last executing test programs: 1m30.12331973s ago: executing program 0 (id=96): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000c40)="$eJzs3W1rZFcdAPD/vcmk2d3UTFVkLdgWW9ktujNJY9so0lYQfVVQ6/s1JpMQMsmEzKRuQtEsfgBBRAU/gG8EP4Ag+xFEWND3oqKI7upL3St35kbzMJMMySSzTn4/OJlz7sP5n3PJ3LkPh3sDuLJeioh3ImIsIl6NiOlielqk2OukfLnHjz5YzFMSWfbe35JIimn7deXl8Yi4Uaw2GRFf/0rEt5LjcZs7u2sL9XptqyhXW+ub1ebO7p3V9YWV2kptY25u9o35N+dfn5/JCufqZzki3vrSn370/Z99+a1ffebbv7/7l9vfyZv1hY912h0Ri+cK0EOn7lJ7W+zLt9HWRQQbkrw/pbFhtwIAgH7kx/gfjohPto//p2OsfTQHAAAAjJLs7an4VxKRAQAAACMrjYipSNJKMRZgKtK0UumM4f1oXE/rjWbr08uN7Y2lfF5EOUrp8mq9NlOMFS5HKcnLs8UY2/3ya0fKcxHxXET8cPpau1xZbNSXhn3xAwAAAK6IGy8ePv//53TazgMAAAAjptyzAAAAAIwKp/wAAAAw+pz/AwAAwEj76rvv5inbf4/30vs722uN9+8s1ZprlfXtxcpiY2uzstJorLSf2bd+Wn31RmPzs7Gxfa/aqjVb1ebO7t31xvZG6+7qoVdgAwAAAJfouRcf/C6JiL3PX2unKJ4DCHDIH4fdAGCQxobdAGBoxofdAGBoSqcuYQ8Boy45Zf7xwTuda4Xx64tpDwAAMHi3Pn78/v9EMe/0awPA/zNjfQDg6nF3D66u0llHAN4cdEuAYflQ5+OZXvN7Pryjj/v/nWsMWXamhgEAAAMz1U5JWimO06ciTSuViGfbrwUoJcur9dpMcX7w2+nSM3l5tr1mcuqYYQAAAAAAAAAAAAAAAAAAAAAAAACgI8uSyAAAAICRFpH+OWk/zT/i1vQrU4evDhx569dP3/vxvYVWa2s2YiL5+3Q+aSIiWj8ppr+WeSUAAAAAPAU65+nF5+ywWwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAqHn86IPF/XSZcf/6xYgod4s/HpPtz8koRcT1fyQxfmC9JCLGBhB/735E3OwWP4knWZaVi1Z0i3/tguOX25ume/w0Im4MID5cZQ/y/c873b5/abzU/uz+/Rsv0nn13v+l/93/jfXY/zx7pNzL8w9/Ue0Z/37E8+Pd9z/78ZNO/EMh8sLLffbxm9/Y3e0640CV3eIfjFVtrW9Wmzu7d1bXF1ZqK7WNubnZN+bfnH99fqa6vFqvFX+7hvnBJ3755KT+X+8Rv3y4/8e2/yt99T6Lfz+89+gjnUKpW/zbL3f//b3ZI35a/PZ9qsjn82/t5/c6+YNe+PlvXjip/0s9+j95Sv9v99X/+NyrX/veH7rOObY1AIDL0NzZXVuo12tbJ2Qm+1jmkjNvPx3NGGAmno5mDCuTfbfz/3i+es65+rFMdp7Vx2MAzZg49j0di7NWmETs5XX1+Q8JAACMmP8d9J90BwkAAAAAAAAAAAAAAAAAAAC4SGd8LNlkRPS98NGYe8PpKgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAif4TAAD//4RX0Xo=") open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='pids.events\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x82013, r0, 0x81c5e000) 1m28.574521683s ago: executing program 0 (id=105): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1, 0x8000000000000003}, 0x18) sendto$inet(r0, &(0x7f0000001580)="f0649c2c", 0x4, 0x4000801, 0x0, 0x0) 1m28.287048068s ago: executing program 0 (id=107): r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f0000000040), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000200)={0x1d, r1}, 0x10) 1m28.022409802s ago: executing program 0 (id=109): syz_mount_image$f2fs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x8, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0x5505, &(0x7f0000002480)="$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") mkdir(&(0x7f0000000280)='./file0\x00', 0x100) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) 1m26.078414792s ago: executing program 0 (id=122): renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x2) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000140)={0x7f, 0x0, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x0, 0x40000000}, 0x8}) 1m24.758422302s ago: executing program 0 (id=130): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x44880, 0x0) 1m24.338964388s ago: executing program 32 (id=130): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x44880, 0x0) 35.140989493s ago: executing program 1 (id=588): syz_mount_image$romfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f00000001c0)=ANY=[], 0x1, 0x161, &(0x7f0000000300)="$eJzs2rFK81AUB/Dz9bNY+ghOhd6hDm3SRKvgLghOPoBY2nvjxcRIIkg7BV9AcYiP4Oqqm4/Q2c1NXVwdJJLkVtukIFQkQ/+/oTn05J7khsuZTtNznbbwm0SrwdXec8lznVrH3OiJtuhSaoeIanEwiqLrFuUcfOVHUdDK3VC/V9eGFe7eCWlzI18DAAAAAAAAAAAAAAAAAAAAAGBB1F9UUD0M3Rshbd6eyPqD4VHXtrnnj/9hpGZ0SITulpCMm1P1Gu9ELJnfkeH2eVxPn8qzuFIlSrxR9nnaqXOi+YNhUzpdi1v82DDMjr6m6+uGltTSshXZpXonokr88y+zP3b7PU/0qOfniaiaXpZWZHhxllQvz9r/PEHwu+UIFj14eiWanaqoA8o9vzx5Vv+n92zuJ6mCXv4jKv7T/XWQ7R/UXzbrD3H/aPVcu/9T/xivnufhJbU205kBivYZAAD//z4LLWc=") chdir(&(0x7f00000000c0)='./file0\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 34.786488138s ago: executing program 1 (id=592): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) mkdirat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2\x00', 0x1ff) mount$binderfs(0x0, &(0x7f0000000180)='./binderfs2\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={[{}]}) 34.516267512s ago: executing program 1 (id=596): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00'}, 0x10) r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x319c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000440)={0x40, 0x6, 0x7, {0x7, 0x10, "0000001800"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 32.561091612s ago: executing program 1 (id=612): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x1008400, &(0x7f0000000080)=ANY=[], 0x85, 0x68b, &(0x7f0000000800)="$eJzs3c1vHGcdB/DvbDabbCipmyZtgiolaiRARE3sWCmYSwNCKIcKVeXA2UqcxMomDY6L3ApBeClce8gfUA6+cUBI3CPKhQvcevWxEoJLLzWnRTM7u16/22nqtcPnU43nmXnmeeb3/HbedrfRBvi/de1Cmo9T5NqFNxfK5aXFyc7S4uTdfjnJkSSNpNmbpfi82+1+nFxNb8qZcmXdXbG69/vP90uPZqfe/uSzpU97S816qrZvrG+3Ww/rKeeSHKrnT6u/69v1d3S77orBCMuEne8nDkbtcJJu5d+Pemt++vfnBjVD2hu13vbIBw6AonffXGcsOVaf6OVzQO+u2LtnH2gPRx0AAAAA7IHnl7OchRwfdRwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwkNS//1/UU6NfPpei//v/rXpd6vL+cnZ3mz/+suIAAAAAAAAAgD10djnLWcjx/nK3qL7zf7VaOFn9/UrezYPMZC4Xs5DpzGc+c5lIMjbUUWthen5+bmLQsv9/BqxveXnDlpe3CfRIPW8/jVEDAAAAAAAAwEHzebfb3XKDX+fayvf/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwHxTJod6smk72y2NpNJMcTdIqt3uY/LNfPqjOvJY8HnUQAAAA8AV0d7jd88tZzkKOD9oV1Xv+l6r3/Ufzbu5lPrOZTyczuVF9FtB7199YWpzsLC1O3i2n9f1+7z+7CrfqMb3PHjbe8+lqi3ZuZrZaczHX806K4kYaVcvS6X48G8f1qzKm4o2ewzuM7EY9L0f+YT1fq7mrsW5qlx+mjFUZOTzIyHgdW5mNF7bOxC5fnbV7mkhjEOzJNXtaM4hVOX9jh/s7Vs/L8fxuk5yPxtpMXB46+l7aOufJN/7yx5/c7ty7c/vmgwv7Z0g7c6ie964r7fWZmBzKxMvPcibWGa8ycWqwfC0/zI9zIefyVuYym59lOvOZybn8oCpN18dzMXTKD2WqMdT11VU7emu7SFr1Edp7sVbHlG1ierVqezyz+VHeyY3M5PXqv8uZyLdzJVcyNfQKn9rBlbaxyVnf/eqGwZ//Zl1oJ/l9Pa/cekrX1ydW5vWFobwOX3PHqrrhNStZOrGL+1E/S3/aOpTm1+pCuY/fZPXhMlprMzExlIkXt87EH6rLyoPOvTtzt6fv72x3Jz6sC+V59MG+ukuUx8uJwXPB6qOjrHuxV1c9gwznq1V/49Jr11hXd2pQ1ztTH256prbqZ7j1PV2u6l7esG6yqjs9VLf2easzeB466F/+ADyzPmglx751rNX+V/sf7Y/av23fbr959PtHvnPklVYO/+3wd5vjh77eeKX4cz7KL1be/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAE/uwXvv35nudGbm1hS63e4vN6k6yIX+z5nt4U7PPJeMasitJPsj8//tdrv1mmI/xLN1oVs6ku4TNv9rkp1t3EyyUdXZ0Sdhi4uGH4CCZ8Kl+bv3Lz147/3XZu9O35q5NXNv6sqVqfGpK69PXro525kZ7/0ddZTAl2Hlpj/qSAAAAAAAAAAAAICd2ot/TrD53o/u5VABAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAA+rahTQfp8jE+MXxcnlpcbJTTv3yypbNJI0kxc+T4uPkanpTxoa6Kzbbz6PZqbc/+Wzp05W+mv3tG1u125mH9ZRzSQ7V86fV3/Uv3F8xGGGZsPP9xMGo/S8AAP//fgkLLw==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x105042, 0x1bf) syz_clone(0x20002000, &(0x7f0000000040)="72e28824d0", 0x5, 0x0, &(0x7f0000000100), 0x0) writev(r0, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x64000}], 0x1) 32.04657165s ago: executing program 1 (id=613): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 31.33449601s ago: executing program 1 (id=617): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 30.976899926s ago: executing program 33 (id=617): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.292610729s ago: executing program 3 (id=870): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000406d041bc700000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001300)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x7, {[@local=@item_4={0x3, 0x2, 0xa, "46088792"}, @global=@item_012={0x1, 0x1, 0x6, 'Y'}]}}, 0x0}, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 2.769164247s ago: executing program 6 (id=877): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000940)="d744784ca67c0398246d848e6df22054de2bd8ca3da62dfdea7d8eb74ffe057d7469066c6ca034a2677ce0c1c25e2b2a825d677e0fbac312a7da165cd5db94fa38cdf3a3f3f93b912a7515e0b1e441a3be644a296bcc765e7adc9ddb4d14376a69cbfcd2ddd156ba432349e96debeda26e", 0x71}], 0x1}, 0x4084) 2.658689809s ago: executing program 6 (id=880): tkill(0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040ed5000410"], 0x11) 2.482254161s ago: executing program 4 (id=883): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) read$alg(r1, &(0x7f0000000100)=""/12, 0xc) 2.469130432s ago: executing program 5 (id=884): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$SOUND_PCM_READ_RATE(r0, 0x80045002, 0x0) mmap$dsp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x5, 0x11, r0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000140)=0x1000) 2.436519182s ago: executing program 4 (id=885): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4) recvmmsg(r0, &(0x7f00000002c0), 0x220, 0x100, 0x0) 2.358893773s ago: executing program 4 (id=886): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f0000005a40)={[{@metadata_ratio={'metadata_ratio', 0x3d, 0x2}}, {}, {@compress_force}, {@nodiscard}, {@compress_algo={'compress', 0x3d, 'zstd'}}, {@clear_cache}, {@user_subvol_rm}, {@max_inline={'max_inline', 0x3d, [0x67, 0x2d, 0x33, 0x74, 0x65, 0x36]}}]}, 0x1, 0x50f3, &(0x7f000000f3c0)="$eJzs3U+IVWUfB/Dnzp1x5lVw7isEtsoikGrh4CYioqtMUFF0y8VgBE4tgnThJEi0EMQW/Vt4S4paSK6kFsksjKA2LqQwArehYS7cKAaSi3Yac8957pz7HO+5d0ZtTD8fmTnnOb/zPOe5l7O43+uccwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACEEF74/bNDVfVT16bPnJtp7jywZebyvul1p0OodbbX8vqOrc++8ua2HS9OxA6zL2fLRqPfkFnX81ljVc/GhX69P6+HEMaSAer58pk1pVGLq3vKA1a6fnH30U17mxuPH27Xr146e7L80lkwsdITWCn5eXVh8Vxqdn6PJHt024VTr9Zzimb90xPuX3kRAMCSTLU6i+7H0fwjbre9P60n7WbSbift+AmhXWwsRzbuqn7z3JDWV2iezSwqjPedZ1LP3/9uu5X2T9pJ1FjCPHt3zSPNRL95ziX1lZonAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJ3kkbdHH6qqn7o2febcTHPngS0zl/dNrzsdQqOzvZaVa6vfP9z869utxw78uPmr4xeef6ye94vL0cLO4be48sRkCG8UKhfisBfXhtDqLXSa4cty4a3OynOxAAAAwN3k/s7vkW47i4NjPe1aJ03WOv+iLCxev7j76Ka9zY3HD7frVy+dPbn88Vp9xmvecLxuu7H4UysE4xh/0/EW63HXPaVxqqUjpnn+8fNTf1f1L+X/RnX+j++c/A8AAMDNkP/TcaoNyv/fvfbHJ1X9S/l/Q88hS/k/zjjm/5GwvPwPAAAAd7Lbnf+bpXGqDcr/4y+NfV3Vv5T/p4bL/6PFaceNv8YJ75oMYWrQ1AEAAIA+4v+7L361EPN69s1BmtefevTguarxSvm/OVz+H7ulrwoAAAC4GUe+2P5wVb2U/1vD5f/x2zprAAAAYCne+XDig6p6Kf/PDpf/V+fL/MqHrNNP8a8QDk2GMLGwMpcVfg7tp7sFAAAA4BaJOf3PT3f+ULVfKf/PVd//P97pIF7/33P/v9L1/4VCdte/J90YAAAAgHtR+Xr+eHv87MkF/Z6/P+z1/w/87+CrVccv5f/9w+X/enF5K5//BwAAAMvwX3v+3/bSONUG3f//vo/e/aWqfyn/t4fL/3G5pvjyTtRq2fvz3mQI6xdW8rsJfhMPtyspzI8VCh2tpMe22CMvzI8XCh1zSY/NkyE8uLCyPyn8PxbaSeHK2rxwJCmcjoX8fOgWjiWFE/FM+3xtPt208H0s5BdYzMcrKNZ0L4lIelzt12OhcMMeZ7sHBwAAuKfE8Jxn2bHeZkij7Hxt0A6rB+0wMmiH+qAdRpMd0h37bQ+zvYW4vX1m49Ke/39kuPwf34pV2aLf9f8hXv+fP9ewe/3/bCw0ksJ8LLTSOwa04jGysPtxPEajlfe4sr5bAAAAgLta/F6gvsLzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP5h715j5KruA4CffY734fVCUoXQKNkkNY6beL22gUQtVdaUqhEpzbqhoCqi2NhrsnjBjm1KjEJkbCIaIShtkJIPRRhFUc0HqBWISAoIFymOUHlEVEUBBAqtIQoipSQRaYIUqtl7z+ydc3cefqzx0t9P8s6Z+Z/nnYfn3HvnXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+P/h4Feu+dtm8Ud/e96zL1w8fsWetRe/et15pz4ZwsTM4x1ZuKP/xtvHf373uffseWD1HfcdPv+jvXm5PB4Gqn868zs3xFoPLw7h/o4QutPAisEs0JPfH4z1vW8whFPCbKBWYrI/K5E2HL7fF8K+MBuoVfW9vhAGC4ELn3rk4Zuridv6QlgaQqikbTxfydroSwNn9GaB/jSwtTsL/OqtTC3w3c4sAMcsvhlqL/oDE/UZhucu1+D113PcOvb2SofXFRPDjfP9bO08d6qgN31g4pietlJ1zIvS2+Ogd9sCeLeVtvOtnrbiF6n8G8pbs6FK6Nw0uXnD1dM74yOdYXS0q1FN8/Q8P/P6lzYeSXrBvA5jB4aPy+vwlieW3t21/ILH71ux9OX9H9v7yrF280eFTVpMz7dKyF9zC+Z5jMZ9niyAt1/pW9KIL10hhM2f/73PNIuX5v/Dzef/8eUcbzvrcsda3xzK5ubxkcGYeG0om5sDAADAgrEQ9ppuHX3oE83qK83/R9o7/h8P+eeT+Wy0B0MYn0nsXRLCaTOPZ4G7YnOXLQnhgzOpifrA2iRwMIT3ziSW16pKSiyKJUaSwE+G8sB4EjgUAxNJ4FsxcGsSuCEGDiSBjTFwMAmcGwNhqn4cvz+Uj6PtQF8MrM824oF4FsIvhmJrybZ6rlYVAADAcZLPDnvq7xbOdTjWDHF6eaCvVYZ4BnbDDJWkhnQGW5tWNayhu1UNna1qqI17d/Phl2ruaFVz6TSMjvoMt//ybz4bmijN/8eaz/8rc3Sko3T8P4R1M39j7s48Ml2Lr5+oywAAAAAcg4H/ffGbzeKl+f94e+f/x30iXYXM4bG4G2LLkhDG6gNZtX9YDmRHvQfyAAAAACwEtePxtWPhU/ltdop2Op8u5584wvzxwP/4nPl7Dz64vll/S/P/ifbO/++vv806cSj24mtLQlhUCPwg9rIamDESAz/+ZH0gH/+huAFuilXlJybUqropllgfA2NJYF+jEj+slTitPpA/WbXG99bGMZWXKAQAAADghIu7A+Jx+Xj+/4d+s/qaZuVK8//1R3b+/8w8uHR6//RACCu7Q+hKfxjwWH+2MGAMDHbkiYf6s7q60qqu7w/hnOrA0qpezNf/707XGHyqL6sqBk770P7Xz6gmvtkXwspi4OnP3XlWNbEzCdQa/8u+ED5QHW3a+HcWZY33pI1/fVEI7y8EalVdtiiEamO9aVWPVPLrGKRV/XMlhHcVArWqzq6EsCsAsEDF/0o3FR/csevaLRumpye3z2Mi7sPvC5unpidHN26d3lRp0KdNSZ/rljG6vjymdq9881y+RNFF964bbCdd+53gWLGtfD9+6cTB/H78LtQzM87VPXV316RD/siHy02EwjepRkPunOch9xcrmX0SS/XH/L1hICy6esfk9tEvbti5c/uq7G+72Vdnf+NhpmxbrUq3Vf9cfWvj5dFwtazE0W6rZcVKVu68ctvKHbuuXTF15YbLJy+fvGrV2avHzhxbM/bxM1dWRzWW/W0x1GVzVZ0M9a072xzXcRzq6d2FSk7Ep4aEhMRCS2wdWNb0/+TS/H9b8/l//NSJn/z5+gyNjv8Px8P82eOzh/nXx8C+do//Dzc6ml87MWAkCeyOgd0O8wMAAPDOECf5cW9m3Cv90+XfeblZudL8f3d7v/8/Tuv/15auP7/RMv/LY4mxRuv/p8v819b/391o/f90mf/a+v/73ob1/6+uBZJN8gvr/wMAAO8EJ279/5bL+6cXCChlaLm8f3qBgFKGlsv4t3uBgCNe///5//yr/w5NlOb/t7Y3/7dwPwAAAJw8vvxn1/xOs3hp/r+vvfn/iV//LzQ6/3+kUWCi0cKA1v8DAABggWq0/t/wjf2XNitXmv8faG/+H0+76KzLHWt9cyhb0y6ka9q9NlT7yQAAAAAsDJ1hdLSnzbx1K6OuPfo2n8mXAm2WLnrxTw4f2fn/B9ub/9f9LuOWJ5be3bX8gsffvG/F0pf3f2zvK7PH/wEAAID50+5+CQAAAAAAAAAAAAAA4O334n/sWdMsXvr9f1g383ij3//H6/7F3xe8uy53rLX1+n/5/Qs/fc+umSULHxsK4cPFwJY9W04J+bX5lxUDD1+y/D3VxJ60xIMvnPtSNXFpGvjUilPfqCbOSQLr4yKJ700D8aqKbyxOAnF5xX9PA3F7HEgDvXngq4uzcXSk2+qng9m26ki31bODISwpBGrb6v7BrI2OdIC3JYHaAL+QBuIA/zwPdKa9umcg61UMDMaidwxkvQIA4KQVvwX2hM1T05Nj8St8vD29u/42qluy7PpytR1tNv9cvjTZRfeuG2wn3ZV+F5291nhPqFSHsKr0dbWYpWNmlMenlhab7t0NhtxqtbfOBuVSR7rpehuPqC8b0ejGrdObeloOfE3rLKu7W2ZZVZrsFLN0zmzSNmppoy9tjKjNbdNGl+P9zjA62pXk+oMYHA51Wr0i2v29fnGdv0avgmKeqw7v/VWz+krz/+H25v+V4rjeyC8GsDteWe/vlljmHwAAAObXV9f++hvx32dvfPTpZnlL8/+R9ub/cQ9Wfig429txMF7/f++SEGYurT+cBe6KzV22JIQPzqQmYonsgvrnxxJjWeCuuMNkeSyxfqK+qkUxcCAJ/GQoDxxMAodiIN9LsT/ku3L+fiiEs2ZS6+pLbIslhpPAZ2JgJAmMxsBYElgcA+NJ4NXFeWAiCfxbDISp+m117+J8WwEAAByJfJ7VU383pPO8A92tMnS0ytDfKkNnqwyVVhkajSLe/3bM0JOcvNJRyNST1tqX1FLKEC+Gf8T9KmUIP6zPmRYsNR3PP6idb9BRn+GBT3RXQhOl+f9Ye/P//vrbrPVDcf4/e/2/LPCD2L2vxVPHR2Lgx5+sD+Q7Bg7Fye5Ntaom8hL5pP2mWGI8BkaSwLYYGE8C69flgX3vqQ/kM+1a43trjU/lJQoBAAAAOOHiDoK4mybO/+/Y8ZWBZuVK8//x9ub/sb2BYmM3xFoPLw7h/o7Z3tQCKwazQNyPMRh/Hv++wRBOKezgqJWY7M9K9CYNh+/3Zb9Q702r+l5f9uODeP/Cpx55+OZq4ra+EJYW9r7U2ni+krXRlwbO6M0C/Wlga3cWiHt+aoHvdmYBOGa1vYLxBZWf6lIzPHe5Bq+/d8o1QdPhlfaBzpFvrt9czZfSDtd8n2rNkT1tTfffctyU3h4HvdsW4rtt2Lut+EUq/4by1myoEjo3TW7ecPX0zvhI8ZesJfP0PBd/pdpO+ji8DncffW9bq6QdGEs+PsbmLjf367AjVnfLE0vv7lp+weP3rVj68v6P7X2l7W40EH8o/Mh1/zr4o8LmnW+VkL/mFtznyYTPk4X438CIpy2EsO7Vr9/ULF6a/0+0N//vTm5n/DpuzB1LQvhIYeM+Fjf/Hy/JPgcLgexT8l3lQHbI/b+GGn5yAgAAwPFW291R218wld9mJ4Sn8+Ry/okjzB/3V4zPmb/dfvf/9SVLm8VL8//1zef/i5JuOv7v+D/zxPH/OZ3su6IXpQ/sPqZd0aXqmBeO/8/pZH+3Of4/J8f/Hf+fi+P/LTj+P6eT/WkrfUva5ktXCOHlP3ro2Wbx0vx/W3vzf+v/zb1oX239v/WN1v/b1mj9v93W/wMAAOZVg4Xm0nleafW+UoZ09b5ShpYLBLZcYtD6f0e8/t9Lpz//m9BEaf6/u735f3w5DBRbXyjr/42sa1DVrTGwzcKAAAAAnIwa7SAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg7fXAP/zPpmbxR3973rMvXDx+xZ61F7963XmnPhnC1MzjHVm4o//G28d/fve59+x5YPUd9x0+/6OVvFxPfvu7dbljrW8OhbCv8MhgTLw2VL0zG7jw0/fs6q4mHhsK4cPFwJY9W06pJr41FMKyYuDhS5a/p5rYk5Z48IVzX6omLk0Dn1px6hvVxDl5oCPt7j8uzrrbkXb35sUhLCkEat29YnF9VbU2/jQPdKZt/NNg1kYMDMai3xjM2oiB6VhialEIK7tD6EqrerSSVdWVVvUvlayqrrSqL1dCOCeE0J1W9UJvVlV3OvIne7OqYuC0D+1//YxqYl9vCCuLgac/d+dZ1cQXkkCt8b/oDeED1ZdM2vi3e7LGe9LGb+sJ4f0hhN60xC+7sxK9aYkXu0N4VyFQa/zz3SHsCrwjxA+fuk+0Hbuu3bJhenpy+zwmevO2+sLmqenJ0Y1bpzdVkj410lFIv3X90Y/9ude/tLF6e9G96wbbSXfn5Xpmury6p+7umpO997Ff/cVKZp+PUv0xf28YCIuu3jG5ffSLG3bu3L4q+9tu9tXZ3648mm2rVQtlWy0rVrJy55XbVu7Yde2KqSs3XD55+eRVq85ePXbm2Jqxj5+5sjqqsezv8RjqnSd+qKd3Fyo5ER8AEhISCy3RWffpNnayf5CXvujPdrQnVGY+oEvTimKWjplRHo9Brz3KER/N95SWI1pVmjiUsqyeI8v19VnWlCYTs7X0ZVlmvteVJofFxjpnNmm83xlGR7sabYfh+rvFzfuzY9i8z+Sbrt00AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP/HDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwA8cCAAAAAML8rcPo2QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgEsBAAD//+erI4o=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x641, 0x1c3) fallocate(r0, 0x10, 0x2, 0x807c27) rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000040)='./file1\x00') 2.306571914s ago: executing program 5 (id=887): syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r2, 0x2, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x4e}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x4, 0x6, r1, &(0x7f00000001c0)='m', 0x1, 0x1}]) 1.879708681s ago: executing program 5 (id=888): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = syz_io_uring_setup(0x231b, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x40000000}, &(0x7f0000000280)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f0000000340)=@rc={0x1f, @fixed, 0x5}}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) 1.828849912s ago: executing program 5 (id=889): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000180)=0xc) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x1e, 0x305, 0x0, 0x0, {}, [@typed={0x8, 0x0, 0x0, 0x0, @pid}, @typed={0x8, 0x9, 0x0, 0x0, @uid=r2}]}, 0x24}}, 0x0) 1.740068723s ago: executing program 5 (id=890): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x1000000, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x1000000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x45844}, 0x0) 1.674514864s ago: executing program 6 (id=891): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg$unix(r1, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) 1.568899795s ago: executing program 5 (id=893): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlockall(0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000f6a000/0x3000)=nil) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil) 1.424647778s ago: executing program 2 (id=894): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='comm\x00') write$binfmt_script(r0, &(0x7f00000003c0)={'#! ', './file0', [{0x20, '[\\\\%-,#]*[.'