last executing test programs: 4m5.778011714s ago: executing program 32 (id=52): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000e8000000000040d900008500000023000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000140)='mm_page_alloc\x00', r0}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x17, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0xfca804a0, 0xe, 0x0, &(0x7f0000000200)="0400000098d1db1ba91d3305a782", 0x0, 0x973, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5}, 0x50) 3m58.2234921s ago: executing program 33 (id=88): syz_mount_image$nilfs2(&(0x7f0000000380), &(0x7f0000000a40)='./file0\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0044159743df776a5de9392543da7d297b3dea"], 0xf, 0xa02, &(0x7f0000001ec0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000d80)='./file1\x00', 0x141042, 0x0) socket$kcm(0x10, 0x3, 0x10) socket(0x1e, 0x1, 0x0) setsockopt$MRT_DEL_VIF(0xffffffffffffffff, 0x0, 0xcb, 0x0, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) 3m40.694782072s ago: executing program 34 (id=219): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xd, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NG_TYPE={0x8}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x15}]}}}, {0x14, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x0) 3m31.683422751s ago: executing program 35 (id=276): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430c1", 0x10) sendmmsg$alg(r1, &(0x7f0000001bc0)=[{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000063c0)="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", 0x1000}, {&(0x7f0000000540)="43735ec930d2be89360d0f25af1ee4a5d0fa2d07", 0x14}], 0x2, &(0x7f0000000840)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x81}], 0x1, 0x20041000) recvmsg(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000bc0)=""/4088, 0xff8}, {&(0x7f00000000c0)=""/28, 0x1c}], 0x2}, 0x0) 3m11.196443697s ago: executing program 36 (id=468): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xd01c4813, &(0x7f00000000c0)={0x2, 0x100, 0x0, 0x2, 0xfffffffd, 0x2}) 2m37.498508128s ago: executing program 37 (id=742): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000640)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x15, 0x10, 0x0, 0x0, 0x0, {[@mptcp=@capable={0x1e, 0xc}, @mptcp=@syn={0x1e, 0xc}, @sack={0x5, 0x16, [0x0, 0x0, 0x0, 0x0, 0x0]}, @md5sig={0x13, 0x12, "a4bcbcee95c6179191d2675112a6689b"}]}}}}}}}, 0x0) 2m35.049867686s ago: executing program 8 (id=754): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000006c0)=0xa) 2m34.371143846s ago: executing program 8 (id=756): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000280)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x44d, &(0x7f0000000900)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000d80)='./file1\x00', 0x143042, 0x0) pwrite64(r1, &(0x7f00000000c0)='#', 0x1, 0x709d) truncate(&(0x7f0000000000)='./file1\x00', 0x100003) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x5, 0x100000001, 0x6}) 2m33.980948832s ago: executing program 8 (id=761): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x3004000, &(0x7f00000001c0)={[{@errors_remount}, {@resuid}, {@block_validity}, {@min_batch_time={'min_batch_time', 0x3d, 0x7}}, {@nobarrier}, {@noblock_validity}, {@dioread_nolock}]}, 0x1, 0x790, &(0x7f0000001740)="$eJzs3c9rHFUcAPDvTHaT/k4qClZRAx5aEPPLgj9QaMGjiKCevDQkaSnd/qCJYEOEFrEnjwXBiwiCF2+KF0FKT4p46UX6H0ilSBBaxUNkprPJttlNds1upnU/H5jkvXm7+95k+c6bHy/zAuhbo9mPNOJARFxMIoaL9UlEVPNUJeLI3dfdWV6a+Wt5aSaJlZW3/0jy19xeXpqJhvdkdhdv2xER168l8cjA+nrnLyyemq7V5s4X+fGF0+fG5y8sPn/y9PSJuRNzZ6ampl6eOjz54sRU17b1o6d+/uafy29+/Om+G1d+v/7dviSOxJ6irHE7umU0Rlf/Jo0qEfF6tysryUCxPWnDuqRSYoPoSNrwHT4ewzEQa1/ecFz7ttTGAQA9sZItAECfSfT/ANBn6tcBbi8vzdSXcq9IANvl1tHIb9RncX+nWO6WVOJI/ntHPg5g159JNN7WTepjB7Yo+4yv36t+ni3Ro/vwQHMXL+U3/pv0/0ke/yP5KJ718T8QUewftub+fYj4h+2zlfh/qwv1i38AAAAAAADonqtHI+KlZvf/0tXxP9Hk/t9QREx0of7N7/+lN7tQDdDEraMRrxbP9rl3/N/qE11GBorc3oh4LKrJ8ZO1uSz290XEoagOZfnJ5h+f7zLevTz5Q6v6G8f/ZUtWf30sYNGOm5Whe98zO70wvdXtBiJuXYp4otIs/pPV/j9pMf73WJt1fL/01dOtyjaPf6BXVr6IONi0/197cl2y8fP5xvPjgfH6UcF6i8de+7BV/W3F/9q/KQFdlPX/uzaO/5Gk8Xmd853X8cntic9alf3X4//B5J38qaKDxboPphcWzk9GDCZvrF/fvUeIwkOtHg/1eMni/9Czzc//Nzr+r0bEuTbr/PLH6q+tykbzSHX8D2XI4n+2o/6/88TfvzzZclfRXv9/OO/TDxVrXP+DjbUboGW3EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuimNiD2RpGOr6TQdG4vYHRGPxq60dnZ+4bnjZ98/M5uVRYxENT1+sjY3ERHDd/NJlp/M02v5qfvyL0TE/oi4MrQzz4/NnK3Nlr3xAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFDY3WL+/8xvQ2W3DgDomR1lNwAA2Hb6fwDoP/p/AOg/Hff/P+3tTUMAgG3j/B8A+o/+HwAAAAAAAAAAAAAAAAAAAAAAAAB6av8zV28kEXHxlZ35khksyqqltgzotbTsBgClGSi7AUBpKu28KElWzwmA/w/n+ECySXnrKUJcQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoH8cPNDu/P9tzRQKPETM3gf9y/z/0L8c1UP/Mv8/YP5/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADY3PyFxVPTtdrceYluJyoPRjMehMRQRDwAzZDoIFH2ngkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIfBvwEAAP//snoPXw==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) chdir(&(0x7f0000000080)='./file0\x00') r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x1fc) getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) 2m33.416628131s ago: executing program 8 (id=763): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3000010, &(0x7f0000000000), 0x3e, 0x51b, &(0x7f0000000100)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x185641, 0x0) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x84902, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r1, 0x0) write$FUSE_ATTR(r0, &(0x7f0000000440)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0xffffffffff7ffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6288f669, 0x0, 0xc000}}}, 0x78) 2m31.444139431s ago: executing program 8 (id=767): io_setup(0x2278, &(0x7f0000000180)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) io_submit(r0, 0x2, &(0x7f0000000140)=[&(0x7f00000000c0)={0x0, 0x4, 0x0, 0x0, 0x0, r2, &(0x7f0000000100)="7f", 0x1, 0x0, 0x0, 0x2}, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x3, 0x0, r1, 0x0, 0x0, 0x2}]) syz_clone3(&(0x7f0000000280)={0x68080000, 0x0, 0x0, 0x0, {0x1d}, 0x0, 0x0, 0x0, 0x0}, 0x58) 2m28.343940479s ago: executing program 8 (id=773): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4, 0x0, 0xfffd}}, 0x26) syz_emit_ethernet(0xbe, &(0x7f0000000240)={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x1, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x1, "97f8bc2d8540e77b362edca09de5ecce12e762877e8995026de93cb0c9b6d0d1", "5865f9321253bcade6c699fe9effe3cb1b034801e215428b41e8ff2a99d4d5a969ffa4113c803009c80af47e30f1dc19", "82796fec32a4ed8a185cb1ac1cff2e2b1b88b2ff5eea9e6fe02d8654", {"052f4d39596ed6d6cf91bd5cc9cb5ea5", "b59dbd234115903901fc17bd881ea35d"}}}}}}}, 0x0) 2m28.058432964s ago: executing program 38 (id=773): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4, 0x0, 0xfffd}}, 0x26) syz_emit_ethernet(0xbe, &(0x7f0000000240)={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x1, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x1, "97f8bc2d8540e77b362edca09de5ecce12e762877e8995026de93cb0c9b6d0d1", "5865f9321253bcade6c699fe9effe3cb1b034801e215428b41e8ff2a99d4d5a969ffa4113c803009c80af47e30f1dc19", "82796fec32a4ed8a185cb1ac1cff2e2b1b88b2ff5eea9e6fe02d8654", {"052f4d39596ed6d6cf91bd5cc9cb5ea5", "b59dbd234115903901fc17bd881ea35d"}}}}}}}, 0x0) 1m47.345558053s ago: executing program 3 (id=951): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0xb00, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f00000003c0)=0xc26080b) 1m46.22930962s ago: executing program 3 (id=958): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) removexattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)=@random={'trusted.', '%^[{\x00'}) umount2(&(0x7f0000000000)='./file0\x00', 0x2) close(r0) 1m46.019231003s ago: executing program 3 (id=960): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) setsockopt$inet6_mreq(r0, 0x29, 0x1d, &(0x7f0000000200)={@empty}, 0x14) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) syz_emit_ethernet(0x6e, &(0x7f00000002c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00318e", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x1, 0x0, 0x0, '\x00', {0x0, 0x6, "000006", 0xda34, 0x3a, 0x0, @mcast1, @empty, [], "3a6cbb0a0d000000"}}}}}}}, 0x0) 1m45.901989075s ago: executing program 3 (id=964): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000200)={[{@max_batch_time={'max_batch_time', 0x3d, 0x358}}, {@resuid}, {@dax_inode}]}, 0x3, 0x44b, &(0x7f00000004c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x80, 0x0) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 1m45.690201418s ago: executing program 3 (id=966): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="0100000000000000c501"]) sendto(0xffffffffffffffff, &(0x7f0000000040)="d7", 0x1, 0x40000, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_GET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)) 1m45.222966285s ago: executing program 3 (id=972): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000cc0)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x4, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x70, 0x87, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x3, 0x0, 0x800000}, 0x4, 0x6e6bb8, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x8004) shutdown(0xffffffffffffffff, 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000d80)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x60, 0x30, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) 1m44.9333959s ago: executing program 39 (id=972): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000cc0)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x4, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x70, 0x87, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x3, 0x0, 0x800000}, 0x4, 0x6e6bb8, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x8004) shutdown(0xffffffffffffffff, 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000d80)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x60, 0x30, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) 1m27.664361867s ago: executing program 1 (id=1104): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00U\x00=\t\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="20000280", @ANYRES32=r0, @ANYBLOB="0000000000000000000000000a000000000000000000001420000100", @ANYRES32=r2], 0x58}}, 0x0) 1m27.45894439s ago: executing program 1 (id=1109): syz_mount_image$xfs(&(0x7f0000000140), &(0x7f0000000040)='./file1\x00', 0x884, &(0x7f0000000000)={[{@logbsize={'logbsize', 0x3d, [0x36, 0x34, 0x4b]}}, {@quota}, {@allocsize={'allocsize', 0x3d, [0x39, 0x34, 0x6d]}}]}, 0x1, 0x98d1, &(0x7f0000000a00)="$eJzs3QeYJHWhaPHZZckZEwZkyZjIGZWkIIKABElKkCxRQAkGQAQBUXIQFAFFkgiSRBREcs4555xz5n3L7uq6Hrj63n0XL+ec75vt7urqmur/r6pmmhq6V1p0uYUHBiYZGN7Iy793+IsfP3arFxfe+fhrj3phsSOXOHbE5LGGXwwZOuJyqhGXUw8MDAwasZxBw6cNHnLyKYMHxhkYGDzqcicYd/xBEwwMrD3i5oIjLucefjHhVSPne2O0eEWHrcag3YZ/Df+mAwMD4w678tTAzCuOupwR6zXLPz1RaSsttNiif7f6m9uw8Rsy4vqoX2MN/5rwkoGBCS8e4O1j0Dv7jN78/pPse97Kq7zD6/G/opUWWmzx0fyH7YtjjJg297B9fPR90Njo2/nQuW8beQwahAfO/yWttNCiSw689XF+YLXXD9nijTePm4PHGxgYPP7AwOAJBgYGTzgwMHiigYHBE7/TLvX/1ju68VVVVdU70kILz77wsNd7o/0+MM7I32vp98JVX1v6toGBgTGHzzN4rpGvBauqqqqqqqrqP7OFFp59EXj9P8nbvf4/6fSXZ+z1f1VVVVVVVdX/nhZfaOHZh72OH+31/+Rv9/p/+/ue32jE3/7PPfxRr7+zT6Kqqqqqqqqq3rZlv/Tm6//xR3v9P/TtXv8/OP+u94+Yb+R/N3htlEUOGuXvCV4ZZfoYo8z/8ijTh4wyfdT5xxoYGDxkxPRX/z558HjD7vvn+QdPMmy9R0x/aZTps/z9/28eMu0o02cdZfr0o0yfbcS6Dps+wyjT5xxl/hn/lbGtqqqqqqqqqqqqqqqqqqr6n+r1x04/8+/v+f7RgVHev/1v7+M+4u8CBp1w1pVXvmMr+p/RoH/+e4jt3+l1+n9tmPM4xwwdGNhkhXd6Veod6J3+vIZ6Z8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/MW9xfn/v73//xRHrj3y/5mf+/A9ppxo1MduMMr1cf5H1/od6916/n9gg0EDAyN8JxnmutRCyy4/48DAwERT7nH4HAN/u2+eYffNP9kYI94gYfjbIEw3hBe8/YhPRd9+xKwjlnHCm8tf/I3Dxhg02kqM0qSnHnHE+iu9MMfol9O/9fMYPPLK+y7aepGR72UxeLSZ3mo7Hbn8kc9ldOcR6z7jsHWfecuNN5t5i222/dQGG6+53jrrrbPJvHPPPc+cc88172wzr7vBRuvMMvzftxqzoW/+O82/MmaTjz5mjy006piN/tzeasyGvv2YvbnEsfdZfcORYzb6qv1XYzbN24/Z0A1GfKMhQ8ccWOPNsRk0MDBk2jEHth52Y9axBwaGTDdi3smHzfvpyQYPDOz59yc67NrYf9sGB20/bJ6VFl1u4b9/7P4/f/z+W3ye/VjDL4aMGJIhU424nHr4t5lk4O+b4uAhJ58yeNhz/4dhnmDc8QdNMDCw9oibC464nHfEvZePnO8tPmd9tBV9821Wdhv+9TePcYddOW6ZiW8YdTlvQfDf0f/Vz/9/8ppn0N8GatCIrxHzDPdaaLHF//693hyGBUe+J8ywny3DTP4fPsb+v+yf1nfoOG++ye1bre/bvC/u8OcP29f0j5wz9L/rfXH52LHkm/8O/VeOHQNvf+wY4+9X/z51ncumGP3YscRbr+I/7Bcjx2js0WZ6q2PHjAcutN2bx6a3P3YsucGIDxr6+7Fj8MDAkGlGHjuGHUimH3Ngz2E3Zht2Y4YxB44admP2N2+MO3DWsBszrbXpRmsPevNte0Ysd5Zhy11wskFvPvkrZ17o2DH2feONaUesyyyjHVhHbB9DR/35uNBkw4dt5GNpuXduOfy+6Ucsd9Z/Y7kjH0vLnWfz4ffNMGK5s4223DHeZrkjHztyfxg265v7w4yD/uEPP2H/XXS0/XfQyMP6KA8Z+TXW8K8JLxn52VCwv/xbxx3afyd5m/V9m8+1wu1t2LQdl7rs9P+uz7Wi9R3n7df3rT6H+y3Xd8Nxt176v2F9B42yvv+wnW023/BtZcYR29mc/8b2O/Kxox/Hxnzz3uEMM/4rx7EF/+k4tsMYg0db+VF6q9+B1ob5h1+f/G9Lm/foMSYeOfZjjrbc/+p3oBnf/jg2yQajPW7RQwcG0Zg/+OgR64/9X4z5mAP/+Lv6yDEf+di3G/MZ/nnMB/3TmM/z9mP+r/7eOeM0w+8f423GfPAuWyw1cszH+jfHfIZ/d8wXHBiDxnzPg4aP29sdT99qzEc+9h/HfMjA5wcGBqYdMebT/yvb+Sz/Pdv5eDD/8Ov3/W3SRVOcsfsox5hB/86YT//vjvnQv23n075539SDB8Yaa2DrNbfccvNZh/878uZsw//lY9GT9w4f57f7WfpWRiMf+3b7xbT/itHQ/x6jDw355/lHvugYeXuFs46b9P/2WDTtv2c0aNEBPhaddsHwcXu734veasxHPpZ+Dg4d5fGjv657m/ejxOc0bNoBB+5368hFjnhY70f5r/cPm+3I/8a3wegH+Xq31n//d5e/u/zd5e8uf3Fvcf7/b+///+Akyz0y4kXymHvNt95a7/T6vsO9q8//j/D9h/P/a603317DXgqOuO9tz88On+c/8vzs3MMvJrxq5Hyjnx/kFX3r87Mz7DPTsgP/M+dn/68aua/+C6/jO/67y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v8xb3F+f+Rf6M89ODX7t1+xInQMfffb63X3un1fYd7V5//H+H7D+f/X1trv/0HD/ztvrc9/z98Hsf5/6UP3veUgf/g8/8j99XO/9d/Uf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3lL+4tzv8vOPLvAOZafd3dRv49wCazLrDTO72+73Dv1vP/ff6/t47/7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3Ejzv8PjPaxjsu0XWBw/v9/d2/h/+X8MYv/svljFv/l8scs/svnj1n8V8gfs/h/JX/M4r9i/pjFf6X8MYv/yvljFv9V8scs/qvmj1n8v5o/ZvH/Wv6YxX+1/DGL/+r5Yxb/NfLHLP5r5o9Z/L+eP2bxXyt/zOK/dv6YxX+d/DGL/7r5Yxb/9fLHLP7r549Z/DfIH7P4fyN/zOK/Yf6YxX+j/DGL/8b5Yxb/TfLHLP6b5o9Z/DfLH7P4fzN/zOK/ef6YxX+L/DGL/5b5Yxb/b+WPWfy/nT9m8d8qf8ziv3X+mMV/m/yxd63/G2/8w+Rt88fetf6j7f/f+Rf9h/5/Wq3/1Cz+323/xyz+38sfs/h/P3/M4r9d/pjFf/v8MYv/DvljFv8f5I9Z/HfMH7P4/zB/zOK/U/6YxX/n/DGL/4/yxyz+u+SPWfx3zR+z+O+WP2bx/3H+mMV/9/wxi/9P8scs/j/NH7P475E/ZvHfM3/M4r9X/pjFf+/8MYv/PvljFv9988cs/vvlj1n8988fs/gfkD9m8T8wf8zi/7P8MYv/QfljFv+D88cs/j/PH7P4/yJ/zOJ/SP6Yxf+X+WMW/0Pzxyz+h+WPWfwPzx+z+P8qf8zi/+v8MYv/EfljFv/f5I9Z/I/MH7P4H5U/ZvE/On/M4n9M/pjF/9j8MYv/b/PHLP7H5Y9Z/H+XP2bxPz5/zOJ/Qv6Yxf/3+WMW/xPzxyz+J+WPWfxPzh+z+J+SP2bxPzV/zOL/h/wxi/9p+WMW/z/mj1n8T88fs/j/KX/M4v/n/DGL/xn5Yxb/M/PHLP5/yR+z+J+VP2bx/2v+mMX/7Pwxi/85+WMW/3Pzxyz+5+WPWfzPzx+z+F+QP2bxvzB/zOJ/Uf6Yxf/i/DGL/yX5Yxb/S/PHLP6X5Y9Z/C/PH7P4X5E/ZvG/Mn/M4n9V/pjF/+r8MYv/NfljFv9r88cs/tflj1n8r88fs/jfkD9m8b8xf8zif1P+mMX/5vwxi/8t+WMW/1vzxyz+t+WPWfxvzx+z+N+RP2bxvzN/zOJ/V/6Yxf/u/DGL/z35Yxb/e/PHLP735Y9Z/O/PH7P4P5A/ZvF/MH/M4v9Q/pjF/+H8MYv/I/ljFv9H88cs/o/lj1n8H88fs/g/kT9m8X8yf8zi/1T+mMX/6fwxi/8z+WMW/2fzxyz+z+WPWfyfzx+z+L+QP2bxfzF/zOL/Uv6Yxf/l/DGL/yv5Yxb/V/PHLP6v5Y9Z/F/PH7P4v5E/JvEfNJA/ZvEflD9m8R+cP2bxHyN/zOI/JH/M4j9m/pjFf6z8MYv/2PljFv9x8scs/uPmj1n8x8sfs/iPnz9m8Z8gf8ziP2H+mMV/ovwxi//E+WMW/0nyxyz+k+aPWfwnyx+z+L8nf8zi/978MYv/+/LHLP7vzx+z+H8gf8ziP3n+mMX/g/ljFv8P5Y9Z/D+cP2bx/0j+mMV/ivwxi/9H88cs/lPmj1n8h+aPWfynyh+z+E+dP2bxnyZ/zOI/bf6YxX+6/DGL//T5Yxb/GfLHLP4z5o9Z/D+WP2bx/3j+mMX/E/ljFv9P5o9Z/D+VP2bxnyl/zOI/c/6YxX+W/DGL/6z5Yxb/2fLHLP6z549Z/OfIH7P4z5k/ZvGfK3/M4j93/pjFf578MYv/vPljFv/58scs/vPnj1n8P50/ZvH/TP6Yxf+z+WMW/wXyxyz+C+aPWfwXyh+z+C+cP2bxXyR/zOL/ufwxi//n88cs/ovmj1n8F8sfs/h/IX/M4r94/pjF/4v5Yxb/JfLHLP5L5o9Z/L+UP2bxXyp/zOK/dP6YxX+Z/DGL/5fzxyz+y+aPWfyXyx+z+C+fP2bxXyF/zOL/lfwxi/+K+WMW/5Xyxyz+K+ePWfxXyR+z+K+aP2bx/2r+mMX/a/ljFv/V8sfe9H9ju+E33sX+q+ePWfb/NfLHLP5r5o9Z/L+eP2bxXyt/zOK/dv6YxX+d/DGL/7r5Yxb/9fLHLP7r549Z/DfIH7P4fyN/zOK/Yf6YxX+j/DGL/8b5Yxb/TfLHLP6b5o9Z/DfLH7P4fzN/zOK/ef6YxX+L/DGL/5b5Yxb/b+WPWfy/nT9m8d8qf8ziv3X+mMV/m/wxi/+2+WMW/+/kj1n8v5s/ZvH/Xv6Yxf/7+WMW/+3yxyz+2+ePWfx3yB+z+P8gf8ziv2P+mMX/h/ljFv+d8scs/jvnj1n8f5Q/ZvHfJX/M4r9r/pjFf7f8MYv/j/PHLP67549Z/H+SP2bx/2n+mMV/j/wxi/+e+WMW/73yxyz+e+ePWfz3yR+z+O+bP2bx3y9/zOK/f/6Yxf+A/DGL/4H5Yxb/n+WPWfwPyh+z+B+cP2bx/3n+mMX/F/ljFv9D8scs/r/MH7P4H5o/ZvE/LH/M4n94/pjF/1f5Yxb/X+ePWfyPyB+z+P8mf8zif2T+mMX/qPwxi//R+WMW/2Pyxyz+x+aPWfx/mz9m8T8uf8zi/7v8MYv/8fljFv8T8scs/r/PH7P4n5g/ZvE/KX/M4n9y/pjF/5T8MYv/qfljFv8/5I9Z/E/LH7P4/zF/zOJ/ev6Yxf9P+WMW/z/nj1n8z8gfs/ifmT9m8f9L/pjF/6z8MYv/X/PHLP5n549Z/M/JH7P4n5s/ZvE/L3/M4n9+/pjF/4L8MYv/hfljFv+L8scs/hfnj1n8L8kfs/hfmj9m8b8sf8zif3n+mMX/ivwxi/+V+WMW/6vyxyz+V+ePWfyvyR+z+F+bP2bxvy5/7F3sv/NYf5866Pr8sXex/z/s/zfkj1n8b8wfs/jflD9m8b85f8zif0v+mMX/1vwxi/9t+WMW/9vzxyz+d+SPWfzvzB+z+N+VP2bxvzt/zOJ/T/6Yxf/e/DGL/335Yxb/+/PHLP4P5I9Z/B/MH7P4P5Q/ZvF/OH/M4v9I/pjF/9H8MYv/Y/ljFv/H88cs/k/kj1n8n8wfs/g/lT9m8X86f8zi/0z+mMX/2fwxi/9z+WMW/+fzxyz+L+SPWfxfzB+z+L+UP2bxfzl/zOL/Sv6Yxf/V/DGL/2v5Yxb/1/PHLP5v5I9J/N+8mv8/Z/EflD9m8R+cP2bxHyN/zOI/JH/M4j9m/pjFf6z8MYv/2PljFv9x8scs/uPmj1n8x8sfs/iPnz9m8Z8gf8ziP2H+mMV/ovwxi//E+WMW/0nyxyz+k+aPWfwnyx+z+L8nf8zi/978MYv/+/LHLP7vzx+z+H8gf8ziP3n+mMX/g/ljFv8P5Y9Z/D+cP2bx/0j+mMV/ivwxi/9H88cs/lPmj1n8h+aPWfynyh+z+E+dP2bxnyZ/zOI/bf6YxX+6/DGL//T5Yxb/GfLHLP4z5o9Z/D+WP2bx/3j+mMX/E/ljFv9P5o9Z/D+VP2bxnyl/zOI/c/6YxX+W/DGL/6z5Yxb/2fLHLP6z549Z/OfIH7P4z5k/ZvGfK3/M4j93/pjFf578MYv/vPljFv/58scs/vPnj1n8P50/ZvH/TP6Yxf+z+WMW/wXyxyz+C+aPWfwXyh+z+C+cP2bxXyR/zOL/ufwxi//n88cs/ovmj1n8F8sfs/h/IX/M4r94/pjF/4v5Yxb/JfLHLP5L5o9Z/L+UP2bxXyp/zOK/dP6YxX+Z/DGL/5fzxyz+y+aPWfyXyx+z+C+fP2bxXyF/zOL/lfwxi/+K+WMW/5Xyxyz+K+ePWfxXyR+z+K+aP2bx/2r+mMX/a/ljFv/V8scs/qvnj1n818gfs/ivmT9m8f96/pjFf638MYv/2vljFv918scs/uvmj1n818sfs/ivnz9m8d8gf8zi/438MYv/hvljFv+N8scs/hvnj1n8N8kfs/hvmj9m8d8sf8zi/838MYv/5vljFv8t8scs/lvmj1n8v5U/ZvH/dv6YxX+r/DGL/9b5Yxb/bfLHLP7b5o9Z/L+TP2bx/27+mMX/e/ljFv/v549Z/LfLH7P4b58/ZvHfIX/M4v+D/DGL/475Yxb/H+aPWfx3yh+z+O+cP2bx/1H+mMV/l/wxi/+u+WMW/93yxyz+P84fs/jvnj9m8f9J/pjF/6f5Yxb/PfLHLP575o9Z/PfKH7P4750/ZvHfJ3/M4r9v/pjFf7/8MYv//vljFv8D8scs/gfmj1n8f5Y/ZvE/KH/M4n9w/pjF/+f5Yxb/X+SPWfwPyR+z+P8yf8zif2j+mMX/sPwxi//h+WMW/1/lj1n8f50/ZvE/In/M4v+b/DGL/5H5Yxb/o/LHLP5Ha/zH+Lfmtvgfo/H/97L4H5s/ZvH/bf6Yxf+4/DGL/+/yxyz+x+ePWfxPyB+z+P8+f8zif2L+mMX/pPwxi//J+WMW/1Pyxyz+p+aPWfz/kD9m8T8tf8zi/8f8MYv/6fljFv8/5Y9Z/P+cP2bxPyN/zOJ/Zv6Yxf8v+WMW/7Pyxyz+f80fs/ifnT9m8T8nf8zif27+mMX/vPwxi//5+WMW/wvyxyz+F+aPWfwvyh+z+F+cP2bxvyR/zOJ/af6Yxf+y/DGL/+X5Yxb/K/LHLP5X5o9Z/K/KH7P4X50/ZvG/Jn/M4n9t/pjF/7r8MYv/9fljFv8b8scs/jfmj1n8b8ofs/jfnD9m8b8lf8zif2v+mMX/tvwxi//t+WMW/zvyxyz+d+aPWfzvyh+z+N+dP2bxvyd/zOJ/b/6Yxf++/DGL//35Yxb/B/LHLP4P5o9Z/B/KH7P4P5w/ZvF/JH/M4v9o/pjF/7H8MYv/4/ljFv8n8scs/k/mj1n8n8ofs/g/nT9m8X8mf8zi/2z+mMX/ufwxi//z+WMW/xfyxyz+L+aPWfxfyh+z+L+cP2bxfyV/zOL/av6Yxf+1/DGL/+v5Yxb/N/LHJP5jDOSPWfwH5Y9Z/Afnj1n8x8gfs/gPyR+z+I+ZP2bxHyt/zOI/dv6YxX+c/DGL/7j5Yxb/8fLHLP7j549Z/CfIH7P4T5g/ZvGfKH/M4j9x/pjFf5L8MYv/pPljFv/J8scs/u/JH7P4vzd/zOL/vvwxi//788cs/h/IH7P4T54/ZvH/YP6Yxf9D+WMW/w/nj1n8P5I/ZvGfIn/M4v/R/DGL/5T5Yxb/ofljFv+p8scs/lPnj1n8p8kfs/hPmz9m8Z8uf8ziP33+mMV/hvwxi/+M+WMW/4/lj1n8P54/ZvH/RP6Yxf+T+WMW/0/lj1n8Z8ofs/jPnD9m8Z8lf8ziP2v+mMV/tvwxi//s+WMW/znyxyz+c+aPWfznyh+z+M+dP2bxnyd/zOI/b/6YxX++/DGL//z5Yxb/T+ePWfw/kz9m8f9s/pjFf4H8MYv/gvljFv+F8scs/gvnj1n8F5H53/Yvzmfx/5zM/1/N4v/5/DGL/6L5Yxb/xfLHLP5fyB+z+C+eP2bx/2L+mMV/ifwxi/+S+WMW/y/lj1n8l8ofs/gvnT9m8V8mf8zi/+X8MYv/svljFv/l8scs/svnj1n8V8gfs/h/JX/M4r9i/pjFf6X8MYv/yvljFv9V8scs/qvmj1n8v5o/ZvH/Wv6YxX+1/DGL/+r5Yxb/NfLHLP5r5o9Z/L+eP2bxXyt/zOK/dv6YxX+d/DGL/7r5Yxb/9fLHLP7r549Z/DfIH7P4fyN/zOK/Yf6YxX+j/DGL/8b5Yxb/TfLHLP6b5o9Z/DfLH7P4fzN/zOK/ef6YxX+L/DGL/5b5Yxb/b+WPWfy/nT9m8d8qf8ziv3X+mMV/m/wxi/+2+WMW/+/kj1n8v5s/ZvH/Xv6Yxf/7+WMW/+3yxyz+2+ePWfx3yB+z+P8gf8ziv2P+mMX/h/ljFv+d8scs/jvnj1n8f5Q/ZvHfJX/M4r9r/pjFf7f8MYv/j/PHLP67549Z/H+SP2bx/2n+mMV/j/wxi/+e+WMW/73yxyz+e+ePWfz3yR+z+O+bP2bx3y9/zOK/f/6Yxf+A/DGL/4H5Yxb/n+WPWfwPyh+z+B+cP2bx/3n+mMX/F/ljFv9D8scs/r/MH7P4H5o/ZvE/LH/M4n94/pjF/1f5Yxb/X+ePWfyPyB+z+P8mf8zif2T+mMX/qPwxi//R+WMW/2Pyxyz+x+aPWfx/mz9m8T8uf8zi/7v8MYv/8fljFv8T8scs/r/PH7P4n5g/ZvE/KX/M4n9y/pjF/5T8MYv/qfljFv8/5I9Z/E/LH7P4/zF/zOJ/ev6Yxf9P+WMW/z/nj1n8z8gfs/ifmT9m8f9L/pjF/6z8MYv/X/PHLP5n549Z/M/JH7P4n5s/ZvE/L3/M4n9+/pjF/4L8MYv/hfljFv+L8scs/hfnj1n8L8kfs/hfmj9m8b8sf8zif3n+mMX/ivwxi/+V+WMW/6vyxyz+V+ePWfyvyR+z+F+bP2bxvy5/zOJ/ff6Yxf+G/DGL/435Yxb/m/LHLP43549Z/G/JH7P435o/ZvG/LX/M4n97/pjF/478MYv/nfljFv+78scs/nfnj1n878kfs/jfmz9m8b8vf8zif3/+mMX/gfwxi/+D+WMW/4fyxyz+D+ePWfwfyR+z+D+aP2bxfyx/zOL/eP6Yxf+J/DGL/5P5Yxb/p/LHLP5P549Z/J/JH7P4P5s/ZvF/Ln/M4v98/pjF/4X8MYv/i/ljFv+X8scs/i/nj1n8X8kfs/i/mj9m8X8tf8zi/3r+mMX/jfwxif+Qgfwxi/+g/DGL/+D8MYv/GPljFv8h+WMW/zHzxyz+Y+WPWfzHzh+z+I+TP2bxHzd/zOI/Xv6YxX/8/DGL/wT5Yxb/CfPHLP4T5Y9Z/CfOH7P4T5I/ZvGfNH/M4j9Z/pjF/z35Yxb/9+aPWfzflz9m8X9//pjF/wP5Yxb/yfPHLP4fzB+z+H8of8zi/+H8MYv/R/LHLP5T5I9Z/D+aP2bxnzJ/zOI/NH/M4j9V/pjFf+r8MYv/NPljFv9p88cs/tPlj1n8p88fs/jPkD9m8Z8xf8zi/7H8MYv/x/PHLP6fyB+z+H8yf8zi/6n8MYv/TPljFv+Z88cs/rPkj1n8Z80fs/jPlj9m8Z89f8ziP0f+mMV/zvwxi/9c+WMW/7nzxyz+8+SPWfznzR+z+M+XP2bxnz9/zOL/6fwxi/9n9P6X4lSL/2f1/pzFf4H8MYv/gvljFv+F8scs/gvnj1n8F8kfs/h/Ln/M4v/5/DGL/6L5Yxb/xfLHLP5fyB+z+C+eP2bx/2L+mMV/ifwxi/+S+WMW/y/lj1n8l8ofs/gvnT9m8V8mf8zi/+X8MYv/svljFv/l8scs/svnj1n8V8gfs/h/JX/M4r9i/pjFf6X8MYv/yvljFv9V8scs/qvmj1n8v5o/ZvH/Wv6YxX+1/DGL/+r5Yxb/NfLHLP5r5o9Z/L+eP2bxXyt/zOK/dv6YxX+d/DGL/7r5Yxb/9fLHLP7r549Z/DfIH7P4fyN/zOK/Yf6YxX+j/DGL/8b5Yxb/TfLHLP6b5o9Z/DfLH7P4f1Pj/+89S4v/5hr/fy+L/xb5Yxb/LfPHLP7fyh+z+H87f8ziv1X+mMV/6/wxi/82+WMW/23zxyz+38kfs/h/N3/M4v+9/DGL//fzxyz+2+WPWfy3zx+z+O+QP2bx/0H+mMV/x/wxi/8P88cs/jvlj1n8d84fs/j/KH/M4r9L/pjFf9f8MYv/bvljFv8f549Z/HfPH7P4/yR/zOL/0/wxi/8e+WMW/z3zxyz+e+WPWfz3zh+z+O+TP2bx3zd/zOK/X/6YxX///DGL/wH5Yxb/A/PHLP4/yx+z+B+UP2bxPzh/zOL/8/wxi/8v8scs/ofkj1n8f5k/ZvE/NH/M4n9Y/pjF//D8MYv/r/LHLP6/zh+z+B+RP2bx/03+mMX/yPwxi/9R+WMW/6P/K/8x/z+v139oFv9j2v8xi/+x+WMW/9++hf/Y/1Pr9R+axf+49n/M4v+7/DGL//H5Yxb/E/LHLP6/zx+z+J+YP2bxPyl/zOJ/cv6Yxf+U/DGL/6n5Yxb/P+SPWfxPyx+z+P8xf8zif3r+mMX/T/ljFv8/549Z/M/IH7P4n5k/ZvH/S/6Yxf+s/DGL/1/zxyz+Z+ePWfzPyR+z+J+bP2bxPy9/zOJ/fv6Yxf+C/DGL/4X5Yxb/i/LHLP4X549Z/C/JH7P4X5o/ZvG/LH/M4n95/pjF/4r8MYv/lfljFv+r8scs/lfnj1n8r8kfs/hfmz9m8b8uf8zif33+mMX/hvwxi/+N+WMW/5vyxyz+N+ePWfxvyR+z+N+aP2bxvy1/zOJ/e/6Yxf+O/DGL/535Yxb/u/LHLP53549Z/O/JH7P435s/ZvG/L3/M4n9//pjF/4H8MYv/g/ljFv+H8scs/g/nj1n8H8kfs/g/mj9m8X8sf8zi/3j+mMX/ifwxi/+T+WMW/6fyxyz+T+ePWfyfyR+z+D+bP2bxfy5/zOL/fP6Yxf+F/DGL/4v5Yxb/l/LHLP4v549Z/F/JH7P4v5o/ZvF/LX/M4v96/pjF/438MYn/mAP5Yxb/QfljFv/B+WMW/zHyxyz+Q/LHLP5j5o9Z/MfKH7P4j50/ZvEfJ3/M4j9u/pjFf7z8MYv/+PljFv8J8scs/hPmj1n8J8ofs/hPnD9m8Z8kf8ziP2n+mMV/svwxi/978scs/u/NH7P4vy9/zOL//vwxi/8H8scs/pPnj1n8P5g/ZvH/UP6Yxf/D+WMW/4/kj1n8p8gfs/h/NH/M4j9l/pjFf2j+mMV/qvwxi//U+WMW/2nyxyz+0+aPWfynyx+z+E+fP2bxnyF/zOI/Y/6Yxf9j+WMW/4/nj1n8P5E/ZvH/ZP6Yxf9T+WMW/5nyxyz+M+ePWfxnyR+z+M+aP2bxny1/zOI/e/6YxX+O/DGL/5z5Yxb/ufLHLP5z549Z/OfJH7P4z5s/ZvGfL3/M4j9//pjF/9P5Yxb/z+SPWfw/mz9m8V8gf8ziv2D+mMV/ofwxi//C+WMW/0Xyxyz+n8sfs/h/Pn/M4r9o/pjFf7H8MYv/F/LHLP6L549Z/L+YP2bxXyJ/zOK/ZP6Yxf9L+WMW/6Xyxyz+S+ePWfyXyR+z+H85f8ziv2z+mMV/ufwxi//y+WMW/xXyxyz+X8kfs/ivmD9m8V8pf8ziv3L+mMV/lfwxi/+q+WMW/6/mj1n8v5Y/ZvFfLX/M4r96/pjFf438MYv/mvljFv+v549Z/NfKH7P4r50/ZvFfJ3/M4r9u/pjFf738MYv/+vljFv8N8scs/t/IH7P4b5g/ZvHfKH/M4r9x/pjFf5P8MYv/pvljFv/N8scs/t/MH7P4b54/ZvHfIn/M4r9l/pjF/1v5Yxb/b+ePWfy3yh+z+G+dP2bx3yZ/zOK/bf6Yxf87+WMW/+/mj1n8v5c/ZvH/fv6YxX+7/DGL//b5Yxb/HfLHLP4/yB+z+O+YP2bx/2H+mMV/p/wxi//O+WMW/x/lj1n8d8kfs/jvmj9m8d8tf8zi/+P8MYv/7vljFv+f5I9Z/H+aP2bx3yN/zOK/Z/6YxX+v/DGL/975Yxb/ffLHLP775o9Z/PfLH7P4758/ZvE/IH/M4n9g/pjF/2f5Yxb/g/LHLP4H549Z/H+eP2bx/0X+mMX/kPwxi/8v88cs/ofmj1n8D8sfs/gfnj9m8f9V/pjF/9f5Yxb/I/LHLP6/yR+z+B+ZP2bxPyp/zOJ/dP6Yxf+Y/DGL/7H5Yxb/3+aPWfyPyx+z+P8uf8zif3z+mMX/hPwxi//v88cs/ifmj1n8T8ofs/ifnD9m8T8lf8zif2r+mMX/D/ljFv/T8scs/n/MH7P4n54/ZvH/U/6Yxf/P+WMW/zPyxyz+Z+aPWfz/kj9m8T8rf8zi/9f8MYv/2fljFv9z8scs/ufmj1n8z8sfs/ifnz9m8b8gf8zif2H+mMX/ovwxi//F+WMW/0vyxyz+l+aPWfwvyx+z+F+eP2bxvyJ/zOJ/Zf6Yxf+q/DGL/9X5Yxb/a/LHLP7X5o9Z/K/LH7P4X58/ZvG/IX/M4n9j/pjF/6b8MYv/zfljFv9b8scs/rfmj1n8b8sfs/jfnj9m8b8jf8zif2f+mMX/rvwxi//d+WMW/3vyxyz+9+aPWfzvyx+z+N+fP2bxfyB/zOL/YP6Yxf+h/DGL/8P5Yxb/R/LHLP6P5o9Z/B/LH7P4P54/ZvF/In/M4v9k/pjF/6n8MYv/0/ljFv9n8scs/s/mj1n8n8sfs/g/nz9m8X8hf8zi/2L+mMX/pfwxi//L+WMW/1fyxyz+r+aPWfxfyx+z+L+eP2bxfyN/TOI/1kD+mMV/UP6YxX9w/pjFf4z8MYv/kPwxi/+Y+WMW/7Hyxyz+Y+ePWfzHyR+z+I+bP2bxHy9/zOI/fv6YxX+C/DGL/4T5Yxb/ifLHLP4T549Z/CfJH7P4T5o/ZvGfLH/M4v+e/DGL/3vzxyz+78sfs/i/P3/M4v+B/DGL/+T5Yxb/D+aPWfw/lD9m8f9w/pjF/yP5Yxb/KfLHLP4fzR+z+E+ZP2bxH5o/ZvGfKn/M4j91/pjFf5r8MYv/tPljFv/p8scs/tPnj1n8Z8gfs/jPmD9m8f9Y/pjF/+P5Yxb/T+SPWfw/mT9m8f9U/pjFf6b8MYv/zPljFv9Z8scs/rPmj1n8Z8sfs/jPnj9m8Z8jf8ziP2f+mMV/rvwxi//c+WMW/3nyxyz+8+aPWfznyx+z+M+fP2bx/3T+mMX/M/ljFv/P5o9Z/BfIH7P4L5g/ZvFfKH/M4r9w/pjFf5H8MYv/5/LHLP6fzx+z+C+aP2bxXyx/zOL/hfwxi//i+WMW/y/mj1n8l8gfs/gvmT9m8f9S/pjFf6n8MYv/0vljFv9l8scs/l/OH7P4L5s/ZvFfLn/M4r98/pjFf4X8MYv/V/LHLP4r5o9Z/FfKH7P4r5w/ZvFfJX/M4r9q/pjF/6v5Yxb/r+WPWfxXyx+z+K+eP2bxXyN/zOK/Zv6Yxf/r+WMW/7Xyxyz+a+ePWfzXyR+z+K+bP2bxXy9/zOK/fv6YxX+D/DGL/zfyxyz+G+aPWfw3yh+z+G+cP2bx3yR/zOK/af6YxX+z/DGL/zfzxyz+m+ePWfy3yB+z+G+ZP2bx/1b+mMX/2/ljFv+t8scs/lvnj1n8t8kfs/hvmz9m8f9O/pjF/7v5Yxb/7+WPWfy/nz9m8d8uf8ziv33+mMV/h/wxi/8P8scs/jvmj1n8f5g/ZvHfKX/M4r9z/pjF/0f5Yxb/XfLHLP675o9Z/HfLH7P4/zh/zOK/e/6Yxf8n+WMW/5/mj1n898gfs/jvmT9m8d8rf8ziv3f+mMV/n/wxi/+++WMW//3yxyz+++ePWfwPyB+z+B+YP2bx/1n+mMX/oPwxi//B+WMW/5/nj1n8f5E/ZvE/JH/M4v/L/DGL/6H5Yxb/w/LHLP6H549Z/H+VP2bx/3X+mMX/iPwxi/9v8scs/kfmj1n8j8ofs/gfnT9m8T8mf8zif2z+mMX/t/ljFv/j8scs/r/LH7P4H58/ZvE/IX/M4v/7/DGL/4n5Yxb/k/LHLP4n549Z/E/JH7P4n5o/ZvH/Q/6Yxf+0/DGL/x/zxyz+p+ePWfz/lD9m8f9z/pjF/4z8MYv/mfljFv+/5I9Z/M/KH7P4/zV/zOJ/dv6Yxf+c/DGL/7n5Yxb/8/LHLP7n549Z/C/IH7P4X5g/ZvG/KH/M4n9x/pjF/5L8MYv/pfljFv/L8scs/pfnj1n8r8gfs/hfafYf8tZ3WfyvMvu/TRb/q/PHLP7X5I9Z/K/NH7P4X5c/ZvG/Pn/M4n9D/pjF/8b8MYv/TfljFv+b88cs/rfkj1n8b80fs/jflj9m8b89f8zif0f+mMX/zvwxi/9d+WMW/7vzxyz+9+SPWfzvzR+z+N+XP2bxvz9/zOL/QP6Yxf/B/DGL/0P5Yxb/h/PHLP6P5I9Z/B/NH7P4P5Y/ZvF/PH/M4v9E/pjF/8n8MYv/U/ljFv+n88cs/s/kj1n8n80fs/g/lz9m8X8+f8zi/0L+mMX/xfwxi/9L+WMW/5fzxyz+r+SPWfxfzR+z+L+WP2bxfz1/zOL/Rv6YxH/sgfwxi/+g/DGL/+D8MYv/GPljFv8h+WMW/zHzxyz+Y+WPWfzHzh+z+I+TP2bxHzd/zOI/Xv6YxX/8/DGL/wT5Yxb/CfPHLP4T5Y9Z/CfOH7P4T5I/ZvGfNH/M4j9Z/pjF/z35Yxb/9+aPWfzflz9m8X9//pjF/wP5Yxb/yfPHLP4fzB+z+H8of8zi/+H8MYv/R/LHLP5T5I9Z/D+aP2bxnzJ/zOI/NH/M4j9V/pjFf+r8MYv/NPljFv9p88cs/tPlj1n8p88fs/jPkD9m8Z8xf8zi/7H8MYv/x/PHLP6fyB+z+H8yf8zi/6n8MYv/TPljFv+Z88cs/rPkj1n8Z80fs/jPlj9m8Z89f8ziP0f+mMV/zvwxi/9c+WMW/7nzxyz+8+SPWfznzR+z+M+XP2bxnz9/zOL/6fwxi/9n8scs/p/NH7P4L5A/ZvFfMH/M4r9Q/pjFf+H8MYv/IvljFv/P5Y9Z/D+fP2bxXzR/zOK/WP6Yxf8L+WMW/8Xzxyz+X8wfs/gvkT9m8V8yf8zi/6X8MYv/UvljFv+l88cs/svkj1n8v5w/ZvFfNn/M4r9c/pjFf/n8MYv/CvljFv+v5I9Z/FfMH7P4r5Q/ZvFfOX/M4r9K/pjFf9X8MYv/V/PHLP5fyx+z+K+WP2bxXz1/zOK/Rv6YxX/N/DGL/9fzxyz+a+WPWfzXzh+z+K+TP2bxXzd/zOK/Xv6YxX/9/DGL/wb5Yxb/b+SPWfw3zB+z+G+UP2bx3zh/zOK/Sf6YxX/T/DGL/2b5Yxb/b+aPWfw3zx+z+G+RP2bx3zJ/zOL/rfwxi/+388cs/lvlj1n8t84fs/hvkz9m8d82f8zi/538MYv/d/PHLP7fyx+z+H8/f8ziv13+mMV/+/wxi/8O+WMW/x/kj1n8d8wfs/j/MH/M4r9T/pjFf+f8sXel/6RjvXl1VP8f5Y+9K/1HXB3Vf5f8MYv/rvljFv/d8scs/j/OH7P4754/ZvH/Sf6Yxf+n+WMW/z3yxyz+e+aPWfz3yh+z+O+dP2bx3yd/zOK/b/6YxX+//DGL//75Yxb/A/LHLP4H5o9Z/H+WP2bxPyh/zOJ/cP6Yxf/n+WMW/1/kj1n8D8kfs/j/Mn/M4n9o/pjF/7D8MYv/4fljFv9f5Y9Z/H+dP2bxPyJ/zOL/m/wxi/+R+WMW/6Pyxyz+R+ePWfyPyR+z+B+bP2bx/23+mMX/uPwxi//v8scs/sfnj1n8T8gfs/j/Pn/M4n9i/pjF/6T8MYv/yfljFv9T8scs/qfmj1n8/5A/ZvE/LX/M4v/H/DGL/+n5Yxb/P+WPWfz/nD9m8T8jf8zif2b+mMX/L/ljFv+z8scs/n/NH7P4n50/ZvE/J3/M4n9u/pjF/7z8MYv/+fljFv8L8scs/hfmj1n8L8ofs/hfnD9m8b8kf8zif2n+mMX/svwxi//l+WMW/yvyxyz+V+aPWfyvyh+z+F+dP2bxvyZ/zOJ/bf6Yxf+6/DGL//X5Yxb/G/LHLP435o9Z/G/KH7P435w/ZvG/JX/M4n9r/pjF/7b8MYv/7fljFv878scs/nfmj1n878ofs/jfnT9m8b8nf8zif2/+mMX/vvwxi//9+WMW/wfyxyz+D+aPWfwfyh+z+D+cP2bxfyR/zOL/aP4jGucfbln8H8sfs/g/nj9m8X8if8zi/2T+mMX/qfwxi//T+WMW/2fyxyz+z+aPWfyfyx+z+D+fP2bxfyF/zOL/Yv6Yxf+l/DGL/8v5Yxb/V/LHLP6v5o9Z/F/LH7P4v54/ZvF/I39M4v/mH73l/89Z/Aflj1n8B+ePWfzHyB+z+A/JH7P4j5k/ZvEfK3/M4j92/pjFf5z8MYv/uPljFv/x8scs/uPnj1n8J8gfs/hPmD9m8Z8of8ziP3H+mMV/kvwxi/+k+WMW/8nyxyz+78kfs/i/N3/M4v++/DGL//vzxyz+H8gfs/hPnj9m8f9g/pjF/0P5Yxb/D+ePWfw/kj9m8Z8if8zi/9H8MYv/lPljFv+h+WMW/6nyxyz+U+ePWfynyR+z+E+bP2bxny5/zOI/ff6YxX+G/DGL/4z5Yxb/j+WPWfw/nj9m8f9E/pjF/5P5Yxb/T+WPWfxnyh+z+M+cP2bxnyV/zOI/a/6YxX+2/DGL/+z5Yxb/OfLHLP5z5o9Z/OfKH7P4z50/ZvGfJ3/M4j9v/pjFf778MYv//PljFv9P549Z/D+TP2bx/2z+mMV/gfwxi/+C+WMW/4Xyxyz+C+ePWfwXyR+z+H8uf8zi//n8MYv/ovljFv/F8scs/l/IH7P4L54/ZvH/Yv6YxX+J/DGL/5L5Yxb/L+WPWfyXyh+z+C+dP2bxXyZ/zOL/5fwxi/+y+WMW/+Xyxyz+y+ePWfxXyB+z+H8lf8ziv2L+mMV/pfwxi//K+WMW/1Xyxyz+q+aPWfy/mj9m8f9a/pjFf7X8MYv/6vljFv818scs/mvmj1n8v54/ZvFfK3/M4r92/pjFf538MYv/uvljFv/18scs/uvnj1n8N8gfs/h/I3/M4r9h/pjFf6P8MYv/xvljFv9N8scs/pvmj1n8N8sfs/h/M3/M4r95/pjFf4v8MYv/lvljFv9v5Y9Z/L+dP2bx3yp/zOK/df6YxX+b/DGL/7b5Yxb/7+SPWfy/mz9m8f9e/pjF//v5Yxb/7fLHLP7b549Z/HfIH7P4/yB/zOK/Y/6Yxf+H+WMW/53yxyz+O+ePWfx/lD9m8d8lf8ziv2v+mMV/t/wxi/+P88cs/rvnj1n8f5I/ZvH/af6YxX+P/DGL/575Yxb/vfLHLP57549Z/PfJH7P475s/ZvHfL3/M4r9//pjF/4D8MYv/gfljFv+f5Y9Z/A/KH7P4H5w/ZvH/ef6Yxf8X+WMW/0Pyxyz+v8wfs/gfmj9m8T8sf8zif3j+mMX/V/ljFv9f549Z/I/IH7P4/yZ/zOJ/ZP6Yxf+o/DGL/9H5Yxb/Y/LHLP7H5o9Z/H+bP2bxPy5/zOL/u/wxi//x+WMW/xPyxyz+v88fs/ifmD9m8T8pf8zif3L+mMX/lPwxi/+p+WMW/z/kj1n8T8sfs/j/MX/M4n96/pjF/0/5Yxb/P+ePWfzPyB+z+J+ZP2bx/0v+mMX/rPwxi/9f88cs/mfnj1n8z8kfs/ifmz9m8T8vf8zif37+mMX/gvwxi/+F+WMW/4vyxyz+F+ePWfwvyR+z+F+aP2bxvyx/zOJ/ef6Yxf+K/DGL/5X5Yxb/q/LHLP5X549Z/K/JH7P4X5s/ZvG/Ln/M4n99/pjF/4b8MYv/jfljFv+b8scs/jfnj1n8b8kfs/jfmj9m8b8tf8zif3v+mMX/jvwxi/+d+WMW/7vyxyz+d+ePWfzvyR+z+N+bP2bxvy9/zOJ/f/6Yxf+B/DGL/4P5Yxb/h/LHLP4P549Z/B/JH7P4P5o/ZvF/LH/M4v94/pjF/4n8MYv/k/+K/wtvvPH/cc3+I7P4P9X+j1n8n84fs/g/kz9m8X82f8zi/1z+mMX/+fwxi/8L+WMW/xfzxyz+L+WPWfxfzh+z+L+SP2bxfzV/zOL/Wv6Yxf/1/DGL/xv5YxL/cQfyxyz+g/LHLP6D88cs/mPkj1n8h+SPWfzHzB+z+I+VP2bxHzt/zOI/Tv6YxX/c/DGL/3j5Yxb/8fPHLP4T5I9Z/CfMH7P4T5Q/ZvGfOH/M4j9J/pjFf9L8MYv/ZPljFv/35I9Z/N+bP2bxf1/+mMX//fljFv8P5I9Z/CfPH7P4fzB/zOL/ofwxi/+H88cs/h/JH7P4T5E/ZvH/aP6YxX/K/DGL/9D8MYv/VPljFv+p88cs/tPkj1n8p80fs/hPlz9m8Z8+f8ziP0P+mMV/xvwxi//H8scs/h/PH7P4fyJ/zOL/yfwxi/+n8scs/jPlj1n8Z84fs/jPkj9m8Z81f8ziP1v+mMV/9vwxi/8c+WMW/znzxyz+c+WPWfznzh+z+M+TP2bxnzd/zOI/X/6YxX/+/DGL/6fzxyz+n8kfs/h/Nn/M4r9A/pjFf8H8MYv/QvljFv+F88cs/ovkj1n8P5c/ZvH/fP6YxX/R/DGL/2L5Yxb/L+SPWfwXzx+z+H8xf8ziv0T+mMV/yfwxi/+X8scs/kvlj1n8l84fs/gvkz9m8f9y/pjFf9n8MYv/cvljFv/l88ferf5jj+a/Qv7Yu9V/YDT/r+SPWfxXzB+z+K+UP2bxXzl/zOK/Sv6YxX/V/DGL/1fzxyz+X8sfs/ivlj9m8V89f8ziv0b+mMV/zfwxi//X88cs/mvlj1n8184fs/ivkz9m8V83f8ziv17+mMV//fwxi/8G+WMW/2/kj1n8N8wfs/hvlD9m8d84f8ziv0n+mMV/0/wxi/9m+WMW/2/mj1n8N88fs/hvkT9m8d8yf8zi/638MYv/t/PHLP5b5Y9Z/LfOH7P4b5M/ZvHfNn/M4v+d/DGL/3fzxyz+38sfs/h/P3/M4r9d/pjFf/v8MYv/DvljFv8f5I9Z/HfMH7P4/zB/zOK/U/6YxX/n/DGL/4/yxyz+u+SPWfx3zR+z+O+WP2bx/3H+mMV/9/wxi/9P8scs/j/NH7P475E/ZvHfM3/M4r9X/pjFf+/8MYv/PvljFv9988cs/vvlj1n8988fs/gfkD9m8T8wf8zi/7P8MYv/QfljFv+D88cs/j/PH7P4/yJ/zOJ/SP6Yxf+X+WMW/0Pzxyz+h+WPWfwPzx+z+P8qf8zi/+v8MYv/EfljFv/f5I9Z/I/MH7P4H5U/ZvE/On/M4n9M/pjF/9j8MYv/b/PHLP7H5Y9Z/H+XP2bxPz5/zOJ/Qv6Yxf/3+WMW/xPzxyz+J+WPWfxPzh+z+J+SP2bxPzV/zOL/h/wxi/9p+WMW/z/mj1n8T88fs/j/KX/M4v/n/DGL/xn5Yxb/M/PHLP5/yR+z+J+VP2bx/2v+mMX/7Pwxi/85+WMW/3Pzxyz+5+WPWfzPzx+z+F+QP2bxvzB/zOJ/Uf6Yxf/i/DGL/yX5Yxb/S/PHLP6X5Y9Z/C/PH7P4X5E/ZvG/Mn/M4n9V/pjF/+r8MYv/NfljFv9r88cs/tflj1n8r88fs/jfkD9m8b8xf8zif1P+mMX/5vwxi/8t+WMW/1vzxyz+t+WPWfxvzx+z+N+RP2bxvzN/zOJ/V/6Yxf/u/DGL/z35Yxb/e/PHLP735Y9Z/O/PH7P4P5A/ZvF/MH/M4v9Q/pjF/+H8MYv/I/ljFv9H88cs/o/lj1n8H88fs/g/kT9m8X8yf8zi/1T+mMX/6fwxi/8z+WMW/2fzxyz+z+WPWfyfzx+z+L+QP2bxfzF/zOL/Uv6Yxf/l/DGL/yv5Yxb/V/PHLP6v5Y9Z/F/PH7P4v5E/JvEfbyB/zOI/KH/M4j84f8ziP0b+mMV/SP6YxX/M/DGL/1j5Yxb/sfPHLP7j5I9Z/MfNH7P4j5c/ZvEfP3/M4j9B/pjFf8L8MYv/RPljFv+J88cs/pPkj1n8J80fs/hPlj9m8X9P/pjF/735Yxb/9+WPWfzfnz9m8f9A/pjFf/L8MYv/B/PHLP4fyh+z+H84f8zi/5H8MYv/FPljFv+P5o9Z/KfMH7P4D80fs/hPlT9m8Z86f8ziP03+mMV/2vwxi/90+eMAWPynzx+z+M+QP2bxnzF/zOL/sfwxi//H88cs/p/IH7P4fzJ/zOL/qfwxi/9M+WMW/5nzxyz+s+SPWfxnzR+z+M+WP2bxnz1/zOI/R/6YxX/O/DGL/1z5Y3/3f+Vd7T93/phl/58nf8ziP2/+mMV/vvwxi//8+WMW/0/nj1n8P5M/ZvH/bP6YxX+B/DGL/4L5Yxb/hfLHLP4L549Z/BfJH7P4fy5/zOL/+fwxi/+i+WMW/8XyH9EO/3DL4v+F/DGL/+L5Yxb/L+aPWfyXyB+z+C+ZP2bx/1L+mMV/qfwxi//S+WMW/2Xyxyz+X84fs/gvmz9m8V8uf8ziv3z+mMV/hfwxi/9X8scs/ivmj1n8V8ofs/ivnD9m8V8lf8ziv2r+mMX/q/ljFv+v5Y9Z/FfLH7P4r54/ZvFfI3/M4r9m/pjF/+v5Yxb/tfLHLP5r549Z/NfJH7P4r5s/ZvFfL3/M4r9+/pjFf4P8MYv/N/LHLP4b5o9Z/DfKH7P4b5w/ZvHfJH/M4r9p/pjFf7P8MYv/N/PHLP6b549Z/LfIH7P4b5k/ZvH/Vv6Yxf/b+WMW/63yxyz+W+ePWfy3yR+z+G+bP2bx/07+mMX/u/ljFv/v5Y9Z/L+fP2bx3y5/zOK/ff6YxX+H/DGL/w/yxyz+O+aPWfx/mD9m8d8pf8ziv3P+mMX/R/ljFv9d8scs/rvmj1n8d8sfs/j/OH/M4r97/pjF/yf5Yxb/n+aPWfz3yB+z+O+ZP2bx3yt/zOK/d/6YxX+f/DGL/775Yxb//fLHLP77549Z/A/IH7P4H5g/ZvH/Wf6Yxf+g/DGL/8H5Yxb/n+ePWfx/kT9m8T8kf8zi/8v8MYv/ofljFv/D8scs/ofnj1n8f5U/ZvH/df6Yxf+I/DGL/2/yxyz+R+aPWfyPyh+z+B+dP2bxPyZ/zOJ/bP6Yxf+3+WMW/+Pyxyz+v8sfs/gfnz9m8T8hf8zi//v8MYv/ifljFv+T8scs/ifnj1n8T8kfs/ifmj9m8f9D/pjF/7T8MYv/H/PHLP6n549Z/P+UP2bx/3P+mMX/jPwxi/+Z+WMW/7/kj1n8z8ofs/j/NX/M4n92/pjF/5z8MYv/ufljFv/z8scs/ufnj1n8L8gfs/hfmD9m8b8of8zif3H+mMX/kvwxi/+l+WMW/8vyxyz+l+ePWfyvyB+z+F+ZP2bxvyp/zOJ/df6Yxf+a/DGL/7X5Yxb/6/LHLP7X549Z/G/IH7P435g/ZvG/KX/M4n9z/pjF/5b8MYv/rfljFv/b8scs/rfnj1n878gfs/jfmT9m8b8rf8zif3f+mMX/nvwxi/+9+WMW//vyxyz+9+ePWfwfyB+z+D+YP2bxfyh/zOL/cP6Yxf+R/DGL/6P5Yxb/x/LHLP6P549Z/J/IH7P4P5k/ZvF/Kn/M4v90/pjF/5n8MYv/s/ljFv/n8scs/s/nj1n8X8gfs/i/mD9m8X8pf8zi/3L+mMX/lfwxi/+r+WMW/9fyxyz+r+ePWfzfyB+T+I8/kD9m8R+UP2bxH5w/ZvEfI3/M4j8kf8ziP2b+mMV/rPwxi//Y+WMW/3Hyxyz+4+aPWfzHyx+z+I+fP2bxnyB/zOI/Yf6YxX+i/DGL/8T5Yxb/SfLHLP6T5o9Z/CfLH7P4vyd/zOL/3vwxi//78scs/u/PH7P4fyB/zOI/ef6Yxf+D+WMW/w/lj1n8P5w/ZvH/SP6YxX+K/DGL/0fzxyz+U+aPWfyH5o9Z/KfKH7P4T50/ZvGfJn/M4j9t/pjFf7r8MYv/9PljFv8Z8scs/jPmj1n8P5Y/ZvH/eP6Yxf8T+WMW/0/mj1n8P5U/ZvGfKX/M4j9z/pjFf5b8MYv/rPljFv/Z8scs/rPnj1n858gfs/jPmT9m8Z8rf8ziP3f+mMV/nvwxi/+8+WMW//nyxyz+8+ePWfw/nT9m8f9M/pjF/7P5Yxb/BfLHLP4L5o9Z/BfKH7P4L5w/ZvFfJH/M4v+5/DGL/+fzxyz+i+aPWfwXyx+z+H8hf8ziv3j+mMX/i/ljFv8l8scs/kvmj1n8v5Q/ZvFfKn/M4r90/pjFf5n8MYv/l/PHLP7L5o9Z/JfLH7P4L58/ZvFfIX/M4v+V/DGL/4r5Yxb/lfLHLP4r549Z/FfJH7P4r5o/ZvH/av7DGjr6BIv/1/LHLP6r5Y9Z/FfPH7P4r5E/ZvFfM3/M4v/1/DGL/1r5Yxb/tfPHLP7r5I9Z/NfNH7P4r5c/ZvFfP3/M4r9B/pjF/xv5Yxb/DfPHLP4b5Y9Z/DfOH7P4b5I/ZvHfNH/M4r9Z/pjF/5v5Yxb/zfPHLP5b5I9Z/LfMH7P4fyt/zOL/7fwxi/9W+WMW/63zxyz+2+SPWfy3zR+z+H8nf8zi/938MYv/9/LHLP7fzx+z+G+XP2bx3z5/zOK/Q/6Yxf8H+WMW/x3zxyz+P8wfs/jvlD9m8d85f8zi/6P8MYv/LvljFv9d88cs/rvlj1n8f5w/ZvHfPX/M4v+T/DGL/0/zxyz+e+SPWfz3zB+z+O+VP2bx3zt/zOK/T/6YxX/f/DGL/375Yxb//fPHLP4H5I9Z/A/MH7P4/yx/zOJ/UP6Yxf/g/DGL/8/zxyz+v8gfs/gfkj9m8f9l/pjF/9D8MYv/YfljFv/D88cs/r/KH7P4/zp/zOJ/RP6Yxf83+WMW/yPzxyz+R+WPWfyPzh+z+B+TP2bxPzZ/zOL/2/wxi/9x+WMW/9/lj1n8j88fs/ifkD9m8f99/pjF/8T8MYv/SfljFv+T88cs/qfkj1n8T80fs/j/IX/M4n9a/pjF/4/5Yxb/0/PHLP5/yh+z+P85f8zif0b+mMX/zPwxi/9f8scs/mflj1n8/5o/ZvE/O3/M4n9O/pjF/9z8MYv/efljFv/z88cs/hfkj1n8L8wfs/hflD9m8b84f8zif0n+mMX/0vwxi/9l+WMW/8vzxyz+V+SPWfyvzB+z+F+VP2bxvzp/zOJ/Tf6Yxf/a/DGL/3X5Yxb/6/PHLP435I9Z/G/MH7P435Q/ZvG/OX/M4n9L/pjF/9b8MYv/bfljFv/b88cs/nfkj1n878wfs/jflT9m8b87f8zif0/+mMX/3vwxi/99+WMW//vzxyz+D+SPWfwfzB+z+D+UP2bxfzh/zOL/SP6Yxf/R/DGL/2P5Yxb/x/PHLP5P5I9Z/J/MH7P4P5U/ZvF/On/M4v9M/pjF/9n8MYv/c/ljFv/n88cs/i/kj1n8X8wfs/i/lD9m8X85f8zi/0r+mMX/1fwxi/9r+WMW/9fzxyz+b+SPSfwnGMgfs/gPyh+z+A/OH7P4j5E/ZvEfkj9m8R8zf8ziP1b+mMV/7Pwxi/84+WMW/3Hzxyz+4+WPWfzHzx+z+E+QP2bxnzB/zOI/Uf6YxX/i/DGL/yT5Yxb/SfPHLP6T5Y9Z/N+TP2bxf2/+mMX/ffljFv/3549Z/D+QP2bxnzx/zOL/wfwxi/+H8scs/h/OH7P4fyR/zOI/Rf6Yxf+j+WMW/ynzxyz+Q/PHLP5T5Y9Z/KfOH7P4T5M/ZvGfNn/M4j9d/pjFf/r8MYv/DPljFv8Z88cs/h/LH7P4fzx/zOL/ifyHtffoEyz+n8wfs/h/Kn/M4j9T/pjFf+b8MYv/LPljFv9Z88cs/rPlj1n8Z88fs/jPkT9m8Z8zf8ziP1f+mMV/7vwxi/88+WMW/3nzxyz+8+WPWfznzx+z+H86f8zi/5n8MYv/Z/PHLP4L5I9Z/BfMH7P4L5Q/ZvFfOH/M4r9I/pjF/3P5Yxb/z+ePWfwXzR+z+C+WP2bx/0L+mMV/8fwxi/8X88cs/kvkj1n8l8wfs/h/KX/M4r9U/pjFf+n8MYv/MvljFv8v549Z/JfNH7P4L5c/ZvFfPn/M4r9C/pjF/yv5Yxb/FfPHLP4r5Y9Z/FfOH7P4r5I/ZvFfNX/M4v/V/DGL/9fyxyz+q+WPWfxXzx+z+K+RP2bxXzN/zOL/9fwxi/9a+WMW/7Xzxyz+6+SPWfzXzR8bzX/Qu9V/vfwxy/6/fv6YxX+D/DGL/zfyxyz+G+aPWfw3yh+z+G+cP2bx3yR/zOK/af6YxX+z/DGL/zfzxyz+m+ePWfy3yB+z+G+ZP2bx/1b+mMX/2/ljFv+t8scs/lvnj1n8t8kfs/hvmz9m8f9O/pjF/7v5Yxb/7+WPWfy/nz9m8d8uf8ziv33+mMV/h/wxi/8P8scs/jvmj1n8f5g/ZvHfKX/M4r9z/pjF/0f5Yxb/XfLHLP675o9Z/HfLH7P4/zh/zOK/e/6Yxf8n+WMW/5/mj1n898gfs/jvmT9m8d8rf8ziv3f+mMV/n/wxi/+++WMW//3yxyz+++ePWfwPyB+z+B+YP2bx/1n+mMX/oPwxi//B+WMW/5/nj1n8f5E/ZvE/JH/M4v/L/DGL/6H5Yxb/w/LHLP6H549Z/H+VP2bx/3X+mMX/iPwxi/9v8scs/kfmj1n8j8ofs/gfnT9m8T8mf8zif2z+mMX/t/ljFv/j8scs/r/LH7P4H58/ZvE/IX/M4v/7/DGL/4n5Yxb/k/LHLP4n549Z/E/JH7P4n5o/ZvH/Q/6Yxf+0/DGL/x/zxyz+p+ePWfz/lD9m8f9z/pjF/4z8MYv/mfljFv+/5I9Z/M/KH7P4/zV/zOJ/dv6Yxf+c/DGL/7n5Yxb/8/LHLP7n549Z/C/IH7P4X5g/ZvG/KH/M4n9x/pjF/5L8MYv/pfljFv/L8scs/pfnj1n8r8gfs/hfmT9m8b8qf8zif3X+mMX/mvwxi/+1+WMW/+vyxyz+1+ePWfxvyB+z+N+YP2bxvyl/zOJ/c/6Yxf+W/DGL/635Yxb/2/LHLP63549Z/O/IH7P435k/ZvG/K3/M4n93/pjF/578MYv/vfljFv/78scs/vfnj1n8H8gfs/g/mD9m8X8of8zi/3D+mMX/kfwxi/+j+WMW/8fyxyz+j+ePWfyfyB+z+D+ZP2bxfyp/zOL/dP6Yxf+Z/DGL/7P5Yxb/5/LHLP7P549Z/F/IH7P4v5g/ZvF/KX/M4v9y/pjF/5X8MYv/q/ljFv/X8scs/q/nj1n838gfk/hPOJA/ZvEflD9m8R+cP2bxHyN/zOI/JH/M4j9m/pjFf6z8MYv/2PljFv9x8scs/uPmj1n8x8sfs/iPnz9m8Z8gf8ziP2H+mMV/ovwxi//E+WMW/0nyxyz+k+aPWfwnyx+z+L8nf8zi/978MYv/+/LHLP7vzx+z+H8gf8ziP3n+mMX/g/ljFv8P5Y9Z/D+cP2bx/0j+mMV/ivwxi/9H88cs/lPmj1n8h+aPWfynyh+z+E+dP2bxnyZ/zOI/bf6YxX+6/DGL//T5Yxb/GfLHLP4z5o9Z/D+WP2bx/3j+mMX/E/ljFv9P5o9Z/D+VP2bxnyl/zOI/c/6YxX+W/DGL/6z5Yxb/2fLHLP6z549Z/OfIH7P4z5k/ZvGfK3/M4j93/pjFf578MYv/vPljFv/58scs/vPnj1n8P50/ZvH/TP6Yxf+z+WMW/wXyxyz+C+aPWfwXyh+z+C+cP2bxXyR/zOL/ufwxi//n88cs/ovmj1n8F8sfs/h/IX/M4r94/pjF/4v5Yxb/JfLHLP5L5o9Z/L+UP2bxXyp/zOK/dP6YxX+Z/DGL/5fzxyz+y+aPWfyXyx+z+C+fP2bxXyF/zOL/lfwxi/+K+WMW/5Xyxyz+K+ePWfxXyR+z+K+aP2bx/2r+mMX/a/ljFv/V8scs/qvnj1n818gfs/ivmT9m8f96/pjFf638MYv/2vljFv918scs/uvmj1n818sfs/ivnz9m8d8gf8zi/438MYv/hvljFv+N8scs/hvnj1n8N8kfs/hvmj9m8d8sf8zi/838MYv/5vljFv8t8scs/lvmj1n8v5U/ZvH/dv6YxX+r/DGL/9b5Yxb/bfLHLP7b5o9Z/L+TP2bx/27+mMX/e/ljFv/v549Z/LfLH7P4b58/ZvHfIX/M4v+D/DGL/475Yxb/H+aPWfx3yh+z+O+cP2bx/1H+mMV/l/wxi/+u+WMW/93yxyz+P84fs/jvnj9m8f9J/pjF/6f5Yxb/PfLHLP575o9Z/PfKH7P4750/ZvHfJ3/M4r9v/pjFf7/8MYv//vljFv8D8scs/gfmj1n8f5Y/ZvE/KH/M4n9w/pjF/+f5Yxb/X+SPWfwPyR+z+P8yf8zif2j+2LvRf9DAwPYDo/kflj/2bvSn/f/w/DGL/6/yxyz+v84fs/gfkT9m8f9N/pjF/8j8MYv/UfljFv+j88cs/sfkj1n8j80fs/j/Nn/M4n9c/pjF/3f5Yxb/4/PHLP4n5I9Z/H+fP2bxPzF/zOJ/Uv6Yxf/k/DGL/yn5Yxb/U/PHLP5/yB+z+J+WP2bx/2P+mMX/9Pwxi/+f8scs/n/OH7P4n5E/ZvE/M3/M4v+X/DGL/1n5Yxb/v+aPWfzPzh+z+J+TP2bxPzd/zOJ/Xv6Yxf/8/DGL/wX5Yxb/C/PHLP4X5Y9Z/C/OH7P4X5I/ZvG/NH/M4n9Z/pjF//L8MYv/FfljFv8r88cs/lflj1n8r84fs/hfkz9m8b82f8zif13+mMX/+vwxi/8N+WMW/xvzxyz+N+WPWfxvzh+z+N+SP/bmmAj8b80fs+z/t+WPWfxvzx+z+N+RP2bxvzN/zOJ/V/6Yxf/u/DGL/z35Yxb/e/PHLP735Y9Z/O/PH7P4P5A/ZvF/MH/M4v9Q/pjF/+H8MYv/I/ljFv9H88cs/o/lj1n8H88fs/g/kT9m8X8yf8zi/1T+mMX/6fwxi/8z+WMW/2fzxyz+z+WPWfyfzx+z+L+QP2bxfzF/zOL/Uv6Yxf/l/DGL/yv5Yxb/V/PHLP6v5Y9Z/F/PH7P4v5E/JvGfaCB/zOI/KH/M4j84f8ziP0b+mMV/iN3/LZ68xX9Mu/9bZPEfK3/M4j92/pjFf5z8MYv/uPljFv/x8scs/uPnj1n8J8gfs/hPmD9m8Z8of8ziP3H+mMV/kvwxi/+k+WMW/8nyxyz+78kfs/i/N3/M4v++/DGL//vzxyz+H8gfs/hPnj9m8f9g/pjF/0P5Yxb/D+ePWfw/kj9m8Z8if8zi/9H8MYv/lPljFv+h+WMW/6nyxyz+U+ePWfynyR+z+E+bP2bxny5/zOI/ff6YxX+G/DGL/4z5Yxb/j+WPWfw/nj9m8f9E/pjF/5P5Yxb/T+WPWfxnyh+z+M+cP2bxnyV/zOI/a/6YxX+2/DGL/+z5Yxb/OfLHLP5z5o9Z/OfKf2Dg4bH+aZLFf+78MYv/PPljFv9588cs/vPlj1n8588fs/h/On/M4v+Z/DGL/2fzxyz+C+SPWfwXzB+z+C+UP2bxXzh/zOK/SP6Yxf9z+WMW/8/nj1n8F80fs/gvlj9m8f9C/pjFf/H8MYv/F/PHLP5L5I9Z/JfMH7P4fyl/zOK/VP6YxX/p/DGL/zL5Yxb/L+ePWfyXzR+z+C+XP2bxXz5/zOK/Qv6Yxf8r+WMW/xXzxyz+K+WPWfxXzh+z+K+SP2bxXzV/zOL/1fwxi//X8scs/qvlj1n8V88fs/ivkT9m8V8zf8zi/3WT/wL/+qwW/7VM/v9GFv+188cs/uvkj1n8180fs/ivlz9m8V8/f8ziv0H+mMX/G/ljFv8N88cs/hvlj1n8N84fs/hvkj9m8d80f8ziv1n+mMX/m/ljFv/N88cs/lvkj1n8t8wfs/h/K3/M4v/t/DGL/1b5Yxb/rfPHLP7b5I9Z/LfNH7P4fyd/zOL/3fwxi//38scs/t/PH7P4b5c/ZvHfPn/M4r9D/pjF/wf5Yxb/HfPHLP4/zB+z+O+UP2bx3zl/zOL/o/wxi/8u+WMW/13zxyz+u+WPWfx/nD9m8d89f8zi/5P8MYv/T/PHLP575I9Z/PfMH7P475U/ZvHfO3/M4r9P/pjFf9/8MYv/fvljFv/988cs/gfkj1n8D8wfs/j/LH/M4n9Q/pjF/+D8MYv/z/PHLP6/yB+z+B+SP2bx/2X+mMX/0Pwxi/9h+WMW/8Pzxyz+v8ofs/j/On/M4n9E/pjF/zf5Yxb/I/PHLP5H5Y+N5n/iu9X/6Pwxy/5/TP6Yxf/Y/DGL/2/zxyz+x+WPWfx/lz9m8T8+f8zif0L+mMX/9/ljFv8T88cs/iflj1n8T84fs/ifkj9m8T81f8zi/4f8MYv/afljFv8/5o9Z/E/PH7P4/yl/zOL/5/yxQYePrfA/I3/Msv+fmT9m8f9L/pjF/6z8MYv/X/PHLP5n549Z/M/JH7P4n5s/ZvE/L3/M4n9+/pjF/4L8MYv/hfljFv+L8scs/hfnj1n8L8kfs/hfmj9m8b8sf8zif3n+mMX/ivwxi/+V+WMW/6vyxyz+V+ePWfyvyR+z+F+bP2bxvy5/zOJ/ff6Yxf+G/DGL/435Yxb/m/LHLP43549Z/G/JH7P435o/ZvG/LX/M4n97/pjF/478MYv/nfljFv+78scs/nfnj1n878kfs/jfmz9m8b8vf8zif3/+mMX/gfwxi/+D+WMW/4fyxyz+D+ePWfwfyR+z+D+aP2bxfyx/zOL/eP6Yxf+J/DGL/5P5Yxb/p/LHLP5P549Z/J/JH7P4P5s/ZvF/Ln/M4v98/pjF/4X8MYv/i/ljFv+X8scs/i/nj1n8X8kfs/i/mj9m8X/tbfwHibcMi//r7f+Yxf+N/DGJ/8QD+WMW/0H5/x927j7c67q+4/iXw+cAooLO1ULDCETRVBBUJPMGLfUIHO3GUhKUFG8mKFMKdKVkN9ZWznKVayvNm9SZWjprruko55wum5XVNptzM+da6bKcuFWy68A5xDm9PZfny3dfr3g/Hn9wzu93ev9Snle9+B2vYyhL/w79Q1n6D9c/lKV/0T+UpX+n/qEs/UfoH8rSf6T+oSz9R+kfytJ/C/1DWfqP1j+Upf+W+oey9N9K/1CW/lvrH8rSf4z+oSz9x+ofytJ/G/1DWfpvq38oS//f0D+Upf92+oey9P9N/UNZ+r9E/1CW/i/VP5Sl/2/pH8rS/2X6h7L0H6d/KEv/7fUPZem/g/6hLP1frn8oS//x+oey9N9R/1CW/q/QP5Sl/wT9Q1n6v1L/UJb+E/UPZek/Sf9Qlv476R/K0n+y/qEs/XfWP5Sl/y76h7L0n6J/KEv/XfUPZem/m/6hLP1fpX8oS//d9Q9l6b+H/qEs/ffUP5Sl/1T9Q1n6T9M/lKX/XvqHsvSfrn8oS/8Z+oey9N9b/1CW/vvoH8rSf1/9Q1n6z9Q/lKX/fvqHsvSfpX8oS/9X6x/K0n9//UNZ+r9G/1CW/gfoH8rS/0D9Q1n6H6R/KEv/g/UPZek/W/9Qlv6H6B/K0v9Q/UNZ+r9W/1CW/q/TP5Sl/2H6h7L0P1z/UJb+R+gfytK/S/9Qlv5H6h/K0n+O/qEs/efqH8rSf57+oSz9u/UPZel/lP6hLP2P1j+Upf/r9Q9l6f8G/UNZ+r9R/1CW/m/SP5Sl/zH6h7L0f7P+oSz936J/KEv/Y/UPZel/nP6hLP3n6x/K0v+t+oey9D9e/1CW/gv0D2Xpv1D/UJb+J+gfytL/RP1DWfov0j+Upf/b9A9l6X+S/qEs/U/WP5Sl/2L9Q1n6n6J/KEv/U/UPZel/mv6hLP1P1z+Upf9v6x/K0v8M/UNZ+i/RP5Sl/1L9Q1n6n6l/KEv/s/QPZem/TP9Qlv6/o38oS/+z9Q9l6X+O/qEs/ZfrH8rS/+36h7L0f4f+oSz9V+gfytJ/pf6hLP3P1T+Upf95+oey9P9d/UNZ+r9T/1CW/u/SP5Sl//n6h7L0v0D/UJb+q/QPZen/bv1DWfpfqH8oS//36B/K0v+9+oey9H+f/qEs/d+vfyhL/4v0D2Xp/wH9Q1n6f1D/UJb+v6d/KEv/39c/lKX/h/QPZen/Yf1DWfpfrH8oS/8/0D+Upf8l+oey9P+I/qEs/T+qfyhL/0v1D2Xp/4f6h7L0/5j+oSz9P65/KEv/T+gfytL/Mv1DWfr/kf6hLP0/qX8oS/8/1j+Upf+f6B/K0v9T+oey9P+0/qEs/S/XP5Sl/xX6h7L0/4z+oSz9r9Q/lKX/VfqHsvS/Wv9Qlv7X6B/K0v+z+oey9L9W/1CW/tfpH8rS/3r9Q1n6/6n+oSz9b9A/lKX/5/QPZel/o/6hLP1v0j+Upf/N+oey9P+8/qEs/b+gfyhL/1v0D2Xpf6v+oSz9/0z/UJb+t+kfytL/i/qHsvT/kv6hLP3/XP9Qlv636x/K0v8v9A9l6f9l/UNZ+v+l/qEs/e/QP5Sl/536h7L0/yv9Q1n6r9Y/lKX/V/QPZen/Vf1DWfrfpX8oS/+/1j+Upf/d+oey9P8b/UNZ+t+jfyhL/7/VP5Sl/736h7L0v0//UJb+f6d/KEv/r+kfytL/fv1DWfp/Xf9Qlv5/r38oS/8H9A9l6f8N/UNZ+n9T/1CW/t/SP5Sl/4P6h7L0/7b+oSz9v6N/KEv/7+ofytL/H/QPZen/j/qHsvT/J/1DWfo/pH8oS//v6R/K0v+f9Q9l6f+w/qEs/f9F/1CW/o/oH8rS/1/1D2Xp/2/6h7L0f1T/UJb+39c/lKX/Y/qHsvT/d/1DWfo/rn8oS///0D+Upf8P9A9l6f+f+oey9P+h/qEs/X+kfyhL/yf0D2Xp/6T+oSz9/0v/UJb+P9Y/lKX/U/qHsvT/if6hLP1/qn9oc+6/deeRy3o/Hfu0/qHNuf/G//v/b/1DWfo/o38oS/81+oey9H9W/1CW/v+jfyhL///VP5Sl/8/0D2Xp/3P9Q1n6/0L/UJb+z+kfytJ/rf6hJP23qfQPZek/TP9Qlv4d+oey9B+ufyhL/6J/KEv/Tv1DWfqP0D+Upf9I/UNZ+o/SP5Sl/xb6h7L0H61/KEv/LfUPZem/lf6hLP231j+Upf8Y/UNZ+o/VP7TZ9QcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAqqqre/YTw4f1e2r4xg/G37943ce91xx72jXXfHHbvo+9X54TvGTHxg/Wrl27tuPp6mu9D0dWVdXz37ZN7+NRA497Xv+C2ZdNWf+oTLjy2d1uWPHsIe+/+cHr1hx+7ZwbOtc921mdeMrpSxZP66iqMqmzWtnzYK9hVVV27qwu6XkwvefBLp3VdT0PZqx7sEW1uufBniedteTkniem1P49A4Bfd13dq6rh/Ra76vengY33/4LZt67q+zjIS/a9Wql69//2W7Z7x4Cv9Xme/e97/fLKgfs/5L9BAOBXDG3/75rQ93GQl/yV9//zzvz4g9HXnn//+16/TLT/ANC84Pv//TZ64Pf9B3z/P/pzwIb7M064dGTP/l+75pjlvU+VF/L9/1++fpk0cP87+n3/f1hVlZ36vv8/sqrK5E387QCAFLq63/3EYO//B9//sv2Am2Eb7/+2N64+pmf/Hx5980t7n+oc4v7vNNj7/8MG/LUCAC9MV/dn1g54/z+E/a92Dl5yw/4fuvLel/Ts/zce/v6Ejb42lP2fPHD/py5fumzqOeeet8fpSxeduvjUxWfOmjlzv31m7jtr+tR13xFY/+sm/qYAwGZu097/V6MH3Ayrqsc23H/ojvH39uz/9E8ecVrvU6OGuP87D/r+f4L3/wDQz8SOasSIauWi5cvP3mv9r30Pp6//df1/LNj/Ifzz/0l9P0TX9zODw6rqZRvuu8/5QEfP/l81afs7ep8aMcT932XQ/T+4/88qAgAvzCa+/z95wE2//R87/PpZPft/5ORdL+p9aqj//H/KoPt/hff/AFBHV3f1//omumf/L9zqF5fXuy67+vk/AGheG/v/5Pj3TKx3XXaz/wDQvDb2f/FBW99W77q8yv4DQPPa2P97ui5dUO+67G7/AaB5bez/3DPG31fvuuxh/wGgeW3s/4TzTlpR77rsaf8BoHlt7P8Nxz7xSL3rMtX+A0Dz2tj/40c9/FS96zLN/gNA89rY/+/udvQp9a7LXvYfAJrXxv5/ef89H6p3XabbfwBoXhv7P23cFXPrXZcZ9h8AmtfG/n/0rAOvrndd9rb/ANC8NvZ/3LzPz6h3Xfax/wDQvDb2/+3Hf/3ietdlX/sPAM1rY/+fO//gcfWuy0z7DwDNa2P/V9+z4/x612U/+w8AzWtj/+c8dsn99a7LLPsPAM1rY/93efrJZfWuy6vtPwA0r439/9x3Tny83nXZ3/4DQPPa2P8xVzw3tt51eY39B4DmtbH/77tw2WX1rssB9h8AmtfG/v/g0jGT612XA+0/ADSvjf1/2xdW3VLvuhxk/wGgeW3s/zcfnTGn3nU52P4DQPPa2P/jvnLH9+pdl9n2HwCa18b+7/PAXYvqXZdD7D8ANK+N/b/zJ/OeqXddDrX/ANC8Nvb/5e/91o71rstr7T8ANK+N/f/EZxd8sN51eZ39B4DmtbH/P/vSpL3rXZfD7D8ANK+N/V/2sRuvqnddDrf/ANC8Nva/e/efPlLvuhxh/wGgeW3s/91j3rWi3nXpsv8A0Lw29v/6Vwy/r951OdL+A0Dz2tj/iQd8eEG96zLH/gNA89rY/1Vztrut3nWZa/8BoHlt7P+Wp39qYr3rMs/+A0Dz2tj/U1c+enm969Jt/wGgeW3s/4/mLx1V77ocZf8BoHlt7P8OoxeOq3ddjrb/ANC8Nvb/kikPXFzvurze/gNA89rY/5/PumlGvevyBvsPAM1rY/9X7DDh6nrX5Y32HwCa18b+f3vpnXPrXZc32X8AaF4b+7/wqGkP1bsux9h/AGheG/s/fWH3KfWuy5vtPwA0r439v/2dq5+qd13eYv8BoHlt7P9Fd3/6lnrX5Vj7DwDNa2P/t3p8m8n1rstx9h8AmtfG/p/4zJmX1bsu8+0/ADSvjf3/4YOPjK13Xd5q/wGgeW3sf9eV5z9e77ocb/8BoHlt7P9XV/14Wb3rssD+A0Dz2tj/mz5y8f31rstC+w8AzWtj/yffWs2vd11OsP8A0Lxzzj3vjEVLliw+2yc+8YlPNnzyYv8/EwAA0LRf/qH/xf4rAQAAAAAAAAAAAAAAAAAAgLza+NeJvdh/jwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP/HDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwAwcCAAAAAIL8rVcYoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+AoAAP//50nVXg==") r0 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) fallocate(r0, 0x0, 0x0, 0x1001f0) copy_file_range(r0, 0x0, r0, &(0x7f00000000c0)=0xc615, 0x39ea, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104) fallocate(r1, 0x8, 0x4000, 0x4000) 1m24.667203402s ago: executing program 1 (id=1117): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x250, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x4b, 0x64, 0x1, {0x22, 0x4f8}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x4, 0xbc}}}}}]}}]}}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x46d, 0xc71f, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x87, 0x0, 0x1, {0x22, 0x45b}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x0, 0xfe}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_tables_targets\x00') syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 1m22.434883547s ago: executing program 1 (id=1139): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x10, &(0x7f0000000600), 0x1, 0x59d, &(0x7f0000001100)="$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") r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) write$binfmt_register(r0, &(0x7f0000000140)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x2007, 0x3a, '\r', 0x3a, '\x84\xa3\xea\xd6O\x89|\xeb\x80\xf0\xe96\xf4`&\xd4E\xe7L\x82n;H\xd8\xdf\x9a, \\E\xd4\xab\x1ed', 0x3a, './file2', 0x3a, [0x46]}, 0x4b) mount$9p_unix(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x4000, 0x0) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1258438, &(0x7f0000000f80)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 1m21.311112085s ago: executing program 1 (id=1155): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="002212"], 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000140)={0x0, 0xcb, 0x0, 0x0}) 1m20.238931351s ago: executing program 1 (id=1167): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x4, 0x0) syz_usb_connect(0x6, 0x221, &(0x7f0000000040)=ANY=[@ANYBLOB="12015002b387cfff8405080002010102030109020f0201ff0310030904e8fb044be442a55f0403689d3b4b56a535c2951b6ac3d54095b826c58400886139d795817f"], 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r1, 0x4b4c, &(0x7f0000000080)) 1m20.072457784s ago: executing program 40 (id=1167): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x4, 0x0) syz_usb_connect(0x6, 0x221, &(0x7f0000000040)=ANY=[@ANYBLOB="12015002b387cfff8405080002010102030109020f0201ff0310030904e8fb044be442a55f0403689d3b4b56a535c2951b6ac3d54095b826c58400886139d795817f"], 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r1, 0x4b4c, &(0x7f0000000080)) 54.107497044s ago: executing program 0 (id=1415): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000d00000000080000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xe}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x9}}]}, 0x38}}, 0x0) 53.967132757s ago: executing program 0 (id=1417): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000005dc0)=[{0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f0000001d40)="d8750288189987d0fabb09b23867772c615b8004f5071a7715f73be32aea3bb1ecc3e0814fb9b752a6d48b1d4d68a4282f76c2c6535ec3ec0fe9843311a22b58a46ed495465703756e040dd9002584b5f9ae54dd851daed0c915d40f3a3fb324415ea188556f05a94c5a063dcf7be1743c393ed5fd0563366b67", 0x7a}], 0x1}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000006680)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000006880)=""/121, 0x79}], 0x1}, 0x401}, {{0x0, 0x0, &(0x7f0000001740)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0xaf7}], 0x2, 0x63, 0x0) 53.888541798s ago: executing program 0 (id=1407): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000200), 0x3, 0x44b, &(0x7f00000004c0)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x200, &(0x7f0000000140)=0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={0x0, &(0x7f00000000c0)=""/220, 0x0, 0xdc}, 0x20) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x4000}]) 53.548776093s ago: executing program 0 (id=1412): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x2125099, 0x0) 53.347674146s ago: executing program 0 (id=1414): syz_mount_image$xfs(&(0x7f0000000000), &(0x7f0000009740)='./file0\x00', 0x4000000, &(0x7f0000000140)={[{@filestreams}, {@noquota}, {@nouuid}, {@pquota}, {@bsdgroups}, {@dax}, {@sysvgroups}, {@attr2}, {@dax_always}]}, 0x1, 0x9799, &(0x7f0000009780)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x22a42, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f00000001c0)={0x2, 0x9}, 0x2) pwrite64(r1, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 53.003324232s ago: executing program 0 (id=1422): ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000180)={'sit0\x00', 0x0, 0x80, 0x702, 0x4, 0x4, {{0x5, 0x4, 0x3, 0x0, 0x14, 0x6a, 0x0, 0x5, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2}}}}) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb10000000800894f4820", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) 52.763547065s ago: executing program 41 (id=1422): ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000180)={'sit0\x00', 0x0, 0x80, 0x702, 0x4, 0x4, {{0x5, 0x4, 0x3, 0x0, 0x14, 0x6a, 0x0, 0x5, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2}}}}) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb10000000800894f4820", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) 26.541451221s ago: executing program 5 (id=1614): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl711\x00', [0x4f27, 0x5, 0x4, 0x4, 0x5, 0x6, 0x6, 0x7, 0xa, 0x100, 0x2, 0x80000, 0x1, 0x8, 0x1e, 0x1, 0x0, 0x1a449, 0x3, 0x5, 0x81, 0xcaa7, 0x0, 0x1e58, 0xb, 0x3, 0x3c, 0x8, 0x6, 0x0, 0x5]}) r1 = openat(0xffffffffffffff9c, 0x0, 0x121c80, 0x47) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000280)=0x4000fdfd) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@remote, 0xc, 0x2, 0x0, 0x1, 0x9, 0x9}, &(0x7f0000000180)=0x20) read(r0, &(0x7f0000000000)=""/13, 0xd) 25.871132881s ago: executing program 5 (id=1624): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0x21081e, &(0x7f00000003c0)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4739}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@dioread_nolock}, {@nomblk_io_submit}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x187842, 