last executing test programs: 2m51.628261947s ago: executing program 2 (id=171): r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) fcntl$setlease(r0, 0x400, 0x0) bind$can_raw(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="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", @ANYRES32], 0x1, 0x4468, &(0x7f0000010780)="$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") 2m49.7198874s ago: executing program 2 (id=174): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x800040, &(0x7f0000000340), 0x1, 0x597, &(0x7f0000000b80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='Q', 0x1, 0x200980) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) sendfile(r1, r1, 0x0, 0xe0000000) ftruncate(r0, 0xf09) 2m48.616731886s ago: executing program 2 (id=178): r0 = syz_io_uring_setup(0x235, &(0x7f0000000500)={0x0, 0x4533, 0x10100, 0x0, 0x24c}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x201}, 0x1}) io_uring_enter(r0, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r3 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd, 0x4, {}, 0x1, 0x4}) io_uring_enter(r3, 0x48e9, 0x1000000, 0x0, 0x0, 0x0) 2m47.797095253s ago: executing program 2 (id=182): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x5) syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000000)='./bus\x00', 0x300000a, &(0x7f0000000480)={[{@nodatacow}, {@thread_pool={'thread_pool', 0x3d, 0x3}}, {@discard_sync}, {@datacow}, {@ref_verify}, {@datacow}, {@nobarrier}, {@thread_pool={'thread_pool', 0x3d, 0x8}}, {@ssd_spread}, {@datasum}, {@barrier}, {@nossd}]}, 0x3, 0x55a3, &(0x7f000000e0c0)="$eJzs3X9snHUdB/DnruvaFdeWMOuArGwDJFtEOjdNCCR2bNNpYTnphE3I+gNH0DmtY8NVCCtinIERijWMwQoLbn9MEYqucyiJBewqul8IJtNFBbPFNWOkOBExYTG9u+d299zaHhMpwuu1tM/zvc/z/d73njx/3PvW73MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABEHwx+N3TL/t3roJ26+ru++8a85e+2D3kuMX3rq1avND20v2dTz31aNVq1qPLF1w0/2JpkfW93d3BkEs2S+W7t9w2fwrr69vuKI0HLDxc6ltZeVQT5nq+mKqMTbnwcF+uT9NQRAURwYoSm/npXfiOQNkdlfkDzisayf1tE4dP69x28qujc8uu3xL/ktnUOloT2C0pK+rgyeupdrk73jkiEw769KL5Vyiqf7RC+4deREAwFtSk0huMm9H029xM+22aD3Sro202yPt8B1Ce3bjVKTGHTvUPCdH66M0z9pUVCgZcp6Revr8Z9qJaP9IOxI13sI8cw9NR5rSoebZEqmP1jwBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3k0uuH5m/d49D7/8ldbf/u7h17/16sePrGq8ZaC7/qJ1ix/v2PG9vx2tWtV6ZOmCm+5PND2yvr+7Mwgqk/1iqe6xZ6ri8ZkDddseu6e3puFDC9cUpccNt2OyDg72hzsXVwRBc1blYDhsf3kQJHILyWawIb/wpeTOZ8ICAAAA7yVnJn/HM+1UHCzOaceSaTKW/BdKhcVrJ/W0Th0/r3Hbyq6Nzy67fMupj5cYYrzak46XaVee+IllBeMw/kbHO1EPD12RN87woiNG8/zpx/qnNdfdUHrl7gsWzphdv+XS4CfTD3csX3TfhBfHL9nXXpOX/yuHz//hmZP/AQAA+G/I/9FxhjdS/m+uqZh0cOp3ix67rur44fkP/Lyz7/kn4w8VD3Q//dLYcbf9cnVe/p+c85R5+T+ccZj/48Gp5X8AAAB4N/tf5//avHGGN1L+/8X+zZ//98pvTDk84187Xnj69xdvnVI+/7WyGTe8+cSCVxp2tf0pL//XFJb/x2RPO3xwVzjhZRVBUFP4SQUAAAByhP/vfuKjhTCvpz45iOb1y+4qe3LXG+tvjJ/V8o8zFvfPqv7i7tVf37ApNrChc92O5XNX5OX/2sLyf/E783IBAACAAvxm+y13V395ydYtew7N2XFnYvPYS+a+uuennVf1vXwsUfT8zX15+T9RWP4vGZ2XAwAAAJzEU+MmPnfo0UNfm7177YS9q9rmPD5t3+qFD/xz9t+veOnPxzddWJ6X/xsLy/9l6W165UOq087wrxA6KoKgdHCnJVXoC9o/mSkAAAAAb5Mwpzc1revduX7MrNfOPvzDNSuW/2rvpd++a2P1zQd+XXX7ucf2996Yl/9bhr//f3ing3D9f879//LW/2cVUnf9u8SNAQAAAHg/yl/PH94eP/XNBUN9/36h6/8/euaBko7m8ysnx7dVz3rig31Xra1+fVHHRZ/YfusbH46V//VTefm/rbD8X5S9fTu//w8AAABOwf/b9/8tzhtneCPd/79v3DPnrPnsPT+o/WbZU+e+eXfzd9oPTj9v87QzPlJ0fvecmX/4fl7+by8s/4fb07JfXk94fm6vCIKJgzvpuwluDae7LFLoKs4qpE58pEd92CNd6CrJKiS1RHp8rCIIpgzutEUKp4eF9khhoDxd2BQp7A0L6eshU3g0UugJr7R7y9PTjRZ+FhbSCyy6whUUp2WWRER6HBuqx2DhpD0OZJ4cAADgfSUMz+ksW5zbDKJRtis20gFlIx0QH+mAopEOGBM5IHrgUI8HjbmF8PEfz+1e+so1D9b1Xt1w9KzZe5bc0faBnkW9O7/wo55z/nL1Cws/nZf/NxWW/8NTMTa1GWr9fxCu/09/r2Fm/X9jWKiMFLrCQiJ6x4BE+BypsHtn+ByViXSPgYmZAgAAALynhZ8LFI3yPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/sHfvcVJVd4LATzf9oJum6YgBY4ygRkR3aZomGEQcUXRXo4tNJKtjhtAIjXZoAwq4YsyKr3GV6GLUmBjZwY+jJg6r+CDqRIXoiElGJfE5Kz4HnciqS9BR45gs++m+dYqqW112IaC0+/3+0XWqfud569F17r11LgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/P/hsiX3Nrw58H9965ffW/f697409TdTD9m8y19uqHt3yDlPbT5ocN0tbw1asPCNtklnXtsyffk1G1YuDaGlq1xZUrzsoUHl5aP/cMxdt13xcNO0wVPOrcrUm4mHfp1/yjN3Loytvto/hLvLQqhIB0bUJYHKzP26WN8edSF8LmwJZEu01SYl0g2Hh2tCWBa2BLJV3VsTQl1OYMoTD666rDNxVU0I+4YQqtNtvFCdtFGTDgyrSgK16cCciiTw/uZENnBPeRKAbRbfDNkX/YqW/AwN3Zcr8vqr3G4d+3Slh9cnJhqK53vrsB3cqRxV6QdatulpK6iOHaLg7bHau60XvNsKtvMST1vuF6nMN5TNW0LVoXxm26zpCzrmx0fKQ2Njn2I17aDned2mc2ZsTbrXvA5jBxq2y+vwgdpJ9Ze9PfHglSf/8fR956+duq3dfC5nk+amd7TqkHnN9ZrnMZrg86QXvP0KviUN9aUrhHD8nz5f9sycl3bf+MGrJ068/YWLr5628JopE58d9Iux/3jtLndPu7xg/t/w0fP/+HKOt+V5uWOrH9Ync/P4SF1MbKxP5uYAAADQa/SGvaZfHf3qS6c+dPeiF5cfV/Hdcb86abf6irO/33H8rivHf/HSK9sf36Vg/j+0tOP/8ZB/Xe5oV4cwoStxwYAQdut6PAn8LHbn5AEh7NWVaskPHJYKrA7hC12J/bNVpUr0jSWGpgK/r88EJqQCa2KgJRW4MQaWpAIXxsCKVGBGDKxOBQ6PgdCeP44D6jPjKDlQEwOtyUZcEc9CeKc+tpbaVuuyVQEAAGwnmdlhZf7dnHMdtjVDnF6uqOkpQzwDu2iG6lQN6RlsdlpVtIaKnmoo76mG7LgXffTwC2ou66nmgtMwyvIzfDjkO+UDJu79o7tuHHFT84sTv/vu2OO/8uc33129/z/993vOmX/dAQXz/6aPnv9Xd9ORsoLj/yFM7vobc5dnIh3ZeGtLXgYAAABgG1z12NInbzjgqP9z38v33fmla28oX3311//vKxsv2HvUccPL+v7dt1cUzP8nlHb+f9wn0icnc3g07oaYPSCEpvxAUu3BhYHkqHe/TAAAAAB6g+zx+Oyx8PbMbXKKdno+XZi/ZSvzxwP/E7rNf/mmv372y9c+eeLCYftsuOK/nflB2efH/m6XY9eOfPytPYf9Q0PfwvP/W0o7/782/zbpxJrYiysHhNA3J/BI7GVnoMvQGHj50PxAZvxr4gZYHKvKnJiQrWpxLNEaA02pwLJiJX6bLbFbfiDzZGUbvyA7jvZMiZwAAAAAfOLi7oB4XD6e/3/P5AO+tP+gl8a8uOe9C1+bsPSEU2t/uM8tu74+oGPSmAMnHHLEMwXz/9atO/+/ax5ccHp/R78QRlaE0Cf9w4BHa5OFAWOgriyTuL82qatPuqrzakMY3zmwdFWvZNb/r0ivMfhETVJVDOy29083DetM3FATwsjcwDPfvH5MZ2J+KpBt/Bs1IQzpHG268ZV9k8Yr041f0zeEPXMC2apO7htCZ2NV6aoerM5cxyBd1W3VIQzMCWSrOrA6hIUBgF4q/iudmfvgvIVnz57e0dF2xg5MxH34NWFWe0db44w5HTOri/RpZqrPecsYnVc4plKvfPN8ZomiqUNuH15KOvs7wabctjL78QtOHMzcj9+FKrvG2VyZd3d0esjD9ylsIuR8kyo25PIdPOTa3Eq2PIkF9cf8VaFf6LtgXtsZjWdNnz//jFHJ31KzNyd/42GmZFuNSm+r2u76VsLLo+hqWSkfd1vtl1vJyPmnzR05b+HZI9pPm35K2ylt32keO6q5ecxXx45pHtk5qqbkbw9D3a+7qlND3Xx9iePajkPdvSKnkk/iU0NCQqK3JaYvKTt/wrRf3/+tPdacdtZJe/z9HjNHnPRXl/9m7omNh0z+1fV/ubZg/j/3o+f/8VMnfvJn1mcodvy/IR7mTx7fcpi/NQaWlXr8v6HY0fzsiQFDU4FFMbDIYX4AAAA+G+LuyLg3M+6Vvq7un+4+cuaMQ97/5QlTrv7bseNOPWv9vg0XX33skv+w/p0lq454u2D+v6i03/9vp/X/s0vXf63YMv/7xxJNxdb/Ty/zn13/f1Gx9f/Ty/xn1/9f9ims/78gG0htknes/w8AAHwWfHLr//e4vH/6AgEFGXpc3j99gYCCDD0u41/qBQK2ev3/OR1/UTvo8jnjDh0x98ePrNp7ycDbvvT8xF/vs/SgEfeuvOW9UbcWzP+XlDb/t3A/AAAA7Dwe+mXfb1/87rD7n3rk/SPLLv3txpuO/6u2Aw75w8DmUyYfXfP9m/6tYP6/rLT5/ye//l8odv7/0GKBlmILA1r/DwAAgF6q2Pp/Nw98eejq+SNufOznb97yUusvZo5/7d8t+cFXpg9runnNut80zFhfMP9fUdr8P552UZ6XO/bmw/pkTbuQXtNuY332JwMAAADQO5SHxsbKEvPmrYx62Mdvc11mKdCPSud6+r5BqxaUP3RVWfXGH1wy7ZDGc489c86RF63/fu2TP6md2lh9RsH8f3Vp8/+832U8UDup/rK3Jx784cqT/3j6vvPXTt1y/B8AAADYcUrdLwEAAAAAAAAAAAAAAHz6nmpdetAHo45+Y+Zeo/70jWNf+MHiL37zkb+59s9n/vzw+/Zq3zxsSsHv/8PkrnLFfv8fr/sXf1+wa17u2GrP6/9l7k855taFXUsWPlofwj65gdnnz/5cyFybf7/cwKqp+w/uTJyfLnHfi4e/1pmYlg4cNWKX9zoT41OB1rhI4hfSgXhVxff6pwJxecUn04G4PVakA1WZwCX9k3GUpbfVhrpkW5Wlt9VzdSEMyAlkt9XddUkbZekBXpUKZAd4ejoQBzgpEyhP9+rWfkmvYqAuFv2bfkmvAADYacVvgZVhVntHW1P8Ch9vd6/Iv43yliw7r7DashKbfz6zNNnUIbcPLyXdJ/1ddMu1xitDdecQRhV8Xc3NUtY1yu1TSw+bbtciQ+5ptbfyIuXStnbTVRUfUU0yosYZczpmVvY48NE9Z2mu6DHLqILJTm6W8q5NWkItJfSlhBGVuG1K6HK8Xx4aG/ukco2LwYaQp6dXRKm/189d56/YqyA3z9/WXHtpn8F93v+38Rc99OCAyo5TJ7ddtPtj/zxw1Mwf//DB1mt+XzD/byht/l+dO673MhcDWBSvrHfwgBBaSxwRAAAAfPb9z3OX33HinDUbZq2uePZ3v5tdftyJlZvPueucsy967v7FR13y72/e1viKsqc2nfjGprP++o2ffOW6h8966fAZZ901ad0h69uqb/zuXyw/dUjB/H9oafP/uAcrcyg42duxOl7//4IBIXRdWr8hCfwsDvfkASHs1ZVqiSWSC+p/LZZoSgI/iztM9o8lWlvyq+obAytSgd/XZwKrU4E1MZDZS/HTkNmVc0V9CGO6UpPzS8yNJRpSgeNiYGgq0BgDTalA/xiYkAq82T8TaEkF/jEGQnv+trqzf2ZbAQAAbI3MPKsy/25Iz/NWVPSUoaynDLU9ZSjvKUN1TxmKjSLevyNmqEydvFKWk6kyXWtNqpaCDPFi+Fvdr4IM4bf5OdMFC5qO5x9kzzcoy88w7od3tB70tXk/3nTxjx4/8sALj1xy5duXHt1v8JXP/u/2c/v131RbMP9vKm3+X5t/m7S+Js7/t1z/Lwk8Ert3ZTx1fGgMvHxofiCzY2BNnOwuzlbVkimRmbQvjiUmxMDQVGBuDExIBVonZwLLBucHMjPtbOMXZBtvz5TICQAAAMAnLu4giLtp4vx/5bjwzh5Hvt+8+5UD5457/JHzjphes2t1zT+PX7t0/KXVD+3Xt2D+P6G0+X9sr19uYxfG3rzaP4S7y7b0JhsYUZcE4n6Muvjz+D3qQvhczg6ObIm22qREVarh8HBN8gv1qnRV99YkawzE+1OeeHDVZZ2Jq2pC2Ddn70u2jReqkzZq0oFhVUmgNh2YU5EE4p6fbOCe8iQA2yy7VzC+oDKnumQ1dF+uyOvvs3JN0PTwCvaBdpOvu99c7SjV6Qcy+1Sztu5pK6iOHaLg7bHau603vtsavNtyv0hlvqFs3hKqDuUz22ZNX9AxPz6S+0vWAjvoec79lWop6e3wOlz08Xvbs+p0B5pSHx9N3Zfr/nVYFqt7oHZS/WVvTzx45cl/PH3f+WunltyNIuIPhQ++de4Bz+Vs3h2tOmRec73u86TF50lv/Dcw1NMWQlh+wawnn/iX95+vWN/8Xw4cu/y2Nx9b/pODHpg14gsbLvnyxrfePapg/t9S2vy/InXb5YO4MecNCGF4zsZ9NG7+iQOSz8GcQPIpObAwkBxyX19f9JMTAAAAtrfs7o7s/oL2zG1yQnh6nlyYv2Ur88f9FRO6zV9qvweO+YfvHXrV69/4+vrdL3906VPr/tObrxwx7dAHNj29YuXrzcd+/umC+X/rR8//+6a66fi/4//sII7/d2tn3xXdN/3Aom3aFV1QHTuE4//d2tnfbY7/d8vxf8f/u+P4fw8c/+/Wzv60FXxLmutLVwihdcANt/+idvrwflec860Za3/+9DtN416oO/foO//H4YvDNeet+nPB/H9uafN/6/91v2hfdv2/1mLr/80ttv7fIuv/AQAAO1SRhebS87yC1fsKMqRX7yvI0OMCgT0uMWj9v61e/6/2pLNPeqX+rb2umXj7f75z+oXPn3Tis/v2ef6E20+4aeTVw1/68oaC+f+i0ub/8eXQL7f13rL+39DJRapaEgNzLQwIAADAzqjYDgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+XSseXPzFzYv3OeimZz9/0+H/umzNrL1/dcDm0WNObhy+eGDZlX/3L28NWrDwjbZJZ17bMn35NRtWLg2hvatcWVK87KFB5eWj/3DMXbdd8XDTtMFTzq3O1FuZuf1iXu7Y6of1ISzLeaQuJjbWd97ZEphyzK0LKzoTj9aHsE9uYPb5sz/XmbixPoT9cgOrpu4/uDNxfrrEfS8e/lpnYlo6cNSIXd7rTIzPBMrS3b2uf9LdsnR3L+sfwoCcQLa73+6fX1W2jf+YCZSn27i5LmkjBupi0R/VJW3EQEcs0d43hJEVIfRJV/Xr6qSqPumq/r46qapPuqr/Wh3C+BBCRbqqF6uSqirSI19blVQVA7vt/dNNwzoTy6pCGJkbeOab14/pTJyeCmQb/3pVCEM6XzLpxu+oTBqvTDd+VWUIe4YQqtIl/rUiKVGVLvFKRQgDcwLZxk+tCGFh4DMhfvjMzH1w3sKzZ0/v6Gg7YwcmqjJt1YRZ7R1tjTPmdMysTvWpmLKc9ObzPv7Yn990zozO26lDbh9eSroiU66yq8vNlXl3R+/svY/9qs2tZMvzUVB/zF8V+oW+C+a1ndF41vT5888YlfwtNXtz8rdPJppsq1G9ZVvtl1vJyPmnzR05b+HZI9pPm35K2ylt32keO6q5ecxXx45pHtk5qqbk7/YY6vWf/FB3r8ip5JP4AJCQkOhtifK8T7emnf2DvOCL/paOVobqrg/ogmlFbpayrlFuj0Ef9jFH/HG+p/Q4olEFE4eCLM09ZxldMJnYkqUmydL1va5gcphbU3nXJo33y0NjY59i26Eh/27u5n1rGzbvusymKzUNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/D924EAAAAAAAMj/tRGqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsAMHAgAAAABA/q+NUFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYUdOBYAAAAAEOZvHUbPBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwKUAAAD//5twzl8=") r0 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) sendfile(r0, r1, 0x0, 0x12000) 2m45.67786641s ago: executing program 2 (id=186): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 2m43.309623052s ago: executing program 3 (id=115): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0xffffffffffffff2b) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x80) getdents64(r1, &(0x7f0000000f80)=""/4096, 0x1000) getdents(r1, 0x0, 0x0) 2m40.109332839s ago: executing program 2 (id=197): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r1) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$LINK_DETACH(0x22, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) 2m38.718351068s ago: executing program 32 (id=197): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r1) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$LINK_DETACH(0x22, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) 2m3.023580114s ago: executing program 3 (id=115): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0xffffffffffffff2b) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x80) getdents64(r1, &(0x7f0000000f80)=""/4096, 0x1000) getdents(r1, 0x0, 0x0) 1m45.27720242s ago: executing program 5 (id=312): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f00000001c0)={{@host}, @host, 0x0, 0x2000000, 0x2449, 0xfffffffffffffffd}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000040)={{@my=0x1}, @any, 0x0, 0x1, 0x9, 0xfffffffffffffffd, 0x80004}) close(r0) 1m44.441655319s ago: executing program 5 (id=315): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000002ac0)=[{{&(0x7f0000000a80)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000180)="fd", 0x1}], 0x1}}, {{&(0x7f0000001180)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, &(0x7f0000000940)=[{&(0x7f0000000980)="81", 0x1}], 0x1}}, {{&(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10, &(0x7f00000022c0)=[{&(0x7f0000000ac0)="8353", 0x2}], 0x1}}], 0x3, 0x4000001) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000001c0)={r2, 0x9}, 0x8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) 1m43.794659532s ago: executing program 5 (id=319): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) poll(&(0x7f00000000c0)=[{r1}], 0x1, 0x70) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x8001) 1m42.799539895s ago: executing program 5 (id=321): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800756, &(0x7f0000000080)={[{@noacl}, {@grpid}]}, 0xdf, 0x48e, &(0x7f00000005c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2029c1b, 0x0, 0x1, 0x0, &(0x7f0000000080)) rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./bus/file0\x00') 1m41.593262165s ago: executing program 5 (id=324): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000180)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0xfffffe00}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000880)='ext2\x00', &(0x7f0000000540)='./file1\x00', 0x0, &(0x7f0000000000)={[{@min_batch_time={'min_batch_time', 0x3d, 0xa04d}}, {@errors_continue}]}, 0xdf, 0x52e, &(0x7f0000000e00)="$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") 1m40.366684882s ago: executing program 5 (id=330): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r2, @ANYBLOB="07002abd5248ffdbdf2507ff000008000300", @ANYRES32=r3, @ANYBLOB="0c00990001000c0069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}}, 0x0) 1m37.566258879s ago: executing program 33 (id=330): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r2, @ANYBLOB="07002abd5248ffdbdf2507ff000008000300", @ANYRES32=r3, @ANYBLOB="0c00990001000c0069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}}, 0x0) 1m32.093768475s ago: executing program 3 (id=115): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0xffffffffffffff2b) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x80) getdents64(r1, &(0x7f0000000f80)=""/4096, 0x1000) getdents(r1, 0x0, 0x0) 1m3.927154148s ago: executing program 3 (id=115): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0xffffffffffffff2b) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x80) getdents64(r1, &(0x7f0000000f80)=""/4096, 0x1000) getdents(r1, 0x0, 0x0) 41.462778273s ago: executing program 1 (id=486): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, 0x40c89, 0x40e01}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x45}, 0x0) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @rand_addr=0x3}}}], 0x20}}], 0x1, 0x4040880) 40.998344487s ago: executing program 1 (id=489): syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000100)="61df712bc884fed5722780b6c2a7", 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380), 0x0}, 0x50) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000280)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[], 0x1, 0x2f9, &(0x7f0000001900)="$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") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1f4) 40.395786395s ago: executing program 1 (id=491): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000040)='./file1\x00', 0x2000775) write$binfmt_elf64(r0, &(0x7f0000001700)=ANY=[@ANYBLOB="7f454c4620040000ff7f08000000000003003e00ecffffff9803000000001b0047000000000000005600000000000000000000000000380001"], 0x78) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) 39.890378276s ago: executing program 1 (id=492): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000400)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000080)='./file0/../file0/../file0/../file0\x00', &(0x7f00000000c0)='./file0\x00') 39.352901665s ago: executing program 1 (id=495): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000000, &(0x7f0000000140)={0xa, 0x4e23, 0xaea9, @mcast2, 0x6}, 0x6) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendto$inet6(r0, &(0x7f0000000140)="8369b66f", 0x20, 0x0, 0x0, 0x0) 38.578349406s ago: executing program 1 (id=498): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000356ffc)=0x10001, 0x4) bind$inet(r0, &(0x7f0000e15000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x30}}, 0x10) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r1, &(0x7f0000e15000)={0x2, 0x4e20, @multicast1}, 0x10) 35.649229188s ago: executing program 34 (id=498): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000356ffc)=0x10001, 0x4) bind$inet(r0, &(0x7f0000e15000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x30}}, 0x10) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r1, &(0x7f0000e15000)={0x2, 0x4e20, @multicast1}, 0x10) 35.588802692s ago: executing program 3 (id=115): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0xffffffffffffff2b) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x80) getdents64(r1, &(0x7f0000000f80)=""/4096, 0x1000) getdents(r1, 0x0, 0x0) 9.297053997s ago: executing program 6 (id=576): r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_pressure(r1, &(0x7f0000000200)='memory.pressure\x00', 0x2, 0x0) io_setup(0x5, &(0x7f0000000480)=0x0) io_submit(r3, 0x1, &(0x7f0000000780)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0xfffc, r2, &(0x7f00000004c0)="02", 0x1}]) 8.889607367s ago: executing program 4 (id=577): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x201, 0x4800003e, r0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x143541, 0x1a8) fanotify_mark(r1, 0x61, 0x40001002, r2, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcc0) 8.410924398s ago: executing program 4 (id=578): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x6, 0x7ffc0002}]}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@minixdf}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='kmem_cache_free\x00', r0}, 0x18) utimes(&(0x7f0000001ac0)='./file1\x00', 0x0) 8.397026664s ago: executing program 6 (id=579): syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="040e0443050c"], 0x7) syz_mount_image$exfat(&(0x7f0000000700), &(0x7f00000001c0)='./file0\x00', 0x810000, &(0x7f0000000280)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c696f636861727365743d69736f383835392d312c646d61736b3d30303030303030303030303033373737373737373737372c696f636861727365743d6b6f69382d72752c696f636861727365743d63703433372c6e616d65636173653d312c6e616d65636173653d312c009a8d4d9016e3d8128333e260a1b926dd0c5f7619710e03ea1ae6521494f87e5737dc0c5bec3f76668140a15258818b6fbc51f9a13940e63c378688559c351287f0e09ef0b7330db20eef797e5004484649e7f5fb64b746683a75b9ed822f5ae34fac"], 0x1, 0x1501, &(0x7f0000002a80)="$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") r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$RTC_PIE_ON(r0, 0x7005) shutdown(0xffffffffffffffff, 0x0) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29143"}, 0x48, 0xffffffffffffffff) 8.101609005s ago: executing program 0 (id=580): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1af8ff00000000bfa100000000000007010000dbffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000010c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010300000020000000ee15660000080006000200000018000180140002007665746830"], 0x34}}, 0x44800) 8.10115476s ago: executing program 3 (id=115): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0xffffffffffffff2b) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x80) getdents64(r1, &(0x7f0000000f80)=""/4096, 0x1000) getdents(r1, 0x0, 0x0) 4.607123311s ago: executing program 0 (id=581): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)={0x2c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfffffffe}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x20004801) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x48, 0x0, 0x300, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfffffffd, 0x55}}}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffff131}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x20048801}, 0x8000) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000002c0)={0x10f, @time}) 4.603764419s ago: executing program 7 (id=500): ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 4.525516692s ago: executing program 6 (id=582): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r1}, 0x10) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10) sendmsg$kcm(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e0000004a008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) 4.524893977s ago: executing program 4 (id=583): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000b00)=@newqdisc={0x4c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x8, 0x200, 0x8, 0x6, 0x8, 0x8}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4c841}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x55}, 0x4000) fsync(r0) 4.050391135s ago: executing program 0 (id=584): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000780)={[{@data_err_ignore}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@delalloc}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}, {@quota}]}, 0x41, 0x553, &(0x7f0000000a40)="$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") r0 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) fallocate(r0, 0x0, 0x0, 0x1001f0) copy_file_range(r0, 0x0, r0, &(0x7f00000000c0)=0xc615, 0xb51, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) fallocate(r1, 0x20, 0x4000, 0x8000) 3.657009692s ago: executing program 7 (id=585): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="02017d29012918000e3580009f0001140000002f0600ac141414e0000003808a8972bd0b72e41082b1a3d2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0aba61f63047d2900ffffca88faca"], 0xdd12}], 0x1}, 0x0) 3.449884158s ago: executing program 4 (id=586): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000019080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0xf, 0x0, 0x80b}}}, 0x7) execve(0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, 0x0, 0x0) 3.369724009s ago: executing program 6 (id=587): r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000006800)=[{{0x0, 0x0, 0x0}, 0x37}], 0x1, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000080)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000000)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000100)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 2.975577388s ago: executing program 7 (id=588): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(0x0, r2) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 2.82104707s ago: executing program 4 (id=589): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_mount_image$bcachefs(&(0x7f0000000140), &(0x7f0000000100)='./file0\x00', 0x14, &(0x7f0000000280)=ANY=[], 0xfc, 0x5a8c, &(0x7f0000000f40)="$eJzs3X+QHNV9IPDXM7Pa1a5WWgkcZDCrRUYJwbG14lf5RypWcomdAkLJRcpBnGxY0IooloRKEgEECSIHPlSAC6dIJTj5g7gwdxjFRRVcjEKZ8OMkzsZWcfFRV5g6O4f9h1OEQxVAR7l83qud7Tc70zO9PTs7q198PiVtT7958+3X3W96+vu6dycAAADwnnDwzp1HLjv9d77zZ+Pv3Pa7/7D19jBQrpb3xQpD6fSmY9VCjqbeyvLqNNsvfuWWr/9k5Nrf+vZj/V9798DGszb94LdPufapP7p4/wN//ezbg0/84rWiuLE/nTs9n7yRhND3rcN/8cUDL542WZYsnvxZ2hPC0mTZs0uTEO6oDzH6sxDCxnRmeSb+4++cv2lyevvdvQ3lSzL19Pf3tsn9nIQQdh+58UPhh7+5/o7vrfjG3/Xse33PdJWkr64/hbD46vrX94QQFqb/J8XeFvtjkk7XhRD661730YJ2fbDN9q/OmT8jnS5IpwMFceLzKzPzpUy97HzUk5n2FyxvrvLa0Wm9Iosy80mX4kZ57YzlS9PpN9PpubOMX07XoZyEUhIqteZvSab7SKjbb0lIqvuyrzZfqu3bkK5/Zj7JzJcy8+WezHpVl5t2tHKSNJbHepnyeDiupOVn1R+rW7i87nF9vffHsvSN+m62TiboQNOD2npVxXYdnqEtR0Op7hjUqry249OdMZCWDSTLml4z0UJ87sD6e1aVNzx3cCinHcljSRo/6Sj+7u8uXfT5R/fekP1cr8W/upTGL3UU/0eXHHrzyr1f/Upu/Pti/HJH8c97uv+NS56/c2Xu9jkct0+lo/hjr71w74pTr9mX2/4HY/y+juKv3X+od/DI08/ktn80bp+FHcV/9ROf+vEjLz/5em78EOP3dxR/w/7tX+odPnJObvxn4vYZ6Kz/vLXvoleGh386khf/pRh/sKP4D+/p/fhDS+6+OHf/rovbZ6ij+Jee/dQdi448eWbesTN5sFufnADvTaek51h3pfOd5plzVZcv/NVIZeqcb1H6f7CbC8qcfGbzhALdTqsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOEm970P/7dP/+7NDb1TS+d70waulqWksXxBCsjCEsHPX2I5dm7ddtziEsGPb2JaRsV0j49t27bh55IJfG9kxvn3L2M2bt103Mvrh86detywkU9PkzKZl905MTJSGGsvi8v7d2ft+uOqj//KvIYy+7/vDldz2r35g60OntviZkayd+OTWGy77/oV/m67XUNquoRbtmpiYmAg57fo/V/z8oT8//JNzQhj9pZna9cKrv/GPDQ2qFkzHSZV6w1SDepP+lu2otTptT9xelU2bt4yPzrx9J19fzlmPf3/L6z/bdNOXfz61ffty16PN7btw7cSW0l+uv/T//eWtUwVF7TpW+71oe8e1iO2L268v3d6L0/VanLNelZz1uvN7z7z8rdP3vr0njFbeWtG87KL16kk7QE/y/raWG5fQnyxtKO9L68c9Hl+3etfW7at33rz7w5u3jl03ft34to+tuWDNRaMXXnTh6uqar+7y+sfl/3Kb69/9/vTavzQvd8kf7/lm/Nlef2ps14JZb4/JdhVvj/oW5b3/+i//4v0fe+D5y6YKivp5rF07nqTT/sn9vCbU9beml7dcr6L9E0IYabUd3nz74nDa/9x8R9FxqH7P1P/MSNZOvLjy3/72o3+z/NenCo7Kcb6+QR0e52utnm5PdXv1pftj4jjdvr2hnK7XQMt2rXnx+Z57Dv7rn9Tat2BBuGls164da6Z+Lkpbuig5o2W7sqVxvVZUf5ZDullCrZu26K+TesJU+7LHz1g9u1UH0ucGkmUt1ysrPndg/T2ryhueO5i3pZPHppa4MAxOTZMP5NTcknlhudbgVss/Xt9/Rf1j+NN/88Rnn/j7C5r6x3lTP4vWK8lZr2+8/PD9X/vyf/z77q3Xp3/j0NC//a8/XDVV0PK4smC6Ycf8uFKeaket1Wl7kvrjynkhFL3/VoTW65H7/iu1Xp+i9192OdP1W8cbycwPhHJH79fznu5/45Ln71yZ+349PNP7tX5lb214Xbng/Xq8fC5l319JpbEd8/f+augoydqJb991yp5nb1t3+lRB0edlrXarfn1+G/lHznr945WvDF8/8h/+R/eOG1//tcev+sHY2j+dKuh8v8e2dGe/96Xbty9n+9ZaHfPO+u37kWuv37JxqrxoOx+78990WpD/xEPJzpt3f2Fsy5bxHTvbW692P0/jcrJbudPP03h0W1awXqWm9Zq/B+1sr3bfb7H9GzveXo3vt4GQdPS5sPu7Sxd9/tG9Nww1vSpd0NWlNH6po/g/uuTQm1fu/epXcuPfF+NXOoo/9toL96449Zp9ufEfTNL4fcXxF4em+Gv3H+odPPL0M7nxR2P7F3bU/lc/8akfP/Lyk6/nxg8x/kBn2/+tfRe9Mjz809z4LyXpcibPkUJ4/J3zN03NJ6Enfb/FdvQ0tCtk55PMfCkzX66fL8XTyHQB5SRpLI/10vKz6trSyh/klMezsL7lU9N343zIPpi5/HhTqjv2tyovOk8FADjZxev/8Rw0Xv8fT0+U8kcaYNpc87DlOXFjHjY9ntN4jXV5Gj++Po4DDn8kjE5Obx+ZOtGf7XWE+H7IjnPG5ZzzwcYYLccn9tcvpLr8pnHOovH3lZn52K6p8fJKXR6aas5rKqGN8ffm5cw8/p5Z/eLrWSN3NTVrpG7cKrv/etIRs1b3O2TaW5mMkNc/suNi8X6O4cVhXXV5bfaP7H00cT9k76OJyzk9c+Ds9D6avP4x1LwdGtoV+0esN0P/qDa5+Hpk8/4LM2zf6f3XOlp2/81if/dN1p/v67NdGDdseUg7euOG83s97LgYl2wR/yiPSy5qip++wY73ccNYHrdTpc3xxM/mlHdrPDEeLmK7Ds/QlqPBeCJwsor5f/yMmMz/J0/A/2+mXlGekj1rjPFy7xMqt25PUd7RfJ9ef0ef4xv2b/9S7/CRc3LPc55p9z697Q1z/QX3/RRtx1WZ+cLtmDNAU5TvZZdTtN2z92UMhMGOtvvDex74+ENL7r44d7uvm/ogLd7u9zfMDRZs9xMgX2gdX75wwuUL5WNwH0PR+Fl+PlKutWOmfCR0mo+kNz7NVz7y+znls81H+pse1Nar6vjNR6Y/SBvykZ6j2y4A4MQR8//a9bM0///neGKRnkcU5a3nZuZjvNy8Nef8JC9v/b10elOm/kD1NypaB5vpvPnSs5+6Y9GRJ8/MzVsebDcP/c8Nc0OFeejc8ubcPGJdd+4Xz80jannW3PLE3PbX8sS55ek5l2nr8vS55dG526eWRzeOA9x/aDrTmCl+HAfIjV8bB+hinvuL6UpH7379gvG6zMLibLvjdUc7j54s6VncuJ6NeXF/d67rpb8+O1959OU55bPNoweaHtTWq+r4zaMby+XRAMDJKub/8TSumv/3hvB8rLAwPpjbdfbcvKBL5+3ZvwdSi//SvOSV0/G7dP23OO+b77x1vvP6+R6XOH6u/050lBfP97jQUPUPeM42frvjZMfsftd5yYv/ufao7bw4Xai8GACA41nM/2OaH6//P5+pN9f8pCl/65k6hZzOT068/Ly+3gmcn18RjlZ+3nsi5+cn+vjXUEfxT8D8v+E3MY/RdfF3J07i/L/aZvk/AMAJKeb/8dce49//+6/pfPbv1reZpz+YvZ3XdXTX0cOc8vTBEMJ7IU/v8jhbjF9/H8AJPA5QPhHvj184Xf9kGgeo6gkGAwAATgA91Uyp+ffsP5dOs79nn/d7+Vfm1G9XJT09vmbXjvHxq27YvnFs1/hV267fOL7zqht3bN61a7x27jy367u5eUuaN/aESro9WtfL5m1L0r+HsCTn7yFk68ewZ1QfNP89hOxiFxb8HYHp/ddee/P2X2mG+q36R97+zov/Bzn1o9r+v/YPz7tq086rNm/bvGvz2JbNu8cb6w1Vf5O6/e/NjNcpZ/V9qZkfTUqz//7OuHvm1o5SUzt60u2R9/3sSaYdS9OWLM37/oOcdn/nv//5H5898fNHQhh9X/kDrdt996OtG5+RrJ34L1eM/96ug9/fPtn+0oztr9VM21X0faXZ+nF9Kluu37nrQ5uuv2Fb9hslOxPHM0q1+Xm6ryF9+5fbHJ/YkFM+29/fLzc9OD61PT4BAECDeP0/ns/G64dfTk+gYnlhnr5tqt5crx/n5umj7eXp2e8lK8rTs/Xj+rabp/fNMU/PLr8oT29Vv1Wenpd358X//Zz6s9V+P+ngPo9Kuh0e3XtDbj+5ur1+kv0+g6J+kq0/236SzLGfZJdf1E9a1W/VT/L2e178z+TUz1PUHyq1/jC3+3Jy+8N97fWHX83MF/WHbP3Z9ofSHPtDdvlF/aFV/Vb9IW//NscvN2zy7oz/TnaMar8Yv+rG63d8oa7efH//RWi+JaOd9i2Yfu38fv9Hp9rfvvN739fc2x/C2mpJXvvj9YEFs2p/u7//Nff2F23/WdxXtjg03VeW2/6X5jYS1n775/f7XTLyqje//miN16bdruj+s6Jx3PU55bMdx13Q9OD4ZBwXjp2Y/8fLPTH/vzuddvsy0In/PWkdfM7FY/AJ9j1mnZwnzfX++KLzmPfc53n2krvPcwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICTQm9leXV68M6dRy47/Xe+82fj79z2u/+w9fZfueXrPxm59re+/Vj/1949sPGsTT/47VOufeqPLt7/wF8/+/bgE794rTDwUPVn5dx0ti+E5I0khL5vHf6LLx548bTJsiSEUE6G9oSwNFn27NIkE2H0ZyGEjbV2Nj75+Dvnb5qc3n53b0P5kkyQ7HqFgXJsT307Q7ipcI04AfWl/Wz3kRs/FH74m+vv+N6Kb/xdz77X90xXSfrq+tOkuudCTwhhYfp/Uuxty+OL0+m6EEJ/3es+WtCuD7bZ/tU582ek0wXpdKAgTnx+ZWa+lKmXnY96MtO6dV1YsOiO5LWj03pFFmXmswejucprZyxfmk6/mU7PnWX8cvyfhFISKrXmb0mm+0io229JSKr7sq82X6rt25Cuf2Y+ycyXMvPlnsx6VZebdrRykjSWx3qZ8ng4rqTlZ9Ufq1u4PKf8/em0L32jvhvnQ/bBlIGmB7X1qortOjxDW1L/qXVxpfiVbSjVHYNaldd2fLozBtKygWRZ02smWojPHVh/z6ryhucODuW0I3ksSeMnHcXf/d2liz7/6N4blufFv7qUxi91FP9Hlxx688q9X/1Kbvz7YvxyR/HPe7r/jUuev3Nl7vY5HLdPpaP4Y6+9cO+KU6/Zl9v+B2P8vo7ir91/qHfwyNPP5LZ/NG6fhR3Ff/UTn/rxIy8/+Xpu/BDj93cUf8P+7V/qHT5yTm78Z+L2Geis/7y176JXhod/OpIX/6UYf7Cj+A/veeDjDy25++Lc/bsubp+hjuJfevZTdyw68uSZecfO5MFufXICvDedkp5j3ZXOt59nLr66m+2oyxf+aqQydc63KP0/2M0FZUwuZ/E8xgcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4OT0T7de8LkrPvmZ9ZUkhCSnzkQL8bnygrVrRzpY7thrL9y74tRr9tWXLe8gDgAAAFAs5uGlWklfWB5uTBaGM1rWj2MEZ8S5pLE8O4YQ42THCDqNU2oRp9RBnHKX2lPpUpyeLsVZ0KU4vV2K01cQpy+0F2fhDHEqkz2gzfb0z9ie9uMMdCnOoi7FGcyE6DTO4i61Z0mX4gzNGKf9fri0S3GWdSnOKV2Kc2qX4ryvS3F+qUtxTutSnOyY8mz74WBa8/S8ONUH5cI4laRce6LVePpp6XLOnONyBgqWM1j0edzmcha2uZwPZl5XmuVy+tpczi/PcTlJm8v51Tkup1SwnNhvb8q2Ly4nzrXZ/2/uUpzdXYpzS5fi3NqlOH/SpTh/2qU4t4XGk9PZxgFoV8z/p/O9odBb+fXQnx5xsqMAMd9dUf3Z/HmXd0CK8T6QKV9QFC+bqGfirZht+7IDCJl4KzPlPQ3xKrV8ZIZ4ffXxVmWenGl9P7G2ddvq452bKe+dIV7DCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAUfBPt17wuSs++Zn1IQmT/1qaaCE+V16wdu1IB8s9sP6eVeUNzx2sL+utdBAIAAAAKBTz8J5aSV/orawJvcmChnp96ThAXzpfHpqaDi8O6yanyUipOt+fLJ3xdZX0dat3bd2+eufNuz+8eevYdePXjW/72JoL1lw0euFFF67etHnL+OjUzxB6C+KFEKrDDztv3v2FsS1bxnfsnCrMtn95+rrl6XySvm74I2F0cnp72v5lBcsrNS1v/h4U7z0AAAAAAAAAAAAAAAAA+P/s2luIXGcdAPDvzMzOTLeNXeltGprtkEuJWjWJW0m1dA8IFpoLWQoyW11LsAkWN01okxLr2AZsa4IitARCJA9GYrG1+NKLLWIvBCI1GnBjkLZoHvRBabWSljxIysjOzpnbzmTWsWST+Ps9nG/m//2/73++Qwj8zywAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAuTVVHpkojY6ND0YhRF1yKh0kc+lsHBf7qPuVl7b9IDd8enlzLJfpYyMAAACgp6QPH6hH8iGXSYd0uLb6bXFomgiNvh8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPj/M1UemSiNjo1fGoUQdcmpdJDMpbNxXOyj7sn3nvnsG8PDf2uOFfrYBwAAAOgt6cNT9Ug+FMKSMBBdO93516PJu4GFbetn8hqSfRbNMa/93UG3vCVzzLthjnkf65G3vjbuDAAAAHDhS/r/TD0yFHKZBbP64aT/79XXJ3nXt+Wla2OxOemssnNJAgAAAOYg6f9z9Ugh5DKFer8+135/cSNU/ek8Wd/rd/tk/bK2vGR9r9/z19VGv9MDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwIVjqjwyURodG09HIURdciodJHPpbBwX+6i76uXBf6w5/Oji5lgu08dGAAAAQE9JH95ovfMhlxkMA+HSat8/fNuB57703AsjIYSZNj+bDTs3bt9+36rpa1iV5K08enjg+0fe+fasvJUz13k7IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8KGZKo9MlEbHxi+JQoi65FQ6SObS2Tgu9lH3rc9/8S9PnXjx7eZYoY99AAAAgN6SPrzR++dDIWRDNlxd/dbc609Lta3v9s4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuHjc/80Hv7FxcnLTfT7Mz4dKOoTz4Db+xw/JP6fz5X4u/A/5+b6N+f1/CQAA+PBdH6JQ+S9ds2G+7xoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgfTJVHJkqjY+P5KISoS06lg2QunY3jYh9145eO5RacfvnV5lihj30AAACA3pI+vNH750MhDISBcFX1W6d3AtX+f+gc3iQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwXpkqj0yURsfGF0QhRF1yKh0kc+lsHBf7qPvkrv2fO3T5925vjuUyfWwEAAAA9JT04dl6JB9ymY+HXLiu9n2ydUGUro2d3ws01m1rWTY453XllnXps62LMiHU1+1uO1mmdpqZdflkv6GZsV6v2FiXqq0rNq0rhHr5Yn1d9WHtbam2oMf5Zj95AAAAOHeS/j9XjwyFXCbX1P//tDZeUhv1uQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAZ1PlkYnS6Nh4FIUQdcmpdJDMpbNxXOyj7oO//ehlX/3Znh3NsUIf+wAAAAC9JX14o/fPh0JYFD4SFlX7/jDUmp/k/bN05tAT//rr8hBWXH18ONO+7Y+SD79+69ZX2i8hpFqzUyFcXqsXdan3m98/8cDSypmnQlhxVfq6WfXC2eu1bhlXni9tWrf9yPFtPR4OAAAAXCSS/n+gHhkKucy9Xfv/pPPu0f/XVRvwyx/Y9Ysra9daR962IjVUq5fqUu8LS5/587LVf39nuv+fXe+T9U+f3r/l0JUtBWcibaK4Mrplx/rjNx1MJaeeqZ9uq588ly9/6+1/b975+JmZ+vmQr8UXtt3KTLXZ17byIa5MpvaNr/1gX7m1fqbL+R/93asnfrVwz/vT9d+7frBe/4bpS669/szJM13rh0viyuAdj+29ef/h9a31QwjFTvXfff/2cM0f73mk/fyDbRs3P/nma/sDiCtHF586uPpA4ZbW+lFb/eT5//zEk3t/8vh3X0jqJ38rsnzJXOun2uq/vvuKXa89vGFha/1Ul/O/cucbw1uL3/lD+/nvbtk10/UuZp//6RufvevNjfFD7VMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXl6nyyERpdGw8FYUQdcmpdJDMpbNxXOyj7sk1x969c8+Pf9gcK/SxDwAAANBb0oc3ev98KIRsyIbBat//fGnTuu1Hjm8LQzOzUW3MTG69f/snNm/dce/d83TnAAAAwFydXBNV+/9MPTIUcpmlYaDW/49u2bH++E0HU0n/n5oeoxDC5nsmN60I9bzXd1+x67WHNyysvycIofpnAfnpvM808m679djQqT99fVnHvFWNvKOLTx1cfaBwS5IXmvNWhvr7iadvfPauNzfGD9XvrznvU1/bOll7PZHsO3jHY3tv3n94fSp5j1EbB2v7JnmTqX3jaz/YV04Nhdz0fLqWl6+dGwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACYbao8MlEaHRsP6RCiLjmVZrVAMpfOxnGxj7prl/7ykctOv7ioOZbL9LERAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/IcdOBAAAAAAAPJ/bYSqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoq7NdfiFRVHAfwc2Z22z+zq7satBWtqxWFPSgFEfVSUREaIfRkSFiaD1EQRBT20BoaiRW9BFkvEhVUWwgGuUmixRr9k156qKDAeghEWqgdpIeKnTl3dvY6t9FZC8rPB4az59x7v/d37z1zZi8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8J/S0zVSa4/seKR650W3fvbU/TNP3v7BQ9uueOKtn8Y23fzp3v7XT05tXr7l21uWbjrwwJrJ3a8c/m3wvT+OtQ1+vN6sTN3eEOKJGELvh9MvPj31+QWzYzGEUI5D4yEMxyWHh2MuYfXvIYTNjTrnb9w3c82W2Xbbrp5544tzIfnrCpVyVk/d0Px6+X/pTfNsa/Wxq8L3N63f/uWyd9/pnjg+PrdLnN2nnOZTCIs2Nh/fHULoS59Z2WwbyQ5O7boQQn/Tcde1qevS06x/VQjVXL/m4tSel9pKm5xs+4pcv5TbL9/PdOfa/jbnW6iiOjrdr52BXD+/GC1Uo85VrceHU/t+aleeYX45+8RQiqGrUf6DcW6OhPpzq62kMcTas8zWwRhKjWcb0vXn+jHXL+X65e7cddXOmyZaOcb549l+ufFsOe5K48ub1+oW7ioYvzC1vemLejLrh/wfdZVT/mhcV01W1/Tf1PJvKDWtQa3GU72N519JnUpccsoxf7aQbZta/+zl5Q0fHRkqqCPujSk/dpS/9YvhgXve3vnoSFH+xlLKL3WU/8Pao7/cvfPVlwvzX8jyyx3lX32w/8Taj3esKLw/03MryOnkx9TPtt177JPnlp1/30SrZ13L3JPd/96O6r9x8mjPYPXgocL6V2f3p6+j/O9uuO3HN7/ef7wwP2T5/R3lb5h8+Pme0eqVhfmH6t+BSm2GdjB/fp249pvR0Z/HivK/yu7/YIv82Db/jfHd17+2eNeawvm5Lrs/Qym/74zqv+OyA9sHqvsvKVo7456z9csJcG5amv7Heib1271n7psptXzPXKim94WXxrrqv0AD6TN4Nk+UM3ueRf9gPgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPzFDhyQAAAAAAj6/7odgQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAE8FAAD//3MJFV0=") setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd1, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x4030582b, &(0x7f0000000000)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) 2.820647941s ago: executing program 0 (id=590): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.926142205s ago: executing program 7 (id=591): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xdd86, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000080)='O', 0x28}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x0) 1.665662377s ago: executing program 6 (id=592): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newneigh={0x30, 0x1c, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, r2, 0x0, 0x14}, [@NDA_DST_MAC={0xa, 0x1, @link_local}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}]}, 0x30}}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000340)={{0x2, 0x4e23, @empty}, {0x0, @link_local}, 0x77115db7c63e4197, {0x2, 0x0, @multicast2}, 'lo\x00'}) 957.77669ms ago: executing program 7 (id=593): syz_mount_image$hfsplus(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x3000c00, &(0x7f0000000200)=ANY=[], 0x1, 0x654, &(0x7f0000000a40)="$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") open(&(0x7f0000007f80)='./bus\x00', 0x145142, 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) openat(0xffffffffffffff9c, 0x0, 0x242, 0x4658b0e44181081a) 957.348002ms ago: executing program 4 (id=594): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = semget$private(0x0, 0x6, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000000000070000040", @ANYRESHEX=r2]) 784.138363ms ago: executing program 0 (id=595): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000700)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x4, @mcast2, 0x9}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='batadv0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000000c0)="8252", 0x2}], 0x1}}], 0x1, 0x4000c000) sendto$inet6(r0, &(0x7f0000000300), 0x5aa, 0x0, 0x0, 0xfffffffffffffdfd) 356.52063ms ago: executing program 6 (id=596): syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb00000001090224"], 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000480), 0xc0d00) r0 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000000400)=""/202, 0xca}, {0x0}], 0x2}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 94.035162ms ago: executing program 0 (id=597): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000340)={0x4, 0x200ffffe, 0x0, 0xffffffff, 0x0, "4d6b5ccb00"}) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)={0x30000000}) 0s ago: executing program 7 (id=598): sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000400", @ANYRES16=0x0, @ANYBLOB="00002cbd7000fddb"], 0x14}}, 0x20044000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000280)={@val={0x1c, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x300, 0x0, 0x1c, {[@window={0xe, 0x3}, @timestamp={0x5, 0x2, 0x88000}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) kernel console output (not intermixed with test programs): gth. [ 313.971872][ T6319] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2848: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 313.986093][ T6319] EXT4-fs error (device loop4): ext4_check_all_de:659: inode #12: block 7: comm syz.4.114: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=124 fake=0 [ 314.279285][ T6319] EXT4-fs (loop4): Remounting filesystem read-only [ 314.372339][ T68] bridge_slave_1: left allmulticast mode [ 314.379668][ T68] bridge_slave_1: left promiscuous mode [ 314.386395][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.481144][ T68] bridge_slave_0: left allmulticast mode [ 314.487112][ T68] bridge_slave_0: left promiscuous mode [ 314.495721][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.643174][ T5802] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.199209][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 315.239108][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 315.300166][ T68] bond0 (unregistering): (slave team0): Releasing backup interface [ 315.341527][ T68] bond0 (unregistering): Released all slaves [ 315.936972][ T68] hsr_slave_0: left promiscuous mode [ 315.967806][ T68] hsr_slave_1: left promiscuous mode [ 315.976399][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 315.984803][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 316.055695][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 316.063692][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 316.148183][ T6339] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 316.183215][ T6342] netlink: 4 bytes leftover after parsing attributes in process `syz.1.118'. [ 316.204225][ T68] veth1_macvtap: left promiscuous mode [ 316.210425][ T68] veth0_macvtap: left promiscuous mode [ 316.216609][ T68] veth1_vlan: left promiscuous mode [ 316.222489][ T68] veth0_vlan: left promiscuous mode [ 317.027142][ T5803] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 317.047672][ T5803] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 