}]}, 0x17) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000240)=""/135, 0x87}], 0x1, 0x0, 0x0) 1.363993199s ago: executing program 3 (id=895): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000007c0), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000900)={0x0, 0xe6, &(0x7f00000008c0)={&(0x7f0000000840)={0x3c, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xe6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x710ce59bde3da96}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4010044) 1.362382828s ago: executing program 4 (id=896): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000640)=@newqdisc={0xd0, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x400]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x5, 0x4, 0x4000001}]}]}]}}, @TCA_STAB={0x2c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x16, 0x5, 0x1, 0x5, 0x0, 0xffffffff, 0x7fffffff, 0x4}}, {0xc, 0x2, [0x8000, 0x0, 0x0, 0x3]}}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 1.298058209s ago: executing program 6 (id=897): symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0x2, r1}, 0x38) 1.27086982s ago: executing program 2 (id=898): pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) dup3(r0, r1, 0x80000) 1.072594103s ago: executing program 2 (id=899): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000016c0)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)="e6", 0x1}], 0x1}}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x2, 0x4}, &(0x7f0000000200)=0x8) 980.473475ms ago: executing program 2 (id=900): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f00000018c0)="4096def2334cb00e13e727bc80145a0a3f6ce123", 0x14, 0x800, &(0x7f0000000240)={0x3a, 0x0, r1, 0x1, 0x8, 0x6, @local}, 0x14) 935.223895ms ago: executing program 3 (id=901): ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'ip6_vti0\x00', 0x0}) r0 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000000)='\x00', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000040)={r0, r1, r1}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={'poly1305-generic\x00'}}) 828.616597ms ago: executing program 2 (id=902): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001040)="$eJzs3M9rHFUcAPDvTJL+bhNrrba2Gq1i8UfSpFV78KCi4EFB0EM9xiSttdtGmgi2BI0i9SgF7+JR8C/w5kXUgwheFTxKoWgQmnqKzK9mu9mkSZpkbfbzgc2+t/Nm3/vOzNt9My+zAbSt3uxPErEjIn6LiO4ie3OB3uJpZnpy+Pr05HASs7Nv/JXk5a5NTw5XRav1tpeZw2lE+mkSzyfz6x2/cPHMUK02er7M90+cfa9//MLFp06fHTo1emr03ODx48eODjz7zODTqxJnFte1/R+OHdj3yluXXxs+cfntH7/JmrX3YLG8Po5but4koCZ6s63292yucdmjy2j7nWBnXTrpbGFDWJaOiMh2V1fe/7ujI+Z2Xne8/ElLGwesqey7afPCi6dmgQ0siVa3AGiN6os+O/+tHus09PhfuPpCxKYyPTM9OTxzI/7OSMvXu9aw/t6IODH175fZI5Z7HQIAYAXysc2TzcZ/aezNn4u5jl3lHEpPRNwVEbsj4u6I2BMR90TkZe+NiPuKlWe7l1h/b0N+/vgnvdK0zaskG/89Vzf2m6mLv3zq6ShzO/P4u5KTp2ujR8ptcji6Nmf5gUXq+O6lXz9faFn9+C97ZPVXY8GyAVc6Gy7QjQxNDK3WRrj6ccT+zmbxJzdmArIjYF9E7F/eW++qEqcf//rAQoVuHf8iVmGeafariMeK/T8VDfFXksXnJ/u3RG30SH91VMz30y+XXl+o/tuKfxVk+3/bzcd/Q4nuf5JivrYrarXR8+PLr+PS758teE6z0uN/U/JmPmf98zvFax8MTUycH4jYlLya56tzuvz1wbl1q3xVPov/8KHm/X93uU4W//0RkR3EByPigYh4sGz7QxHxcEQcWiT+H1585N1F4k8iiZbu/5Gmn383jv+epH6+fgWJjjPff7vQjPnS9v+xmMo/awv5598tLLWBt7n5AAAA4I6QRsSOSNK+It27I9K0r6/4H/49sS2tjY1PPHFy7P1zI8U9Aj3RlVZXurrrrocOJFPlOxb5wfJacbX8aHnd+IuOrXm+b3isNtLi2KHdbb+5/0fV/zN/drS6dcCac78WtK/G/p+2qB3A+lvK979zAdiYmvT/ra1oB7D+nP9D+2rW/z9qyBv/w8Y0v///0eQn64CNyPgf2pf+D+1L/4e2dDv39a88Ud0ssPL32bLkO/zbJVH94sVa1rU15l6JtOUht1Ei6zHrW+ncb6gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADcyf4LAAD///ss5ts=") openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x105042, 0x1db) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000080)=@v1={0x0, @aes128, 0x1, @desc2}) 827.736647ms ago: executing program 6 (id=912): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x800414, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2bb, &(0x7f0000000440)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2029c1b, 0x0, 0x1, 0x0, &(0x7f0000000080)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(r0, &(0x7f0000000240)='./bus\x00', r0, &(0x7f00000001c0)='./file0\x00', 0x2) 738.282258ms ago: executing program 3 (id=903): ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x0, 0x0, 0x81, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x7fba5b1e, 'syz1\x00', 0x0}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r0, &(0x7f00000000c0)="f461c5bbd75c3583", 0x8, 0x0, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10) 545.118431ms ago: executing program 6 (id=904): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x8) r0 = syz_mount_image$btrfs(&(0x7f00000051c0), &(0x7f0000005200)='./file0\x00', 0x1204608, &(0x7f0000000300)={[{@compress_force}, {@clear_cache}, {@nodatasum}, {@nossd}, {@nospace_cache}, {@space_cache_v1}]}, 0x0, 0x51ab, &(0x7f000000a440)="$eJzs3V9oVFceB/Az+aPxDyY+xV32wX1YWcUFWRF2UdggGF2Whdn1YVnYrFlZxT+7JUgDwb5YS2lBxGCgthSKD33pS0mlUFqqBAsthYogVloUW0teWiiESsGXlpK590xmzvVmxlQbq5+PJHfO/d1z7pnhPsx3zLkTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIIRwcM3Kv+xaPb2urD7dP3bq6LLt507vP3ljaGjLlRAqtf2VvL5n+66/79+95689scPw37JtX1/ZkFnXz7PGkqads/2af/4TQuhOBujMtzs6G/pW0hOEI8UB53XgZv/o5u7BaxN3zmy8eP3QhuJTZ1bPYk9gseTX1fTctTRQ+92RHFFvN1x6laZLNOufXnA/yZMAAO7JpmptU387mr/FrbePpfWkPZC0x5N2fIcw3thYiGzcJWXzXJvWF2meA1lUWFo6z6Sev/71djXtn7STqHEP82w+NI80PWXzHEnqizVPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIfJqx9euvTcy+u3ldWn+8dOHV22/dzp/SdvDA1tuRJCX21/JStXlv+q8w+fLtt57fiRN36zr+ftk515v7jtajg4fBIf/LE3hL0Nlek47JerQqg2F2rN8FKxcLD24M+xAAAAwKPkF7XfHfV2Fge7m9qVWpqs1P5FWVg8cLN/dHP34LWJO2c2Xrx+aMPCx6uWjDdw1/Hq7b65n0pDMI7xNx1vrh4PPVIYZ37piGme/2zmyVsXJn7777L+hfzfN3/+j6+c/A8AAMCPIf+n48yvVf6/+s7zT3UN7n2vrH8h/69tOmUh/8cZx/zfERaW/wEAAOBh9qDz/0BhnPm1yv/fnZ86f/nb46+U9S/k/03t5f+uxmnHnR/FCR/uDWFTq6kDAAAAJeL/u899tBDzevbJQZrXO2ZGe6d6blwtG6+Q/wfay//d9/2ZAQAAAAv1v7F/Hb8wNn6zrF7I/9X28v/SBz5zAAAAoF37Tvz/3PoNIyvL6oX8P9xe/l+eb/OVD1mn9+NfIUz0htAz+2AkK3wQxv9ULwAAAAD3SczpX41u/f7jwel3y44r5P+R+e//H+90ENf/N93/r7D+v6GQ3fVvqxsDAAAA8DgqruePt8fPvrmg7Pv3213/f+uXO3b9d+c/vig7fyH/H2sv/3c2bu/n9/8BAADAAvzcvv/vn4Vx5tfq/v/fDN36et3hZwfL+hfy/3h7+T9uVzQ+van4+jzTG8Ka2Qf53QRfi6c7nBQmuxsK2Quf9Ngde+SFyaUNhZqRpMfve0P49eyDY0lhdSyMJ4WZVXnhbFK4HAv59VAvvJ4UpuKV9sKqfLpp4a1YyBdYTMYVFCvqSyKSHrfLeswW7trjev3kAAAAj5UYnvMs293cDGmUnay0OmB5qwM6Wh3Q2eqAruSA9MCy/WG4uRD3v7jtd7evPPHm06FEIf+fbS//x5diSbYpW/8f4vr//HsN6+v/h2OhLylMxkI1vWNANZ4jC7sn4jn6qnmPmTX1AgAAADzS4ucCnYs8DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH5g7/6D7KrqA4Cf/f0jm91FHAFJNYqA6ZDNJjFKK1MC1UFxpi4OdZw60UR2g9ssJCZhICnthEA7U5hUVKa1o0NDHUdpkUY6jlK1pEyBcaRTm7ZMxWhl/EFtaxnGSodSm87be8/d+87dm/dCdiFLP58/9p33vufnfT/2nXvvOxcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOD/h38ZWPMb+1f89Py6+PfPuOHDewcuve+jWw8c3bRpw5EQJmYf78jCHYMrui785sBlj+3f+flzp/rvP9Cbl8vjYVnjT2d+55ai1uUhfLEjhO40sHooC/Tk94difSuGQjgtzAWKElODWYm04fDQQAgHw1ygqOr+gRCGSoErjzz4wIFG4o6BEM4NIfSlbXy7L2tjIA2c15sFBtPA9u4s8F/HMkXgS51ZAE5afDMUL/pDE80ZRucvV/P661mwjr240uF1xcRofb4fX7LInSrpTR+YOKmnrVIdi6Ly9jjs3bYE3m2V7Xy7p638RSr/hnJsLtQXOientm65bmZ3fKQzjI111dW0SM/z40/feNWJpJfM6zB2YHRBXofP3vme68+afMuNt24/54m177vg6Ml2s27zLra+kL/mlszzGG30ebIE3n6Vb0krfekKIfzcB7tv6vrtI5+qi1fm/6PHn//Hl3O87WzKHWt9bjibm8dHhmLiqeFsbg4AAABLxlLYa/qjs1/xe6s61zxeV19l/r+yveP/8ZB/PpnPRns4hI2ziZtHQjhz9vEscHds7gMjIbxmNjXRHLgkCRwO4azZxKqiqqREfyyxMgk8OZwHNiaBh2NgIgl8OgZuTwK3xMChJHBVDBxOApfGQJhuHsfPD+fjaDswEAObs414KJ6F8JPh2Fqyrb5VVAUAALBA8tlhT/Pd0rkOJ5shTi8PDbTKEM/Ars3Ql9SQzmCLaVVtDd2tauhsVUMx7n3HH36l5o5WNVdOw+hoznDpK/7w/BVfu+ELoUZl/j9+/Pl/3zwd6agc/w/hitm/MXdnHpkp4psnmjIAAAAAJ2HtG2a+9idnv+nNdfHK/H9je+f/x30iXaXM4dG4G2LbSAjjzYGs2jdXA9lR72V5AAAAAJaC4nh8cSx8Or/NTtFO59PV/BMnmD8e+N84b/5fCpOnb/vBUxvq+luZ/0+0d/7/YPNt1omHYy8+NhJCfynwSOxlIzBrZQx89+LmQD7+h+MGuC1WlZ+YUFR1WyyxOQbGk8DBuhLfKEqc2RzIn6yi8ZuLcUznJUoBAAAAeMHF3QHxuHw8///Ctd/70KaP7/1cXbnK/H/ziZ3/PzsPrpzeP7MshDXdIXSlPwx4dDBbGDAGhjryxFcHs7q60qpuGgzhosbA0qqeyNf/707XGDwykFUVA2e+9rNPn9dIfGoghDXlwGPvvWt2x8juJFA0/qsDIby6Mdq08S/0Z433pI3/QX8IryoFiqo+0B9Co7HetKoH+/LrGKRV/VlfCKeXAkVVb+wLYU8AYImK/0onyw/u2rN325aZmamdi5iI+/AHwtbpmamxq7bPTPbV9Gky6XPTMkY3VcfU2ebYj+ZLFN1z+dhIO+nid4Lj5b7k+/ErJw7m9+N3oZ7Zca7rabq7Ph3y68+pNpEO6cUY8mC5krknsVJ/zN8bloX+63ZN7Ry7Ycvu3TvXZn/bzb4u+xsPM2Xbam26rQbn61sbL492F0N/vtuq6TJXa3Zfs2PNrj17V09fs+Xqqaunrn3D+LrxdevHN7zpwjWNUY1nf1sM9fz5qk6Geuyu6hDavQbU8x3qK7tLlbwQnxoSEhJLLbHl4q/+5b1nfWJZ3cdPZf6/4/jz//ipEz/58/UZ6o7/j8bD/Nnjc4f5N8fAwXaP/4/WHc0vTgxYmQT2xcA+h/kBAAB4aYi7G+PezLhXuuem1WN//MlHnqwrV5n/72vv9/8LtP5/sXT95XXL/K+KJcbr1v9Pl/kv1v/fV7f+f7rMf7H+/8EXYf3/64pAskl+Yv1/AADgpeCFW/+/5fL+6QUCKhlaLu+fXiCgkqHlMv7tXiDghNf/f/tzr+u55iOvviXUqMz/b29v/m/hfgAAADh13HVkQ8eD//o/D9XFK/P/g+3N/1/49f9C3fn/K+sCE3ULA1r/DwAAgCWqbv2/9a/78ebP/WzFD+vKVeb/h9qb/8fTLjqbcsdanxvO1rQL6Zp2Tw0XPxkAAACApaEzjI21u6Jp08qolzz/Nh/PlwI9Xrrsr758zT8+8tb39tfVV5n/H25v/t/0u4xn73zP9WdNvuXG527dfs4Ta993wdG54/8AAADA4ml3vwQAAAAAAAAAAAAAAPDie3rv5Lv++ew7P1MXr/z+P1wx+3jd7//jdf/i7wte3pQ71tp6/b/8/pXvuHfP7JKFjw6HcE45sG3/ttNCfm3+88uBBzatOqOR2J+W+Mp3Lv1BI/H+NPC21S97ppG4KAlsjosknpUG4lUVn1meBOLyin+fBuL2OJQGevPA7y7PxtGRbqsfDWXbqiPdVo8PhTBSChTb6otDWRsd6QDvSALFAD+UBuIAfyUPdKa9undZ1qsYGIpF/2hZ1isAAE5Z8VtgT9g6PTM1Hr/Cx9tXdjffRk1Llt1UrbajzeaP5kuT3XP52Eg76a70u+jctcZ7Ql9jCGsrX1fLWTpmR7kwtbTYdC+vGXKr1d7a/XX2iW663voRDWQjGrtq+8xkT8uBr2+dZV13yyxrK5OdcpbO2U3aRi1t9KWNEbW5bdrocrzfGcbGupJcvxiDo6HJQr0iyuv81b0Kynn2Tb7xb75x7Nihuvoq8//R9ub/feVxPZNfDGBfvLLezSMhnNnmiAAAAIB2fevL/7Ru+yd+55709ort1956weCPLq4rV5n/r2xv/h93jOWHgrO9HYfj9f+L+f9oFrg7NveBkRBeM5uaiCWyC+pfHkuMZ4G74w6TVbHE5onmqvpj4FASeHI4DxxOAg/HQL6X4rMh35XzkeEQNsymrmgusSOWGE0C74yBlUlgLAbGk8DyGNiYBP59eR6YSAJfj4Ew3byt/ny5vSsAAMDzkM+zeprvhnSed6i7VYaOVhkGW2XobJWhr1WGulHE+/fFDD3JySsdpUw9aa0DSS2VDPFi+Cfcr0qG8I3mnGnBStPx/IPifIOO5gz/dtnrv33erlXtX/9/vL35/2Dzbdb6w3H+P3f9vyzwSOzex+Kp4ytj4LsXNwfyHQMPx8nubUVVE3mJfNJ+WyyxMQZWJoEdMbAxCWy+Ig8cPKM5kM+0i8ZvLhqfzkuUAgAAAPCCizsI4m6aOP//0/+++3MH/uHav64rV5n/b2xv/h/bW1Zu7Jai1uUhfLFjrjdFYPVQFoj7MYbiz+NXDIVwWmkHR1FiajAr0Zs0HB4ayH6h3ptWdf9AtsZAvH/lkQcfONBI3DEQwrmlvS9FG9/uy9oYSAPn9WaBwTSwvTsLxD0/ReBLnVkATlqxVzC+oPJTXQqj85eref29VK4Jmg6vsg90nnzz/eZqsfSlD+T7VAsn9rRVqmNRVN4eh73bluK7bdS7rfxFKv+Gcmwu1Bc6J6e2brluZnd8pPxL1opFep7Lv1JtJ70Ar8N9z7+3rfWlHRhPPj7G5y83/+uwI1b37J3vuf6sybfceOv2c55Y+74LjrbdjRrxh8Lv/uTLRsubd7H1hfw1t+Q+TyZ8nizFfwMrPW2NGexTv//V//jp4z+ri1fm/xPtzf+7k9tZz8aNuWskhNeXNu6jcfP/8kj2OVgKZJ+Sp1cD2SH37w3XfnICAADAQit2dxT7C6bz2+yE8HSeXM0/cYL54/6KjfPmb7ffW29+aP8P/+6Or9TFK/P/zcef//cn3XT83/F/Fonj//M61XdF96cP7DupXdGV6lgUjv/P61R/tzn+Py/H/x3/n4/j/y04/j+vU/1pq3xL2uFLVwjh6++/8+33bP+18+rilfn/jvbm/9b/m3/RvmL9v8116//tqFv/b5/1/wAAgEVVs9BcOs+rrN5XyZCu3lfJ0HKBwJZLDFr/74TX/3vrO//3+mOvuGRnqFGZ/+9rb/4fXw7Lyq0vlfX/Vl5RU9XtMbDDwoAAAACciup2EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDievcvPLl8029eOF0X//4ZN3x478Cl931064GjmzZtOBJClrUjC3cMrui68JsDlz22f+fnz53qv/9AX16uJ789uyl3rPW54RAOlh4Ziomnhht35gJXvuPePd2NxKPDIZxTDmzbv+20RuLTwyGcXw48sGnVGY3E/rTEV75z6Q8aifengbetftkzjcRFeaAj7e4nl2fd7Ui7e2B5CCOlQNHdX1/eXFXRxmV5oDNt4zNDWRsxMBSLfnwoayMGZmKJ6f4Q1nSH0JVW9bW+rKqutKq/6Muq6kqr+q2+EC4KIXSnVX2nN6uqOx353/ZmVcXAma/97NPnNRIHe0NYUw489t67NjQSH0oCRePv6g3h1Y2XTNr4fT1Z4z1p43f0hPCqEEJvWuI/u7MSvWmJJ7pDOL0UKBr/YHcIewIvCfHDZ7L84K49e7dtmZmZ2rmIid68rYGwdXpmauyq7TOTfUmf6nSU0sduOn78eI4+feNVjdt7Lh8baSfdnZfrme3yup6mu+sXqvftOtHex34NliuZez4q9cf8vWFZ6L9u19TOsRu27N69c232t93s67K/XXk021ZrF2pbdbYoHz3fbXV+uZI1u6/ZsWbXnr2rp6/ZcvXU1VPXvmF83fi69eMb3nThmsaoxrO/CzHUu44fX4yhvrK7VMkL8QEgISGx1BKdTZ9u46f6P73KF/25jvaEvtkP6Mq0opylY3aUCzHoS6rxrkUadGVKUhnR2srEoZJlXess6yuTibksA1mW2e91lclhuabO2U0a73eGsbHazTLafLe8eX88z+Zt1+P5pms3DQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/B87cCAAAAAAAOT/2ghVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV2IEDAQAAAAAg/9dGqKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsIOHAsAAAAACPO3DqNnAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBSAAAA//+3Rsqd") ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000440)={0x2, 0x4, {0xffffffffffffffff, @usage=0x70b5, 0x0, 0x2, 0x0, 0x0, 0xba55, 0xfffffffffffffffb, 0x0, @struct={0x0, 0xce82}, 0x4000, 0x3, [0x0, 0xd5, 0x1000000000]}, {0xfffffffffffffffe, @usage=0x9, 0x0, 0x65dd, 0x1, 0x1, 0x0, 0xa, 0x58a, @usage=0x6, 0x1, 0xa, [0x4, 0x1, 0x4002, 0xfffffffffffffffc, 0x0, 0x1]}, {0x6, @struct={0x4, 0x5}, 0x0, 0x7, 0x80800, 0xfffffffffffffffe, 0x0, 0x2, 0x4a, @struct={0x0, 0x6}, 0xffffffff, 0x4, [0x0, 0x800004, 0x0, 0x3ff, 0x80]}}) 496.794222ms ago: executing program 3 (id=905): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) r1 = epoll_create(0xff) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x20000016}) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000001c0)={0xf0f046, 0x4000000}) 322.853245ms ago: executing program 2 (id=906): r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000080)={{}, {0x77359400}}, 0x0) clock_settime(0x0, &(0x7f0000003c80)={0x77359400}) timerfd_settime(r0, 0x3, &(0x7f0000000140)={{0x77359400}, {0x0, 0x3938700}}, 0x0) 296.163695ms ago: executing program 4 (id=907): syz_init_net_socket$rose(0xb, 0x5, 0x0) r0 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x0, 0x317}, &(0x7f00000006c0)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000240)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) 695.889µs ago: executing program 4 (id=908): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e22, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xff}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f0000000080)={0xa, 0x8000, 0x0, @rand_addr=' \x01\x00'}, 0x1c, &(0x7f0000000640)=[{&(0x7f0000000380)="d0", 0x1}], 0x1}}], 0x1, 0x4000040) 0s ago: executing program 3 (id=909): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x220c412, &(0x7f0000000280)=ANY=[], 0x9, 0xa46, &(0x7f0000000400)="$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") open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000080)=ANY=[@ANYBLOB="16000000020000001d"], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[@ANYBLOB="20000000020000001d"], 0x8840) kernel console output (not intermixed with test programs): 6] loop2: detected capacity change from 0 to 32768 [ 97.930049][ T4716] XFS (loop2): Mounting V5 Filesystem [ 98.110790][ T4716] XFS (loop2): Ending clean mount [ 98.141846][ T4716] XFS (loop2): Quotacheck needed: Please wait. [ 98.178206][ T4740] xt_hashlimit: size too large, truncated to 1048576 [ 98.229960][ T4716] XFS (loop2): Quotacheck: Done. [ 98.471070][ T4728] loop3: detected capacity change from 0 to 32768 [ 98.477699][ T4251] XFS (loop2): Unmounting Filesystem [ 98.499950][ T4744] loop1: detected capacity change from 0 to 128 [ 98.563745][ T4728] XFS (loop3): Mounting V5 Filesystem [ 98.720310][ T4744] EXT4-fs (loop1): Test dummy encryption mode enabled [ 98.738671][ T4744] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 98.748043][ T4744] ext4 filesystem being mounted at /23/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 99.308664][ T4260] Bluetooth: hci1: command 0x0409 tx timeout [ 99.774464][ T4712] chnl_net:caif_netlink_parms(): no params data found [ 99.800570][ T4728] XFS (loop3): Ending clean mount [ 99.838768][ T4728] XFS (loop3): Quotacheck needed: Please wait. [ 99.883372][ T41] device hsr_slave_0 left promiscuous mode [ 99.933059][ T41] device hsr_slave_1 left promiscuous mode [ 99.933258][ T4728] XFS (loop3): Quotacheck: Done. [ 99.970961][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.990498][ T41] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 100.017226][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.048427][ T41] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 100.057181][ T41] device bridge_slave_1 left promiscuous mode [ 100.057844][ T4253] EXT4-fs (loop1): unmounting filesystem. [ 100.079911][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.157390][ T41] device bridge_slave_0 left promiscuous mode [ 100.174229][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.193978][ T4250] XFS (loop3): Unmounting Filesystem [ 100.262950][ T41] device veth1_macvtap left promiscuous mode [ 100.285556][ T41] device veth0_macvtap left promiscuous mode [ 100.302105][ T41] device veth1_vlan left promiscuous mode [ 100.318469][ T41] device veth0_vlan left promiscuous mode [ 100.693272][ T4770] loop3: detected capacity change from 0 to 64 [ 101.388569][ T4260] Bluetooth: hci1: command 0x041b tx timeout [ 101.739647][ T4784] loop1: detected capacity change from 0 to 1024 [ 101.760426][ T4784] EXT4-fs: Ignoring removed oldalloc option [ 101.766421][ T4784] EXT4-fs: Ignoring removed bh option [ 101.816172][ T4784] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 101.945655][ T4784] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 102.043478][ T26] audit: type=1800 audit(1750193890.828:3): pid=4784 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.162" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 102.093481][ T4784] EXT4-fs error (device loop1): mb_free_blocks:1815: group 0, inode 18: block 113:freeing already freed block (bit 7); block bitmap corrupt. [ 102.375828][ T4253] EXT4-fs (loop1): unmounting filesystem. [ 102.387933][ T41] team0 (unregistering): Port device team_slave_1 removed [ 102.482308][ T4798] loop2: detected capacity change from 0 to 64 [ 102.566530][ T41] team0 (unregistering): Port device team_slave_0 removed [ 102.979600][ T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 103.172123][ T4806] netlink: 16 bytes leftover after parsing attributes in process `syz.4.172'. [ 103.468589][ T4260] Bluetooth: hci1: command 0x040f tx timeout [ 103.475210][ T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 104.081235][ T41] bond0 (unregistering): Released all slaves [ 104.138474][ T4297] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 104.323283][ T4818] loop4: detected capacity change from 0 to 256 [ 104.336647][ T4712] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.343941][ T4297] usb 4-1: Using ep0 maxpacket: 32 [ 104.351521][ T4297] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.365980][ T4712] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.373489][ T4297] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 104.394956][ T4818] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 104.420391][ T4712] device bridge_slave_0 entered promiscuous mode [ 104.439092][ T4712] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.446547][ T4712] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.464699][ T4712] device bridge_slave_1 entered promiscuous mode [ 104.472768][ T4297] usb 4-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 104.483569][ T4297] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 104.511736][ T4297] usb 4-1: Product: syz [ 104.516163][ T4297] usb 4-1: Manufacturer: syz [ 104.528357][ T4297] usb 4-1: SerialNumber: syz [ 104.554402][ T4297] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input8 [ 104.646606][ T4712] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.664889][ T4712] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.711069][ T4712] team0: Port device team_slave_0 added [ 104.719471][ T4712] team0: Port device team_slave_1 added [ 104.744871][ T4712] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.753225][ T4712] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.802445][ T4712] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.815864][ T4712] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.823178][ T4712] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.854816][ T4297] usb 4-1: USB disconnect, device number 3 [ 104.870247][ T4297] appletouch 4-1:1.0: input: appletouch disconnected [ 104.881612][ T4712] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.002118][ T4712] device hsr_slave_0 entered promiscuous mode [ 105.025171][ T4712] device hsr_slave_1 entered promiscuous mode [ 105.038965][ T4712] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 105.048229][ T4712] Cannot create hsr debugfs directory [ 105.238345][ T4241] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 105.277775][ T41] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.360542][ T4262] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 