0x167) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @b}}) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000240)={0x3920e, r0, 0x0, 0x0, 0x9, 0x3}) 25.562493976s ago: executing program 5 (id=1626): setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, 0x0, 0x8) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000090000102505a1a4400000000101090244000101000000090400001202060000052406000005240000000d240f010000000000000000000905810340"], 0x0) ioctl$EVIOCRMFF(r0, 0x4004550f, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, 0x0) 23.95889379s ago: executing program 5 (id=1634): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x1c, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) 23.443843208s ago: executing program 5 (id=1638): syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480), 0x1, 0x3f7, &(0x7f00000004c0)="$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") r0 = inotify_init1(0x80000) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x60000726) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) lseek(r1, 0xfffffffffffffffe, 0x2) getdents64(r1, 0x0, 0x0) 23.275463401s ago: executing program 5 (id=1639): sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x1c, 0x0, 0x5, 0x2, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 23.098206934s ago: executing program 42 (id=1639): sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x1c, 0x0, 0x5, 0x2, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 10.032984825s ago: executing program 4 (id=1715): syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000500)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_open_dev$evdev(&(0x7f0000001900), 0x0, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000d80)) read$hidraw(r0, 0x0, 0x49) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x820901) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1068) 9.807749849s ago: executing program 9 (id=1719): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth1_virt_wifi\x00', 0x10) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f00000001c0)=0x7004, 0x4) r1 = dup(r0) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000000)="be39", 0xffeb}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}], 0xf}, 0x0) read$FUSE(r1, &(0x7f0000001ac0)={0x2020}, 0x2020) 9.73427491s ago: executing program 9 (id=1720): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(r0, 0x0) recvfrom(r0, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000000)) 9.353864876s ago: executing program 4 (id=1723): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000d00)=0x205a, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x20000080, &(0x7f0000000080)={0x11, 0xf8, r1, 0x1, 0x1f, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}}, 0x14) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f00000007c0)=0x57, 0x4) recvfrom$packet(r0, 0x0, 0x0, 0x2000, 0x0, 0x0) 8.790843375s ago: executing program 9 (id=1724): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @main=@item_4={0x3, 0x0, 0x8, "b775e7cd"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @local=@item_012={0x1, 0x2, 0x7, ')'}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r1, 0x40184810, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0) 8.790084335s ago: executing program 4 (id=1734): sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020800000100000000000001000000000100140003"], 0x18}}, 0x0) io_setup(0x30, &(0x7f0000000600)=0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) pipe2$9p(&(0x7f00000000c0), 0x4000) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000000c0)="01", 0x24}]) 7.739694851s ago: executing program 4 (id=1729): unshare(0x28000600) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x200000, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000280)='binfmt_misc\x00', 0x800, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000240)='./file0/../file0\x00') 7.559131544s ago: executing program 4 (id=1732): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x12, 0x0, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xf}, 0x94) r0 = syz_io_uring_setup(0x53f, &(0x7f0000000440)={0x0, 0xf05e, 0x400, 0xfffffff8, 0xfe}, &(0x7f0000000300)=0x0, &(0x7f00000002c0)=0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 7.007171032s ago: executing program 4 (id=1738): r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f9", 0x10}], 0x1}, 0x0) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x22, &(0x7f0000000000)=r3, 0x10) 6.810489995s ago: executing program 43 (id=1738): r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f9", 0x10}], 0x1}, 0x0) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x22, &(0x7f0000000000)=r3, 0x10) 5.793433481s ago: executing program 9 (id=1746): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000200)={[{@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@resgid}, {@grpquota}, {@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0xdcc}}]}, 0x3, 0x44a, &(0x7f0000000400)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000200)={0x71e5b314, 0x8000000, 0x7, 0x0, 0xffffe}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, 0x0) 5.391781587s ago: executing program 9 (id=1748): r0 = syz_open_procfs(0x0, &(0x7f0000000300)='oom_adj\x00') r1 = timerfd_create(0x0, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x8) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000740), 0x400, &(0x7f0000000a00)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) timerfd_settime(r1, 0x3, &(0x7f0000000380)={{0x0, 0x989680}}, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x100000000000, 0x0, 0xc, 0x0, 0x0, 0x4, 0xffffffffff800000, 0x0, 0x100, 0x4, 0x0, 0x9, 0x3, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1000, 0x1, 0x2, 0x5, 0x20000, 0x3, 0x55d0}) 4.921852655s ago: executing program 2 (id=1752): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000c80)=ANY=[], 0x1, 0xa08, &(0x7f0000008280)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x2) getdents64(r0, 0xfffffffffffffffe, 0x29) rename(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000080)='./file1\x00') 4.770818977s ago: executing program 9 (id=1753): r0 = socket(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000480)={0xa, 0x4a23, 0x3, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1c}}, 0x2}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x3d9a, 0x4) sendfile(r0, r1, 0x0, 0x2) sendfile(r0, r1, 0x0, 0x8000000008001) 4.522919241s ago: executing program 44 (id=1753): r0 = socket(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000480)={0xa, 0x4a23, 0x3, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1c}}, 0x2}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x3d9a, 0x4) sendfile(r0, r1, 0x0, 0x2) sendfile(r0, r1, 0x0, 0x8000000008001) 4.478773101s ago: executing program 2 (id=1755): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x4}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_128={{0x303}, "cfc86a00", "4617a9f6040839230fb7fead776dd8dc", "c6db0872", "a44a883fca4400"}, 0x28) 4.392792483s ago: executing program 2 (id=1757): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) r1 = socket(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'macvlan1\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000000)=0x5, 0x4) sendto$packet(r0, &(0x7f0000000080)="33031600d1fd140000007ef52f555f2a0c9fe67025c1d97bfbf719143baa4b1f0f858c6632f47042195e", 0xfdef, 0x40008c1, &(0x7f00000000c0)={0x11, 0x86dd, r2, 0x1, 0x62}, 0x14) 4.203136475s ago: executing program 2 (id=1758): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r0) ioprio_set$uid(0x0, 0x0, 0x4000) ptrace$peeksig(0x4209, r0, &(0x7f00000000c0)={0x1, 0x1, 0x1}, &(0x7f0000000300)=[{}]) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000066930108205050088000002030109021b00010000000009040200"], 0x0) 1.749770973s ago: executing program 7 (id=1771): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b707000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f0000000240)=r2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.603320096s ago: executing program 7 (id=1772): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0x21081e, &(0x7f00000003c0)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4739}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@dioread_nolock}, {@nomblk_io_submit}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x187842, 0x167) r2 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7abff, 0x0, 0x3) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000240)={0x3920e, r0, 0x0, 0x0, 0x9, 0x3}) 1.507072947s ago: executing program 6 (id=1773): preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000340)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007bc}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@data_err_ignore}, {@bh}, {@errors_continue}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) ioctl$FS_IOC_RESVSP(r0, 0x4030582b, &(0x7f00000001c0)={0x1100, 0x2, 0x3, 0x9}) 1.271463731s ago: executing program 7 (id=1774): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/sctp\x00') r1 = open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/sctp\x00') pivot_root(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='./file0\x00') 1.153822803s ago: executing program 7 (id=1775): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) readv(r0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000440)=""/254, 0xfe}], 0x2) sendmmsg$inet6(r1, &(0x7f0000000080)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0xfffffffc}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="aa", 0x1}], 0x1}}], 0x2, 0x2000c8c0) sendmmsg$inet6(r1, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000140)="93503ddb3c8568f7252b980756003df3fcaae0af56041e0625fd9f19c9f6748188c92727ce44457fa133c41a2d87dfebd07504b4385fc804a26c20196fe3bb252e44ea42", 0x44}], 0x1}}], 0x1, 0x40) 991.231105ms ago: executing program 2 (id=1776): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f815108f6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68", 0x2e}], 0x1}, 0x0) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010100000100000000000200fffc0900010073797a30000000000800024000000001cc000000030a01020000000000000000020000000900010073797a3000000000aa000300"], 0x1e4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x7fff, 0x0) 914.415836ms ago: executing program 7 (id=1777): pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000080), 0xfffffe13) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x1, 0x0) 877.419327ms ago: executing program 6 (id=1778): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r1}, 0x18) r2 = socket$kcm(0x21, 0x2, 0x2) recvmsg$kcm(r2, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) 699.13704ms ago: executing program 6 (id=1779): syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) syz_mount_image$fuse(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x40000, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x40, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) 675.26661ms ago: executing program 6 (id=1780): write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000380)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x50) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000a0d000/0x3000)=nil], 0x0, &(0x7f0000000380), 0x2) ptrace(0x10, r0) ptrace$getregset(0x4205, r0, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) 538.444022ms ago: executing program 6 (id=1781): pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r1, 0x0) pipe2$watch_queue(&(0x7f0000000240)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r3, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 407.784424ms ago: executing program 6 (id=1782): unshare(0x20000) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) r1 = getuid() r2 = getgid() syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file1\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r1, @ANYBLOB=',group_id=', @ANYRESDEC=r2], 0x0, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) 142.140188ms ago: executing program 2 (id=1783): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x2, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xf, 0x6}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_TARGET={0x8, 0x1, 0x2}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x3}]}}]}, 0x59}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 0s ago: executing program 7 (id=1784): setresuid(0xee01, 0xee00, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x8001) r2 = getpgid(0x0) fcntl$setownex(r1, 0xf, &(0x7f0000000140)={0x2, r2}) sendmmsg$unix(r0, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="11", 0x1}], 0x1}}], 0x1, 0x40015) kernel console output (not intermixed with test programs): 3157][ T8904] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.1353 (8904) [ 260.229536][ T5943] airspy 5-1:0.0: usb_control_msg() failed -71 request 0f [ 260.239125][ T4323] input: HID 256c:006d as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:256C:006D.0021/input/input41 [ 260.251270][ T5943] airspy 5-1:0.0: Registered as swradio24 [ 260.257009][ T5943] airspy 5-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 260.270630][ T4323] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:256C:006D.0021/input/input42 [ 260.284149][ T5943] usb 5-1: USB disconnect, device number 11 [ 260.295711][ T8904] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 260.305932][ T8904] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 260.315412][ T8904] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 260.324900][ T8904] BTRFS info (device loop2): use zstd compression, level 3 [ 260.333037][ T8904] BTRFS info (device loop2): using free space tree [ 260.344330][ T4323] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:256C:006D.0021/input/input43 [ 260.367758][ T4323] uclogic 0003:256C:006D.0021: input,hiddev0,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.6-1/input0 [ 260.382977][ T4323] usb 7-1: USB disconnect, device number 14 [ 260.398098][ T8904] BTRFS info (device loop2): enabling ssd optimizations [ 260.651092][ T4715] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 260.789374][ T8297] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 260.840925][ T4715] usb 6-1: Using ep0 maxpacket: 16 [ 260.848503][ T4715] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 260.878873][ T4715] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 260.912586][ T4715] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 260.935353][ T4715] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.947374][ T4715] usb 6-1: Product: syz [ 260.952022][ T4715] usb 6-1: Manufacturer: syz [ 260.956762][ T4715] usb 6-1: SerialNumber: syz [ 261.348178][ T8931] loop6: detected capacity change from 0 to 1024 [ 261.406157][ T4715] usb 6-1: cannot find UAC_HEADER [ 261.452242][ T4715] snd-usb-audio: probe of 6-1:1.0 failed with error -22 [ 261.471106][ T4715] usb 6-1: USB disconnect, device number 18 [ 261.738657][ T8945] loop0: detected capacity change from 0 to 1024 [ 261.771813][ T8929] loop4: detected capacity change from 0 to 32768 [ 261.787224][ T8929] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop4 scanned by syz.4.1359 (8929) [ 261.804487][ T8929] BTRFS info (device loop4): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 261.823967][ T8929] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 261.844082][ T8929] BTRFS info (device loop4): using free space tree [ 261.898538][ T8929] BTRFS info (device loop4): enabling ssd optimizations [ 261.931159][ T5113] usb 7-1: new low-speed USB device number 15 using dummy_hcd [ 261.988102][ T6937] BTRFS info (device loop4): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 262.122937][ T5113] usb 7-1: config 0 has an invalid interface number: 198 but max is 0 [ 262.140932][ T5113] usb 7-1: config 0 has no interface number 0 [ 262.147188][ T5113] usb 7-1: config 0 interface 198 has no altsetting 0 [ 262.154078][ T5113] usb 7-1: New USB device found, idVendor=1b3d, idProduct=0138, bcdDevice=74.e6 [ 262.173897][ T5113] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.212610][ T5113] usb 7-1: config 0 descriptor?? [ 262.253955][ T8972] loop0: detected capacity change from 0 to 16 [ 262.297720][ T8972] erofs: (device loop0): mounted with root inode @ nid 36. [ 262.343311][ T8972] overlayfs: upper fs is r/o, try multi-lower layers mount [ 262.433817][ T5113] usb 7-1: string descriptor 0 read error: -71 [ 262.443720][ T5113] ftdi_sio 7-1:0.198: FTDI USB Serial Device converter detected [ 262.467864][ T5113] ftdi_sio ttyUSB0: unknown device type: 0x74e6 [ 262.476907][ T5113] usb 7-1: USB disconnect, device number 15 [ 262.490057][ T5113] ftdi_sio 7-1:0.198: device disconnected [ 262.665557][ T4281] block nbd5: Receive control failed (result -32) [ 262.679611][ T8980] block nbd5: shutting down sockets [ 262.750534][ T8988] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 262.760975][ T8988] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 262.778526][ T8988] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 262.819504][ T8988] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 262.899113][ T8995] loop2: detected capacity change from 0 to 2048 [ 262.907000][ T8995] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 262.925515][ T8995] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 263.017785][ T8998] loop2: detected capacity change from 0 to 256 [ 263.047400][ T8998] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 263.063731][ T8998] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 263.130991][ T5113] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 263.311006][ T9002] loop6: detected capacity change from 0 to 32768 [ 263.313453][ T5113] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 263.334288][ T9002] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop6 scanned by syz.6.1380 (9002) [ 263.335231][ T5113] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 263.347648][ T5952] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 263.356608][ T5113] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 263.373929][ T5113] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.383782][ T5113] usb 6-1: config 0 descriptor?? [ 263.395671][ T9002] BTRFS info (device loop6): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 263.407336][ T9002] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 263.417372][ T9002] BTRFS info (device loop6): using free space tree [ 263.440635][ T9002] BTRFS info (device loop6): enabling ssd optimizations [ 263.488724][ T6934] BTRFS info (device loop6): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 263.572654][ T5952] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 263.583926][ T5952] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 263.635443][ T5952] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 263.644701][ T5952] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 263.653067][ T5952] usb 1-1: SerialNumber: syz [ 263.892699][ T5952] usb 1-1: 0:2 : does not exist [ 263.929380][ T5952] usb 1-1: USB disconnect, device number 9 [ 264.403665][ T5113] input: HID 256c:006d as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.0022/input/input44 [ 264.504416][ T5113] input: HID 256c:006d as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.0022/input/input45 [ 264.534048][ T5113] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.0022/input/input46 [ 264.557812][ T9049] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 264.564167][ T5113] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.0022/input/input47 [ 264.602596][ T5113] uclogic 0003:256C:006D.0022: input,hiddev0,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.5-1/input0 [ 264.618571][ T5113] usb 6-1: USB disconnect, device number 19 [ 264.771278][ T5115] usb 3-1: new low-speed USB device number 8 using dummy_hcd [ 264.962459][ T5115] usb 3-1: config 0 has an invalid interface number: 198 but max is 0 [ 264.970656][ T5115] usb 3-1: config 0 has no interface number 0 [ 264.990996][ T5115] usb 3-1: config 0 interface 198 has no altsetting 0 [ 264.997814][ T5115] usb 3-1: New USB device found, idVendor=1b3d, idProduct=0138, bcdDevice=74.e6 [ 265.012821][ T5115] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.036457][ T5115] usb 3-1: config 0 descriptor?? [ 265.251461][ T5115] usb 3-1: string descriptor 0 read error: -71 [ 265.258459][ T5115] ftdi_sio 3-1:0.198: FTDI USB Serial Device converter detected [ 265.278512][ T9056] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 265.287161][ T5115] ftdi_sio ttyUSB0: unknown device type: 0x74e6 [ 265.290472][ T9056] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 265.296063][ T9053] loop6: detected capacity change from 0 to 2048 [ 265.312274][ T5115] usb 3-1: USB disconnect, device number 8 [ 265.313936][ T9056] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 265.322027][ T9053] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=18576, location=18576 [ 265.335538][ T9056] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 265.346517][ T5115] ftdi_sio 3-1:0.198: device disconnected [ 265.386407][ T9053] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 265.857078][ T9068] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1400'. [ 266.318814][ T9087] loop0: detected capacity change from 0 to 512 [ 266.339718][ T9087] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 266.386844][ T9087] EXT4-fs (loop0): 1 truncate cleaned up [ 266.392675][ T9087] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 266.634130][ T6816] EXT4-fs (loop0): unmounting filesystem. [ 266.676153][ T9098] loop5: detected capacity change from 0 to 4096 [ 266.702239][ T9098] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 266.712095][ T9098] UDF-fs: Scanning with blocksize 512 failed [ 266.745042][ T9098] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 266.800760][ T9098] UDF-fs: error (device loop5): udf_fiiter_advance_blk: extent after position 0 not allocated in directory (ino 1328) [ 266.827860][ T9098] UDF-fs: error (device loop5): udf_verify_fi: directory (ino 1328) has too big (2088) entry at pos 0 [ 267.011577][ T9110] input: syz1 as /devices/virtual/input/input48 [ 267.190411][ T9114] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1420'. [ 267.358101][ T4371] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.376583][ T9118] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1423'. [ 267.389821][ T9118] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1423'. [ 267.400204][ T9119] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1423'. [ 267.431104][ T9119] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1423'. [ 267.540387][ T4371] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.633991][ T9128] loop5: detected capacity change from 0 to 128 [ 267.734126][ T9128] VFS: Found a Xenix FS (block size = 512) on device loop5 [ 267.747202][ T4371] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.809385][ T9125] sysv_free_block: trying to free block not in datazone [ 267.855332][ T9130] loop4: detected capacity change from 0 to 2048 [ 267.946691][ T9130] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 267.969498][ T4547] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 268.148555][ T6937] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 268.232948][ T6937] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 268.280501][ T9138] loop5: detected capacity change from 0 to 4096 [ 268.306021][ T6937] EXT4-fs (loop4): unmounting filesystem. [ 268.343856][ T9122] loop2: detected capacity change from 0 to 131072 [ 268.345077][ T4283] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 268.361075][ T4283] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 268.373279][ T4283] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 268.385029][ T4283] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 268.399255][ T4283] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 268.408077][ T4283] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 268.410036][ T9138] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 268.427655][ T9122] F2FS-fs (loop2): Found nat_bits in checkpoint [ 268.484133][ T9122] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 268.542359][ T4371] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.630471][ T9138] EXT4-fs (loop5): shut down requested (1) [ 268.718852][ T9136] loop6: detected capacity change from 0 to 32768 [ 268.737085][ T9136] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by syz.6.1430 (9136) [ 268.753381][ T4547] EXT4-fs (loop5): unmounting filesystem. [ 268.780576][ T9136] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 268.791243][ T9136] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm [ 268.799939][ T9136] BTRFS info (device loop6): setting incompat feature flag for COMPRESS_LZO (0x8) [ 268.843854][ T5334] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 268.859275][ T9136] BTRFS info (device loop6): use lzo compression, level 0 [ 268.866786][ T9136] BTRFS info (device