317.066105][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 317.097900][ T5803] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 317.234814][ T5803] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 317.247615][ T5803] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 317.264804][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 317.276333][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 317.287039][ T9] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 317.296584][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.438968][ T68] team0 (unregistering): Port device team_slave_1 removed [ 317.469697][ T68] team0 (unregistering): Port device team_slave_0 removed [ 317.507153][ T9] usb 5-1: config 0 descriptor?? [ 318.008693][ T9] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0 [ 318.016715][ T9] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0 [ 318.110301][ T9] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0D8C:0022.0001/input/input6 [ 318.262299][ T9] cm6533_jd 0003:0D8C:0022.0001: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0 [ 318.286369][ T6353] loop2: detected capacity change from 0 to 256 [ 318.297255][ T6353] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 318.309054][ T6353] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 318.440799][ T9] usb 5-1: USB disconnect, device number 2 [ 318.521343][ T6353] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 319.163944][ T6348] chnl_net:caif_netlink_parms(): no params data found [ 319.443068][ T5803] Bluetooth: hci4: command tx timeout [ 319.602693][ T6370] loop6: detected capacity change from 0 to 7 [ 319.654349][ T6370] Dev loop6: unable to read RDB block 7 [ 319.661475][ T6370] loop6: AHDI p2 [ 319.666095][ T6370] loop6: partition table partially beyond EOD, truncated [ 321.518735][ T5803] Bluetooth: hci4: command tx timeout [ 321.598929][ T6385] input: syz1 as /devices/virtual/input/input7 [ 322.216143][ T6348] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.224202][ T6348] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.234839][ T6348] bridge_slave_0: entered allmulticast mode [ 322.258398][ T6348] bridge_slave_0: entered promiscuous mode [ 322.320360][ T6348] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.328394][ T6348] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.336572][ T6348] bridge_slave_1: entered allmulticast mode [ 322.350089][ T6348] bridge_slave_1: entered promiscuous mode [ 322.722080][ T6348] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 322.807107][ T6348] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 323.194693][ T6348] team0: Port device team_slave_0 added [ 323.216935][ T6348] team0: Port device team_slave_1 added [ 323.460856][ T6348] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 323.470689][ T6348] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 323.500305][ T6348] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 323.608069][ T5803] Bluetooth: hci4: command tx timeout [ 323.675849][ T6348] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 323.681596][ T6407] netlink: 4 bytes leftover after parsing attributes in process `syz.0.142'. [ 323.683291][ T6348] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 323.718636][ T6348] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 324.326064][ T6348] hsr_slave_0: entered promiscuous mode [ 324.336566][ T6348] hsr_slave_1: entered promiscuous mode [ 324.346060][ T6348] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 324.354016][ T6348] Cannot create hsr debugfs directory [ 326.255064][ T6425] loop4: detected capacity change from 0 to 32768 [ 326.449897][ T6425] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 326.450055][ T6425] allowing incompatible features above 0.0: (unknown version) [ 326.450150][ T6425] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 326.496119][ T6425] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0 [ 326.504725][ T6425] bcachefs (loop4): initializing new filesystem [ 326.522276][ T6425] bcachefs (loop4): going read-write [ 326.533842][ T5803] Bluetooth: hci4: command tx timeout [ 326.550592][ T6426] loop2: detected capacity change from 0 to 32768 [ 326.619921][ T6425] bcachefs (loop4): marking superblocks [ 326.676663][ T6425] bcachefs (loop4): initializing freespace [ 326.705232][ T6425] bcachefs (loop4): done initializing freespace [ 326.728172][ T6425] bcachefs (loop4): reading snapshots table [ 326.734567][ T6425] bcachefs (loop4): reading snapshots done [ 326.812450][ T6426] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 326.840748][ T6425] bcachefs (loop4): done starting filesystem [ 327.285477][ T6426] XFS (loop2): Ending clean mount [ 327.310431][ T6426] XFS (loop2): Quotacheck needed: Please wait. [ 327.371068][ T6426] XFS (loop2): Quotacheck: Done. [ 327.400003][ T6348] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 327.478235][ T6348] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 327.500866][ T5802] bcachefs (loop4): shutting down [ 327.506185][ T5802] bcachefs (loop4): going read-only [ 327.512023][ T5802] bcachefs (loop4): finished waiting for writes to stop [ 327.572983][ T5802] bcachefs (loop4): flushing journal and stopping allocators, journal seq 3 [ 327.642278][ T5800] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 327.679194][ T6348] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 327.821456][ T6348] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 327.896195][ T5802] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 3 [ 327.934494][ T5802] bcachefs (loop4): clean shutdown complete, journal seq 4 [ 327.990240][ T5802] bcachefs (loop4): marking filesystem clean [ 328.270942][ T5802] bcachefs (loop4): shutdown complete [ 329.923035][ T6348] 8021q: adding VLAN 0 to HW filter on device bond0 [ 330.194576][ T6348] 8021q: adding VLAN 0 to HW filter on device team0 [ 330.335825][ T3831] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.343577][ T3831] bridge0: port 1(bridge_slave_0) entered forwarding state [ 330.361101][ T3831] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.368951][ T3831] bridge0: port 2(bridge_slave_1) entered forwarding state [ 330.724466][ T6348] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 331.328939][ T6463] sctp: [Deprecated]: syz.1.159 (pid 6463) Use of int in maxseg socket option. [ 331.328939][ T6463] Use struct sctp_assoc_value instead [ 332.327812][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 332.426304][ T6348] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 332.559938][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 332.646332][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 332.658244][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 332.671975][ T9] usb 1-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 332.681505][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.843731][ T9] usb 1-1: config 0 descriptor?? [ 332.938078][ T6348] veth0_vlan: entered promiscuous mode [ 333.036634][ T6348] veth1_vlan: entered promiscuous mode [ 333.405917][ T6348] veth0_macvtap: entered promiscuous mode [ 333.471874][ T9] hid-rmi 0003:06CB:81A7.0002: hidraw0: USB HID v0.00 Device [HID 06cb:81a7] on usb-dummy_hcd.0-1/input0 [ 333.526553][ T6348] veth1_macvtap: entered promiscuous mode [ 333.669282][ T5862] usb 1-1: USB disconnect, device number 4 [ 333.797817][ T6348] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 333.871737][ T6348] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 333.980548][ T6348] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.989955][ T6348] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.003571][ T6348] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.017580][ T6348] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.305545][ T6487] loop4: detected capacity change from 0 to 1024 [ 334.367129][ T6487] EXT4-fs: Ignoring removed nobh option [ 334.373482][ T6487] EXT4-fs: Ignoring removed bh option [ 334.545211][ T6490] af_packet: tpacket_rcv: packet too big, clamped from 20 to 4294967272. macoff=96 [ 334.600808][ T6487] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 336.030519][ T6500] loop2: detected capacity change from 0 to 32768 [ 336.115129][ T5802] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 336.210145][ T6500] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 336.226689][ T6500] (syz.2.171,6500,0):ocfs2_inode_is_valid_to_delete:886 ERROR: Skipping delete of system file 72 [ 336.314513][ T6500] ocfs2: Unmounting device (7,2) on (node local) [ 337.200564][ T6512] loop2: detected capacity change from 0 to 1024 [ 337.340360][ T6512] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 337.353387][ T6512] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 338.026936][ T5800] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.451023][ T6533] binder: 6531:6533 ioctl c0306201 200000000640 returned -22 [ 339.503284][ T6545] loop4: detected capacity change from 0 to 512 [ 339.688205][ T6545] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 339.701757][ T6545] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 339.795182][ T6541] loop2: detected capacity change from 0 to 32768 [ 339.831446][ T6541] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.182 (6541) [ 339.866718][ T6541] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 339.877765][ T6541] BTRFS info (device loop2): using sha256 (sha256-x86_64) checksum algorithm [ 339.889386][ T6541] BTRFS info (device loop2): using free-space-tree [ 340.127755][ T30] audit: type=1800 audit(1750232040.691:3): pid=6557 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.183" name="file2" dev="loop4" ino=16 res=0 errno=0 [ 340.333832][ T30] audit: type=1800 audit(1750232040.761:4): pid=6545 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.183" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 341.161234][ T5802] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.405555][ T5800] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 342.220144][ T4042] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 342.228405][ T4042] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 342.333139][ T4042] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 342.341619][ T4042] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 342.444448][ T30] audit: type=1326 audit(1750232043.021:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6582 comm="syz.0.190" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f906ff8e929 code=0x0 [ 342.702041][ T6589] netlink: 52 bytes leftover after parsing attributes in process `syz.4.191'. [ 342.711977][ T6589] netlink: 120 bytes leftover after parsing attributes in process `syz.4.191'. [ 342.723406][ T6589] netlink: 52 bytes leftover after parsing attributes in process `syz.4.191'. [ 342.897757][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 343.077925][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 343.096677][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 343.108226][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 343.118570][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 343.135006][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.210033][ T9] usb 2-1: config 0 descriptor?? [ 343.262603][ T1862] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.292711][ T9] hub 2-1:0.0: USB hub found [ 343.365813][ T6591] netlink: 28 bytes leftover after parsing attributes in process `syz.4.193'. [ 343.412725][ T1862] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.494765][ T9] hub 2-1:0.0: 1 port detected [ 343.498147][ T6591] netlink: 28 bytes leftover after parsing attributes in process `syz.4.193'. [ 343.584770][ T6593] loop2: detected capacity change from 0 to 128 [ 343.604645][ T1862] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.705277][ T6593] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 343.720782][ T1862] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.820049][ T6593] ext4 filesystem being mounted at /40/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 343.979643][ T1862] bridge_slave_1: left allmulticast mode [ 343.985620][ T1862] bridge_slave_1: left promiscuous mode [ 343.993033][ T1862] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.076612][ T1862] bridge_slave_0: left allmulticast mode [ 344.082929][ T1862] bridge_slave_0: left promiscuous mode [ 344.089827][ T1862] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.134461][ T5854] hub 2-1:0.0: activate --> -90 [ 344.951145][ T3067] usb 2-1: USB disconnect, device number 2 [ 345.000021][ T5800] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 345.035758][ T1862] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 345.066428][ T1862] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 345.086239][ T5854] usb 2-1-port1: config error [ 345.118966][ T1862] bond0 (unregistering): Released all slaves [ 345.833809][ T1862] hsr_slave_0: left promiscuous mode [ 345.848412][ T1862] hsr_slave_1: left promiscuous mode [ 345.856798][ T1862] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 345.865975][ T1862] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 345.911913][ T1862] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 345.920028][ T1862] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 345.975343][ T1862] veth1_macvtap: left promiscuous mode [ 345.981425][ T1862] veth0_macvtap: left promiscuous mode [ 345.987630][ T1862] veth1_vlan: left promiscuous mode [ 345.993242][ T1862] veth0_vlan: left promiscuous mode [ 347.454989][ T1862] team0 (unregistering): Port device team_slave_1 removed [ 347.459578][ T5803] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 347.477078][ T5803] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 347.487144][ T5803] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 347.490162][ T1862] team0 (unregistering): Port device team_slave_0 removed [ 347.518766][ T5803] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 347.541338][ T5803] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 348.841876][ T6614] loop4: detected capacity change from 0 to 32768 [ 348.851402][ T6614] btrfs: Unknown parameter 'fragment' [ 349.628790][ T5803] Bluetooth: hci0: command tx timeout [ 349.691958][ T1862] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.870721][ T5808] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 349.882053][ T5808] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 349.895685][ T5808] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 349.907555][ T1862] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.915426][ T5808] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 349.995480][ T5808] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 350.076122][ T1862] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.100639][ T6630] netlink: 12 bytes leftover after parsing attributes in process `syz.4.204'. [ 350.187627][ T1862] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.415179][ T6609] chnl_net:caif_netlink_parms(): no params data found [ 350.525232][ T3067] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 350.779660][ T3067] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 350.792057][ T3067] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 350.803694][ T3067] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 350.834949][ T1862] bridge_slave_1: left allmulticast mode [ 350.843009][ T1862] bridge_slave_1: left promiscuous mode [ 350.849899][ T1862] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.871013][ T3067] usb 2-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 350.881050][ T3067] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.889534][ T3067] usb 2-1: Product: syz [ 350.893987][ T3067] usb 2-1: Manufacturer: syz [ 350.899074][ T3067] usb 2-1: SerialNumber: syz [ 350.915883][ T1862] bridge_slave_0: left allmulticast mode [ 350.923821][ T1862] bridge_slave_0: left promiscuous mode [ 350.930720][ T1862] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.985282][ T3067] usb 2-1: config 0 descriptor?? [ 351.670065][ T1862] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 351.679594][ T5808] Bluetooth: hci0: command tx timeout [ 351.715501][ T1862] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 351.741124][ T1862] bond0 (unregistering): Released all slaves [ 352.090142][ T5808] Bluetooth: hci4: command tx timeout [ 352.595293][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 352.602480][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 353.297583][ T1862] hsr_slave_0: left promiscuous mode [ 353.449765][ T6675] netlink: 4 bytes leftover after parsing attributes in process `syz.1.208'. [ 353.478201][ T1862] hsr_slave_1: left promiscuous mode [ 353.491929][ T1862] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 353.501060][ T1862] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 353.862062][ T5808] Bluetooth: hci0: command tx timeout [ 353.874085][ T1862] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 353.884535][ T1862] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 354.228510][ T5803] Bluetooth: hci4: command tx timeout [ 354.500052][ T1862] veth1_macvtap: left promiscuous mode [ 354.506022][ T1862] veth0_macvtap: left promiscuous mode [ 354.512294][ T1862] veth1_vlan: left promiscuous mode [ 354.518055][ T1862] veth0_vlan: left promiscuous mode [ 355.986158][ T5803] Bluetooth: hci0: command tx timeout [ 356.371386][ T5803] Bluetooth: hci4: command tx timeout [ 357.197123][ T6727] netlink: 4 bytes leftover after parsing attributes in process `syz.0.210'. [ 357.717258][ T1862] team0 (unregistering): Port device team_slave_1 removed [ 357.754041][ T1862] team0 (unregistering): Port device team_slave_0 removed [ 358.398416][ T5803] Bluetooth: hci4: command tx timeout [ 358.603677][ T6727] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 358.728583][ T6727] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 358.880013][ T6609] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.889120][ T6609] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.901813][ T6609] bridge_slave_0: entered allmulticast mode [ 358.913337][ T6609] bridge_slave_0: entered promiscuous mode [ 358.990397][ T6626] chnl_net:caif_netlink_parms(): no params data found [ 359.273430][ T6609] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.281933][ T6609] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.289897][ T6609] bridge_slave_1: entered allmulticast mode [ 359.299760][ T6609] bridge_slave_1: entered promiscuous mode [ 359.858072][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 359.960040][ T6609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 360.092461][ T6609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 360.114497][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 360.191359][ T9] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 