강깣㩘웛鹺갖ä†ï¯€ê¤¦î¡°æº°é´‰ê²‰ì†­î€°ãº î±Žï§çŠã€é¬‚ë—쬽체撅ã³î’·è¥˜ç¾Šé½¤ë™ƒç·¡ç¬±ã™¦ç¬³ë‘®ä™šï™€ç±‚簃৑㱜ﺣ澶 [ 80.386824][ T4199] ntfs3: loop2: ntfs_sync_fs r=1a failed, -22. [ 80.392225][ T4226] usb 2-1: SerialNumber: Ñ [ 80.393650][ T4180] udevd[4180]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 80.418765][ T4199] ntfs3: loop2: ntfs_evict_inode r=1a failed, -22. [ 80.561286][ T21] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 80.583690][ T4706] loop2: detected capacity change from 0 to 128 [ 80.628065][ T4706] UDF-fs: bad mount option "18446744073709551615ÿ" or missing value [ 80.847819][ T4706] capability: warning: `syz.2.113' uses deprecated v2 capabilities in a way that may be insecure [ 80.946166][ T4226] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input6 [ 81.041465][ T21] usb 1-1: not running at top speed; connect to a high speed hub [ 81.081710][ T3544] bcm5974 2-1:1.0: could not read from device [ 81.153339][ T4226] usb 2-1: USB disconnect, device number 3 [ 81.483000][ T21] usb 1-1: config 1 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 81.502109][ T21] usb 1-1: config 1 interface 0 has no altsetting 0 [ 81.519273][ T26] cfg80211: failed to load regulatory.db [ 81.558731][ T4713] netlink: 4 bytes leftover after parsing attributes in process `syz.3.116'. [ 81.609137][ T4713] process 'syz.3.116' launched './file0' with NULL argv: empty string added [ 81.661534][ T21] usb 1-1: New USB device found, idVendor=05ac, idProduct=0224, bcdDevice= 0.40 [ 81.671064][ T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.705813][ T21] usb 1-1: Product: й [ 81.709918][ T21] usb 1-1: Manufacturer: 俩ᮡ颪讧켴嬡ࡎ텪껰瓑ᔷ擿楆뼾㙲ç˜ê•î¡€åŽŸì¸¯ì¥¢ç‡³æœŽì¾—ᓼ厨â‰é¢¤à·—Ꚉ⇂侅봆랡Ựउ帓⼯æ”呈㙡ꓕ璕닲誂횺跓ⷼ꒢땇ዂç™á¥¯äŒ–éꢇ⬙缻î†æ¿•ä¢ƒà£‡ä¼„┰강깣㩘웛鹺갖ä†ï¯€ê¤¦î¡°æº°é´‰ê²‰ì†­î€°ãº î±Žï§çŠã€é¬‚ë—쬽체撅ã³î’·è¥˜ç¾Šé½¤ë™ƒç·¡ç¬±ã™¦ç¬³ë‘®ä™šï™€ç±‚簃৑㱜ﺣ澶 [ 81.791837][ T21] usb 1-1: SerialNumber: Ñ [ 81.804040][ T4721] loop2: detected capacity change from 0 to 4096 [ 81.808497][ T4723] loop3: detected capacity change from 0 to 4096 [ 81.871780][ T4723] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 81.881883][ T4725] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 82.070845][ T4723] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 82.140766][ T4724] loop1: detected capacity change from 0 to 4096 [ 82.199282][ T4723] netlink: 4 bytes leftover after parsing attributes in process `syz.3.120'. [ 82.324898][ T21] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input7 [ 82.391259][ T4732] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 82.402553][ T3544] bcm5974 1-1:1.0: could not read from device [ 82.416535][ T4191] ntfs3: loop3: ntfs_sync_fs r=1a failed, -22. [ 82.424477][ T4191] ntfs3: loop3: ntfs_evict_inode r=1a failed, -22. [ 82.441921][ T3544] bcm5974 1-1:1.0: could not read from device [ 82.450503][ T21] usb 1-1: USB disconnect, device number 4 [ 82.808657][ T4744] netlink: 'syz.3.126': attribute type 12 has an invalid length. [ 82.816700][ T4744] netlink: 'syz.3.126': attribute type 29 has an invalid length. [ 82.824503][ T4744] netlink: 148 bytes leftover after parsing attributes in process `syz.3.126'. [ 82.833513][ T4744] netlink: 'syz.3.126': attribute type 1 has an invalid length. [ 82.841151][ T4744] netlink: 47 bytes leftover after parsing attributes in process `syz.3.126'. [ 82.982249][ T4751] loop0: detected capacity change from 0 to 128 [ 83.070197][ T4751] UDF-fs: bad mount option "18446744073709551615ÿ" or missing value [ 83.071111][ T4265] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 83.481749][ T4232] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 83.941539][ T4232] usb 3-1: config 0 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 83.965852][ T4232] usb 3-1: config 0 interface 0 has no altsetting 0 [ 84.010599][ T4232] usb 3-1: New USB device found, idVendor=046d, idProduct=c512, bcdDevice= 0.00 [ 84.028344][ T4232] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.059678][ T4232] usb 3-1: config 0 descriptor?? [ 84.181472][ T4265] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 84.201357][ T4265] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 84.231297][ T4229] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 84.312624][ T4763] loop0: detected capacity change from 0 to 32768 [ 84.348246][ T4763] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 scanned by syz.0.131 (4763) [ 84.371946][ T4265] usb 2-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 84.378397][ T4763] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 84.390429][ T4265] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.390456][ T4265] usb 2-1: Product: syz [ 84.390468][ T4265] usb 2-1: Manufacturer: syz [ 84.390481][ T4265] usb 2-1: SerialNumber: syz [ 84.423222][ T4763] BTRFS info (device loop0): using free space tree [ 84.432381][ T4763] BTRFS info (device loop0): has skinny extents [ 84.507736][ T4768] netlink: 4 bytes leftover after parsing attributes in process `syz.4.133'. [ 84.609202][ T4763] BTRFS info (device loop0): enabling ssd optimizations [ 84.616723][ T4232] usb 3-1: string descriptor 0 read error: -71 [ 84.631547][ T4229] usb 4-1: not running at top speed; connect to a high speed hub [ 84.668261][ T4740] udc-core: couldn't find an available UDC or it's busy [ 84.684854][ T4740] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 84.711441][ T4229] usb 4-1: config 1 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 84.724652][ T4232] usbhid 3-1:0.0: can't add hid device: -71 [ 84.730633][ T4232] usbhid: probe of 3-1:0.0 failed with error -71 [ 84.749052][ T4229] usb 4-1: config 1 interface 0 has no altsetting 0 [ 84.770599][ T4232] usb 3-1: USB disconnect, device number 4 [ 84.861457][ T4265] usb 2-1: 0:1 : does not exist [ 84.866410][ T4265] usb 2-1: BAAD SPEAKER p_chmask mismatch [ 84.913360][ T4265] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 84.934008][ T4229] usb 4-1: New USB device found, idVendor=05ac, idProduct=0224, bcdDevice= 0.40 [ 84.943285][ T4229] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.957260][ T4176] udevd[4176]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 84.957773][ T4229] usb 4-1: Product: й [ 84.979841][ T4265] usb 2-1: USB disconnect, device number 4 [ 84.982303][ T4229] usb 4-1: Manufacturer: 俩ᮡ颪讧켴嬡ࡎ텪껰瓑ᔷ擿楆뼾㙲ç˜ê•î¡€åŽŸì¸¯ì¥¢ç‡³æœŽì¾—ᓼ厨â‰é¢¤à·—Ꚉ⇂侅봆랡Ựउ帓⼯æ”呈㙡ꓕ璕닲誂횺跓ⷼ꒢땇ዂç™á¥¯äŒ–éꢇ⬙缻î†æ¿•ä¢ƒà£‡ä¼„┰강깣㩘웛鹺갖ä†ï¯€ê¤¦î¡°æº°é´‰ê²‰ì†­î€°ãº î±Žï§çŠã€é¬‚ë—쬽체撅ã³î’·è¥˜ç¾Šé½¤ë™ƒç·¡ç¬±ã™¦ç¬³ë‘®ä™šï™€ç±‚簃৑㱜ﺣ澶 [ 85.034439][ T4229] usb 4-1: SerialNumber: Ñ [ 85.340305][ T4802] netlink: 'syz.1.138': attribute type 12 has an invalid length. [ 85.348169][ T4802] netlink: 'syz.1.138': attribute type 29 has an invalid length. [ 85.356399][ T4802] netlink: 148 bytes leftover after parsing attributes in process `syz.1.138'. [ 85.365443][ T4802] netlink: 'syz.1.138': attribute type 1 has an invalid length. [ 85.373172][ T4802] netlink: 47 bytes leftover after parsing attributes in process `syz.1.138'. [ 85.451403][ T4232] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 85.553681][ T4229] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input8 [ 85.614203][ T4808] loop0: detected capacity change from 0 to 4096 [ 85.631484][ T3544] bcm5974 4-1:1.0: could not read from device [ 85.649920][ T4229] usb 4-1: USB disconnect, device number 4 [ 85.764420][ T3544] bcm5974 4-1:1.0: could not read from device [ 85.998955][ T4232] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 86.013468][ T4810] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 86.041478][ T4232] usb 3-1: config 27 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 86.123203][ T4232] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 86.189209][ T4232] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.369644][ T4232] usb 3-1: invalid MIDI out EP 0 [ 86.933759][ T4815] Zero length message leads to an empty skb [ 86.983407][ T4232] snd-usb-audio: probe of 3-1:27.0 failed with error -22 [ 87.075392][ T4232] usb 3-1: USB disconnect, device number 5 [ 87.084014][ T4500] udevd[4500]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 87.670055][ T4825] loop2: detected capacity change from 0 to 4096 [ 87.818097][ T4825] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 87.900879][ T4825] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 87.960250][ T4829] loop0: detected capacity change from 0 to 4096 [ 87.963702][ T4825] netlink: 4 bytes leftover after parsing attributes in process `syz.2.144'. [ 88.071148][ T4832] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 88.121921][ T4199] ntfs3: loop2: ntfs_sync_fs r=1a failed, -22. [ 88.182417][ T4199] ntfs3: loop2: ntfs_evict_inode r=1a failed, -22. [ 88.392734][ T4839] netlink: 4 bytes leftover after parsing attributes in process `syz.0.149'. [ 88.613945][ T4831] loop3: detected capacity change from 0 to 32768 [ 88.682481][ T4831] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by syz.3.146 (4831) [ 88.721280][ T4516] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 88.726019][ T4831] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 88.746194][ T4831] BTRFS info (device loop3): using free space tree [ 88.753346][ T4831] BTRFS info (device loop3): has skinny extents [ 88.933320][ T4831] BTRFS info (device loop3): enabling ssd optimizations [ 89.162828][ T4516] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 89.183703][ T4516] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 89.502354][ T4516] usb 3-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 89.526273][ T4516] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.568152][ T4516] usb 3-1: Product: syz [ 89.580360][ T4516] usb 3-1: Manufacturer: syz [ 89.586971][ T4516] usb 3-1: SerialNumber: syz [ 89.733278][ T4176] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 9 /dev/loop3 scanned by udevd (4176) [ 89.800353][ T4874] loop0: detected capacity change from 0 to 4096 [ 89.970516][ T4838] udc-core: couldn't find an available UDC or it's busy [ 89.991487][ T4838] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 90.563777][ T4880] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 90.678275][ T4516] usb 3-1: 0:1 : does not exist [ 90.698258][ T4516] usb 3-1: BAAD SPEAKER p_chmask mismatch [ 90.755469][ T4886] IPv6: addrconf: prefix option has invalid lifetime [ 90.760510][ T4516] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 90.946737][ T4180] udevd[4180]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 90.969680][ T4516] usb 3-1: USB disconnect, device number 6 [ 90.982951][ T4888] loop1: detected capacity change from 0 to 4096 [ 91.742667][ T4892] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 92.057284][ T4905] loop1: detected capacity change from 0 to 2048 [ 92.158940][ T4905] UDF-fs: error (device loop1): udf_read_tagged: block 97: CRC length 511 exceeds block size [ 92.199858][ T4905] UDF-fs: warning (device loop1): udf_fill_super: No partition found (2) [ 92.650558][ T4904] loop3: detected capacity change from 0 to 32768 [ 92.660665][ T4916] loop0: detected capacity change from 0 to 136 [ 92.700849][ T4904] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 92.725232][ T4916] Attempt to read inode for relocated directory [ 92.750428][ T4904] BTRFS info (device loop3): using free space tree [ 92.772532][ T4904] BTRFS info (device loop3): has skinny extents [ 92.951372][ T4904] BTRFS info (device loop3): enabling ssd optimizations [ 93.411227][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 93.431226][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 93.441232][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 93.861225][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 93.881225][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 93.901228][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 93.921224][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 93.941226][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 93.961222][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 93.971229][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 94.593343][ T4959] loop3: detected capacity change from 0 to 4096 [ 94.609597][ T4959] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 94.668438][ T4965] loop1: detected capacity change from 0 to 4096 [ 94.722992][ T4959] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 94.799106][ T4959] netlink: 4 bytes leftover after parsing attributes in process `syz.3.174'. [ 94.832926][ T4968] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 94.943104][ T4191] ntfs3: loop3: ntfs_sync_fs r=1a failed, -22. [ 94.958566][ T4191] ntfs3: loop3: ntfs_evict_inode r=1a failed, -22. [ 94.970136][ T4970] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 95.241609][ T4972] loop1: detected capacity change from 0 to 4096 [ 95.373193][ T4982] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 96.410786][ T4989] loop1: detected capacity change from 0 to 32768 [ 96.473755][ T4989] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.181 (4989) [ 96.605511][ T4989] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 96.620580][ T4989] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 96.636715][ T4989] BTRFS info (device loop1): trying to use backup root at mount time [ 97.281606][ T4989] BTRFS info (device loop1): enabling ssd optimizations [ 97.371392][ T4989] BTRFS info (device loop1): using spread ssd allocation scheme [ 97.379381][ T4981] loop3: detected capacity change from 0 to 32768 [ 97.395882][ T4989] BTRFS info (device loop1): setting nodatasum [ 97.410681][ T4981] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz.3.178 (4981) [ 97.429720][ T4989] BTRFS info (device loop1): allowing degraded mounts [ 97.469884][ T4989] BTRFS info (device loop1): turning on flush-on-commit [ 97.513230][ T4989] BTRFS info (device loop1): setting nodatacow, compression disabled [ 97.532162][ T4989] BTRFS info (device loop1): using free space tree [ 97.544808][ T4989] BTRFS info (device loop1): has skinny extents [ 97.551791][ T4180] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by udevd (4180) [ 98.129635][ T25] kauditd_printk_skb: 17 callbacks suppressed [ 98.129648][ T25] audit: type=1800 audit(1784886369.449:43): pid=4989 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.181" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 98.347108][ T5029] loop3: detected capacity change from 0 to 4096 [ 98.417635][ T5030] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 98.441402][ T7] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 98.714949][ T5027] loop0: detected capacity change from 0 to 32768 [ 98.821486][ T7] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 98.832446][ T5035] netlink: 4 bytes leftover after parsing attributes in process `syz.4.189'. [ 98.841857][ T7] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 98.920146][ T5027] JBD2: Ignoring recovery information on journal [ 99.114699][ T5027] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 99.141635][ T7] usb 3-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 99.150771][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.188668][ T5053] loop3: detected capacity change from 0 to 4096 [ 99.195262][ T7] usb 3-1: Product: syz [ 99.199440][ T7] usb 3-1: Manufacturer: syz [ 99.211449][ T7] usb 3-1: SerialNumber: syz [ 99.268097][ T5056] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 99.671767][ T5023] udc-core: couldn't find an available UDC or it's busy [ 99.863534][ T5023] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 100.099462][ T4186] ocfs2: Unmounting device (7,0) on (node local) [ 100.104450][ T5054] loop1: detected capacity change from 0 to 32768 [ 100.136033][ T7] usb 3-1: 0:1 : does not exist [ 100.148916][ T7] usb 3-1: BAAD SPEAKER p_chmask mismatch [ 100.170749][ T5054] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.190 (5054) [ 100.215139][ T7] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 100.254558][ T4176] udevd[4176]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 100.270611][ T7] usb 3-1: USB disconnect, device number 7 [ 100.318859][ T5054] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 100.334213][ T5054] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 100.376685][ T5054] BTRFS info (device loop1): trying to use backup root at mount time [ 100.419432][ T5054] BTRFS info (device loop1): enabling ssd optimizations [ 100.445844][ T5054] BTRFS info (device loop1): using spread ssd allocation scheme [ 100.481300][ T5054] BTRFS info (device loop1): setting nodatasum [ 100.497770][ T5054] BTRFS info (device loop1): allowing degraded mounts [ 100.518022][ T5054] BTRFS info (device loop1): turning on flush-on-commit [ 100.538294][ T5054] BTRFS info (device loop1): setting nodatacow, compression disabled [ 100.570224][ T5054] BTRFS info (device loop1): using free space tree [ 100.580568][ T5054] BTRFS info (device loop1): has skinny extents [ 100.931764][ T25] audit: type=1800 audit(1784886372.259:44): pid=5054 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.190" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 100.948289][ T5082] loop0: detected capacity change from 0 to 32768 [ 101.012480][ T5082] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by syz.0.199 (5082) [ 101.029758][ T5066] loop3: detected capacity change from 0 to 32768 [ 101.031355][ T4232] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 101.079644][ T5066] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz.3.194 (5066) [ 101.120664][ T4180] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by udevd (4180) [ 101.196620][ T4498] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by udevd (4498) [ 101.471565][ T4232] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 101.511493][ T4232] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 101.562942][ T4232] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 101.611579][ T4232] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.701638][ T5084] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 102.687220][ T5102] loop0: detected capacity change from 0 to 32768 [ 102.724890][ T5113] loop1: detected capacity change from 0 to 4096 [ 102.728332][ T5104] loop3: detected capacity change from 0 to 32768 [ 102.744820][ T5102] JBD2: Ignoring recovery information on journal [ 102.787650][ T5102] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 102.816047][ T5104] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 102.902730][ T5119] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 102.916196][ T4186] ocfs2: Unmounting device (7,0) on (node local) [ 103.089038][ T5104] JBD2: Ignoring recovery information on journal [ 103.492048][ T5104] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 103.768636][ T4191] ocfs2: Unmounting device (7,3) on (node local) [ 103.933127][ T4517] usb 3-1: USB disconnect, device number 8 [ 103.981353][ T4799] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 104.046788][ T5138] tipc: Started in network mode [ 104.066578][ T5138] tipc: Node identity fe800000000000000000000000000013, cluster identity 4711 [ 104.070053][ T5121] loop0: detected capacity change from 0 to 32768 [ 104.090991][ T5138] tipc: Enabled bearer , priority 10 [ 104.115262][ T5121] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.205 (5121) [ 104.131732][ T5138] tipc: Enabled bearer , priority 10 [ 104.153811][ T5138] tipc: Bearer : already 2 bearers with priority 10 [ 104.172251][ T5138] tipc: Bearer : trying with adjusted priority [ 104.183226][ T5121] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 104.192509][ T5138] tipc: New replicast peer: 255.255.255.255 [ 104.219162][ T5121] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 104.238624][ T5121] BTRFS info (device loop0): trying to use backup root at mount time [ 104.265298][ T5121] BTRFS info (device loop0): enabling ssd optimizations [ 104.281323][ T5121] BTRFS info (device loop0): using spread ssd allocation scheme [ 104.298838][ T5138] tipc: Enabled bearer , priority 9 [ 104.325061][ T5121] BTRFS info (device loop0): setting nodatasum [ 104.344494][ T5121] BTRFS info (device loop0): allowing degraded mounts [ 104.351459][ T5121] BTRFS info (device loop0): turning on flush-on-commit [ 104.358671][ T5121] BTRFS info (device loop0): setting nodatacow, compression disabled [ 104.367438][ T5121] BTRFS info (device loop0): using free space tree [ 104.386549][ T5121] BTRFS info (device loop0): has skinny extents [ 104.492627][ T5137] tipc: Disabling bearer [ 104.562407][ T4799] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 104.572670][ T4799] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 104.686676][ T25] audit: type=1800 audit(1784886376.009:45): pid=5121 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.205" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 104.761678][ T4799] usb 2-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 104.780232][ T4799] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.810864][ T4799] usb 2-1: Product: syz [ 104.825164][ T4799] usb 2-1: Manufacturer: syz [ 104.839516][ T4799] usb 2-1: SerialNumber: syz [ 105.027749][ T5153] loop3: detected capacity change from 0 to 32768 [ 105.150648][ T5133] udc-core: couldn't find an available UDC or it's busy [ 105.194810][ T5133] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 105.205616][ T5153] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz.3.212 (5153) [ 105.305325][ T5041] tipc: Node number set to 4269801491 [ 105.799112][ T4176] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by udevd (4176) [ 105.961566][ T4799] usb 2-1: 0:1 : does not exist [ 105.966506][ T4799] usb 2-1: BAAD SPEAKER p_chmask mismatch [ 106.024782][ T4799] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 106.068097][ T4799] usb 2-1: USB disconnect, device number 5 [ 106.081877][ T5110] udevd[5110]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 106.197818][ T5184] tipc: Started in network mode [ 106.211503][ T5184] tipc: Node identity fe800000000000000000000000000013, cluster identity 4711 [ 106.223851][ T5184] tipc: Enabled bearer , priority 10 [ 106.296783][ T5184] tipc: Enabled bearer , priority 10 [ 106.320878][ T5184] tipc: Bearer : already 2 bearers with priority 10 [ 106.365995][ T5184] tipc: Bearer : trying with adjusted priority [ 106.381694][ T5184] tipc: Enabling of bearer rejected, failed to enable media [ 106.394544][ T5183] tipc: Disabling bearer [ 107.186031][ T5199] tipc: Started in network mode [ 107.190937][ T5199] tipc: Node identity fe800000000000000000000000000013, cluster identity 4711 [ 107.206954][ T5199] tipc: Enabled bearer , priority 10 [ 107.215799][ T5197] netlink: 4 bytes leftover after parsing attributes in process `syz.0.223'. [ 107.245377][ T5199] tipc: Enabling of bearer rejected, failed to enable media [ 107.288312][ T5199] tipc: New replicast peer: 255.255.255.255 [ 107.320763][ T5199] tipc: Enabled bearer , priority 10 [ 107.382770][ T4799] tipc: Node number set to 4269801491 [ 107.484725][ T2304] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 108.326773][ T4799] tipc: Node number set to 4269801491 [ 108.351719][ T2304] usb 3-1: config 0 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 108.383304][ T2304] usb 3-1: config 0 interface 0 has no altsetting 0 [ 108.400173][ T2304] usb 3-1: New USB device found, idVendor=046d, idProduct=c512, bcdDevice= 0.00 [ 108.410270][ T2304] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.469165][ T2304] usb 3-1: config 0 descriptor?? [ 108.771361][ T4517] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 108.834686][ T5230] loop0: detected capacity change from 0 to 32768 [ 108.899670][ T5230] JBD2: Ignoring recovery information on journal [ 108.977272][ T5230] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 109.041436][ T2304] usb 3-1: string descriptor 0 read error: -71 [ 109.064985][ T5243] tipc: Started in network mode [ 109.070134][ T5243] tipc: Node identity fe800000000000000000000000000013, cluster identity 4711 [ 109.091062][ T5243] tipc: Enabled bearer , priority 10 [ 109.100044][ T5243] tipc: Enabled bearer , priority 10 [ 109.109073][ T5243] tipc: Bearer : already 2 bearers with priority 10 [ 109.109836][ T4186] ocfs2: Unmounting device (7,0) on (node local) [ 109.117297][ T5243] tipc: Bearer : trying with adjusted priority [ 109.117508][ T5243] tipc: New replicast peer: 255.255.255.255 [ 109.131568][ T4517] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 109.139649][ T5243] tipc: Enabled bearer , priority 9 [ 109.152025][ T4517] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 109.172779][ T2304] usbhid 3-1:0.0: can't add hid device: -71 [ 109.178746][ T2304] usbhid: probe of 3-1:0.0 failed with error -71 [ 109.201436][ T2304] usb 3-1: USB disconnect, device number 9 [ 109.229014][ T5242] tipc: Disabling bearer [ 109.329396][ T4517] usb 2-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 109.340051][ T4517] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.354627][ T4517] usb 2-1: Product: syz [ 109.359069][ T4517] usb 2-1: Manufacturer: syz [ 109.364204][ T4517] usb 2-1: SerialNumber: syz [ 109.642932][ T5225] udc-core: couldn't find an available UDC or it's busy [ 109.666774][ T5225] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 109.724230][ T5258] syzkaller0: create flow: hash 1347223358 index 2 [ 109.755056][ T4230] syzkaller0: tun_net_xmit 76 [ 109.764137][ T4230] syzkaller0: tun_net_xmit 48 [ 109.772830][ T4799] syzkaller0: tun_net_xmit 76 [ 109.798235][ T5252] syzkaller0: delete flow: hash 1347223358 index 2 [ 109.812175][ T4517] usb 2-1: 0:1 : does not exist [ 109.817675][ T4517] usb 2-1: BAAD SPEAKER p_chmask mismatch [ 109.860762][ T4517] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 109.869141][ T5256] loop2: detected capacity change from 0 to 32768 [ 109.903702][ T4517] usb 2-1: USB disconnect, device number 6 [ 109.921545][ T5256] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by syz.2.242 (5256) [ 109.955124][ T4176] udevd[4176]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 109.979820][ T5256] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 110.007231][ T5256] BTRFS info (device loop2): using free space tree [ 110.025184][ T5256] BTRFS info (device loop2): has skinny extents [ 110.151292][ T2304] tipc: Node number set to 4269801491 [ 110.216358][ T5256] BTRFS info (device loop2): enabling ssd optimizations [ 110.469268][ T4176] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 9 /dev/loop2 scanned by udevd (4176) [ 110.628360][ T5292] tipc: Enabling of bearer rejected, already enabled [ 110.652992][ T5292] tipc: Enabling of bearer rejected, failed to enable media [ 110.694207][ T5292] tipc: Enabling of bearer rejected, failed to enable media [ 110.809661][ T5303] loop3: detected capacity change from 0 to 128 [ 110.872814][ T5303] UDF-fs: bad mount option "18446744073709551615ÿ" or missing value [ 111.171276][ T4799] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 111.371313][ T5312] netlink: 16 bytes leftover after parsing attributes in process `syz.4.254'. [ 111.601514][ T4799] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 111.617140][ T4799] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 10 [ 111.628964][ T4799] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 111.641708][ T4799] usb 3-1: config 0 interface 0 has no altsetting 0 [ 112.040832][ T4799] usb 3-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 112.180013][ T4799] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.551922][ T4799] usb 3-1: Product: syz [ 112.573096][ T4799] usb 3-1: Manufacturer: syz [ 112.613360][ T4799] usb 3-1: SerialNumber: syz [ 112.632973][ T4799] usb 3-1: config 0 descriptor?? [ 113.382572][ T4799] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input9 [ 113.396496][ T3544] synaptics_usb 3-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 113.411782][ T4799] usb 3-1: USB disconnect, device number 10 [ 113.429768][ T3544] synaptics_usb 3-1:0.0: synusb_open - usb_submit_urb failed, error: -19 [ 113.528795][ T3544] synaptics_usb 3-1:0.0: synusb_open - usb_submit_urb failed, error: -19 [ 