loop6): using free space tree [ 268.946629][ T9139] chnl_net:caif_netlink_parms(): no params data found [ 269.002448][ T9136] BTRFS info (device loop6): enabling ssd optimizations [ 269.061037][ T5334] usb 5-1: Using ep0 maxpacket: 16 [ 269.073349][ T5334] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 269.088932][ T5334] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 269.119193][ T5334] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 269.151278][ T5334] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 269.170600][ T5334] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.187164][ T5334] usb 5-1: config 0 descriptor?? [ 269.250767][ T6934] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 269.556443][ T9180] loop5: detected capacity change from 0 to 128 [ 269.576588][ T9180] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 269.594168][ T9180] ext4 filesystem being mounted at /306/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 269.628411][ T9139] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.644000][ T9139] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.658640][ T5334] microsoft 0003:045E:07DA.0023: No inputs registered, leaving [ 269.672209][ T9139] device bridge_slave_0 entered promiscuous mode [ 269.685558][ T5334] microsoft 0003:045E:07DA.0023: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 269.707581][ T5334] microsoft 0003:045E:07DA.0023: no inputs found [ 269.714264][ T5334] microsoft 0003:045E:07DA.0023: could not initialize ff, continuing anyway [ 269.753163][ T9139] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.760441][ T9139] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.768938][ T9139] device bridge_slave_1 entered promiscuous mode [ 269.772945][ T4547] EXT4-fs (loop5): unmounting filesystem. [ 269.825668][ T9139] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 269.837117][ T9139] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 269.885084][ T5944] usb 5-1: USB disconnect, device number 12 [ 269.961841][ T9139] team0: Port device team_slave_0 added [ 269.969822][ T9139] team0: Port device team_slave_1 added [ 270.087823][ T9139] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 270.111437][ T9139] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 270.137330][ C0] vkms_vblank_simulate: vblank timer overrun [ 270.164499][ T9198] loop6: detected capacity change from 0 to 256 [ 270.178410][ T9139] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 270.250303][ T9139] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 270.261127][ T9139] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 270.287026][ C0] vkms_vblank_simulate: vblank timer overrun [ 270.296605][ T9139] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 270.400282][ T9192] loop5: detected capacity change from 0 to 32768 [ 270.434311][ T9192] XFS: ikeep mount option is deprecated. [ 270.447112][ T9139] device hsr_slave_0 entered promiscuous mode [ 270.461006][ T4283] Bluetooth: hci0: command 0x0409 tx timeout [ 270.473548][ T9139] device hsr_slave_1 entered promiscuous mode [ 270.493504][ T9205] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1444'. [ 270.501468][ T9203] loop2: detected capacity change from 0 to 2048 [ 270.510206][ T9203] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=18576, location=18576 [ 270.520576][ T9205] device vxlan2 entered promiscuous mode [ 270.531663][ T9192] XFS (loop5): Mounting V5 Filesystem [ 270.542453][ T9203] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 270.598113][ T9192] XFS (loop5): Ending clean mount [ 270.622848][ T9192] XFS (loop5): Quotacheck needed: Please wait. [ 270.700197][ T9192] XFS (loop5): Quotacheck: Done. [ 270.858812][ T4547] XFS (loop5): Unmounting Filesystem [ 270.956034][ T9208] loop4: detected capacity change from 0 to 32768 [ 271.115199][ T9208] XFS (loop4): Mounting V5 Filesystem [ 271.193649][ T4371] device hsr_slave_0 left promiscuous mode [ 271.204581][ T4371] device hsr_slave_1 left promiscuous mode [ 271.229467][ T9208] XFS (loop4): Ending clean mount [ 271.259041][ T9208] XFS (loop4): Quotacheck needed: Please wait. [ 271.325790][ T9208] XFS (loop4): Quotacheck: Done. [ 271.354188][ T4371] device veth1_macvtap left promiscuous mode [ 271.400950][ T4371] device veth0_macvtap left promiscuous mode [ 271.407193][ T4371] device veth1_vlan left promiscuous mode [ 271.417300][ T4371] device veth0_vlan left promiscuous mode [ 271.455271][ T6937] XFS (loop4): Unmounting Filesystem [ 271.700221][ T9223] loop2: detected capacity change from 0 to 32768 [ 271.788179][ T9223] XFS (loop2): Mounting V5 Filesystem [ 271.895701][ T9223] XFS (loop2): Ending clean mount [ 271.904112][ T9223] XFS (loop2): Quotacheck needed: Please wait. [ 272.040711][ T9223] XFS (loop2): Quotacheck: Done. [ 272.046067][ T9229] loop5: detected capacity change from 0 to 40427 [ 272.057465][ T9229] F2FS-fs (loop5): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 272.065494][ T9229] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 272.077433][ T9229] F2FS-fs (loop5): invalid crc value [ 272.086266][ T9229] F2FS-fs (loop5): Found nat_bits in checkpoint [ 272.107577][ T27] audit: type=1800 audit(1752880676.339:543): pid=9223 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1448" name="file2" dev="loop2" ino=9287 res=0 errno=0 [ 272.152302][ T9229] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 272.159512][ T9229] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 272.212812][ T9229] syz.5.1447: attempt to access beyond end of device [ 272.212812][ T9229] loop5: rw=2051, sector=65536, nr_sectors = 65536 limit=40427 [ 272.228788][ T9229] F2FS-fs (loop5): Issue discard(8192, 8192, 8192) failed, ret: -5 [ 272.531145][ T4281] Bluetooth: hci0: command 0x041b tx timeout [ 272.888544][ T8297] XFS (loop2): Unmounting Filesystem [ 273.367837][ T4371] team0 (unregistering): Port device team_slave_1 removed [ 273.430945][ T5945] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 273.447660][ T4371] team0 (unregistering): Port device team_slave_0 removed [ 273.458335][ T5944] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 273.481300][ T5944] hid-generic 0000:0000:0000.0024: hidraw0: HID v0.00 Device [syz1] on syz0 [ 273.513466][ T4371] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 273.589952][ T4371] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 273.623830][ T5945] usb 6-1: config 0 has an invalid interface number: 32 but max is 0 [ 273.632208][ T5945] usb 6-1: config 0 has no interface number 0 [ 273.638319][ T5945] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 273.656923][ T5945] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.689885][ T5945] usb 6-1: config 0 descriptor?? [ 273.700976][ T5945] cp210x 6-1:0.32: cp210x converter detected [ 274.115830][ T5945] cp210x 6-1:0.32: failed to get vendor val 0x000e size 3: -32 [ 274.330620][ T5945] cp210x 6-1:0.32: GPIO initialisation failed: -19 [ 274.348418][ T5945] usb 6-1: cp210x converter now attached to ttyUSB0 [ 274.400170][ T9258] loop4: detected capacity change from 0 to 32768 [ 274.419769][ T9258] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.1466 (9258) [ 274.453805][ T9258] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 274.455390][ T4371] bond0 (unregistering): Released all slaves [ 274.464918][ T9258] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 274.478998][ T9258] BTRFS info (device loop4): setting nodatacow, compression disabled [ 274.487169][ T9258] BTRFS info (device loop4): enabling ssd optimizations [ 274.497898][ T9258] BTRFS info (device loop4): setting datacow [ 274.504003][ T9258] BTRFS info (device loop4): doing ref verification [ 274.511448][ T9258] BTRFS info (device loop4): force clearing of disk cache [ 274.518587][ T9258] BTRFS info (device loop4): turning off barriers [ 274.525124][ T9258] BTRFS info (device loop4): using spread ssd allocation scheme [ 274.547240][ T5945] usb 6-1: USB disconnect, device number 20 [ 274.556071][ T9258] BTRFS info (device loop4): using free space tree [ 274.563232][ T5945] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 274.572227][ T5945] cp210x 6-1:0.32: device disconnected [ 274.613648][ T4281] Bluetooth: hci0: command 0x040f tx timeout [ 274.656992][ T9258] BTRFS info (device loop4): rebuilding free space tree [ 274.726867][ T27] audit: type=1800 audit(1752880678.959:544): pid=9258 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1466" name="file2" dev="loop4" ino=263 res=0 errno=0 [ 274.974444][ T6937] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 275.027980][ T9280] loop6: detected capacity change from 0 to 128 [ 275.157286][ T9280] VFS: Found a Xenix FS (block size = 512) on device loop6 [ 275.187219][ T9139] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 275.215995][ T9280] sysv_free_block: trying to free block not in datazone [ 275.243898][ T9139] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 275.273740][ T9139] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 275.313113][ T6934] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 275.313321][ T9139] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 275.524658][ T9296] loop4: detected capacity change from 0 to 2048 [ 275.558742][ T9296] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=18576, location=18576 [ 275.561149][ T9139] 8021q: adding VLAN 0 to HW filter on device bond0 [ 275.600776][ T9296] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 275.616376][ T72] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 275.641616][ T72] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 275.654751][ T9139] 8021q: adding VLAN 0 to HW filter on device team0 [ 275.688194][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 275.703164][ T9282] loop2: detected capacity change from 0 to 32768 [ 275.710399][ T9282] XFS: ikeep mount option is deprecated. [ 275.711594][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 275.776560][ T9298] loop5: detected capacity change from 0 to 4096 [ 275.787924][ T9282] XFS (loop2): Mounting V5 Filesystem [ 275.795762][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.802891][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 275.883947][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 275.902579][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 275.911454][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 275.919958][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.927091][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 275.936053][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 275.938802][ T9282] XFS (loop2): Ending clean mount [ 275.944967][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 275.958114][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 275.970100][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 275.980476][ T9282] XFS (loop2): Quotacheck needed: Please wait. [ 275.989835][ T9139] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 276.001262][ T9139] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 276.016279][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 276.025185][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 276.051314][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 276.060480][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 276.069081][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 276.078093][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 276.079968][ T9308] program syz.4.1467 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 276.086760][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 276.110257][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 276.141483][ T9282] XFS (loop2): Quotacheck: Done. [ 276.154012][ T9294] loop6: detected capacity change from 0 to 32768 [ 276.287818][ T8297] XFS (loop2): Unmounting Filesystem [ 276.383849][ T9294] XFS (loop6): Mounting V5 Filesystem [ 276.431088][ T9294] XFS (loop6): Ending clean mount [ 276.465511][ T9294] XFS (loop6): Quotacheck needed: Please wait. [ 276.563945][ T9294] XFS (loop6): Quotacheck: Done. [ 276.591391][ T27] audit: type=1800 audit(1752880680.829:545): pid=9294 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1463" name="file1" dev="loop6" ino=4422 res=0 errno=0 [ 276.643789][ T9313] loop5: detected capacity change from 0 to 65536 [ 276.664369][ T9313] XFS (loop5): Mounting V5 Filesystem [ 276.680339][ T27] audit: type=1800 audit(1752880680.859:546): pid=9294 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1463" name="file1" dev="loop6" ino=4422 res=0 errno=0 [ 276.711966][ T4281] Bluetooth: hci0: command 0x0419 tx timeout [ 276.746665][ T9313] XFS (loop5): Ending clean mount [ 276.829481][ T4547] XFS (loop5): Unmounting Filesystem [ 276.866482][ T6934] XFS (loop6): Unmounting Filesystem [ 276.936246][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 276.947078][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 277.012749][ T9139] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 277.133882][ T9317] loop4: detected capacity change from 0 to 40427 [ 277.162525][ T9317] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 277.170287][ T9317] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 277.226950][ T9317] F2FS-fs (loop4): Found nat_bits in checkpoint [ 277.329971][ T9317] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 277.345117][ T9317] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 277.572782][ T9347] loop5: detected capacity change from 0 to 128 [ 277.673881][ T9347] loop5: detected capacity change from 0 to 2048 [ 277.703093][ T4589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 277.722067][ T4589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 277.744311][ T9347] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 277.750236][ T9350] loop6: detected capacity change from 0 to 512 [ 277.760345][ T9350] EXT4-fs: Ignoring removed nobh option [ 277.776870][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 277.789925][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 277.798841][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 277.806757][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 277.820372][ T9139] device veth0_vlan entered promiscuous mode [ 277.832625][ T9350] EXT4-fs error (device loop6): ext4_orphan_get:1400: inode #15: comm syz.6.1473: iget: bad i_size value: 38620345925642 [ 277.879558][ T9139] device veth1_vlan entered promiscuous mode [ 277.907926][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 277.922749][ T9350] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.1473: couldn't read orphan inode 15 (err -117) [ 277.935815][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 277.945209][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 277.946095][ T9350] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 277.954291][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 277.972398][ T9139] device veth0_macvtap entered promiscuous mode [ 277.995726][ T61] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.014859][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 278.033646][ T9139] device veth1_macvtap entered promiscuous mode [ 278.063682][ T9350] EXT4-fs (loop6): shut down requested (2) [ 278.071424][ T9350] EXT4-fs warning (device loop6): empty_inline_dir:1884: bad inline directory (dir #12) - inode 4278190093, rec_len 255, name_len 0inline size 60 [ 278.107803][ T61] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.156075][ T9139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.176838][ T9139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.197198][ T9139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.226825][ T9139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.243812][ T9139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.270910][ T9139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.289813][ T9362] loop4: detected capacity change from 0 to 512 [ 278.292333][ T9139] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 278.301916][ T6934] EXT4-fs (loop6): unmounting filesystem. [ 278.325712][ T9139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.355369][ T9139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.374898][ T9139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.386810][ T9139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.391254][ T9362] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 278.399649][ T9139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.405750][ T9362] ext4 filesystem being mounted at /134/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 278.419770][ T9139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.460465][ T9139] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 278.484970][ T61] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.510243][ T4589] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 278.519606][ T4589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 278.552921][ T4589] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 278.578292][ T4589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 278.588202][ T9364] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1477'. [ 278.604502][ T6937] EXT4-fs (loop4): unmounting filesystem. [ 278.628336][ T9139] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.639486][ T9139] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.641283][ T4715] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 278.648809][ T9139] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.665194][ T9139] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.696185][ T61] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.775552][ T9373] device syzkaller1 entered promiscuous mode [ 278.786469][ T9374] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 278.873344][ T9378] loop4: detected capacity change from 0 to 1024 [ 278.906925][ T4715] usb 7-1: config index 0 descriptor too short (expected 4114, got 18) [ 278.920009][ T27] audit: type=1804 audit(1752880683.139:547): pid=9378 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1479" name=2F6E6577726F6F742F3133352F66696C65302F8F2348A9C7618ADF28D07647F38EFF dev="loop4" ino=26 res=1 errno=0 [ 278.956104][ T4715] usb 7-1: New USB device found, idVendor=066b, idProduct=20f9, bcdDevice=ff.94 [ 278.965339][ T4715] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.975117][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.992371][ T4715] usb 7-1: Product: syz [ 278.994201][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.996547][ T4715] usb 7-1: Manufacturer: syz [ 278.996565][ T4715] usb 7-1: SerialNumber: syz [ 279.016486][ T4715] usb 7-1: config 0 descriptor?? [ 279.028998][ T4589] hfsplus: b-tree write err: -5, ino 4 [ 279.090612][ T72] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.103992][ T4589] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 279.116549][ T72] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.178176][ T9384] loop4: detected capacity change from 0 to 256 [ 279.183905][ T9382] loop5: detected capacity change from 0 to 1024 [ 279.199083][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 279.226703][ T9382] EXT4-fs: Ignoring removed orlov option [ 279.249390][ T9382] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 279.272044][ T9384] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 279.322773][ T9384] FAT-fs (loop4): Filesystem has been set read-only [ 279.343651][ T9384] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 279.370835][ T4547] EXT4-fs (loop5): unmounting filesystem. [ 279.406220][ T9384] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 279.436180][ T4715] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 279.455931][ T27] audit: type=1800 audit(1752880683.689:548): pid=9384 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1483" name="file1" dev="loop4" ino=1048672 res=0 errno=0 [ 279.484978][ T4715] asix: probe of 7-1:0.0 failed with error -71 [ 279.497339][ T4715] usb 7-1: USB disconnect, device number 16 [ 279.617843][ T9395] loop2: detected capacity change from 0 to 1024 [ 279.674206][ T9395] hfsplus: xattr searching failed [ 279.682571][ T9395] hfsplus: xattr searching failed [ 279.692805][ T9395] hfsplus: xattr searching failed [ 279.706864][ T9397] loop4: detected capacity change from 0 to 8192 [ 279.715079][ T9397] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 279.732257][ T9397] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 279.741750][ T9397] REISERFS (device loop4): using ordered data mode [ 279.749607][ T9397] reiserfs: using flush barriers [ 279.756629][ T9397] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 279.778755][ T9397] REISERFS (device loop4): checking transaction log (loop4) [ 279.795054][ T9397] REISERFS (device loop4): Using r5 hash to sort names [ 279.832074][ T9397] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 280.588724][ T9430] input: syz0 as /devices/virtual/input/input50 [ 280.896199][ T9437] loop2: detected capacity change from 0 to 512 [ 280.910288][ T9437] EXT4-fs: Ignoring removed nomblk_io_submit option [ 280.918627][ T9437] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 280.947959][ T9437] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 280.962719][ T9437] ext4 filesystem being mounted at /71/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 280.995921][ T9437] EXT4-fs (loop2): shut down requested (2) [ 281.036270][ T8297] EXT4-fs (loop2): unmounting filesystem. [ 281.061008][ T5014] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 281.150882][ T27] audit: type=1800 audit(1752880685.219:549): pid=9437 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1505" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 281.179991][ T27] audit: type=1800 audit(1752880685.219:550): pid=9437 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1505" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 281.272805][ T5014] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 281.295941][ T5014] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 281.323617][ T5014] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 281.347235][ T5014] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.371370][ T5014] usb 5-1: config 0 descriptor?? [ 281.378223][ T9441] loop5: detected capacity change from 0 to 128 [ 281.515513][ T61] device hsr_slave_0 left promiscuous mode [ 281.535305][ T27] audit: type=1804 audit(1752880685.769:551): pid=9443 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.1507" name="/newroot/321/file1/aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa." dev="loop5" ino=1048673 res=1 errno=0 [ 281.573782][ C1] vkms_vblank_simulate: vblank timer overrun [ 281.602633][ T61] device hsr_slave_1 left promiscuous mode [ 281.619807][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 281.638773][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 281.668771][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 281.691268][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 281.714815][ T61] device bridge_slave_1 left promiscuous mode [ 281.728573][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.768986][ T61] device bridge_slave_0 left promiscuous mode [ 281.790511][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.800466][ T5014] pyra 0003:1E7D:2CF6.0025: unknown main item tag 0x0 [ 281.817585][ T5014] pyra 0003:1E7D:2CF6.0025: unknown main item tag 0x0 [ 281.834417][ T5014] pyra 0003:1E7D:2CF6.0025: unknown main item tag 0x0 [ 281.851789][ T5014] pyra 0003:1E7D:2CF6.0025: unknown main item tag 0x0 [ 281.858605][ T5014] pyra 0003:1E7D:2CF6.0025: unknown main item tag 0x0 [ 281.887931][ T5014] pyra 0003:1E7D:2CF6.0025: unknown main item tag 0x0 [ 281.906596][ T5014] pyra 0003:1E7D:2CF6.0025: unknown main item tag 0x0 [ 281.928236][ T5014] pyra 0003:1E7D:2CF6.0025: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.4-1/input0 [ 281.966996][ T4373] hid-generic 0005:0000:0005.0026: item fetching failed at offset 0/2 [ 281.993959][ T4373] hid-generic: probe of 0005:0000:0005.0026 failed with error -22 [ 282.074436][ T9424] loop6: detected capacity change from 0 to 262144 [ 282.110443][ T9424] F2FS-fs (loop6): Found nat_bits in checkpoint [ 282.136321][ T61] device veth1_macvtap left promiscuous mode [ 282.155355][ T9424] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 282.158251][ T61] device veth0_macvtap left promiscuous mode [ 282.197348][ T61] device veth1_vlan left promiscuous mode [ 282.203721][ T61] device veth0_vlan left promiscuous mode [ 282.206783][ T9457] "syz.2.1506" (9457) uses obsolete ecb(arc4) skcipher [ 282.523854][ T9464] loop2: detected capacity change from 0 to 128 [ 282.571907][ T9464] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 282.623634][ T9464] ext4 filesystem being mounted at /74/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 282.623835][ T5014] pyra 0003:1E7D:2CF6.0025: couldn't init struct pyra_device [ 282.655335][ C1] vkms_vblank_simulate: vblank timer overrun [ 282.669381][ T5014] pyra 0003:1E7D:2CF6.0025: couldn't install mouse [ 282.677171][ T5014] pyra: probe of 0003:1E7D:2CF6.0025 failed with