360.203231][ T9] usb 5-1: config 0 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 360.216787][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 360.223868][ T9] usb 5-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 360.239024][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.417077][ T9] usb 5-1: config 0 descriptor?? [ 360.571179][ T6609] team0: Port device team_slave_0 added [ 360.615813][ T6609] team0: Port device team_slave_1 added [ 360.687682][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 360.694524][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 360.774290][ T9] usb 5-1: USB disconnect, device number 3 [ 360.935202][ T6609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 360.944436][ T6609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 360.980468][ T6609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 361.074014][ T6609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 361.082724][ T6609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 361.110749][ T6609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 361.618135][ T6626] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.625931][ T6626] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.633974][ T6626] bridge_slave_0: entered allmulticast mode [ 361.644043][ T6626] bridge_slave_0: entered promiscuous mode [ 361.842945][ T6626] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.851038][ T6626] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.859150][ T6626] bridge_slave_1: entered allmulticast mode [ 361.876365][ T6626] bridge_slave_1: entered promiscuous mode [ 361.921109][ T6609] hsr_slave_0: entered promiscuous mode [ 361.931862][ T6609] hsr_slave_1: entered promiscuous mode [ 361.940858][ T6609] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 361.948823][ T6609] Cannot create hsr debugfs directory [ 361.991881][ T6750] input: syz1 as /devices/virtual/input/input9 [ 362.683084][ T6626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 363.049582][ T6626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 363.635265][ T6626] team0: Port device team_slave_0 added [ 363.748061][ T6626] team0: Port device team_slave_1 added [ 364.498548][ T6626] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 364.505781][ T6626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 364.538974][ T6626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 364.894596][ T6626] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 364.902035][ T6626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 364.928808][ T6626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 365.269168][ T9] usb 1-1: new low-speed USB device number 5 using dummy_hcd [ 365.545197][ T6626] hsr_slave_0: entered promiscuous mode [ 365.564000][ T6626] hsr_slave_1: entered promiscuous mode [ 365.573072][ T6626] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 365.581061][ T6626] Cannot create hsr debugfs directory [ 365.647739][ T9] usb 1-1: config index 0 descriptor too short (expected 6427, got 27) [ 365.661049][ T9] usb 1-1: config 0 has an invalid interface number: 21 but max is 0 [ 365.671050][ T9] usb 1-1: config 0 has no interface number 0 [ 365.677696][ T9] usb 1-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 365.689738][ T9] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 365.701254][ T9] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 365.711619][ T9] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 365.721136][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.840646][ T6609] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 365.980882][ T9] usb 1-1: config 0 descriptor?? [ 366.051305][ T6609] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 366.150653][ T6609] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 366.319102][ T6609] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 366.713991][ T9] usb 1-1: USB disconnect, device number 5 [ 367.215178][ T6772] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 368.039327][ T6626] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 368.221374][ T6626] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 368.396537][ T6609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 368.407785][ T6626] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 368.548899][ T6626] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 368.825986][ T6609] 8021q: adding VLAN 0 to HW filter on device team0 [ 369.010327][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.018066][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 369.256142][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.263901][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 371.251874][ T6626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 371.629975][ T6626] 8021q: adding VLAN 0 to HW filter on device team0 [ 371.744173][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.752210][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 371.793776][ T3067] iguanair 2-1:0.0: failed to get version [ 371.810098][ T3067] iguanair 2-1:0.0: probe with driver iguanair failed with error -110 [ 371.889326][ T3067] usb 2-1: USB disconnect, device number 3 [ 371.923987][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.931768][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 372.020769][ T6796] netlink: 4 bytes leftover after parsing attributes in process `syz.0.232'. [ 373.000105][ T6609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 373.529134][ T6804] loop4: detected capacity change from 0 to 32768 [ 373.538534][ T6804] XFS: attr2 mount option is deprecated. [ 373.625631][ T6804] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 373.831523][ T6609] veth0_vlan: entered promiscuous mode [ 373.915180][ T6609] veth1_vlan: entered promiscuous mode [ 374.224000][ T6609] veth0_macvtap: entered promiscuous mode [ 374.266312][ T6804] XFS (loop4): Ending clean mount [ 374.279800][ T6804] XFS (loop4): Quotacheck needed: Please wait. [ 374.291799][ T6609] veth1_macvtap: entered promiscuous mode [ 374.396381][ T6804] XFS (loop4): Quotacheck: Done. [ 374.434118][ T6626] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 374.496360][ T6609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 374.577791][ T30] audit: type=1800 audit(1750232075.131:6): pid=6822 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.237" name="dmabuf" dev="dmabuf" ino=1 res=0 errno=0 [ 374.616782][ T5802] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 374.646000][ T6609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 374.753046][ T6609] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.764132][ T6609] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.775047][ T6609] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.784705][ T6609] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.203777][ T5808] Bluetooth: hci1: command 0x0406 tx timeout [ 375.204381][ T5803] Bluetooth: hci3: command 0x0406 tx timeout [ 375.211011][ T5094] Bluetooth: hci2: command 0x0406 tx timeout [ 376.328976][ T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 376.521263][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 376.533803][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 376.544423][ T9] usb 1-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 376.553962][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.751629][ T9] usb 1-1: config 0 descriptor?? [ 376.777038][ T6626] veth0_vlan: entered promiscuous mode [ 376.903722][ T6626] veth1_vlan: entered promiscuous mode [ 377.260714][ T6626] veth0_macvtap: entered promiscuous mode [ 377.303443][ T9] sony 0003:054C:024B.0003: unexpected long global item [ 377.332031][ T6626] veth1_macvtap: entered promiscuous mode [ 377.377838][ T9] sony 0003:054C:024B.0003: parse failed [ 377.384377][ T9] sony 0003:054C:024B.0003: probe with driver sony failed with error -22 [ 377.463430][ T6853] netlink: 24 bytes leftover after parsing attributes in process `syz.4.244'. [ 377.495846][ T6626] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 377.525154][ T5862] usb 1-1: USB disconnect, device number 6 [ 377.611630][ T6626] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 377.678963][ T6626] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.688447][ T6626] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.697948][ T6626] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.707088][ T6626] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.621135][ T6910] loop4: detected capacity change from 0 to 512 [ 382.746559][ T6910] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 382.827919][ T6719] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 382.836258][ T6719] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 382.873232][ T3987] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 382.873746][ T6910] ext4 filesystem being mounted at /58/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 382.881497][ T3987] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 383.534460][ T6719] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.626194][ T5802] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.711414][ T6719] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.856909][ T6719] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.046409][ T6719] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.488324][ T6719] bridge_slave_1: left allmulticast mode [ 384.494291][ T6719] bridge_slave_1: left promiscuous mode [ 384.512271][ T6719] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.591020][ T6719] bridge_slave_0: left allmulticast mode [ 384.596980][ T6719] bridge_slave_0: left promiscuous mode [ 384.614853][ T6719] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.394926][ T6719] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 385.450635][ T6719] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 385.475995][ T6719] bond0 (unregistering): Released all slaves [ 385.653898][ T6709] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 385.662156][ T6709] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 385.760157][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 385.769631][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 386.197944][ T6719] hsr_slave_0: left promiscuous mode [ 386.242793][ T6719] hsr_slave_1: left promiscuous mode [ 386.251733][ T6719] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 386.259831][ T6719] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 386.303862][ T6719] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 386.311850][ T6719] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 386.438479][ T6719] veth1_macvtap: left promiscuous mode [ 386.450139][ T6719] veth0_macvtap: left promiscuous mode [ 386.456207][ T6719] veth1_vlan: left promiscuous mode [ 386.462194][ T6719] veth0_vlan: left promiscuous mode [ 386.965679][ T6939] loop5: detected capacity change from 0 to 2048 [ 387.186448][ T5094] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 387.199960][ T5094] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 387.226878][ T5094] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 387.232034][ T6939] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 387.243455][ T6939] UDF-fs: Scanning with blocksize 512 failed [ 387.358917][ T6939] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 387.390431][ T5094] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 387.402824][ T5094] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 387.488771][ T6719] team0 (unregistering): Port device team_slave_1 removed [ 387.581008][ T30] audit: type=1800 audit(1750232088.141:7): pid=6939 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.200" name="file2" dev="loop5" ino=839 res=0 errno=0 [ 387.626820][ T6719] team0 (unregistering): Port device team_slave_0 removed [ 387.974583][ T6938] warning: `syz.1.266' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 388.661209][ T6958] loop5: detected capacity change from 0 to 16 [ 388.725972][ T6958] erofs (device loop5): mounted with root inode @ nid 36. [ 388.819711][ T6958] erofs (device loop5): readahead error at folio 2 @ nid 89 [ 388.832465][ T6958] syz.5.270: attempt to access beyond end of device [ 388.832465][ T6958] loop5: rw=524288, sector=524296, nr_sectors = 8 limit=16 [ 388.938890][ T6958] syz.5.270: attempt to access beyond end of device [ 388.938890][ T6958] loop5: rw=0, sector=524296, nr_sectors = 8 limit=16 [ 388.952888][ T6958] erofs (device loop5): failed to decompress -5 in[4096, 0] out[4096] [ 388.961638][ T6958] erofs (device loop5): read error -5 @ 0 of nid 89 [ 388.977236][ T30] audit: type=1800 audit(1750232089.561:8): pid=6958 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.270" name="file2" dev="loop5" ino=89 res=0 errno=0 [ 389.174986][ T6944] chnl_net:caif_netlink_parms(): no params data found [ 389.329093][ T5854] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 389.542322][ T5854] usb 5-1: Using ep0 maxpacket: 16 [ 389.554988][ T5854] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 389.567496][ T5854] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 389.607876][ T5808] Bluetooth: hci0: command tx timeout [ 389.736787][ T5854] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 389.747847][ T5854] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.756157][ T5854] usb 5-1: Product: syz [ 389.760868][ T5854] usb 5-1: Manufacturer: syz [ 389.765737][ T5854] usb 5-1: SerialNumber: syz [ 389.850039][ T5854] usb 5-1: config 0 descriptor?? [ 389.870317][ T5854] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 389.880433][ T5854] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 390.471997][ T6984] loop5: detected capacity change from 0 to 2048 [ 390.515649][ T5854] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 390.518073][ T6984] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 390.559074][ T5854] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 390.579875][ T6984] syz.5.279: attempt to access beyond end of device [ 390.579875][ T6984] loop5: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 390.580307][ T6986] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 390.650479][ T6984] NILFS (loop5): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 390.662142][ T6984] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 390.706426][ T6984] Remounting filesystem read-only [ 390.713562][ T6984] NILFS (loop5): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 390.724511][ T6984] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 390.736500][ T6984] NILFS (loop5): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 390.751159][ T6984] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 390.763816][ T6984] NILFS (loop5): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 390.774599][ T6984] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 390.790747][ T5854] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 390.798323][ T5854] em28xx 5-1:0.0: No AC97 audio processor [ 390.810339][ T6984] NILFS (loop5): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 390.823654][ T6984] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 390.834249][ T5854] usb 5-1: USB disconnect, device number 4 [ 390.838509][ T6984] NILFS (loop5): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 390.843409][ T5854] em28xx 5-1:0.0: Disconnecting em28xx [ 390.855865][ T6984] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 390.864557][ T6984] NILFS (loop5): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 390.883947][ T6984] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 390.895621][ T6984] NILFS (loop5): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 390.906993][ T6984] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 390.918689][ T6984] NILFS (loop5): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 390.929410][ T6984] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 390.954220][ T6984] NILFS (loop5): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 390.967958][ T6984] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 390.980269][ T6984] NILFS (loop5): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 390.990990][ T6984] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 391.005633][ T6984] NILFS (loop5): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 391.016518][ T6984] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 391.075654][ T5854] em28xx 5-1:0.0: Freeing device [ 391.076525][ T6984] NILFS (loop5): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 391.093532][ T6984] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 391.124510][ T6984] NILFS (loop5): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 391.135616][ T6984] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 391.146543][ T6984] NILFS (loop5): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 391.161164][ T6984] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 391.177217][ T6984] NILFS (loop5): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 391.188239][ T6984] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 391.199421][ T30] audit: type=1800 audit(1750232091.791:9): pid=6984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.279" name="file2" dev="loop5" ino=16 res=0 errno=0 [ 391.210555][ T6990] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 391.222440][ T6944] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.239006][ T6944] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.246820][ T6944] bridge_slave_0: entered allmulticast mode [ 391.265497][ T6944] bridge_slave_0: entered promiscuous mode [ 391.292847][ T6944] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.300823][ T6944] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.308853][ T6944] bridge_slave_1: entered allmulticast mode [ 391.318936][ T6944] bridge_slave_1: entered promiscuous mode [ 391.507833][ T6944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 391.586363][ T6944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 391.680817][ T5808] Bluetooth: hci0: command tx timeout [ 391.865378][ T6944] team0: Port device team_slave_0 added [ 391.937101][ T6944] team0: Port device team_slave_1 added [ 392.496359][ T6944] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 392.503889][ T6944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 392.530991][ T6944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 392.769015][ T6944] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 392.776277][ T6944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 392.808147][ T6944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 393.000849][ T7007] loop5: detected capacity change from 0 to 512 [ 393.051047][ T7007] EXT4-fs: quotafile must be on filesystem root [ 394.248386][ T7009] loop4: detected capacity change from 0 to 32768 [ 394.248877][ T5808] Bluetooth: hci0: command tx timeout [ 394.287185][ T7009] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.290 (7009) [ 394.788570][ T7009] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 394.799586][ T7009] BTRFS info (device loop4): using crc32c (crc32c-x86_64) checksum algorithm [ 394.809068][ T7009] BTRFS info (device loop4): using free-space-tree [ 394.953354][ T6944] hsr_slave_0: entered promiscuous mode [ 394.964657][ T6944] hsr_slave_1: entered promiscuous mode [ 394.983582][ T6944] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 394.991627][ T6944] Cannot create hsr debugfs directory [ 395.104124][ T7009] BTRFS info (device loop4): rebuilding free space tree [ 395.329140][ T7033] [U] [ 395.332385][ T7033] [U] [ 395.335455][ T7033] [U] [ 395.419402][ T7032] [U] [ 395.622023][ T5802] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 395.958095][ T42] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 396.184467][ T42] usb 1-1: config 1 has an invalid descriptor of length 253, skipping remainder of the config [ 396.196327][ T42] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 396.206668][ T42] usb 1-1: config 1 has no interface number 0 [ 396.214045][ T42] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 396.226401][ T42] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 396.236750][ T42] usb 1-1: too many endpoints for config 1 interface 1 altsetting 1: 75, using maximum allowed: 30 [ 396.249693][ T42] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 75 [ 396.319394][ T5808] Bluetooth: hci0: command tx timeout [ 396.396453][ T7042] loop5: detected capacity change from 0 to 128 [ 396.513250][ T6944] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 396.522481][ T42] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 396.532238][ T42] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.540673][ T42] usb 1-1: Product: syz [ 396.545117][ T42] usb 1-1: Manufacturer: syz [ 396.550157][ T42] usb 1-1: SerialNumber: syz [ 396.567122][ T7042] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 396.650454][ T6944] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 396.670048][ T7042] ext4 filesystem being mounted at /8/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 396.726491][ T6944] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 396.809518][ T6944] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 397.236079][ T42] cdc_ncm 1-1:1.1: bind() failure [ 397.261009][ T42] usb 1-1: USB disconnect, device number 7 [ 397.334714][ T6626] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 397.776417][ T6944] 8021q: adding VLAN 0 to HW filter on device bond0 [ 397.879258][ T6944] 8021q: adding VLAN 0 to HW filter on device team0 [ 397.930634][ T6709] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.938350][ T6709] bridge0: port 1(bridge_slave_0) entered forwarding state [ 397.977638][ T3067] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 397.986090][ T42] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 398.085662][ T6709] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.093416][ T6709] bridge0: port 2(bridge_slave_1) entered forwarding state [ 398.198916][ T42] usb 2-1: Using ep0 maxpacket: 8 [ 398.206281][ T3067] usb 5-1: Using ep0 maxpacket: 32 [ 398.257632][ T42] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 398.276859][ T3067] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 398.285620][ T3067] usb 5-1: config 0 has no interface number 0 [ 398.293350][ T3067] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 398.352387][ T42] usb 2-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 398.361994][ T42] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.370855][ T42] usb 2-1: Product: syz [ 398.375284][ T42] usb 2-1: Manufacturer: syz [ 398.380411][ T42] usb 2-1: SerialNumber: syz [ 398.418875][ T42] usb 2-1: config 0 descriptor?? [ 398.436268][ T3067] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 398.446343][ T3067] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.455007][ T3067] usb 5-1: Product: syz [ 398.459859][ T3067] usb 5-1: Manufacturer: syz [ 398.464970][ T3067] usb 5-1: SerialNumber: syz [ 398.501814][ T42] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 398.601191][ T3067] usb 5-1: config 0 descriptor?? [ 398.655575][ T3067] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 398.669974][ T3067] em28xx 5-1:0.132: Video interface 132 found: [ 398.717021][ T42] gspca_zc3xx: reg_w_i err -71 [ 399.057813][ T3067] em28xx 5-1:0.132: unknown em28xx chip ID (0) [ 399.307864][ T42] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 399.315024][ T42] gspca_zc3xx 2-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 399.383077][ T42] usb 2-1: USB disconnect, device number 4 [ 400.011268][ T6944] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 400.118397][ T7070] input: syz0 as /devices/virtual/input/input11 [ 400.138846][ T7072] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 400.241310][ T3067] em28xx 5-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 400.250722][ T3067] em28xx 5-1:0.132: board has no eeprom [ 400.286940][ T7053] em28xx 5-1:0.132: failed to trigger read from i2c address 0xfe (error=-5) [ 400.351178][ T3067] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 400.359722][ T3067] em28xx 5-1:0.132: analog set to bulk mode. [ 400.367849][ T42] em28xx 5-1:0.132: Registering V4L2 extension [ 400.488496][ T3067] usb 5-1: USB disconnect, device number 5 [ 400.496440][ T3067] em28xx 5-1:0.132: Disconnecting em28xx [ 400.667517][ T6944] veth0_vlan: entered promiscuous mode [ 400.804953][ T6944] veth1_vlan: entered promiscuous mode [ 401.118484][ T6944] veth0_macvtap: entered promiscuous mode [ 401.216459][ T6944] veth1_macvtap: entered promiscuous mode [ 401.445580][ T6944] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 401.573073][ T6944] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 401.685453][ T6944] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.694842][ T6944] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.709732][ T6944] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.720561][ T6944] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.757989][ T42] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 401.765602][ T42] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 401.773477][ T42] em28xx 5-1:0.132: No AC97 audio processor [ 401.853275][ T7084] mmap: syz.1.311 (7084) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 401.888475][ T42] usb 5-1: Decoder not found [ 401.893507][ T42] em28xx 5-1:0.132: failed to create media graph [ 401.900886][ T42] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 401.959639][ T42] em28xx 5-1:0.132: Remote control support is not available for this card. [ 401.970082][ T7091] pim6reg1: entered promiscuous mode [ 401.975686][ T7091] pim6reg1: entered allmulticast mode [ 402.044101][ T3067] em28xx 5-1:0.132: Closing input extension [ 402.101411][ T3067] em28xx 5-1:0.132: Freeing device [ 403.178941][ T7105] loop4: detected capacity change from 0 to 512 [ 404.216832][ T7115] loop5: detected capacity change from 0 to 512 [ 404.285927][ T7105] EXT4-fs (loop4): Test dummy encryption mode enabled [ 404.293300][ T7105] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 404.306872][ T7105] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 404.331058][ T7115] ext4: Unknown parameter 'noacl' [ 404.553794][ T7105] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz.4.318: bad orphan inode 131083 [ 404.640099][ T7105] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 404.970452][ T5802] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.178885][ T3620] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.428607][ T3620] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.499038][ T3067] IPVS: starting estimator thread 0... [ 406.596670][ T3620] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.621608][ T7146] IPVS: using max 192 ests per chain, 9600 per kthread [ 406.804916][ T3620] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.149615][ T3620] bridge_slave_1: left allmulticast mode [ 407.155620][ T3620] bridge_slave_1: left promiscuous mode [ 407.162648][ T3620] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.177982][ T3620] bridge_slave_0: left allmulticast mode [ 407.183933][ T3620] bridge_slave_0: left promiscuous mode [ 407.190851][ T3620] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.739390][ T3620] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 407.819607][ T3620] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 407.859997][ T3620] bond0 (unregistering): Released all slaves [ 408.485628][ T3620] hsr_slave_0: left promiscuous mode [ 408.504221][ T3620] hsr_slave_1: left promiscuous mode [ 408.514387][ T3620] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 408.522602][ T3620] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 408.542830][ T3620] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 408.551393][ T3620] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 408.585484][ T3620] veth1_macvtap: left promiscuous mode [ 408.591873][ T3620] veth0_macvtap: left promiscuous mode [ 408.598052][ T3620] veth1_vlan: left promiscuous mode [ 408.603676][ T3620] veth0_vlan: left promiscuous mode [ 409.509798][ T3620] team0 (unregistering): Port device team_slave_1 removed [ 409.639756][ T3620] team0 (unregistering): Port device team_slave_0 removed [ 410.566276][ T5094] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 410.597847][ T5094] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 410.611027][ T5094] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 410.629332][ T5094] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 410.645539][ T5094] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 411.596778][ T7183] netlink: 76 bytes leftover after parsing attributes in process `syz.0.342'. [ 411.920165][ T6719] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 411.924286][ T7167] chnl_net:caif_netlink_parms(): no params data found [ 411.928446][ T6719] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 412.143385][ T4138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 412.153305][ T4138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 412.421566][ T5808] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 412.431929][ T5808] CPU: 0 UID: 0 PID: 5808 Comm: kworker/u9:4 Not tainted 6.16.0-rc2-syzkaller-00047-g52da431bf03b #0 PREEMPT(undef) [ 412.432085][ T5808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 412.432197][ T5808] Workqueue: hci2 hci_rx_work [ 412.432362][ T5808] Call Trace: [ 412.432418][ T5808] [ 412.432477][ T5808] __dump_stack+0x26/0x30 [ 412.432654][ T5808] dump_stack_lvl+0x1df/0x270 [ 412.432842][ T5808] dump_stack+0x1e/0x25 [ 412.433007][ T5808] sysfs_create_dir_ns+0x46c/0x540 [ 412.433186][ T5808] kobject_add_internal+0xeed/0x1840 [ 412.433407][ T5808] kobject_add+0x2c1/0x410 [ 412.433619][ T5808] ? kmsan_get_metadata+0xfb/0x160 [ 412.433824][ T5808] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 412.434039][ T5808] device_add+0xa70/0x1c10 [ 412.434256][ T5808] hci_conn_add_sysfs+0x15f/0x2f0 [ 412.434473][ T5808] le_conn_complete_evt+0x1b32/0x21b0 [ 412.434679][ T5808] hci_le_enh_conn_complete_evt+0x158/0x260 [ 412.434876][ T5808] hci_le_meta_evt+0x6e8/0x960 [ 412.435028][ T5808] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 412.435232][ T5808] hci_event_packet+0xcdf/0x1e40 [ 412.435427][ T5808] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 412.435642][ T5808] hci_rx_work+0x9a8/0x12b0 [ 412.435817][ T5808] ? __pfx_hci_rx_work+0x10/0x10 [ 412.435972][ T5808] process_scheduled_works+0xb91/0x1d80 [ 412.436247][ T5808] worker_thread+0xedf/0x1590 [ 412.436500][ T5808] kthread+0xd5c/0xf00 [ 412.436640][ T5808] ? __pfx_worker_thread+0x10/0x10 [ 412.436865][ T5808] ? __pfx_kthread+0x10/0x10 [ 412.437016][ T5808] ret_from_fork+0x1e3/0x310 [ 412.437166][ T5808] ? __pfx_kthread+0x10/0x10 [ 412.437318][ T5808] ret_from_fork_asm+0x1a/0x30 [ 412.437538][ T5808] [ 412.607563][ T7195] Invalid ELF header len 8 [ 412.613481][ T5808] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 412.631156][ T5808] Bluetooth: hci2: failed to register connection device [ 412.724585][ T5094] Bluetooth: hci4: command tx timeout [ 414.033784][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 414.040805][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 414.351977][ T7206] loop4: detected capacity change from 0 to 128 [ 414.474858][ T7167] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.482973][ T7167] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.491036][ T7167] bridge_slave_0: entered allmulticast mode [ 414.506222][ T7167] bridge_slave_0: entered promiscuous mode [ 414.540798][ T7167] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.549138][ T7167] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.556977][ T7167] bridge_slave_1: entered allmulticast mode [ 414.567108][ T7167] bridge_slave_1: entered promiscuous mode [ 414.654841][ T3506] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.825406][ T5094] Bluetooth: hci4: command tx timeout [ 414.973410][ T3506] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.205473][ T3506] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.289789][ T7167] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 415.393827][ T3506] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.473657][ T7167] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 415.723554][ T7167] team0: Port device team_slave_0 added [ 415.783118][ T7167] team0: Port device team_slave_1 added [ 415.952669][ T3506] bridge_slave_1: left allmulticast mode [ 415.959181][ T3506] bridge_slave_1: left promiscuous mode [ 415.965834][ T3506] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.981328][ T3506] bridge_slave_0: left allmulticast mode [ 415.987261][ T3506] bridge_slave_0: left promiscuous mode [ 415.994226][ T3506] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.469178][ T3506] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 416.494939][ T3506] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 416.518766][ T3506] bond0 (unregistering): Released all slaves [ 416.672017][ T7167] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 416.679370][ T7167] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 416.706061][ T7167] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 416.725905][ T7167] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 416.734871][ T7167] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 416.764581][ T7167] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 416.880202][ T5094] Bluetooth: hci4: command tx timeout [ 417.241898][ T7167] hsr_slave_0: entered promiscuous mode [ 417.260351][ T7167] hsr_slave_1: entered promiscuous mode [ 417.281677][ T7167] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 417.289773][ T7167] Cannot create hsr debugfs directory [ 417.421575][ T3506] hsr_slave_0: left promiscuous mode [ 417.435258][ T3506] hsr_slave_1: left promiscuous mode [ 417.443885][ T3506] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 417.451902][ T3506] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 417.489877][ T3506] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 417.497905][ T3506] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 417.540898][ T3506] veth1_macvtap: left promiscuous mode [ 417.546741][ T3506] veth0_macvtap: left promiscuous mode [ 417.553044][ T3506] veth1_vlan: left promiscuous mode [ 417.558783][ T3506] veth0_vlan: left promiscuous mode [ 418.454732][ T3506] team0 (unregistering): Port device team_slave_1 removed [ 418.508849][ T3506] team0 (unregistering): Port device team_slave_0 removed [ 418.967517][ T5094] Bluetooth: hci4: command tx timeout [ 419.258425][ T5808] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 419.308872][ T5808] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 419.339336][ T5808] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 419.385092][ T5808] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 419.410098][ T5808] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 419.877861][ T7167] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 419.920657][ T7167] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 420.009979][ T7167] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 420.076937][ T7167] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 421.077990][ T5808] Bluetooth: hci3: unexpected event for opcode 0x0411 [ 421.085340][ T9] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 421.166380][ T7167] 8021q: adding VLAN 0 to HW filter on device bond0 [ 421.251844][ T7224] chnl_net:caif_netlink_parms(): no params data found [ 421.305624][ T9] usb 5-1: config 150 has an invalid interface number: 204 but max is 1 [ 421.314891][ T9] usb 5-1: config 150 has no interface number 0 [ 421.321859][ T9] usb 5-1: config 150 interface 204 has no altsetting 0 [ 421.329321][ T9] usb 5-1: config 150 interface 1 has no altsetting 0 [ 421.391161][ T7167] 8021q: adding VLAN 0 to HW filter on device team0 [ 421.471122][ T9] usb 5-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 421.481314][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.489918][ T9] usb 5-1: Product: syz [ 421.494343][ T9] usb 5-1: Manufacturer: syz [ 421.499580][ T9] usb 5-1: SerialNumber: syz [ 421.530466][ T5808] Bluetooth: hci0: command tx timeout [ 421.694937][ T3506] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.702663][ T3506] bridge0: port 1(bridge_slave_0) entered forwarding state [ 421.722607][ T3506] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.730379][ T3506] bridge0: port 2(bridge_slave_1) entered forwarding state [ 421.944451][ T9] xr_serial 5-1:150.204: xr_serial converter detected [ 422.902820][ T9] xr_serial ttyUSB0: Failed to set reg 0x0e: -71 [ 422.911994][ T9] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 422.970445][ T9] usb 5-1: USB disconnect, device number 6 [ 422.979668][ T9] xr_serial 5-1:150.204: device disconnected [ 423.460743][ T7224] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.472257][ T7224] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.480433][ T7224] bridge_slave_0: entered allmulticast mode [ 423.490167][ T7224] bridge_slave_0: entered promiscuous mode [ 423.631003][ T5808] Bluetooth: hci0: command tx timeout [ 423.661344][ T7224] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.669503][ T7224] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.678767][ T7224] bridge_slave_1: entered allmulticast mode [ 423.689239][ T7224] bridge_slave_1: entered promiscuous mode [ 423.829475][ T7224] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 423.861551][ T7224] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 424.072189][ T7224] team0: Port device