105.371069][ T4262] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 105.388403][ T4262] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 105.397951][ T4262] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 105.407363][ T4262] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 105.414991][ T4262] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 105.448331][ T4241] usb 5-1: Using ep0 maxpacket: 32 [ 105.455328][ T4241] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 105.483576][ T4241] usb 5-1: config 0 has no interface number 0 [ 105.498687][ T41] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.519871][ T4241] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 105.544002][ T4241] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.552378][ T4260] Bluetooth: hci1: command 0x0419 tx timeout [ 105.568329][ T4241] usb 5-1: Product: syz [ 105.573304][ T4241] usb 5-1: Manufacturer: syz [ 105.575362][ T4825] syz.2.179 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 105.577925][ T4241] usb 5-1: SerialNumber: syz [ 105.594842][ T4241] usb 5-1: config 0 descriptor?? [ 105.605347][ T4241] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 105.722948][ T41] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.809048][ T4241] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 105.834841][ T4241] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 105.891126][ T41] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.942970][ T4712] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 105.973567][ T4712] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 106.001540][ T4712] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 106.040605][ T4712] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 106.349463][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 106.358572][ T4255] usb 5-1: USB disconnect, device number 3 [ 106.375622][ T4255] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 106.394826][ T4826] chnl_net:caif_netlink_parms(): no params data found [ 106.422711][ T4255] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 106.461450][ T4255] quatech2 5-1:0.51: device disconnected [ 106.548844][ T4712] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.566793][ T4833] loop3: detected capacity change from 0 to 32768 [ 106.594449][ T4833] XFS (loop3): Mounting V5 Filesystem [ 106.626864][ T4712] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.634738][ T4826] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.643037][ T4826] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.651822][ T4826] device bridge_slave_0 entered promiscuous mode [ 106.661378][ T4826] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.669682][ T4826] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.683097][ T4826] device bridge_slave_1 entered promiscuous mode [ 106.692365][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 106.700814][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 106.705176][ T4833] XFS (loop3): Ending clean mount [ 106.747102][ T4833] XFS (loop3): Quotacheck needed: Please wait. [ 106.758434][ T32] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 106.786427][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 106.796301][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 106.805273][ T4309] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.813910][ T4309] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.826623][ T4833] XFS (loop3): Quotacheck: Done. [ 106.880156][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 106.897788][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 106.907712][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 106.942378][ T4250] XFS (loop3): Unmounting Filesystem [ 106.944976][ T4309] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.949356][ T32] usb 3-1: Using ep0 maxpacket: 8 [ 106.955217][ T4309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.976836][ T32] usb 3-1: config 0 has no interfaces? [ 106.982503][ T32] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 106.992935][ T32] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.013387][ T32] usb 3-1: config 0 descriptor?? [ 107.019599][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 107.021767][ T4856] loop4: detected capacity change from 0 to 736 [ 107.039180][ T4826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.142043][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 107.159300][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 107.179230][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 107.202548][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 107.213760][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 107.223004][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 107.261829][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 107.275004][ T4241] usb 3-1: USB disconnect, device number 3 [ 107.282136][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 107.305902][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 107.330356][ T4858] loop3: detected capacity change from 0 to 256 [ 107.337825][ T4858] exfat: Unknown parameter 'iocha]set' [ 107.349084][ T4712] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 107.367977][ T4826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.432824][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 107.468539][ T4260] Bluetooth: hci3: command 0x0409 tx timeout [ 107.529330][ T4826] team0: Port device team_slave_0 added [ 107.596120][ T4826] team0: Port device team_slave_1 added [ 107.628482][ T4260] Bluetooth: hci1: command 0x0405 tx timeout [ 107.833462][ T4826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.858603][ T4826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.030680][ T4826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.062111][ T4826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.098616][ T4826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.100223][ T4878] input: syz1 as /devices/virtual/input/input9 [ 108.124616][ C1] vkms_vblank_simulate: vblank timer overrun [ 108.132533][ T4826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.417464][ T4826] device hsr_slave_0 entered promiscuous mode [ 108.450139][ T4826] device hsr_slave_1 entered promiscuous mode [ 108.468831][ T4826] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 108.492490][ T4887] loop4: detected capacity change from 0 to 256 [ 108.494598][ T4826] Cannot create hsr debugfs directory [ 108.505977][ T4889] loop2: detected capacity change from 0 to 47 [ 108.581654][ T4889] MINIX-fs: deleted inode referenced: 9 [ 108.600461][ T4889] MINIX-fs: deleted inode referenced: 9 [ 108.902488][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 108.920580][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 109.116805][ T4712] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.225217][ T41] device hsr_slave_0 left promiscuous mode [ 109.250366][ T41] device hsr_slave_1 left promiscuous mode [ 109.269084][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.276680][ T41] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.324160][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.343632][ T41] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.355264][ T41] device bridge_slave_1 left promiscuous mode [ 109.366042][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.385730][ T41] device bridge_slave_0 left promiscuous mode [ 109.414983][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.536566][ T41] device veth1_macvtap left promiscuous mode [ 109.549865][ T4262] Bluetooth: hci3: command 0x041b tx timeout [ 109.556051][ T41] device veth0_macvtap left promiscuous mode [ 109.566555][ T41] device veth1_vlan left promiscuous mode [ 109.572942][ T41] device veth0_vlan left promiscuous mode [ 109.828447][ T4300] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 110.035504][ T4300] usb 5-1: Using ep0 maxpacket: 8 [ 110.043531][ T4300] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 110.068534][ T4300] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 110.078810][ T4300] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.103549][ T4300] usb 5-1: config 0 descriptor?? [ 110.349014][ T4300] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 110.451408][ T41] team0 (unregistering): Port device team_slave_1 removed [ 110.499772][ T41] team0 (unregistering): Port device team_slave_0 removed [ 110.547651][ T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 110.597662][ T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 110.605079][ T4300] usb 5-1: USB disconnect, device number 4 [ 111.080672][ T41] bond0 (unregistering): Released all slaves [ 111.281094][ T4934] mmap: syz.4.216 (4934) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 111.634561][ T4262] Bluetooth: hci3: command 0x040f tx timeout [ 111.705659][ T4826] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 111.739062][ T4826] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 111.781310][ T4826] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 111.811617][ T4826] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 111.944307][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 111.984045][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 112.065092][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 112.085631][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 112.124423][ T4712] device veth0_vlan entered promiscuous mode [ 112.155180][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 112.173154][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 112.217112][ T4712] device veth1_vlan entered promiscuous mode [ 112.270754][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 112.289712][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 112.317251][ T4958] loop2: detected capacity change from 0 to 64 [ 112.321983][ T4826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.348726][ T4712] device veth0_macvtap entered promiscuous mode [ 112.356688][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 112.370694][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 112.379146][ T4958] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing [ 112.413132][ T4712] device veth1_macvtap entered promiscuous mode [ 112.439721][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 112.457124][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 112.484324][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 112.504107][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 112.522707][ T4826] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.560354][ T4712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.577897][ T4712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.597588][ T4712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.615024][ T4712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.625674][ T4712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.637021][ T4712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.678740][ T4712] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.693996][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 112.726757][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 112.749685][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.756975][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.805825][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 112.835975][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 112.853000][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 112.870238][ T4712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.897413][ T4712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.917410][ T4712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.940636][ T4712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.960962][ T4712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.984199][ T4712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.013200][ T4712] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.038508][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 113.047405][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 113.064598][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 113.075588][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 113.091196][ T4755] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.098402][ T4755] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.115958][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 113.135891][ T4712] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.152005][ T4712] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.175308][ T4712] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.185482][ T4712] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.208681][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 113.264835][ T4972] loop2: detected capacity change from 0 to 32768 [ 113.272712][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 113.285336][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 113.301758][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 113.310910][ T4972] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop2 scanned by syz.2.228 (4972) [ 113.327140][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 113.347512][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 113.360193][ T4972] BTRFS info (device loop2): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 113.373055][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 113.381125][ T4972] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 113.396214][ T4972] BTRFS info (device loop2): using free space tree [ 113.419531][ T4826] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 113.458018][ T4826] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 113.476575][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 113.495122][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 113.507764][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 113.594849][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.610804][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.650629][ T4755] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.684022][ T4755] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.692623][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 113.708300][ T4262] Bluetooth: hci3: command 0x0419 tx timeout [ 113.726699][ T4972] BTRFS info (device loop2): enabling ssd optimizations [ 113.747456][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 114.143999][ T5010] netlink: 8 bytes leftover after parsing attributes in process `syz.4.233'. [ 114.177944][ T5010] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 114.307406][ T4251] BTRFS info (device loop2): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 114.334658][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 114.361377][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 114.413013][ T4826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.776852][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 114.789654][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 114.851061][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 114.860475][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 114.880370][ T4826] device veth0_vlan entered promiscuous mode [ 114.899447][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 114.908888][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 114.926421][ T4826] device veth1_vlan entered promiscuous mode [ 115.009397][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 115.025390][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 115.042069][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 115.059145][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 115.093004][ T4826] device veth0_macvtap entered promiscuous mode [ 115.115289][ T5017] loop4: detected capacity change from 0 to 32768 [ 115.124601][ T4826] device veth1_macvtap entered promiscuous mode [ 115.171228][ T4826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.185461][ T5042] loop3: detected capacity change from 0 to 128 [ 115.199554][ T5017] XFS (loop4): Mounting V5 Filesystem [ 115.207524][ T4826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.261484][ T4826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.293283][ T4826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.316569][ T5017] XFS (loop4): Ending clean mount [ 115.333739][ T4826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.353144][ T4826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.385929][ T4826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.416986][ T4826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.436978][ T4826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.441988][ T4264] XFS (loop4): Unmounting Filesystem [ 115.465726][ T1185] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 115.491408][ T1185] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 115.508067][ T1185] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 115.527832][ T5054] loop5: detected capacity change from 0 to 256 [ 115.529026][ T1185] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 115.563786][ T4336] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 115.600251][ T4826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.617783][ T4826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.636953][ T4826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.658276][ T4826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.678551][ T4826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.698617][ T4826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.710481][ T4826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.721688][ T4826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.733563][ T4826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.768792][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 115.779883][ T4336] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 115.790994][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 115.808279][ T4336] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 115.837604][ T4826] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.838666][ T4336] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 115.847211][ T4826] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.865800][ T4826] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.876036][ T4826] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.881756][ T4336] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.894161][ T5062] netlink: 16 bytes leftover after parsing