error -71 [ 282.687469][ T5014] usb 5-1: USB disconnect, device number 13 [ 282.813651][ T8297] EXT4-fs (loop2): unmounting filesystem. [ 282.969307][ T9471] loop5: detected capacity change from 0 to 256 [ 283.041979][ T9471] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 283.312330][ T9478] loop5: detected capacity change from 0 to 256 [ 283.326242][ T9478] exfat: Bad value for 'uid' [ 283.827935][ T61] team0 (unregistering): Port device team_slave_1 removed [ 283.885124][ T61] team0 (unregistering): Port device team_slave_0 removed [ 283.936892][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 284.605158][ T61] bond0 (unregistering): Released all slaves [ 284.693902][ T9492] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1524'. [ 284.797254][ T9505] loop5: detected capacity change from 0 to 512 [ 284.874846][ T9505] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002] [ 284.934366][ T9505] System zones: 0-2, 18-18, 34-35 [ 284.975712][ T9505] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 285.034703][ T9505] ext4 filesystem being mounted at /328/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 285.158807][ T9522] netlink: 184 bytes leftover after parsing attributes in process `syz.4.1532'. [ 285.299963][ T4547] EXT4-fs (loop5): unmounting filesystem. [ 286.255810][ T9547] loop7: detected capacity change from 0 to 131072 [ 286.280993][ T9547] F2FS-fs (loop7): Found nat_bits in checkpoint [ 286.319133][ T9547] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 286.453927][ T9560] loop4: detected capacity change from 0 to 2048 [ 286.493533][ T9560] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 286.537141][ T9566] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 286.548766][ T9563] loop2: detected capacity change from 0 to 512 [ 286.595822][ T9563] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002] [ 286.606299][ T9563] System zones: 0-2, 18-18, 34-35 [ 286.623874][ T9563] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 286.639615][ T9563] ext4 filesystem being mounted at /83/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 286.728322][ T6937] syz-executor: attempt to access beyond end of device [ 286.728322][ T6937] loop4: rw=0, sector=262216, nr_sectors = 2 limit=2048 [ 286.792248][ T6937] NILFS (loop4): I/O error reading meta-data file (ino=6, block-offset=1) [ 286.885330][ T8297] EXT4-fs (loop2): unmounting filesystem. [ 286.896828][ T6937] syz-executor: attempt to access beyond end of device [ 286.896828][ T6937] loop4: rw=0, sector=262216, nr_sectors = 2 limit=2048 [ 286.927938][ T6937] NILFS (loop4): I/O error reading meta-data file (ino=6, block-offset=1) [ 286.955223][ T6937] syz-executor: attempt to access beyond end of device [ 286.955223][ T6937] loop4: rw=0, sector=262216, nr_sectors = 2 limit=2048 [ 286.980561][ T6937] NILFS (loop4): I/O error reading meta-data file (ino=6, block-offset=1) [ 287.014309][ T6937] NILFS (loop4): DAT doesn't have a block to manage vblocknr = 147 [ 287.030042][ T9576] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 287.031264][ T6937] NILFS error (device loop4): nilfs_bmap_truncate: broken bmap (inode number=15) [ 287.099695][ T6937] Remounting filesystem read-only [ 287.113894][ T6937] NILFS (loop4): error -5 truncating bmap (ino=15) [ 287.120487][ T6937] syz-executor: attempt to access beyond end of device [ 287.120487][ T6937] loop4: rw=0, sector=262216, nr_sectors = 2 limit=2048 [ 287.176262][ T6937] NILFS (loop4): I/O error reading meta-data file (ino=6, block-offset=1) [ 287.194557][ T6937] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer [ 287.495729][ T9578] loop2: detected capacity change from 0 to 8192 [ 287.946463][ T4331] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 287.949044][ T9601] loop6: detected capacity change from 0 to 512 [ 287.998738][ T9601] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 288.007970][ T9601] ext4 filesystem being mounted at /139/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 288.035599][ T9601] fs-verity (loop6, inode 15): Unrecognized descriptor size: 0 bytes [ 288.117654][ T9609] loop7: detected capacity change from 0 to 4096 [ 288.141474][ T9609] NILFS (loop7): invalid segment: Inconsistency found [ 288.142571][ T4331] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 288.148427][ T9609] NILFS (loop7): trying rollback from an earlier position [ 288.164837][ T6934] EXT4-fs (loop6): unmounting filesystem. [ 288.184391][ T4331] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 288.184616][ T9609] NILFS (loop7): recovery complete [ 288.194235][ T4331] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 288.212700][ T4331] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 288.222007][ T4331] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.230035][ T9612] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 288.242487][ T4331] usb 5-1: config 0 descriptor?? [ 288.584543][ T9625] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.592021][ T9625] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.658550][ T4331] plantronics 0003:047F:FFFF.0027: No inputs registered, leaving [ 288.679709][ T9626] device bridge_slave_1 left promiscuous mode [ 288.688987][ T4331] plantronics 0003:047F:FFFF.0027: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 288.709248][ T9626] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.724410][ T9626] device bridge_slave_0 left promiscuous mode [ 288.730776][ T9626] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.893627][ T9632] loop5: detected capacity change from 0 to 2048 [ 288.934534][ T9621] loop7: detected capacity change from 0 to 32768 [ 288.942329][ T9621] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop7 scanned by syz.7.1572 (9621) [ 288.959010][ T9636] loop6: detected capacity change from 0 to 256 [ 288.965893][ T9632] loop5: p2 p3 < > p4 < p5 > [ 288.970605][ T9632] loop5: partition table partially beyond EOD, truncated [ 288.978294][ T9621] BTRFS info (device loop7): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 288.978448][ T9632] loop5: p2 start 16908804 is beyond EOD, truncated [ 288.993840][ T9621] BTRFS info (device loop7): using blake2b (blake2b-256-generic) checksum algorithm [ 288.995331][ T9632] loop5: p3 start 4284289 is beyond EOD, truncated [ 289.011354][ T9621] BTRFS info (device loop7): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 289.021236][ T9632] loop5: p5 start 16908804 is beyond EOD, truncated [ 289.030962][ T9621] BTRFS info (device loop7): use zstd compression, level 3 [ 289.038200][ T9621] BTRFS info (device loop7): using free space tree [ 289.068655][ T9621] BTRFS info (device loop7): enabling ssd optimizations [ 289.114623][ T27] audit: type=1800 audit(1752880693.349:552): pid=9621 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1572" name="file1" dev="loop7" ino=260 res=0 errno=0 [ 289.151406][ T4331] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 289.239051][ T9139] BTRFS info (device loop7): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 289.304327][ T9659] loop5: detected capacity change from 0 to 8192 [ 289.317398][ T9659] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 289.331627][ T9659] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 289.341153][ T9659] REISERFS (device loop5): using ordered data mode [ 289.347897][ T9659] reiserfs: using flush barriers [ 289.370526][ T9659] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 289.387745][ T9659] REISERFS (device loop5): checking transaction log (loop5) [ 289.396609][ T9659] REISERFS (device loop5): Using r5 hash to sort names [ 289.404456][ T9659] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 289.421779][ T4331] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 289.440669][ T4331] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 289.450718][ T4331] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 289.463348][ T4331] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.489149][ T4331] usb 3-1: config 0 descriptor?? [ 289.588984][ T9664] netlink: 'syz.6.1585': attribute type 4 has an invalid length. [ 289.885959][ T22] usb 5-1: USB disconnect, device number 14 [ 290.033051][ T9670] loop7: detected capacity change from 0 to 32768 [ 290.048049][ T9670] XFS (loop7): Mounting V5 Filesystem [ 290.074695][ T9670] XFS (loop7): Ending clean mount [ 290.091721][ T9670] XFS (loop7): Quotacheck needed: Please wait. [ 290.148338][ T9670] XFS (loop7): Quotacheck: Done. [ 290.165664][ T27] audit: type=1800 audit(1752880694.399:553): pid=9670 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1583" name="file2" dev="loop7" ino=6151 res=0 errno=0 [ 290.241820][ T9139] XFS (loop7): Unmounting Filesystem [ 290.533564][ T4331] input: HID 256c:006d as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0028/input/input52 [ 290.614853][ T4331] input: HID 256c:006d as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0028/input/input53 [ 290.628634][ T4331] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0028/input/input54 [ 290.644961][ T4331] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0028/input/input55 [ 290.675672][ T4331] uclogic 0003:256C:006D.0028: input,hiddev0,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.2-1/input0 [ 290.738125][ T9703] loop7: detected capacity change from 0 to 512 [ 290.750295][ T22] usb 3-1: USB disconnect, device number 9 [ 290.768982][ T9703] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 290.868292][ T9139] EXT4-fs (loop7): unmounting filesystem. [ 290.940972][ T5024] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 291.095271][ T5014] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 291.155598][ T5024] usb 5-1: Using ep0 maxpacket: 8 [ 291.483469][ T5024] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 291.489157][ T9709] loop7: detected capacity change from 0 to 32768 [ 291.494320][ T5024] usb 5-1: can't read configurations, error -71 [ 291.506906][ T9709] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 scanned by syz.7.1596 (9709) [ 291.526378][ T9709] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 291.537331][ T9709] BTRFS info (device loop7): using sha256 (sha256-avx2) checksum algorithm [ 291.538592][ T4715] libceph: connect (1)[c::]:6789 error -101 [ 291.546098][ T9709] BTRFS info (device loop7): using free space tree [ 291.559794][ T4715] libceph: mon0 (1)[c::]:6789 connect error [ 291.568546][ T9709] BTRFS info (device loop7): enabling ssd optimizations [ 291.633145][ T9714] ceph: No mds server is up or the cluster is laggy [ 291.681673][ T9139] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 291.974759][ T9741] loop6: detected capacity change from 0 to 8192 [ 291.999868][ T9741] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 292.021016][ T9741] REISERFS (device loop6): found reiserfs format "3.5" with non-standard journal [ 292.040460][ T9741] REISERFS (device loop6): using ordered data mode [ 292.052424][ T9741] reiserfs: using flush barriers [ 292.072644][ T9741] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 292.148969][ T9741] REISERFS (device loop6): checking transaction log (loop6) [ 292.153485][ T9739] loop2: detected capacity change from 0 to 40427 [ 292.164019][ T9739] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 292.171843][ T9739] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 292.180594][ T9741] REISERFS (device loop6): Using r5 hash to sort names [ 292.192711][ T9739] F2FS-fs (loop2): Found nat_bits in checkpoint [ 292.213989][ T9741] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage. [ 292.224634][ T9746] loop4: detected capacity change from 0 to 128 [ 292.234687][ T9739] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 292.242063][ T9739] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 292.303948][ T9746] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a802c018, mo2=0002] [ 292.331030][ T9746] System zones: 1-3, 19-19, 35-36 [ 292.345970][ T9746] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 292.423057][ T6937] EXT4-fs (loop4): unmounting filesystem. [ 292.673946][ T9764] loop6: detected capacity change from 0 to 1024 [ 292.718218][ T9764] hfsplus: xattr searching failed [ 293.161866][ T9767] loop5: detected capacity change from 0 to 32768 [ 293.177258][ T9767] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 293.177258][ T9767] [ 293.187693][ T9767] xtLookup: xtSearch returned -5 [ 293.192868][ T9767] add_index: get/read_metapage failed! [ 293.199040][ T9767] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 293.199040][ T9767] [ 293.210291][ T9767] xtLookup: xtSearch returned -5 [ 293.218153][ T9776] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.225600][ T9776] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.233407][ T9767] free_index: error reading directory table [ 293.239315][ T9767] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 293.239315][ T9767] [ 293.255910][ T9767] xtLookup: xtSearch returned -5 [ 293.281345][ T9767] free_index: error reading directory table [ 293.284302][ T9769] loop4: detected capacity change from 0 to 32768 [ 293.305691][ T9777] device bridge_slave_1 left promiscuous mode [ 293.312238][ T9767] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 293.312238][ T9767] [ 293.324585][ T9777] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.331947][ T9767] xtLookup: xtSearch returned -5 [ 293.345914][ T9767] free_index: error reading directory table [ 293.352493][ T9777] device bridge_slave_0 left promiscuous mode [ 293.357421][ T9769] XFS (loop4): Mounting V5 Filesystem [ 293.358724][ T9777] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.372476][ T9767] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 293.372476][ T9767] [ 293.382680][ T9767] xtLookup: xtSearch returned -5 [ 293.387659][ T9767] free_index: error reading directory table [ 293.405563][ T9767] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 293.405563][ T9767] [ 293.426345][ T9767] xtLookup: xtSearch returned -5 [ 293.428768][ T5952] libceph: connect (1)[c::]:6789 error -101 [ 293.431446][ T9769] XFS (loop4): Ending clean mount [ 293.437391][ T5952] libceph: mon0 (1)[c::]:6789 connect error [ 293.452377][ T9767] free_index: error reading directory table [ 293.480580][ T9784] ceph: No mds server is up or the cluster is laggy [ 293.493951][ T9769] XFS (loop4): Quotacheck needed: Please wait. [ 293.622713][ T9769] XFS (loop4): Quotacheck: Done. [ 293.652018][ T9779] loop6: detected capacity change from 0 to 32768 [ 293.668930][ T27] audit: type=1800 audit(1752880697.899:554): pid=9769 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1609" name="file1" dev="loop4" ino=4422 res=0 errno=0 [ 293.692121][ T9779] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 scanned by syz.6.1613 (9779) [ 293.724265][ T9779] BTRFS info (device loop6): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 293.738806][ T27] audit: type=1800 audit(1752880697.909:555): pid=9769 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1609" name="file1" dev="loop4" ino=4422 res=0 errno=0 [ 293.770575][ T9779] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 293.792427][ T9779] BTRFS info (device loop6): setting nodatacow, compression disabled [ 293.810708][ T9779] BTRFS info (device loop6): enabling ssd optimizations [ 293.819817][ T9779] BTRFS info (device loop6): setting datacow [ 293.829889][ T9779] BTRFS info (device loop6): doing ref verification [ 293.837534][ T9779] BTRFS info (device loop6): force clearing of disk cache [ 293.845955][ T9779] BTRFS info (device loop6): turning off barriers [ 293.854537][ T9779] BTRFS info (device loop6): using spread ssd allocation scheme [ 293.880859][ T9779] BTRFS info (device loop6): using free space tree [ 293.934037][ T9802] loop7: detected capacity change from 0 to 512 [ 293.951802][ T9802] EXT4-fs: Ignoring removed oldalloc option [ 293.968364][ T9802] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 293.978385][ T6937] XFS (loop4): Unmounting Filesystem [ 294.164015][ T9139] EXT4-fs (loop7): unmounting filesystem. [ 294.227510][ T9779] BTRFS info (device loop6): rebuilding free space tree [ 294.295469][ T9832] loop5: detected capacity change from 0 to 512 [ 294.303187][ T9832] EXT4-fs: Ignoring removed nomblk_io_submit option [ 294.310633][ T9832] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 294.351128][ T27] audit: type=1800 audit(1752880698.579:556): pid=9779 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1613" name="file2" dev="loop6" ino=263 res=0 errno=0 [ 294.380653][ T9832] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 294.396033][ T9832] ext4 filesystem being mounted at /352/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 294.427503][ T9837] input: syz0 as /devices/virtual/input/input56 [ 294.470312][ T27] audit: type=1800 audit(1752880698.699:557): pid=9832 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1624" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 294.499562][ T9832] EXT4-fs (loop5): shut down requested (2) [ 294.558032][ T27] audit: type=1800 audit(1752880698.729:558): pid=9832 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1624" name="file2" dev="loop5" ino=16 res=0 errno=0 [ 294.581001][ T5024] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 294.610664][ T4547] EXT4-fs (loop5): unmounting filesystem. [ 294.632239][ T9825] loop2: detected capacity change from 0 to 32768 [ 294.698906][ T6934] BTRFS info (device loop6): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 294.701071][ T9825] XFS (loop2): Mounting V5 Filesystem [ 294.776115][ T9825] XFS (loop2): Ending clean mount [ 294.791453][ T9825] XFS (loop2): Quotacheck needed: Please wait. [ 294.799332][ T5024] usb 5-1: Using ep0 maxpacket: 32 [ 294.842858][ T5024] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 294.851154][ T5024] usb 5-1: config 0 has no interface number 0 [ 294.926017][ T5024] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 294.930317][ T9825] XFS (loop2): Quotacheck: Done. [ 294.941003][ T5024] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.971018][ T5024] usb 5-1: Product: syz [ 294.975211][ T5024] usb 5-1: Manufacturer: syz [ 294.979813][ T5024] usb 5-1: SerialNumber: syz [ 294.996879][ T27] audit: type=1800 audit(1752880699.229:559): pid=9825 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1623" name="file2" dev="loop2" ino=6151 res=0 errno=0 [ 294.997033][ T5024] usb 5-1: config 0 descriptor?? [ 295.055382][ T5024] smsc95xx v2.0.0 [ 295.085124][ T8297] XFS (loop2): Unmounting Filesystem [ 295.095826][ T9852] loop6: detected capacity change from 0 to 1024 [ 295.105312][ T9852] EXT4-fs: Ignoring removed nobh option [ 295.111231][ T9852] EXT4-fs: Ignoring removed bh option [ 295.117417][ T9852] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 295.153144][ T9852] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 295.171207][ T5952] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 295.204092][ T9852] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:3841: comm syz.6.1628: Allocating blocks 385-513 which overlap fs metadata [ 295.238218][ T9852] EXT4-fs (loop6): pa ffff888074475d20: logic 16, phys. 129, len 24 [ 295.247068][ T9852] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:4881: group 0, free 0, pa_free 8 [ 295.329421][ T6934] EXT4-fs (loop6): unmounting filesystem. [ 295.360936][ T5952] usb 6-1: Using ep0 maxpacket: 16 [ 295.370658][ T5952] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 295.383903][ T5952] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 295.395050][ T5952] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 295.411252][ T5952] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 295.420310][ T5952] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 295.428365][ T5952] usb 6-1: SerialNumber: syz [ 295.435825][ T5952] hub 6-1:1.0: bad descriptor, ignoring hub [ 295.441795][ T5952] hub: probe of 6-1:1.0 failed with error -5 [ 295.448209][ T5952] cdc_ether: probe of 6-1:1.0 failed with error -22 [ 295.474807][ T5024] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 295.491491][ T5024] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 295.679854][ T9861] loop2: detected capacity change from 0 to 32768 [ 295.694951][ T9861] XFS (loop2): Mounting V5 Filesystem [ 295.714034][ T9861] XFS (loop2): Ending clean mount [ 295.720490][ T9861] XFS (loop2): Quotacheck needed: Please wait. [ 295.754702][ T9861] XFS (loop2): Quotacheck: Done. [ 295.761196][ T5952] usb 6-1: USB disconnect, device number 22 [ 295.770946][ T5334] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 295.780101][ T27] audit: type=1800 audit(1752880700.009:560): pid=9861 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1632" name="file1" dev="loop2" ino=4422 res=0 errno=0 [ 295.803823][ T27] audit: type=1800 audit(1752880700.019:561): pid=9861 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1632" name="file1" dev="loop2" ino=4422 res=0 errno=0 [ 295.903043][ T5024] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 295.914568][ T5024] smsc95xx: probe of 5-1:0.67 failed with error -61 [ 295.971218][ T5334] usb 7-1: Using ep0 maxpacket: 32 [ 295.979195][ T5334] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 295.990394][ T5334] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 296.000920][ T5334] usb 7-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.00 [ 296.009992][ T5334] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.019681][ T5334] usb 7-1: config 0 descriptor?? [ 296.083251][ T8297] XFS (loop2): Unmounting Filesystem [ 296.172613][ T5952] usb 5-1: USB disconnect, device number 17 [ 296.236467][ T9874] loop5: detected capacity change from 0 to 128 [ 296.255335][ T9874] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 296.264486][ T9874] ext4 filesystem being mounted at /354/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 296.351220][ T9874] loop5: detected capacity change from 128 to 64 [ 296.361269][ T9878] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5915: Out of memory [ 296.377630][ T9878] EXT4-fs error (device loop5): ext4_ext_tree_init:879: inode #13: comm syz.5.1634: mark_inode_dirty error [ 296.390070][ T9878] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5915: Out of memory [ 296.400132][ T9878] EXT4-fs error (device loop5): __ext4_new_inode:1350: inode #13: comm syz.5.1634: mark_inode_dirty error [ 296.412844][ T9878] EXT4-fs error (device loop5) in __ext4_new_inode:1352: Out of memory [ 296.424407][ T9878] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5915: Out of memory [ 296.436412][ T5334] kye 0003:0458:0087.0029: unknown main item tag 0x0 [ 296.445223][ T5334] kye 0003:0458:0087.0029: unknown main item tag 0x0 [ 296.450971][ T9878] EXT4-fs error (device loop5): ext4_evict_inode:279: inode #13: comm syz.5.1634: mark_inode_dirty error [ 296.464184][ T5334] kye 0003:0458:0087.0029: hidraw0: USB HID v0.00 Device [HID 0458:0087] on usb-dummy_hcd.6-1/input0 [ 296.480485][ T9878] EXT4-fs warning (device loop5): ext4_evict_inode:282: couldn't mark inode dirty (err -12) [ 296.507644][ T4547] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5915: Out of memory [ 296.522398][ T4547] EXT4-fs error (device loop5): ext4_dirty_inode:6119: inode #2: comm syz-executor: mark_inode_dirty error [ 296.638820][ T5952] usb 7-1: USB disconnect, device number 17 [ 296.748860][ T9885] loop4: detected capacity change from 0 to 512 [ 296.755962][ T9885] EXT4-fs: Ignoring removed nomblk_io_submit option [ 296.765723][ T9885] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 296.797925][ T4547] EXT4-fs (loop5): unmounting filesystem. [ 296.798920][ T9885] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 296.812877][ T9885] ext4 filesystem being mounted at /159/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 296.840991][ T27] audit: type=1800 audit(1752880701.069:562): pid=9885 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1637" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 296.843533][ T9885] EXT4-fs (loop4): shut down requested (2) [ 296.862302][ T27] audit: type=1800 audit(1752880701.079:563): pid=9885 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1637" name="file2" dev="loop4" ino=16 res=0 errno=0 [ 296.946490][ T6937] EXT4-fs (loop4): unmounting filesystem. [ 297.127378][ T9890] loop4: detected capacity change from 0 to 1024 [ 297.165784][ T9890] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 297.181040][ T9890] ext4 filesystem being mounted at /160/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 297.248467][ T9890] EXT4-fs error (device loop4): ext4_map_blocks:745: inode #15: block 3: comm syz.4.1641: lblock 3 mapped to illegal pblock 3 (length 3) [ 297.267445][ T9890] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 297.307485][ T9890] EXT4-fs (loop4): This should not happen!! Data will be lost [ 297.307485][ T9890] [ 297.375219][ T9890] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #15: block 3: comm syz.4.1641: lblock 3 mapped to illegal pblock 3 (length 1) [ 297.454139][ T11] EXT4-fs error (device loop4): ext4_map_blocks:745: inode #15: comm