team_slave_0 added [ 424.151414][ T7224] team0: Port device team_slave_1 added [ 424.519532][ T7224] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 424.528052][ T7224] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 424.560398][ T7224] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 424.699576][ T7224] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 424.706902][ T7224] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 424.734225][ T7224] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 424.923526][ T7267] sctp: failed to load transform for md5: -2 [ 424.961326][ T7167] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 425.128010][ T5808] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 425.136686][ T5808] Bluetooth: hci3: Injecting HCI hardware error event [ 425.144561][ T5808] Bluetooth: hci3: hardware error 0x00 [ 425.205883][ T7224] hsr_slave_0: entered promiscuous mode [ 425.216562][ T7224] hsr_slave_1: entered promiscuous mode [ 425.225846][ T7224] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 425.233845][ T7224] Cannot create hsr debugfs directory [ 425.698596][ T5094] Bluetooth: hci0: command tx timeout [ 426.288878][ T7283] netlink: 8 bytes leftover after parsing attributes in process `syz.1.374'. [ 426.465037][ T1862] bond0: (slave bond_slave_0): interface is now down [ 426.472266][ T1862] bond0: (slave bond_slave_1): interface is now down [ 426.483539][ T1862] bond0: now running without any active interface! [ 426.568569][ T7287] netlink: 'syz.0.375': attribute type 10 has an invalid length. [ 426.641125][ T7287] 8021q: adding VLAN 0 to HW filter on device bond0 [ 426.654232][ T7287] team0: Port device bond0 added [ 427.141744][ T7167] veth0_vlan: entered promiscuous mode [ 427.197681][ T7167] veth1_vlan: entered promiscuous mode [ 427.204173][ T5808] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 427.255663][ T7224] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 427.293463][ T7224] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 427.333832][ T7224] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 427.499287][ T7224] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 427.772923][ T5808] Bluetooth: hci0: command tx timeout [ 427.951190][ T7167] veth0_macvtap: entered promiscuous mode [ 427.999020][ T7167] veth1_macvtap: entered promiscuous mode [ 428.375134][ T7167] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 428.460295][ T7167] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 428.653049][ T7167] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.662849][ T7167] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.672092][ T7167] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.681327][ T7167] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.954873][ T7224] 8021q: adding VLAN 0 to HW filter on device bond0 [ 429.147532][ T7224] 8021q: adding VLAN 0 to HW filter on device team0 [ 429.220905][ T6719] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.228768][ T6719] bridge0: port 1(bridge_slave_0) entered forwarding state [ 429.347916][ T6719] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.355558][ T6719] bridge0: port 2(bridge_slave_1) entered forwarding state [ 432.822167][ T7224] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 432.980326][ T6709] Bluetooth: hci5: Frame reassembly failed (-84) [ 433.707163][ T7224] veth0_vlan: entered promiscuous mode [ 433.832792][ T7224] veth1_vlan: entered promiscuous mode [ 434.052844][ T7334] fuse: Bad value for 'fd' [ 434.121165][ T7224] veth0_macvtap: entered promiscuous mode [ 434.176241][ T7224] veth1_macvtap: entered promiscuous mode [ 434.361342][ T7224] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 434.484450][ T7224] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 434.586514][ T7224] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.595890][ T7224] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.605740][ T7224] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.615012][ T7224] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.959529][ T5094] Bluetooth: hci5: command 0xfc11 tx timeout [ 434.965961][ T5808] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 436.792626][ T7360] loop4: detected capacity change from 0 to 4096 [ 436.886096][ T7360] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 437.272440][ T7360] EXT4-fs (loop4): shut down requested (2) [ 437.682823][ T5802] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 437.855499][ T5854] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 437.883349][ T3506] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 437.892714][ T3506] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 438.037815][ T5854] usb 2-1: Using ep0 maxpacket: 8 [ 438.087933][ T5854] usb 2-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 438.097597][ T5854] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.162658][ T5854] usb 2-1: config 0 descriptor?? [ 438.181551][ T3620] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 438.189959][ T3620] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 438.628507][ T5854] acrux 0003:1A34:0802.0004: item fetching failed at offset 0/3 [ 438.675621][ T5854] acrux 0003:1A34:0802.0004: parse failed [ 438.685023][ T5854] acrux 0003:1A34:0802.0004: probe with driver acrux failed with error -22 [ 438.840039][ T3067] usb 2-1: USB disconnect, device number 5 [ 440.330043][ T7403] loop6: detected capacity change from 0 to 32768 [ 440.341775][ T7403] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.406 (7403) [ 440.373851][ T7403] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 440.384679][ T7403] BTRFS info (device loop6): using crc32c (crc32c-x86_64) checksum algorithm [ 440.394103][ T7403] BTRFS info (device loop6): using free-space-tree [ 440.893534][ T5854] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 440.937803][ T7167] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 441.067855][ T5854] usb 5-1: Using ep0 maxpacket: 8 [ 441.153101][ T5854] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 441.162833][ T5854] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.171403][ T5854] usb 5-1: Product: syz [ 441.175849][ T5854] usb 5-1: Manufacturer: syz [ 441.180999][ T5854] usb 5-1: SerialNumber: syz [ 441.290435][ T5854] usb 5-1: config 0 descriptor?? [ 441.588053][ T6713] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 441.596287][ T6713] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 441.630448][ T5854] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 441.871865][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 441.880114][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 442.290406][ T5854] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 442.338217][ T5854] usb 5-1: USB disconnect, device number 7 [ 442.497929][ T9] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 442.679974][ T3620] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.723466][ T9] usb 2-1: config 0 has an invalid interface number: 128 but max is 0 [ 442.732242][ T9] usb 2-1: config 0 has no interface number 0 [ 442.773179][ T9] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 442.782784][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.791311][ T9] usb 2-1: Product: syz [ 442.795740][ T9] usb 2-1: Manufacturer: syz [ 442.809109][ T9] usb 2-1: SerialNumber: syz [ 442.829050][ T9] usb 2-1: config 0 descriptor?? [ 442.853872][ T3620] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.049847][ T3620] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.264918][ T3620] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.343599][ T9] usb 2-1: Firmware: major: 22, minor: 220, hardware type: UNKNOWN (68) [ 443.530279][ T3620] bridge_slave_1: left allmulticast mode [ 443.536252][ T3620] bridge_slave_1: left promiscuous mode [ 443.543419][ T3620] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.559391][ T9] usb 2-1: no permanent extended address found, random address set [ 443.560512][ T3620] bridge_slave_0: left allmulticast mode [ 443.567690][ T9] usb 2-1: atusb_probe: initialization failed, error = -524 [ 443.568744][ T9] atusb 2-1:0.128: probe with driver atusb failed with error -524 [ 443.573597][ T3620] bridge_slave_0: left promiscuous mode [ 443.598877][ T3620] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.766387][ T9] usb 2-1: USB disconnect, device number 6 [ 444.117041][ T3620] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 444.155295][ T3620] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 444.171699][ T3620] bond0 (unregistering): Released all slaves [ 444.634606][ T3620] hsr_slave_0: left promiscuous mode [ 444.643374][ T3620] hsr_slave_1: left promiscuous mode [ 444.655460][ T3620] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 444.664728][ T3620] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 444.685169][ T3620] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 444.693165][ T3620] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 444.727227][ T3620] veth1_macvtap: left promiscuous mode [ 444.733322][ T3620] veth0_macvtap: left promiscuous mode [ 444.740786][ T3620] veth1_vlan: left promiscuous mode [ 444.746411][ T3620] veth0_vlan: left promiscuous mode [ 445.615378][ T1862] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x6 [ 445.854850][ T3620] team0 (unregistering): Port device team_slave_1 removed [ 446.040829][ T3620] team0 (unregistering): Port device team_slave_0 removed [ 446.398646][ T5094] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 446.484272][ T5094] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 446.494963][ T5094] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 446.532212][ T5094] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 446.546503][ T5094] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 447.122496][ T7465] loop4: detected capacity change from 0 to 32768 [ 447.279429][ T7465] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nocow [ 447.279557][ T7465] allowing incompatible features above 0.0: (unknown version) [ 447.279655][ T7465] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 447.317479][ T7465] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0 [ 447.325973][ T7465] bcachefs (loop4): initializing new filesystem [ 447.343813][ T7465] bcachefs (loop4): going read-write [ 447.550801][ T7465] bcachefs (loop4): marking superblocks [ 447.614694][ T7465] bcachefs (loop4): initializing freespace [ 447.649120][ T7465] bcachefs (loop4): done initializing freespace [ 447.670154][ T7465] bcachefs (loop4): reading snapshots table [ 447.676560][ T7465] bcachefs (loop4): reading snapshots done [ 447.859717][ T7465] bcachefs (loop4): loop4: Superblock write was silently dropped! (seq 0 expected 42) [ 447.872642][ T7465] bcachefs (loop4): done starting filesystem [ 448.183376][ T5802] bcachefs (loop4): shutting down [ 448.189299][ T5802] bcachefs (loop4): going read-only [ 448.204547][ T5802] bcachefs (loop4): finished waiting for writes to stop [ 448.421096][ T5802] bcachefs (loop4): flushing journal and stopping allocators, journal seq 3 [ 448.518466][ T7461] chnl_net:caif_netlink_parms(): no params data found [ 448.642219][ T5802] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 3 [ 448.726179][ T5802] bcachefs (loop4): clean shutdown complete, journal seq 4 [ 448.759364][ T5802] bcachefs (loop4): marking filesystem clean [ 448.877670][ T5808] Bluetooth: hci0: command tx timeout [ 449.004757][ T5802] bcachefs (loop4): shutdown complete [ 449.494393][ T7502] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 449.501360][ T7502] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 449.509769][ T7502] vhci_hcd vhci_hcd.0: Device attached [ 449.534218][ T7461] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.542348][ T7461] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.551008][ T7461] bridge_slave_0: entered allmulticast mode [ 449.560884][ T7461] bridge_slave_0: entered promiscuous mode [ 449.616726][ T7506] vhci_hcd vhci_hcd.0: pdev(6) rhport(1) sockfd(6) [ 449.618158][ T7461] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.623494][ T7506] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 449.630410][ T7506] vhci_hcd vhci_hcd.0: Device attached [ 449.632919][ T7461] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.653240][ T7461] bridge_slave_1: entered allmulticast mode [ 449.663240][ T7461] bridge_slave_1: entered promiscuous mode [ 449.719296][ T7502] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 449.746029][ T9] vhci_hcd: vhci_device speed not set [ 449.848793][ T9] usb 45-1: new full-speed USB device number 2 using vhci_hcd [ 449.866411][ T7461] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 449.916126][ T7502] vhci_hcd vhci_hcd.0: pdev(6) rhport(3) sockfd(8) [ 449.923086][ T7502] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 449.932554][ T7502] vhci_hcd vhci_hcd.0: Device attached [ 449.941494][ T7461] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 449.978507][ T7506] vhci_hcd vhci_hcd.0: pdev(6) rhport(4) sockfd(12) [ 449.985545][ T7506] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 449.994554][ T7506] vhci_hcd vhci_hcd.0: Device attached [ 450.072030][ T7513] vhci_hcd vhci_hcd.0: pdev(6) rhport(5) sockfd(15) [ 450.079070][ T7513] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 450.087926][ T7513] vhci_hcd vhci_hcd.0: Device attached [ 450.179729][ T7508] vhci_hcd: connection closed [ 450.180403][ T7503] vhci_hcd: connection reset by peer [ 450.182807][ T7514] vhci_hcd: connection closed [ 450.188413][ T7510] vhci_hcd: connection closed [ 450.192880][ T7511] vhci_hcd: connection closed [ 450.211843][ T1862] vhci_hcd: stop threads [ 450.221647][ T1862] vhci_hcd: release socket [ 450.226371][ T1862] vhci_hcd: disconnect device [ 450.226472][ T7461] team0: Port device team_slave_0 added [ 450.271504][ T1862] vhci_hcd: stop threads [ 450.276260][ T1862] vhci_hcd: release socket [ 450.281359][ T1862] vhci_hcd: disconnect device [ 450.294225][ T1862] vhci_hcd: stop threads [ 450.299175][ T1862] vhci_hcd: release socket [ 450.304111][ T1862] vhci_hcd: disconnect device [ 450.324923][ T7461] team0: Port device team_slave_1 added [ 450.334390][ T1862] vhci_hcd: stop threads [ 450.339288][ T1862] vhci_hcd: release socket [ 450.344876][ T1862] vhci_hcd: disconnect device [ 450.396089][ T1862] vhci_hcd: stop threads [ 450.401077][ T1862] vhci_hcd: release socket [ 450.405803][ T1862] vhci_hcd: disconnect device [ 450.484519][ T7461] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 450.492052][ T7461] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 450.518408][ C1] vkms_vblank_simulate: vblank timer overrun [ 450.524974][ T7461] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 450.605650][ T7461] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 450.613126][ T7461] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 450.639251][ C1] vkms_vblank_simulate: vblank timer overrun [ 450.646334][ T7461] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 450.957714][ T5808] Bluetooth: hci0: command tx timeout [ 451.130737][ T7461] hsr_slave_0: entered promiscuous mode [ 451.141832][ T7461] hsr_slave_1: entered promiscuous mode [ 451.150816][ T7461] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 451.158862][ T7461] Cannot create hsr debugfs directory [ 452.914726][ T7461] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 452.939065][ T7461] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 452.963401][ T7461] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 453.041945][ T5808] Bluetooth: hci0: command tx timeout [ 453.099775][ T7461] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 454.021567][ T7461] 8021q: adding VLAN 0 to HW filter on device bond0 [ 454.170340][ T7461] 8021q: adding VLAN 0 to HW filter on device team0 [ 455.179260][ T5808] Bluetooth: hci0: command tx timeout [ 455.519728][ T9] vhci_hcd: vhci_device speed not set [ 455.684028][ T6706] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.691983][ T6706] bridge0: port 1(bridge_slave_0) entered forwarding state [ 455.708862][ T6706] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.716506][ T6706] bridge0: port 2(bridge_slave_1) entered forwarding state [ 457.040448][ T7568] netlink: 'syz.6.454': attribute type 1 has an invalid length. [ 457.909959][ T7461] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 458.364116][ T7461] veth0_vlan: entered promiscuous mode [ 458.424764][ T7461] veth1_vlan: entered promiscuous mode [ 458.665962][ T7461] veth0_macvtap: entered promiscuous mode [ 458.695031][ T7461] veth1_macvtap: entered promiscuous mode [ 458.901655][ T7461] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 458.995907][ T7461] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 459.097079][ T7461] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.107082][ T7461] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.116463][ T7461] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.126882][ T7461] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.780598][ T7604] vivid-003: disconnect [ 459.790126][ T7603] vivid-003: reconnect [ 460.966311][ T7607] loop4: detected capacity change from 0 to 40427 [ 461.319395][ T7611] loop6: detected capacity change from 0 to 32768 [ 461.351449][ T7607] F2FS-fs (loop4): invalid crc value [ 461.610429][ T7611] bcachefs (loop6): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,recovery_pass_last=set_may_go_rw,reconstruct_alloc,no_data_io [ 461.610583][ T7611] allowing incompatible features above 0.0: (unknown version) [ 461.610678][ T7611] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 461.656276][ T7611] bcachefs (loop6): Using encoding defined by superblock: utf8-12.1.0 [ 461.658451][ T7607] F2FS-fs (loop4): Start checkpoint disabled! [ 461.666030][ T7611] bcachefs (loop6): recovering from clean shutdown, journal seq 10 [ 461.682955][ T7611] bcachefs (loop6): Version upgrade required: [ 461.682955][ T7611] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 461.682955][ T7611] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 461.682955][ T7611] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 461.786926][ T7611] bcachefs (loop6): dropping and reconstructing all alloc info [ 461.835792][ T7607] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 461.969394][ T7611] bcachefs (loop6): accounting_read... done [ 461.986224][ T7611] bcachefs (loop6): alloc_read... done [ 462.005313][ T7611] bcachefs (loop6): snapshots_read... [ 462.026282][ T6706] kworker/u8:33: attempt to access beyond end of device [ 462.026282][ T6706] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 462.041132][ T7611] done [ 462.046904][ T6706] CPU: 1 UID: 0 PID: 6706 Comm: kworker/u8:33 Not tainted 6.16.0-rc2-syzkaller-00047-g52da431bf03b #0 PREEMPT(undef) [ 462.047109][ T6706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 462.047241][ T6706] Workqueue: writeback wb_workfn (flush-7:4) [ 462.047474][ T6706] Call Trace: [ 462.047537][ T6706] [ 462.047597][ T6706] __dump_stack+0x26/0x30 [ 462.047806][ T6706] dump_stack_lvl+0x1df/0x270 [ 462.048026][ T6706] dump_stack+0x1e/0x25 [ 462.048212][ T6706] f2fs_handle_critical_error+0xa6f/0xc20 [ 462.048495][ T6706] f2fs_stop_checkpoint+0x65/0x80 [ 462.048732][ T6706] f2fs_write_end_io+0xb4b/0x1920 [ 462.048916][ T6706] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 462.049181][ T6706] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 462.049332][ T6706] bio_endio+0xe24/0xf80 [ 462.049520][ T6706] submit_bio_noacct+0x214/0x2710 [ 462.049807][ T6706] submit_bio+0x5a9/0x5d0 [ 462.050039][ T6706] f2fs_submit_write_bio+0x92/0x250 [ 462.050263][ T6706] __submit_merged_bio+0x16f/0x6a0 [ 462.050482][ T6706] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 462.050724][ T6706] __submit_merged_write_cond+0x458/0x9a0 [ 462.050983][ T6706] f2fs_write_data_pages+0x4bb2/0x5480 [ 462.051378][ T6706] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 462.051617][ T6706] ? filemap_get_entry+0x21/0x910 [ 462.051780][ T6706] ? filter_irq_stacks+0x49/0x190 [ 462.051957][ T6706] ? kmsan_get_metadata+0xfb/0x160 [ 462.052178][ T6706] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 462.052423][ T6706] ? kmsan_get_metadata+0xfb/0x160 [ 462.052648][ T6706] ? kmsan_get_metadata+0xfb/0x160 [ 462.052871][ T6706] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 462.053110][ T6706] ? kmsan_get_metadata+0xfb/0x160 [ 462.053335][ T6706] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 462.053569][ T6706] ? kmsan_get_metadata+0xfb/0x160 [ 462.053790][ T6706] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 462.054034][ T6706] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 462.054267][ T6706] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 462.054505][ T6706] do_writepages+0x3f2/0x860 [ 462.054701][ T6706] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 462.054949][ T6706] ? queue_io+0x741/0x790 [ 462.055138][ T6706] ? kmsan_get_metadata+0xfb/0x160 [ 462.055405][ T6706] __writeback_single_inode+0x101/0x1190 [ 462.055635][ T6706] ? kmsan_get_metadata+0xfb/0x160 [ 462.055880][ T6706] writeback_sb_inodes+0xaa9/0x1c90 [ 462.056197][ T6706] ? kmsan_get_metadata+0xfb/0x160 [ 462.056476][ T6706] wb_writeback+0x4ce/0xc00 [ 462.056696][ T6706] ? queue_io+0x441/0x790 [ 462.056895][ T6706] wb_workfn+0x397/0x1910 [ 462.057082][ T6706] ? kmsan_get_metadata+0xfb/0x160 [ 462.057335][ T6706] ? __pfx_wb_workfn+0x10/0x10 [ 462.057502][ T6706] process_scheduled_works+0xb91/0x1d80 [ 462.057812][ T6706] worker_thread+0xedf/0x1590 [ 462.058095][ T6706] kthread+0xd5c/0xf00 [ 462.058252][ T6706] ? __pfx_worker_thread+0x10/0x10 [ 462.058503][ T6706] ? __pfx_kthread+0x10/0x10 [ 462.058671][ T6706] ret_from_fork+0x1e3/0x310 [ 462.058836][ T6706] ? __pfx_kthread+0x10/0x10 [ 462.059010][ T6706] ret_from_fork_asm+0x1a/0x30 [ 462.059259][ T6706] [ 462.059584][ T6706] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 462.062199][ T7611] bcachefs (loop6): check_allocations... done [ 462.576509][ T7611] bcachefs (loop6): going read-write [ 462.979330][ T7611] bcachefs (loop6): done starting filesystem [ 463.117196][ T7167] bcachefs (loop6): shutting down [ 463.122937][ T7167] bcachefs (loop6): going read-only [ 463.128763][ T7167] bcachefs (loop6): finished waiting for writes to stop [ 463.198531][ T7167] bcachefs (loop6): flushing journal and stopping allocators, journal seq 10 [ 463.228304][ T7167] bcachefs (loop6): flushing journal and stopping allocators complete, journal seq 10 [ 463.283181][ T7167] bcachefs (loop6): unclean shutdown complete, journal seq 11 [ 463.377526][ T7167] bcachefs (loop6): done going read-only, filesystem not clean [ 463.479786][ T7167] bcachefs (loop6): shutdown complete [ 463.583183][ T7639] fuse: Bad value for 'fd' [ 463.765660][ T7641] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 465.631065][ T42] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 465.827199][ T42] usb 5-1: Using ep0 maxpacket: 8 [ 465.945680][ T42] usb 5-1: unable to get BOS descriptor or descriptor too short [ 465.977902][ T42] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 465.985968][ T42] usb 5-1: can't read configurations, error -71 [ 467.308208][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 467.316474][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 467.474205][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 467.485480][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 468.050241][ T7692] IPv4: Oversized IP packet from 127.202.26.0 [ 468.468879][ T6706] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.663343][ T6706] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.807952][ T6706] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.887741][ T5857] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 468.939927][ T6706] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.074115][ T5857] usb 7-1: Using ep0 maxpacket: 16 [ 469.118339][ T5857] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 469.131740][ T5857] usb 7-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 469.141290][ T5857] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.290370][ T5857] usb 7-1: config 0 descriptor?? [ 469.347933][ T5857] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input12 [ 469.407875][ T6706] bridge_slave_1: left allmulticast mode [ 469.414018][ T6706] bridge_slave_1: left promiscuous mode [ 469.421350][ T6706] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.492435][ T6706] bridge_slave_0: left allmulticast mode [ 469.498532][ T6706] bridge_slave_0: left promiscuous mode [ 469.505246][ T6706] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.888448][ T5139] bcm5974 7-1:0.0: could not read from device [ 469.941202][ T5139] bcm5974 7-1:0.0: could not read from device [ 470.085310][ T5857] bcm5974 7-1:0.0: could not read from device [ 470.149656][ T5857] input: failed to attach handler mousedev to device input12, error: -5 [ 470.229251][ T5139] bcm5974 7-1:0.0: could not read from device [ 470.258342][ T5139] bcm5974 7-1:0.0: could not read from device [ 470.284883][ T5857] usb 7-1: USB disconnect, device number 2 [ 470.305079][ T6706] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 470.359611][ T6706] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 470.421400][ T6706] bond0 (unregistering): Released all slaves [ 470.936093][ T6706] hsr_slave_0: left promiscuous mode [ 470.982912][ T6706] hsr_slave_1: left promiscuous mode [ 470.996028][ T6706] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 471.005845][ T6706] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 471.041847][ T6706] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 471.050498][ T6706] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 471.119399][ T6706] veth1_macvtap: left promiscuous mode [ 471.125259][ T6706] veth0_macvtap: left promiscuous mode [ 471.134048][ T6706] veth1_vlan: left promiscuous mode [ 471.140001][ T6706] veth0_vlan: left promiscuous mode [ 471.174354][ T7706] input: syz0 as /devices/virtual/input/input13 [ 471.955311][ T6706] team0 (unregistering): Port device team_slave_1 removed [ 472.093725][ T6706] team0 (unregistering): Port device team_slave_0 removed [ 472.330157][ T9] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 472.365077][ T5094] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 472.445567][ T5094] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 472.478430][ T5094] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 472.501603][ T5094] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 472.531552][ T5094] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 472.568326][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 472.581480][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 472.592862][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 472.603323][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 472.612804][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.638753][ T9] usb 5-1: config 0 descriptor?? [ 472.650567][ T9] hub 5-1:0.0: USB hub found [ 472.983686][ T9] hub 5-1:0.0: 1 port detected [ 473.263064][ T9] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 473.270269][ T9] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 473.310613][ T6706] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.350057][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 473.356926][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 473.423368][ T9] usb 5-1: USB disconnect, device number 10 [ 473.470913][ T5808] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 473.532872][ T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 473.563932][ T6706] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.583638][ T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 473.613326][ T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 473.632146][ T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 473.921006][ T6706] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.179535][ T6706] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.346840][ T7726] netlink: 'syz.6.507': attribute type 1 has an invalid length. [ 474.638211][ T50] Bluetooth: hci0: command tx timeout [ 474.780616][ T7730] loop4: detected capacity change from 0 to 128 [ 474.831281][ T7726] bond1 (unregistering): Released all slaves [ 474.870246][ T7730] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 474.894241][ T7730] ext4 filesystem being mounted at /99/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 474.998169][ T7713] chnl_net:caif_netlink_parms(): no params data found [ 475.395808][ T6706] bridge_slave_1: left allmulticast mode [ 475.402890][ T6706] bridge_slave_1: left promiscuous mode [ 475.409882][ T6706] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.424877][ T6706] bridge_slave_0: left allmulticast mode [ 475.439828][ T6706] bridge_slave_0: left promiscuous mode [ 475.446517][ T6706] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.464213][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 475.471324][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 475.559451][ T5802] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 475.849153][ T50] Bluetooth: hci1: command tx timeout [ 476.583594][ T6706] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 476.620489][ T6706] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 476.644556][ T6706] bond0 (unregistering): Released all slaves [ 476.679175][ T6706] bond1 (unregistering): Released all slaves [ 476.718079][ T50] Bluetooth: hci0: command tx timeout [ 477.001158][ T7753] loop4: detected capacity change from 0 to 256 [ 477.178764][ T30] audit: type=1800 audit(1750232433.756:10): pid=7753 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.515" name="file1" dev="loop4" ino=1048633 res=0 errno=0 [ 477.191169][ T7753] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 477.210531][ T7753] FAT-fs (loop4): Filesystem has been set read-only [ 477.218073][ T7753] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 477.228688][ T7753] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 477.239342][ T7753] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 477.434363][ T7720] chnl_net:caif_netlink_parms(): no params data found [ 477.818633][ T6706] hsr_slave_0: left promiscuous mode [ 477.857857][ T6706] hsr_slave_1: left promiscuous mode [ 477.866138][ T6706] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 477.878456][ T6706] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 477.918700][ T50] Bluetooth: hci1: command tx timeout [ 477.921513][ T6706] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 477.932210][ T6706] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 477.997114][ T6706] veth1_macvtap: left promiscuous mode [ 478.004357][ T6706] veth0_macvtap: left promiscuous mode [ 478.010789][ T6706] veth1_vlan: left promiscuous mode [ 478.016441][ T6706] veth0_vlan: left promiscuous mode [ 478.667800][ T7768] loop4: detected capacity change from 0 to 256 [ 478.754008][ T6706] team0 (unregistering): Port device team_slave_1 removed [ 478.784195][ T7768] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 478.785772][ T6706] team0 (unregistering): Port device team_slave_0 removed [ 478.847585][ T50] Bluetooth: hci0: command tx timeout [ 479.008159][ T7768] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 479.023344][ T7768] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 479.033143][ T7768] UDF-fs: Scanning with blocksize 512 failed [ 479.083660][ T7768] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 479.146981][ T7768] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 479.360000][ T30] audit: type=1800 audit(1750232435.926:11): pid=7768 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.520" name="file1" dev="loop4" ino=65 res=0 errno=0 [ 479.670130][ T6706] IPVS: stop unused estimator thread 0... [ 479.998203][ T50] Bluetooth: hci1: command tx timeout [ 480.170307][ T7713] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.178308][ T7713] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.186120][ T7713] bridge_slave_0: entered allmulticast mode [ 480.198884][ T7713] bridge_slave_0: entered promiscuous mode [ 480.275300][ T7713] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.285781][ T7713] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.293889][ T7713] bridge_slave_1: entered allmulticast mode [ 480.303771][ T7713] bridge_slave_1: entered promiscuous mode [ 480.633159][ T7713] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 480.670411][ T7720] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.678233][ T7720] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.686049][ T7720] bridge_slave_0: entered allmulticast mode [ 480.695909][ T7720] bridge_slave_0: entered promiscuous mode [ 480.723483][ T7713] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 480.756119][ T7790] capability: warning: `syz.4.527' uses 32-bit capabilities (legacy support in use) [ 480.896688][ T50] Bluetooth: hci0: command tx timeout [ 480.969035][ T7720] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.976693][ T7720] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.984848][ T7720] bridge_slave_1: entered allmulticast mode [ 480.998095][ T7720] bridge_slave_1: entered promiscuous mode [ 481.042040][ T7713] team0: Port device team_slave_0 added [ 481.080360][ T7713] team0: Port device team_slave_1 added [ 481.326427][ T7798] loop4: detected capacity change from 0 to 512 [ 481.379557][ T7720] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 481.419114][ T7713] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 481.426386][ T7713] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 481.429892][ T7798] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a856c098, mo2=0002] [ 481.452990][ T7713] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 481.476877][ T7798] System zones: 1-12 [ 481.529965][ T7720] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 481.584570][ T7798] EXT4-fs error (device loop4): ext4_iget_extra_inode:5035: inode #15: comm syz.4.530: corrupted in-inode xattr: invalid ea_ino [ 481.637762][ T7798] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.530: couldn't read orphan inode 15 (err -117) [ 481.693356][ T7798] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 481.722817][ T7713] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 481.730245][ T7713] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 481.757951][ T7713] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 481.786244][ T7720] team0: Port device team_slave_0 added [ 481.828018][ T7720] team0: Port device team_slave_1 added [ 482.029068][ T7720] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 482.036524][ T7720] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 482.063251][ T7720] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 482.112386][ T50] Bluetooth: hci1: command tx timeout [ 482.131195][ T5802] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 482.223130][ T7720] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 482.231511][ T7720] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 482.259167][ T7720] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 482.287157][ T7713] hsr_slave_0: entered promiscuous mode [ 482.305372][ T7713] hsr_slave_1: entered promiscuous mode [ 482.315112][ T7713] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 482.323122][ T7713] Cannot create hsr debugfs directory [ 482.438708][ T7807] 9pnet: p9_errstr2errno: server reported unknown error @ [ 482.952147][ T7720] hsr_slave_0: entered promiscuous mode [ 482.962954][ T7720] hsr_slave_1: entered promiscuous mode [ 482.972071][ T7720] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 482.980060][ T7720] Cannot create hsr debugfs directory [ 483.918673][ T7819] 9pnet_fd: Insufficient options for proto=fd [ 484.112910][ T7713] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 484.202029][ T7713] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 484.308805][ T7713] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 484.344686][ T7713] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 484.766792][ T7720] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 484.896505][ T7720] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 484.981026][ T7720] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 485.079786][ T7720] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 485.447483][ T7713] 8021q: adding VLAN 0 to HW filter on device bond0 [ 485.545897][ T7831] netlink: 52 bytes leftover after parsing attributes in process `syz.0.545'. [ 485.611409][ T7831] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.622059][ T7831] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.681540][ T7713] 8021q: adding VLAN 0 to HW filter on device team0 [ 485.734410][ T7832] netlink: 52 bytes leftover after parsing attributes in process `syz.0.545'. [ 485.802308][ T6706] bridge0: port 1(bridge_slave_0) entered blocking state [ 485.810029][ T6706] bridge0: port 1(bridge_slave_0) entered forwarding state [ 485.906173][ T6706] bridge0: port 2(bridge_slave_1) entered blocking state [ 485.913898][ T6706] bridge0: port 2(bridge_slave_1) entered forwarding state [ 486.559274][ T7720] 8021q: adding VLAN 0 to HW filter on device bond0 [ 486.701143][ T7720] 8021q: adding VLAN 0 to HW filter on device team0 [ 486.834450][ T1862] bridge0: port 1(bridge_slave_0) entered blocking state [ 486.842209][ T1862] bridge0: port 1(bridge_slave_0) entered forwarding state [ 486.859132][ T1862] bridge0: port 2(bridge_slave_1) entered blocking state [ 486.866733][ T1862] bridge0: port 2(bridge_slave_1) entered