113.590854][ T3544] synaptics_usb 3-1:0.0: synusb_open - usb_submit_urb failed, error: -19 [ 113.661347][ T5345] netlink: 16 bytes leftover after parsing attributes in process `syz.4.266'. [ 114.392512][ T4799] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 115.322055][ T5376] loop0: detected capacity change from 0 to 4096 [ 115.377578][ T5380] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 115.411523][ T4799] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 115.427953][ T4799] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 115.592092][ T4799] usb 3-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 115.623646][ T4799] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.671764][ T4799] usb 3-1: Product: syz [ 115.881578][ T5041] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 116.061861][ T4799] usb 3-1: Manufacturer: syz [ 116.066572][ T4799] usb 3-1: SerialNumber: syz [ 116.312981][ T5363] udc-core: couldn't find an available UDC or it's busy [ 116.330021][ T5363] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 116.422032][ T5041] usb 4-1: config 0 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 116.506900][ T5041] usb 4-1: config 0 interface 0 has no altsetting 0 [ 116.546730][ T5041] usb 4-1: New USB device found, idVendor=046d, idProduct=c512, bcdDevice= 0.00 [ 116.639026][ T5041] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.799144][ T5041] usb 4-1: config 0 descriptor?? [ 117.001465][ T4799] usb 3-1: 0:1 : does not exist [ 117.006396][ T4799] usb 3-1: BAAD SPEAKER p_chmask mismatch [ 117.027782][ T5400] loop2: detected capacity change from 0 to 128 [ 117.035317][ T4229] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 117.047622][ T4799] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 117.067949][ T5400] UDF-fs: bad mount option "18446744073709551615ÿ" or missing value [ 117.153900][ T4799] usb 3-1: USB disconnect, device number 11 [ 117.303131][ T5404] netlink: 52 bytes leftover after parsing attributes in process `syz.1.284'. [ 117.411753][ T5041] usb 4-1: string descriptor 0 read error: -71 [ 117.432298][ T4176] udevd[4176]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 117.461107][ T5411] kvm: emulating exchange as write [ 117.536351][ T5041] usbhid 4-1:0.0: can't add hid device: -71 [ 117.542557][ T4229] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 117.557366][ T5041] usbhid: probe of 4-1:0.0 failed with error -71 [ 117.563842][ T4229] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 10 [ 117.583105][ T5041] usb 4-1: USB disconnect, device number 5 [ 117.593611][ T4229] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 117.595877][ T5421] netlink: 52 bytes leftover after parsing attributes in process `syz.4.292'. [ 117.609211][ T4229] usb 1-1: config 0 interface 0 has no altsetting 0 [ 117.831387][ T4229] usb 1-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 117.840460][ T4229] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.849271][ T4229] usb 1-1: Product: syz [ 117.871312][ T4229] usb 1-1: Manufacturer: syz [ 117.875937][ T4229] usb 1-1: SerialNumber: syz [ 117.948682][ T4229] usb 1-1: config 0 descriptor?? [ 118.203424][ T4229] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input10 [ 118.227554][ T3544] synaptics_usb 1-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 118.254220][ T3544] synaptics_usb 1-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 118.271985][ T3544] synaptics_usb 1-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 118.297436][ T3544] synaptics_usb 1-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 118.370184][ T5110] synaptics_usb 1-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 118.415099][ T5396] synaptics_usb 1-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 118.443234][ T3544] synaptics_usb 1-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 118.477288][ T3544] synaptics_usb 1-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 118.756903][ T5435] loop1: detected capacity change from 0 to 4096 [ 118.841250][ T4230] usb 1-1: USB disconnect, device number 5 [ 118.959392][ T5435] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 119.138819][ T5435] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 119.179360][ T5435] netlink: 4 bytes leftover after parsing attributes in process `syz.1.298'. [ 119.264561][ T5440] tipc: Enabling of bearer rejected, already enabled [ 119.298761][ T4194] ntfs3: loop1: ntfs_sync_fs r=1a failed, -22. [ 119.307204][ T5440] tipc: Enabled bearer , priority 10 [ 119.323483][ T4194] ntfs3: loop1: ntfs_evict_inode r=1a failed, -22. [ 119.367979][ T5439] tipc: Disabling bearer [ 119.439308][ T5450] loop2: detected capacity change from 0 to 128 [ 119.551897][ T5450] UDF-fs: bad mount option "18446744073709551615ÿ" or missing value [ 119.573454][ T5041] syzkaller0: tun_net_xmit 76 [ 119.578300][ T5041] syzkaller0: tun_net_xmit 48 [ 119.731412][ T5293] syzkaller0: tun_net_xmit 76 [ 119.747165][ T5453] syzkaller0: create flow: hash 1347223358 index 0 [ 119.851566][ T5452] syzkaller0 (unregistered): delete flow: hash 1347223358 index 0 [ 119.899110][ T5462] IPv6: addrconf: prefix option has invalid lifetime [ 119.991367][ T4230] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 120.404714][ T4230] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 120.418341][ T4230] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 120.493218][ T4228] syzkaller0: tun_net_xmit 76 [ 120.498207][ T4228] syzkaller0: tun_net_xmit 48 [ 120.521674][ T4513] syzkaller0: tun_net_xmit 76 [ 120.530980][ T5478] syzkaller0: create flow: hash 1347223358 index 1 [ 120.558681][ T5478] syzkaller0: delete flow: hash 1347223358 index 1 [ 120.585486][ T4230] usb 4-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 120.594792][ T4230] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.608233][ T4230] usb 4-1: Product: syz [ 120.613003][ T4230] usb 4-1: Manufacturer: syz [ 120.617851][ T5481] netlink: 52 bytes leftover after parsing attributes in process `syz.2.314'. [ 120.628051][ T4230] usb 4-1: SerialNumber: syz [ 120.712326][ T4228] syzkaller0: tun_net_xmit 76 [ 120.717211][ T4228] syzkaller0: tun_net_xmit 48 [ 120.741556][ T4513] syzkaller0: tun_net_xmit 76 [ 120.883156][ T5459] udc-core: couldn't find an available UDC or it's busy [ 120.900244][ T5459] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 120.971811][ T5492] loop1: detected capacity change from 0 to 4096 [ 121.002982][ T5494] loop2: detected capacity change from 0 to 128 [ 121.011655][ T4230] usb 4-1: 0:1 : does not exist [ 121.017333][ T4230] usb 4-1: BAAD SPEAKER p_chmask mismatch [ 121.034828][ T4230] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 121.049785][ T4230] usb 4-1: USB disconnect, device number 6 [ 121.061575][ T5498] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 121.241640][ T5501] IPv6: addrconf: prefix option has invalid lifetime [ 121.262892][ T4176] udevd[4176]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 121.442724][ T5508] loop0: detected capacity change from 0 to 4096 [ 121.489936][ T5508] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 121.526652][ T5508] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 121.546514][ T5508] netlink: 4 bytes leftover after parsing attributes in process `syz.0.325'. [ 121.585337][ T4186] ntfs3: loop0: ntfs_sync_fs r=1a failed, -22. [ 121.601469][ T4186] ntfs3: loop0: ntfs_evict_inode r=1a failed, -22. [ 122.060556][ T5537] IPv6: addrconf: prefix option has invalid lifetime [ 122.351318][ T4230] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 122.454831][ T5545] loop2: detected capacity change from 0 to 4096 [ 122.481171][ T5549] netlink: 'syz.4.341': attribute type 12 has an invalid length. [ 122.489027][ T5549] netlink: 'syz.4.341': attribute type 29 has an invalid length. [ 122.497073][ T5549] netlink: 148 bytes leftover after parsing attributes in process `syz.4.341'. [ 122.557797][ T5545] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 122.591856][ T5545] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 122.654841][ T5545] netlink: 4 bytes leftover after parsing attributes in process `syz.2.340'. [ 122.711729][ T4230] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 122.742005][ T4230] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 122.774263][ T4199] ntfs3: loop2: ntfs_sync_fs r=1a failed, -22. [ 122.787170][ T4199] ntfs3: loop2: ntfs_evict_inode r=1a failed, -22. [ 122.931535][ T4230] usb 1-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 122.951792][ T4230] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.977511][ T4230] usb 1-1: Product: syz [ 122.990858][ T4230] usb 1-1: Manufacturer: syz [ 122.996856][ T4230] usb 1-1: SerialNumber: syz [ 123.192842][ T5553] loop3: detected capacity change from 0 to 32768 [ 123.257660][ T5539] udc-core: couldn't find an available UDC or it's busy [ 123.288754][ T5539] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 123.366713][ T5569] IPv6: addrconf: prefix option has invalid lifetime [ 123.441644][ T4230] usb 1-1: 0:1 : does not exist [ 123.446597][ T4230] usb 1-1: BAAD SPEAKER p_chmask mismatch [ 123.484761][ T4230] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 123.508154][ T4230] usb 1-1: USB disconnect, device number 6 [ 123.538466][ T4176] udevd[4176]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 123.861035][ T4229] syzkaller0: tun_net_xmit 76 [ 123.866199][ T4229] syzkaller0: tun_net_xmit 48 [ 123.881779][ T5041] syzkaller0: tun_net_xmit 76 [ 123.893819][ T5581] syzkaller0: create flow: hash 1347223358 index 1 [ 123.905745][ T5581] syzkaller0: delete flow: hash 1347223358 index 1 [ 123.973108][ T5585] netlink: 'syz.0.355': attribute type 12 has an invalid length. [ 123.980880][ T5585] netlink: 'syz.0.355': attribute type 29 has an invalid length. [ 123.995013][ T5585] netlink: 148 bytes leftover after parsing attributes in process `syz.0.355'. [ 124.005699][ T5585] netlink: 59 bytes leftover after parsing attributes in process `syz.0.355'. [ 124.154431][ T5589] loop3: detected capacity change from 0 to 2048 [ 124.189914][ T5591] tipc: Enabling of bearer rejected, already enabled [ 124.205017][ T5591] tipc: Enabled bearer , priority 10 [ 124.217313][ T5590] tipc: Disabling bearer [ 124.238206][ T5589] UDF-fs: error (device loop3): udf_read_tagged: block 97: CRC length 511 exceeds block size [ 124.250739][ T5041] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 124.264071][ T5041] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 124.285972][ T5589] UDF-fs: warning (device loop3): udf_fill_super: No partition found (2) [ 124.500829][ T5595] fido_id[5595]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 124.616283][ T5603] netlink: 16 bytes leftover after parsing attributes in process `syz.4.362'. [ 125.689918][ T5606] loop3: detected capacity change from 0 to 32768 [ 126.514934][ T5630] tipc: Enabling of bearer rejected, already enabled [ 126.525276][ T5630] tipc: Bearer : already 2 bearers with priority 10 [ 126.534260][ T5630] tipc: Bearer : trying with adjusted priority [ 126.542051][ T5630] tipc: Enabling of bearer rejected, failed to enable media [ 127.181375][ T4513] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 127.228923][ T5641] netlink: 16 bytes leftover after parsing attributes in process `syz.4.376'. [ 127.551569][ T4513] usb 1-1: config 0 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 127.581361][ T4513] usb 1-1: config 0 interface 0 has no altsetting 0 [ 127.677552][ T4513] usb 1-1: New USB device found, idVendor=046d, idProduct=c512, bcdDevice= 0.00 [ 127.687087][ T4513] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.717754][ T4513] usb 1-1: config 0 descriptor?? [ 127.848278][ T5657] tipc: Enabling of bearer rejected, already enabled [ 127.858552][ T5657] tipc: Bearer : already 2 bearers with priority 10 [ 127.866909][ T5657] tipc: Bearer : trying with adjusted priority [ 127.880293][ T5657] tipc: Enabling of bearer rejected, failed to enable media [ 128.026957][ T5664] netlink: 4 bytes leftover after parsing attributes in process `syz.4.384'. [ 128.291560][ T4513] usb 1-1: string descriptor 0 read error: -71 [ 128.421546][ T4513] usbhid 1-1:0.0: can't add hid device: -71 [ 128.432783][ T4513] usbhid: probe of 1-1:0.0 failed with error -71 [ 128.467477][ T4513] usb 1-1: USB disconnect, device number 7 [ 128.622226][ T5673] netlink: 16 bytes leftover after parsing attributes in process `syz.1.387'. [ 128.634624][ T5673] loop1: detected capacity change from 0 to 512 [ 128.654260][ T5675] loop2: detected capacity change from 0 to 128 [ 128.752895][ T5673] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 128.764444][ T5673] ext4 filesystem being mounted at /68/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.273919][ T5691] loop2: detected capacity change from 0 to 2048 [ 129.688630][ T5691] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 130.887455][ T5698] tipc: Enabling of bearer rejected, already enabled [ 130.919277][ T5698] tipc: Enabled bearer , priority 10 [ 130.951158][ T5697] tipc: Disabling bearer [ 131.400111][ T5708] loop2: detected capacity change from 0 to 4096 [ 131.420773][ T5711] loop3: detected capacity change from 0 to 4096 [ 131.637392][ T5711] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 132.070219][ T5715] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 132.110794][ T5711] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 132.296942][ T4191] ntfs3: loop3: ntfs_sync_fs r=1a failed, -22. [ 132.422323][ T4191] ntfs3: loop3: ntfs_evict_inode r=1a failed, -22. [ 132.614692][ T5736] netlink: 16 bytes leftover after parsing attributes in process `syz.1.401'. [ 132.628749][ T5736] loop1: detected capacity change from 0 to 512 [ 132.722021][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.728405][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.792298][ T5736] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 132.804059][ T5736] ext4 filesystem being mounted at /70/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.865955][ T4513] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 133.913846][ T5765] netlink: 'syz.1.413': attribute type 12 has an invalid length. [ 133.936622][ T5765] netlink: 'syz.1.413': attribute type 29 has an invalid length. [ 133.945825][ T5765] netlink: 148 bytes leftover after parsing attributes in process `syz.1.413'. [ 133.959961][ T5765] netlink: 59 bytes leftover after parsing attributes in process `syz.1.413'. [ 134.169634][ T5772] tipc: Enabled bearer , priority 10 [ 134.187311][ T5771] tipc: Disabling bearer [ 134.281720][ T4513] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 134.306339][ T4513] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 10 [ 134.337953][ T4513] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 134.367181][ T4513] usb 1-1: config 0 interface 0 has no altsetting 0 [ 134.422676][ T4229] syzkaller0: tun_net_xmit 76 [ 134.427915][ T4229] syzkaller0: tun_net_xmit 48 [ 134.451459][ T5045] syzkaller0: tun_net_xmit 76 [ 134.576454][ T4513] usb 1-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 134.723772][ T4513] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.732468][ T4513] usb 1-1: Product: syz [ 134.736648][ T4513] usb 1-1: Manufacturer: syz [ 134.741603][ T4513] usb 1-1: SerialNumber: syz [ 134.748567][ T4513] usb 1-1: config 0 descriptor?? [ 134.940156][ T5780] netlink: 16 bytes leftover after parsing attributes in process `syz.1.424'. [ 134.954210][ T5780] loop1: detected capacity change from 0 to 512 [ 135.054636][ T4513] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input11 [ 135.066207][ T5780] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 135.077464][ T5780] ext4 filesystem being mounted at /73/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.089573][ T3544] synaptics_usb 1-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 135.126854][ T3544] synaptics_usb 1-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 135.189294][ T3544] synaptics_usb 1-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 135.216968][ T3544] synaptics_usb 1-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 135.279907][ T5747] synaptics_usb 1-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 135.305520][ T5110] synaptics_usb 1-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 135.358524][ T3544] synaptics_usb 1-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 135.378710][ T3544] synaptics_usb 1-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 135.437723][ T3544] synaptics_usb 1-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 135.558988][ T5797] netlink: 'syz.2.430': attribute type 12 has an invalid length. [ 135.572432][ T5797] netlink: 'syz.2.430': attribute type 29 has an invalid length. [ 135.580171][ T5797] netlink: 148 bytes leftover after parsing attributes in process `syz.2.430'. [ 135.944628][ T5797] netlink: 59 bytes leftover after parsing attributes in process `syz.2.430'. [ 136.366019][ T4513] usb 1-1: USB disconnect, device number 8 [ 136.664430][ T5805] loop3: detected capacity change from 0 to 32768 [ 136.673020][ T5812] netlink: 16 bytes leftover after parsing attributes in process `syz.0.436'. [ 136.685265][ T5812] loop0: detected capacity change from 0 to 512 [ 136.782456][ T5812] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 136.793631][ T5812] ext4 filesystem being mounted at /76/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.060194][ T5820] loop2: detected capacity change from 0 to 4096 [ 137.193727][ T5826] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 137.223862][ T5823] loop3: detected capacity change from 0 to 4096 [ 137.393905][ T5829] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 138.273923][ T5841] netlink: 'syz.1.443': attribute type 12 has an invalid length. [ 138.289548][ T5841] netlink: 'syz.1.443': attribute type 29 has an invalid length. [ 138.421681][ T5844] loop2: detected capacity change from 0 to 2048 [ 138.480491][ T5841] netlink: 148 bytes leftover after parsing attributes in process `syz.1.443'. [ 138.704824][ T5841] netlink: 59 bytes leftover after parsing attributes in process `syz.1.443'. [ 139.410054][ T5844] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 140.422824][ T5850] netlink: 16 bytes leftover after parsing attributes in process `syz.4.447'. [ 140.561264][ T5041] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 140.945698][ T5041] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 140.972370][ T5041] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 10 [ 141.005852][ T5041] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 141.021346][ T5041] usb 2-1: config 0 interface 0 has no altsetting 0 [ 141.071635][ T5042] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 141.191791][ T5041] usb 2-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 141.200874][ T5041] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.214423][ T5041] usb 2-1: Product: syz [ 141.218978][ T5041] usb 2-1: Manufacturer: syz [ 141.224109][ T5041] usb 2-1: SerialNumber: syz [ 141.242615][ T5041] usb 2-1: config 0 descriptor?? [ 141.380307][ T5857] loop0: detected capacity change from 0 to 32768 [ 141.485881][ T5042] usb 3-1: not running at top speed; connect to a high speed hub [ 141.513369][ T5041] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input12 [ 142.015296][ T3544] synaptics_usb 2-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 142.024552][ T5042] usb 3-1: config 1 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 142.217219][ T5042] usb 3-1: config 1 interface 0 has no altsetting 0 [ 142.280162][ T5041] synaptics_usb 2-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 142.301162][ T3544] synaptics_usb 2-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 142.318784][ T5041] input: failed to attach handler mousedev to device input12, error: -5 [ 142.539580][ T3544] synaptics_usb 2-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 142.553956][ T3544] synaptics_usb 2-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 142.571393][ T5042] usb 3-1: New USB device found, idVendor=05ac, idProduct=0224, bcdDevice= 0.40 [ 142.580945][ T5042] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.185110][ T5880] loop0: detected capacity change from 0 to 2048 [ 143.907639][ T5110] synaptics_usb 2-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 143.967427][ T5042] usb 3-1: Product: й [ 144.065104][ T5042] usb 3-1: Manufacturer: 俩ᮡ颪讧켴嬡ࡎ텪껰瓑ᔷ擿楆뼾㙲ç˜ê•î¡€åŽŸì¸¯ì¥¢ç‡³æœŽì¾—ᓼ厨â‰é¢¤à·—Ꚉ⇂侅봆랡Ựउ帓⼯æ”呈㙡ꓕ璕닲誂횺跓ⷼ꒢땇ዂç™á¥¯äŒ–éꢇ⬙缻î†æ¿•ä¢ƒà£‡ä¼„┰강깣㩘웛鹺갖ä†ï¯€ê¤¦î¡°æº°é´‰ê²‰ì†­î€°ãº î±Žï§çŠã€é¬‚ë—쬽체撅ã³î’·è¥˜ç¾Šé½¤ë™ƒç·¡ç¬±ã™¦ç¬³ë‘®ä™šï™€ç±‚簃৑㱜ﺣ澶 [ 144.370454][ T5042] usb 3-1: SerialNumber: Ñ [ 145.180510][ T5886] netlink: 16 bytes leftover after parsing attributes in process `syz.4.459'. [ 145.375972][ T5293] usb 2-1: USB disconnect, device number 7 [ 145.471550][ T5042] usb 3-1: can't set config #1, error -71 [ 145.485718][ T5880] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 145.758044][ T5887] loop2: detected capacity change from 0 to 4096 [ 145.775959][ T5042] usb 3-1: USB disconnect, device number 12 [ 145.869331][ T5895] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 146.224375][ T5041] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 146.461562][ T5041] usb 1-1: device descriptor read/64, error -71 [ 146.741548][ T5041] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 146.941337][ T5041] usb 1-1: device descriptor read/64, error -71 [ 147.071526][ T5041] usb usb1-port1: attempt power cycle [ 148.136068][ T5917] loop3: detected capacity change from 0 to 512 [ 148.267530][ T5917] EXT4-fs (loop3): Mount option "nojournal_checksum" incompatible with ext3 [ 148.728882][ T5041] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 148.753651][ T5919] loop1: detected capacity change from 0 to 2048 [ 148.801346][ T5041] usb 1-1: device descriptor read/8, error -71 [ 149.331152][ T5919] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 149.519643][ T5926] netlink: 16 bytes leftover after parsing attributes in process `syz.3.471'. [ 149.556432][ T5926] loop3: detected capacity change from 0 to 512 [ 149.787156][ T5926] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 149.798418][ T5926] ext4 filesystem being mounted at /95/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.066752][ T5946] IPv6: addrconf: prefix option has invalid lifetime [ 150.615710][ T4230] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 151.122947][ T5951] overlayfs: missing 'lowerdir' [ 151.250851][ T5956] loop0: detected capacity change from 0 to 512 [ 151.260400][ T5953] netlink: 4 bytes leftover after parsing attributes in process `syz.3.475'. [ 151.542017][ T5956] EXT4-fs (loop0): Mount option "nojournal_checksum" incompatible with ext3 [ 154.348804][ T5969] loop1: detected capacity change from 0 to 4096 [ 154.355351][ T4230] usb 3-1: device descriptor read/all, error -71 [ 154.586341][ T5977] netlink: 16 bytes leftover after parsing attributes in process `syz.2.485'. [ 154.600253][ T5977] loop2: detected capacity change from 0 to 512 [ 155.192827][ T5977] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 155.205604][ T5977] ext4 filesystem being mounted at /74/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.745630][ T6003] overlayfs: missing 'lowerdir' [ 159.042019][ T6008] netlink: 4 bytes leftover after parsing attributes in process `syz.1.490'. [ 159.309630][ T4513] syzkaller0: tun_net_xmit 76 [ 159.314645][ T4513] syzkaller0: tun_net_xmit 48 [ 160.085974][ T6000] loop3: detected capacity change from 0 to 32768 [ 160.247062][ T6037] loop2: detected capacity change from 0 to 128 [ 160.346860][ T6000] JBD2: Ignoring recovery information on journal [ 161.112129][ T6037] UDF-fs: bad mount option "18446744073709551615ÿ" or missing value [ 161.199802][ T6000] JBD2: recovery failed [ 161.421806][ T6000] (syz.3.491,6000,1):ocfs2_journal_load:1105 ERROR: Failed to load journal! [ 162.921393][ T6000] (syz.3.491,6000,1):ocfs2_check_volume:2437 ERROR: ocfs2 journal load failed! -5 [ 162.992492][ T6000] (syz.3.491,6000,0):ocfs2_check_volume:2493 ERROR: status = -5 [ 163.000177][ T6000] (syz.3.491,6000,0):ocfs2_mount_volume:1824 ERROR: status = -5 [ 163.076353][ T6000] (syz.3.491,6000,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 164.064013][ T6065] netlink: 4 bytes leftover after parsing attributes in process `syz.1.506'. [ 164.345642][ T6071] loop0: detected capacity change from 0 to 4096 [ 164.680551][ T6074] loop1: detected capacity change from 0 to 4096 [ 164.774013][ T6075] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 164.961762][ T6077] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 165.471301][ T5041] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 165.561481][ T6086] IPv6: addrconf: prefix option has invalid lifetime [ 165.671592][ T5041] usb 1-1: device descriptor read/64, error -71 [ 165.947892][ T6100] netlink: 'syz.1.517': attribute type 12 has an invalid length. [ 165.954370][ T5041] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 165.956450][ T6100] netlink: 'syz.1.517': attribute type 29 has an invalid length. [ 165.979832][ T6100] netlink: 148 bytes leftover after parsing attributes in process `syz.1.517'. [ 166.005002][ T6100] netlink: 59 bytes leftover after parsing attributes in process `syz.1.517'. [ 166.012242][ T6103] netlink: 4 bytes leftover after parsing attributes in process `syz.3.519'. [ 166.836358][ T4513] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 166.893713][ T6108] loop1: detected capacity change from 0 to 4096 [ 167.016317][ T6116] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 167.101399][ T5041] usb 1-1: device descriptor read/64, error -71 [ 167.301907][ T5041] usb usb1-port1: attempt power cycle [ 167.722835][ T6125] loop3: detected capacity change from 0 to 2048 [ 167.777995][ T6125] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 167.931520][ T4513] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 167.941537][ T5041] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 167.951032][ T4513] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 167.961074][ T4513] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 167.974401][ T4513] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 167.990951][ T4513] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.036118][ T6131] IPv6: addrconf: prefix option has invalid lifetime [ 168.051533][ T5041] usb 1-1: device descriptor read/8, error -71 [ 168.079752][ T4513] snd-usb-audio: probe of 3-1:27.0 failed with error -2 [ 168.167687][ T4176] udevd[4176]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 168.237259][ T6134] loop0: detected capacity change from 0 to 128 [ 168.292348][ T6134] UDF-fs: bad mount option "18446744073709551615ÿ" or missing value [ 169.050422][ T6140] netlink: 'syz.4.530': attribute type 12 has an invalid length. [ 169.176789][ T6140] netlink: 'syz.4.530': attribute type 29 has an invalid length. [ 169.185287][ T6140] netlink: 148 bytes leftover after parsing attributes in process `syz.4.530'. [ 169.194598][ T6140] netlink: 59 bytes leftover after parsing attributes in process `syz.4.530'. [ 170.447350][ T5042] usb 3-1: USB disconnect, device number 15 [ 170.539741][ T6150] netlink: 4 bytes leftover after parsing attributes in process `syz.4.533'. [ 171.239366][ T6153] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 172.748702][ T6168] tipc: Started in network mode [ 172.756602][ T6168] tipc: Node identity ac14140f, cluster identity 4711 [ 172.776014][ T6168] tipc: New replicast peer: 255.255.255.255 [ 172.778409][ T6166] loop2: detected capacity change from 0 to 128 [ 172.792435][ T6168] tipc: Enabled bearer , priority 10 [ 173.017428][ T6176] netlink: 'syz.2.541': attribute type 12 has an invalid length. [ 173.035523][ T6176] netlink: 'syz.2.541': attribute type 29 has an invalid length. [ 173.073533][ T6176] netlink: 148 bytes leftover after parsing attributes in process `syz.2.541'. [ 173.094566][ T6176] netlink: 59 bytes leftover after parsing attributes in process `syz.2.541'. [ 