attributes in process `syz.5.250'. [ 115.902926][ T4336] usb 3-1: Product: syz [ 115.908458][ T5062] netem: invalid attributes len -19 [ 115.913867][ T5062] netem: change failed [ 115.918093][ T4336] usb 3-1: Manufacturer: syz [ 115.922976][ T4336] usb 3-1: SerialNumber: syz [ 115.932619][ T5063] tap0: tun_chr_ioctl cmd 1074025676 [ 115.933503][ T4336] usb 3-1: config 0 descriptor?? [ 115.948484][ T5063] tap0: owner set to 0 [ 115.964274][ T5047] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 115.978367][ T5047] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 116.072303][ T5065] loop4: detected capacity change from 0 to 8 [ 116.116475][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.135119][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.166026][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 116.196002][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.225686][ T5047] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 116.235188][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.247257][ T5047] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 116.259964][ T1185] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 116.468442][ T4296] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 116.613868][ T5027] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 116.673214][ T4296] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 116.692156][ T4296] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 116.705722][ T4296] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 116.716047][ T4296] usb 4-1: config 1 has no interface number 0 [ 116.723719][ T4296] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 116.735125][ T4296] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 116.748512][ T4296] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 116.757764][ T4296] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.777399][ T5075] loop1: detected capacity change from 0 to 32768 [ 116.789523][ T4296] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 116.806857][ T26] audit: type=1800 audit(1750193905.588:4): pid=5075 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.178" name="file1" dev="loop1" ino=4 res=0 errno=0 [ 116.858412][ T5027] usb 6-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 116.871049][ T5027] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.886553][ T4336] dm9601 3-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 116.886953][ T5027] usb 6-1: config 0 descriptor?? [ 116.906510][ T5027] gspca_main: spca508-2.14.0 probing 8086:0110 [ 116.916315][ T4336] usb 3-1: USB disconnect, device number 4 [ 117.001138][ T5069] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.030691][ T5069] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.110506][ T5027] gspca_spca508: reg_read err -32 [ 117.307177][ T5084] loop4: detected capacity change from 0 to 32768 [ 117.319412][ T5027] gspca_spca508: reg_read err -71 [ 117.325447][ T5027] gspca_spca508: reg_read err -71 [ 117.330390][ T5084] JBD2: Ignoring recovery information on journal [ 117.339902][ T5027] gspca_spca508: reg_read err -71 [ 117.348327][ T5027] gspca_spca508: reg write: error -71 [ 117.353807][ T5027] spca508: probe of 6-1:0.0 failed with error -71 [ 117.362258][ T5027] usb 6-1: USB disconnect, device number 2 [ 117.376498][ T5084] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 117.409863][ T4296] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 117.606018][ T4264] ocfs2: Unmounting device (7,4) on (node local) [ 117.683506][ T32] usb 4-1: USB disconnect, device number 4 [ 117.697053][ T32] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 117.894585][ T5100] loop4: detected capacity change from 0 to 64 [ 118.805863][ T5123] input: syz0 as /devices/virtual/input/input10 [ 119.251978][ T5140] loop4: detected capacity change from 0 to 1024 [ 119.287380][ T5143] loop5: detected capacity change from 0 to 128 [ 119.303716][ T5140] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 119.332479][ T5140] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.401590][ T26] audit: type=1800 audit(1750193908.188:5): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.281" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 119.425830][ T5140] EXT4-fs error (device loop4): ext4_map_blocks:745: inode #15: block 1: comm syz.4.281: lblock 1 mapped to illegal pblock 1 (length 15) [ 119.525747][ T5140] EXT4-fs error (device loop4): ext4_ext_remove_space:2929: inode #15: comm syz.4.281: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 119.667466][ T4264] EXT4-fs (loop4): unmounting filesystem. [ 119.947812][ T5162] capability: warning: `syz.3.299' uses deprecated v2 capabilities in a way that may be insecure [ 120.145457][ T5135] loop1: detected capacity change from 0 to 40427 [ 120.239612][ T5135] F2FS-fs (loop1): Found nat_bits in checkpoint [ 120.413497][ T5176] loop2: detected capacity change from 0 to 512 [ 120.421446][ T5135] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 120.476176][ T5176] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 120.506936][ T5176] ext4 filesystem being mounted at /75/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.523235][ T4826] syz-executor: attempt to access beyond end of device [ 120.523235][ T4826] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 120.666013][ T5176] Quota error (device loop2): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 120.708497][ T5176] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 120.737211][ T5176] EXT4-fs error (device loop2): ext4_acquire_dquot:6814: comm syz.2.293: Failed to acquire dquot type 0 [ 120.872095][ T4251] EXT4-fs (loop2): unmounting filesystem. [ 120.875445][ T5193] loop5: detected capacity change from 0 to 2048 [ 120.992733][ T5193] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 121.103995][ T5204] netlink: 32 bytes leftover after parsing attributes in process `syz.3.306'. [ 121.159679][ T5205] input: syz1 as /devices/virtual/input/input11 [ 121.216595][ T4712] EXT4-fs (loop5): unmounting filesystem. [ 121.659271][ T5216] device batadv_slave_1 entered promiscuous mode [ 121.709167][ T11] Bluetooth: hci5: Frame reassembly failed (-84) [ 121.726346][ T5221] device batadv_slave_1 left promiscuous mode [ 121.784126][ T5219] sctp: [Deprecated]: syz.5.318 (pid 5219) Use of struct sctp_assoc_value in delayed_ack socket option. [ 121.784126][ T5219] Use struct sctp_sack_info instead [ 122.788247][ T4336] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 122.906821][ T5254] loop4: detected capacity change from 0 to 8 [ 122.988571][ T4336] usb 6-1: Using ep0 maxpacket: 32 [ 123.003632][ T4336] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 123.021018][ T4336] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.034017][ T4336] usb 6-1: config 0 descriptor?? [ 123.245936][ T4336] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 123.268077][ T4336] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 123.278398][ T5026] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 123.283867][ T4336] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 123.295123][ T4336] usb 6-1: media controller created [ 123.313483][ T4336] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 123.460148][ T5026] usb 5-1: config index 0 descriptor too short (expected 227, got 18) [ 123.470694][ T4336] az6027: usb out operation failed. (-71) [ 123.482021][ T5026] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 123.486683][ T4336] az6027: usb out operation failed. (-71) [ 123.497964][ T5026] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.499854][ T4336] stb0899_attach: Driver disabled by Kconfig [ 123.519350][ T4336] az6027: no front-end attached [ 123.519350][ T4336] [ 123.528290][ T5026] usb 5-1: Product: syz [ 123.534989][ T4336] az6027: usb out operation failed. (-71) [ 123.542242][ T4336] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 123.546830][ T5026] usb 5-1: Manufacturer: syz [ 123.556814][ T4336] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input12 [ 123.556941][ T5026] usb 5-1: SerialNumber: syz [ 123.579143][ T4336] dvb-usb: schedule remote query interval to 400 msecs. [ 123.586397][ T4336] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 123.603517][ T4336] usb 6-1: USB disconnect, device number 3 [ 123.610291][ T5026] usb 5-1: config 0 descriptor?? [ 123.630269][ T5026] ch341 5-1:0.0: ch341-uart converter detected [ 123.682905][ T4336] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 123.708616][ T4262] Bluetooth: hci5: command 0x1003 tx timeout [ 123.716851][ T4260] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 124.445768][ T5026] usb 5-1: failed to send control message: -71 [ 124.454255][ T5026] ch341-uart: probe of ttyUSB0 failed with error -71 [ 124.464126][ T5026] usb 5-1: USB disconnect, device number 5 [ 124.471274][ T5026] ch341 5-1:0.0: device disconnected [ 124.673772][ T5294] loop1: detected capacity change from 0 to 128 [ 124.683442][ T5294] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 124.697095][ T5294] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 124.723725][ T5296] netlink: 72 bytes leftover after parsing attributes in process `syz.3.345'. [ 124.768416][ T5027] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 124.785643][ T11] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 124.970867][ T5027] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 124.985385][ T5027] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 125.014512][ T5027] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 125.033823][ T5027] usb 6-1: config 1 has no interface number 0 [ 125.047200][ T5027] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 125.075889][ T5027] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 125.092890][ T5027] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 125.104272][ T5027] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.127965][ T5027] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 125.324970][ T5292] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.366903][ T5292] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.591291][ T5300] loop1: detected capacity change from 0 to 40427 [ 125.626701][ T5300] F2FS-fs (loop1): Invalid Fs Meta Ino: node(1) meta(2) root(4) [ 125.648279][ T5300] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 125.684146][ T5300] F2FS-fs (loop1): invalid crc value [ 125.713317][ T5300] F2FS-fs (loop1): Found nat_bits in checkpoint [ 125.769760][ T5027] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached [ 125.852588][ T5300] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 125.866834][ T5300] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 126.005442][ T32] usb 6-1: USB disconnect, device number 4 [ 126.019668][ T32] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 126.224045][ T41] Bluetooth: hci5: Frame reassembly failed (-84) [ 126.318582][ T4336] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 126.513943][ T4336] usb 4-1: Using ep0 maxpacket: 8 [ 126.521370][ T4336] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 126.568258][ T4336] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 97, changing to 10 [ 126.599868][ T4336] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24929, setting to 1024 [ 126.621768][ T4336] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 126.640708][ T5340] loop2: detected capacity change from 0 to 4096 [ 126.647240][ T4336] usb 4-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 126.661727][ T4336] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.684056][ T4336] usb 4-1: config 0 descriptor?? [ 126.693319][ T5340] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 126.825421][ T5346] loop5: detected capacity change from 0 to 4096 [ 126.867318][ T5346] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 126.885881][ T5346] ntfs3: loop5: Failed to load $Extend. [ 127.108873][ T4336] redragon 0003:0C45:760B.0002: unknown main item tag 0x6 [ 127.130211][ T4336] redragon 0003:0C45:760B.0002: item fetching failed at offset 7/133 [ 127.148960][ T4336] redragon: probe of 0003:0C45:760B.0002 failed with error -22 [ 127.232588][ T5348] loop1: detected capacity change from 0 to 32768 [ 127.252913][ T5348] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop1 scanned by syz.1.366 (5348) [ 127.286202][ T5348] BTRFS info (device loop1): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 127.312057][ T4336] usb 4-1: USB disconnect, device number 5 [ 127.319225][ T5348] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 127.340279][ T5348] BTRFS info (device loop1): using free space tree [ 127.524390][ T5348] BTRFS info (device loop1): enabling ssd optimizations [ 127.604396][ T5354] loop2: detected capacity change from 0 to 32768 [ 127.663508][ T5354] XFS (loop2): Mounting V5 Filesystem [ 127.761153][ T5354] XFS (loop2): Ending clean mount [ 127.770248][ T5354] XFS (loop2): Quotacheck needed: Please wait. [ 127.801546][ T4826] BTRFS info (device loop1): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 127.824579][ T5354] XFS (loop2): Quotacheck: Done. [ 127.883179][ T26] audit: type=1800 audit(1750193916.668:6): pid=5354 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.369" name="file1" dev="loop2" ino=6150 res=0 errno=0 [ 128.076014][ T4251] XFS (loop2): Unmounting Filesystem [ 128.248323][ T5019] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 128.268435][ T4260] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 128.376904][ T5408] loop1: detected capacity change from 0 to 2048 [ 128.395485][ T5408] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 128.438306][ T5019] usb 4-1: Using ep0 maxpacket: 8 [ 128.446610][ T5019] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 128.457923][ T5019] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 128.469170][ T5019] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 128.485325][ T5019] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 128.498639][ T5019] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 128.507678][ T5019] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.627994][ T4755] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 128.680066][ T4755] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 128.721081][ T4755] EXT4-fs (loop1): This should not happen!! Data will be lost [ 128.721081][ T4755] [ 128.740607][ T4755] EXT4-fs (loop1): Total free blocks count 0 [ 128.757376][ T4755] EXT4-fs (loop1): Free/Dirty block details [ 128.757899][ T5019] usb 4-1: GET_CAPABILITIES returned 0 [ 128.765524][ T4755] EXT4-fs (loop1): free_blocks=4096 [ 128.774338][ T4755] EXT4-fs (loop1): dirty_blocks=512 [ 128.778292][ T5019] usbtmc 4-1:16.0: can't read capabilities [ 128.796046][ T4755] EXT4-fs (loop1): Block reservation details [ 128.803576][ T4755] EXT4-fs (loop1): i_reserved_data_blocks=32 [ 128.816266][ T4755] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 480 with error 28 [ 128.929602][ T5426] loop4: detected capacity change from 0 to 8 [ 128.969604][ T5400] usb 4-1: USB disconnect, device number 6 [ 129.114463][ T5433] netlink: 20 bytes leftover after parsing attributes in process `syz.1.389'. [ 129.402010][ T5442] Driver unsupported XDP return value 0 on prog (id 38) dev N/A, expect packet loss! [ 130.398138][ C1] sched: RT throttling activated [ 130.525271][ T5444] loop4: detected capacity change from 0 to 131072 [ 130.535820][ T5444] F2FS-fs (loop4): Wrong CP boundary, start(512) end(1536) blocks(0) [ 130.544074][ T5444] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 130.554587][ T5444] F2FS-fs (loop4): invalid crc value [ 130.577494][ T5444] F2FS-fs (loop4): Found nat_bits in checkpoint [ 130.642515][ T5444] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 130.649680][ T5444] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 130.751033][ T5474] netlink: 8 bytes leftover after parsing attributes in process `syz.1.406'. [ 130.775299][ T5474] netlink: 32 bytes leftover after parsing attributes in process `syz.1.406'. [ 131.164395][ T5484] loop3: detected capacity change from 0 to 1764 [ 131.189268][ T5486] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 131.195332][ T5486] syzkaller0: linktype set to 823 [ 131.263619][ T5484] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 131.775312][ T5482] loop5: detected capacity change from 0 to 32768 [ 131.805105][ T5500] nbd: socks must be embedded in a SOCK_ITEM attr [ 131.806169][ T5482] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop5 scanned by syz.5.411 (5482) [ 131.827479][ T5482] BTRFS info (device loop5): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 131.863662][ T5482] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 131.879695][ T5500] block nbd0: shutting down sockets [ 131.890593][ T5482] BTRFS info (device loop5): using free space tree [ 132.127988][ T5482] BTRFS info (device loop5): enabling ssd optimizations [ 132.283352][ T5523] loop2: detected capacity change from 0 to 1024 [ 132.348558][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.497203][ T4712] BTRFS info (device loop5): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 132.980644][ T5543] loop1: detected capacity change from 0 to 64 [ 132.994531][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.000939][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.236629][ T5555] netlink: 'syz.5.423': attribute type 12 has an invalid length. [ 133.286620][ T5554] af_packet: tpacket_rcv: packet too big, clamped from 122 to 4294967286. macoff=82 [ 133.806486][ T5575] loop4: detected capacity change from 0 to 1024 [ 133.908680][ T5581] loop2: detected capacity change from 0 to 128 [ 133.918657][ T41] hfsplus: b-tree write err: -5, ino 4 [ 133.930359][ T5581] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 133.945470][ T5578] loop3: detected capacity change from 0 to 4096 [ 134.026983][ T5578] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 134.040524][ T5585] loop4: detected capacity change from 0 to 128 [ 134.238940][ T5591] loop1: detected capacity change from 0 to 64 [ 134.256725][ T4250] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 134.292032][ T5591] hfs: unable to locate alternate MDB [ 134.297871][ T5591] hfs: continuing without an alternate MDB [ 134.405233][ T26] audit: type=1800 audit(1750193923.188:7): pid=5591 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.452" name="file1" dev="loop1" ino=18 res=0 errno=0 [ 134.913214][ T5615] netlink: 8 bytes leftover after parsing attributes in process `syz.1.463'. [ 135.525991][ T5622] loop5: detected capacity change from 0 to 4096 [ 135.558097][ T5622] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) [ 135.711701][ T5622] ntfs3: loop5: mft corrupted [ 135.933550][ T5632] netlink: 4 bytes leftover after parsing attributes in process `syz.5.470'. [ 136.014336][ T5634] netlink: 'syz.4.471': attribute type 3 has an invalid length. [ 136.215071][ T5638] loop4: detected capacity change from 0 to 512 [ 136.238989][ T5638] EXT4-fs: Ignoring removed bh option [ 136.264028][ T5641] loop5: detected capacity change from 0 to 1024 [ 136.288189][ T5638] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 136.306494][ T5641] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 136.325647][ T5638] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2818: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 136.358429][ T5638] EXT4-fs (loop4): 1 truncate cleaned up [ 136.364150][ T5638] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 136.396036][ T5641] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 136.495336][ T4712] EXT4-fs (loop5): unmounting filesystem. [ 136.541787][ T4264] EXT4-fs (loop4): unmounting filesystem. [ 136.607072][ T5648] 9p: Unknown uid 00000000004294967295 [ 136.907115][ T5661] loop2: detected capacity change from 0 to 2048 [ 136.960387][ T5661] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 137.141564][ T5668] loop5: detected capacity change from 0 to 2048 [ 137.158407][ T5668] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 137.189002][ T5669] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 137.238904][ T5668] NILFS (loop5): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 137.260349][ T5668] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 137.277413][ T5668] Remounting filesystem read-only [ 137.285431][ T5668] NILFS (loop5): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 137.297836][ T5668] NILFS error (device loop5): nilfs_bmap_last_key: broken bmap (inode number=16) [ 137.320386][ T5668] NILFS (loop5): error -5 truncating bmap (ino=16) [ 137.344636][ T4309] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 137.383223][ T4309] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 137.415773][ T4309] EXT4-fs (loop2): This should not happen!! Data will be lost [ 137.415773][ T4309] [ 137.436032][ T4309] EXT4-fs (loop2): Total free blocks count 0 [ 137.440488][ T5657] loop4: detected capacity change from 0 to 32768 [ 137.449718][ T5668] NILFS (loop5): the device already has a read-only mount. [ 137.459319][ T4309] EXT4-fs (loop2): Free/Dirty block details [ 137.465370][ T4309] EXT4-fs (loop2): free_blocks=4096 [ 137.474134][ T5657] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop4 scanned by syz.4.480 (5657) [ 137.478322][ T4309] EXT4-fs (loop2): dirty_blocks=512 [ 137.500968][ T5657] BTRFS info (device loop4): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 137.511607][ T4309] EXT4-fs (loop2): Block reservation details [ 137.527728][ T5657] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 137.535389][ T4309] EXT4-fs (loop2): i_reserved_data_blocks=32 [ 137.537335][ T5657] BTRFS info (device loop4): using free space tree [ 137.552340][ T4712] NILFS (loop5): disposed unprocessed dirty file(s) when detaching log writer [ 137.581806][ T4309] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 480 with error 28 [ 137.766095][ T5657] BTRFS info (device loop4): enabling ssd optimizations [ 138.017996][ T5695] netlink: 4 bytes leftover after parsing attributes in process `syz.1.486'. [ 138.061355][ T4264] BTRFS info (device loop4): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 138.158218][ T5392] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 138.361983][ T5392] usb 3-1: Using ep0 maxpacket: 8 [ 138.369553][ T5392] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 138.423940][ T5392] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 138.463884][ T5392] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 138.478349][ T5392] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 138.490552][ T5705] loop1: detected capacity change from 0 to 2048 [ 138.512093][ T5392] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 138.514880][ T5705] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 138.547311][ T5392] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.589914][ T5707] mkiss: ax0: crc mode is auto. [ 138.591495][ T5708] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 138.649755][ T5705] NILFS (loop1): DAT doesn't have a block to manage vblocknr = 3044605952 [ 138.660126][ T5705] NILFS error (device loop1): nilfs_bmap_truncate: broken bmap (inode number=15) [ 138.689781][ T5705] Remounting filesystem read-only [ 138.729391][ T5705] NILFS (loop1): error -5 truncating bmap (ino=15) [ 138.783643][ T5392] usb 3-1: GET_CAPABILITIES returned 0 [ 138.792163][ T5392] usbtmc 3-1:16.0: can't read capabilities [ 138.878501][ T4826] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer [ 138.946530][ T5721] loop3: detected capacity change from 0 to 64 [ 139.013259][ T5395] usb 3-1: USB disconnect, device number 5 [ 139.133265][ T5726] loop1: detected capacity change from 0 to 4096 [ 139.183695][ T5726] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 139.247500][ T5737] loop4: detected capacity change from 0 to 1024 [ 139.282183][ T5737] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 139.342711][ T5737] EXT4-fs error (device loop4): ext4_get_inode_usage:834: inode #2: comm syz.4.506: corrupted in-inode xattr [ 139.364902][ T5726] fs-verity: sha256 using implementation "sha256-avx2" [ 139.371089][ T5740] netlink: 8 bytes leftover after parsing attributes in process `syz.3.508'. [ 139.381685][ T5737] EXT4-fs (loop4): Remounting filesystem read-only [ 139.411044][ T5726] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.499: bg 0: block 66: padding at end of block bitmap is not set [ 139.439571][ T5726] fs-verity (loop1, inode 15): ext4_end_enable_verity() failed with err -117 [ 139.485106][ T4264] EXT4-fs (loop4): unmounting filesystem. [ 139.577196][ T4826] EXT4-fs (loop1): unmounting filesystem. [ 139.593984][ T5744] loop5: detected capacity change from 0 to 2048 [ 139.646750][ T5744] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 139.862612][ T5760] loop2: detected capacity change from 0 to 128 [ 139.874121][ T5760] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 139.890042][ T5760] ext4 filesystem being mounted at /111/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 139.978777][ T4251] EXT4-fs (loop2): unmounting filesystem. [ 139.987096][ T4309] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 140.032178][ T4309] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 140.065733][ T4309] EXT4-fs (loop5): This should not happen!! Data will be lost [ 140.065733][ T4309] [ 140.095953][ T4309] EXT4-fs (loop5): Total free blocks count 0 [ 140.108273][ T4309] EXT4-fs (loop5): Free/Dirty block details [ 140.114601][ T4309] EXT4-fs (loop5): free_blocks=4096 [ 140.121187][ T14] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 140.146210][ T4309] EXT4-fs (loop5): dirty_blocks=512 [ 140.151583][ T4309] EXT4-fs (loop5): Block reservation details [ 140.165146][ T4309] EXT4-fs (loop5): i_reserved_data_blocks=32 [ 140.173647][ T4755] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 480 with error 28 [ 140.218562][ T5392] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 140.321318][ T14] usb 4-1: unable to get BOS descriptor or descriptor too short [ 140.345003][ T14] usb 4-1: config 0 interface 0 has no altsetting 0 [ 140.385093][ T14] usb 4-1: New USB device found, idVendor=0e41, idProduct=4156, bcdDevice=15.eb [ 140.418269][ T5392] usb 5-1: Using ep0 maxpacket: 16 [ 140.432559][ T5392] usb 5-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 140.434719][ T14] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.472470][ T5392] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.490600][ T14] usb 4-1: Product: syz [ 140.497160][ T5777] loop5: detected capacity change from 0 to 16 [ 140.497772][ T5392] usb 5-1: Product: syz [ 140.513977][ T14] usb 4-1: Manufacturer: syz [ 140.528211][ T5392] usb 5-1: Manufacturer: syz [ 140.528324][ T14] usb 4-1: SerialNumber: syz [ 140.532857][ T5392] usb 5-1: SerialNumber: syz [ 140.534700][ T5392] usb 5-1: config 0 descriptor?? [ 140.565040][ T14] usb 4-1: config 0 descriptor?? [ 140.576896][ T5777] erofs: (device loop5): mounted with root inode @ nid 36. [ 140.621782][ T5777] syz.5.520: attempt to access beyond end of device [ 140.621782][ T5777] loop5: rw=0, sector=8, nr_sectors = 16 limit=16 [ 140.651938][ T5777] syz.5.520: attempt to access beyond end of device [ 140.651938][ T5777] loop5: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 140.666316][ T5777] syz.5.520: attempt to access beyond end of device [ 140.666316][ T5777] loop5: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 140.777428][ T5392] ums-onetouch 5-1:0.0: USB Mass Storage device detected [ 140.828321][ T4262] Bluetooth: hci0: command 0x0401 tx timeout [ 140.834556][ T4260] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 140.932072][ T5392] usb 5-1: USB disconnect, device number 6 [ 141.008925][ T14] snd_usb_podhd 4-1:0.0: Line 6 POD HDDESKTOP found [ 141.206897][ T14] snd_usb_podhd 4-1:0.0: endpoint not available, using fallback values [ 141.218685][ T14] snd_usb_podhd 4-1:0.0: invalid control EP [ 141.224803][ T14] snd_usb_podhd 4-1:0.0: cannot start listening: -22 [ 141.256426][ T14] snd_usb_podhd 4-1:0.0: Line 6 POD HDDESKTOP now disconnected [ 141.264569][ T14] snd_usb_podhd: probe of 4-1:0.0 failed with error -22 [ 141.312106][ T5795] loop2: detected capacity change from 0 to 4096 [ 141.487632][ T5799] loop5: detected capacity change from 0 to 128 [ 141.492364][ T5390] usb 4-1: USB disconnect, device number 7 [ 141.559195][ T5799] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 141.579139][ T5799] ext4 filesystem being mounted at /64/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 141.630630][ T5804] loop4: detected capacity change from 0 to 2048 [ 141.696998][ T5804] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 141.772011][ T4712] EXT4-fs (loop5): unmounting filesystem. [ 141.903154][ T5820] loop5: detected capacity change from 0 to 1764 [ 141.964905][ T11] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 141.988949][ T11] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 142.048364][ T11] EXT4-fs (loop4): This should not happen!! Data will be lost [ 142.048364][ T11] [ 142.076842][ T11] EXT4-fs (loop4): Total free blocks count 0 [ 142.083087][ T11] EXT4-fs (loop4): Free/Dirty block details [ 142.088378][ T4255] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 142.089271][ T11] EXT4-fs (loop4): free_blocks=4096 [ 142.105290][ T11] EXT4-fs (loop4): dirty_blocks=512 [ 142.120245][ T11] EXT4-fs (loop4): Block reservation details [ 142.137090][ T11] EXT4-fs (loop4): i_reserved_data_blocks=32 [ 142.145235][ T48] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 480 with error 28 [ 142.291818][ T4255] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 142.311326][ T4255] usb 2-1: config 0 has no interface number 0 [ 142.311414][ T5828] loop3: detected capacity change from 0 to 8192 [ 142.317472][ T4255] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.344644][ T5830] input: syz0 as /devices/virtual/input/input13 [ 142.362100][ T5828] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 142.364030][ T4255] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.375672][ T5828] UDF-fs: Scanning with blocksize 512 failed [ 142.388325][ T4255] usb 2-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 142.397488][ T4255] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.413815][ T5828] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 142.420963][ T4255] usb 2-1: config 0 descriptor?? [ 142.424132][ T5828] UDF-fs: Scanning with blocksize 1024 failed [ 142.446638][ T5828] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 142.460645][ T5828] UDF-fs: Scanning with blocksize 2048 failed [ 142.480889][ T5828] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 142.608371][ T5842] loop2: detected capacity change from 0 to 512 [ 142.616427][ T5842] EXT4-fs: Ignoring removed bh option [ 142.628594][ T5842] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 142.667354][ T5842] EXT4-fs (loop2): 1 truncate cleaned up [ 142.688039][ T5842] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 142.688273][ T4241] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 142.851709][ T4255] prodikeys 0003:041E:2801.0003: unknown main item tag 0x0 [ 142.868408][ T4255] prodikeys 0003:041E:2801.0003: unknown main item tag 0x0 [ 142.876586][ T4255] prodikeys 0003:041E:2801.0003: unknown main item tag 0x0 [ 142.894821][ T4255] prodikeys 0003:041E:2801.0003: unknown main item tag 0x0 [ 142.902373][ T4241] usb 5-1: Using ep0 maxpacket: 8 [ 142.910026][ T4241] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 142.929734][ T4251] EXT4-fs (loop2): unmounting filesystem. [ 142.932202][ T4255] prodikeys 0003:041E:2801.0003: unknown main item tag 0x0 [ 142.950582][ T4241] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 142.963319][ T4255] prodikeys 0003:041E:2801.0003: unknown main item tag 0x0 [ 142.973665][ T4241] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 143.010446][ T4255] prodikeys 0003:041E:2801.0003: unknown main item tag 0x0 [ 143.014737][ T5850] netlink: 40 bytes leftover after parsing attributes in process `syz.5.553'. [ 143.037264][ T4241] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 143.067779][ T4255] prodikeys 0003:041E:2801.0003: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.1-1/input1 [ 143.084294][ T4241] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 143.106114][ T4241] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.124867][ T4255] hid_prodikeys: hid-prodikeys: failed to find output report [ 143.124867][ T4255] [ 143.166486][ T4255] usb 2-1: USB disconnect, device number 3 [ 143.352675][ T4241] usb 5-1: GET_CAPABILITIES returned 0 [ 143.358542][ T4241] usbtmc 5-1:16.0: can't read capabilities [ 143.611743][ T4241] usb 5-1: USB disconnect, device number 7 [ 143.892934][ T5864] loop3: detected capacity change from 0 to 8192 [ 143.935524][ T5864] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 144.043967][ T5871] loop1: detected capacity change from 0 to 512 [ 144.279506][ T5879] loop4: detected capacity change from 0 to 8 [ 144.441848][ T5882] mkiss: ax0: crc mode is auto. [ 144.875243][ T5903] loop3: detected capacity change from 0 to 512 [ 144.910617][ T5903] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 145.016387][ T5903] EXT4-fs (loop3): 1 truncate cleaned up [ 145.027705][ T5909] loop5: detected capacity change from 0 to 1024 [ 145.029284][ T5903] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 145.087788][ T26] audit: type=1800 audit(1750193933.868:8): pid=5903 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.578" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 145.186734][ T5909] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 145.350411][ T5920] mkiss: ax0: crc mode is auto. [ 145.382158][ T4250] EXT4-fs (loop3): unmounting filesystem. [ 145.417099][ T5922] netlink: 56 bytes leftover after parsing attributes in process `syz.2.585'. [ 145.456788][ T4712] EXT4-fs (loop5): unmounting filesystem. [ 145.610864][ T5928] loop1: detected capacity change from 0 to 22 [ 145.629244][ T5928] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 145.644630][ T5927] loop5: detected capacity change from 0 to 2048 [ 145.651928][ T5928] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 145.677707][ T5931] loop3: detected capacity change from 0 to 512 [ 145.704810][ T5933] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 145.738246][ T5931] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 145.759099][ T5933] NILFS error (device loop5): nilfs_sufile_mark_dirty: active segment 3 is erroneous [ 145.777709][ T5931] EXT4-fs (loop3): invalid journal inode [ 145.801988][ T5931] EXT4-fs (loop3): can't get journal size [ 145.816512][ T5933] Remounting filesystem read-only [ 145.826127][ T5931] EXT4-fs (loop3): 1 truncate cleaned up [ 145.838268][ T5931] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 145.905256][ T5914] loop4: detected capacity change from 0 to 40427 [ 145.922653][ T5914] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x3ffff [ 145.938800][ T5914] F2FS-fs (loop4): invalid crc value [ 145.961755][ T4712] NILFS (loop5): disposed unprocessed dirty file(s) when stopping log writer [ 145.984489][ T5914] F2FS-fs (loop4): Found nat_bits in checkpoint [ 146.069775][ T4250] EXT4-fs (loop3): unmounting filesystem. [ 146.115644][ T5914] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 146.143335][ T5948] netlink: 'syz.3.595': attribute type 7 has an invalid length. [ 146.543840][ T5394] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 146.711562][ T5962] loop4: detected capacity change from 0 to 256 [ 146.725151][ T5962] UDF-fs: bad mount option "sho^ta¦ͧ0000000002147483452" or missing value [ 146.744605][ T5394] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 146.775428][ T5394] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.795551][ T5394] usb 2-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 146.807516][ T5394] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.828649][ T5394] usb 2-1: config 0 descriptor?? [ 147.049989][ T4254] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 147.060667][ T4254] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 147.075286][ T4254] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 147.087589][ T4254] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 147.095359][ T4254] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 147.103242][ T4254] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 147.247349][ T5394] isku 0003:1E7D:319C.0004: unknown main item tag 0x0 [ 147.260280][ T5394] isku 0003:1E7D:319C.0004: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.1-1/input0 [ 147.312463][ T5967] chnl_net:caif_netlink_parms(): no params data found [ 147.456209][ T5394] isku 0003:1E7D:319C.0004: couldn't init struct isku_device [ 147.466460][ T5394] isku 0003:1E7D:319C.0004: couldn't install keyboard [ 147.487653][ T5394] isku: probe of 0003:1E7D:319C.0004 failed with error -71 [ 147.529901][ T5394] usb 2-1: USB disconnect, device number 4 [ 147.637671][ T5967] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.672936][ T5967] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.717294][ T5967] device bridge_slave_0 entered