kworker/u4:1: lblock 0 mapped to illegal pblock 0 (length 1) [ 297.472986][ T11] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 297.486907][ T11] EXT4-fs (loop4): This should not happen!! Data will be lost [ 297.486907][ T11] [ 297.510459][ T11] EXT4-fs error (device loop4): ext4_map_blocks:745: inode #15: block 8: comm kworker/u4:1: lblock 8 mapped to illegal pblock 8 (length 8) [ 297.521837][ T4281] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 297.534516][ T4281] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 297.535523][ T11] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 297.555394][ T4281] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 297.563424][ T11] EXT4-fs (loop4): This should not happen!! Data will be lost [ 297.563424][ T11] [ 297.574672][ T4281] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 297.580619][ T6937] EXT4-fs (loop4): unmounting filesystem. [ 297.589413][ T4281] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 297.608546][ T4281] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 297.751400][ T5024] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 297.962714][ T5024] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 297.981009][ T5024] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 298.003312][ T9900] chnl_net:caif_netlink_parms(): no params data found [ 298.011252][ T5024] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 298.020552][ T5024] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 298.040881][ T5024] usb 7-1: SerialNumber: syz [ 298.126713][ T9903] loop4: detected capacity change from 0 to 32768 [ 298.167491][ T9900] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.174783][ T9900] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.183128][ T9900] device bridge_slave_0 entered promiscuous mode [ 298.192393][ T9900] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.199553][ T9900] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.208747][ T9900] device bridge_slave_1 entered promiscuous mode [ 298.219108][ T9903] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode. [ 298.257670][ T5024] usb 7-1: 0:2 : does not exist [ 298.273997][ T5024] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 298.303654][ T5024] usb 7-1: USB disconnect, device number 18 [ 298.309601][ T27] audit: type=1800 audit(1752880702.539:564): pid=9903 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1645" name="file1" dev="loop4" ino=17058 res=0 errno=0 [ 298.343756][ T9900] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 298.378425][ T9900] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 298.426282][ T6937] ocfs2: Unmounting device (7,4) on (node local) [ 298.506388][ T9900] team0: Port device team_slave_0 added [ 298.531344][ T4283] Bluetooth: hci2: command 0x0406 tx timeout [ 298.531350][ T4281] Bluetooth: hci4: command 0x0406 tx timeout [ 298.553471][ T9900] team0: Port device team_slave_1 added [ 298.619552][ T9900] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 298.638588][ T9900] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 298.690958][ T9900] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 298.706942][ T9910] loop7: detected capacity change from 0 to 32768 [ 298.725317][ T9900] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 298.726764][ T9910] ERROR: (device loop7): xtSearch: XT_GETPAGE: xtree page corrupt [ 298.726764][ T9910] [ 298.740889][ T9900] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 298.747539][ T9910] xtLookup: xtSearch returned -5 [ 298.797696][ T9910] add_index: get/read_metapage failed! [ 298.799253][ T9900] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 298.803210][ T9910] ERROR: (device loop7): xtSearch: XT_GETPAGE: xtree page corrupt [ 298.803210][ T9910] [ 298.868527][ T9910] xtLookup: xtSearch returned -5 [ 298.877106][ T9910] free_index: error reading directory table [ 298.889238][ T9910] ERROR: (device loop7): xtSearch: XT_GETPAGE: xtree page corrupt [ 298.889238][ T9910] [ 298.916398][ T9910] xtLookup: xtSearch returned -5 [ 298.925418][ T9910] free_index: error reading directory table [ 298.927704][ T9900] device hsr_slave_0 entered promiscuous mode [ 298.947862][ T9910] ERROR: (device loop7): xtSearch: XT_GETPAGE: xtree page corrupt [ 298.947862][ T9910] [ 298.965898][ T9900] device hsr_slave_1 entered promiscuous mode [ 298.970880][ T9910] xtLookup: xtSearch returned -5 [ 298.980912][ T9910] free_index: error reading directory table [ 298.986866][ T9910] ERROR: (device loop7): xtSearch: XT_GETPAGE: xtree page corrupt [ 298.986866][ T9910] [ 298.997181][ T9900] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 299.017297][ T9910] xtLookup: xtSearch returned -5 [ 299.022270][ T9900] Cannot create hsr debugfs directory [ 299.034498][ T9910] free_index: error reading directory table [ 299.044732][ T9910] ERROR: (device loop7): xtSearch: XT_GETPAGE: xtree page corrupt [ 299.044732][ T9910] [ 299.056056][ T9910] xtLookup: xtSearch returned -5 [ 299.075709][ T9910] free_index: error reading directory table [ 299.098089][ T9920] loop6: detected capacity change from 0 to 8192 [ 299.579652][ T9934] loop7: detected capacity change from 0 to 1024 [ 299.672221][ T4282] Bluetooth: hci1: command 0x0409 tx timeout [ 299.694058][ T9934] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 299.710938][ T9934] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 299.736527][ T9934] EXT4-fs error (device loop7): ext4_map_blocks:745: inode #15: block 3: comm syz.7.1655: lblock 3 mapped to illegal pblock 3 (length 3) [ 299.751279][ T9934] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 299.790438][ T9900] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 299.794869][ T9934] EXT4-fs (loop7): This should not happen!! Data will be lost [ 299.794869][ T9934] [ 299.813739][ T9900] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 299.834417][ T9900] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 299.841834][ T9934] EXT4-fs error (device loop7): ext4_map_blocks:635: inode #15: block 3: comm syz.7.1655: lblock 3 mapped to illegal pblock 3 (length 1) [ 299.858398][ T9945] loop6: detected capacity change from 0 to 1024 [ 299.875179][ T9900] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 299.885424][ T9945] Quota error (device loop6): do_check_range: Getting block 64 out of range 1-5 [ 299.904349][ T9945] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 299.922967][ T61] EXT4-fs error (device loop7): ext4_map_blocks:745: inode #15: comm kworker/u4:4: lblock 0 mapped to illegal pblock 0 (length 1) [ 299.941973][ T9945] EXT4-fs error (device loop6): ext4_acquire_dquot:6814: comm syz.6.1657: Failed to acquire dquot type 0 [ 299.956974][ T61] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 299.982443][ T9945] EXT4-fs error (device loop6): mb_free_blocks:1815: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 300.002066][ T61] EXT4-fs (loop7): This should not happen!! Data will be lost [ 300.002066][ T61] [ 300.031829][ T61] EXT4-fs error (device loop7): ext4_map_blocks:745: inode #15: block 8: comm kworker/u4:4: lblock 8 mapped to illegal pblock 8 (length 8) [ 300.052998][ T9945] EXT4-fs error (device loop6): ext4_do_update_inode:5254: inode #13: comm syz.6.1657: corrupted inode contents [ 300.089319][ T61] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 300.106362][ T9945] EXT4-fs error (device loop6): ext4_dirty_inode:6119: inode #13: comm syz.6.1657: mark_inode_dirty error [ 300.123027][ T61] EXT4-fs (loop7): This should not happen!! Data will be lost [ 300.123027][ T61] [ 300.151329][ T9945] EXT4-fs error (device loop6): ext4_do_update_inode:5254: inode #13: comm syz.6.1657: corrupted inode contents [ 300.167268][ T9900] 8021q: adding VLAN 0 to HW filter on device bond0 [ 300.183979][ T9139] EXT4-fs (loop7): unmounting filesystem. [ 300.187121][ T4589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 300.204682][ T4589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 300.212340][ T9945] EXT4-fs error (device loop6): __ext4_ext_dirty:202: inode #13: comm syz.6.1657: mark_inode_dirty error [ 300.218013][ T9900] 8021q: adding VLAN 0 to HW filter on device team0 [ 300.237739][ T4589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 300.248443][ T4589] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 300.272300][ T9945] EXT4-fs error (device loop6): ext4_do_update_inode:5254: inode #13: comm syz.6.1657: corrupted inode contents [ 300.281310][ T4589] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.291241][ T4589] bridge0: port 1(bridge_slave_0) entered forwarding state [ 300.303008][ T9945] EXT4-fs error (device loop6) in ext4_orphan_del:305: Corrupt filesystem [ 300.346141][ T9945] EXT4-fs error (device loop6): ext4_do_update_inode:5254: inode #13: comm syz.6.1657: corrupted inode contents [ 300.346182][ T4589] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 300.375348][ T9945] EXT4-fs error (device loop6): ext4_truncate:4312: inode #13: comm syz.6.1657: mark_inode_dirty error [ 300.387276][ T4589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 300.400203][ T4589] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 300.408780][ T4589] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.415905][ T4589] bridge0: port 2(bridge_slave_1) entered forwarding state [ 300.429374][ T9945] EXT4-fs error (device loop6) in ext4_process_orphan:347: Corrupt filesystem [ 300.429797][ T4589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 300.456925][ T9945] EXT4-fs (loop6): 1 truncate cleaned up [ 300.464338][ T4589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 300.470923][ T9945] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 300.489640][ T4589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 300.509328][ T4589] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 300.524720][ T4589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 300.535046][ T4589] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 300.546666][ T4589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 300.556502][ T4589] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 300.569458][ T9945] EXT4-fs (loop6): re-mounted. Quota mode: writeback. [ 300.583729][ T9900] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 300.604337][ T9900] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 300.618135][ T4589] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 300.627328][ T4589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 300.650280][ T4589] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 300.672676][ T9959] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended [ 300.716490][ T9959] Quota error (device loop6): do_check_range: Getting block 64 out of range 1-5 [ 300.740558][ T9959] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 300.773472][ T9959] EXT4-fs error (device loop6): ext4_acquire_dquot:6814: comm syz.6.1657: Failed to acquire dquot type 0 [ 300.837041][ T9959] EXT4-fs (loop6): re-mounted. Quota mode: writeback. [ 300.938494][ T6934] EXT4-fs (loop6): unmounting filesystem. [ 301.095852][ T4589] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 301.109808][ T9954] loop7: detected capacity change from 0 to 40427 [ 301.111428][ T4589] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 301.137584][ T9954] F2FS-fs (loop7): invalid crc value [ 301.154432][ T9900] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 301.175140][ T9954] F2FS-fs (loop7): Found nat_bits in checkpoint [ 301.276121][ T9954] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 301.596261][ T9139] syz-executor: attempt to access beyond end of device [ 301.596261][ T9139] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 301.730925][ T4282] Bluetooth: hci1: command 0x041b tx timeout [ 302.171931][ T72] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 302.201217][ T72] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 302.272518][ T72] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 302.311522][ T72] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 302.351846][ T72] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 302.390224][ T72] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 302.396316][ T9990] loop7: detected capacity change from 0 to 8192 [ 302.419654][ T9900] device veth0_vlan entered promiscuous mode [ 302.474507][ T9900] device veth1_vlan entered promiscuous mode [ 302.582302][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 302.616188][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 302.642421][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 302.662280][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 302.683984][ T9900] device veth0_macvtap entered promiscuous mode [ 302.700702][ T9900] device veth1_macvtap entered promiscuous mode [ 302.746593][ T9900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 302.770884][ T9900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.780722][ T9900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 302.810870][ T9900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.821107][ T9900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 302.832464][ T9900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.844612][ T9900] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 302.857651][ T9900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.868473][ T9900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.879372][ T9900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.889974][ T9900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.899812][ T9900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.921443][ T9900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.949231][ T9900] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 302.967146][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 302.995463][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 303.026265][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 303.041886][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 303.061045][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 303.069718][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 303.081167][ T5945] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 303.111700][ T9900] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.120423][ T9900] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.135975][ T9900] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.148203][ T9900] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.291036][ T5945] usb 7-1: Using ep0 maxpacket: 8 [ 303.303913][ T5945] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 303.318763][ T72] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 303.333744][ T5945] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.347824][ T72] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.355666][ T5945] usb 7-1: Product: syz [ 303.359875][ T5945] usb 7-1: Manufacturer: syz [ 303.376565][ T4589] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 303.387602][ T5945] usb 7-1: SerialNumber: syz [ 303.397245][ T5945] usb 7-1: config 0 descriptor?? [ 303.400493][T10009] netlink: 232 bytes leftover after parsing attributes in process `syz.4.1672'. [ 303.443818][ T72] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 303.463044][ T72] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.498418][ T4589] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 303.618929][ T5945] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 303.682685][T10003] loop7: detected capacity change from 0 to 32768 [ 303.713143][T10014] loop4: detected capacity change from 0 to 4096 [ 303.728134][T10014] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 303.752261][T10003] XFS (loop7): Mounting V5 Filesystem [ 303.807888][T10003] XFS (loop7): Ending clean mount [ 303.813910][ T4282] Bluetooth: hci1: command 0x040f tx timeout [ 303.831062][T10003] XFS (loop7): Quotacheck needed: Please wait. [ 303.853218][ T5945] dvb_usb_rtl28xxu: probe of 7-1:0.0 failed with error -71 [ 303.867182][ T5945] usb 7-1: USB disconnect, device number 19 [ 303.900906][ T5334] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 303.948778][T10003] XFS (loop7): Quotacheck: Done. [ 303.989346][ T27] audit: type=1800 audit(1752880708.219:565): pid=10003 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1668" name="file1" dev="loop7" ino=4422 res=0 errno=0 [ 304.061098][ T27] audit: type=1800 audit(1752880708.259:566): pid=10003 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1668" name="file1" dev="loop7" ino=4422 res=0 errno=0 [ 304.110886][ T5334] usb 10-1: Using ep0 maxpacket: 32 [ 304.118553][ T5334] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 304.141381][ T5334] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 304.160707][ T5334] usb 10-1: New USB device found, idVendor=0733, idProduct=0402, bcdDevice=ef.67 [ 304.195221][ T5334] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.211126][ T5334] usb 10-1: Product: syz [ 304.217719][ T5334] usb 10-1: Manufacturer: syz [ 304.232850][ T5334] usb 10-1: SerialNumber: syz [ 304.251678][ T5334] usb 10-1: config 0 descriptor?? [ 304.260549][ T5334] gspca_main: spca501-2.14.0 probing 0733:0402 [ 304.335644][ T9139] XFS (loop7): Unmounting Filesystem [ 304.539869][T10043] loop6: detected capacity change from 0 to 1024 [ 304.605840][T10043] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 304.621166][T10043] ext4 filesystem being mounted at /168/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 304.738477][ T6934] EXT4-fs (loop6): unmounting filesystem. [ 304.748076][T10038] loop2: detected capacity change from 0 to 32768 [ 304.756266][T10038] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop2 scanned by syz.2.1681 (10038) [ 304.795426][T10038] BTRFS info (device loop2): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 304.818601][T10038] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 304.834447][T10038] BTRFS info (device loop2): setting nodatacow, compression disabled [ 304.842887][T10038] BTRFS info (device loop2): turning on flush-on-commit [ 304.850141][T10038] BTRFS info (device loop2): using free space tree [ 305.023670][T10038] BTRFS info (device loop2): enabling ssd optimizations [ 305.105167][ T8297] BTRFS info (device loop2): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 305.339523][T10053] loop6: detected capacity change from 0 to 32768 [ 305.356707][T10053] XFS: noikeep mount option is deprecated. [ 305.415795][T10081] loop7: detected capacity change from 0 to 512 [ 305.424176][T10081] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 305.438002][T10081] EXT4-fs (loop7): 1 truncate cleaned up [ 305.444499][T10081] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 305.453911][T10053] XFS (loop6): Mounting V5 Filesystem [ 305.476257][ T5334] gspca_spca501: reg write: error -71 [ 305.481847][ T5334] spca501 10-1:0.0: Reg write failed for 0x00,0x00,0x05 [ 305.500948][ T5334] spca501: probe of 10-1:0.0 failed with error -22 [ 305.516902][ T5334] usb 10-1: USB disconnect, device number 4 [ 305.544760][T10053] XFS (loop6): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 305.570890][T10053] XFS (loop6): Starting recovery (logdev: internal) [ 305.587807][ T9139] EXT4-fs (loop7): unmounting filesystem. [ 305.631644][T10053] XFS (loop6): Ending recovery (logdev: internal) [ 305.726877][ T6934] XFS (loop6): Unmounting Filesystem [ 305.891007][ T4282] Bluetooth: hci1: command 0x0419 tx timeout [ 305.930875][ T5027] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 306.126515][ T5027] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 306.146655][ T5027] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 306.169290][T10104] loop7: detected capacity change from 0 to 1024 [ 306.171466][ T5027] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 306.187483][T10104] EXT4-fs: Ignoring removed orlov option [ 306.203647][ T5027] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.218671][T10104] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 306.220955][ T5027] usb 3-1: Product: syz [ 306.231925][ T5027] usb 3-1: Manufacturer: syz [ 306.236531][ T5027] usb 3-1: SerialNumber: syz [ 306.354986][ T9139] EXT4-fs (loop7): unmounting filesystem. [ 306.447352][ T5027] usb 3-1: 0:2 : does not exist [ 306.473491][ T5027] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 306.528563][ T5027] usb 3-1: USB disconnect, device number 10 [ 306.587851][T10102] loop9: detected capacity change from 0 to 32768 [ 306.615284][T10102] XFS (loop9): Mounting V5 Filesystem [ 306.654604][T10102] XFS (loop9): Ending clean mount [ 306.670447][T10102] XFS (loop9): Quotacheck needed: Please wait. [ 306.786581][T10121] loop4: detected capacity change from 0 to 128 [ 306.795557][T10102] XFS (loop9): Quotacheck: Done. [ 306.805330][T10121] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 306.830454][ T27] audit: type=1800 audit(1752880711.059:567): pid=10102 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1693" name="file1" dev="loop9" ino=4422 res=0 errno=0 [ 306.854558][T10121] ext4 filesystem being mounted at /183/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 306.887256][ T27] audit: type=1800 audit(1752880711.129:568): pid=10102 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1693" name="file1" dev="loop9" ino=4422 res=0 errno=0 [ 306.939033][T10109] loop7: detected capacity change from 0 to 32768 [ 306.946324][T10109] XFS: ikeep mount option is deprecated. [ 306.955812][T10109] XFS (loop7): Mounting V5 Filesystem [ 306.988666][ T6937] EXT4-fs (loop4): unmounting filesystem. [ 306.996346][T10109] XFS (loop7): Ending clean mount [ 307.035594][T10109] XFS (loop7): Quotacheck needed: Please wait. [ 307.061692][ T5952] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 307.108677][T10109] XFS (loop7): Quotacheck: Done. [ 307.153110][ T9900] XFS (loop9): Unmounting Filesystem [ 307.262931][ T9139] XFS (loop7): Unmounting Filesystem [ 307.277733][ T5952] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 307.290690][ T5952] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 307.312835][ T5952] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 307.326042][ T5952] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 307.336170][ T5952] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.346684][ T5952] usb 7-1: config 0 descriptor?? [ 307.450969][ T5021] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 307.665602][ T5021] usb 3-1: Using ep0 maxpacket: 8 [ 307.672389][ T5021] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 307.680662][ T5021] usb 3-1: config 179 has no interface number 0 [ 307.723611][ T5021] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 307.754853][ T5021] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 307.762265][ T5952] plantronics 0003:047F:FFFF.002A: No inputs registered, leaving [ 307.786643][ T5021] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 307.792569][ T5952] plantronics 0003:047F:FFFF.002A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 307.803554][T10137] loop4: detected capacity change from 0 to 32768 [ 307.826925][ T5021] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 307.854440][ T5021] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 307.868145][ T5021] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.885093][T10135] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 307.902608][T10137] XFS (loop4): Mounting V5 Filesystem [ 307.949231][T10137] XFS (loop4): Ending clean mount [ 307.957416][T10137] XFS (loop4): Quotacheck needed: Please wait. [ 308.034725][T10137] XFS (loop4): Quotacheck: Done. [ 308.052776][ T27] audit: type=1800 audit(1752880712.289:569): pid=10137 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1713" name="file1" dev="loop4" ino=4422 res=0 errno=0 [ 308.074774][ T27] audit: type=1800 audit(1752880712.299:570): pid=10137 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1713" name="file1" dev="loop4" ino=4422 res=0 errno=0 [ 308.127417][ T5021] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input58 [ 308.317958][ T5952] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 308.327098][ T5021] usb 3-1: USB disconnect, device number 11 [ 308.327131][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 308.341345][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 308.356217][ T6937] XFS (loop4): Unmounting Filesystem [ 308.363679][ T5021] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 308.500999][ T5952] usb 10-1: Using ep0 maxpacket: 32 [ 308.508782][ T5952] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 308.521068][ T5952] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 308.533056][ T5952] usb 10-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 308.546979][ T5952] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.557870][ T5952] usb 10-1: config 0 descriptor?? [ 308.571537][ T5952] hub 10-1:0.0: USB hub found [ 308.602392][T10160] loop4: detected capacity change from 0 to 2048 [ 308.623012][T10160] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 308.781505][ T5952] hub 10-1:0.0: 1 port detected [ 309.044977][T10165] loop7: detected capacity change from 0 to 32768 [ 309.052583][T10165] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop7 scanned by syz.7.1707 (10165) [ 309.067344][T10165] BTRFS info (device loop7): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 309.077853][T10165] BTRFS info (device loop7): using sha256 (sha256-avx2) checksum algorithm [ 309.086738][T10165] BTRFS info (device loop7): setting nodatacow, compression disabled [ 309.095670][T10165] BTRFS info (device loop7): enabling ssd optimizations [ 309.102866][T10165] BTRFS info (device loop7): setting datacow [ 309.108867][T10165] BTRFS info (device loop7): doing ref verification [ 309.115575][T10165] BTRFS info (device loop7): force clearing of disk cache [ 309.122816][T10165] BTRFS info (device loop7): turning off barriers [ 309.129425][T10165] BTRFS info (device loop7): using spread ssd allocation scheme [ 309.137218][T10165] BTRFS info (device loop7): using free space tree [ 309.162532][T10165] BTRFS info (device loop7): rebuilding free space tree [ 309.202287][ T27] audit: type=1800 audit(1752880713.439:571): pid=10165 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1707" name="file2" dev="loop7" ino=263 res=0 errno=0 [ 309.292557][ T5945] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 309.393158][ T5952] hub 10-1:0.0: activate --> -90 [ 309.506342][ T5945] usb 3-1: Using ep0 maxpacket: 16 [ 309.516793][ T5945] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 309.534689][ T5945] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.554083][ T5945] usb 3-1: Product: syz [ 309.561186][ T5945] usb 3-1: Manufacturer: syz [ 309.565852][ T5945] usb 3-1: SerialNumber: syz [ 309.587884][ T5945] usb 3-1: config 0 descriptor?? [ 309.603904][ T5945] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 309.801642][ T5944] usb 10-1: USB disconnect, device number 5 [ 309.836593][ T9139] BTRFS info (device loop7): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 309.958665][ T5946] usb 7-1: USB disconnect, device number 20 [ 310.044631][ T5952] usb 10-1-port1: config error [ 310.706344][T10203] loop6: detected capacity change from 0 to 32768 [ 310.724111][T10203] XFS (loop6): Mounting V5 Filesystem [ 310.755420][T10203] XFS (loop6): Ending clean mount [ 310.767264][T10203] XFS (loop6): Quotacheck needed: Please wait. [ 310.813859][T10208] loop7: detected capacity change from 0 to 32768 [ 310.840558][ T5945] ssu100: probe of 3-1:0.0 failed with error -71 [ 310.852859][T10208] XFS (loop7): Mounting V5 Filesystem [ 310.859543][ T5945] usb 3-1: USB disconnect, device number 12 [ 310.868958][T10203] XFS (loop6): Quotacheck: Done. [ 310.893612][ T27] audit: type=1800 audit(1752880715.129:572): pid=10203 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1718" name="file1" dev="loop6" ino=4422 res=0 errno=0 [ 310.924394][ T27] audit: type=1800 audit(1752880715.129:573): pid=10203 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1718" name="file1" dev="loop6" ino=4422 res=0 errno=0 [ 310.974959][T10208] XFS (loop7): Tail block (0x40) overwrite detected. Updated to 0x80 [ 310.992729][T10208] XFS (loop7): Starting recovery (logdev: internal) [ 311.004540][T10208] XFS (loop7): Ending recovery (logdev: internal) [ 311.039556][ T5944] XFS (loop7): Metadata CRC error detected at xfs_rmapbt_read_verify+0x3a/0xd0, xfs_rmapbt block 0x14 [ 311.051482][ T5944] XFS (loop7): Unmount and run xfs_repair [ 311.057325][ T5944] XFS (loop7): First 128 bytes of corrupted metadata buffer: [ 311.064968][ T5944] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff RMB3............ [ 311.073963][ T5944] 00000010: 00 00 00 00 00 00 00 14 00 00 00 01 00 00 00 40 ...............@ [ 311.083443][ T5944] 00000020: 9f 91 83 2a 3b 79 45 c3 9d 6d 06 0b c7 35 7f e4 ...*;yE..m...5.. [ 311.095318][ T5944] 00000030: 00 00 00 00 23 eb 6e b5 00 00 00 00 00 00 00 01 ....#.n......... [ 311.107172][ T5944] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00 ................ [ 311.116168][ T5944] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb ................ [ 311.126640][ T5944] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02 ................ [ 311.135802][ T5944] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00 ................ [ 311.146898][T10208] XFS (loop7): metadata I/O error in "xfs_btree_read_buf_block+0x1d3/0x2c0" at daddr 0x14 len 4 error 74 [ 311.170303][T10230] XFS (loop7): Corruption warning: Metadata has LSN (8192:64) ahead of current LSN (1:192). Please unmount and run xfs_repair (>= v4.3) to resolve. [ 311.193892][T10208] XFS (loop7): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x1784/0x1e50 (fs/xfs/libxfs/xfs_defer.c:580). Shutting down filesystem. [ 311.199695][T10230] XFS (loop7): Metadata CRC error detected at xfs_allocbt_read_verify+0x3a/0xd0, xfs_bnobt block 0x4 [ 311.229915][T10230] XFS (loop7): Unmount and run xfs_repair [ 311.236049][T10230] XFS (loop7): First 128 bytes of corrupted metadata buffer: [ 311.243693][T10230] 00000000: 53 55 4d 59 00 00 00 02 ff ff ff ff ff ff ff ff SUMY............ [ 311.252884][T10230] 00000010: 00 00 00 00 00 00 00 04 00 00 20 00 00 00 00 40 .......... ....@ [ 311.262010][T10230] 00000020: 9f 91 83 2a 3b 79 45 c3 9d 6d ed 0b c7 35 7f e4 ...*;yE..m...5.. [ 311.271267][T10230] 00000030: 00 00 00 00 25 47 cc 81 00 00 00 0d 00 00 00 03 ....%G.......... [ 311.278094][T10208] XFS (loop7): Please unmount the filesystem and rectify the problem(s) [ 311.281096][T10230] 00000040: 00 00 0e a8 00 00 11 58 00 00 00 00 00 00 00 00 .......X........ [ 311.297803][T10230] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 311.313890][T10230] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 311.322935][T10230] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 311.333223][ T6934] XFS (loop6): Unmounting Filesystem [ 311.602772][ T9139] XFS (loop7): Unmounting Filesystem [ 311.714273][ T4338] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 311.838962][T10237] loop2: detected capacity change from 0 to 32768 [ 311.854435][T10237] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.1725 (10237) [ 311.875866][T10237] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 311.896678][T10237] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 311.912573][ T4338] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 311.924866][T10237] BTRFS info (device loop2): setting nodatacow, compression disabled [ 311.928295][ T4338] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 311.940525][T10237] BTRFS info (device loop2): enabling ssd optimizations [ 311.943526][ T4338] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 311.955455][T10237] BTRFS info (device loop2): setting datacow [ 311.969175][T10237] BTRFS info (device loop2): doing ref verification [ 311.973773][ T4338] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 311.976175][T10237] BTRFS info (device loop2): force clearing of disk cache [ 311.993850][ T4338] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.995525][T10237] BTRFS info (device loop2): turning off barriers [ 312.004127][ T4338] usb 10-1: config 0 descriptor?? [ 312.009595][T10237] BTRFS info (device loop2): using spread ssd allocation scheme [ 312.021713][T10237] BTRFS info (device loop2): using free space tree [ 312.048026][T10237] BTRFS info (device loop2): rebuilding free space tree [ 312.085529][ T27] audit: type=1800 audit(1752880716.319:574): pid=10237 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1725" name="file2" dev="loop2" ino=263 res=0 errno=0 [ 312.445146][ T4338] plantronics 0003:047F:FFFF.002B: No inputs registered, leaving [ 312.480122][ T4338] plantronics 0003:047F:FFFF.002B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 312.505757][T10263] loop6: detected capacity change from 0 to 1024 [ 312.522899][ T8297] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 312.648760][T10269] loop7: detected capacity change from 0 to 1024 [ 312.715272][T10269] EXT4-fs (loop7): Test dummy encryption mode enabled [ 312.795908][T10269] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 313.092282][ T9139] EXT4-fs (loop7): unmounting filesystem. [ 313.180870][ T5334] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 313.212459][ T72] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.372766][ T5334] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 313.419348][ T5334] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 313.439773][ T5334] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 313.461760][ T5334] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 313.476384][ T5334] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.498018][ T5334] usb 7-1: config 0 descriptor?? [ 313.559515][ T72] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.665519][ T72] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.716009][ T4282] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 313.738776][ T4282] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 313.747835][ T4282] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 313.750725][ T72] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.769822][ T4282] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 313.785657][ T4282] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 313.794944][ T4282] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 313.979013][ T5334] plantronics 0003:047F:FFFF.002C: ignoring exceeding usage max [ 314.001102][ T5334] plantronics 0003:047F:FFFF.002C: No inputs registered, leaving [ 314.020573][ T5334] plantronics 0003:047F:FFFF.002C: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 314.166229][T10296] chnl_net:caif_netlink_parms(): no params data found [ 314.259351][T10299] loop2: detected capacity change from 0 to 40427 [ 314.267379][ T4399] usb 7-1: USB disconnect, device number 21 [ 314.287015][T10296] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.295996][T10296] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.308446][T10296] device bridge_slave_0 entered promiscuous mode [ 314.308915][T10299] F2FS-fs (loop2): Found nat_bits in checkpoint [ 314.345869][T10296] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.380401][T10296] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.399284][T10296] device bridge_slave_1 entered promiscuous mode [ 314.406567][T10299] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 314.406621][T10310] loop9: detected capacity change from 0 to 512 [ 314.449721][T10310] EXT4-fs error (device loop9): ext4_xattr_inode_iget:404: comm syz.9.1746: inode #1: comm syz.9.1746: iget: illegal inode # [ 314.457344][T10305] f2fs_ckpt-7:2: attempt to access beyond end of device [ 314.457344][T10305] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 314.486088][T10310] EXT4-fs error (device loop9): ext4_xattr_inode_iget:409: comm syz.9.1746: error while reading EA inode 1 err=-117 [ 314.506613][T10310] EXT4-fs warning (device loop9): ext4_expand_extra_isize_ea:2818: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 314.520713][T10310] EXT4-fs error (device loop9): ext4_xattr_inode_iget:404: comm syz.9.1746: inode #1: comm syz.9.1746: iget: illegal inode # [ 314.537024][T10310] EXT4-fs error (device loop9): ext4_xattr_inode_iget:409: comm syz.9.1746: error while reading EA inode 1 err=-117 [ 314.565210][T10310] EXT4-fs (loop9): 1 orphan inode deleted [ 314.579591][T10310] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 314.594901][T10296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 314.607827][T10296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 314.666632][ T4316] usb 10-1: USB disconnect, device number 6 [ 314.699836][ T9900] EXT4-fs error (device loop9): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 314.728747][T10296] team0: Port device team_slave_0 added [ 314.738336][T10296] team0: Port device team_slave_1 added [ 314.826294][T10296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 314.843561][T10296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 314.886292][T10296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 314.948862][T10296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 314.958352][T10296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 315.004837][T10296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 315.234255][T10296] device hsr_slave_0 entered promiscuous mode [ 315.247574][T10296] device hsr_slave_1 entered promiscuous mode [ 315.255527][T10296] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 315.268043][T10296] Cannot create hsr debugfs directory [ 315.284862][T10325] loop2: detected capacity change from 0 to 1764 [ 315.360261][ T9900] EXT4-fs (loop9): unmounting filesystem. [ 315.463804][ T72] device hsr_slave_0 left promiscuous mode [ 315.477069][ T72] device hsr_slave_1 left promiscuous mode [ 315.497006][ T72] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 315.514867][ T72] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 315.537384][ T72] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 315.560867][ T72] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 315.568617][ T72] device bridge_slave_1 left promiscuous mode [ 315.580073][ T72] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.589283][ T72] device bridge_slave_0 left promiscuous mode [ 315.601869][ T72] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.686749][T10329] tls_set_device_offload_rx: netdev not found [ 315.695269][ T72] device veth1_macvtap left promiscuous mode [ 315.702414][ T72] device veth0_macvtap left promiscuous mode [ 315.708584][ T72] device veth1_vlan left promiscuous mode [ 315.718417][ T72] device veth0_vlan left promiscuous mode [ 315.891190][ T4283] Bluetooth: hci4: command 0x0409 tx timeout [ 315.992907][ T27] audit: type=1326 audit(1752880720.229:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10334 comm="syz.2.1758" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efdf978e9a9 code=0x0 [ 316.041802][ T4282] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 316.054760][ T4282] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 316.075581][ T4282] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 316.085716][ T4282] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 316.102585][ T4281] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 316.109948][ T4281] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 316.366809][ T4715] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 316.496473][ T72] team0 (unregistering): Port device team_slave_1 removed [ 316.549690][ T72] team0 (unregistering): Port device team_slave_0 removed [ 316.560887][ T4715] usb 3-1: Using ep0 maxpacket: 16 [ 316.567804][ T4715] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 316.576843][ T4715] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 316.587383][ T4715] usb 3-1: config 0 has no interface number 0 [ 316.595343][ T4715] usb 3-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 316.604593][ T4715] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 316.613358][ T4715] usb 3-1: Product: syz [ 316.617715][ T4715] usb 3-1: SerialNumber: syz [ 316.639837][ T4715] usb 3-1: config 0 descriptor?? [ 316.648800][ T72] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 316.684394][ T4715] snd-usb-audio: probe of 3-1:0.2 failed with error -2 [ 316.724658][ T72] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 316.937730][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.946637][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.130775][T10348] loop7: detected capacity change from 0 to 4096 [ 317.167131][T10348] ntfs3: loop7: Mark volume as dirty due to NTFS errors [ 317.246853][T10348] ntfs3: loop7: Failed to load $Extend. [ 317.547693][T10351] loop7: detected capacity change from 0 to 1024 [ 317.580399][ T72] bond0 (unregistering): Released all slaves [ 317.600371][T10351] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 317.655431][ T9139] EXT4-fs (loop7): unmounting filesystem. [ 317.708086][T10333] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1756'. [ 317.971015][ T4281] Bluetooth: hci4: command 0x041b tx timeout [ 318.108672][T10366] loop6: detected capacity change from 0 to 64 [ 318.160714][T10337] chnl_net:caif_netlink_parms(): no params data found [ 318.216857][T10368] use of bytesused == 0 is deprecated and will be removed in the future, [ 318.230695][ T4281] Bluetooth: hci1: command 0x0409 tx timeout [ 318.239986][T10368] use the actual size instead. [ 318.342966][T10337] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.352297][T10337] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.360420][T10337] device bridge_slave_0 entered promiscuous mode [ 318.378793][T10337] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.386947][T10337] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.400025][T10337] device bridge_slave_1 entered promiscuous mode [ 318.527945][T10337] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 318.547153][T10337] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 318.599835][T10337] team0: Port device team_slave_0 added [ 318.618387][T10380] loop7: detected capacity change from 0 to 512 [ 318.627803][T10380] EXT4-fs: Ignoring removed nomblk_io_submit option [ 318.629424][T10337] team0: Port device team_slave_1 added [ 318.640435][T10380] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 318.699538][T10380] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 318.705907][T10383] loop6: detected capacity change from 0 to 1024 [ 318.709469][T10380] ext4 filesystem being mounted at /69/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 318.716300][T10383] EXT4-fs: Ignoring removed nobh option [ 318.736861][T10337] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 318.744209][T10337] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 318.751027][T10383] EXT4-fs: Ignoring removed bh option [ 318.776530][T10337] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 318.782528][ T27] audit: type=1800 audit(1752880723.019:576): pid=10380 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1772" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 318.839028][ T27] audit: type=1800 audit(1752880723.049:577): pid=10380 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1772" name="file2" dev="loop7" ino=16 res=0 errno=0 [ 318.851793][T10383] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 318.860168][ T27] audit: type=1800 audit(1752880723.049:578): pid=10380 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1772" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 318.879257][ T9139] EXT4-fs (loop7): unmounting filesystem. [ 318.917465][ T72] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.950655][T10337] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 318.964335][T10337] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 319.008818][T10337] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 319.047456][T10296] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 319.073783][T10383] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:3841: comm syz.6.1773: Allocating blocks 497-513 which overlap fs metadata [ 319.094300][ T72] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.106153][T10383] EXT4-fs (loop6): pa ffff8880745e98c0: logic 256, phys. 385, len 8 [ 319.114574][ T5021] usb 3-1: USB disconnect, device number 13 [ 319.121228][T10383] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:4881: group 0, free 0, pa_free 1 [ 319.137053][T10296] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 319.157782][T10296] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 319.186847][T10296] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 319.234037][ T72] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.265811][T10337] device hsr_slave_0 entered promiscuous mode [ 319.278132][T10337] device hsr_slave_1 entered promiscuous mode [ 319.286705][T10337] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 319.296952][T10337] Cannot create hsr debugfs directory [ 319.316406][ T6934] EXT4-fs (loop6): unmounting filesystem. [ 319.351331][ T72] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.563329][T10296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 319.648668][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 319.657971][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 319.670606][T10296] 8021q: adding VLAN 0 to HW filter on device team0 [ 319.759010][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 319.767811][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 319.776536][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.783650][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 319.791942][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 319.800650][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 319.811461][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.818687][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 319.827021][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 319.858690][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 319.875410][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 319.887730][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 319.898358][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 319.906838][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 319.938539][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 319.950738][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 319.973633][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 319.982959][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 319.995394][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 320.006703][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 320.040665][T10296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 320.061018][ T4281] Bluetooth: hci4: command 0x040f tx timeout [ 320.145807][T10420] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1783'. [ 320.180408][T10420] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 320.189347][T10420] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 320.196921][T10422] [ 320.198159][T10420] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 320.200335][T10422] ===================================================== [ 320.200343][T10422] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 320.209050][T10420] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 320.215909][T10422] 6.1.146-syzkaller #0 Not tainted [ 320.215922][T10422] ----------------------------------------------------- [ 320.215928][T10422] syz.7.1784/10422 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 320.215947][T10422] ffffffff8c80a058 (tasklist_lock){.+.+}-{2:2}, at: send_sigurg+0xec/0x3c0 [ 320.215993][T10422] [ 320.215993][T10422] and this task is already holding: [ 320.215999][T10422] ffff888077edf7b0 (&f->f_owner.lock){...-}-{2:2}, at: send_sigurg+0x25/0x3c0 [ 320.216039][T10422] which would create a new lock dependency: [ 320.216045][T10422] (&f->f_owner.lock){...-}-{2:2} -> (tasklist_lock){.+.+}-{2:2} [ 320.216084][T10422] [ 320.216084][T10422] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 320.216092][T10422] (&client->buffer_lock){..-.}-{2:2} [ 320.216110][T10422] [ 320.216110][T10422] ... which became SOFTIRQ-irq-safe at: [ 320.216116][T10422] lock_acquire+0x1b4/0x490 [ 320.216135][T10422] _raw_spin_lock+0x2a/0x40 [ 320.240725][T10420] device vxlan0 entered promiscuous mode [ 320.244254][T10422] evdev_pass_values+0xcb/0xab0 [ 320.244287][T10422] evdev_events+0x1d4/0x320 [ 320.244307][T10422] input_pass_values+0x907/0x1300 [ 320.244328][T10422] input_event_dispose+0x3e8/0x6c0 [ 320.244346][T10422] input_event+0x88/0xb0 [ 320.244361][T10422] hidinput_hid_event+0x12f5/0x1c80 [ 320.244384][T10422] hid_process_event+0x4b7/0x620 [ 320.244402][T10422] hid_report_raw_event+0xf66/0x1760 [ 320.367276][T10422] hid_input_report+0x420/0x4e0 [ 320.372213][T10422] hid_irq_in+0x435/0x690 [ 320.376616][T10422] __usb_hcd_giveback_urb+0x35f/0x520 [ 320.382064][T10422] dummy_timer+0x888/0x31b0 [ 320.386638][T10422] __hrtimer_run_queues+0x554/0xd60 [ 320.391906][T10422] hrtimer_run_softirq+0x183/0x2a0 [ 320.397090][T10422] handle_softirqs+0x2a1/0x920 [ 320.401928][T10422] run_ksoftirqd+0x98/0xf0 [ 320.406410][T10422] smpboot_thread_fn+0x64a/0xa40 [ 320.411420][T10422] kthread+0x29d/0x330 [ 320.415562][T10422] ret_from_fork+0x1f/0x30 [ 320.420052][T10422] [ 320.420052][T10422] to a SOFTIRQ-irq-unsafe lock: [ 320.427050][T10422] (tasklist_lock){.+.