174.098002][ T5041] tipc: Node number set to 2886997007 [ 174.125006][ T6188] netlink: 4 bytes leftover after parsing attributes in process `syz.2.545'. [ 174.459953][ T6198] loop1: detected capacity change from 0 to 4096 [ 175.149579][ T6207] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 175.260446][ T6209] loop2: detected capacity change from 0 to 128 [ 175.304503][ T6212] loop1: detected capacity change from 0 to 128 [ 175.362223][ T6212] UDF-fs: bad mount option "18446744073709551615ÿ" or missing value [ 175.460039][ T6214] netlink: 'syz.0.554': attribute type 12 has an invalid length. [ 175.468930][ T6214] netlink: 'syz.0.554': attribute type 29 has an invalid length. [ 175.477483][ T6214] netlink: 148 bytes leftover after parsing attributes in process `syz.0.554'. [ 175.508025][ T6214] netlink: 59 bytes leftover after parsing attributes in process `syz.0.554'. [ 175.741523][ T6218] tipc: Enabling of bearer rejected, already enabled [ 176.051385][ T4230] Bluetooth: hci2: command 0x0406 tx timeout [ 176.069222][ T4230] Bluetooth: hci0: command 0x0406 tx timeout [ 176.111903][ T4517] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 176.140078][ T4230] Bluetooth: hci3: command 0x0406 tx timeout [ 176.147522][ T4230] Bluetooth: hci1: command 0x0406 tx timeout [ 176.154011][ T4230] Bluetooth: hci4: command 0x0406 tx timeout [ 176.294516][ T6226] loop2: detected capacity change from 0 to 2048 [ 176.434159][ T6226] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 178.115165][ T6230] netlink: 4 bytes leftover after parsing attributes in process `syz.4.560'. [ 178.370686][ T6238] loop1: detected capacity change from 0 to 128 [ 178.383430][ T6245] netlink: 'syz.4.565': attribute type 12 has an invalid length. [ 178.391432][ T6245] netlink: 'syz.4.565': attribute type 29 has an invalid length. [ 178.410896][ T6245] netlink: 148 bytes leftover after parsing attributes in process `syz.4.565'. [ 178.421530][ T4517] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 178.436720][ T4517] usb 1-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 178.441144][ T6245] netlink: 59 bytes leftover after parsing attributes in process `syz.4.565'. [ 178.459747][ T6242] loop2: detected capacity change from 0 to 4096 [ 178.468955][ T4517] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 178.489282][ T4517] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.548162][ T6247] tipc: Enabling of bearer rejected, already enabled [ 178.576726][ T6248] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 178.592388][ T4517] snd-usb-audio: probe of 1-1:27.0 failed with error -2 [ 178.679164][ T5110] udevd[5110]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 178.772147][ T6255] fuse: Bad value for 'fd' [ 178.784800][ T5041] usb 1-1: USB disconnect, device number 17 [ 179.342122][ T4517] syzkaller0: tun_net_xmit 76 [ 179.347019][ T4517] syzkaller0: tun_net_xmit 48 [ 179.371439][ T4230] syzkaller0: tun_net_xmit 76 [ 179.496550][ T6266] loop0: detected capacity change from 0 to 128 [ 179.510548][ T6266] UDF-fs: bad mount option "18446744073709551615ÿ" or missing value [ 179.769657][ T6271] loop3: detected capacity change from 0 to 4096 [ 179.836114][ T6272] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 179.958024][ T6277] netlink: 4 bytes leftover after parsing attributes in process `syz.3.577'. [ 180.298653][ T6280] loop3: detected capacity change from 0 to 128 [ 180.528566][ T6268] loop2: detected capacity change from 0 to 32768 [ 180.985681][ T6268] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 181.006379][ T6268] BTRFS info (device loop2): using free space tree [ 181.020026][ T6286] fuse: Bad value for 'fd' [ 181.048124][ T6268] BTRFS info (device loop2): has skinny extents [ 181.300884][ T5042] syzkaller0: tun_net_xmit 76 [ 181.313561][ T6300] loop3: detected capacity change from 0 to 4096 [ 181.327417][ T5042] syzkaller0: tun_net_xmit 48 [ 181.334830][ T6268] BTRFS info (device loop2): enabling ssd optimizations [ 181.340047][ T5041] syzkaller0: tun_net_xmit 76 [ 181.432344][ T6315] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 182.391034][ T6324] netlink: 4 bytes leftover after parsing attributes in process `syz.0.588'. [ 182.541546][ T5041] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 182.821345][ T5046] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 182.995329][ T5041] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 183.023918][ T5041] usb 2-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 183.058028][ T5041] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 183.083115][ T5041] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.116527][ T4230] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 183.159221][ T5041] snd-usb-audio: probe of 2-1:27.0 failed with error -2 [ 183.181834][ T5046] usb 4-1: config 0 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 183.202956][ T5046] usb 4-1: config 0 interface 0 has no altsetting 0 [ 183.209763][ T5046] usb 4-1: New USB device found, idVendor=046d, idProduct=c512, bcdDevice= 0.00 [ 183.214357][ T4176] udevd[4176]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 183.227928][ T5046] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.270834][ T5046] usb 4-1: config 0 descriptor?? [ 183.367556][ T5041] usb 2-1: USB disconnect, device number 8 [ 183.832018][ T5046] usb 4-1: string descriptor 0 read error: -71 [ 184.021516][ T5046] usbhid 4-1:0.0: can't add hid device: -71 [ 184.027517][ T5046] usbhid: probe of 4-1:0.0 failed with error -71 [ 184.095276][ T5046] usb 4-1: USB disconnect, device number 7 [ 184.261895][ T4230] usb 3-1: not running at top speed; connect to a high speed hub [ 184.361645][ T4230] usb 3-1: config 1 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 184.406636][ T4230] usb 3-1: config 1 interface 0 has no altsetting 0 [ 184.480210][ T6361] netlink: 4 bytes leftover after parsing attributes in process `syz.0.600'. [ 184.591729][ T4230] usb 3-1: New USB device found, idVendor=05ac, idProduct=0224, bcdDevice= 0.40 [ 184.610648][ T4230] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.628725][ T4230] usb 3-1: Product: й [ 184.643524][ T4230] usb 3-1: Manufacturer: 俩ᮡ颪讧켴嬡ࡎ텪껰瓑ᔷ擿楆뼾㙲ç˜ê•î¡€åŽŸì¸¯ì¥¢ç‡³æœŽì¾—ᓼ厨â‰é¢¤à·—Ꚉ⇂侅봆랡Ựउ帓⼯æ”呈㙡ꓕ璕닲誂횺跓ⷼ꒢땇ዂç™á¥¯äŒ–éꢇ⬙缻î†æ¿•ä¢ƒà£‡ä¼„┰강깣㩘웛鹺갖ä†ï¯€ê¤¦î¡°æº°é´‰ê²‰ì†­î€°ãº î±Žï§çŠã€é¬‚ë—쬽체撅ã³î’·è¥˜ç¾Šé½¤ë™ƒç·¡ç¬±ã™¦ç¬³ë‘®ä™šï™€ç±‚簃৑㱜ﺣ澶 [ 184.673614][ T6364] loop0: detected capacity change from 0 to 128 [ 184.726787][ T4230] usb 3-1: SerialNumber: Ñ [ 184.955597][ T6358] loop3: detected capacity change from 0 to 32768 [ 185.010349][ T6358] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.599 (6358) [ 185.068767][ T6358] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 185.101328][ T6358] BTRFS info (device loop3): setting nodatasum [ 185.107973][ T6358] BTRFS info (device loop3): force zlib compression, level 3 [ 185.165015][ T6358] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 185.214289][ T6358] BTRFS info (device loop3): use lzo compression, level 0 [ 185.253750][ T4230] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input13 [ 185.256179][ T6358] BTRFS info (device loop3): turning on flush-on-commit [ 185.291365][ T3544] bcm5974 3-1:1.0: could not read from device [ 185.298675][ T6358] BTRFS info (device loop3): enabling auto defrag [ 185.319112][ T4230] usb 3-1: USB disconnect, device number 16 [ 185.321775][ T6358] BTRFS info (device loop3): max_inline at 4096 [ 185.369294][ T6358] BTRFS info (device loop3): using free space tree [ 185.395266][ T6358] BTRFS info (device loop3): has skinny extents [ 185.597708][ T6385] loop0: detected capacity change from 0 to 4096 [ 185.705244][ T6358] BTRFS info (device loop3): enabling ssd optimizations [ 185.713589][ T6400] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 185.888638][ T25] audit: type=1800 audit(1784886457.209:46): pid=6358 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.599" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 186.375698][ T6375] loop1: detected capacity change from 0 to 32768 [ 186.478147][ T6375] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by syz.1.606 (6375) [ 186.549791][ T6375] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 186.625591][ T6375] BTRFS info (device loop1): using free space tree [ 186.663211][ T6375] BTRFS info (device loop1): has skinny extents [ 186.690779][ T6417] netlink: 4 bytes leftover after parsing attributes in process `syz.0.611'. [ 186.923250][ T6425] loop2: detected capacity change from 0 to 128 [ 187.094716][ T6375] BTRFS info (device loop1): enabling ssd optimizations [ 187.173076][ T6446] netlink: 'syz.3.612': attribute type 12 has an invalid length. [ 187.180891][ T6446] netlink: 'syz.3.612': attribute type 29 has an invalid length. [ 187.188708][ T6446] netlink: 148 bytes leftover after parsing attributes in process `syz.3.612'. [ 187.698626][ T6459] loop2: detected capacity change from 0 to 128 [ 187.717406][ T6459] UDF-fs: bad mount option "18446744073709551615ÿ" or missing value [ 187.820472][ T6461] overlayfs: failed to clone lowerpath [ 188.439415][ T6468] loop3: detected capacity change from 0 to 4096 [ 188.551886][ T6477] netlink: 4 bytes leftover after parsing attributes in process `syz.1.624'. [ 188.603542][ T6475] loop0: detected capacity change from 0 to 1024 [ 188.669184][ T6475] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 188.679630][ T6475] EXT4-fs (loop0): orphan cleanup on readonly fs [ 188.825978][ T6475] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.623: bg 0: block 10: padding at end of block bitmap is not set [ 188.846444][ T6475] Quota error (device loop0): write_blk: dquota write failed [ 188.854221][ T6475] Quota error (device loop0): find_free_dqentry: Can't remove block (3) from entry free list [ 188.864600][ T6475] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 188.874521][ T6475] EXT4-fs error (device loop0): ext4_acquire_dquot:6236: comm syz.0.623: Failed to acquire dquot type 0 [ 188.887871][ T6475] Quota error (device loop0): write_blk: dquota write failed [ 188.895422][ T6475] Quota error (device loop0): find_free_dqentry: Can't remove block (3) from entry free list [ 188.905868][ T6475] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 188.915795][ T6475] EXT4-fs error (device loop0): ext4_acquire_dquot:6236: comm syz.0.623: Failed to acquire dquot type 0 [ 188.929450][ T6475] EXT4-fs error (device loop0): ext4_free_blocks:6231: comm syz.0.623: Freeing blocks not in datazone - block = 0, count = 4096 [ 188.946443][ T6475] Quota error (device loop0): write_blk: dquota write failed [ 188.954168][ T6475] Quota error (device loop0): find_free_dqentry: Can't remove block (3) from entry free list [ 188.964603][ T6475] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 188.974475][ T6475] EXT4-fs error (device loop0): ext4_acquire_dquot:6236: comm syz.0.623: Failed to acquire dquot type 0 [ 188.989365][ T6475] EXT4-fs (loop0): 1 orphan inode deleted [ 189.028706][ T6478] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 189.058696][ T6475] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 189.280889][ T6482] loop1: detected capacity change from 0 to 128 [ 189.895460][ T6484] loop3: detected capacity change from 0 to 32768 [ 190.110405][ T6484] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by syz.3.626 (6484) [ 190.180364][ T6484] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 190.207225][ T6484] BTRFS info (device loop3): using free space tree [ 190.224838][ T6484] BTRFS info (device loop3): has skinny extents [ 190.256237][ T6507] netlink: 'syz.4.632': attribute type 12 has an invalid length. [ 190.264051][ T6507] netlink: 'syz.4.632': attribute type 29 has an invalid length. [ 190.271974][ T6507] netlink: 148 bytes leftover after parsing attributes in process `syz.4.632'. [ 190.496156][ T6484] BTRFS info (device loop3): enabling ssd optimizations [ 190.629003][ T6528] loop1: detected capacity change from 0 to 4096 [ 190.747557][ T6532] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 192.405900][ T6550] netlink: 4 bytes leftover after parsing attributes in process `syz.3.635'. [ 192.438301][ T6544] loop1: detected capacity change from 0 to 128 [ 192.964879][ T6546] loop2: detected capacity change from 0 to 32768 [ 192.966412][ T6555] loop3: detected capacity change from 0 to 32768 [ 193.021503][ T6555] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.642 (6555) [ 193.051563][ T6555] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 193.070527][ T6555] BTRFS info (device loop3): setting nodatasum [ 193.078878][ T6555] BTRFS info (device loop3): force zlib compression, level 3 [ 193.094647][ T6546] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by syz.2.639 (6546) [ 193.135823][ T6555] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 193.146016][ T6546] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 193.167814][ T6555] BTRFS info (device loop3): use lzo compression, level 0 [ 193.175584][ T6546] BTRFS info (device loop2): using free space tree [ 193.206130][ T6555] BTRFS info (device loop3): turning on flush-on-commit [ 193.213499][ T6546] BTRFS info (device loop2): has skinny extents [ 193.226381][ T6555] BTRFS info (device loop3): enabling auto defrag [ 193.248947][ T6555] BTRFS info (device loop3): max_inline at 4096 [ 193.275157][ T6555] BTRFS info (device loop3): using free space tree [ 193.306711][ T6555] BTRFS info (device loop3): has skinny extents [ 193.445861][ T6546] BTRFS info (device loop2): enabling ssd optimizations [ 193.457051][ T6563] loop0: detected capacity change from 0 to 32768 [ 193.502734][ T6563] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by syz.0.645 (6563) [ 193.637327][ T6555] BTRFS info (device loop3): enabling ssd optimizations [ 193.661106][ T25] audit: type=1800 audit(1784886464.979:47): pid=6555 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.642" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 193.859931][ T4498] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 scanned by udevd (4498) [ 193.903048][ T6617] loop1: detected capacity change from 0 to 4096 [ 193.973657][ T6627] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 194.282648][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.289705][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.887622][ T6648] IPv6: addrconf: prefix option has invalid lifetime [ 198.229883][ T6662] loop3: detected capacity change from 0 to 32768 [ 198.285130][ T6662] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 198.338726][ T6662] BTRFS info (device loop3): using free space tree [ 198.356066][ T6662] BTRFS info (device loop3): has skinny extents [ 198.658034][ T6679] loop2: detected capacity change from 0 to 1024 [ 198.770686][ T6679] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 198.779785][ T6679] EXT4-fs (loop2): orphan cleanup on readonly fs [ 198.793001][ T6679] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.663: bg 0: block 10: padding at end of block bitmap is not set [ 198.811993][ T6679] Quota error (device loop2): write_blk: dquota write failed [ 198.820316][ T6679] Quota error (device loop2): find_free_dqentry: Can't remove block (3) from entry free list [ 198.830691][ T6679] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 198.840611][ T6679] EXT4-fs error (device loop2): ext4_acquire_dquot:6236: comm syz.2.663: Failed to acquire dquot type 0 [ 199.529046][ T6679] Quota error (device loop2): write_blk: dquota write failed [ 199.536527][ T6679] Quota error (device loop2): find_free_dqentry: Can't remove block (3) from entry free list [ 199.546844][ T6679] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 199.556726][ T6679] EXT4-fs error (device loop2): ext4_acquire_dquot:6236: comm syz.2.663: Failed to acquire dquot type 0 [ 199.569920][ T6679] EXT4-fs error (device loop2): ext4_free_blocks:6231: comm syz.2.663: Freeing blocks not in datazone - block = 0, count = 4096 [ 199.585276][ T6679] Quota error (device loop2): write_blk: dquota write failed [ 199.592779][ T6679] Quota error (device loop2): find_free_dqentry: Can't remove block (3) from entry free list [ 199.603192][ T6679] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 199.613084][ T6679] EXT4-fs error (device loop2): ext4_acquire_dquot:6236: comm syz.2.663: Failed to acquire dquot type 0 [ 199.627426][ T6679] EXT4-fs (loop2): 1 orphan inode deleted [ 199.988795][ T6667] loop1: detected capacity change from 0 to 32768 [ 199.999829][ T6679] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 200.612397][ T6662] BTRFS error (device loop3): open_ctree failed: -12 [ 200.623176][ T6703] tipc: Enabling of bearer rejected, failed to enable media [ 200.636765][ T6667] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.662 (6667) [ 200.682932][ T6703] tipc: New replicast peer: 255.255.255.255 [ 200.689344][ T6703] tipc: Enabled bearer , priority 10 [ 200.701870][ T6667] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 200.717653][ T6667] BTRFS info (device loop1): setting nodatasum [ 200.756386][ T6667] BTRFS info (device loop1): force zlib compression, level 3 [ 200.781796][ T6667] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 200.791122][ T6667] BTRFS info (device loop1): use lzo compression, level 0 [ 200.821651][ T6667] BTRFS info (device loop1): turning on flush-on-commit [ 200.828650][ T6667] BTRFS info (device loop1): enabling auto defrag [ 200.878150][ T4176] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by udevd (4176) [ 200.992364][ T6667] BTRFS info (device loop1): max_inline at 4096 [ 200.998813][ T6667] BTRFS info (device loop1): using free space tree [ 201.003206][ T6706] loop0: detected capacity change from 0 to 512 [ 201.016582][ T6667] BTRFS info (device loop1): has skinny extents [ 201.059957][ T6710] IPv6: addrconf: prefix option has invalid lifetime [ 201.107697][ T6706] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 201.118854][ T6706] ext4 filesystem being mounted at /121/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 201.289550][ T6667] BTRFS error (device loop1): open_ctree failed: -12 [ 203.701272][ T6756] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 203.714853][ T6766] loop0: detected capacity change from 0 to 128 [ 203.768239][ T6765] loop1: detected capacity change from 0 to 512 [ 203.892380][ T6765] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 203.904054][ T6765] ext4 filesystem being mounted at /126/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 204.038925][ T6742] loop3: detected capacity change from 0 to 32768 [ 204.170655][ T6742] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 204.172542][ T6774] loop0: detected capacity change from 0 to 4096 [ 204.194350][ T6756] usb 3-1: not running at top speed; connect to a high speed hub [ 204.217825][ T6742] BTRFS info (device loop3): using free space tree [ 204.240644][ T6742] BTRFS info (device loop3): has skinny extents [ 204.293324][ T6756] usb 3-1: config 1 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 204.346842][ T6756] usb 3-1: config 1 interface 0 has no altsetting 0 [ 204.380658][ T6788] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 204.553518][ T6742] BTRFS error (device loop3): open_ctree failed: -12 [ 205.126980][ T6756] usb 3-1: New USB device found, idVendor=05ac, idProduct=0224, bcdDevice= 0.40 [ 205.136549][ T6756] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.145161][ T6756] usb 3-1: Product: й [ 205.149298][ T6756] usb 3-1: Manufacturer: 俩ᮡ颪讧켴嬡ࡎ텪껰瓑ᔷ擿楆뼾㙲ç˜ê•î¡€åŽŸì¸¯ì¥¢ç‡³æœŽì¾—ᓼ厨â‰é¢¤à·—Ꚉ⇂侅봆랡Ựउ帓⼯æ”呈㙡ꓕ璕닲誂횺跓ⷼ꒢땇ዂç™á¥¯äŒ–éꢇ⬙缻î†æ¿•ä¢ƒà£‡ä¼„┰강깣㩘웛鹺갖ä†ï¯€ê¤¦î¡°æº°é´‰ê²‰ì†­î€°ãº î±Žï§çŠã€é¬‚ë—쬽체撅ã³î’·è¥˜ç¾Šé½¤ë™ƒç·¡ç¬±ã™¦ç¬³ë‘®ä™šï™€ç±‚簃৑㱜ﺣ澶 [ 205.189020][ T6803] loop1: detected capacity change from 0 to 512 [ 205.195764][ T6756] usb 3-1: SerialNumber: Ñ [ 205.326275][ T6803] EXT4-fs (loop1): Mount option "nojournal_checksum" incompatible with ext3 [ 205.414640][ T5110] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by udevd (5110) [ 207.423725][ T6756] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input14 [ 207.661355][ T3544] bcm5974 3-1:1.0: could not read from device [ 207.679536][ T6756] usb 3-1: USB disconnect, device number 17 [ 207.724357][ T6821] overlayfs: failed to clone upperpath [ 208.345401][ T6825] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 209.097975][ T6827] loop0: detected capacity change from 0 to 512 [ 209.233157][ T6831] loop2: detected capacity change from 0 to 4096 [ 209.240797][ T6827] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 209.251973][ T6827] ext4 filesystem being mounted at /128/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 209.442221][ T6842] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 209.676445][ T6845] loop0: detected capacity change from 0 to 4096 [ 209.808859][ T6836] loop1: detected capacity change from 0 to 32768 [ 210.008159][ T6836] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 210.033211][ T6836] BTRFS info (device loop1): using free space tree [ 210.039851][ T6836] BTRFS info (device loop1): has skinny extents [ 210.163051][ T6858] loop2: detected capacity change from 0 to 2048 [ 210.310738][ T6858] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 211.162485][ T6859] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 212.786687][ T6836] BTRFS error (device loop1): open_ctree failed: -12 [ 213.071474][ T4516] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 213.672612][ T4516] usb 4-1: not running at top speed; connect to a high speed hub [ 213.791499][ T4516] usb 4-1: config 1 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 213.812635][ T4176] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by udevd (4176) [ 213.830219][ T4516] usb 4-1: config 1 interface 0 has no altsetting 0 [ 214.811506][ T4516] usb 4-1: New USB device found, idVendor=05ac, idProduct=0224, bcdDevice= 0.40 [ 214.987220][ T6904] loop0: detected capacity change from 0 to 4096 [ 215.139535][ T6909] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 215.170539][ T4516] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.178610][ T4516] usb 4-1: Product: й [ 215.182738][ T4516] usb 4-1: Manufacturer: 俩ᮡ颪讧켴嬡ࡎ텪껰瓑ᔷ擿楆뼾㙲ç˜ê•î¡€åŽŸì¸¯ì¥¢ç‡³æœŽì¾—ᓼ厨â‰é¢¤à·—Ꚉ⇂侅봆랡Ựउ帓⼯æ”呈㙡ꓕ璕닲誂횺跓ⷼ꒢땇ዂç™á¥¯äŒ–éꢇ⬙缻î†æ¿•ä¢ƒà£‡ä¼„┰강깣㩘웛鹺갖ä†ï¯€ê¤¦î¡°æº°é´‰ê²‰ì†­î€°ãº î±Žï§çŠã€é¬‚ë—쬽체撅ã³î’·è¥˜ç¾Šé½¤ë™ƒç·¡ç¬±ã™¦ç¬³ë‘®ä™šï™€ç±‚簃৑㱜ﺣ澶 [ 215.218509][ T4516] usb 4-1: SerialNumber: Ñ [ 215.629336][ T4516] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input15 [ 215.884923][ T3544] bcm5974 4-1:1.0: could not read from device [ 215.920766][ T6918] fuse: Bad value for 'fd' [ 216.485658][ T3544] bcm5974 4-1:1.0: could not read from device [ 216.542812][ T4516] usb 4-1: USB disconnect, device number 8 [ 216.768374][ T6924] loop1: detected capacity change from 0 to 512 [ 216.822675][ T6926] loop3: detected capacity change from 0 to 512 [ 216.877846][ T6924] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 216.918255][ T6924] ext4 filesystem being mounted at /133/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 217.023574][ T6930] loop0: detected capacity change from 0 to 512 [ 217.099396][ T6926] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 217.108553][ T6910] loop2: detected capacity change from 0 to 32768 [ 217.134594][ T6926] ext4 filesystem being mounted at /130/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 217.930528][ T6910] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 217.961859][ T6910] BTRFS info (device loop2): using free space tree [ 217.979846][ T6910] BTRFS info (device loop2): has skinny extents [ 218.009021][ T6930] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 218.020171][ T6930] ext4 filesystem being mounted at /132/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 218.132850][ T6910] BTRFS error (device loop2): open_ctree failed: -12 [ 218.196761][ T6963] IPv6: addrconf: prefix option has invalid lifetime [ 218.234690][ T6945] loop1: detected capacity change from 0 to 4096 [ 218.290330][ T4500] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by udevd (4500) [ 218.417429][ T6969] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 218.589997][ T6974] loop3: detected capacity change from 0 to 512 [ 219.042564][ T6974] EXT4-fs (loop3): Test dummy encryption mode enabled [ 219.069076][ T6974] EXT4-fs error (device loop3): ext4_orphan_get:1406: inode #15: comm syz.3.725: inode has both inline data and extents flags [ 219.174996][ T6974] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.725: couldn't read orphan inode 15 (err -117) [ 219.194932][ T6974] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 219.993326][ T6994] loop1: detected capacity change from 0 to 512 [ 220.015805][ T6992] fuse: Bad value for 'fd' [ 220.061575][ T6974] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 220.133031][ T6994] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 220.156869][ T6994] ext4 filesystem being mounted at /135/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 221.239439][ T6756] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 221.653396][ T7019] IPv6: addrconf: prefix option has invalid lifetime [ 222.330995][ T7024] loop1: detected capacity change from 0 to 512 [ 222.356938][ T7031] loop3: detected capacity change from 0 to 4096 [ 222.402124][ T6756] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 222.443923][ T6756] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 222.451345][ T7024] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 222.464037][ T7024] ext4 filesystem being mounted at /136/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 222.560791][ T7037] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 222.787569][ T7041] tipc: Enabling of bearer rejected, failed to enable media [ 222.872926][ T7041] tipc: Enabling of bearer rejected, already enabled [ 222.885302][ T7022] loop0: detected capacity change from 0 to 32768 [ 223.131048][ T7022] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 223.165799][ T7022] BTRFS info (device loop0): using free space tree [ 223.244876][ T7022] BTRFS info (device loop0): has skinny extents [ 223.301412][ T6756] usb 3-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 223.320752][ T6756] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.341291][ T6756] usb 3-1: Product: syz [ 223.401597][ T6756] usb 3-1: can't set config #1, error -71 [ 223.411468][ T6756] usb 3-1: USB disconnect, device number 18 [ 223.486179][ T7022] BTRFS info (device loop0): enabling ssd optimizations [ 223.910120][ T7065] loop2: detected capacity change from 0 to 32768 [ 224.058351][ T7065] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.743 (7065) [ 224.143175][ T7065] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 224.171635][ T7065] BTRFS info (device loop2): setting nodatasum [ 224.177843][ T7065] BTRFS info (device loop2): force zlib compression, level 3 [ 224.210718][ T7065] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 224.238533][ T7065] BTRFS info (device loop2): use lzo compression, level 0 [ 224.271306][ T7065] BTRFS info (device loop2): turning on flush-on-commit [ 224.278295][ T7065] BTRFS info (device loop2): enabling auto defrag [ 224.294167][ T7065] BTRFS info (device loop2): max_inline at 4096 [ 224.300476][ T7065] BTRFS info (device loop2): using free space tree [ 224.308156][ T7065] BTRFS info (device loop2): has skinny extents [ 224.361425][ T4608] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 224.412402][ T7065] BTRFS info (device loop2): enabling ssd optimizations [ 224.437722][ T25] audit: type=1800 audit(1784886495.759:48): pid=7065 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.743" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 224.555264][ T7119] tipc: Enabling of bearer rejected, failed to enable media [ 224.589148][ T7119] tipc: Enabling of bearer rejected, already enabled [ 224.801621][ T4608] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 224.888015][ T7129] overlayfs: failed to clone lowerpath [ 225.111426][ T7128] loop3: detected capacity change from 0 to 4096 [ 225.260654][ T4608] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 225.270578][ T4608] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 225.283531][ T4608] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 225.288836][ T7131] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 225.292684][ T4608] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.378243][ T4608] snd-usb-audio: probe of 1-1:27.0 failed with error -2 [ 225.424445][ T5110] udevd[5110]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 226.137370][ T7137] overlayfs: missing 'lowerdir' [ 226.545825][ T4265] usb 1-1: USB disconnect, device number 18 [ 226.596940][ T7142] loop3: detected capacity change from 0 to 512 [ 226.664220][ T7142] EXT4-fs (loop3): Test dummy encryption mode enabled [ 226.848446][ T7142] EXT4-fs error (device loop3): ext4_orphan_get:1406: inode #15: comm syz.3.757: inode has both inline data and extents flags [ 226.875654][ T7142] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.757: couldn't read orphan inode 15 (err -117) [ 226.898023][ T7142] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 227.280710][ T2304] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 227.337747][ T7163] overlayfs: failed to resolve './file0': -2 [ 228.019960][ T7159] loop1: detected capacity change from 0 to 32768 [ 228.097952][ T7159] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.763 (7159) [ 228.158930][ T7159] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 228.188693][ T7159] BTRFS info (device loop1): setting nodatasum [ 228.209025][ T7159] BTRFS info (device loop1): force zlib compression, level 3 [ 228.229190][ T7159] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 228.245487][ T7159] BTRFS info (device loop1): use lzo compression, level 0 [ 228.263186][ T7159] BTRFS info (device loop1): turning on flush-on-commit [ 228.270163][ T7159] BTRFS info (device loop1): enabling auto defrag [ 228.307018][ T7159] BTRFS info (device loop1): max_inline at 4096 [ 228.323935][ T7159] BTRFS info (device loop1): using free space tree [ 228.344126][ T7159] BTRFS info (device loop1): has skinny extents [ 228.670555][ T7174] tipc: Bearer : already 2 bearers with priority 10 [ 228.684513][ T7174] tipc: Bearer : trying with adjusted priority [ 228.695343][ T7174] tipc: Enabling of bearer rejected, failed to enable media [ 228.709751][ T7174] tipc: Enabling of bearer rejected, already enabled [ 228.943843][ T2304] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 229.001411][ T7186] overlayfs: failed to clone lowerpath [ 229.037260][ T2304] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 229.248363][ T7187] loop0: detected capacity change from 0 to 4096 [ 229.333775][ T7190] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 229.441893][ T2304] usb 3-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 229.450965][ T2304] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.459649][ T2304] usb 3-1: Product: syz [ 229.463896][ T2304] usb 3-1: Manufacturer: syz [ 229.468493][ T2304] usb 3-1: SerialNumber: syz [ 229.516559][ T7159] BTRFS info (device loop1): enabling ssd optimizations [ 229.701376][ T25] audit: type=1800 audit(1784886501.019:49): pid=7159 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.763" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 230.750006][ T2304] usb 3-1: can't set config #1, error -71 [ 230.771057][ T2304] usb 3-1: USB disconnect, device number 19 [ 231.938731][ T7212] loop3: detected capacity change from 0 to 1024 [ 233.681597][ T7212] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 234.672664][ T7228] loop1: detected capacity change from 0 to 512 [ 235.026845][ T7228] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 235.038606][ T7228] ext4 filesystem being mounted at /141/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 236.589190][ T5047] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 237.130992][ T7245] loop3: detected capacity change from 0 to 512 [ 237.141613][ T4516] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 237.442286][ T5047] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 237.542263][ T7245] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 237.623741][ T5047] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 237.818840][ T7245] ext4 filesystem being mounted at /143/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 237.871456][ T5047] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 237.905927][ T5047] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.964261][ T5047] usb 1-1: invalid MIDI out EP 0 [ 238.783815][ T7260] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 239.189446][ T5047] snd-usb-audio: probe of 1-1:27.0 failed with error -22 [ 239.198752][ T5047] usb 1-1: USB disconnect, device number 19 [ 239.478144][ T7270] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 240.341026][ T7267] netlink: 72 bytes leftover after parsing attributes in process `syz.0.787'. [ 240.355562][ T7267] loop0: detected capacity change from 0 to 512 [ 240.481484][ T7267] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 240.493132][ T7267] ext4 filesystem being mounted at /142/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 240.579870][ T4500] udevd[4500]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 240.629154][ T7280] loop2: detected capacity change from 0 to 512 [ 240.637996][ T7283] loop3: detected capacity change from 0 to 2048 [ 240.676534][ T7283] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 240.719063][ T7280] EXT4-fs (loop2): Test dummy encryption mode enabled [ 240.913270][ T7280] EXT4-fs error (device loop2): ext4_orphan_get:1406: inode #15: comm syz.2.789: inode has both inline data and extents flags [ 240.947204][ T7280] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.789: couldn't read orphan inode 15 (err -117) [ 240.971566][ T7280] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 241.190686][ T4799] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 241.853334][ T7301] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 243.765503][ T7313] loop0: detected capacity change from 0 to 512 [ 244.318097][ T7328] loop3: detected capacity change from 0 to 2048 [ 244.561343][ T4799] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 244.571126][ T4799] usb 2-1: can't read configurations, error -71 [ 244.632897][ T7319] loop1: detected capacity change from 0 to 32768 [ 244.648961][ T7313] EXT4-fs (loop0): Test dummy encryption mode enabled [ 244.669750][ T7313] EXT4-fs error (device loop0): ext4_orphan_get:1406: inode #15: comm syz.0.797: inode has both inline data and extents flags [ 244.700110][ T7328] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 244.720610][ T7319] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.800 (7319) [ 244.730022][ T7313] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.797: couldn't read orphan inode 15 (err -117) [ 244.745230][ T7313] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 245.528792][ T7319] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 245.578084][ T7319] BTRFS info (device loop1): setting nodatasum [ 245.606466][ T7319] BTRFS info (device loop1): force zlib compression, level 3 [ 245.756277][ T7319] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 245.785770][ T7319] BTRFS info (device loop1): use lzo compression, level 0 [ 246.360462][ T7349] overlayfs: failed to clone lowerpath [ 246.604856][ T7319] BTRFS info (device loop1): turning on flush-on-commit [ 246.666315][ T7319] BTRFS info (device loop1): enabling auto defrag [ 246.710184][ T7319] BTRFS info (device loop1): max_inline at 4096 [ 246.802331][ T7319] BTRFS info (device loop1): using free space tree [ 246.893522][ T7319] BTRFS info (device loop1): has skinny extents [ 247.695993][ T7379] loop0: detected capacity change from 0 to 2048 [ 247.739225][ T7379] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 248.020914][ T7319] BTRFS error (device loop1): open_ctree failed: -12 [ 248.029463][ T4176] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by udevd (4176) [ 248.125339][ T7392] loop3: detected capacity change from 0 to 512 [ 248.442665][ T7392] EXT4-fs (loop3): Test dummy encryption mode enabled [ 248.773766][ T7392] EXT4-fs error (device loop3): ext4_orphan_get:1406: inode #15: comm syz.3.817: inode has both inline data and extents flags [ 248.852033][ T7392] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.817: couldn't read orphan inode 15 (err -117) [ 248.897685][ T7382] loop2: detected capacity change from 0 to 32768 [ 249.032666][ T7392] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 249.166919][ T7382] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by syz.2.813 (7382) [ 251.516816][ T7382] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 251.681146][ T7382] BTRFS info (device loop2): using free space tree [ 251.688355][ T7382] BTRFS info (device loop2): has skinny extents [ 251.924451][ T7382] BTRFS error (device loop2): open_ctree failed: -12 [ 252.364270][ T7459] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 255.353358][ T1107] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 255.613339][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.619680][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.636089][ T7] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 255.744460][ T7492] IPv6: addrconf: prefix option has invalid lifetime [ 255.747577][ T7495] loop2: detected capacity change from 0 to 512 [ 255.888762][ T7495] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 255.902571][ T7495] ext4 filesystem being mounted at /136/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 255.926097][ T7495] capability: warning: `syz.2.845' uses 32-bit capabilities (legacy support in use) [ 255.936134][ T1107] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 255.955182][ T1107] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 255.972378][ T1107] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 255.985975][ T1107] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 255.995141][ T1107] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.999525][ T7501] fuse: Bad value for 'fd' [ 256.020797][ T7493] loop1: detected capacity change from 0 to 32768 [ 256.041981][ T7] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 256.052485][ T7] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 256.072784][ T7493] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by syz.1.843 (7493) [ 256.110321][ T1107] snd-usb-audio: probe of 4-1:27.0 failed with error -2 [ 256.117721][ T7] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 256.203457][ T21] usb 4-1: USB disconnect, device number 9 [ 256.228093][ T7] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 256.266529][ T7510] loop3: detected capacity change from 0 to 512 [ 256.271554][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.355104][ T7493] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 256.394832][ T7] snd-usb-audio: probe of 1-1:27.0 failed with error -2 [ 256.413826][ T7510] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 256.435945][ T7] usb 1-1: USB disconnect, device number 20 [ 256.442503][ T4176] udevd[4176]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 256.478966][ T7493] BTRFS info (device loop1): using free space tree [ 256.486196][ T7493] BTRFS info (device loop1): has skinny extents [ 256.493092][ T7510] ext4 filesystem being mounted at /157/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 257.348523][ T4498] udevd[4498]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 257.471356][ T7493] BTRFS info (device loop1): enabling ssd optimizations [ 257.514779][ T7550] IPv6: addrconf: prefix option has invalid lifetime [ 257.739840][ T7520] loop2: detected capacity change from 0 to 32768 [ 257.779786][ T7520] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.854 (7520) [ 258.341180][ T7561] overlayfs: failed to resolve './file0': -2 [ 259.148643][ T7520] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 259.231585][ T7520] BTRFS info (device loop2): setting nodatasum [ 259.260869][ T7563] fuse: Bad value for 'fd' [ 259.280547][ T7520] BTRFS info (device loop2): force zlib compression, level 3 [ 259.331395][ T7520] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 259.391067][ T7520] BTRFS info (device loop2): use lzo compression, level 0 [ 259.432123][ T7520] BTRFS info (device loop2): turning on flush-on-commit [ 259.501368][ T7520] BTRFS info (device loop2): enabling auto defrag [ 259.745079][ T7520] BTRFS info (device loop2): max_inline at 4096 [ 260.055010][ T7577] loop0: detected capacity change from 0 to 2048 [ 260.261491][ T7520] BTRFS info (device loop2): using free space tree [ 260.277738][ T7520] BTRFS info (device loop2): has skinny extents [ 260.359815][ T7577] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 262.037000][ T7520] BTRFS error (device loop2): open_ctree failed: -12 [ 262.045770][ T5110] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by udevd (5110) [ 262.194177][ T7623] loop3: detected capacity change from 0 to 512 [ 262.448111][ T7623] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 262.563516][ T7632] overlayfs: failed to resolve './file0': -2 [ 264.275607][ T7633] overlayfs: failed to clone lowerpath [ 264.289358][ T7623] ext4 filesystem being mounted at /160/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 264.694286][ T7639] loop2: detected capacity change from 0 to 2048 [ 265.111661][ T7639] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 267.175832][ T7658] loop0: detected capacity change from 0 to 512 [ 267.274509][ T7651] loop2: detected capacity change from 0 to 4096 [ 267.392278][ T7658] EXT4-fs (loop0): Test dummy encryption mode enabled [ 267.446391][ T7653] loop3: detected capacity change from 0 to 32768 [ 267.454499][ T7662] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 267.493306][ T7658] EXT4-fs error (device loop0): ext4_orphan_get:1406: inode #15: comm syz.0.885: inode has both inline data and extents flags [ 267.612168][ T7658] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.885: couldn't read orphan inode 15 (err -117) [ 267.686469][ T7658] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 267.909622][ T7653] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 267.920689][ T7653] BTRFS info (device loop3): setting nodatasum [ 267.930464][ T7653] BTRFS info (device loop3): force zlib compression, level 3 [ 267.976902][ T7653] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 268.007032][ T7653] BTRFS info (device loop3): use lzo compression, level 0 [ 268.046943][ T7653] BTRFS info (device loop3): turning on flush-on-commit [ 268.139777][ T7669] overlayfs: failed to resolve './file0': -2 [ 268.181989][ T7653] BTRFS info (device loop3): enabling auto defrag [ 269.382545][ T7653] BTRFS info (device loop3): max_inline at 4096 [ 269.388842][ T7653] BTRFS info (device loop3): using free space tree [ 270.392695][ T7653] BTRFS info (device loop3): has skinny extents [ 272.232001][ T7701] loop1: detected capacity change from 0 to 512 [ 272.305157][ T7701] EXT4-fs (loop1): Test dummy encryption mode enabled [ 272.585462][ T7701] EXT4-fs error (device loop1): ext4_orphan_get:1406: inode #15: comm syz.1.891: inode has both inline data and extents flags [ 273.142129][ T7701] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.891: couldn't read orphan inode 15 (err -117) [ 273.163028][ T7653] BTRFS error (device loop3): open_ctree failed: -12 [ 273.203863][ T7701] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 273.508974][ T4176] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by udevd (4176) [ 274.176949][ T7730] loop0: detected capacity change from 0 to 512 [ 276.387560][ T7730] EXT4-fs (loop0): Test dummy encryption mode enabled [ 277.152000][ T7736] overlayfs: failed to resolve './file0': -2 [ 278.289092][ T7730] EXT4-fs: failed to create workqueue [ 278.577667][ T7730] EXT4-fs (loop0): mount failed [ 281.032767][ T7752] loop1: detected capacity change from 0 to 32768 [ 281.199208][ T7752] JBD2: Ignoring recovery information on journal [ 281.355487][ T7752] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 281.491129][ T7752] [ 281.493501][ T7752] ====================================================== [ 281.500508][ T7752] WARNING: possible circular locking dependency detected [ 281.507531][ T7752] syzkaller #0 Not tainted [ 281.511944][ T7752] ------------------------------------------------------ [ 281.518955][ T7752] syz.1.903/7752 is trying to acquire lock: [ 281.524839][ T7752] ffff88804304d488 (&osb->system_file_mutex){+.+.}-{3:3}, at: ocfs2_get_system_file_inode+0x1a4/0x7f0 [ 281.535834][ T7752] [ 281.535834][ T7752] but task is already holding lock: [ 281.543192][ T7752] ffff88807030ea20 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_write_begin+0x193/0x310 [ 281.553730][ T7752] [ 281.553730][ T7752] which lock already depends on the new lock. [ 281.553730][ T7752] [ 281.564129][ T7752] [ 281.564129][ T7752] the existing dependency chain (in reverse order) is: [ 281.573138][ T7752] [ 281.573138][ T7752] -> #1 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}: [ 281.581917][ T7752] down_read+0x44/0x2e0 [ 281.586605][ T7752] ocfs2_read_virt_blocks+0x240/0x8e0 [ 281.592498][ T7752] ocfs2_find_entry+0x39d/0x1f90 [ 281.597957][ T7752] ocfs2_find_files_on_disk+0xdb/0x2f0 [ 281.603939][ T7752] ocfs2_lookup_ino_from_name+0x4f/0xf0 [ 281.610003][ T7752] ocfs2_get_system_file_inode+0x33f/0x7f0 [ 281.616327][ T7752] ocfs2_init_global_system_inodes+0x315/0x6e0 [ 281.623003][ T7752] ocfs2_fill_super+0x4032/0x50c0 [ 281.628551][ T7752] mount_bdev+0x28a/0x3c0 [ 281.633411][ T7752] legacy_get_tree+0xe6/0x180 [ 281.638622][ T7752] vfs_get_tree+0x88/0x270 [ 281.643651][ T7752] do_new_mount+0x247/0xa40 [ 281.648680][ T7752] __se_sys_mount+0x2e3/0x3d0 [ 281.649913][ T7760] loop0: detected capacity change from 0 to 32768 [ 281.653876][ T7752] do_syscall_64+0x4c/0xa0 [ 281.653894][ T7752] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 281.653910][ T7752] [ 281.653910][ T7752] -> #0 (&osb->system_file_mutex){+.+.}-{3:3}: [ 281.653943][ T7752] __lock_acquire+0x2c66/0x7b50 [ 281.685316][ T7752] lock_acquire+0x19e/0x400 [ 281.690345][ T7752] __mutex_lock_common+0x1e5/0x2400 [ 281.696063][ T7752] mutex_lock_nested+0x17/0x20 [ 281.701348][ T7752] ocfs2_get_system_file_inode+0x1a4/0x7f0 [ 281.707683][ T7752] ocfs2_reserve_local_alloc_bits+0xfb/0x2630 [ 281.714277][ T7752] ocfs2_reserve_clusters_with_limit+0x1b6/0xc10 [ 281.721132][ T7752] ocfs2_lock_allocators+0x2ce/0x5f0 [ 281.726945][ T7752] ocfs2_write_begin_nolock+0x1b97/0x44b0 [ 281.733190][ T7752] ocfs2_write_begin+0x1b4/0x310 [ 281.738654][ T7752] generic_perform_write+0x2b6/0x550 [ 281.744459][ T7752] __generic_file_write_iter+0x261/0x4e0 [ 281.750617][ T7752] ocfs2_file_write_iter+0x171a/0x1ee0 [ 281.756598][ T7752] vfs_write+0x748/0xd70 [ 281.761362][ T7752] ksys_write+0x153/0x260 [ 281.766214][ T7752] do_syscall_64+0x4c/0xa0 [ 281.771148][ T7752] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 281.777563][ T7752] [ 281.777563][ T7752] other info that might help us debug this: [ 281.777563][ T7752] [ 281.787787][ T7752] Possible unsafe locking scenario: [ 281.787787][ T7752] [ 281.795232][ T7752] CPU0 CPU1 [ 281.800721][ T7752] ---- ---- [ 281.806085][ T7752] lock(&ocfs2_file_ip_alloc_sem_key); [ 281.811675][ T7752] lock(&osb->system_file_mutex); [ 281.819303][ T7752] lock(&ocfs2_file_ip_alloc_sem_key); [ 281.827355][ T7752] lock(&osb->system_file_mutex); [ 281.832455][ T7752] [ 281.832455][ T7752] *** DEADLOCK *** [ 281.832455][ T7752] [ 281.840577][ T7752] 4 locks held by syz.1.903/7752: [ 281.845580][ T7752] #0: ffff88801e999270 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2bf/0x370 [ 281.854779][ T7752] #1: ffff88802b56e460 (sb_writers#19){.+.+}-{0:0}, at: vfs_write+0x296/0xd70 [ 281.863716][ T7752] #2: ffff88807030ed88 (&sb->s_type->i_mutex_key#24){+.+.}-{3:3}, at: ocfs2_file_write_iter+0x437/0x1ee0 [ 281.875006][ T7752] #3: ffff88807030ea20 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_write_begin+0x193/0x310 [ 281.885966][ T7752] [ 281.885966][ T7752] stack backtrace: [ 281.891835][ T7752] CPU: 0 PID: 7752 Comm: syz.1.903 Not tainted syzkaller #0 [ 281.899096][ T7752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 281.909146][ T7752] Call Trace: [ 281.912410][ T7752] [ 281.915327][ T7752] dump_stack_lvl+0x188/0x250 [ 281.920020][ T7752] ? load_image+0x410/0x410 [ 281.924516][ T7752] ? show_regs_print_info+0x20/0x20 [ 281.929711][ T7752] ? print_circular_bug+0x12b/0x1a0 [ 281.934894][ T7752] check_noncircular+0x296/0x330 [ 281.939842][ T7752] ? add_chain_block+0x9b0/0x9b0 [ 281.944770][ T7752] ? lockdep_lock+0xf1/0x1f0 [ 281.949357][ T7752] ? mark_lock+0x94/0x320 [ 281.953686][ T7752] ? _find_first_zero_bit+0xd1/0xf0 [ 281.958889][ T7752] __lock_acquire+0x2c66/0x7b50 [ 281.963734][ T7752] ? verify_lock_unused+0x140/0x140 [ 281.968942][ T7752] ? verify_lock_unused+0x140/0x140 [ 281.974129][ T7752] ? mark_lock+0x94/0x320 [ 281.978441][ T7752] ? __lock_acquire+0x13dc/0x7b50 [ 281.983451][ T7752] lock_acquire+0x19e/0x400 [ 281.988087][ T7752] ? ocfs2_get_system_file_inode+0x1a4/0x7f0 [ 281.994078][ T7752] ? __might_sleep+0xf0/0xf0 [ 281.998660][ T7752] ? read_lock_is_recursive+0x10/0x10 [ 282.004017][ T7752] ? rcu_is_watching+0x11/0xa0 [ 282.008765][ T7752] ? 0xffffffffa002c000 [ 282.012904][ T7752] ? lock_release+0xb5/0x8a0 [ 282.017652][ T7752] __mutex_lock_common+0x1e5/0x2400 [ 282.022842][ T7752] ? ocfs2_get_system_file_inode+0x1a4/0x7f0 [ 282.028836][ T7752] ? ocfs2_get_system_file_inode+0x1a4/0x7f0 [ 282.034809][ T7752] ? ocfs2_get_system_file_inode+0x14c/0x7f0 [ 282.040774][ T7752] ? mutex_lock_io_nested+0x60/0x60 [ 282.045959][ T7752] ? __rwlock_init+0x140/0x140 [ 282.050708][ T7752] ? do_raw_spin_unlock+0x11d/0x230 [ 282.055888][ T7752] mutex_lock_nested+0x17/0x20 [ 282.060635][ T7752] ocfs2_get_system_file_inode+0x1a4/0x7f0 [ 282.066459][ T7752] ? stack_trace_snprint+0xe0/0xe0 [ 282.071560][ T7752] ? ocfs2_fast_symlink_readpage+0x3f0/0x3f0 [ 282.077525][ T7752] ? lockdep_unlock+0x143/0x2e0 [ 282.082378][ T7752] ? lockdep_lock+0x1f0/0x1f0 [ 282.087038][ T7752] ? add_lock_to_list+0x18d/0x280 [ 282.092066][ T7752] ? __lock_acquire+0x2844/0x7b50 [ 282.097075][ T7752] ocfs2_reserve_local_alloc_bits+0xfb/0x2630 [ 282.103128][ T7752] ? verify_lock_unused+0x140/0x140 [ 282.108309][ T7752] ? ocfs2_complete_local_alloc_recovery+0x580/0x580 [ 282.114969][ T7752] ? ocfs2_reserve_clusters_with_limit+0xda/0xc10 [ 282.121374][ T7752] ? ocfs2_lock_allocators+0x2ce/0x5f0 [ 282.126838][ T7752] ? ocfs2_write_begin_nolock+0x1b97/0x44b0 [ 282.132726][ T7752] ? ocfs2_write_begin+0x1b4/0x310 [ 282.137825][ T7752] ? generic_perform_write+0x2b6/0x550 [ 282.143274][ T7752] ? ocfs2_file_write_iter+0x171a/0x1ee0 [ 282.148913][ T7752] ? vfs_write+0x748/0xd70 [ 282.153312][ T7752] ? ksys_write+0x153/0x260 [ 282.157796][ T7752] ? do_syscall_64+0x4c/0xa0 [ 282.162370][ T7752] ? ocfs2_alloc_should_use_local+0x13a/0x2d0 [ 282.168425][ T7752] ? __lock_acquire+0x7b50/0x7b50 [ 282.173472][ T7752] ? do_raw_spin_lock+0x128/0x2f0 [ 282.178483][ T7752] ? __rwlock_init+0x140/0x140 [ 282.183235][ T7752] ? do_raw_spin_unlock+0x11d/0x230 [ 282.188449][ T7752] ? _raw_spin_unlock+0x24/0x40 [ 282.193286][ T7752] ? ocfs2_alloc_should_use_local+0x13a/0x2d0 [ 282.199342][ T7752] ? ocfs2_reserve_clusters_with_limit+0x15d/0xc10 [ 282.205832][ T7752] ocfs2_reserve_clusters_with_limit+0x1b6/0xc10 [ 282.212158][ T7752] ? ocfs2_reserve_clusters+0x30/0x30 [ 282.217533][ T7752] ? ocfs2_get_clusters+0xa30/0xa30 [ 282.222717][ T7752] ? rcu_is_watching+0x11/0xa0 [ 282.227466][ T7752] ? ocfs2_num_free_extents+0x2eb/0x5b0 [ 282.233004][ T7752] ? ocfs2_validate_extent_block+0x570/0x570 [ 282.238988][ T7752] ocfs2_lock_allocators+0x2ce/0x5f0 [ 282.244276][ T7752] ? _ocfs2_clear_bit+0x40/0x40 [ 282.249115][ T7752] ? do_raw_spin_lock+0x128/0x2f0 [ 282.254123][ T7752] ? ocfs2_write_begin_nolock+0xf78/0x44b0 [ 282.259937][ T7752] ? rcu_is_watching+0x11/0xa0 [ 282.264685][ T7752] ? ocfs2_write_begin_nolock+0xf78/0x44b0 [ 282.270505][ T7752] ? kfree+0x4a/0x2a0 [ 282.274487][ T7752] ocfs2_write_begin_nolock+0x1b97/0x44b0 [ 282.280219][ T7752] ? ocfs2_size_fits_inline_data+0x90/0x90 [ 282.286023][ T7752] ? __lock_acquire+0x2844/0x7b50 [ 282.291035][ T7752] ? ocfs2_read_inode_block_full+0x1a0/0x1a0 [ 282.297034][ T7752] ? handle_mm_fault+0x2be3/0x4440 [ 282.302151][ T7752] ? ocfs2_allocate_extend_trans+0x5d0/0x5d0 [ 282.308120][ T7752] ? do_user_addr_fault+0x69f/0xc90 [ 282.313308][ T7752] ? rwsem_write_trylock+0x135/0x1c0 [ 282.318596][ T7752] ? clear_nonspinnable+0x60/0x60 [ 282.323603][ T7752] ? exc_page_fault+0x88/0x100 [ 282.328351][ T7752] ? lockdep_hardirqs_on+0x94/0x140 [ 282.333533][ T7752] ? exc_page_fault+0x88/0x100 [ 282.338281][ T7752] ocfs2_write_begin+0x1b4/0x310 [ 282.343206][ T7752] ? ocfs2_readahead+0x190/0x190 [ 282.348126][ T7752] ? __get_user_nocheck_1+0x6/0x10 [ 282.353241][ T7752] ? fault_in_readable+0xf6/0x150 [ 282.358253][ T7752] generic_perform_write+0x2b6/0x550 [ 282.363561][ T7752] ? atime_needs_update+0x770/0x770 [ 282.368768][ T7752] ? grab_cache_page_write_begin+0xa0/0xa0 [ 282.374561][ T7752] ? file_remove_privs+0x5d0/0x5d0 [ 282.379663][ T7752] ? __rwlock_init+0x140/0x140 [ 282.384407][ T7752] ? __up_read+0x2b4/0x6b0 [ 282.388809][ T7752] __generic_file_write_iter+0x261/0x4e0 [ 282.394424][ T7752] ? ocfs2_inode_unlock+0x11a/0x140 [ 282.399623][ T7752] ocfs2_file_write_iter+0x171a/0x1ee0 [ 282.405080][ T7752] ? verify_lock_unused+0x140/0x140 [ 282.410265][ T7752] ? ocfs2_file_read_iter+0xa80/0xa80 [ 282.415618][ T7752] ? aa_file_perm+0x38b/0xe80 [ 282.420282][ T7752] ? rcu_read_lock_any_held+0xb0/0x130 [ 282.425722][ T7752] ? rcu_read_lock_bh_held+0xf0/0xf0 [ 282.430995][ T7752] ? end_current_label_crit_section+0x14b/0x170 [ 282.437220][ T7752] ? memset+0x1e/0x40 [ 282.441218][ T7752] ? iov_iter_init+0xb4/0x170 [ 282.445892][ T7752] vfs_write+0x748/0xd70 [ 282.450130][ T7752] ? file_end_write+0x250/0x250 [ 282.454990][ T7752] ? mutex_lock_nested+0x17/0x20 [ 282.459923][ T7752] ? __fdget_pos+0x2bf/0x370 [ 282.464500][ T7752] ? ksys_write+0x70/0x260 [ 282.468899][ T7752] ksys_write+0x153/0x260 [ 282.473212][ T7752] ? __ia32_sys_read+0x80/0x80 [ 282.477958][ T7752] ? lockdep_hardirqs_on+0x94/0x140 [ 282.483142][ T7752] do_syscall_64+0x4c/0xa0 [ 282.487539][ T7752] ? clear_bhb_loop+0x30/0x80 [ 282.492199][ T7752] ? clear_bhb_loop+0x30/0x80 [ 282.496858][ T7752] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 282.502746][ T7752] RIP: 0033:0x7f59b4e37e99 [ 282.507147][ T7752] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 282.526738][ T7752] RSP: 002b:00007f59b3090028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 282.535144][ T7752] RAX: ffffffffffffffda RBX: 00007f59b50bffa0 RCX: 00007f59b4e37e99 [ 282.543103][ T7752] RDX: 000000000000fea7 RSI: 0000200000000200 RDI: 0000000000000005 [ 282.551063][ T7752] RBP: 00007f59b4ecdeaf R08: 0000000000000000 R09: 0000000000000000 [ 282.559021][ T7752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 282.566979][ T7752] R13: 00007f59b50c0038 R14: 00007f59b50bffa0 R15: 00007ffc21f1aa68 [ 282.574947][ T7752] [ 282.622102][ T4194] ocfs2: Unmounting device (7,1) on (node local) [ 283.128822][ T7760] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 283.155201][ T7760] BTRFS info (device loop0): setting nodatasum [ 283.161821][ T7760] BTRFS info (device loop0): force zlib compression, level 3 [ 283.169299][ T7760] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 283.185081][ T7760] BTRFS info (device loop0): use lzo compression, level 0 [ 283.197450][ T7760] BTRFS info (device loop0): turning on flush-on-commit [ 283.204660][ T7760] BTRFS info (device loop0): enabling auto defrag [ 283.211409][ T7760] BTRFS info (device loop0): max_inline at 4096 [ 283.217783][ T7760] BTRFS info (device loop0): using free space tree [ 283.224753][ T7760] BTRFS info (device loop0): has skinny extents [ 283.239116][ T7760] BTRFS error (device loop0): open_ctree failed: -12