promiscuous mode [ 147.746830][ T5967] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.782433][ T5967] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.817854][ T5967] device bridge_slave_1 entered promiscuous mode [ 147.956866][ T5967] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 147.986190][ T5967] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 148.116989][ T5967] team0: Port device team_slave_0 added [ 148.156677][ T5967] team0: Port device team_slave_1 added [ 148.182536][ T5990] loop1: detected capacity change from 0 to 1024 [ 148.235404][ T5967] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 148.258358][ T26] audit: type=1800 audit(1750193937.048:9): pid=5990 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.612" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 148.288292][ T5967] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.345692][ T5967] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 148.400189][ T5967] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 148.407217][ T5967] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.458834][ T5394] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 148.487169][ T5967] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 148.506804][ T5984] loop4: detected capacity change from 0 to 32768 [ 148.529136][ T5984] XFS: noikeep mount option is deprecated. [ 148.598332][ T5984] XFS (loop4): Mounting V5 Filesystem [ 148.660498][ T5394] usb 3-1: Using ep0 maxpacket: 16 [ 148.672354][ T5394] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 148.705143][ T5394] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 148.724555][ T5984] XFS (loop4): Ending clean mount [ 148.761433][ T5394] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 148.771576][ T5967] device hsr_slave_0 entered promiscuous mode [ 148.792410][ T5394] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.817392][ T5394] usb 3-1: Product: syz [ 148.825262][ T5394] usb 3-1: Manufacturer: syz [ 148.837593][ T5394] usb 3-1: SerialNumber: syz [ 148.845354][ T5967] device hsr_slave_1 entered promiscuous mode [ 148.858014][ T5984] XFS (loop4): Quotacheck needed: Please wait. [ 148.876668][ T5967] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 148.887879][ T5967] Cannot create hsr debugfs directory [ 148.990344][ T5984] XFS (loop4): Quotacheck: Done. [ 149.103824][ T4264] XFS (loop4): Unmounting Filesystem [ 149.158300][ T4260] Bluetooth: hci1: command 0x0409 tx timeout [ 149.269583][ T41] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.282274][ T5394] usb 3-1: cannot find UAC_HEADER [ 149.371091][ T5394] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 149.498550][ T5395] usb 3-1: USB disconnect, device number 6 [ 149.535125][ T41] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.682750][ T5967] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.784470][ T41] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.884657][ T5967] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.970380][ T41] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.033192][ T5967] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.107185][ T4254] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 150.123618][ T4254] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 150.132933][ T4254] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 150.141067][ T4254] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 150.152428][ T4254] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 150.162201][ T4254] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 150.199366][ T5967] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.500435][ T5967] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 150.527656][ T5967] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 150.567365][ T6015] chnl_net:caif_netlink_parms(): no params data found [ 150.576576][ T5967] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 150.592335][ T5967] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 150.676924][ T6015] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.684465][ T6015] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.692912][ T6015] device bridge_slave_0 entered promiscuous mode [ 150.724511][ T6015] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.732651][ T6015] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.741955][ T6015] device bridge_slave_1 entered promiscuous mode [ 150.796087][ T6015] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 150.819945][ T6015] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 150.874471][ T6015] team0: Port device team_slave_0 added [ 150.888084][ T6015] team0: Port device team_slave_1 added [ 150.915348][ T6015] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 150.926255][ T6015] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.952550][ T6015] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 150.966450][ T6015] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 150.973899][ T6015] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.000480][ T6015] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 151.066853][ T6015] device hsr_slave_0 entered promiscuous mode [ 151.075852][ T6015] device hsr_slave_1 entered promiscuous mode [ 151.083333][ T6015] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 151.091957][ T6015] Cannot create hsr debugfs directory [ 151.120989][ T5967] 8021q: adding VLAN 0 to HW filter on device bond0 [ 151.213806][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 151.222212][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 151.229640][ T4260] Bluetooth: hci1: command 0x041b tx timeout [ 151.240584][ T5967] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.314283][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 151.323689][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 151.333192][ T4309] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.340353][ T4309] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.350302][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 151.360151][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 151.368867][ T4309] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.375949][ T4309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.401822][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 151.497491][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 151.516460][ T1185] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 151.536664][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 151.552505][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 151.603189][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 151.611719][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 151.623014][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 151.644342][ T41] device hsr_slave_0 left promiscuous mode [ 151.651319][ T41] device hsr_slave_1 left promiscuous mode [ 151.657791][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 151.665629][ T41] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 151.674612][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 151.682106][ T41] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 151.691090][ T41] device bridge_slave_1 left promiscuous mode [ 151.697287][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.705976][ T41] device bridge_slave_0 left promiscuous mode [ 151.712788][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.742667][ T41] device veth1_macvtap left promiscuous mode [ 151.749253][ T41] device veth0_macvtap left promiscuous mode [ 151.755348][ T41] device veth1_vlan left promiscuous mode [ 151.761238][ T41] device veth0_vlan left promiscuous mode [ 152.269158][ T4254] Bluetooth: hci3: command 0x0409 tx timeout [ 152.379513][ T41] team0 (unregistering): Port device team_slave_1 removed [ 152.435168][ T41] team0 (unregistering): Port device team_slave_0 removed [ 152.483432][ T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 152.544329][ T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 153.134837][ T41] bond0 (unregistering): Released all slaves [ 153.246136][ T5967] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 153.260503][ T5967] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 153.273593][ T1185] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 153.282981][ T1185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 153.299516][ T1185] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 153.307911][ T1185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 153.308324][ T4254] Bluetooth: hci1: command 0x040f tx timeout [ 153.319693][ T6015] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 153.337600][ T6015] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 153.347713][ T1185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 153.386263][ T6015] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 153.412998][ T6015] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 153.579370][ T6015] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.616772][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 153.626100][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 153.642232][ T6015] 8021q: adding VLAN 0 to HW filter on device team0 [ 153.673909][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 153.686681][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 153.704706][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.711911][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.747590][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 153.756085][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 153.766490][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 153.775390][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.782556][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.793448][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 153.801145][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 153.811662][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 153.829356][ T5967] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 153.863666][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 153.901428][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 153.925323][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 153.943527][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 153.968385][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 153.977452][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 153.995136][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 154.007422][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 154.023026][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 154.031930][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 154.044933][ T6015] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 154.349107][ T4254] Bluetooth: hci3: command 0x041b tx timeout [ 154.367907][ T1185] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 154.376688][ T1185] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 154.387917][ T6015] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 154.407109][ T1185] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 154.421615][ T1185] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 154.463865][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 154.473414][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 154.485028][ T5967] device veth0_vlan entered promiscuous mode [ 154.492719][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 154.502062][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 154.516403][ T5967] device veth1_vlan entered promiscuous mode [ 154.554530][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 154.565703][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 154.574451][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 154.584519][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 154.596889][ T5967] device veth0_macvtap entered promiscuous mode [ 154.617001][ T5967] device veth1_macvtap entered promiscuous mode [ 154.642241][ T5967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.652881][ T5967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.664370][ T5967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.684155][ T5967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.694508][ T5967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.705306][ T5967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.715303][ T5967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.725891][ T5967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.737378][ T5967] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 154.750662][ T5967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.762309][ T5967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.772475][ T5967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.790858][ T5967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.804376][ T5967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.819182][ T5967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.830770][ T5967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.841414][ T5967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.855550][ T5967] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 154.863927][ T1185] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 154.873606][ T1185] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 154.882099][ T1185] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 154.891262][ T1185] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 154.900916][ T1185] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 154.910359][ T1185] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 154.925154][ T5967] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.934784][ T5967] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.943823][ T5967] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.952646][ T5967] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.010502][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 155.022604][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 155.066091][ T6015] device veth0_vlan entered promiscuous mode [ 155.072993][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.075520][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 155.089955][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.106228][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 155.116622][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 155.125986][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 155.134532][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 155.163303][ T6015] device veth1_vlan entered promiscuous mode [ 155.177951][ T4309] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.187629][ T4309] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.196262][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 155.212590][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 155.222008][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 155.230343][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 155.239731][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 155.252993][ T6015] device veth0_macvtap entered promiscuous mode [ 155.265143][ T6015] device veth1_macvtap entered promiscuous mode [ 155.291012][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 155.299965][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 155.325679][ T6015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.336328][ T6015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.347313][ T6015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.365288][ T6015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.377928][ T6015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.389161][ T4254] Bluetooth: hci1: command 0x0419 tx timeout [ 155.394617][ T6015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.407192][ T6015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.418363][ T6015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.428820][ T6015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.439295][ T6015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.450752][ T6015] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 155.463346][ T6015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.474122][ T6015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.485080][ T6015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.495786][ T6015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.505646][ T6015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.516289][ T6015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.526153][ T6015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.536613][ T6015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.546782][ T6015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.557438][ T6015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.569965][ T6015] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 155.578029][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 155.587956][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 155.596861][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 155.605519][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 155.620062][ T6015] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.629554][ T6015] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.638351][ T6015] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.647143][ T6015] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.720650][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.737074][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.744023][ T4755] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.754684][ T4755] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.755972][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 155.776824][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 155.860246][ T6045] loop6: detected capacity change from 0 to 1024 [ 155.927293][ T6045] hfsplus: bad catalog entry type [ 155.934839][ T6050] loop5: detected capacity change from 0 to 256 [ 156.059106][ T9] hfsplus: b-tree write err: -5, ino 4 [ 156.084206][ T6050] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 156.428390][ T4254] Bluetooth: hci3: command 0x040f tx timeout [ 157.376690][ T6068] loop3: detected capacity change from 0 to 32768 [ 157.425051][ T6068] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.628 (6068) [ 157.474619][ T26] audit: type=1326 audit(1750193946.258:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6087 comm="syz.2.640" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd29378e929 