forwarding state [ 486.937811][ T5862] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 487.160088][ T5862] usb 5-1: Using ep0 maxpacket: 8 [ 487.277830][ T5862] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 487.289455][ T5862] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 487.299736][ T5862] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 487.314237][ T5862] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 487.325801][ T5862] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 487.337227][ T5862] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 487.348557][ T5862] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.535277][ T5862] usb 5-1: config 0 descriptor?? [ 487.564684][ T50] Bluetooth: hci5: urb ffff8881310890c0 submission failed (90) [ 487.828518][ T11] usb 5-1: USB disconnect, device number 11 [ 488.510451][ T7713] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 489.059808][ T7720] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 489.419399][ T7862] netlink: 'syz.6.552': attribute type 1 has an invalid length. [ 489.428332][ T7862] netlink: 'syz.6.552': attribute type 4 has an invalid length. [ 489.436250][ T7862] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.552'. [ 489.507096][ T7720] veth0_vlan: entered promiscuous mode [ 489.622660][ T7720] veth1_vlan: entered promiscuous mode [ 489.979398][ T7720] veth0_macvtap: entered promiscuous mode [ 490.064667][ T7720] veth1_macvtap: entered promiscuous mode [ 490.224601][ T7720] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 490.352478][ T7720] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 490.415022][ T7869] loop4: detected capacity change from 0 to 1024 [ 490.465164][ T7720] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.475310][ T7720] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.488929][ T7720] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.499303][ T7720] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.186195][ T7713] veth0_vlan: entered promiscuous mode [ 491.273841][ T7713] veth1_vlan: entered promiscuous mode [ 491.644867][ T7713] veth0_macvtap: entered promiscuous mode [ 491.731982][ T7713] veth1_macvtap: entered promiscuous mode [ 491.922211][ T7883] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 491.977965][ T7713] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 492.052191][ T7713] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 492.169376][ T7713] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.178741][ T7713] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.187981][ T7713] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.197039][ T7713] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.951529][ T5862] IPVS: starting estimator thread 0... [ 493.056039][ T7898] IPVS: using max 192 ests per chain, 9600 per kthread [ 497.601629][ T1862] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 497.610038][ T1862] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 497.791972][ T6719] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 497.800466][ T6719] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 498.497835][ T30] audit: type=1326 audit(1750232455.046:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7960 comm="syz.4.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17cbf8e929 code=0x7ffc0000 [ 498.521032][ T30] audit: type=1326 audit(1750232455.046:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7960 comm="syz.4.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17cbf8e929 code=0x7ffc0000 [ 498.563769][ T1862] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.688567][ T7962] loop4: detected capacity change from 0 to 512 [ 498.707502][ T30] audit: type=1326 audit(1750232455.176:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7960 comm="syz.4.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f17cbf8e929 code=0x7ffc0000 [ 498.731126][ T30] audit: type=1326 audit(1750232455.176:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7960 comm="syz.4.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f17cbf8e963 code=0x7ffc0000 [ 498.753772][ T30] audit: type=1326 audit(1750232455.196:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7960 comm="syz.4.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f17cbf8d3df code=0x7ffc0000 [ 498.779968][ T30] audit: type=1326 audit(1750232455.266:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7960 comm="syz.4.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f17cbf8e9b7 code=0x7ffc0000 [ 498.803605][ T30] audit: type=1326 audit(1750232455.266:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7960 comm="syz.4.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f17cbf8d290 code=0x7ffc0000 [ 498.826473][ T30] audit: type=1326 audit(1750232455.266:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7960 comm="syz.4.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f17cbf8e52b code=0x7ffc0000 [ 498.849075][ T30] audit: type=1326 audit(1750232455.396:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7960 comm="syz.4.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f17cbf8d58a code=0x7ffc0000 [ 498.849143][ T7962] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 498.881178][ T7964] loop6: detected capacity change from 0 to 256 [ 498.884954][ T30] audit: type=1326 audit(1750232455.396:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7960 comm="syz.4.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f17cbf8d58a code=0x7ffc0000 [ 498.940315][ T7964] exfat: Deprecated parameter 'namecase' [ 498.946411][ T7964] exfat: Deprecated parameter 'namecase' [ 499.004151][ T1862] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.028236][ T7962] EXT4-fs (loop4): 1 truncate cleaned up [ 499.036355][ T7962] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 499.144463][ T7964] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 499.310907][ T1862] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.523864][ T1862] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.583912][ T3987] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 499.592183][ T3987] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 499.713401][ T5802] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 499.814259][ T6706] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 499.822660][ T6706] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 499.972368][ T1862] bridge_slave_1: left allmulticast mode [ 499.978674][ T1862] bridge_slave_1: left promiscuous mode [ 499.985321][ T1862] bridge0: port 2(bridge_slave_1) entered disabled state [ 500.013881][ T1862] bridge_slave_0: left allmulticast mode [ 500.020430][ T1862] bridge_slave_0: left promiscuous mode [ 500.027168][ T1862] bridge0: port 1(bridge_slave_0) entered disabled state [ 500.569602][ T1862] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 500.624011][ T1862] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 500.655933][ T1862] bond0 (unregistering): Released all slaves [ 501.115083][ T1862] hsr_slave_0: left promiscuous mode [ 501.135899][ T1862] hsr_slave_1: left promiscuous mode [ 501.144326][ T1862] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 501.152400][ T1862] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 501.190888][ T1862] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 501.199084][ T1862] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 501.244897][ T1862] veth1_macvtap: left promiscuous mode [ 501.251613][ T1862] veth0_macvtap: left promiscuous mode [ 501.257931][ T1862] veth1_vlan: left promiscuous mode [ 501.263552][ T1862] veth0_vlan: left promiscuous mode [ 502.186456][ T1862] team0 (unregistering): Port device team_slave_1 removed [ 502.299189][ T1862] team0 (unregistering): Port device team_slave_0 removed [ 502.340282][ T7975] Bluetooth: MGMT ver 1.23 [ 503.247503][ T5094] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 503.260612][ T5094] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 503.271186][ T5094] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 503.296364][ T5094] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 503.322285][ T5094] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 503.401729][ T5094] Bluetooth: hci2: unexpected event for opcode 0x080b [ 504.780802][ T7999] loop4: detected capacity change from 0 to 32768 [ 504.953856][ T7999] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 504.954022][ T7999] allowing incompatible features above 0.0: (unknown version) [ 504.954119][ T7999] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 505.015311][ T7999] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0 [ 505.027412][ T7999] bcachefs (loop4): initializing new filesystem [ 505.044981][ T7999] bcachefs (loop4): going read-write [ 505.230125][ T7999] bcachefs (loop4): marking superblocks [ 505.285213][ T7999] bcachefs (loop4): initializing freespace [ 505.294587][ T7985] chnl_net:caif_netlink_parms(): no params data found [ 505.314665][ T7999] bcachefs (loop4): done initializing freespace [ 505.340908][ T7999] bcachefs (loop4): reading snapshots table [ 505.347472][ T7999] bcachefs (loop4): reading snapshots done [ 505.438207][ T5094] Bluetooth: hci1: command tx timeout [ 505.491143][ T7999] bcachefs (loop4): done starting filesystem [ 505.706795][ T5802] bcachefs (loop4): shutting down [ 505.712358][ T5802] bcachefs (loop4): going read-only [ 505.719413][ T5802] bcachefs (loop4): finished waiting for writes to stop [ 505.748114][ T5802] bcachefs (loop4): flushing journal and stopping allocators, journal seq 2 [ 505.998946][ T5802] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 3 [ 506.014960][ T8022] loop7: detected capacity change from 0 to 1024 [ 506.038050][ T5802] bcachefs (loop4): clean shutdown complete, journal seq 4 [ 506.088251][ T5802] bcachefs (loop4): marking filesystem clean [ 506.268479][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 506.268561][ T30] audit: type=1800 audit(1750232462.846:32): pid=8022 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.593" name="bus" dev="loop7" ino=25 res=0 errno=0 [ 506.286014][ T5802] bcachefs (loop4): shutdown complete [ 506.350208][ T8022] loop7: detected capacity change from 1024 to 0 [ 506.608192][ T7713] syz-executor: attempt to access beyond end of device [ 506.608192][ T7713] loop7: rw=0, sector=4, nr_sectors = 2 limit=0 [ 506.622010][ T7713] Buffer I/O error on dev loop7, logical block 2, async page read [ 506.630399][ T7713] hfsplus: unable to mark blocks free: error -5 [ 506.636882][ T7713] hfsplus: can't free extent [ 506.750595][ T7713] syz-executor: attempt to access beyond end of device [ 506.750595][ T7713] loop7: rw=0, sector=4, nr_sectors = 2 limit=0 [ 506.768120][ T7713] Buffer I/O error on dev loop7, logical block 2, async page read [ 506.776238][ T7713] hfsplus: unable to mark blocks free: error -5 [ 506.783984][ T7713] hfsplus: can't free extent [ 506.820218][ T7985] bridge0: port 1(bridge_slave_0) entered blocking state [ 506.830616][ T7985] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.838821][ T7985] bridge_slave_0: entered allmulticast mode [ 506.848112][ T9] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 506.848633][ T7985] bridge_slave_0: entered promiscuous mode [ 506.876581][ T7985] bridge0: port 2(bridge_slave_1) entered blocking state [ 506.884463][ T7985] bridge0: port 2(bridge_slave_1) entered disabled state [ 506.892347][ T7985] bridge_slave_1: entered allmulticast mode [ 506.899450][ T7713] syz-executor: attempt to access beyond end of device [ 506.899450][ T7713] loop7: rw=0, sector=78, nr_sectors = 2 limit=0 [ 506.903486][ T7985] bridge_slave_1: entered promiscuous mode [ 506.913015][ T7713] Buffer I/O error on dev loop7, logical block 39, async page read [ 506.927771][ T7713] syz-executor: attempt to access beyond end of device [ 506.927771][ T7713] loop7: rw=0, sector=80, nr_sectors = 2 limit=0 [ 506.941888][ T7713] Buffer I/O error on dev loop7, logical block 40, async page read [ 506.950684][ T7713] syz-executor: attempt to access beyond end of device [ 506.950684][ T7713] loop7: rw=0, sector=82, nr_sectors = 2 limit=0 [ 506.964203][ T7713] Buffer I/O error on dev loop7, logical block 41, async page read [ 506.976646][ T7713] syz-executor: attempt to access beyond end of device [ 506.976646][ T7713] loop7: rw=0, sector=84, nr_sectors = 2 limit=0 [ 506.991322][ T7713] Buffer I/O error on dev loop7, logical block 42, async page read [ 506.999937][ T7713] syz-executor: attempt to access beyond end of device [ 506.999937][ T7713] loop7: rw=0, sector=4, nr_sectors = 2 limit=0 [ 507.013414][ T7713] Buffer I/O error on dev loop7, logical block 2, async page read [ 507.021691][ T7713] hfsplus: unable to mark blocks free: error -5 [ 507.028549][ T7713] hfsplus: can't free extent [ 507.081735][ T7713] ===================================================== [ 507.089507][ T7713] BUG: KMSAN: uninit-value in hfsplus_lookup+0x674/0xf70 [ 507.096806][ T7713] hfsplus_lookup+0x674/0xf70 [ 507.101983][ T7713] __lookup_slow+0x563/0x760 [ 507.106819][ T7713] lookup_slow+0x6a/0xd0 [ 507.111535][ T7713] walk_component+0x444/0x650 [ 507.116460][ T7713] path_lookupat+0x251/0x6b0 [ 507.121693][ T7713] filename_lookup+0x2bd/0x800 [ 507.126701][ T7713] user_path_at+0x91/0x3d0 [ 507.131566][ T7713] __x64_sys_umount+0x143/0x250 [ 507.136681][ T7713] x64_sys_call+0x320b/0x3db0 [ 507.141951][ T7713] do_syscall_64+0xd9/0x210 [ 507.146666][ T7713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.153061][ T7713] [ 507.155521][ T7713] Uninit was created at: [ 507.160258][ T7713] __alloc_frozen_pages_noprof+0x689/0xf00 [ 507.166340][ T7713] alloc_pages_mpol+0x328/0x860 [ 507.171667][ T7713] alloc_frozen_pages_noprof+0xf7/0x200 [ 507.182330][ T7713] allocate_slab+0x24d/0x1220 [ 507.187448][ T7713] ___slab_alloc+0xfec/0x3480 [ 507.192547][ T7713] kmem_cache_alloc_lru_noprof+0x922/0xed0 [ 507.198764][ T7713] hfsplus_alloc_inode+0x5a/0xd0 [ 507.203916][ T7713] alloc_inode+0x8a/0x4a0 [ 507.208767][ T7713] iget_locked+0x239/0x12d0 [ 507.213503][ T7713] hfsplus_iget+0x5c/0xb80 [ 507.218416][ T7713] hfsplus_fill_super+0x1e30/0x2740 [ 507.223825][ T7713] get_tree_bdev_flags+0x6e3/0x920 [ 507.229397][ T7713] get_tree_bdev+0x38/0x50 [ 507.234063][ T7713] hfsplus_get_tree+0x35/0x40 [ 507.239140][ T7713] vfs_get_tree+0xb0/0x5c0 [ 507.243833][ T7713] do_new_mount+0x738/0x1610 [ 507.248894][ T7713] path_mount+0x6db/0x1e90 [ 507.253567][ T7713] __se_sys_mount+0x6eb/0x7d0 [ 507.258725][ T7713] __x64_sys_mount+0xe4/0x150 [ 507.263678][ T7713] x64_sys_call+0xfa7/0x3db0 [ 507.269075][ T7713] do_syscall_64+0xd9/0x210 [ 507.273806][ T7713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.283637][ T7713] [ 507.286114][ T7713] CPU: 0 UID: 0 PID: 7713 Comm: syz-executor Not tainted 6.16.0-rc2-syzkaller-00047-g52da431bf03b #0 PREEMPT(undef) [ 507.299814][ T7713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 507.310243][ T7713] ===================================================== [ 507.317501][ T7713] Disabling lock debugging due to kernel taint [ 507.323809][ T7713] Kernel panic - not syncing: kmsan.panic set ... [ 507.330416][ T7713] CPU: 0 UID: 0 PID: 7713 Comm: syz-executor Tainted: G B 6.16.0-rc2-syzkaller-00047-g52da431bf03b #0 PREEMPT(undef) [ 507.344514][ T7713] Tainted: [B]=BAD_PAGE [ 507.348821][ T7713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 507.359069][ T7713] Call Trace: [ 507.362493][ T7713] [ 507.365574][ T7713] __dump_stack+0x26/0x30 [ 507.370159][ T7713] dump_stack_lvl+0x53/0x270 [ 507.375034][ T7713] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 507.381148][ T7713] dump_stack+0x1e/0x25 [ 507.385558][ T7713] panic+0x4bd/0xd50 [ 507.389771][ T7713] kmsan_report+0x31c/0x320 [ 507.394548][ T7713] ? __msan_warning+0x1b/0x30 [ 507.399477][ T7713] ? hfsplus_lookup+0x674/0xf70 [ 507.404574][ T7713] ? __lookup_slow+0x563/0x760 [ 507.409580][ T7713] ? lookup_slow+0x6a/0xd0 [ 507.414237][ T7713] ? walk_component+0x444/0x650 [ 507.419339][ T7713] ? path_lookupat+0x251/0x6b0 [ 507.424337][ T7713] ? filename_lookup+0x2bd/0x800 [ 507.429512][ T7713] ? user_path_at+0x91/0x3d0 [ 507.434360][ T7713] ? __x64_sys_umount+0x143/0x250 [ 507.439654][ T7713] ? x64_sys_call+0x320b/0x3db0 [ 507.444864][ T7713] ? do_syscall_64+0xd9/0x210 [ 507.449778][ T7713] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.456093][ T7713] ? __hfsplus_brec_find+0x6d3/0x840 [ 507.461688][ T7713] ? kmsan_get_metadata+0xfb/0x160 [ 507.467077][ T7713] ? kmsan_internal_memmove_metadata+0x91/0x230 [ 507.473616][ T7713] ? __msan_memcpy+0x108/0x1c0 [ 507.478645][ T7713] ? hfsplus_bnode_read+0x34b/0x3a0 [ 507.484158][ T7713] ? kmsan_get_metadata+0xfb/0x160 [ 507.489570][ T7713] __msan_warning+0x1b/0x30 [ 507.494339][ T7713] hfsplus_lookup+0x674/0xf70 [ 507.499340][ T7713] ? kmsan_get_metadata+0xfb/0x160 [ 507.504779][ T7713] ? filter_irq_stacks+0x49/0x190 [ 507.510055][ T7713] ? kmsan_get_metadata+0xfb/0x160 [ 507.515432][ T7713] ? __pfx_hfsplus_lookup+0x10/0x10 [ 507.520895][ T7713] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 507.527010][ T7713] ? __pfx_hfsplus_lookup+0x10/0x10 [ 507.532475][ T7713] __lookup_slow+0x563/0x760 [ 507.537435][ T7713] lookup_slow+0x6a/0xd0 [ 507.541931][ T7713] walk_component+0x444/0x650 [ 507.546840][ T7713] ? kmsan_get_metadata+0xfb/0x160 [ 507.552270][ T7713] path_lookupat+0x251/0x6b0 [ 507.557104][ T7713] filename_lookup+0x2bd/0x800 [ 507.562127][ T7713] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 507.568246][ T7713] ? strncpy_from_user+0x255/0x470 [ 507.573591][ T7713] ? kmsan_get_metadata+0xfb/0x160 [ 507.578984][ T7713] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 507.585080][ T7713] user_path_at+0x91/0x3d0 [ 507.589740][ T7713] __x64_sys_umount+0x143/0x250 [ 507.594815][ T7713] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 507.601397][ T7713] x64_sys_call+0x320b/0x3db0 [ 507.606320][ T7713] do_syscall_64+0xd9/0x210 [ 507.611026][ T7713] ? irqentry_exit+0x16/0x60 [ 507.615807][ T7713] ? clear_bhb_loop+0x40/0x90 [ 507.620696][ T7713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.626811][ T7713] RIP: 0033:0x7fa57838fc57 [ 507.631395][ T7713] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 507.651234][ T7713] RSP: 002b:00007ffefa7575e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 507.659864][ T7713] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa57838fc57 [ 507.668015][ T7713] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffefa7576a0 [ 507.676153][ T7713] RBP: 00007ffefa7576a0 R08: 0000000000000000 R09: 0000000000000000 [ 507.684307][ T7713] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffefa758790 [ 507.692474][ T7713] R13: 00007fa578410925 R14: 000000000007ba03 R15: 00007ffefa759860 [ 507.700659][ T7713] [ 507.704191][ T7713] Kernel Offset: disabled [ 507.708622][ T7713] Rebooting in 86400 seconds..