+}-{2:2} [ 320.427072][T10422] [ 320.427072][T10422] ... which became SOFTIRQ-irq-unsafe at: [ 320.439664][T10422] ... [ 320.439670][T10422] lock_acquire+0x1b4/0x490 [ 320.446810][T10422] _raw_read_lock+0x32/0x40 [ 320.451386][T10422] do_wait+0x2b6/0xb60 [ 320.455528][T10422] kernel_wait+0xa8/0x160 [ 320.459931][T10422] call_usermodehelper_exec_work+0xb5/0x220 [ 320.465901][T10422] process_one_work+0x898/0x1160 [ 320.470907][T10422] worker_thread+0xaa2/0x1250 [ 320.475653][T10422] kthread+0x29d/0x330 [ 320.479793][T10422] ret_from_fork+0x1f/0x30 [ 320.484284][T10422] [ 320.484284][T10422] other info that might help us debug this: [ 320.484284][T10422] [ 320.494496][T10422] Chain exists of: [ 320.494496][T10422] &client->buffer_lock --> &f->f_owner.lock --> tasklist_lock [ 320.494496][T10422] [ 320.507861][T10422] Possible interrupt unsafe locking scenario: [ 320.507861][T10422] [ 320.516156][T10422] CPU0 CPU1 [ 320.521501][T10422] ---- ---- [ 320.526845][T10422] lock(tasklist_lock); [ 320.531070][T10422] local_irq_disable(); [ 320.537804][T10422] lock(&client->buffer_lock); [ 320.545158][T10422] lock(&f->f_owner.lock); [ 320.552163][T10422] [ 320.555597][T10422] lock(&client->buffer_lock); [ 320.560604][T10422] [ 320.560604][T10422] *** DEADLOCK *** [ 320.560604][T10422] [ 320.568727][T10422] 2 locks held by syz.7.1784/10422: [ 320.573902][T10422] #0: ffff88807c0e0e78 (&u->lock){+.+.}-{2:2}, at: queue_oob+0x1c7/0x4d0 [ 320.582422][T10422] #1: ffff888077edf7b0 (&f->f_owner.lock){...-}-{2:2}, at: send_sigurg+0x25/0x3c0 [ 320.591718][T10422] [ 320.591718][T10422] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 320.602108][T10422] -> (&client->buffer_lock){..-.}-{2:2} { [ 320.608000][T10422] IN-SOFTIRQ-W at: [ 320.612134][T10422] lock_acquire+0x1b4/0x490 [ 320.618621][T10422] _raw_spin_lock+0x2a/0x40 [ 320.625110][T10422] evdev_pass_values+0xcb/0xab0 [ 320.631948][T10422] evdev_events+0x1d4/0x320 [ 320.638435][T10422] input_pass_values+0x907/0x1300 [ 320.645441][T10422] input_event_dispose+0x3e8/0x6c0 [ 320.652533][T10422] input_event+0x88/0xb0 [ 320.658753][T10422] hidinput_hid_event+0x12f5/0x1c80 [ 320.665933][T10422] hid_process_event+0x4b7/0x620 [ 320.672853][T10422] hid_report_raw_event+0xf66/0x1760 [ 320.680119][T10422] hid_input_report+0x420/0x4e0 [ 320.686949][T10422] hid_irq_in+0x435/0x690 [ 320.693261][T10422] __usb_hcd_giveback_urb+0x35f/0x520 [ 320.700622][T10422] dummy_timer+0x888/0x31b0 [ 320.707112][T10422] __hrtimer_run_queues+0x554/0xd60 [ 320.714294][T10422] hrtimer_run_softirq+0x183/0x2a0 [ 320.721387][T10422] handle_softirqs+0x2a1/0x920 [ 320.728136][T10422] run_ksoftirqd+0x98/0xf0 [ 320.734536][T10422] smpboot_thread_fn+0x64a/0xa40 [ 320.741455][T10422] kthread+0x29d/0x330 [ 320.747509][T10422] ret_from_fork+0x1f/0x30 [ 320.753912][T10422] INITIAL USE at: [ 320.757990][T10422] lock_acquire+0x1b4/0x490 [ 320.764410][T10422] _raw_spin_lock+0x2a/0x40 [ 320.770823][T10422] evdev_pass_values+0xcb/0xab0 [ 320.777577][T10422] evdev_events+0x1d4/0x320 [ 320.783987][T10422] input_pass_values+0x907/0x1300 [ 320.790911][T10422] input_event_dispose+0x3e8/0x6c0 [ 320.797917][T10422] input_event+0x88/0xb0 [ 320.804052][T10422] hidinput_hid_event+0x12f5/0x1c80 [ 320.811149][T10422] hid_process_event+0x4b7/0x620 [ 320.817983][T10422] hid_report_raw_event+0xf66/0x1760 [ 320.825174][T10422] hid_input_report+0x420/0x4e0 [ 320.831933][T10422] hid_irq_in+0x435/0x690 [ 320.838162][T10422] __usb_hcd_giveback_urb+0x35f/0x520 [ 320.845436][T10422] dummy_timer+0x888/0x31b0 [ 320.851836][T10422] __hrtimer_run_queues+0x554/0xd60 [ 320.858929][T10422] hrtimer_run_softirq+0x183/0x2a0 [ 320.865935][T10422] handle_softirqs+0x2a1/0x920 [ 320.872598][T10422] run_ksoftirqd+0x98/0xf0 [ 320.878905][T10422] smpboot_thread_fn+0x64a/0xa40 [ 320.885741][T10422] kthread+0x29d/0x330 [ 320.891713][T10422] ret_from_fork+0x1f/0x30 [ 320.898028][T10422] } [ 320.900681][T10422] ... key at: [] evdev_open.__key.29+0x0/0x20 [ 320.908995][T10422] -> (&new->fa_lock){....}-{2:2} { [ 320.914198][T10422] INITIAL USE at: [ 320.918165][T10422] lock_acquire+0x1b4/0x490 [ 320.924396][T10422] _raw_write_lock_irq+0x9f/0xe0 [ 320.931059][T10422] fasync_remove_entry+0xf0/0x1c0 [ 320.937806][T10422] sock_fasync+0x84/0xf0 [ 320.943771][T10422] __fput+0x7a7/0x920 [ 320.949480][T10422] task_work_run+0x1ca/0x250 [ 320.955794][T10422] get_signal+0x11a6/0x1350 [ 320.962024][T10422] arch_do_signal_or_restart+0xb0/0x1230 [ 320.969379][T10422] exit_to_user_mode_loop+0x70/0x110 [ 320.976391][T10422] exit_to_user_mode_prepare+0xb1/0x140 [ 320.983661][T10422] syscall_exit_to_user_mode+0x16/0x40 [ 320.990858][T10422] do_syscall_64+0x58/0xa0 [ 320.997011][T10422] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 321.004640][T10422] INITIAL READ USE at: [ 321.009044][T10422] lock_acquire+0x1b4/0x490 [ 321.015713][T10422] _raw_read_lock_irqsave+0xac/0xf0 [ 321.023078][T10422] kill_fasync+0x18e/0x4b0 [ 321.029666][T10422] sock_wake_async+0x128/0x150 [ 321.036592][T10422] sk_wake_async+0x184/0x280 [ 321.043340][T10422] tcp_rcv_state_process+0x24d0/0x40d0 [ 321.050962][T10422] tcp_v6_do_rcv+0x934/0x1320 [ 321.057806][T10422] __release_sock+0x1b9/0x420 [ 321.064642][T10422] release_sock+0x5b/0x1b0 [ 321.071221][T10422] tcp_sendmsg+0x35/0x40 [ 321.077633][T10422] __sys_sendto+0x44f/0x5c0 [ 321.084315][T10422] __x64_sys_sendto+0xda/0xf0 [ 321.091159][T10422] do_syscall_64+0x4c/0xa0 [ 321.097750][T10422] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 321.105817][T10422] } [ 321.108391][T10422] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 321.117155][T10422] ... acquired at: [ 321.121038][T10422] _raw_read_lock_irqsave+0xac/0xf0 [ 321.126407][T10422] kill_fasync+0x18e/0x4b0 [ 321.130988][T10422] evdev_pass_values+0x54b/0xab0 [ 321.136093][T10422] evdev_events+0x1d4/0x320 [ 321.140759][T10422] input_pass_values+0x907/0x1300 [ 321.145949][T10422] input_event_dispose+0x346/0x6c0 [ 321.151226][T10422] input_inject_event+0x1f5/0x310 [ 321.156411][T10422] evdev_write+0x326/0x470 [ 321.160995][T10422] vfs_write+0x2c4/0x960 [ 321.165404][T10422] ksys_write+0x143/0x240 [ 321.169897][T10422] do_syscall_64+0x4c/0xa0 [ 321.174474][T10422] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 321.180535][T10422] [ 321.182848][T10422] -> (&f->f_owner.lock){...-}-{2:2} { [ 321.188236][T10422] IN-SOFTIRQ-R at: [ 321.192208][T10422] lock_acquire+0x1b4/0x490 [ 321.198356][T10422] _raw_read_lock_irqsave+0xac/0xf0 [ 321.205198][T10422] send_sigurg+0x25/0x3c0 [ 321.211167][T10422] sk_send_sigurg+0x6b/0xc0 [ 321.217315][T10422] tcp_check_urg+0x200/0x750 [ 321.223550][T10422] tcp_urg+0x15d/0x3e0 [ 321.229257][T10422] tcp_rcv_established+0xde4/0x1d30 [ 321.236094][T10422] tcp_v4_do_rcv+0x48d/0xb00 [ 321.242332][T10422] tcp_v4_rcv+0x2789/0x2e30 [ 321.248477][T10422] ip_protocol_deliver_rcu+0x3ad/0x780 [ 321.255577][T10422] ip_local_deliver_finish+0x2c7/0x510 [ 321.262677][T10422] NF_HOOK+0x2ff/0x390 [ 321.268386][T10422] NF_HOOK+0x2ff/0x390 [ 321.274094][T10422] __netif_receive_skb+0xcc/0x290 [ 321.280758][T10422] process_backlog+0x37c/0x6e0 [ 321.287162][T10422] __napi_poll+0xc0/0x460 [ 321.293135][T10422] net_rx_action+0x5b1/0xad0 [ 321.299366][T10422] handle_softirqs+0x2a1/0x920 [ 321.305773][T10422] run_ksoftirqd+0x98/0xf0 [ 321.311822][T10422] smpboot_thread_fn+0x64a/0xa40 [ 321.318397][T10422] kthread+0x29d/0x330 [ 321.324108][T10422] ret_from_fork+0x1f/0x30 [ 321.330169][T10422] INITIAL USE at: [ 321.334051][T10422] lock_acquire+0x1b4/0x490 [ 321.340108][T10422] _raw_write_lock_irq+0x9f/0xe0 [ 321.346599][T10422] __f_setown+0x37/0x330 [ 321.352391][T10422] fcntl_dirnotify+0x6de/0x8f0 [ 321.358703][T10422] do_fcntl+0x587/0x11c0 [ 321.364492][T10422] __se_sys_fcntl+0xc9/0x190 [ 321.370629][T10422] do_syscall_64+0x4c/0xa0 [ 321.376594][T10422] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 321.384042][T10422] INITIAL READ USE at: [ 321.388353][T10422] lock_acquire+0x1b4/0x490 [ 321.394845][T10422] _raw_read_lock_irqsave+0xac/0xf0 [ 321.402034][T10422] send_sigio+0x2f/0x360 [ 321.408265][T10422] kill_fasync+0x224/0x4b0 [ 321.414672][T10422] sock_wake_async+0x128/0x150 [ 321.421418][T10422] sk_wake_async+0x184/0x280 [ 321.427991][T10422] tcp_rcv_state_process+0x24d0/0x40d0 [ 321.435435][T10422] tcp_v6_do_rcv+0x934/0x1320 [ 321.442101][T10422] __release_sock+0x1b9/0x420 [ 321.448759][T10422] release_sock+0x5b/0x1b0 [ 321.455165][T10422] tcp_sendmsg+0x35/0x40 [ 321.461398][T10422] __sys_sendto+0x44f/0x5c0 [ 321.467890][T10422] __x64_sys_sendto+0xda/0xf0 [ 321.474549][T10422] do_syscall_64+0x4c/0xa0 [ 321.480947][T10422] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 321.488828][T10422] } [ 321.491308][T10422] ... key at: [] __alloc_file.__key+0x0/0x10 [ 321.499365][T10422] ... acquired at: [ 321.503154][T10422] _raw_read_lock_irqsave+0xac/0xf0 [ 321.508515][T10422] send_sigio+0x2f/0x360 [ 321.512917][T10422] kill_fasync+0x224/0x4b0 [ 321.517492][T10422] sock_wake_async+0x128/0x150 [ 321.522420][T10422] sk_wake_async+0x184/0x280 [ 321.527171][T10422] tcp_rcv_state_process+0x24d0/0x40d0 [ 321.532788][T10422] tcp_v6_do_rcv+0x934/0x1320 [ 321.537630][T10422] __release_sock+0x1b9/0x420 [ 321.542466][T10422] release_sock+0x5b/0x1b0 [ 321.547044][T10422] tcp_sendmsg+0x35/0x40 [ 321.551448][T10422] __sys_sendto+0x44f/0x5c0 [ 321.556111][T10422] __x64_sys_sendto+0xda/0xf0 [ 321.560952][T10422] do_syscall_64+0x4c/0xa0 [ 321.565526][T10422] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 321.571581][T10422] [ 321.573889][T10422] [ 321.573889][T10422] the dependencies between the lock to be acquired [ 321.573897][T10422] and SOFTIRQ-irq-unsafe lock: [ 321.587380][T10422] -> (tasklist_lock){.+.+}-{2:2} { [ 321.592494][T10422] HARDIRQ-ON-R at: [ 321.596456][T10422] lock_acquire+0x1b4/0x490 [ 321.602601][T10422] _raw_read_lock+0x32/0x40 [ 321.608740][T10422] do_wait+0x2b6/0xb60 [ 321.614449][T10422] kernel_wait+0xa8/0x160 [ 321.620416][T10422] call_usermodehelper_exec_work+0xb5/0x220 [ 321.627949][T10422] process_one_work+0x898/0x1160 [ 321.634521][T10422] worker_thread+0xaa2/0x1250 [ 321.640830][T10422] kthread+0x29d/0x330 [ 321.646538][T10422] ret_from_fork+0x1f/0x30 [ 321.652595][T10422] SOFTIRQ-ON-R at: [ 321.656561][T10422] lock_acquire+0x1b4/0x490 [ 321.662703][T10422] _raw_read_lock+0x32/0x40 [ 321.668842][T10422] do_wait+0x2b6/0xb60 [ 321.674549][T10422] kernel_wait+0xa8/0x160 [ 321.680515][T10422] call_usermodehelper_exec_work+0xb5/0x220 [ 321.688047][T10422] process_one_work+0x898/0x1160 [ 321.694619][T10422] worker_thread+0xaa2/0x1250 [ 321.700928][T10422] kthread+0x29d/0x330 [ 321.706636][T10422] ret_from_fork+0x1f/0x30 [ 321.712692][T10422] INITIAL USE at: [ 321.716570][T10422] lock_acquire+0x1b4/0x490 [ 321.722625][T10422] _raw_write_lock_irq+0x9f/0xe0 [ 321.729113][T10422] copy_process+0x2531/0x4020 [ 321.735342][T10422] kernel_clone+0x225/0x8b0 [ 321.741397][T10422] user_mode_thread+0xda/0x130 [ 321.747706][T10422] rest_init+0x23/0x300 [ 321.753411][T10422] start_kernel+0x0/0x539 [ 321.759294][T10422] start_kernel+0x490/0x539 [ 321.765347][T10422] secondary_startup_64_no_verify+0xcf/0xdb [ 321.772793][T10422] INITIAL READ USE at: [ 321.777104][T10422] lock_acquire+0x1b4/0x490 [ 321.783696][T10422] _raw_read_lock+0x32/0x40 [ 321.790198][T10422] do_wait+0x2b6/0xb60 [ 321.796257][T10422] kernel_wait+0xa8/0x160 [ 321.802581][T10422] call_usermodehelper_exec_work+0xb5/0x220 [ 321.810479][T10422] process_one_work+0x898/0x1160 [ 321.817417][T10422] worker_thread+0xaa2/0x1250 [ 321.824083][T10422] kthread+0x29d/0x330 [ 321.830156][T10422] ret_from_fork+0x1f/0x30 [ 321.836572][T10422] } [ 321.839066][T10422] ... key at: [] tasklist_lock+0x18/0x40 [ 321.846783][T10422] ... acquired at: [ 321.850569][T10422] _raw_read_lock+0x32/0x40 [ 321.855239][T10422] send_sigurg+0xec/0x3c0 [ 321.859742][T10422] sk_send_sigurg+0x6b/0xc0 [ 321.864413][T10422] queue_oob+0x3d3/0x4d0 [ 321.868823][T10422] unix_stream_sendmsg+0x8c2/0xa60 [ 321.874102][T10422] ____sys_sendmsg+0x59b/0x970 [ 321.879035][T10422] ___sys_sendmsg+0x21c/0x290 [ 321.883876][T10422] __sys_sendmmsg+0x272/0x490 [ 321.888712][T10422] __x64_sys_sendmmsg+0x9c/0xb0 [ 321.893723][T10422] do_syscall_64+0x4c/0xa0 [ 321.898300][T10422] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 321.904364][T10422] [ 321.906675][T10422] [ 321.906675][T10422] stack backtrace: [ 321.912547][T10422] CPU: 0 PID: 10422 Comm: syz.7.1784 Not tainted 6.1.146-syzkaller #0 [ 321.920685][T10422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 321.930726][T10422] Call Trace: [ 321.933996][T10422] [ 321.936915][T10422] dump_stack_lvl+0x168/0x22e [ 321.941581][T10422] ? load_image+0x3b0/0x3b0 [ 321.946076][T10422] ? show_regs_print_info+0x12/0x12 [ 321.951261][T10422] ? load_image+0x3b0/0x3b0 [ 321.955757][T10422] ? print_shortest_lock_dependencies+0xf0/0x160 [ 321.962074][T10422] __lock_acquire+0x660b/0x7c50 [ 321.966924][T10422] ? verify_lock_unused+0x140/0x140 [ 321.972132][T10422] ? verify_lock_unused+0x140/0x140 [ 321.977335][T10422] lock_acquire+0x1b4/0x490 [ 321.981829][T10422] ? send_sigurg+0xec/0x3c0 [ 321.986323][T10422] ? read_lock_is_recursive+0x10/0x10 [ 321.991685][T10422] ? do_raw_read_lock+0x39/0x80 [ 321.996529][T10422] ? _raw_read_lock_irqsave+0xb8/0xf0 [ 322.001892][T10422] ? _raw_read_lock+0x40/0x40 [ 322.006559][T10422] ? __lock_acquire+0x7c50/0x7c50 [ 322.011571][T10422] ? do_raw_spin_lock+0x11d/0x280 [ 322.016590][T10422] _raw_read_lock+0x32/0x40 [ 322.021088][T10422] ? send_sigurg+0xec/0x3c0 [ 322.025579][T10422] send_sigurg+0xec/0x3c0 [ 322.029902][T10422] sk_send_sigurg+0x6b/0xc0 [ 322.034395][T10422] queue_oob+0x3d3/0x4d0 [ 322.038638][T10422] ? scm_stat_add+0xc0/0xc0 [ 322.043134][T10422] ? __might_sleep+0xd0/0xd0 [ 322.047717][T10422] ? apparmor_socket_getpeersec_dgram+0x5/0x10 [ 322.053862][T10422] ? security_socket_getpeersec_dgram+0x9d/0xc0 [ 322.060094][T10422] unix_stream_sendmsg+0x8c2/0xa60 [ 322.065202][T10422] ? unix_show_fdinfo+0x2c0/0x2c0 [ 322.070217][T10422] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 322.076620][T10422] ? aa_sock_msg_perm+0x94/0x150 [ 322.081546][T10422] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 322.086816][T10422] ? security_socket_sendmsg+0x7c/0xa0 [ 322.092263][T10422] ? unix_show_fdinfo+0x2c0/0x2c0 [ 322.097279][T10422] ____sys_sendmsg+0x59b/0x970 [ 322.102036][T10422] ? __sys_sendmsg_sock+0x30/0x30 [ 322.107047][T10422] ? __import_iovec+0x315/0x500 [ 322.111891][T10422] ? import_iovec+0x6f/0xa0 [ 322.116385][T10422] ___sys_sendmsg+0x21c/0x290 [ 322.121053][T10422] ? __sys_sendmsg+0x270/0x270 [ 322.125820][T10422] ? __fdget+0x17c/0x200 [ 322.130056][T10422] __sys_sendmmsg+0x272/0x490 [ 322.134723][T10422] ? __ia32_sys_sendmsg+0x80/0x80 [ 322.139735][T10422] ? do_futex+0x2e2/0x320 [ 322.144062][T10422] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 322.150034][T10422] ? lock_chain_count+0x20/0x20 [ 322.154875][T10422] __x64_sys_sendmmsg+0x9c/0xb0 [ 322.159715][T10422] do_syscall_64+0x4c/0xa0 [ 322.164119][T10422] ? clear_bhb_loop+0x60/0xb0 [ 322.168782][T10422] ? clear_bhb_loop+0x60/0xb0 [ 322.173444][T10422] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 322.179335][T10422] RIP: 0033:0x7feedad8e9a9 [ 322.183738][T10422] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 322.203337][T10422] RSP: 002b:00007feedbbf1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 322.211743][T10422] RAX: ffffffffffffffda RBX: 00007feedafb5fa0 RCX: 00007feedad8e9a9 [ 322.219701][T10422] RDX: 0000000000000001 RSI: 0000200000006c40 RDI: 0000000000000003 [ 322.227661][T10422] RBP: 00007feedae10d69 R08: 0000000000000000 R09: 0000000000000000 [ 322.235637][T10422] R10: 0000000000040015 R11: 0000000000000246 R12: 0000000000000000 [ 322.243594][T10422] R13: 0000000000000000 R14: 00007feedafb5fa0 R15: 00007ffe1b6a87c8 [ 322.251645][T10422] [ 322.255315][ T4283] Bluetooth: hci1: command 0x041b tx timeout [ 322.261363][ T4283] Bluetooth: hci4: command 0x0419 tx timeout [ 322.353378][T10337] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 322.394373][T10337] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 322.422180][T10337] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 322.434479][T10337] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 322.486660][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 322.495471][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 322.510219][T10296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 322.531722][T10337] 8021q: adding VLAN 0 to HW filter on device bond0 [ 322.550063][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 322.561455][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 322.592062][T10337] 8021q: adding VLAN 0 to HW filter on device team0 [ 322.609541][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 322.619140][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 322.629248][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.636336][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 322.645911][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 322.676801][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 322.692408][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 322.708356][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.715418][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 322.727420][ T72] device hsr_slave_0 left promiscuous mode [ 322.734117][ T72] device hsr_slave_1 left promiscuous mode [ 322.740345][ T72] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 322.747938][ T72] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 322.755726][ T72] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 322.763330][ T72] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 322.771063][ T72] device bridge_slave_1 left promiscuous mode [ 322.777282][ T72] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.785482][ T72] device bridge_slave_0 left promiscuous mode [ 322.791973][ T72] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.804976][ T72] device veth1_macvtap left promiscuous mode [ 322.811143][ T72] device veth0_macvtap left promiscuous mode [ 322.817197][ T72] device veth1_vlan left promiscuous mode [ 322.823117][ T72] device veth0_vlan left promiscuous mode [ 322.962437][ T72] team0 (unregistering): Port device team_slave_1 removed [ 322.988902][ T72] team0 (unregistering): Port device team_slave_0 removed [ 323.017140][ T72] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 323.044252][ T72] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 323.146386][ T72] bond0 (unregistering): Released all slaves [ 323.195005][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 323.210005][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 323.218412][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 323.227208][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 323.235843][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 323.262400][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 323.271529][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 323.279944][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 323.288874][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 323.298153][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 323.307078][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 323.315824][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 323.324285][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 323.336685][T10337] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 323.384488][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 323.393638][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 323.405096][T10296] device veth0_vlan entered promiscuous mode [ 323.413334][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 323.423727][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 323.456725][T10296] device veth1_vlan entered promiscuous mode [ 323.479517][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 323.497707][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 323.507048][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 323.516103][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 323.528528][T10296] device veth0_macvtap entered promiscuous mode [ 323.562475][T10296] device veth1_macvtap entered promiscuous mode [ 323.582435][T10296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.594028][T10296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.604340][T10296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.615363][T10296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.626109][T10296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 323.635200][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 323.644003][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 323.652666][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 323.661951][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 323.675988][T10296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 323.687312][T10296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.697539][T10296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 323.708126][T10296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.719067][T10296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 323.729989][T10296] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.738977][T10296] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.747690][T10296] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.756843][T10296] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.766395][ T4589] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 323.776245][ T4589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 323.786252][ T4589] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 323.793689][ T4589] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 323.808116][T10337] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 323.825644][T10296] ieee80211 phy37: Selected rate control algorithm 'minstrel_ht' [ 323.841916][ T72] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 323.850368][ T72] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 323.866108][T10296] ieee80211 phy38: Selected rate control algorithm 'minstrel_ht' [ 323.874026][ T4371] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 323.882527][ T4371] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 323.893641][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 323.907859][ T4589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 323.916177][ T4589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 323.925668][ T4589] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 323.933384][ T4589] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 323.943746][T10337] device veth0_vlan entered promiscuous mode [ 323.950115][ T4589] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 323.955405][T10337] device veth1_vlan entered promiscuous mode [ 323.958588][ T4589] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 323.973847][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 323.982718][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 323.990534][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 324.002341][T10337] device veth0_macvtap entered promiscuous mode [ 324.010114][ T72] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 324.019795][ T72] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 324.030005][ T72] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 324.040368][T10337] device veth1_macvtap entered promiscuous mode [ 324.052748][T10337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 324.063537][T10337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.073488][T10337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 324.083908][T10337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.093773][T10337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 324.104310][T10337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.114883][T10337] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 324.123099][ T72] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 324.132747][ T72] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 324.141211][ T72] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 324.150763][T10337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.161462][T10337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.171343][T10337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.181815][T10337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.191630][T10337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.202035][T10337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.212868][T10337] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 324.220407][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 324.230769][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 324.243098][T10337] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.251991][T10337] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.260655][T10337] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.269340][T10337] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.290916][ T4281] Bluetooth: hci1: command 0x040f tx timeout [ 324.300077][T10337] ieee80211 phy39: Selected rate control algorithm 'minstrel_ht' [ 324.316574][ T4371] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.317244][T10337] ieee80211 phy40: Selected rate control algorithm 'minstrel_ht' [ 324.328753][ T4371] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.343758][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 324.352410][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.360214][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.367684][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 326.371321][ T4281] Bluetooth: hci1: command 0x0419 tx timeout