code=0x0 [ 157.512469][ T6068] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 157.528898][ T6068] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 157.539683][ T6068] BTRFS info (device loop3): max_inline at 7 [ 157.546108][ T6068] BTRFS info (device loop3): using free space tree [ 157.695712][ T6068] BTRFS info (device loop3): enabling ssd optimizations [ 157.820855][ T6117] IPVS: length: 4096 != 8 [ 157.899699][ T4250] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 157.921156][ T6121] xt_CT: You must specify a L4 protocol and not use inversions on it [ 158.508675][ T4254] Bluetooth: hci3: command 0x0419 tx timeout [ 158.512259][ T6137] loop2: detected capacity change from 0 to 4096 [ 158.616553][ T6142] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 158.628608][ T5027] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 158.838282][ T5027] usb 7-1: Using ep0 maxpacket: 16 [ 158.859999][ T5027] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 158.896856][ T5027] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 158.958551][ T5027] usb 7-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 158.975193][ T5027] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.001260][ T5027] usb 7-1: Product: syz [ 159.005519][ T5027] usb 7-1: Manufacturer: syz [ 159.024716][ T5027] usb 7-1: SerialNumber: syz [ 159.042454][ T5027] usb 7-1: config 0 descriptor?? [ 159.071678][ T5027] ums-onetouch 7-1:0.0: USB Mass Storage device detected [ 159.288485][ T5396] usb 7-1: USB disconnect, device number 2 [ 159.456389][ T6161] loop4: detected capacity change from 0 to 1024 [ 159.523854][ T5026] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 159.555346][ T6161] hfsplus: can't free extent [ 159.605619][ T6161] hfsplus: can't free extent [ 159.668985][ T41] hfsplus: b-tree write err: -5, ino 4 [ 159.718488][ T5026] usb 6-1: Using ep0 maxpacket: 16 [ 159.730172][ T5026] usb 6-1: config 0 has no interfaces? [ 159.735786][ T5026] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 159.760896][ T5026] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.782177][ T5026] usb 6-1: config 0 descriptor?? [ 160.023415][ T6155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.052938][ T6155] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.085339][ T5026] usb 6-1: USB disconnect, device number 5 [ 160.425093][ T6167] loop3: detected capacity change from 0 to 32768 [ 160.529538][ T6167] XFS (loop3): Mounting V5 Filesystem [ 160.577660][ T6173] loop2: detected capacity change from 0 to 32768 [ 160.594584][ T6173] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.670 (6173) [ 160.605905][ T6167] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 160.630300][ T26] audit: type=1326 audit(1750193949.418:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6194 comm="syz.4.677" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f30fcb8e929 code=0x0 [ 160.631055][ T6173] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 160.662644][ T5026] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 160.673803][ T6173] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 160.684627][ T6173] BTRFS info (device loop2): force clearing of disk cache [ 160.692094][ T6173] BTRFS info (device loop2): metadata ratio 0 [ 160.696839][ T6167] XFS (loop3): Starting recovery (logdev: internal) [ 160.698290][ T6173] BTRFS info (device loop2): enabling ssd optimizations [ 160.698310][ T6173] BTRFS info (device loop2): using spread ssd allocation scheme [ 160.698327][ T6173] BTRFS info (device loop2): using free space tree [ 160.754121][ T6167] XFS (loop3): Ending recovery (logdev: internal) [ 160.829708][ T4250] XFS (loop3): Unmounting Filesystem [ 160.888574][ T5026] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 160.921550][ T5026] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 160.936466][ T6173] BTRFS info (device loop2): rebuilding free space tree [ 160.947229][ T5026] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice= 0.00 [ 160.984157][ T5026] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.030684][ T5026] usb 6-1: config 0 descriptor?? [ 161.054157][ T5026] yurex 6-1:0.0: Could not submitting URB [ 161.074911][ T4254] Bluetooth: hci3: command 0x0405 tx timeout [ 161.083949][ T5026] yurex: probe of 6-1:0.0 failed with error -5 [ 161.213722][ T6173] BTRFS info (device loop2): Snapshot src from another FS [ 161.244409][ T5026] usbhid 6-1:0.0: can't add hid device: -71 [ 161.261227][ T5026] usbhid: probe of 6-1:0.0 failed with error -71 [ 161.285351][ T5026] usb 6-1: USB disconnect, device number 6 [ 161.313184][ T4251] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 161.572334][ T6224] loop4: detected capacity change from 0 to 512 [ 161.659274][ T6224] EXT4-fs (loop4): 1 orphan inode deleted [ 161.678443][ T4309] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 161.699970][ T6224] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 161.714393][ T6229] loop6: detected capacity change from 0 to 256 [ 161.726014][ T4309] EXT4-fs error (device loop4): ext4_release_dquot:6850: comm kworker/u4:6: Failed to release dquot type 1 [ 161.751354][ T6224] ext4 filesystem being mounted at /138/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.772368][ T6233] loop3: detected capacity change from 0 to 128 [ 161.779978][ T6233] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 161.807901][ T6229] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 161.808195][ T6233] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 161.911684][ T4264] EXT4-fs (loop4): unmounting filesystem. [ 162.021938][ T41] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 162.665753][ T6264] capability: warning: `syz.4.700' uses 32-bit capabilities (legacy support in use) [ 162.889048][ T6272] loop2: detected capacity change from 0 to 4096 [ 163.047141][ T6276] loop4: detected capacity change from 0 to 2048 [ 163.088325][ T6276] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 163.118706][ T6276] NILFS (loop4): mounting unchecked fs [ 163.173684][ T26] audit: type=1326 audit(1750193951.958:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6265 comm="syz.5.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f303c58e929 code=0x7ffc0000 [ 163.214274][ T6276] NILFS (loop4): recovery complete [ 163.230081][ T6286] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 163.258215][ T26] audit: type=1326 audit(1750193952.008:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6265 comm="syz.5.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f303c52ab19 code=0x7ffc0000 [ 163.376929][ T26] audit: type=1326 audit(1750193952.008:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6265 comm="syz.5.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f303c52ab19 code=0x7ffc0000 [ 163.441836][ T26] audit: type=1326 audit(1750193952.008:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6265 comm="syz.5.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f303c52ab19 code=0x7ffc0000 [ 163.521348][ T26] audit: type=1326 audit(1750193952.008:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6265 comm="syz.5.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f303c52ab19 code=0x7ffc0000 [ 163.574896][ T26] audit: type=1326 audit(1750193952.008:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6265 comm="syz.5.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f303c52ab19 code=0x7ffc0000 [ 163.708176][ T26] audit: type=1326 audit(1750193952.008:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6265 comm="syz.5.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f303c52ab19 code=0x7ffc0000 [ 163.755682][ T26] audit: type=1326 audit(1750193952.008:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6265 comm="syz.5.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f303c52ab19 code=0x7ffc0000 [ 163.787472][ T26] audit: type=1326 audit(1750193952.008:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6265 comm="syz.5.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f303c52ab19 code=0x7ffc0000 [ 163.866924][ T26] audit: type=1326 audit(1750193952.008:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6265 comm="syz.5.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f303c52ab19 code=0x7ffc0000 [ 163.965068][ T6305] loop4: detected capacity change from 0 to 128 [ 164.029691][ T6305] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 164.220176][ T6305] FAT-fs (loop4): FAT read failed (blocknr 128) [ 164.450767][ T9] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 164.671265][ T5026] kernel write not supported for file bpf-prog (pid: 5026 comm: kworker/0:15) [ 164.945067][ T6323] usb usb8: usbfs: process 6323 (syz.4.727) did not claim interface 0 before use [ 164.970265][ T6325] loop3: detected capacity change from 0 to 512 [ 165.054593][ T6325] EXT4-fs (loop3): 1 orphan inode deleted [ 165.080476][ T4309] EXT4-fs error (device loop3): ext4_release_dquot:6850: comm kworker/u4:6: Failed to release dquot type 1 [ 165.092066][ T6325] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 165.107366][ T6327] loop2: detected capacity change from 0 to 4096 [ 165.157401][ T6325] ext4 filesystem being mounted at /173/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 165.171202][ T6327] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 165.243557][ T6334] loop4: detected capacity change from 0 to 164 [ 165.293036][ T6334] isofs_fill_super: bread failed, dev=loop4, iso_blknum=41, block=82 [ 165.353821][ T4250] EXT4-fs (loop3): unmounting filesystem. [ 165.456408][ T4251] EXT4-fs (loop2): unmounting filesystem. [ 165.483820][ T6336] netlink: 8 bytes leftover after parsing attributes in process `syz.3.730'. [ 166.361782][ T6338] loop2: detected capacity change from 0 to 32768 [ 166.585905][ T6362] loop3: detected capacity change from 0 to 4096 [ 166.736440][ T4250] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 166.753229][ T4250] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 166.939887][ T6375] netlink: 'syz.2.745': attribute type 15 has an invalid length. [ 167.130884][ T6383] loop3: detected capacity change from 0 to 2048 [ 167.199001][ T6385] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 167.336264][ T6389] loop2: detected capacity change from 0 to 128 [ 167.435824][ T6389] FAT-fs (loop2): error, clusters badly computed (0 != 1) [ 167.452589][ T6389] FAT-fs (loop2): Filesystem has been set read-only [ 167.465732][ T6389] FAT-fs (loop2): error, clusters badly computed (1 != 2) [ 167.491755][ T6389] FAT-fs (loop2): error, clusters badly computed (2 != 3) [ 167.496039][ T6396] loop6: detected capacity change from 0 to 64 [ 167.505276][ T6389] FAT-fs (loop2): error, clusters badly computed (3 != 4) [ 167.514041][ T6389] FAT-fs (loop2): error, clusters badly computed (4 != 5) [ 167.531823][ T6389] FAT-fs (loop2): error, clusters badly computed (5 != 6) [ 167.543418][ T6389] FAT-fs (loop2): error, clusters badly computed (6 != 7) [ 167.551343][ T6396] BFS-fs: bfs_fill_super(): loop6 is unclean, continuing [ 167.567545][ T6389] FAT-fs (loop2): error, clusters badly computed (7 != 8) [ 167.936897][ T6402] loop2: detected capacity change from 0 to 4096 [ 168.038218][ T6402] ntfs: volume version 3.1. [ 168.426535][ T6402] __ntfs_error: 907 callbacks suppressed [ 168.426561][ T6402] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 168.478300][ T6402] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5). [ 168.503939][ T6404] loop3: detected capacity change from 0 to 32768 [ 168.523145][ T6404] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.762 (6404) [ 168.543319][ T6402] ntfs: (device loop2): ntfs_cluster_alloc(): Failed to map page. [ 168.558359][ T6402] ntfs: (device loop2): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -5). [ 168.569352][ T6404] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 168.586473][ T6404] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 168.594227][ T6402] ntfs: (device loop2): ntfs_attr_extend_allocation(): Cannot extend allocation of inode 0x43, attribute type 0x80, because the allocation of clusters failed with error code -5. [ 168.598211][ T6404] BTRFS info (device loop3): force clearing of disk cache [ 168.629458][ T6404] BTRFS info (device loop3): metadata ratio 0 [ 168.636002][ T6404] BTRFS info (device loop3): enabling ssd optimizations [ 168.642882][ T6402] ntfs: (device loop2): ntfs_prepare_file_for_write(): Cannot perform write to inode 0x43, attribute type 0x80, because extending the allocation failed (error 5). [ 168.656262][ T6404] BTRFS info (device loop3): using spread ssd allocation scheme [ 168.698402][ T6404] BTRFS info (device loop3): using free space tree [ 168.752781][ T6420] syzkaller0: tun_chr_ioctl cmd 1074025680 [ 168.906318][ T6404] BTRFS info (device loop3): rebuilding free space tree [ 169.009444][ T6446] loop6: detected capacity change from 0 to 256 [ 169.049137][ T6446] exFAT-fs (loop6): failed to load upcase table (idx : 0x00011a39, chksum : 0xd94015fb, utbl_chksum : 0xe619d30d) [ 169.119729][ T6450] loop2: detected capacity change from 0 to 512 [ 169.136068][ T6404] BTRFS info (device loop3): Snapshot src from another FS [ 169.192706][ T6450] EXT4-fs (loop2): 1 orphan inode deleted [ 169.222703][ T6457] loop5: detected capacity change from 0 to 256 [ 169.231749][ T11] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 169.242323][ T6450] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 169.262164][ T11] EXT4-fs error (device loop2): ext4_release_dquot:6850: comm kworker/u4:1: Failed to release dquot type 1 [ 169.275755][ T6450] ext4 filesystem being mounted at /162/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 169.277052][ T4250] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 169.676787][ T4251] EXT4-fs (loop2): unmounting filesystem. [ 170.096732][ T6481] netlink: 312 bytes leftover after parsing attributes in process `syz.3.789'. [ 170.351025][ T6485] loop5: detected capacity change from 0 to 8192 [ 170.406165][ T6485] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 170.498317][ T6485] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 170.509247][ T6485] REISERFS (device loop5): using ordered data mode [ 170.515848][ T6485] reiserfs: using flush barriers [ 170.634039][ T6485] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 170.659210][ T6485] REISERFS (device loop5): checking transaction log (loop5) [ 170.711051][ T6485] REISERFS (device loop5): Using r5 hash to sort names [ 170.723200][ T6485] REISERFS warning (device loop5): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 170.775929][ T6485] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 170.822326][ T6501] netlink: 12 bytes leftover after parsing attributes in process `syz.2.798'. [ 170.858318][ T6501] netlink: 12 bytes leftover after parsing attributes in process `syz.2.798'. [ 170.895759][ T6501] bridge0: port 3(vlan2) entered blocking state [ 170.915862][ T6501] bridge0: port 3(vlan2) entered disabled state [ 170.926239][ T6485] REISERFS warning (device loop5): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 171.003432][ T6485] REISERFS warning (device loop5): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 171.058938][ T6485] REISERFS warning (device loop5): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 171.400938][ T6490] loop3: detected capacity change from 0 to 40427 [ 171.438722][ T6490] F2FS-fs (loop3): invalid crc value [ 171.475495][ T6499] loop4: detected capacity change from 0 to 32768 [ 171.494929][ T6499] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.796 (6499) [ 171.500262][ T6490] F2FS-fs (loop3): Found nat_bits in checkpoint [ 171.544098][ T6499] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 171.564854][ T6490] F2FS-fs (loop3): Start checkpoint disabled! [ 171.586294][ T6499] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 171.591694][ T6490] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 171.614766][ T6499] BTRFS info (device loop4): setting nodatacow, compression disabled [ 171.645311][ T6499] BTRFS info (device loop4): enabling auto defrag [ 171.660932][ T6499] BTRFS info (device loop4): max_inline at 0 [ 171.666988][ T6499] BTRFS info (device loop4): using free space tree [ 171.808362][ T5026] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 171.986065][ T4264] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 172.019366][ T5026] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.061185][ T5026] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.092443][ T5026] usb 3-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 172.103555][ T5026] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.114832][ T5026] usb 3-1: config 0 descriptor?? [ 172.753098][ T5026] hid-led 0003:1D34:000A.0005: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.2-1/input0 [ 172.754773][ T6554] netlink: 'syz.3.814': attribute type 10 has an invalid length. [ 172.802655][ T6554] netlink: 'syz.3.814': attribute type 10 has an invalid length. [ 172.813697][ T5026] hid-led 0003:1D34:000A.0005: Dream Cheeky Webmail Notifier initialized [ 173.000913][ T5026] usb 3-1: USB disconnect, device number 7 [ 173.234245][ T6576] loop6: detected capacity change from 0 to 512 [ 173.248408][ T5027] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 173.286437][ T6576] EXT4-fs error (device loop6): ext4_orphan_get:1400: inode #15: comm syz.6.822: casefold flag without casefold feature [ 173.323652][ T6576] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.822: couldn't read orphan inode 15 (err -117) [ 173.337310][ T6576] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 173.365307][ T26] audit: type=1800 audit(1750193962.148:928): pid=6576 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.822" name="file1" dev="loop6" ino=18 res=0 errno=0 [ 173.395925][ T6576] EXT4-fs warning (device loop6): ext4_empty_dir:3147: inode #2: comm syz.6.822: directory missing '.' [ 173.438252][ T5027] usb 4-1: Using ep0 maxpacket: 32 [ 173.445630][ T5027] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.474347][ T5027] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 173.492644][ T5027] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 173.512909][ T5027] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.516693][ T6015] EXT4-fs (loop6): unmounting filesystem. [ 173.549715][ T5027] usb 4-1: config 0 descriptor?? [ 173.690933][ T6593] netlink: 4 bytes leftover after parsing attributes in process `syz.6.826'. [ 173.993631][ T5027] ft260 0003:0403:6030.0006: unknown main item tag 0x0 [ 174.023207][ T5027] ft260 0003:0403:6030.0006: hidraw0: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.3-1/input0 [ 174.196901][ T5027] ft260 0003:0403:6030.0006: chip code: 0000 0000 [ 174.398278][ T5027] ft260 0003:0403:6030.0006: failed to retrieve system status [ 174.414497][ T5027] ft260: probe of 0003:0403:6030.0006 failed with error -71 [ 174.453005][ T5027] usb 4-1: USB disconnect, device number 8 [ 174.610237][ T6603] loop5: detected capacity change from 0 to 32768 [ 174.638300][ T6603] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.832 (6603) [ 174.687364][ T6603] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 174.719772][ T6603] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 174.738267][ T6603] BTRFS info (device loop5): setting nodatacow, compression disabled [ 174.748458][ T6603] BTRFS info (device loop5): setting datacow [ 174.763523][ T6603] BTRFS info (device loop5): doing ref verification [ 174.778172][ T6603] BTRFS info (device loop5): force clearing of disk cache [ 174.795635][ T6603] BTRFS info (device loop5): turning off barriers [ 174.802294][ T6603] BTRFS info (device loop5): enabling ssd optimizations [ 174.825827][ T6603] BTRFS info (device loop5): using spread ssd allocation scheme [ 174.848234][ T6603] BTRFS info (device loop5): using free space tree [ 174.857636][ T6605] loop2: detected capacity change from 0 to 32768 [ 174.882769][ T6621] loop6: detected capacity change from 0 to 764 [ 174.900909][ T6621] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 174.925432][ T6605] XFS (loop2): Mounting V5 Filesystem [ 175.034018][ T6603] BTRFS info (device loop5): rebuilding free space tree [ 175.102243][ T6605] XFS (loop2): Ending clean mount [ 175.119919][ T6605] XFS (loop2): Quotacheck needed: Please wait. [ 175.207598][ T6605] XFS (loop2): Quotacheck: Done. [ 175.303142][ T6651] loop6: detected capacity change from 0 to 4096 [ 175.350021][ T5967] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 175.364903][ T4251] XFS (loop2): Unmounting Filesystem [ 175.894404][ T6015] ntfs3: loop6: ntfs_evict_inode r=5 failed, -22. [ 175.913971][ T6015] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 175.945157][ T6660] loop3: detected capacity change from 0 to 4096 [ 175.982464][ T6660] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 176.013977][ T6660] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 176.051701][ T6660] ntfs: (device loop3): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 176.096697][ T6660] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 176.138463][ T6660] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 176.171079][ T6660] ntfs: volume version 3.1. [ 176.190130][ T6660] ntfs: (device loop3): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 176.216540][ T6660] ntfs: (device loop3): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 176.239672][ T6660] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 176.257235][ T6660] ntfs: (device loop3): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 176.269924][ T6660] ntfs: (device loop3): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 176.447307][ T6673] loop2: detected capacity change from 0 to 64 [ 176.694017][ T6676] loop6: detected capacity change from 0 to 128 [ 177.048408][ T22] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 177.241074][ T22] usb 6-1: Using ep0 maxpacket: 32 [ 177.249068][ T22] usb 6-1: config 0 interface 0 has no altsetting 0 [ 177.279139][ T22] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 177.293878][ T6709] loop6: detected capacity change from 0 to 256 [ 177.308289][ T22] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.317863][ T22] usb 6-1: Product: syz [ 177.322298][ T6709] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 177.338260][ T22] usb 6-1: Manufacturer: syz [ 177.343021][ T22] usb 6-1: SerialNumber: syz [ 177.358067][ T6709] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 177.369234][ T22] usb 6-1: config 0 descriptor?? [ 177.379450][ T22] gs_usb 6-1:0.0: Required endpoints not found [ 177.403923][ T6709] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 177.560751][ T6717] block nbd6: NBD_DISCONNECT [ 177.570433][ T6717] block nbd6: Send disconnect failed -22 [ 177.601047][ T6716] block nbd6: Disconnected due to user request. [ 177.619514][ T6716] block nbd6: shutting down sockets [ 177.625935][ T5027] usb 6-1: USB disconnect, device number 7 [ 177.708225][ T22] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 177.900991][ T22] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.924198][ T22] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.935954][ T22] usb 4-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 177.954456][ T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.984769][ T22] usb 4-1: config 0 descriptor?? [ 178.413778][ T22] logitech-djreceiver 0003:046D:C71B.0007: unbalanced delimiter at end of report description [ 178.430583][ T22] logitech-djreceiver 0003:046D:C71B.0007: logi_dj_probe: parse failed [ 178.442695][ T22] logitech-djreceiver: probe of 0003:046D:C71B.0007 failed with error -22 [ 178.617238][ T22] usb 4-1: USB disconnect, device number 9 [ 178.627520][ T6749] loop4: detected capacity change from 0 to 32768 [ 178.641516][ T6749] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.886 (6749) [ 178.660935][ T6749] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 178.672657][ T6749] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 178.681825][ T6749] BTRFS info (device loop4): metadata ratio 2 [ 178.698208][ T6749] BTRFS info (device loop4): allowing degraded mounts [ 178.705104][ T6749] BTRFS info (device loop4): force zlib compression, level 3 [ 178.723424][ T6749] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 178.741679][ T6749] BTRFS info (device loop4): use zstd compression, level 3 [ 178.757486][ T6749] BTRFS info (device loop4): force clearing of disk cache [ 178.766128][ T6749] BTRFS info (device loop4): max_inline at 0 [ 178.776967][ T6749] BTRFS info (device loop4): using free space tree [ 178.856420][ T6749] BTRFS info (device loop4): enabling ssd optimizations [ 178.865406][ T6749] BTRFS info (device loop4): rebuilding free space tree [ 178.963064][ T6775] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 178.981173][ T6775] team0: Port device batadv1 added [ 179.309236][ T4264] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 179.550585][ T4254] block nbd0: Receive control failed (result -32) [ 179.903766][ T6799] loop6: detected capacity change from 0 to 128 [ 179.931773][ T6799] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 179.958671][ T6801] loop2: detected capacity change from 0 to 512 [ 179.965647][ T6799] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 180.005100][ T6804] raw_sendmsg: syz.3.903 forgot to set AF_INET. Fix it! [ 180.019490][ T6801] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.902: casefold flag without casefold feature [ 180.058806][ T6801] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.902: couldn't read orphan inode 15 (err -117) [ 180.102194][ T6807] netlink: 'syz.4.896': attribute type 4 has an invalid length. [ 180.113499][ T41] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 180.148418][ T6801] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 180.252701][ T6801] EXT4-fs warning (device loop2): ext4_empty_dir:3147: inode #2: comm syz.2.902: directory missing '.' [ 180.326025][ T4251] EXT4-fs (loop2): unmounting filesystem. [ 180.532566][ T6809] loop6: detected capacity change from 0 to 32768 [ 180.542805][ T6809] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop6 scanned by syz.6.904 (6809) [ 180.567352][ T6809] BTRFS info (device loop6): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 180.577654][ T6809] BTRFS info (device loop6): using xxhash64 (xxhash64-generic) checksum algorithm [ 180.587024][ T6809] BTRFS info (device loop6): force zlib compression, level 3 [ 180.594737][ T6809] BTRFS info (device loop6): force clearing of disk cache [ 180.601920][ T6809] BTRFS info (device loop6): setting nodatasum [ 180.608142][ T6809] BTRFS info (device loop6): disabling free space tree [ 180.615053][ T6809] BTRFS info (device loop6): enabling disk space caching [ 180.622154][ T6809] BTRFS info (device loop6): disk space caching is enabled [ 180.803564][ T6826] loop3: detected capacity change from 0 to 1764 [ 285.708082][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 285.715193][ C0] rcu: 1-...!: (0 ticks this GP) idle=ed04/1/0x4000000000000000 softirq=19074/19074 fqs=8 [ 285.727087][ C0] (detected by 0, t=10502 jiffies, g=26425, q=28 ncpus=2) [ 285.734318][ C0] Sending NMI from CPU 0 to CPUs 1: [ 285.739552][ C1] NMI backtrace for cpu 1 [ 285.739563][ C1] CPU: 1 PID: 6824 Comm: syz.2.906 Not tainted 6.1.141-syzkaller #0 [ 285.739579][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 285.739587][ C1] RIP: 0010:kasan_check_range+0x1f/0x290 [ 285.739618][ C1] Code: 00 cc cc 00 00 cc cc 00 00 cc cc b0 01 48 85 f6 0f 84 a4 01 00 00 41 57 41 56 53 49 89 f8 49 01 f0 0f 82 57 02 00 00 49 89 f8 <49> c1 e8 2f 41 81 f8 ff ff 01 00 0f 82 43 02 00 00 49 bf 01 00 00 [ 285.739631][ C1] RSP: 0018:ffffc900001e0840 EFLAGS: 00000086 [ 285.739647][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: ffffffff81630285 [ 285.739657][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff908b8240 [ 285.739667][ C1] RBP: ffffc900001e0ab0 R08: ffffffff908b8240 R09: fffffbfff211704a [ 285.739678][ C1] R10: fffffbfff211704a R11: 1ffffffff2117049 R12: 00000000f273e68c [ 285.739689][ C1] R13: 00000000d4516eaf R14: 000000003196d937 R15: ffff888063f2a890 [ 285.739699][ C1] FS: 00007fd29453d6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 285.739713][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 285.739723][ C1] CR2: 000000110c264b73 CR3: 0000000074184000 CR4: 00000000003506e0 [ 285.739739][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 285.739748][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 285.739757][ C1] Call Trace: [ 285.739764][ C1] [ 285.739772][ C1] __lock_acquire+0x12e5/0x7c50 [ 285.739802][ C1] ? verify_lock_unused+0x140/0x140 [ 285.739822][ C1] ? verify_lock_unused+0x140/0x140 [ 285.739839][ C1] ? verify_lock_unused+0x140/0x140 [ 285.739855][ C1] ? mark_lock+0x94/0x320 [ 285.739874][ C1] ? lock_chain_count+0x20/0x20 [ 285.739892][ C1] lock_acquire+0x1b4/0x490 [ 285.739908][ C1] ? debug_object_activate+0x6a/0x490 [ 285.739929][ C1] ? read_lock_is_recursive+0x10/0x10 [ 285.739946][ C1] ? debug_object_activate+0x490/0x490 [ 285.739963][ C1] ? do_raw_spin_lock+0x11d/0x280 [ 285.739983][ C1] _raw_spin_lock_irqsave+0xa4/0xf0 [ 285.740004][ C1] ? debug_object_activate+0x6a/0x490 [ 285.740020][ C1] ? _raw_spin_lock+0x40/0x40 [ 285.740037][ C1] ? advance_sched+0x6cc/0x970 [ 285.740057][ C1] debug_object_activate+0x6a/0x490 [ 285.740072][ C1] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 285.740092][ C1] enqueue_hrtimer+0x30/0x3f0 [ 285.740108][ C1] __hrtimer_run_queues+0x68e/0xd60 [ 285.740122][ C1] ? ktime_get_update_offsets_now+0x95/0x3e0 [ 285.740138][ C1] ? ktime_get_update_offsets_now+0x95/0x3e0 [ 285.740156][ C1] ? taprio_free_sched_cb+0x190/0x190 [ 285.740176][ C1] ? hrtimer_interrupt+0x9c0/0x9c0 [ 285.740193][ C1] hrtimer_interrupt+0x3c5/0x9c0 [ 285.740223][ C1] __sysvec_apic_timer_interrupt+0x153/0x5a0 [ 285.740244][ C1] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 285.740268][ C1] [ 285.740272][ C1] [ 285.740277][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 285.740292][ C1] RIP: 0010:_raw_spin_unlock_irq+0x25/0x40 [ 285.740311][ C1] Code: f5 ff 0f 1f 00 53 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 de d0 49 f7 48 89 df e8 36 96 4a f7 e8 31 97 6d f7 fb bf 01 00 00 00 46 13 3e f7 65 8b 05 17 d4 e8 75 85 c0 74 02 5b c3 e8 64 e5 e6 [ 285.740322][ C1] RSP: 0018:ffffc9000378fd20 EFLAGS: 00000282 [ 285.740336][ C1] RAX: 5e2ea38b3dc63000 RBX: ffff888020b1b888 RCX: 5e2ea38b3dc63000 [ 285.740347][ C1] RDX: dffffc0000000000 RSI: ffffffff8a6bffe0 RDI: 0000000000000001 [ 285.740357][ C1] RBP: 7fffffffffffffff R08: dffffc0000000000 R09: ffffed1004163712 [ 285.740368][ C1] R10: ffffed1004163712 R11: 1ffff11004163711 R12: 1ffff11004163710 [ 285.740384][ C1] R13: ffff888020b1b800 R14: ffff88807a1f0c81 R15: 7fffffffffffffff [ 285.740401][ C1] do_timerfd_settime+0xe3a/0x1080 [ 285.740429][ C1] __x64_sys_timerfd_settime+0x15e/0x210 [ 285.740451][ C1] ? __ia32_sys_timerfd_create+0x60/0x60 [ 285.740469][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 285.740488][ C1] ? lock_chain_count+0x20/0x20 [ 285.740506][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 285.740521][ C1] do_syscall_64+0x4c/0xa0 [ 285.740538][ C1] ? clear_bhb_loop+0x60/0xb0 [ 285.740551][ C1] ? clear_bhb_loop+0x60/0xb0 [ 285.740564][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 285.740584][ C1] RIP: 0033:0x7fd29378e929 [ 285.740600][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 285.740611][ C1] RSP: 002b:00007fd29453d038 EFLAGS: 00000246 ORIG_RAX: 000000000000011e [ 285.740626][ C1] RAX: ffffffffffffffda RBX: 00007fd2939b5fa0 RCX: 00007fd29378e929 [ 285.740636][ C1] RDX: 0000200000000140 RSI: 0000000000000003 RDI: 0000000000000003 [ 285.740645][ C1] RBP: 00007fd293810b39 R08: 0000000000000000 R09: 0000000000000000 [ 285.740654][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 285.740663][ C1] R13: 0000000000000000 R14: 00007fd2939b5fa0 R15: 00007ffec51c3338 [ 285.740678][ C1] [ 285.741545][ C0] rcu: rcu_preempt kthread starved for 10486 jiffies! g26425 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 286.238610][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 286.248595][ C0] rcu: RCU grace-period kthread stack dump: [ 286.254495][ C0] task:rcu_preempt state:R running task stack:26912 pid:16 ppid:2 flags:0x00004000 [ 286.265306][ C0] Call Trace: [ 286.268601][ C0] [ 286.271581][ C0] __schedule+0x10e9/0x40d0 [ 286.276153][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 286.281394][ C0] ? _raw_spin_unlock+0x40/0x40 [ 286.286289][ C0] ? release_firmware_map_entry+0x18a/0x18a [ 286.292217][ C0] schedule+0xb9/0x180 [ 286.296319][ C0] schedule_timeout+0x15c/0x280 [ 286.301192][ C0] ? console_conditional_schedule+0x40/0x40 [ 286.307114][ C0] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 286.313042][ C0] ? update_process_times+0x1b0/0x1b0 [ 286.318461][ C0] ? prepare_to_swait_event+0x335/0x350 [ 286.324042][ C0] rcu_gp_fqs_loop+0x2f2/0x1310 [ 286.329013][ C0] ? dyntick_save_progress_counter+0x2b0/0x2b0 [ 286.335189][ C0] ? rcu_gp_init+0x14b0/0x14b0 [ 286.339983][ C0] ? rcu_gp_cleanup+0xb4c/0xca0 [ 286.344855][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 286.350079][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 286.355297][ C0] rcu_gp_kthread+0x95/0x380 [ 286.359912][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 286.365044][ C0] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 286.370963][ C0] ? __kthread_parkme+0x162/0x1c0 [ 286.376026][ C0] kthread+0x29d/0x330 [ 286.380121][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 286.385510][ C0] ? kthread_blkcg+0xd0/0xd0 [ 286.390132][ C0] ret_from_fork+0x1f/0x30 [ 286.394589][ C0] [ 286.397717][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 286.404056][ C0] CPU: 0 PID: 6826 Comm: syz.3.909 Not tainted 6.1.141-syzkaller #0 [ 286.412053][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 286.422385][ C0] RIP: 0010:smp_call_function_many_cond+0xe84/0x1270 [ 286.429171][ C0] Code: e6 01 31 ff e8 6d e9 0a 00 83 e3 01 48 bb 00 00 00 00 00 fc ff df 75 07 e8 f9 e5 0a 00 eb 37 f3 90 41 0f b6 04 1c 84 c0 75 10 <41> f7 07 01 00 00 00 74 1e e8 de e5 0a 00 eb e5 44 89 f9 80 e1 07 [ 286.448801][ C0] RSP: 0018:ffffc900048f78c0 EFLAGS: 00000246 [ 286.454891][ C0] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000080000 [ 286.462883][ C0] RDX: ffffc9000d2c1000 RSI: 000000000007ffff RDI: 0000000000080000 [ 286.470873][ C0] RBP: ffffc900048f7a20 R08: dffffc0000000000 R09: fffffbfff2117076 [ 286.478868][ C0] R10: fffffbfff2117076 R11: 1ffffffff2117075 R12: 1ffff110171e81c1 [ 286.486902][ C0] R13: ffff8880b8e3bb40 R14: 0000000000000001 R15: ffff8880b8f40e08 [ 286.494902][ C0] FS: 00007f5b74ffa6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 286.503868][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 286.510470][ C0] CR2: 00007f5b74171d60 CR3: 000000007e206000 CR4: 00000000003506f0 [ 286.518558][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 286.526726][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 286.534716][ C0] Call Trace: [ 286.538015][ C0] [ 286.540972][ C0] ? __bread_gfp+0x330/0x330 [ 286.545593][ C0] ? invalidate_bh_lrus+0x30/0x30 [ 286.550735][ C0] ? smp_call_function_many+0x30/0x30 [ 286.556135][ C0] ? _printk+0xcc/0x110 [ 286.560311][ C0] ? should_fail_bio+0xc8/0x100 [ 286.565206][ C0] ? __bread_gfp+0x330/0x330 [ 286.569826][ C0] ? invalidate_bh_lrus+0x30/0x30 [ 286.574875][ C0] on_each_cpu_cond_mask+0x3b/0x80 [ 286.580045][ C0] set_blocksize+0x2cd/0x350 [ 286.584675][ C0] sb_set_blocksize+0x45/0xe0 [ 286.589466][ C0] isofs_fill_super+0x1581/0x25d0 [ 286.594512][ C0] ? format_decode+0x8b4/0x1330 [ 286.599402][ C0] ? isofs_mount+0x40/0x40 [ 286.603842][ C0] ? snprintf+0xd7/0x120 [ 286.608124][ C0] ? set_blocksize+0x1d3/0x350 [ 286.612922][ C0] ? sb_set_blocksize+0xa5/0xe0 [ 286.617806][ C0] mount_bdev+0x287/0x3c0 [ 286.622169][ C0] ? isofs_mount+0x40/0x40 [ 286.626611][ C0] legacy_get_tree+0xe6/0x180 [ 286.631397][ C0] ? _isofs_bmap+0x30/0x30 [ 286.635836][ C0] vfs_get_tree+0x88/0x270 [ 286.640277][ C0] do_new_mount+0x24a/0xa40 [ 286.644812][ C0] __se_sys_mount+0x2d6/0x3c0 [ 286.649521][ C0] ? __x64_sys_mount+0xc0/0xc0 [ 286.654314][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 286.659531][ C0] ? __x64_sys_mount+0x1c/0xc0 [ 286.664318][ C0] do_syscall_64+0x4c/0xa0 [ 286.668760][ C0] ? clear_bhb_loop+0x60/0xb0 [ 286.673458][ C0] ? clear_bhb_loop+0x60/0xb0 [ 286.678157][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 286.684086][ C0] RIP: 0033:0x7f5b741900ca [ 286.688525][ C0] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 286.708242][ C0] RSP: 002b:00007f5b74ff9e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 286.716683][ C0] RAX: ffffffffffffffda RBX: 00007f5b74ff9ef0 RCX: 00007f5b741900ca [ 286.724673][ C0] RDX: 0000200000000040 RSI: 0000200000000000 RDI: 00007f5b74ff9eb0 [ 286.732665][ C0] RBP: 0000200000000040 R08: 00007f5b74ff9ef0 R09: 000000000220c413 [ 286.740742][ C0] R10: 000000000220c413 R11: 0000000000000246 R12: 0000200000000000 [ 286.748823][ C0] R13: 00007f5b74ff9eb0 R14: 0000000000000a46 R15: 0000200000000280 [ 286.756829][ C0]